last executing test programs:

5m16.245340333s ago: executing program 2 (id=2520):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

5m16.220870603s ago: executing program 2 (id=2521):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x1c, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x603, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x30}}, 0x10)
mremap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005f3000/0x2000)=nil)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xade, <r8=>r0, 'id1\x00'})
ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, &(0x7f0000000740)={0x9dbf, "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"})
shutdown(r7, 0x1)
setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000005c0)=0x7ff, 0x4)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100, 0xfffffffffffffff9})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d01020301090217000100000000090401", @ANYRESHEX=0x0, @ANYRESDEC=r10, @ANYRES8=r10, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=r5, @ANYRES16=r3], 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x4, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
ioctl$KVM_SMI(r9, 0xaeb7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

5m15.455395929s ago: executing program 2 (id=2546):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
syz_io_uring_setup(0x6312, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x400}], 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m15.387518171s ago: executing program 2 (id=2548):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000080))
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840009000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0416466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c17399270714c778cfb11e9e0b390", 0x90, 0x20000040, 0x0, 0x0)
pidfd_getfd(r1, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101095, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
umount2(&(0x7f0000000040)='.\x00', 0x2)

5m15.317511052s ago: executing program 2 (id=2551):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]})

5m15.305949142s ago: executing program 2 (id=2552):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x300014, &(0x7f0000000180)='--.#\'![+,^#*\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0})

5m15.239747994s ago: executing program 32 (id=2552):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x300014, &(0x7f0000000180)='--.#\'![+,^#*\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0})

2m17.335898986s ago: executing program 4 (id=5404):
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0)
open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x40081271, 0x3)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6)
read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020)
fcntl$setpipe(r4, 0x407, 0x7000000) (async)
fcntl$setpipe(r4, 0x407, 0x7000000)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000002340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) (async)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000002340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1000}}]}})
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)

2m17.257588028s ago: executing program 4 (id=5407):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010d21f076000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000013c0)=0x7f)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x2000009, 0x255, 0x1000009, 0xfffffffb, 0xa, "972d595029c59b1506000000000000004c8672"})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000640)={0x0, 0x7, 0x6d, {0x6d, 0x6, "10286a69acbb468ac8224fc903c153dd122a82bdf8657aa34498395e96cc2b75744f3b7993376b21a7e8cc77319648cfa840fb0a492daa63cd4c772a7ee30b883bf376c1930a33fb7f925fcdd7acbf14b997e8c9883cb1a3982d4cb9e7f712f542714d6ec772892cd7dc5c"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f00000006c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xb, "b1b0f029"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6e, 0x1, {0x22, 0x72c}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x0, 0x12, 0x2a, "274114ca0ccedbafef5832abc5b0172b663dda09a4102fe792979fb9a4f99034104c661c753d9184dda2"}, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r2, 0xa03c0000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

2m15.68951722s ago: executing program 4 (id=5420):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000175000/0x2000)=nil, 0x2000}, 0x4, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1f6be946785c631f, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000000000)) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004040}}], 0x1, 0x40) (rerun: 64)
socket(0x1a, 0xa, 0x40)

2m15.66875065s ago: executing program 4 (id=5421):
r0 = inotify_init1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r1, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff004)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/101)

2m13.998400985s ago: executing program 4 (id=5438):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x21}}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

2m13.962083366s ago: executing program 4 (id=5439):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r2, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00')
preadv(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8)
umount2(&(0x7f0000000040)='.\x00', 0x2)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

1m58.778834541s ago: executing program 33 (id=5439):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r2, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00')
preadv(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8)
umount2(&(0x7f0000000040)='.\x00', 0x2)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

3.728112728s ago: executing program 1 (id=7463):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"})

3.685804439s ago: executing program 1 (id=7464):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89a3, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="60100400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="60100400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
lseek(r5, 0x2000, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x200, &(0x7f0000000080)=0xd1}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x200, &(0x7f0000000080)=0xd1})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.535494992s ago: executing program 1 (id=7465):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xf0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1, 0x7f, 0x1, {0x22, 0xecc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x94, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x39f, 0x9, 0x1, 0x1}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x5d, 0x1, 0xff, 0x1}, 0x61, &(0x7f0000000080)={0x5, 0xf, 0x61, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xff, 0x8, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x8}, @generic={0x3e, 0x10, 0x2, "399ecb762f3c4ae73b99f3a3990a14e979360a3c2bf89f9eee9dc31df30d6432ef00bbf3a66584a692a0ecd4590ca5cb0a81938be498d5256d6eea"}]}, 0x1, [{0xb1, &(0x7f0000000100)=@string={0xb1, 0x3, "5f927d8cbc499ea00bcee170138f62ec87c94ff69ceccc1bfb232fa359e5c3ceb70778c1d4f2afefb672899a7ef306ad7a822831119c7cb20449e15826f5519c67554cfdf91856e751d3c81477ab89529bb9551a53728d420e424aab8bb41de5cb3eba7e155d4ecb7ce30001eac2bdf7c38292862b9aa7cac1a175b9a696d2b9b20f1ed3c7402c396bee15db0f61fcc1fea93e29fa09b8c32f0fdc70d2f775e5330798c48e496395062a55c5069ac3"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000200)={0x40, 0x22, 0xbb, {0xbb, 0xf, "5058272c59a6eedeb448953394b85ee46ffa199e841417ec10e75239de9ee1b27a0e037623daba381011c0cc9ab6a573d8a8e3abff08eca5db2b9349582a9277ff54f2e8ce554d67de1170f1097382307a4f7befe3a94dfff9c459210c23fe625a1b0008a9640cd34cd50e8edd8d3922cb34451cdf0e557a4ac6f22622f1107d5e179417e78d9e35aa92843632c072ac7a1d4c116ddf14144d3e33c286895321c0975f451e032275416996372aecfc978290c56afa170f68a3"}}, &(0x7f0000000300)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "dc3fc6afc09ddffb44bb0f93fc7bd5f84f28a5ac3dade449be38975f04f93cbfe85ac2f36c27247ae9dc4eebb5c5d398ff008365ce0bc9e2a3ad912517ec1b2c43a33e33be09661ef572a783ad4d3898c68b1162e689222ca226b2"}}, &(0x7f0000000380)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x9, "12c555d6"}, @main=@item_012={0x2, 0x0, 0xb, "4580"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x7b}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x40, 0x8, 0x34, "caa0aca4aa7c5754385b889c24b5c5ac21fbf07eb83acbe5e7f39d5e6435f59d356d9746f9a74753aa966ac81bf3107d3adebfdb"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xf7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x1, 0x4b, "fc2cec0cfa0d20131ab60d0920042a07da96b00debe2f5bd52c22473111c71b6334b1139fe45a4e4c27bfaf8a403104365b81ae9ce82f13d1454c0cfac5e68f8c05d1a92008d9d68b9f1cc"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}})
r1 = syz_usb_connect$cdc_ecm(0x6, 0x9f, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0x9, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "f565b3abd3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0xffff, 0x5, 0x3}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0x68eb, [0x4]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x40, 0xf6, 0x6, 0x4, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x33, 0xc, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x3, [0x7]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x427, 0x81, 0x1, 0x3, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xd97, 0xc7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfb, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x7, 0x3}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0xfe, 0x2, 0x9, 0x40, 0xfb}, 0x19, &(0x7f0000000700)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "2a2fe7dd9dabe45e4a04b90d4951e45b"}]}, 0x7, [{0x89, &(0x7f0000000740)=@string={0x89, 0x3, "5249d7883cb8f6517476ca83bf0950fa2af391e728330a6486c53d4fda590fa1c82328f2f6d63b41b1c598b65dc34e291c88afda8c45345628e06de44245a2d72bc4511904008e82b2352806a88aae4f21d673cf60bbb5bbe9d5b0358bd25e318825e5008206b31554845842037e6b662403c8a2b5e3ce66b0866df92f130101ca6665cb3668e4"}}, {0x8d, &(0x7f0000000800)=@string={0x8d, 0x3, "5ef47229fcb4e5c6e8bd3ad7acf6d24349e29c58642120fbd7a622f692d04af221d16c5b339ee01c80af58392a9afbe261293338865f11ecef3f31630d01b7e4bbae36547cd154828958e4d5a8729c159193283d97db0b0595dac7f009f92c9f75f2cbb3ab434ac8d83cc8d35360fca80b2caa133732096b0ddd1493b75c41aa91f13c31080832e0bee865"}}, {0x11, &(0x7f00000008c0)=@string={0x11, 0x3, "4c7468e9300656c284ce74564520cf"}}, {0xf5, &(0x7f0000000900)=@string={0xf5, 0x3, "92a0c176bd88db9ecad6a791588fb288318d8edad46752faba69d50d158a8732b379f73c0d7d5cc21ddc3ec123924ccd8088ffba56e0f4c11cec92cf93f1cb4a1ad52c83401bb4455943b62cfd9c9cb311e93fc9a46783f9ec46a0ff33db50bb9aedb58ff6e286c69ee00d8d8b3e4963c63cab3629bde579c35d003b2f6d98efd95a98622e06a3268681ddb5a6b62b9491490b51ab2b373323f9425eb66b1ab78a78fff5c32934d4a368a9de4fc15bb8bede3f3699ffa3abf7d188e79177d853473b72b0bcf4d5c9482429e0a947d884142f95821f155e966d6a2a32b1e2768c981f57a1300b891c2b479e3daff72088547b86"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}]})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000c00)={0x14, &(0x7f0000000b40)={0x0, 0xe, 0x46, {0x46, 0x3, "2801d9450e716f12e282be9a66cf3873391f6c0c0704bbb9694167608a8acc411395b914b86f50b48ba652561e7bb3f24c3e0827cb8073580ce3cb2559bb9e4fac33118a"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x1c, &(0x7f0000000c40)={0x20, 0x12, 0x22, "f3c82e426e806d181e955d72197ae10fe78755219243b691e6d411155e81a9f91ea0"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x9}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x4000, &(0x7f0000000dc0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}], [{@smackfsroot={'smackfsroot', 0x3d, '\\\\'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@fsmagic={'fsmagic', 0x3d, 0x101}}, {@seclabel}]}})
syz_usb_connect$cdc_ecm(0x4, 0x59, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0xcd, 0x3, 0x2, 0x6, 0x0, 0x1c, {{0xa, 0x24, 0x6, 0x0, 0x0, "92d3ac7f81"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x40, 0x2, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x6, 0x10, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x1, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf, 0x9}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x201, 0x1, 0x80, 0x0, 0x10, 0x3}, 0x8, &(0x7f0000000f40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x403}}, {0x7c, &(0x7f0000000fc0)=@string={0x7c, 0x3, "407a8e23d8fb74e2ed91c7d3fea99ccc923fc113769d47cd61a189dda41d6b341b6d1b3948e155ff7dc560192a8c117c0a8cf1bce2e1fb803b83def7c8c3ca32cf440e8a994fba217a9d909b2afe5faa8eeb9979a2d6d3e7af11f6bb912fc99623c4134292c2f3ed242a1797187e2364361b07e7da242972c000"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x300a}}, {0x14, &(0x7f0000001080)=@string={0x14, 0x3, "6128e5648c9690f6d7c243d2c18397ab0c43"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x419}}, {0x44, &(0x7f0000001100)=@string={0x44, 0x3, "686228c83efc10f38482871f189187212d744284485512c0d05c0934279ebe66ed2aaf20850be63b8c2b16ce26785a5db1cddf4dd13a0ed0ca11a1fb25034ff99dd7"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1409}}, {0x57, &(0x7f00000011c0)=@string={0x57, 0x3, "96c2bcb0518a75b4486e5c29587de310041df46ac586bb00195abd92dc09cfdec93a56ea86f67de20e8c86f90a9e08980839936a667610d022f6f5c2b2c9a635e7fc483068aa20100916aa10602292690e9ab60182"}}]})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0)
pipe2$9p(&(0x7f0000001300), 0x4080)
statfs(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=""/250)
read$FUSE(r3, &(0x7f0000001480)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000034c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x800000, 0x1, 0x0, 0x6, 0xa4, 0x0, 0x0, 0x8, 0xffff}}, 0x50)
lsetxattr$security_capability(&(0x7f0000003540)='./file0\x00', &(0x7f0000003580), &(0x7f00000035c0)=@v1={0x1000000, [{0x2}]}, 0xc, 0x1)
r5 = timerfd_create(0x3, 0x80000)
timerfd_settime(r5, 0x1, &(0x7f0000003600)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000003640))
r6 = accept(r2, &(0x7f0000003680)=@ethernet={0x0, @random}, &(0x7f0000003700)=0x80)
sendmmsg$unix(r6, &(0x7f0000003740), 0x0, 0x4000000)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003780), 0x4040, 0x0)
ppoll(&(0x7f00000037c0)=[{r7, 0x8030}], 0x1, &(0x7f0000003800)={0x77359400}, &(0x7f0000003840)={[0x1]}, 0x8)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000003880)={0x8, 0x1ff, 0x3, 0x9, 0x3})
listxattr(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)=""/128, 0x80)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x200000, 0x2, 0x28}, 0x18)
mknodat$null(r8, &(0x7f0000003a00)='./file0\x00', 0x4, 0x103)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003ac0)={'ip6gre0\x00', &(0x7f0000003a40)={'ip6_vti0\x00', <r9=>0x0, 0x29, 0x55, 0x5, 0x401, 0x8, @mcast1, @remote, 0x7800, 0x7, 0xf, 0x800}})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000003b00)={@dev={0xfe, 0x80, '\x00', 0x14}, @loopback, @loopback, 0x9, 0x3, 0xe, 0x400, 0x73, 0x200, r9})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x1c, 0x0, 0x201, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48001)
setxattr$security_capability(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0), &(0x7f0000003d00)=@v2={0x2000000, [{0x2, 0xedf7}, {0x8, 0x21ba}]}, 0x14, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg(r10, &(0x7f0000003e40)={&(0x7f0000003d40)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @remote}, 0x0, 0x1, 0x2, 0x2}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003dc0)="5ecfb5da", 0x4}], 0x1}, 0x40000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000003ec0)="a2b1f44fffc279c5db6cd555c05d09b67303d9841015b45b4f80c904ad41de12e4ad60767b651da93fe6bbdfb8e44010ed00611c9c9f3ea665965d9a8f5778c6daf7b0fe90da7ad1de1089accf52059f3842e4cb6467c565b945c740362f62de48237d770b1ae36cc316ea066b0ba2d90b9a108a3fb7d4b40afd4da64d28d22fb60c8844d1c53e8d5594da03b9a60e31d9c9d5b5eaf9a2f9fb3d77951139f7c244aea8dee22d773406851adac4f03850d23e6620dda503d8aa67ba96abc7942e5aaa7a069e1ed385762c45d49821503b5efb81dd0a0e024fff0595eb2977557252", 0xe1, 0x20004001, &(0x7f0000003fc0)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x64}, 0x1c)

1.01345684s ago: executing program 3 (id=7521):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014000c0003007a302564aa58b9a64411f6bbf44dc48f575ad1", 0x3b}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'})
add_key$fscrypt_provisioning(&(0x7f0000001340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000001"], 0x18, 0xfffffffffffffffe)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000000)={'dummy0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x40000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

935.185792ms ago: executing program 3 (id=7524):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x5) (async)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
fcntl$setpipe(r0, 0x407, 0x2)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)

934.996172ms ago: executing program 3 (id=7525):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r0, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x10, r0, 0x8000000)
sendfile(r0, r0, 0x0, 0x7e78a6f1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
fcntl$addseals(r0, 0x409, 0xc)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async)
ftruncate(r0, 0x80079a0) (async)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x10, r0, 0x8000000) (async)
sendfile(r0, r0, 0x0, 0x7e78a6f1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
fcntl$addseals(r0, 0x409, 0xc) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async)

775.190395ms ago: executing program 3 (id=7529):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x800)
clock_gettime(0x0, &(0x7f0000002e40)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)=@vsock, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/237, 0xed}], 0x4, &(0x7f0000000480)=""/197, 0xc5}}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f0000000740)=""/39, 0x27}, 0x8}, {{&(0x7f0000000780)=@rc={0x1f, @none}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f00000008c0)=""/164, 0xa4}, {&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/38, 0x26}], 0x7}, 0x9}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001bc0)=""/141, 0x8d}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/75, 0x4b}], 0x3}, 0x7}], 0x4, 0x22, &(0x7f0000002e80)={r1, r2+10000000})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002f40)={'syztnl1\x00', &(0x7f0000002ec0)={'syztnl1\x00', <r3=>0x0, 0x8, 0x7, 0x2, 0x3, {{0x12, 0x4, 0x3, 0x8, 0x48, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x2}, {0x7, 0xc, "d5da3ec7606248c05165"}, {0x6, 0xc, "5e05920440bcbce30674"}, {0x7, 0xf, "5cb37758df55e00f00feb32640"}, {0x2, 0x3, "0f"}, {0x0, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003080)={'sit0\x00', &(0x7f0000002f80)={'ip_vti0\x00', r3, 0x700, 0x7, 0x2, 0x7, {{0x38, 0x4, 0x1, 0x8, 0xe0, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x4c, 0x59, 0x3, 0x3, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}, {@rand_addr=0x64010102, 0x81}, {@private=0xa010101, 0x790}, {@private=0xa010100, 0x9}, {@private=0xa010101, 0x200}, {@local, 0x1}, {@multicast2, 0x80}, {@loopback, 0x6}]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x6, [{@local, 0x9}, {@loopback, 0x10001}, {@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xa20}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x80}, {@remote, 0x100}]}, @timestamp_prespec={0x44, 0x4c, 0x96, 0x3, 0x2, [{@broadcast, 0xffff}, {@empty}, {@local, 0x1}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@remote}, {@local, 0x1}]}]}}}}})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000003300)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)=@polexpire={0x190, 0x1b, 0x100, 0x70bd25, 0x25dfdbfe, {{{@in6=@mcast1, @in=@local, 0x4e20, 0x4, 0x4e22, 0x2, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xee01}, {0x4e1, 0x98, 0x0, 0x7, 0x8, 0x4, 0xd1, 0xc15b}, {0xd, 0x5, 0xffff, 0x4}, 0x3, 0x6e6bb6, 0x0, 0x1, 0x0, 0x1}, 0x6}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @algo_aead={0xc5, 0x12, {{'gcm(aes)\x00'}, 0x3c8, 0x40, "377a8cd0770dc652ce4e7dec6428ceef6db5e7d9b97d1e8cab00dae52d0294d058605a74feca99ab7a39135051abb1c13484ac6e36c4c4b22a6fefc1c8ac47f2149218aae25b545151133105c43fcac7a44cc180ae1268b6b0a6a9909a4967864e044ca939b5b52ed3fd4dfe2a828288bed4ea4bcacf7e36f5"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x400c4)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003340), 0x2, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000003380)=0xd, 0x4)
setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00000033c0)=0xf, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003400)=@ccm_128={{0x303}, "137588d7b38fd342", "005e7a7d602a0ee2f5c828f34ce5a9bb", "8235dcb1", "7dc117f81b0a8418"}, 0x28)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000003540)={&(0x7f0000003440), 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfffff103, 0x6, 0xffff, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48050}, 0x90)
ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000003580)={'nicvf0\x00'})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000035c0)=0x8)
recvfrom$inet6(r5, &(0x7f0000003600)=""/174, 0xae, 0x10001, &(0x7f00000036c0)={0xa, 0x4e21, 0x4, @empty, 0x7}, 0x1c)
fchdir(r5)
poll(&(0x7f0000003700)=[{r5, 0x500}], 0x1, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000003740), &(0x7f0000003780)=0x30)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f00000037c0)={@loopback, @private=0xa010102, 0xffffffffffffffff, "1eb352b2f7b7dc71938d21d8603539d99ae976fcad8334742b695d7b93c506fb", 0xd, 0xfa1, 0x87, 0xd0}, 0x3c)
r8 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000003800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r8, &(0x7f0000003980)={0x14, &(0x7f0000003840)={0x40, 0x3, 0xcd, {0xcd, 0x1, "d4a177021b9410aeea4bb60b411d83a15c043d550a4f8647a13542ea86fce17210a495a4cb17c030ca0f2f285a495b72c0f582c360bb38b11c82c00ea39dc9cf765ffdfef5f9dc8c157b56aa5e17f7b39ad3e327fbc04fe8a3bf5fdb80bc05e82369786500bf13cdd6aa99174878962c6c1fba094282001835bcee6db5d1e99f6b6191ce951c9d856d6338d6cb82a9758acf5fcfd44ae71631461a236c9bbcfeb0570401151a33d3286398f23fea18b80c90637a5a9b10220b0c27bb3c9f7839f3065a5fdaa90bde7a36ae"}}, &(0x7f0000003940)={0x0, 0x3, 0xe, @string={0xe, 0x3, "aad172a8a5aa708c38a45dae"}}}, &(0x7f0000003b80)={0x2c, &(0x7f00000039c0)={0x0, 0xa, 0xb3, "f94a47e73f4829e23de38089e6a80f3fbb40d625eb70c0516bda3e60cdade6252d3d47586a6539897403cab5c4b9fd53908d7c1b2d87d40bed3d7845a03e7a981aa97c4805fe67fd327a02aec53a3542315fcf13602569a4e446c74d0ba717acd43605f35c47fb56b7b2e5c7b1cf952b76da18d9af22e8bfe919f3e37abd37690d9848543d1c03d4389a47beab3b1eb055ca2dbd8c658e613154f3c06be0aeeff895bcb74e523551100fd2b1568c72c61aecd3"}, &(0x7f0000003a80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003b00)={0xc0, 0x5, 0x2, 'GC'}, &(0x7f0000003b40)={0x40, 0x5, 0x5, "4584e6ad6c"}})
socket$packet(0x11, 0x2, 0x300)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003c00), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x34, r9, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d40), r5)
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000003e80)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x58, r10, 0x330, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x6777bf8dbad276fc}, 0x800)

525.19073ms ago: executing program 1 (id=7545):
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x7}, {0x8100, 0x4, 0x0, 0x2}}, {@canfd={0xd, {{0x4}, 0x32, 0x1, 0x0, 0x0, "3804f32457f2630dc07ee0613796a5ad6a7f3726cf6e783b4048415c308aadc65fd6ffdf83be15db7412ec0f726868a2f4b6f2cc5bfdf79665cbd5ca54aff3ed"}}}}}, 0x62)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)

517.32061ms ago: executing program 1 (id=7547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x94822, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39]}}]})
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000001, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x2, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0xffffffd3, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x1, 0x0, 0x20000003, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x6, 0x8, 0x9, 0x7, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x9, 0x2, 0x3, 0x9, 0xfffffeff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x1, 0x1, 0x9, 0x3e7, 0x9, 0x6, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa5, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x2, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x6, 0x80ce7, 0x1fe, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc9, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007c, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000280))
syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010100000009044000000e0100000a2406"], 0x0)
truncate(0x0, 0x6)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

485.70693ms ago: executing program 5 (id=7549):
r0 = getpgid(0x0)
ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004)
ptrace$getregs(0xc, r0, 0x8, &(0x7f0000000040)=""/236)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
fstat(r1, &(0x7f0000000140))
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
sched_setparam(r3, &(0x7f0000002200)=0xcb5)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
write$FUSE_INIT(r4, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x2b, 0x34, 0x2010000, 0x3f, 0xe, 0xfffff3e5, 0x2, 0x0, 0x0, 0x4, 0x7f}}, 0x50)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x6, 0x5004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)
r7 = getpgid(r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x50, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x70}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800)
tgkill(r0, r7, 0x36)
read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f0000004500)={0x10, 0x0, r9}, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x20, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4040080)
pipe(&(0x7f0000004640)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r11, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000091)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000004780), 0x4003)
sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x100}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x7}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r10, 0x8008330e, &(0x7f00000048c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000004900), 0xc0000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000004940), 0x400, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000004a40)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004a00)={&(0x7f00000049c0)={0x1c, 0x1e, 0x300, 0x70bd28, 0x25dfdbfc, {0x1a}, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
openat$cgroup_subtree(r10, &(0x7f0000004a80), 0x2, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

485.278921ms ago: executing program 5 (id=7550):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x30, 0x40000020, 0xfffffffe})
syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800})

484.978631ms ago: executing program 5 (id=7551):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00i\x00'], 0x28}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000003c0), 0x6)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) (async)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6)

423.920992ms ago: executing program 5 (id=7552):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/59, 0x3b)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x64, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x48}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009c000040"])
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x8, r9, 0x11})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x8, r9, 0x1})
lsm_get_self_attr(0x65, &(0x7f0000000340)={0x0, 0x0, 0xc6, 0xa6, ""/166}, &(0x7f0000000240)=0xc6, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0xfff7, 0x42, 0x57}, {0x80, 0x2, 0x7, 0x3}, {0x8, 0x4, 0xf0, 0x5}]}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x840)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"})

423.669432ms ago: executing program 5 (id=7553):
r0 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x420e, r0)
r1 = syz_open_procfs(r0, &(0x7f0000000200)='mounts\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

396.556812ms ago: executing program 5 (id=7554):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x388, 0x2590f58a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000800)={@local, @rand_addr=0x64010102}, 0xc)
getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
close(0x4)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000028e000/0x400000)=nil)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
shutdown(r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xb0, 0x0, &(0x7f0000000840)=[@exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@fda={0x66646185, 0x4, 0x0, 0x1c}, @ptr={0x70742a85, 0x1, &(0x7f0000000900)=""/35, 0x23, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000c00)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x6, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000b40)=""/154, 0x9a, 0x0, 0x2c}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @clear_death], 0xce, 0x0, &(0x7f0000000480)="52e7efea34cb6f2edc06d51482028ba9d5b7d460ec8e117ef6cd2a89cb4ada71a46d634601b7333510926da5644ab0178ec9575c61fc29932a5bb0728e6a7ccd1c77156a87dd6e7fe4a91f92a0c2961e147fcd35b7273f1f6d5aff09a1f80185af693085fb10ccd3659af82f74dbc030f1c4dfbfd4fe23af6393a1f58621391461ab30324d398773ecd54ab794d97d58866fa63c4e609b9f4c71b5227c0f28a1fe6a4859ad813714e0a1f37bf45dd5a1d3f003acacbf406fe13dd754ee45c682c49be6fbee0bdf89a85b86760ef3"})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0x9d8b, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffd, 0x71e7, 0x8}, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40240904000702b95fc70309b99776e55104cf2c090583026d"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f8, 0xb05, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x1)
readv(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)
sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x1, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000340)}}], 0x1, 0x880)

298.602464ms ago: executing program 3 (id=7555):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
fcntl$setflags(r0, 0x2, 0x0)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0xd, 0x4)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv2(r3, 0x0, 0x0, 0xffffffff, 0x8000, 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8)
close(r2)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121400, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000004000000000000000300000000000000"])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)={0x9, 0x0, [{0x8, 0x5, 0x6, [0xff, 0x7, 0x3, 0x6, 0x1, 0x5, 0x4, 0x8000]}, {0x8, 0xeb3, 0x4, [0x3, 0x1, 0x9, 0x7, 0x5b5, 0x2, 0xb, 0x4]}, {0x4, 0x1, 0xf2b, [0xadd6, 0x9, 0x2, 0x6a3, 0x1c, 0x80000001, 0xff, 0x9]}, {0x8, 0x6, 0x4, [0x81, 0x7ef, 0xfff, 0x4, 0x8, 0xfb, 0x8, 0x3]}, {0x400, 0x7, 0x8, [0x6b, 0x5, 0xe2f5, 0xffff, 0x2, 0x401, 0x400, 0x5]}, {0x82, 0x81, 0x81, [0x9, 0x7, 0x8, 0xffff, 0x400, 0x7, 0x4, 0x3ff]}, {0x1, 0x4, 0x0, [0x2c, 0x6, 0x9, 0x5, 0x8, 0x9, 0x80, 0x6]}, {0xaf5, 0x100, 0x5, [0x2, 0x4, 0x1000, 0x7f, 0x8, 0x73b, 0x4]}, {0x1, 0x8000, 0x3, [0x10000, 0x4, 0xf7a, 0x5, 0x3, 0x0, 0x9, 0x6e8]}]})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@dev={0xac, 0x14, 0x14, 0x33}, @local, 0x0, 0x2, [@loopback, @remote]}, 0x18)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}'])

239.959635ms ago: executing program 3 (id=7556):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = add_key$user(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x3}, &(0x7f0000002080)="fecb", 0x2, 0xfffffffffffffffe)
keyctl$describe(0x6, r1, &(0x7f0000000000)=""/203, 0xcb)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=0x0], 0x40}, 0x6048090)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x8001000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001080))
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6gre0\x00', 0x1})
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

132.897227ms ago: executing program 0 (id=7557):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}) (async, rerun: 64)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 64)
fallocate(r1, 0x64, 0x7, 0x8) (async)
r2 = socket(0xa, 0x3, 0x3a) (async, rerun: 32)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (rerun: 32)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x6, 0xf6f}, {0x3, 0xfffffffa}]}, 0x14, 0x0) (async, rerun: 64)
creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r3=>0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001000))
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
r5 = socket$igmp(0x2, 0x3, 0x2) (async)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925001400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ccc", 0x55}], 0x1}, 0x80040c4)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x30, r5, 0xffffb000)

115.198498ms ago: executing program 0 (id=7558):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1000400, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0xa1)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)
execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000001c0)='&%]\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='cgroup2\x00', &(0x7f00000002c0)='$!#\x00', &(0x7f0000000300)='cgroup2\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='overlay\x00', &(0x7f00000003c0)='lowerdir', &(0x7f0000000400)='lowerdir']}, &(0x7f0000000540)={[&(0x7f00000004c0)='verity=require', &(0x7f0000000500)='$,h\'\x00']}, 0x100)

55.966759ms ago: executing program 0 (id=7559):
r0 = socket(0xa, 0x3, 0xff)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x47df, @local, 0xb3e}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x70, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0xd13, 0x0, 0x3, 0xadea, 0x7, "ea710600000000f9000000020200", 0x0, 0x400})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"/448])
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r5, 0x5bc7000)

53.773569ms ago: executing program 0 (id=7560):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffffe, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

53.160539ms ago: executing program 0 (id=7561):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x5)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280))
sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b00000000000000b000"], 0xc8}, 0x810)
fchdir(r3)
read$FUSE(r3, &(0x7f0000001400)={0x2020}, 0x2020)
mprotect(&(0x7f0000a9c000/0x2000)=nil, 0x2000, 0xc)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r1, &(0x7f0000000400)="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", 0x1f000)

44.066439ms ago: executing program 0 (id=7562):
r0 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x10, 0xff, 0x93, 0x10}, {0x9, 0x5, 0x9, 0x2, 0x200, 0xa9, 0x7, 0x1}, {0x9, 0x5, 0x80, 0x3, 0x10, 0x73, 0x4, 0x7}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, &(0x7f0000001200)={0x0, 0x4, 0xe7, {0xe7, 0x5, "29af6aa3647201519d517285c94d347364376f29c571e9ca6e1d39ca65afde892f831ef0864bc5fef4b5d126cee6d801eab080933ab987e745cced8af6fb2dc9b3148279e0a7db5b589024070bf5cb5f7ad4129aa823968d34f0ddd5010efbab6030b82bd25c2a88a3928581470f97f41d9a1345783e94592fa5666f782d0c7f2cb2fb7b1ae84b1442639cf5964cbcb12426524ce734dd91a50f631fda7883f219c591170fd8a2ca19b895c6477e0c40d6661d67478d1b0ba8e0d88cddcc8173a3fc08a185262bd327da1f27d3ea0cbc90411a2f8e601e94dd8e6d67160613f80b2ad12955"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x40, 0xb, 0x2a, "5c1c7d22d38bbf79566aa2634cfbdc942daf0cd4c9cdb58f40f4012e0c8774be0ac57bab8c70f9902fd0"}, &(0x7f0000001300)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000140)={0x21, 0x0, 0x3, "0502e6"}})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

0s ago: executing program 1 (id=7563):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x410040, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22008080}, 0x8000)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\xea\xe8\x015\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz\xc213\x9b\x87\xd5\x99\r\xa2P\x03\x1cl\x0f\xcb)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x1d, 0x73, 0xf, 0x15, 0xa, 0x100, 0x0, 0xb1, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
ioctl$sock_SIOCGIFBR(r5, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff})
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

kernel console output (not intermixed with test programs):

846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.742101][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.748575][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.755044][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.761466][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.767926][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.774388][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.780839][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.793328][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.814971][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.831962][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.841107][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.847987][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.856762][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.864530][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.871146][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.877872][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.884352][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.890966][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.897464][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.905152][T15854] fuseblk: Unknown parameter 'mask'
[  354.911727][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.917162][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.923656][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.930412][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.938320][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.945683][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.950646][T15854] fuseblk: Unknown parameter 'mask'
[  354.960484][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.964350][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.976639][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.983112][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.989615][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.996349][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.003867][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.005281][T15858] netlink: 57 bytes leftover after parsing attributes in process `syz.0.5268'.
[  355.010376][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.026310][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.030868][T15858] /dev/loop0: Can't lookup blockdev
[  355.032775][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.044612][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.060534][T15846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.106521][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5273'.
[  355.122423][T15868] /dev/loop0: Can't lookup blockdev
[  355.135185][T15872] 9pnet_fd: Insufficient options for proto=fd
[  355.163920][T15876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533
[  355.171141][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5277'.
[  355.243624][T15893] tipc: Started in network mode
[  355.249547][T15895] fuse: Unknown parameter '2ž¯SŒl'
[  355.250450][T15893] tipc: Node identity 025be1fd79f7, cluster identity 4711
[  355.262678][T15893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.271694][T15893] tipc: Disabling bearer <eth:syzkaller0>
[  355.352539][T15904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.352580][T15904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540
[  355.393316][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5286'.
[  355.412169][T15914] rust_binder: Error while translating object.
[  355.412203][T15914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  355.418505][T15914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:547
[  355.445260][T15916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:549
[  355.704988][   T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  355.866374][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  355.875084][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  355.883585][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.893751][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.904060][T15932] 9pnet_fd: Insufficient options for proto=fd
[  355.910906][   T10] usb 5-1: string descriptor 0 read error: -22
[  355.917435][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.926553][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.939096][   T10] usb 5-1: 0:2 : does not exist
[  356.051014][   T36] audit: type=1107 audit(1759601411.582:45633): pid=15942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  356.056008][T15943] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.218786][   T36] audit: type=1400 audit(1759601411.752:45634): avc:  denied  { append } for  pid=15944 comm="syz.3.5299" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  356.316905][T15949] rust_binder: Write failure EFAULT in pid:329
[  356.557820][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.581129][   T13] bridge_slave_1: left allmulticast mode
[  356.586873][   T13] bridge_slave_1: left promiscuous mode
[  356.587641][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.592943][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.602235][T15918] rust_binder: Write failure EFAULT in pid:551
[  356.608636][   T13] bridge_slave_0: left allmulticast mode
[  356.610828][   T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  356.619787][   T13] bridge_slave_0: left promiscuous mode
[  356.631707][   T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  356.634359][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.644731][   T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  356.666658][T15966] cgroup: Unknown subsys name 'measure'
[  356.666658][   T10] usb 5-1: USB disconnect, device number 24
[  356.765038][T15959] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.772127][T15959] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.779261][T15959] bridge_slave_0: entered allmulticast mode
[  356.785618][T15959] bridge_slave_0: entered promiscuous mode
[  356.791967][   T13] tipc: Left network mode
[  356.792275][T15959] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.803655][T15959] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.810861][T15959] bridge_slave_1: entered allmulticast mode
[  356.817303][T15959] bridge_slave_1: entered promiscuous mode
[  356.824366][   T13] veth1_macvtap: left promiscuous mode
[  356.830172][   T13] veth0_vlan: left promiscuous mode
[  356.950422][T15959] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.957542][T15959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.964870][T15959] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.971962][T15959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.993509][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.001043][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.010672][  T382] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.017774][  T382] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.029776][  T382] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.036925][  T382] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.069528][T15959] veth0_vlan: entered promiscuous mode
[  357.086034][T15959] veth1_macvtap: entered promiscuous mode
[  357.110419][   T36] audit: type=1400 audit(1759601412.642:45635): avc:  denied  { mounton } for  pid=15959 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  357.166623][T15992] x_tables: duplicate entry at hook 2
[  357.172833][T15992] 9pnet_fd: Insufficient options for proto=fd
[  357.198491][T15997] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  357.198517][T15997] rust_binder: Read failure Err(EFAULT) in pid:555
[  357.288682][T16014] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5320'.
[  357.421206][T16026] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  357.455004][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  357.606813][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  357.615707][   T10] usb 5-1: config 7 has an invalid interface number: 149 but max is 0
[  357.624023][   T10] usb 5-1: config 7 has no interface number 0
[  357.630803][   T10] usb 5-1: config 7 interface 149 has no altsetting 0
[  357.639395][   T10] usb 5-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=d7.cc
[  357.648895][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.657452][   T10] usb 5-1: Product: syz
[  357.661800][   T10] usb 5-1: Manufacturer: syz
[  357.666705][   T10] usb 5-1: SerialNumber: syz
[  357.922381][T16000] rust_binder: Write failure EFAULT in pid:558
[  357.926652][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.942270][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.961890][   T10] ums-datafab 5-1:7.149: USB Mass Storage device detected
[  357.982321][   T10] ums-datafab 5-1:7.149: Quirks match for vid 07c4 pid a002: 1
[  358.050185][   T10] usb 5-1: USB disconnect, device number 25
[  358.143753][T16039] fuseblk: Bad value for 'user_id'
[  358.149058][T16039] fuseblk: Bad value for 'user_id'
[  358.184429][T16055] rust_binder: Write failure EINVAL in pid:14
[  358.199066][T16059] netlink: 'syz.1.5333': attribute type 64 has an invalid length.
[  358.213129][T16059] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5333'.
[  358.237589][   T36] audit: type=1326 audit(1759601413.772:45636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16054 comm="syz.3.5331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  358.293683][T16070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5336'.
[  358.362554][T16084] 9pnet_fd: Insufficient options for proto=fd
[  358.382605][T16086] netlink: 'syz.1.5342': attribute type 4 has an invalid length.
[  358.392662][T16086] netlink: 'syz.1.5342': attribute type 4 has an invalid length.
[  358.924820][T16102] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5348'.
[  359.016039][T16114] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  359.022472][T16115] rust_binder: Write failure EFAULT in pid:567
[  359.076649][T16130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=16130 comm=syz.3.5356
[  359.119712][   T36] audit: type=1400 audit(1759601414.652:45637): avc:  denied  { relabelfrom } for  pid=16125 comm="syz.4.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  359.142124][   T36] audit: type=1400 audit(1759601414.652:45638): avc:  denied  { relabelto } for  pid=16125 comm="syz.4.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  359.162146][   T36] audit: type=1400 audit(1759601414.652:45639): avc:  denied  { attach_queue } for  pid=16125 comm="syz.4.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  359.175556][T16139] netlink: 'syz.1.5362': attribute type 4 has an invalid length.
[  359.245664][T16154] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[  359.269916][T16158] __vm_enough_memory: pid: 16158, comm: syz.4.5368, bytes: 18014402804453376 not enough memory for the allocation
[  359.284442][   T36] audit: type=1400 audit(1759601414.812:45640): avc:  denied  { create } for  pid=16159 comm="syz.3.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  359.306365][T16162] rust_binder: 575: no such ref 2
[  359.314799][T16160] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  359.316298][T16160] rust_binder: inc_ref_done called when no active inc_refs
[  359.317256][T16156] netlink: 328 bytes leftover after parsing attributes in process `syz.1.5367'.
[  359.328025][T16160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29
[  359.364729][T16166] /dev/rnullb0: Can't open blockdev
[  359.380522][T16166] __vm_enough_memory: pid: 16166, comm: syz.3.5371, bytes: 18014402804453376 not enough memory for the allocation
[  359.400900][T16168] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  359.400929][T16168] rust_binder: Error while translating object.
[  359.422149][T16168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  359.435396][T16168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:577
[  359.475053][T16176] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  359.514952][T16176] rust_binder: Write failure EINVAL in pid:580
[  359.558880][   T36] audit: type=1400 audit(1759601415.092:45641): avc:  denied  { accept } for  pid=16190 comm="syz.0.5382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  359.764966][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  359.916112][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.926316][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  359.940693][    T9] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  359.949803][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.957913][    T9] usb 4-1: Product: syz
[  359.962158][    T9] usb 4-1: Manufacturer: syz
[  359.966789][    T9] usb 4-1: SerialNumber: syz
[  359.972473][    T9] usb 4-1: config 0 descriptor??
[  359.978457][    T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  360.469971][T16216] syzkaller0: entered allmulticast mode
[  360.475762][T16217] syzkaller0: entered promiscuous mode
[  360.486150][T16217] syzkaller0: left promiscuous mode
[  360.491532][T16217] syzkaller0: left allmulticast mode
[  360.514194][T16221] netlink: 'syz.4.5393': attribute type 16 has an invalid length.
[  360.522112][T16221] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5393'.
[  361.035235][  T549] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  361.184949][  T549] usb 5-1: Using ep0 maxpacket: 16
[  361.191238][  T549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.202173][  T549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.212080][  T549] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  361.221167][  T549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.229892][  T549] usb 5-1: config 0 descriptor??
[  361.641858][  T549] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  361.733657][   T36] audit: type=1326 audit(1759601417.262:45642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16283 comm="syz.1.5415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x0
[  361.840302][    T9] usb 5-1: USB disconnect, device number 26
[  362.457492][  T549] usb 4-1: USB disconnect, device number 13
[  362.531607][T16306] rust_binder: Failed copying remainder into alloc: EFAULT
[  362.531607][T16305] rust_binder: Failed copying remainder into alloc: EFAULT
[  362.531631][T16306] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  362.539045][T16305] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  362.546626][T16306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  362.554460][T16305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  362.554484][T16305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37
[  362.582437][T16306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37
[  362.611187][   T36] audit: type=1326 audit(1759601418.142:45643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.1.5425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x0
[  362.694059][T16317] can0: slcan on ptm0.
[  362.724964][   T66] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  362.799406][   T36] audit: type=1400 audit(1759601418.332:45644): avc:  denied  { create } for  pid=16337 comm="syz.0.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  362.875114][   T66] usb 5-1: Using ep0 maxpacket: 16
[  362.881727][   T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.892684][   T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.902771][   T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  362.911931][   T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.920734][   T66] usb 5-1: config 0 descriptor??
[  362.955214][  T549] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  363.084962][  T549] usb 4-1: device descriptor read/64, error -71
[  363.324943][  T549] usb 4-1: device descriptor read/64, error -71
[  363.335329][   T66] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0010/input/input37
[  363.348073][   T66] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0010/input/input38
[  363.361908][   T66] kye 0003:0458:5012.0010: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0
[  363.466412][T16354] netlink: 'syz.1.5433': attribute type 4 has an invalid length.
[  363.474260][T16354] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5433'.
[  363.534951][    T9] usb 5-1: USB disconnect, device number 27
[  363.565049][  T549] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  363.694973][  T549] usb 4-1: device descriptor read/64, error -71
[  363.934987][  T549] usb 4-1: device descriptor read/64, error -71
[  364.045065][  T549] usb usb4-port1: attempt power cycle
[  364.352723][   T36] audit: type=1326 audit(1759601419.882:45645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7fc00000
[  364.384983][  T549] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  364.406038][  T549] usb 4-1: device descriptor read/8, error -71
[  364.536041][  T549] usb 4-1: device descriptor read/8, error -71
[  364.775061][  T549] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  364.795971][  T549] usb 4-1: device descriptor read/8, error -71
[  364.926052][  T549] usb 4-1: device descriptor read/8, error -71
[  364.934723][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5451'.
[  365.035140][  T549] usb usb4-port1: unable to enumerate USB device
[  365.658661][   T36] audit: type=1400 audit(1759601421.192:45646): avc:  denied  { execute } for  pid=16420 comm="syz.1.5453" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  365.725388][T16317] can0 (unregistered): slcan off ptm0.
[  366.216292][   T36] audit: type=1326 audit(1759601421.752:45647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7ffc0000
[  366.241261][   T36] audit: type=1326 audit(1759601421.772:45648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f33e418eec9 code=0x7ffc0000
[  366.265140][   T36] audit: type=1326 audit(1759601421.772:45649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7ffc0000
[  366.288966][   T36] audit: type=1326 audit(1759601421.772:45650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7ffc0000
[  366.312839][   T36] audit: type=1326 audit(1759601421.772:45651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16485 comm="syz.1.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7ffc0000
[  366.877269][T16513] netlink: 57 bytes leftover after parsing attributes in process `syz.3.5471'.
[  366.897668][T16515] overlayfs: failed to clone upperpath
[  367.912930][T16564] tmpfs: Unknown parameter 'sizYÌ8'
[  367.918870][T16564] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5490'.
[  368.142543][T16576] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.413369][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'.
[  369.990992][T16688] netlink: 'syz.3.5528': attribute type 32 has an invalid length.
[  370.000022][T16688] devtmpfs: Unknown parameter 'fuse'
[  370.036236][   T36] kauditd_printk_skb: 55 callbacks suppressed
[  370.036257][   T36] audit: type=1326 audit(1759601425.572:45707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16694 comm="syz.0.5531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335798eec9 code=0x0
[  370.762209][T16709] fuseblk: Unknown parameter ')К*0x0000000000000003'
[  370.839779][T16719] overlayfs: failed to clone upperpath
[  370.856357][T16722] veth1: entered allmulticast mode
[  370.982656][T16748] IPv6: NLM_F_CREATE should be specified when creating new route
[  371.689509][T16721] veth1: left allmulticast mode
[  371.704763][T16757] sit0: entered promiscuous mode
[  371.710818][T16757] netlink: 'syz.1.5550': attribute type 1 has an invalid length.
[  371.718632][T16757] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5550'.
[  371.728997][T16758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16758 comm=syz.1.5550
[  371.774606][T16764] overlayfs: failed to clone upperpath
[  372.328421][T16790] veth1: entered allmulticast mode
[  372.994752][T16809] netlink: 'syz.3.5569': attribute type 11 has an invalid length.
[  373.161564][T16789] veth1: left allmulticast mode
[  373.291815][   T36] audit: type=1107 audit(1759601428.822:45708): pid=16819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  373.367377][T16828] netlink: 'syz.0.5578': attribute type 4 has an invalid length.
[  373.375199][T16828] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5578'.
[  373.384573][T16828] netlink: 'syz.0.5578': attribute type 1 has an invalid length.
[  373.392566][T16828] netlink: 'syz.0.5578': attribute type 2 has an invalid length.
[  373.524818][   T36] audit: type=1326 audit(1759601429.052:45709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16834 comm="syz.3.5581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  373.934756][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'.
[  374.743217][   T36] audit: type=1326 audit(1759601430.272:45710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.1.5591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e418eec9 code=0x0
[  375.015279][T16872] /dev/loop0: Can't lookup blockdev
[  375.020984][T16872] 9pnet_fd: Insufficient options for proto=fd
[  375.200278][T16880] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.207461][T16880] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.214621][T16880] bridge_slave_0: entered allmulticast mode
[  375.221764][T16880] bridge_slave_0: entered promiscuous mode
[  375.228414][T16880] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.235516][T16880] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.242618][T16880] bridge_slave_1: entered allmulticast mode
[  375.248970][T16880] bridge_slave_1: entered promiscuous mode
[  375.308606][T16880] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.315728][T16880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.323040][T16880] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.330143][T16880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.363922][  T382] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.371733][  T382] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.401025][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.408386][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.416743][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.423895][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.470027][T16880] veth0_vlan: entered promiscuous mode
[  375.504693][T16880] veth1_macvtap: entered promiscuous mode
[  375.511146][T16931] netlink: 'syz.3.5611': attribute type 25 has an invalid length.
[  375.553447][T16933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=16933 comm=syz.3.5612
[  375.692875][T16959] overlayfs: failed to clone upperpath
[  375.706469][T16939] tipc: Started in network mode
[  375.711409][T16939] tipc: Node identity , cluster identity 4711
[  375.717544][T16939] tipc: Failed to obtain node identity
[  375.723028][T16939] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  375.750304][T16965] overlayfs: failed to clone lowerpath
[  375.755722][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5623'.
[  375.764815][T16967] bridge_slave_1: left allmulticast mode
[  375.765536][T16965] overlayfs: failed to clone lowerpath
[  375.771254][T16967] bridge_slave_1: left promiscuous mode
[  375.782084][T16967] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.790020][T16967] bridge_slave_0: left allmulticast mode
[  375.796197][T16967] bridge_slave_0: left promiscuous mode
[  375.801941][T16967] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.819502][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  377.039485][T17011] netlink: 'syz.1.5637': attribute type 16 has an invalid length.
[  377.047560][T17011] netlink: 'syz.1.5637': attribute type 3 has an invalid length.
[  377.055342][T17011] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5637'.
[  377.119052][T17013] batadv_slave_0: entered promiscuous mode
[  377.125638][T17012] batadv_slave_0: left promiscuous mode
[  377.258906][T17015] vlan0: entered promiscuous mode
[  377.264068][T17015] vlan0: entered allmulticast mode
[  377.269263][T17015] veth0_vlan: entered allmulticast mode
[  377.275875][T17015] overlayfs: failed to clone upperpath
[  377.531501][T17027] VFS: Mount too revealing
[  377.565192][T17032] overlay: ./file0 is not a directory
[  377.834959][  T415] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  377.834973][T16974] Bluetooth: hci0: command 0x1003 tx timeout
[  378.292315][T17060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5656'.
[  378.301324][T17060] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5656'.
[  378.310348][T17060] netlink: 'syz.1.5656': attribute type 6 has an invalid length.
[  378.318211][T17060] netlink: 'syz.1.5656': attribute type 5 has an invalid length.
[  378.326047][T17060] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5656'.
[  378.369939][T17066] netlink: 182 bytes leftover after parsing attributes in process `syz.0.5658'.
[  378.577410][T17068] rust_binder: Error in use_page_slow: ESRCH
[  378.577436][T17068] rust_binder: use_range failure ESRCH
[  378.583434][T17068] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  378.588945][T17068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  378.596982][T17068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:12
[  378.719761][T17080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5664'.
[  378.737758][T17080] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5664'.
[  378.746730][T17080] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5664'.
[  378.776183][T17085] netlink: 'syz.3.5666': attribute type 4 has an invalid length.
[  378.786053][T17086] netlink: 'syz.3.5666': attribute type 4 has an invalid length.
[  379.253046][T17106] can: request_module (can-proto-7) failed.
[  379.442479][T17113] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.449587][T17113] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.456814][T17113] bridge_slave_0: entered allmulticast mode
[  379.463130][T17113] bridge_slave_0: entered promiscuous mode
[  379.469573][T17113] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.476660][T17113] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.483787][T17113] bridge_slave_1: entered allmulticast mode
[  379.490152][T17113] bridge_slave_1: entered promiscuous mode
[  379.601315][T17113] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.608437][T17113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.615779][T17113] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.622831][T17113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.665009][   T66] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  379.679112][T16297] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.687149][T16297] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.701386][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.708489][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.718977][T16297] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.726076][T16297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.761831][T17113] veth0_vlan: entered promiscuous mode
[  379.777225][T17113] veth1_macvtap: entered promiscuous mode
[  379.804973][   T66] usb 1-1: device descriptor read/64, error -71
[  379.968624][   T36] audit: type=1400 audit(1759601435.502:45711): avc:  denied  { map } for  pid=17150 comm="syz.5.5685" path="socket:[61477]" dev="sockfs" ino=61477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  380.044996][   T66] usb 1-1: device descriptor read/64, error -71
[  380.217475][  T549] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  380.255440][T17163] overlayfs: failed to clone upperpath
[  380.285170][   T66] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  380.380038][  T549] usb 6-1: unable to read config index 0 descriptor/start: -71
[  380.389868][  T549] usb 6-1: can't read configurations, error -71
[  380.420449][   T66] usb 1-1: device descriptor read/64, error -71
[  380.471931][T17183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=17183 comm=syz.1.5697
[  380.507326][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5699'.
[  380.516394][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5699'.
[  380.664987][   T66] usb 1-1: device descriptor read/64, error -71
[  380.775066][   T66] usb usb1-port1: attempt power cycle
[  381.087367][   T36] audit: type=1400 audit(1759601436.622:45712): avc:  denied  { create } for  pid=17225 comm="syz.1.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  381.124963][   T66] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  381.146038][   T66] usb 1-1: device descriptor read/8, error -71
[  381.234982][  T549] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  381.276290][   T66] usb 1-1: device descriptor read/8, error -71
[  381.386374][  T549] usb 6-1: unable to get BOS descriptor or descriptor too short
[  381.394453][  T549] usb 6-1: not running at top speed; connect to a high speed hub
[  381.403236][  T549] usb 6-1: config 1 has an invalid interface number: 138 but max is 0
[  381.411623][  T549] usb 6-1: config 1 has no interface number 0
[  381.417825][  T549] usb 6-1: config 1 interface 138 has no altsetting 0
[  381.425955][  T549] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  381.435096][  T549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.443212][  T549] usb 6-1: Product: syz
[  381.447434][  T549] usb 6-1: Manufacturer: syz
[  381.452049][  T549] usb 6-1: SerialNumber: syz
[  381.524989][   T66] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  381.546355][   T66] usb 1-1: device descriptor read/8, error -71
[  381.665591][T17194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.674129][T17194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.676044][   T66] usb 1-1: device descriptor read/8, error -71
[  381.795039][   T66] usb usb1-port1: unable to enumerate USB device
[  381.927118][T17253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5719'.
[  382.462931][T17267] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17267 comm=syz.1.5723
[  382.488731][T17272] fuseblk: Bad value for 'user_id'
[  382.493881][T17272] fuseblk: Bad value for 'user_id'
[  383.010332][   T36] audit: type=1400 audit(1759601438.542:45713): avc:  denied  { shutdown } for  pid=17328 comm="syz.1.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  383.420300][T17331] veth1: entered allmulticast mode
[  383.426233][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5746'.
[  383.488114][   T36] audit: type=1400 audit(1759601439.022:45714): avc:  denied  { connect } for  pid=17330 comm="syz.0.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  383.488333][T17338] veth1: left allmulticast mode
[  383.935089][  T549] usb 6-1: USB disconnect, device number 3
[  383.947009][T17261] udevd[17261]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  384.273848][T17370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5759'.
[  384.418057][T17381] netlink: 'syz.1.5764': attribute type 4 has an invalid length.
[  384.425863][T17381] netlink: 992 bytes leftover after parsing attributes in process `syz.1.5764'.
[  384.514948][  T549] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  384.624959][   T66] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  384.666506][  T549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  384.677485][  T549] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  384.690352][  T549] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  384.699503][  T549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.708385][  T549] usb 1-1: config 0 descriptor??
[  384.713599][T17370] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  384.722057][  T549] usbhid 1-1:0.0: can't add hid device: -22
[  384.728054][  T549] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  384.786037][   T66] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  384.794222][   T66] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  384.805768][   T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  384.816688][   T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  384.827848][   T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  384.840765][   T66] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  384.849859][   T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.858488][   T66] usb 6-1: config 0 descriptor??
[  384.863699][T17376] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  384.923136][   T31] usb 1-1: USB disconnect, device number 78
[  385.029998][T17400] netlink: 'syz.1.5772': attribute type 27 has an invalid length.
[  385.038228][T17400] lo: entered promiscuous mode
[  385.043097][T17400] lo: entered allmulticast mode
[  385.054692][T17400] tunl0: entered promiscuous mode
[  385.065032][T17400] tunl0: entered allmulticast mode
[  385.075344][T17400] gre0: entered promiscuous mode
[  385.088153][T17400] gre0: entered allmulticast mode
[  385.098261][T17400] gretap0: entered promiscuous mode
[  385.103597][T17400] gretap0: entered allmulticast mode
[  385.109566][T17400] erspan0: entered promiscuous mode
[  385.114814][T17400] erspan0: entered allmulticast mode
[  385.121023][T17400] ip_vti0: entered promiscuous mode
[  385.126296][T17400] ip_vti0: entered allmulticast mode
[  385.132071][T17400] ip6_vti0: entered promiscuous mode
[  385.137649][T17400] ip6_vti0: entered allmulticast mode
[  385.143503][T17400] sit0: entered allmulticast mode
[  385.157867][T17400] ip6tnl0: entered promiscuous mode
[  385.163164][T17400] ip6tnl0: entered allmulticast mode
[  385.169183][T17400] ip6gre0: entered promiscuous mode
[  385.174435][T17400] ip6gre0: entered allmulticast mode
[  385.180330][T17400] ip6gretap0: entered promiscuous mode
[  385.185864][T17400] ip6gretap0: entered allmulticast mode
[  385.191529][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5773'.
[  385.192303][T17400] vcan0: entered promiscuous mode
[  385.206864][T17400] vcan0: entered allmulticast mode
[  385.212248][T17400] dummy0: entered promiscuous mode
[  385.217929][T17400] dummy0: entered allmulticast mode
[  385.223610][T17400] veth0: entered promiscuous mode
[  385.228818][T17400] veth0: entered allmulticast mode
[  385.234655][T17400] veth1: entered promiscuous mode
[  385.239896][T17400] veth1: entered allmulticast mode
[  385.245666][T17400] wg0: entered promiscuous mode
[  385.250682][T17400] wg0: entered allmulticast mode
[  385.257339][T17400] wg1: entered promiscuous mode
[  385.262263][T17400] wg1: entered allmulticast mode
[  385.268098][T17400] wg2: entered promiscuous mode
[  385.272983][T17400] wg2: entered allmulticast mode
[  385.278643][T17400] veth0_to_bridge: entered promiscuous mode
[  385.284591][T17400] veth0_to_bridge: entered allmulticast mode
[  385.286013][   T66] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd
[  385.291587][T17400] bridge_slave_0: entered promiscuous mode
[  385.299878][   T66] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  385.306054][T17400] bridge_slave_0: entered allmulticast mode
[  385.312380][   T66] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  385.320446][T17400] veth1_to_bridge: entered promiscuous mode
[  385.331425][T17400] veth1_to_bridge: entered allmulticast mode
[  385.347628][T17400] bridge_slave_1: entered promiscuous mode
[  385.353604][T17400] bridge_slave_1: entered allmulticast mode
[  385.354111][   T66] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  385.363045][T17400] veth0_to_bond: entered promiscuous mode
[  385.378656][T17400] veth0_to_bond: entered allmulticast mode
[  385.382258][   T66] usb 6-1: USB disconnect, device number 4
[  385.385690][T17400] bond_slave_0: entered promiscuous mode
[  385.397063][T17400] bond_slave_0: entered allmulticast mode
[  385.403445][T17400] veth1_to_bond: entered promiscuous mode
[  385.409515][T17400] veth1_to_bond: entered allmulticast mode
[  385.415150][T17414] fido_id[17414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  385.416414][T17400] bond_slave_1: entered promiscuous mode
[  385.449344][T17400] bond_slave_1: entered allmulticast mode
[  385.455943][T17400] veth0_to_team: entered promiscuous mode
[  385.461866][T17400] veth0_to_team: entered allmulticast mode
[  385.472924][T17400] team_slave_0: entered promiscuous mode
[  385.480428][T17400] team_slave_0: entered allmulticast mode
[  385.489942][T17400] veth1_to_team: entered promiscuous mode
[  385.496246][T17400] veth1_to_team: entered allmulticast mode
[  385.502934][T17400] team_slave_1: entered promiscuous mode
[  385.509095][T17400] team_slave_1: entered allmulticast mode
[  385.515711][T17400] veth0_to_batadv: entered promiscuous mode
[  385.521658][T17400] veth0_to_batadv: entered allmulticast mode
[  385.531758][T17400] batadv_slave_0: entered promiscuous mode
[  385.537751][T17400] batadv_slave_0: entered allmulticast mode
[  385.544147][T17400] veth1_to_batadv: entered promiscuous mode
[  385.550231][T17400] veth1_to_batadv: entered allmulticast mode
[  385.556797][T17400] batadv_slave_1: entered promiscuous mode
[  385.562670][T17400] batadv_slave_1: entered allmulticast mode
[  385.569213][T17400] xfrm0: entered promiscuous mode
[  385.574331][T17400] xfrm0: entered allmulticast mode
[  385.579861][T17400] veth0_to_hsr: entered promiscuous mode
[  385.585565][T17400] veth0_to_hsr: entered allmulticast mode
[  385.591933][T17400] hsr_slave_0: entered promiscuous mode
[  385.597704][T17400] hsr_slave_0: entered allmulticast mode
[  385.603987][T17400] veth1_to_hsr: entered promiscuous mode
[  385.609731][T17400] veth1_to_hsr: entered allmulticast mode
[  385.616380][T17400] hsr_slave_1: entered promiscuous mode
[  385.621964][T17400] hsr_slave_1: entered allmulticast mode
[  385.628562][T17400] veth1_virt_wifi: entered promiscuous mode
[  385.634483][T17400] veth1_virt_wifi: entered allmulticast mode
[  385.641072][T17400] veth0_virt_wifi: entered promiscuous mode
[  385.647029][T17400] veth0_virt_wifi: entered allmulticast mode
[  385.653442][T17400] veth1_vlan: entered promiscuous mode
[  385.659249][T17400] veth1_vlan: entered allmulticast mode
[  385.667012][T17400] vlan1: entered promiscuous mode
[  385.672080][T17400] vlan1: entered allmulticast mode
[  385.677714][T17400] veth1_macvtap: entered allmulticast mode
[  385.683885][T17400] veth0_macvtap: entered promiscuous mode
[  385.689782][T17400] veth0_macvtap: entered allmulticast mode
[  385.696082][T17400] macsec0: entered promiscuous mode
[  385.701377][T17400] macsec0: entered allmulticast mode
[  385.707391][T17400] syztnl2: entered promiscuous mode
[  385.712625][T17400] syztnl2: entered allmulticast mode
[  385.714956][   T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  385.727612][T17400] syztnl1: entered promiscuous mode
[  385.732836][T17400] syztnl1: entered allmulticast mode
[  385.851729][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5789'.
[  385.866144][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'.
[  385.876470][   T66] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.887923][   T66] usb 6-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  385.901437][   T66] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  385.912666][   T66] usb 6-1: config 1 interface 1 has no altsetting 0
[  385.923148][   T66] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  385.932306][   T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.940498][   T66] usb 6-1: Product: syz
[  385.944696][   T66] usb 6-1: Manufacturer: syz
[  385.949369][   T66] usb 6-1: SerialNumber: syz
[  385.950895][T17462] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  386.067678][T17473] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  386.067699][T17473] rust_binder: Error while translating object.
[  386.076536][T17473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  386.082765][T17473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  386.171430][T17413] rust_binder: Write failure EFAULT in pid:22
[  386.183805][   T66] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  386.200222][   T66] usb 6-1: USB disconnect, device number 5
[  386.547736][T17490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5804'.
[  386.557714][T17490] 9pnet_fd: Insufficient options for proto=fd
[  386.564484][T17491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5804'.
[  386.705075][T17506] binder: Unknown parameter 'fscontext?}'
[  386.889872][   T36] audit: type=1326 audit(1759601442.422:45715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17499 comm="syz.3.5806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  386.915392][   T36] audit: type=1326 audit(1759601442.452:45716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17499 comm="syz.3.5806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  387.141860][T17533] rust_binder: Error while translating object.
[  387.141909][T17533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  387.149169][T17533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:85
[  387.329345][T17544] netlink: 'syz.5.5821': attribute type 2 has an invalid length.
[  387.360691][T17544] >: renamed from veth0_vlan (while UP)
[  387.406922][T17549] overlayfs: empty lowerdir
[  387.411706][T17550] overlayfs: empty lowerdir
[  387.494965][   T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  387.503395][T17559] 9pnet_fd: Insufficient options for proto=fd
[  387.654936][   T10] usb 1-1: Using ep0 maxpacket: 32
[  387.661615][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  387.670061][   T10] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  387.678470][   T10] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  387.688789][   T10] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  387.697871][   T10] usb 1-1: config 128 has no interface number 0
[  387.704132][   T10] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  387.715380][   T10] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  387.725493][   T10] usb 1-1: config 128 interface 127 has no altsetting 0
[  387.733738][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  387.742807][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.750839][   T10] usb 1-1: Product: syz
[  387.755123][   T10] usb 1-1: Manufacturer: syz
[  387.759768][   T10] usb 1-1: SerialNumber: syz
[  387.981391][   T10] usb 1-1: USB disconnect, device number 79
[  387.989091][T17152] udevd[17152]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  388.183113][T17606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5843'.
[  388.491057][T17609] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.491195][T17608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  388.497701][T17608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:94
[  388.653805][   T36] audit: type=1400 audit(1759601444.182:45717): avc:  denied  { create } for  pid=17618 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  388.674765][   T36] audit: type=1400 audit(1759601444.192:45718): avc:  denied  { write } for  pid=17618 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  388.894986][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  389.045990][   T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  389.057226][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  389.066377][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.074375][   T10] usb 6-1: Product: syz
[  389.078648][   T10] usb 6-1: Manufacturer: syz
[  389.083290][   T10] usb 6-1: SerialNumber: syz
[  389.294351][   T10] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  389.304332][   T10] usb 6-1: USB disconnect, device number 6
[  389.807748][T17654] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  389.925765][   T36] audit: type=1400 audit(1759601445.462:45719): avc:  denied  { map } for  pid=17657 comm="syz.5.5857" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  389.958124][T17660] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  389.958263][T17660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59
[  390.007035][T17662] rust_binder: Error in use_page_slow: ESRCH
[  390.016144][T17662] rust_binder: use_range failure ESRCH
[  390.022150][T17662] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  390.027703][T17662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  390.035791][T17662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:61
[  390.071855][T17664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  390.081116][T17664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63
[  390.161099][T17669] KVM: debugfs: duplicate directory 17669-4
[  390.233986][T17671] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  390.241356][T17671] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  390.299120][   T36] audit: type=1400 audit(1759601445.832:45720): avc:  denied  { read } for  pid=96 comm="acpid" name="mouse0" dev="devtmpfs" ino=882 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  390.325011][   T36] audit: type=1400 audit(1759601445.832:45721): avc:  denied  { open } for  pid=96 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=882 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  390.347893][   T36] audit: type=1400 audit(1759601445.832:45722): avc:  denied  { ioctl } for  pid=96 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=882 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  390.600671][T17690] /dev/rnullb0: Can't open blockdev
[  390.734325][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.734358][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.741443][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.748374][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.754398][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.761191][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.767943][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.774660][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.781172][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.787835][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.798031][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.800748][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.814058][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.814081][T17699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.944933][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  391.094934][    T9] usb 6-1: Using ep0 maxpacket: 8
[  391.101173][    T9] usb 6-1: config index 0 descriptor too short (expected 30482, got 18)
[  391.109608][    T9] usb 6-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  391.118869][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 101
[  391.129131][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  391.138251][    T9] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  391.146632][    T9] usb 6-1: Product: syz
[  391.150816][    T9] usb 6-1: Manufacturer: syz
[  391.156069][    T9] usb 6-1: config 0 descriptor??
[  391.161907][    T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  391.169778][    T9] usb 6-1: Detected FT2232C/D
[  391.196156][   T36] audit: type=1400 audit(1759601446.732:45723): avc:  denied  { connect } for  pid=17713 comm="syz.0.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  391.580123][T17695] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  391.951737][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  391.961020][    T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  391.962761][   T36] audit: type=1400 audit(1759601447.492:45724): avc:  denied  { append } for  pid=17731 comm="syz.0.5884" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  391.970557][    T9] usb 6-1: USB disconnect, device number 7
[  391.999088][T17732] SELinux: failed to load policy
[  392.004470][T17732] rust_binder: 146: no such ref 2
[  392.025840][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  392.025871][T17734] /dev/rnullb0: Can't open blockdev
[  392.038770][    T9] ftdi_sio 6-1:0.0: device disconnected
[  392.099823][T17737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.108471][T17737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.334984][   T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  392.464953][   T10] usb 1-1: device descriptor read/64, error -71
[  392.714953][   T10] usb 1-1: device descriptor read/64, error -71
[  392.955000][   T10] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  393.084981][   T10] usb 1-1: device descriptor read/64, error -71
[  393.128842][T17805] rust_binder: 88: no such ref 0
[  393.131712][   T36] audit: type=1400 audit(1759601448.662:45725): avc:  denied  { set_context_mgr } for  pid=17802 comm="syz.5.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  393.137278][T17805] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  393.163214][T17805] rust_binder: 88: no such ref 2
[  393.168368][T17805] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  393.168431][   T36] audit: type=1400 audit(1759601448.702:45726): avc:  denied  { call } for  pid=17802 comm="syz.5.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  393.178845][T17809] overlayfs: disabling nfs_export due to verity=require
[  393.202574][T17809] overlayfs: failed to clone upperpath
[  393.227793][   T36] audit: type=1400 audit(1759601448.762:45727): avc:  denied  { map } for  pid=17813 comm="syz.3.5909" path="socket:[63400]" dev="sockfs" ino=63400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  393.251487][   T36] audit: type=1400 audit(1759601448.762:45728): avc:  denied  { accept } for  pid=17813 comm="syz.3.5909" path="socket:[63400]" dev="sockfs" ino=63400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  393.269892][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5911'.
[  393.285184][T17819] bridge_slave_1: left allmulticast mode
[  393.291665][T17819] bridge_slave_1: left promiscuous mode
[  393.297512][T17819] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.305310][T17819] bridge_slave_0: left allmulticast mode
[  393.311475][T17819] bridge_slave_0: left promiscuous mode
[  393.321186][T17819] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.344977][   T10] usb 1-1: device descriptor read/64, error -71
[  393.435413][T17835] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5916'.
[  393.455117][   T10] usb usb1-port1: attempt power cycle
[  393.602568][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5928'.
[  393.611495][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5928'.
[  393.679039][T12006] rust_binder: 17871: removing orphan mapping 0:4096
[  393.703861][T17878] binder: Bad value for 'stats'
[  393.722566][T17880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118
[  393.804948][   T10] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  393.845979][   T10] usb 1-1: device descriptor read/8, error -71
[  393.975971][   T10] usb 1-1: device descriptor read/8, error -71
[  394.214970][   T10] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  394.235971][   T10] usb 1-1: device descriptor read/8, error -71
[  394.366127][   T10] usb 1-1: device descriptor read/8, error -71
[  394.475015][   T10] usb usb1-port1: unable to enumerate USB device
[  394.803858][T17937] overlayfs: failed to clone upperpath
[  394.830456][   T36] audit: type=1400 audit(1759601450.362:45729): avc:  denied  { setattr } for  pid=17938 comm="syz.5.5949" name="NETLINK" dev="sockfs" ino=64575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  394.835225][T17940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17940 comm=syz.5.5949
[  394.860018][T17944] tipc: Started in network mode
[  394.871922][T17939] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17939 comm=syz.5.5949
[  394.872060][T17944] tipc: Node identity ac14140f, cluster identity 4711
[  394.885408][T17940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17940 comm=syz.5.5949
[  394.891860][T17944] tipc: New replicast peer: 255.255.255.255
[  394.903694][T17940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17940 comm=syz.5.5949
[  394.909799][T17944] tipc: Enabled bearer <udp:syz2>, priority 10
[  394.921985][T17940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17940 comm=syz.5.5949
[  394.928364][T17942] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  394.940336][T17940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17940 comm=syz.5.5949
[  395.018850][T17951] rust_binder: Write failure EINVAL in pid:145
[  395.088813][T17958] kvm: kvm [17956]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0
[  395.534991][T12006] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  395.686114][T12006] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  395.694567][T12006] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.706100][T12006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  395.717092][T12006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  395.728278][T12006] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  395.741190][T12006] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  395.750306][T12006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.759727][T12006] usb 6-1: config 0 descriptor??
[  395.768223][T17976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  395.850119][T17991] tipc: Started in network mode
[  395.855067][T17991] tipc: Node identity fe095d792fd9, cluster identity 4711
[  395.862278][T17991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.869998][T17991] tipc: Disabling bearer <eth:syzkaller0>
[  395.979562][   T10] hid-generic 007F:6E8D:0005.0012: item fetching failed at offset 1/5
[  395.988069][   T10] hid-generic 007F:6E8D:0005.0012: probe with driver hid-generic failed with error -22
[  396.025618][   T31] tipc: Node number set to 2886997007
[  396.179960][T12006] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd
[  396.187435][T12006] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  396.195116][T12006] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  396.204100][T12006] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  396.254944][   T10] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  396.383195][   T31] usb 6-1: USB disconnect, device number 8
[  396.405304][   T10] usb 1-1: no configurations
[  396.409984][   T10] usb 1-1: can't read configurations, error -22
[  396.544974][   T10] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  396.695312][   T10] usb 1-1: no configurations
[  396.700015][   T10] usb 1-1: can't read configurations, error -22
[  396.706431][   T10] usb usb1-port1: attempt power cycle
[  396.952009][T18011] overlayfs: failed to resolve './file1': -2
[  396.971283][T18015] rust_binder: inc_ref_done called when no active inc_refs
[  396.971940][T18015] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5971'.
[  397.014715][T18019] fuse: Unknown parameter '9h³àš0HTí¸X+˨s{³h”ë‡Ç7÷Éeä"§DZ›”£„Lí¶¾iëp‰'
[  397.015116][T18022] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5973'.
[  397.047379][   T10] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  397.055881][T18025] __vm_enough_memory: pid: 18025, comm: syz.5.5974, bytes: 18014402804453376 not enough memory for the allocation
[  397.076581][   T10] usb 1-1: no configurations
[  397.082514][   T10] usb 1-1: can't read configurations, error -22
[  397.225047][   T10] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  397.234568][T18039] overlayfs: missing 'workdir'
[  397.245749][   T10] usb 1-1: no configurations
[  397.256038][   T10] usb 1-1: can't read configurations, error -22
[  397.262483][   T10] usb usb1-port1: unable to enumerate USB device
[  397.269412][T18041] rust_binder: Error while translating object.
[  397.269449][T18041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  397.275718][T18041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:189
[  397.851261][T18060] 9pnet_fd: Insufficient options for proto=fd
[  397.857594][T18062] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  397.889018][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5993'.
[  398.188350][T18110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16404 sclass=netlink_tcpdiag_socket pid=18110 comm=syz.1.6007
[  398.201502][T18110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16404 sclass=netlink_tcpdiag_socket pid=18110 comm=syz.1.6007
[  398.214709][T18110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16404 sclass=netlink_tcpdiag_socket pid=18110 comm=syz.1.6007
[  398.227812][T18110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16404 sclass=netlink_tcpdiag_socket pid=18110 comm=syz.1.6007
[  398.564711][T18125] netlink: 57 bytes leftover after parsing attributes in process `syz.3.6012'.
[  398.697590][T18141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6018'.
[  398.719372][T18143] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  399.041880][T18161] kvm: kvm [18160]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0
[  399.051167][T18162] kvm: kvm [18160]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0
[  399.060929][T18161] __vm_enough_memory: pid: 18161, comm: syz.0.6024, bytes: 18014402804453376 not enough memory for the allocation
[  399.149419][T18176] netlink: 'syz.1.6029': attribute type 16 has an invalid length.
[  399.414135][T18191] 9pnet_fd: Insufficient options for proto=fd
[  399.485956][T18206] 9pnet_fd: Insufficient options for proto=fd
[  399.539080][T18218] netlink: 'syz.3.6043': attribute type 4 has an invalid length.
[  399.546871][T18218] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6043'.
[  399.558738][T18218] /dev/loop0: Can't lookup blockdev
[  399.825474][T18229] fuseblk: Unknown parameter '…Ö.0x0000000000000003'
[  399.832715][T18229] netlink: 'syz.1.6048': attribute type 27 has an invalid length.
[  400.060582][T18237] netlink: 'syz.0.6051': attribute type 16 has an invalid length.
[  400.068470][T18237] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6051'.
[  400.469718][   T36] audit: type=1326 audit(1759601456.002:45730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.1.6059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e418eec9 code=0x7fc00000
[  400.614756][T18284] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6067'.
[  401.305481][T18372] 9pnet_fd: Insufficient options for proto=fd
[  402.035172][   T36] audit: type=1400 audit(1759601457.572:45731): avc:  denied  { read } for  pid=18396 comm="syz.1.6101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  402.267452][T18406] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  402.825804][T18435] selinux_netlink_send: 30 callbacks suppressed
[  402.825827][T18435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=18435 comm=syz.3.6115
[  402.909115][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6119'.
[  403.066202][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6125'.
[  404.329750][T18547] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  404.373780][T18560] overlayfs: failed to clone upperpath
[  404.394541][   T36] audit: type=1326 audit(1759601459.922:45732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18563 comm="syz.3.6162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  404.463424][T18579] fuse: Bad value for 'fd'
[  404.728270][T18608] tc_dump_action: action bad kind
[  404.733486][T18608] tc_dump_action: action bad kind
[  404.738650][T18608] tc_dump_action: action bad kind
[  404.743774][T18608] tc_dump_action: action bad kind
[  404.748962][T18608] tc_dump_action: action bad kind
[  404.754035][T18608] tc_dump_action: action bad kind
[  404.759167][T18608] tc_dump_action: action bad kind
[  404.764347][T18608] tc_dump_action: action bad kind
[  404.769598][T18608] tc_dump_action: action bad kind
[  404.774689][T18608] tc_dump_action: action bad kind
[  404.779891][T18608] tc_dump_action: action bad kind
[  404.785032][T18608] tc_dump_action: action bad kind
[  404.790189][T18608] tc_dump_action: action bad kind
[  404.796239][T18608] tc_dump_action: action bad kind
[  404.801395][T18608] tc_dump_action: action bad kind
[  404.806500][T18608] tc_dump_action: action bad kind
[  404.811610][T18608] tc_dump_action: action bad kind
[  404.816713][T18608] tc_dump_action: action bad kind
[  404.821783][T18608] tc_dump_action: action bad kind
[  404.826901][T18608] tc_dump_action: action bad kind
[  404.832004][T18608] tc_dump_action: action bad kind
[  404.837344][T18608] tc_dump_action: action bad kind
[  404.844982][T18608] tc_dump_action: action bad kind
[  404.850079][T18608] tc_dump_action: action bad kind
[  404.857676][T18608] tc_dump_action: action bad kind
[  404.862791][T18608] tc_dump_action: action bad kind
[  404.867913][T18608] tc_dump_action: action bad kind
[  404.873018][T18608] tc_dump_action: action bad kind
[  404.878175][T18608] tc_dump_action: action bad kind
[  404.883290][T18608] tc_dump_action: action bad kind
[  404.888421][T18608] tc_dump_action: action bad kind
[  404.893532][T18608] tc_dump_action: action bad kind
[  404.894716][T18613] sock: sock_timestamping_bind_phc: sock not bind to device
[  404.898658][T18608] tc_dump_action: action bad kind
[  404.907123][T18613] fuseblk: Bad value for 'source'
[  404.911403][T18608] tc_dump_action: action bad kind
[  404.921287][T18608] tc_dump_action: action bad kind
[  404.926516][T18613] netlink: 'syz.1.6178': attribute type 11 has an invalid length.
[  404.934515][T18608] tc_dump_action: action bad kind
[  404.939832][T18608] tc_dump_action: action bad kind
[  404.945147][T18608] tc_dump_action: action bad kind
[  404.950302][T18608] tc_dump_action: action bad kind
[  404.955692][T18608] tc_dump_action: action bad kind
[  404.960843][T18608] tc_dump_action: action bad kind
[  404.966184][T18608] tc_dump_action: action bad kind
[  404.971327][T18608] tc_dump_action: action bad kind
[  404.976689][T18608] tc_dump_action: action bad kind
[  404.981828][T18608] tc_dump_action: action bad kind
[  404.987184][T18608] tc_dump_action: action bad kind
[  404.992422][T18608] tc_dump_action: action bad kind
[  404.997810][T18608] tc_dump_action: action bad kind
[  405.002980][T18608] tc_dump_action: action bad kind
[  405.008396][T18608] tc_dump_action: action bad kind
[  405.013535][T18608] tc_dump_action: action bad kind
[  405.018719][T18608] tc_dump_action: action bad kind
[  405.250464][T18642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57945 sclass=netlink_route_socket pid=18642 comm=syz.3.6187
[  405.417286][T18660] netlink: 'syz.5.6193': attribute type 1 has an invalid length.
[  405.425215][T18660] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6193'.
[  405.911426][   T36] audit: type=1400 audit(1759601461.442:45733): avc:  denied  { execheap } for  pid=18671 comm="syz.3.6197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  406.465909][T18700] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  407.127196][T18754] netlink: 'syz.0.6225': attribute type 12 has an invalid length.
[  407.159192][T18761] fuse: Bad value for 'fd'
[  407.180622][T18766] cgroup2: Unknown parameter 'io'
[  407.186355][T18766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6229'.
[  407.196818][T18766] overlayfs: failed to clone upperpath
[  407.217280][T18768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6230'.
[  407.241844][T18776] fuse: Bad value for 'fd'
[  407.505123][T18799] /dev/rnullb0: Can't lookup blockdev
[  407.817146][   T36] audit: type=1401 audit(1759601463.352:45734): op=fscreate invalid_context=CFA7AE
[  407.869831][T18858] netlink: 'syz.3.6266': attribute type 16 has an invalid length.
[  407.877712][T18858] netlink: 'syz.3.6266': attribute type 2 has an invalid length.
[  407.885545][T18858] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.6266'.
[  408.039421][T18893] overlayfs: failed to clone upperpath
[  408.272852][T18916] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  408.282459][   T36] audit: type=1400 audit(1759601463.812:45735): avc:  denied  { relabelto } for  pid=18915 comm="syz.5.6287" name="file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  408.309711][   T36] audit: type=1400 audit(1759601463.812:45736): avc:  denied  { associate } for  pid=18915 comm="syz.5.6287" name="file0" dev="tmpfs" ino=684 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  408.801467][   T36] audit: type=1400 audit(1759601464.332:45737): avc:  denied  { unlink } for  pid=17113 comm="syz-executor" name="file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  408.946907][T18934] 9pnet_fd: Insufficient options for proto=fd
[  409.025508][T18951] overlayfs: failed to clone upperpath
[  409.044376][T18943] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.052278][T18943] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.059797][T18943] bridge_slave_0: entered allmulticast mode
[  409.066434][T18943] bridge_slave_0: entered promiscuous mode
[  409.073086][T18943] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.081761][T18943] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.090399][T18943] bridge_slave_1: entered allmulticast mode
[  409.097029][T18943] bridge_slave_1: entered promiscuous mode
[  409.109016][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6303'.
[  409.151071][T18968] veth1: entered allmulticast mode
[  409.177983][T18943] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.185099][T18943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.192384][T18943] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.199448][T18943] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.222703][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.230257][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.240776][T16297] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.247867][T16297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.257070][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.264155][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.291538][T18943] veth0_vlan: entered promiscuous mode
[  409.302804][T18943] veth1_macvtap: entered promiscuous mode
[  409.349267][T18981] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  409.357754][T18981] rust_binder: Write failure EINVAL in pid:7
[  409.604989][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  409.766155][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.776395][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  409.786110][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  409.795269][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  409.803292][    T9] usb 2-1: SerialNumber: syz
[  410.019322][    T9] usb 2-1: skipping empty audio interface (v1)
[  410.028251][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  410.038232][    T9] usb 2-1: USB disconnect, device number 13
[  410.045737][T17152] udevd[17152]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  410.677393][T18996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16
[  410.677851][T18996] rust_binder: Error while translating object.
[  410.687042][T18996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  410.693316][T18996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16
[  410.835565][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'.
[  410.906674][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19018 comm=syz.0.6320
[  410.955377][   T31] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  411.085033][   T31] usb 2-1: device descriptor read/64, error -71
[  411.324946][   T31] usb 2-1: device descriptor read/64, error -71
[  411.564944][   T31] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  411.694916][   T31] usb 2-1: device descriptor read/64, error -71
[  411.934955][   T31] usb 2-1: device descriptor read/64, error -71
[  412.045060][   T31] usb usb2-port1: attempt power cycle
[  412.153718][T18966] veth1: left allmulticast mode
[  412.226245][T19045] netlink: 'syz.5.6329': attribute type 4 has an invalid length.
[  412.286595][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6333'.
[  412.384940][   T31] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  412.407627][   T31] usb 2-1: device descriptor read/8, error -71
[  412.536281][   T31] usb 2-1: device descriptor read/8, error -71
[  412.774947][   T31] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  412.795994][   T31] usb 2-1: device descriptor read/8, error -71
[  412.926040][   T31] usb 2-1: device descriptor read/8, error -71
[  413.035243][   T31] usb usb2-port1: unable to enumerate USB device
[  413.760336][T19092] rust_binder: Failed to allocate buffer. len:232, is_oneway:true
[  413.819003][   T36] audit: type=1400 audit(1759601469.352:45738): avc:  denied  { transfer } for  pid=19093 comm="syz.1.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  414.091500][T19099] rust_binder: Failed to allocate buffer. len:64, is_oneway:true
[  414.197111][T19104] rust_binder: Got transaction with invalid offset.
[  414.204978][T19104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  414.211671][T19104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[  415.264950][T12006] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  415.426005][T12006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.436707][T12006] usb 2-1: config 0 has no interfaces?
[  415.442221][T12006] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  415.451333][T12006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.460117][T12006] usb 2-1: config 0 descriptor??
[  415.486452][T19112] tipc: Trying to set illegal importance in message
[  415.511336][T19117] netlink: 'syz.5.6354': attribute type 19 has an invalid length.
[  415.589178][T19140] fuseblk: Unknown parameter 'gro'
[  415.614140][   T36] audit: type=1326 audit(1759601471.142:45739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19083 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1638eec9 code=0x7fc00000
[  415.668087][  T549] usb 2-1: USB disconnect, device number 18
[  416.380571][T19199] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.6378'.
[  416.451636][T19206] netlink: 'syz.0.6381': attribute type 4 has an invalid length.
[  416.461371][T19201] /dev/nbd5: Can't lookup blockdev
[  416.468088][T19206] netlink: 'syz.0.6381': attribute type 4 has an invalid length.
[  417.031314][T19231] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6388'.
[  417.052127][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6389'.
[  417.424948][   T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  417.435600][T19242] overlayfs: failed to clone upperpath
[  417.576795][   T31] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  417.585635][   T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 33
[  417.594851][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  417.595666][T19257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=19257 comm=syz.5.6397
[  417.606181][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.628563][   T31] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  417.637697][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.646718][   T31] usb 2-1: config 0 descriptor??
[  417.913001][T19267] netlink: 'syz.5.6401': attribute type 16 has an invalid length.
[  417.945433][   T36] audit: type=1400 audit(1759601473.482:45740): avc:  denied  { write } for  pid=19268 comm="syz.5.6402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  417.967785][   T36] audit: type=1400 audit(1759601473.502:45741): avc:  denied  { shutdown } for  pid=19268 comm="syz.5.6402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  418.063695][   T31] monterey 0003:0566:3004.0014: hidraw0: USB HID v0.07 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0
[  418.263348][T19240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10614 sclass=netlink_route_socket pid=19240 comm=syz.1.6391
[  418.280024][    T9] usb 2-1: USB disconnect, device number 19
[  418.417449][T19302] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  418.425537][T19304] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  418.537291][T19315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6419'.
[  419.435456][T19360] rust_binder: Error while translating object.
[  419.435514][T19360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  419.441769][T19360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:53
[  419.724964][  T549] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  419.896069][  T549] usb 2-1: config index 0 descriptor too short (expected 2075, got 27)
[  419.904410][  T549] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  419.912634][  T549] usb 2-1: config 0 has no interface number 0
[  419.918841][  T549] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  419.928998][  T549] usb 2-1: config 0 interface 200 has no altsetting 0
[  419.937500][  T549] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  419.946618][  T549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.954743][  T549] usb 2-1: Product: syz
[  419.958969][  T549] usb 2-1: Manufacturer: syz
[  419.963616][  T549] usb 2-1: SerialNumber: syz
[  419.969259][  T549] usb 2-1: config 0 descriptor??
[  420.176437][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.195649][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.216230][  T549] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input39
[  420.243189][  T549] usb 2-1: USB disconnect, device number 20
[  420.630122][T19416] overlayfs: failed to clone upperpath
[  420.750755][   T36] audit: type=1400 audit(1759601476.282:45742): avc:  denied  { shutdown } for  pid=19423 comm="syz.5.6458" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  421.099049][T19463] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  421.416731][T19487] veth1: entered allmulticast mode
[  421.450766][T19487] veth1: left allmulticast mode
[  421.487493][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6481'.
[  421.514438][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6481'.
[  421.940467][T19501] rust_binder: Write failure EFAULT in pid:63
[  421.978220][T19445] !@ÿ: renamed from xfrm0 (while UP)
[  422.001693][T19503] rust_binder: Failed to allocate buffer. len:216, is_oneway:true
[  422.016592][T19505] 9pnet_fd: Insufficient options for proto=fd
[  422.061495][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'.
[  422.195433][T19516] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6491'.
[  422.241718][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6492'.
[  422.363148][T19529] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  422.366802][T19539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19539 comm=syz.3.6498
[  422.385925][T19539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19539 comm=syz.3.6498
[  422.467982][T19562] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  422.724924][T12006] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  422.872297][T19594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51033 sclass=netlink_route_socket pid=19594 comm=syz.5.6513
[  422.904918][T12006] usb 2-1: Using ep0 maxpacket: 16
[  422.913471][T12006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.934932][T12006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.956230][T12006] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  422.975109][T12006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.992389][T12006] usb 2-1: config 0 descriptor??
[  423.088291][T19602] netlink: 'syz.5.6515': attribute type 64 has an invalid length.
[  423.171957][T19608] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  423.207598][T19614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84
[  423.216813][T12006] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0015/input/input40
[  423.250153][T12006] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0015/input/input41
[  423.270488][T12006] kye 0003:0458:5012.0015: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[  423.401176][T19618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6520'.
[  423.411712][T12006] usb 2-1: USB disconnect, device number 21
[  423.514800][T19633] 9pnet_fd: Insufficient options for proto=fd
[  423.793086][T19643] overlayfs: failed to clone lowerpath
[  423.979638][T19660] rust_binder: Error while translating object.
[  423.979683][T19660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  423.986022][T19660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:91
[  423.986477][T19662] netlink: 'syz.5.6536': attribute type 3 has an invalid length.
[  424.103468][T19679] /dev/rnullb0: Can't open blockdev
[  424.296409][   T36] audit: type=1326 audit(1759601479.822:45743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.337902][   T36] audit: type=1326 audit(1759601479.822:45744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.369831][   T36] audit: type=1326 audit(1759601479.822:45745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.394315][   T36] audit: type=1326 audit(1759601479.822:45746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.462195][T19756] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  424.462230][T19756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  424.471726][   T36] audit: type=1326 audit(1759601479.822:45747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.508208][T19756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:114
[  424.542939][   T36] audit: type=1326 audit(1759601479.822:45748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.576732][   T36] audit: type=1326 audit(1759601479.822:45749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.600316][   T36] audit: type=1326 audit(1759601479.822:45750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  424.623793][T19767] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19767 comm=syz.0.6561
[  424.640014][T19765] overlayfs: failed to clone lowerpath
[  424.645761][   T36] audit: type=1326 audit(1759601479.822:45751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x50000
[  425.032054][T19782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122
[  425.367104][T19822] 9pnet_fd: Insufficient options for proto=fd
[  425.416982][T19824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=19824 comm=syz.1.6583
[  425.429653][T19824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=19824 comm=syz.1.6583
[  425.446436][T19824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=19824 comm=syz.1.6583
[  425.459258][T19824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=19824 comm=syz.1.6583
[  425.471994][T19824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=19824 comm=syz.1.6583
[  425.687675][T19848] 9pnet_fd: Insufficient options for proto=fd
[  425.850336][   T36] kauditd_printk_skb: 62 callbacks suppressed
[  425.850356][   T36] audit: type=1326 audit(1759601481.382:45814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19866 comm="syz.3.6598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  426.694394][T19910] 9pnet_fd: Insufficient options for proto=fd
[  426.694391][T19909] 9pnet_fd: Insufficient options for proto=fd
[  427.011627][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.023120][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.032627][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.041903][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.066217][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.096774][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.122948][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.149312][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.158517][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.167630][T19980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6624'.
[  427.213582][T19997] __vm_enough_memory: pid: 19997, comm: syz.5.6629, bytes: 21200010321920 not enough memory for the allocation
[  427.226377][T19998] netlink: 'syz.5.6629': attribute type 4 has an invalid length.
[  427.234154][T19997] netlink: 'syz.5.6629': attribute type 4 has an invalid length.
[  427.305448][T20002] Invalid ELF header magic: != ELF
[  427.596392][T20005] netlink: 'syz.1.6631': attribute type 63 has an invalid length.
[  428.160662][T20026] overlayfs: failed to clone upperpath
[  428.222248][T20042] overlayfs: failed to clone upperpath
[  428.280245][T20048] bridge_slave_1: left allmulticast mode
[  428.293347][T20048] bridge_slave_1: left promiscuous mode
[  428.304626][T20048] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.325531][T20048] bridge_slave_0: left allmulticast mode
[  428.344928][T20048] bridge_slave_0: left promiscuous mode
[  428.350667][T20048] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.779696][T20066] fuse: Unknown parameter 'fd0x00000000000000050000000000000000000000300000000000000000000'
[  429.119561][T20083] 9pnet_fd: Insufficient options for proto=fd
[  429.126343][T20083] netlink: 'syz.0.6660': attribute type 19 has an invalid length.
[  429.135061][T20083] overlay: ./file0 is not a directory
[  429.682476][T20131] overlayfs: disabling nfs_export due to verity=on
[  429.689184][T20131] overlayfs: missing 'lowerdir'
[  429.708535][T20133] sit0: entered promiscuous mode
[  429.715299][T20133] netlink: 'syz.1.6680': attribute type 1 has an invalid length.
[  429.934649][T20145] 9pnet_fd: Insufficient options for proto=fd
[  430.311534][T20171] netlink: 'syz.0.6695': attribute type 12 has an invalid length.
[  430.424111][T20211] overlayfs: failed to clone upperpath
[  430.632634][T20249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20249 comm=syz.1.6721
[  430.645500][T20249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=20249 comm=syz.1.6721
[  431.449888][   T36] audit: type=1326 audit(1759601486.982:45815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.0.6745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1638eec9 code=0x0
[  432.240370][T20349] overlayfs: failed to clone upperpath
[  432.547781][   T36] audit: type=1326 audit(1759601488.082:45816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20359 comm="syz.3.6758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3e598eec9 code=0x0
[  433.388550][T20374] syz.5.6764: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  433.397119][   T36] audit: type=1400 audit(2000000000.520:45817): avc:  denied  { connect } for  pid=20375 comm="syz.3.6765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  433.403667][T20374] CPU: 0 UID: 0 PID: 20374 Comm: syz.5.6764 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  433.403703][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  433.403726][T20374] Call Trace:
[  433.403735][T20374]  <TASK>
[  433.403751][T20374]  __dump_stack+0x21/0x30
[  433.403799][T20374]  dump_stack_lvl+0x10c/0x190
[  433.403834][T20374]  ? __cfi_dump_stack_lvl+0x10/0x10
[  433.403869][T20374]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  433.403903][T20374]  dump_stack+0x19/0x20
[  433.403935][T20374]  warn_alloc+0x1bc/0x2a0
[  433.403968][T20374]  ? stack_depot_save_flags+0x38/0x800
[  433.403995][T20374]  ? __cfi_warn_alloc+0x10/0x10
[  433.404027][T20374]  ? kasan_save_track+0x4f/0x80
[  433.404055][T20374]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  433.404078][T20374]  ? xskq_create+0x68/0x2a0
[  433.404110][T20374]  ? xsk_init_queue+0xb6/0x120
[  433.404142][T20374]  ? xsk_setsockopt+0x43f/0x6f0
[  433.404174][T20374]  ? do_sock_setsockopt+0x26a/0x400
[  433.404205][T20374]  ? __x64_sys_setsockopt+0x1b8/0x250
[  433.404238][T20374]  ? x64_sys_call+0x2adc/0x2ee0
[  433.404273][T20374]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  433.404315][T20374]  __vmalloc_node_range_noprof+0x135/0x1420
[  433.404357][T20374]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  433.404393][T20374]  ? avc_has_perm+0x144/0x220
[  433.404427][T20374]  ? kasan_save_alloc_info+0x40/0x50
[  433.404461][T20374]  ? __kasan_kmalloc+0x96/0xb0
[  433.404490][T20374]  vmalloc_user_noprof+0x77/0x90
[  433.404524][T20374]  ? xskq_create+0xdb/0x2a0
[  433.404556][T20374]  xskq_create+0xdb/0x2a0
[  433.404589][T20374]  xsk_init_queue+0xb6/0x120
[  433.404621][T20374]  xsk_setsockopt+0x43f/0x6f0
[  433.404653][T20374]  ? __cfi_xsk_setsockopt+0x10/0x10
[  433.404685][T20374]  ? do_futex+0x309/0x500
[  433.404712][T20374]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  433.404742][T20374]  ? security_socket_setsockopt+0x33/0xd0
[  433.404767][T20374]  ? __cfi_xsk_setsockopt+0x10/0x10
[  433.404808][T20374]  do_sock_setsockopt+0x26a/0x400
[  433.404845][T20374]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  433.404888][T20374]  __x64_sys_setsockopt+0x1b8/0x250
[  433.404925][T20374]  x64_sys_call+0x2adc/0x2ee0
[  433.404962][T20374]  do_syscall_64+0x58/0xf0
[  433.404990][T20374]  ? clear_bhb_loop+0x50/0xa0
[  433.405014][T20374]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  433.405051][T20374] RIP: 0033:0x7ff96198eec9
[  433.405073][T20374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.405113][T20374] RSP: 002b:00007ff962882038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  433.405141][T20374] RAX: ffffffffffffffda RBX: 00007ff961be5fa0 RCX: 00007ff96198eec9
[  433.405162][T20374] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  433.405180][T20374] RBP: 00007ff961a11f91 R08: 0000000000000004 R09: 0000000000000000
[  433.405198][T20374] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.405216][T20374] R13: 00007ff961be6038 R14: 00007ff961be5fa0 R15: 00007fff2af17158
[  433.405240][T20374]  </TASK>
[  433.407749][T20374] Mem-Info:
[  433.441143][T20379] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.445875][T20374] active_anon:5567 inactive_anon:19 isolated_anon:0
[  433.445875][T20374]  active_file:10228 inactive_file:29006 isolated_file:0
[  433.445875][T20374]  unevictable:16392 dirty:87 writeback:0
[  433.445875][T20374]  slab_reclaimable:6717 slab_unreclaimable:83575
[  433.445875][T20374]  mapped:28980 shmem:188 pagetables:1080
[  433.445875][T20374]  sec_pagetables:0 bounce:0
[  433.445875][T20374]  kernel_misc_reclaimable:0
[  433.445875][T20374]  free:1465380 free_pcp:2228 free_cma:0
[  433.457584][T20382] EXT4-fs: Ignoring removed check option
[  433.461139][T20374] Node 0 active_anon:22268kB inactive_anon:76kB active_file:40912kB inactive_file:116024kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:115920kB dirty:348kB writeback:0kB shmem:752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7224kB pagetables:4320kB sec_pagetables:0kB all_unreclaimable? no
[  433.466456][   T36] audit: type=1400 audit(2000000000.590:45818): avc:  denied  { mounton } for  pid=20373 comm="syz.5.6764" path="/309/file0" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  433.472378][T20374] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:1132kB free_cma:0kB
[  433.488560][T20382] No source specified
[  433.493945][T20374] lowmem_reserve[]: 0 3921 3921
[  433.881223][T20374] Normal free:2901180kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22268kB inactive_anon:76kB active_file:40912kB inactive_file:116024kB unevictable:65568kB writepending:348kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3132kB local_pcp:1396kB free_cma:0kB
[  433.913112][T20374] lowmem_reserve[]: 0 0 0
[  433.917549][T20374] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  433.933104][T20374] Normal: 413*4kB (UME) 907*8kB (UME) 991*16kB (UME) 979*32kB (UME) 911*64kB (UME) 271*128kB (UME) 128*256kB (UME) 67*512kB (ME) 38*1024kB (UME) 22*2048kB (UME) 635*4096kB (UM) = 2901084kB
[  433.951979][T20374] 55853 total pagecache pages
[  433.956705][T20374] 43 pages in swap cache
[  433.960971][T20374] Free swap  = 124472kB
[  433.965326][T20374] Total swap = 124996kB
[  433.969496][T20374] 2097051 pages RAM
[  433.973316][T20374] 0 pages HighMem/MovableOnly
[  433.978272][T20374] 351537 pages reserved
[  433.980915][   T36] audit: type=1400 audit(2000000001.110:45819): avc:  denied  { listen } for  pid=20390 comm="syz.1.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  433.982435][T20374] 0 pages cma reserved
[  433.985616][T20374] Memory allocations:
[  434.011772][T20374]          0 B        0 init/main.c:1370 func:do_initcalls
[  434.020036][T20391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=20391 comm=syz.1.6769
[  434.024984][T20374]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  434.043321][T20374]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  434.051441][T20391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=20391 comm=syz.1.6769
[  434.053758][T20374]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  434.066715][T20391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=20391 comm=syz.1.6769
[  434.074166][T20374]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  434.084617][T20391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=20391 comm=syz.1.6769
[  434.092568][T20374]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  434.113397][T20374]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  434.121364][T20374]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  434.129307][T20374]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  434.137407][T20374]          0 B        0 init/initramfs.c:101 func:find_link
[  434.175644][T20408] EXT4-fs: Conflicting test_dummy_encryption options
[  434.638468][T20431] /dev/rnullb0: Can't lookup blockdev
[  434.768660][T20446] tipc: Trying to set illegal importance in message
[  434.953765][T20447] __nla_validate_parse: 60 callbacks suppressed
[  434.953790][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6788'.
[  435.055807][   T36] audit: type=1400 audit(2000000002.190:45820): avc:  denied  { listen } for  pid=20457 comm="syz.1.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  435.181693][T20472] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  435.256899][T20484] netlink: 'syz.5.6803': attribute type 1 has an invalid length.
[  435.948181][T20502] 9pnet_fd: Insufficient options for proto=fd
[  436.061461][   T36] audit: type=1400 audit(2000000003.190:45821): avc:  denied  { sys_nice } for  pid=20523 comm="syz.5.6818" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  436.083127][T20524] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6818'.
[  436.261889][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6826'.
[  436.875040][T20565] 9pnet_fd: Insufficient options for proto=fd
[  436.977347][T20575] /dev/rnullb0: Can't lookup blockdev
[  437.071760][T20587] /dev/rnullb0: Can't lookup blockdev
[  437.134355][T20598] netlink: 'syz.3.6844': attribute type 5 has an invalid length.
[  437.142338][T20598] netlink: 'syz.3.6844': attribute type 5 has an invalid length.
[  437.150304][T20598] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6844'.
[  438.016744][   T36] audit: type=1326 audit(2000000005.150:45822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20612 comm="syz.5.6849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff96198eec9 code=0x0
[  438.507730][T20631] overlayfs: failed to resolve './file0:/': -2
[  438.523897][T20634] /dev/rnullb0: Can't lookup blockdev
[  438.623857][T20655] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526
[  438.633314][T20655] 9pnet_fd: Insufficient options for proto=fd
[  439.233474][T20696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=20696 comm=syz.0.6878
[  439.402655][T20730] /dev/loop0: Can't lookup blockdev
[  439.493194][T20743] cgroup: name respecified
[  439.806802][T20766] netlink: 'syz.0.6899': attribute type 1 has an invalid length.
[  439.818609][T20766] tipc: Cannot configure node identity twice
[  439.825529][T20766] overlayfs: failed to clone lowerpath
[  440.226964][T20782] /dev/rnullb0: Can't lookup blockdev
[  440.378211][T20822] cgroup: Unknown subsys name 'obj_user'
[  440.400313][   T36] audit: type=1326 audit(2000000007.530:45823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20825 comm="syz.5.6919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96198eec9 code=0x0
[  440.423646][T20828] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  440.578369][T20834] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6919'.
[  440.853553][   T36] audit: type=1326 audit(2000000007.980:45824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20776 comm="syz.3.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x7fc00000
[  458.278461][T20872] overlayfs: failed to clone upperpath
[  458.927871][T20918] overlayfs: failed to clone upperpath
[  459.820891][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6974'.
[  460.124872][   T36] audit: type=1400 audit(2000000027.250:45825): avc:  denied  { module_load } for  pid=20982 comm="syz.0.6975" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=72675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  460.366084][T20985] tipc: Started in network mode
[  460.371604][T20985] tipc: Node identity f61a801e8af1, cluster identity 4711
[  460.379192][T20985] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  460.386113][T20985] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  460.409458][   T12] tipc: Subscription rejected, illegal request
[  460.656736][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6983'.
[  460.968490][T21013] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  461.494907][   T65] tipc: Node number set to 2095808542
[  461.839467][T21046] overlayfs: failed to clone lowerpath
[  461.881443][T21055] overlayfs: failed to clone lowerpath
[  461.887942][T21055] overlayfs: failed to clone lowerpath
[  461.992161][T21067] ·ôE'z: renamed from wg2 (while UP)
[  462.020388][T21071] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  462.023179][T21073] syz.5.7006: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  462.044438][T21073] CPU: 1 UID: 0 PID: 21073 Comm: syz.5.7006 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  462.044480][T21073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  462.044498][T21073] Call Trace:
[  462.044507][T21073]  <TASK>
[  462.044517][T21073]  __dump_stack+0x21/0x30
[  462.044556][T21073]  dump_stack_lvl+0x10c/0x190
[  462.044589][T21073]  ? __cfi_dump_stack_lvl+0x10/0x10
[  462.044622][T21073]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  462.044658][T21073]  dump_stack+0x19/0x20
[  462.044690][T21073]  warn_alloc+0x1bc/0x2a0
[  462.044724][T21073]  ? stack_depot_save_flags+0x38/0x800
[  462.044754][T21073]  ? __cfi_warn_alloc+0x10/0x10
[  462.044786][T21073]  ? kasan_save_track+0x4f/0x80
[  462.044811][T21073]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  462.044835][T21073]  ? xskq_create+0x68/0x2a0
[  462.044872][T21073]  ? xsk_init_queue+0xb6/0x120
[  462.044905][T21073]  ? xsk_setsockopt+0x43f/0x6f0
[  462.044938][T21073]  ? do_sock_setsockopt+0x26a/0x400
[  462.044972][T21073]  ? __x64_sys_setsockopt+0x1b8/0x250
[  462.045014][T21073]  ? x64_sys_call+0x2adc/0x2ee0
[  462.045052][T21073]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  462.045093][T21073]  __vmalloc_node_range_noprof+0x135/0x1420
[  462.045133][T21073]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  462.045170][T21073]  ? avc_has_perm+0x144/0x220
[  462.045205][T21073]  ? kasan_save_alloc_info+0x40/0x50
[  462.045241][T21073]  ? __kasan_kmalloc+0x96/0xb0
[  462.045270][T21073]  vmalloc_user_noprof+0x77/0x90
[  462.045305][T21073]  ? xskq_create+0xdb/0x2a0
[  462.045337][T21073]  xskq_create+0xdb/0x2a0
[  462.045369][T21073]  xsk_init_queue+0xb6/0x120
[  462.045402][T21073]  xsk_setsockopt+0x43f/0x6f0
[  462.045434][T21073]  ? __cfi_xsk_setsockopt+0x10/0x10
[  462.045466][T21073]  ? do_futex+0x309/0x500
[  462.045494][T21073]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  462.045526][T21073]  ? security_socket_setsockopt+0x33/0xd0
[  462.045550][T21073]  ? __cfi_xsk_setsockopt+0x10/0x10
[  462.045582][T21073]  do_sock_setsockopt+0x26a/0x400
[  462.045615][T21073]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  462.045650][T21073]  __x64_sys_setsockopt+0x1b8/0x250
[  462.045685][T21073]  x64_sys_call+0x2adc/0x2ee0
[  462.045723][T21073]  do_syscall_64+0x58/0xf0
[  462.045752][T21073]  ? clear_bhb_loop+0x50/0xa0
[  462.045776][T21073]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  462.045814][T21073] RIP: 0033:0x7ff96198eec9
[  462.045835][T21073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.045857][T21073] RSP: 002b:00007ff962882038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  462.045884][T21073] RAX: ffffffffffffffda RBX: 00007ff961be5fa0 RCX: 00007ff96198eec9
[  462.045904][T21073] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  462.045922][T21073] RBP: 00007ff961a11f91 R08: 0000000000000004 R09: 0000000000000000
[  462.045941][T21073] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.045959][T21073] R13: 00007ff961be6038 R14: 00007ff961be5fa0 R15: 00007fff2af17158
[  462.045983][T21073]  </TASK>
[  462.085051][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7008'.
[  462.092813][T21073] Mem-Info:
[  462.361412][T21073] active_anon:5863 inactive_anon:651 isolated_anon:0
[  462.361412][T21073]  active_file:10228 inactive_file:29010 isolated_file:0
[  462.361412][T21073]  unevictable:16392 dirty:34 writeback:0
[  462.361412][T21073]  slab_reclaimable:6747 slab_unreclaimable:83795
[  462.361412][T21073]  mapped:30004 shmem:216 pagetables:1258
[  462.361412][T21073]  sec_pagetables:0 bounce:0
[  462.361412][T21073]  kernel_misc_reclaimable:0
[  462.361412][T21073]  free:1461278 free_pcp:5210 free_cma:0
[  462.393361][T21093] overlayfs: failed to clone lowerpath
[  462.407974][T21073] Node 0 active_anon:23452kB inactive_anon:2604kB active_file:40912kB inactive_file:116040kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:120016kB dirty:136kB writeback:0kB shmem:864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7440kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no
[  462.445701][T21073] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:4592kB free_cma:0kB
[  462.476362][T21073] lowmem_reserve[]: 0 3921 3921
[  462.481404][T21073] Normal free:2880856kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26904kB inactive_anon:2604kB active_file:40912kB inactive_file:116040kB unevictable:65568kB writepending:136kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15772kB local_pcp:13752kB free_cma:0kB
[  462.513943][T21073] lowmem_reserve[]: 0 0 0
[  462.518498][T21073] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  462.534390][T21073] Normal: 45*4kB (ME) 7*8kB (ME) 167*16kB (ME) 853*32kB (UME) 912*64kB (UME) 269*128kB (UME) 127*256kB (UME) 67*512kB (ME) 38*1024kB (UME) 21*2048kB (UME) 635*4096kB (UM) = 2872700kB
[  462.552911][T21073] 56517 total pagecache pages
[  462.559723][T21073] 675 pages in swap cache
[  462.564910][T21073] Free swap  = 121828kB
[  462.568573][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7017'.
[  462.569097][T21073] Total swap = 124996kB
[  462.569112][T21073] 2097051 pages RAM
[  462.569122][T21073] 0 pages HighMem/MovableOnly
[  462.578265][T21099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7017'.
[  462.583006][T21073] 351537 pages reserved
[  462.604449][T21073] 0 pages cma reserved
[  462.620909][T21073] Memory allocations:
[  462.625093][T21073]          0 B        0 init/main.c:1370 func:do_initcalls
[  462.632340][T21073]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  462.640853][T21073]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  462.649106][T21073]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  462.657360][T21073]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  462.665464][T21073]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  462.674087][T21073]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  462.682297][T21073]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  462.691330][T21073]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  462.699564][T21073]          0 B        0 init/initramfs.c:101 func:find_link
[  462.767897][T21123] overlayfs: failed to clone upperpath
[  462.803218][T21129] overlayfs: failed to clone upperpath
[  463.059012][T21195] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  463.964551][T21221] 9pnet_fd: Insufficient options for proto=fd
[  464.331450][T21228] veth1: entered allmulticast mode
[  465.169656][T21229] veth1: left allmulticast mode
[  469.908975][   T12] tipc: Disabling bearer <udp:syz2>
[  469.914290][   T12] tipc: Left network mode
[  478.951477][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'.
[  478.972544][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'.
[  479.520829][T21315] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7089'.
[  479.859025][T21341] overlayfs: failed to clone upperpath
[  480.242237][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'.
[  480.246777][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'.
[  480.255309][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7117'.
[  480.775935][   T36] audit: type=1400 audit(2000000047.910:45826): avc:  denied  { map } for  pid=21436 comm="syz.1.7128" path="socket:[74254]" dev="sockfs" ino=74254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  480.898774][T21453] netlink: 57 bytes leftover after parsing attributes in process `syz.5.7130'.
[  481.002001][T21475] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7142'.
[  481.515764][T21498] overlayfs: failed to clone upperpath
[  481.540953][T21503] 9pnet_fd: Insufficient options for proto=fd
[  481.606704][T21516] overlayfs: missing 'lowerdir'
[  481.671580][T21532] overlayfs: cannot append lower layer
[  482.233561][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7174'.
[  482.409033][T21574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7175'.
[  482.549222][T21606] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  482.599246][T21614] /dev/rnullb0: Can't lookup blockdev
[  483.090268][T21639] tmpfs: Unknown parameter ''
[  483.119459][T21643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=21643 comm=syz.0.7196
[  483.347266][T21654] overlayfs: failed to clone upperpath
[  484.063563][T21702] overlayfs: failed to clone upperpath
[  484.135716][T21719] incfs: Options parsing error. -22
[  484.141147][T21719] incfs: mount failed -22
[  484.146541][T21719] __nla_validate_parse: 2 callbacks suppressed
[  484.146561][T21719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7223'.
[  484.275334][   T36] audit: type=1400 audit(2000000051.410:45827): avc:  denied  { relabelto } for  pid=21745 comm="syz.0.7232" name="file0" dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  484.354894][T21758] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7238'.
[  484.793692][   T36] audit: type=1400 audit(2000000051.920:45828): avc:  denied  { unlink } for  pid=16880 comm="syz-executor" name="file0" dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  484.826701][T21798] /dev/loop0: Can't lookup blockdev
[  484.832717][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7252'.
[  484.841658][T21798] erspan0: entered promiscuous mode
[  485.019858][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7258'.
[  485.303211][T21875] tipc: Started in network mode
[  485.308214][T21875] tipc: Node identity 7f000001, cluster identity 4711
[  485.315024][T21875] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  485.324987][T21875] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  485.401616][T21898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=21898 comm=syz.0.7273
[  485.448300][T21906] netlink: 'syz.5.7277': attribute type 4 has an invalid length.
[  485.456485][T21906] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7277'.
[  485.690805][   T36] audit: type=1326 audit(2000000052.820:45829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.3.7287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x0
[  486.373916][T21964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  486.381189][T21964] IPv6: NLM_F_CREATE should be set when creating new route
[  486.388440][T21964] IPv6: NLM_F_CREATE should be set when creating new route
[  486.891737][T21983] batadv_slave_0: mtu less than device minimum
[  486.954086][T21991] netlink: 'syz.3.7304': attribute type 16 has an invalid length.
[  486.962363][T21991] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.7304'.
[  487.513289][T22009] tmpfs: Bad value for 'nr_inodes'
[  488.603652][T22037] overlayfs: failed to clone upperpath
[  488.624326][   T36] audit: type=1400 audit(2000000055.750:45830): avc:  denied  { listen } for  pid=22038 comm="syz.3.7317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  488.673636][T22051] netlink: 'syz.3.7321': attribute type 4 has an invalid length.
[  488.685827][T22051] netlink: 'syz.3.7321': attribute type 4 has an invalid length.
[  489.383813][T22064] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  489.465647][T22081] overlayfs: failed to clone lowerpath
[  489.596441][T22108] veth1: entered allmulticast mode
[  489.817979][T22126] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  489.894112][   T36] audit: type=1326 audit(2000000057.020:45831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22127 comm="syz.3.7349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3e598eec9 code=0x0
[  490.102596][T22153] netlink: 'syz.0.7357': attribute type 10 has an invalid length.
[  490.110590][T22153] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7357'.
[  490.396093][T22183] netlink: 'syz.5.7366': attribute type 1 has an invalid length.
[  490.403938][T22183] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7366'.
[  490.429628][T22107] veth1: left allmulticast mode
[  490.483047][T22194] overlayfs: failed to clone upperpath
[  490.570148][T22208] netlink: 'syz.1.7375': attribute type 6 has an invalid length.
[  490.578095][T22208] netlink: 'syz.1.7375': attribute type 4 has an invalid length.
[  490.586131][T22208] netlink: 'syz.1.7375': attribute type 6 has an invalid length.
[  490.593981][T22208] netlink: 5944 bytes leftover after parsing attributes in process `syz.1.7375'.
[  490.692161][T22211] /dev/rnullb0: Can't lookup blockdev
[  490.735065][T22215] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  490.963623][T22231] /dev/rnullb0: Can't lookup blockdev
[  491.026304][T22239] 9pnet_fd: Insufficient options for proto=fd
[  491.082430][T22247] batadv_slave_1: entered promiscuous mode
[  491.090042][T22246] batadv_slave_1: left promiscuous mode
[  491.316476][T22269] overlayfs: failed to clone lowerpath
[  492.037294][   T36] audit: type=1326 audit(2000000059.170:45832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.7415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb6378eec9 code=0x0
[  492.060583][   T36] audit: type=1326 audit(2000000059.170:45833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.1.7415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb6378eec9 code=0x0
[  492.106099][T22322] netlink: 25 bytes leftover after parsing attributes in process `syz.3.7413'.
[  492.384368][T22345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=22345 comm=syz.0.7425
[  492.852754][T22353] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7428'.
[  493.035708][T22380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22380 comm=syz.0.7438
[  493.380608][T22390] devpts: called with bogus options
[  493.401713][T22398] fuse: Bad value for 'fd'
[  493.435879][T22404] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  493.551877][T22410] 9p: Unknown Cache mode or invalid value mbinderfs/binder1
[  493.758757][T22434] overlayfs: failed to clone upperpath
[  493.953662][T22449] /dev/loop0: Can't lookup blockdev
[  494.601954][   T36] audit: type=1326 audit(2000000061.730:45834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22462 comm="syz.3.7466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e598eec9 code=0x7fc00000
[  495.482553][T22525] overlayfs: failed to clone upperpath
[  495.775056][T22533] netlink: 'syz.0.7490': attribute type 5 has an invalid length.
[  495.782892][T22533] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7490'.
[  495.792851][T22533] netlink: 'syz.0.7490': attribute type 30 has an invalid length.
[  496.826709][   T36] audit: type=1400 audit(2000000063.960:45835): avc:  denied  { connect } for  pid=22600 comm="syz.3.7514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  496.847238][   T36] audit: type=1326 audit(2000000063.960:45836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22600 comm="syz.3.7514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fe3e598eec9 code=0x0
[  497.019764][T22624] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7521'.
[  497.028818][T22624] z00ªX¹¦: renamed from gretap0 (while UP)
[  497.035605][T22624] z00ªX¹¦: entered allmulticast mode
[  497.055994][T22629] overlayfs: failed to clone lowerpath
[  497.128335][   T36] audit: type=1326 audit(2000000064.260:45837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22627 comm="syz.0.7523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d1638eec9 code=0x0
[  497.171456][T22640] fuse: Bad value for 'group_id'
[  497.176575][T22640] fuse: Bad value for 'group_id'
[  497.289404][T22689] 9pnet_fd: Insufficient options for proto=fd
[  497.340462][T22698] fuseblk: Bad value for 'rootmode'
[  497.346244][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7536'.
[  497.380266][T22702] fuse: Unknown parameter ''
[  497.477482][T22721] overlayfs: failed to clone lowerpath
[  497.481349][T22723] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7546'.
[  497.547140][T22733] netlink: 'syz.5.7551': attribute type 1 has an invalid length.
[  497.918362][T22753] overlayfs: failed to clone lowerpath
[  497.935257][T22755] netlink: 'syz.0.7559': attribute type 1 has an invalid length.
[  497.995347][   T37] INFO: task syz.4.5439:16371 blocked for more than 122 seconds.
[  498.003209][   T37]       Not tainted syzkaller #0
[  498.008211][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  498.016990][   T37] task:syz.4.5439      state:D stack:0     pid:16371 tgid:16371 ppid:13334  flags:0x00004006
[  498.027750][   T37] Call Trace:
[  498.031544][   T37]  <TASK>
[  498.034522][   T37]  __schedule+0x1322/0x1df0
[  498.039404][   T37]  ? __sched_text_start+0x10/0x10
[  498.044771][   T37]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  498.050937][   T37]  ? _raw_spin_unlock+0x45/0x60
[  498.056096][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  498.062008][   T37]  schedule+0xc6/0x240
[  498.066236][   T37]  __fuse_simple_request+0xdb1/0x1980
[  498.071642][   T37]  ? __cfi___fuse_simple_request+0x10/0x10
[  498.077571][   T37]  ? __cfi_autoremove_wake_function+0x10/0x10
[  498.083753][   T37]  ? __kasan_check_write+0x18/0x20
[  498.088981][   T37]  ? _raw_spin_lock+0x8c/0x120
[  498.093773][   T37]  ? __cfi__raw_spin_lock+0x10/0x10
[  498.099099][   T37]  ? __cfi_autoremove_wake_function+0x10/0x10
[  498.105232][   T37]  ? fuse_lock_owner_id+0x154/0x190
[  498.110547][   T37]  fuse_flush+0x909/0x1d50
[  498.115067][   T37]  ? arch_stack_walk+0x10b/0x170
[  498.120099][   T37]  ? __cfi_fuse_flush+0x10/0x10
[  498.125018][   T37]  ? stack_trace_save+0x9d/0xe0
[  498.129919][   T37]  ? stack_depot_save_flags+0x38/0x800
[  498.135450][   T37]  ? x64_sys_call+0x1686/0x2ee0
[  498.140336][   T37]  ? do_syscall_64+0x58/0xf0
[  498.144989][   T37]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  498.151131][   T37]  ? __kasan_check_write+0x18/0x20
[  498.156309][   T37]  ? task_work_add+0x258/0x3f0
[  498.161101][   T37]  ? __cfi_task_work_add+0x10/0x10
[  498.166285][   T37]  ? __kasan_check_write+0x18/0x20
[  498.171425][   T37]  ? _raw_spin_lock+0x8c/0x120
[  498.176227][   T37]  ? __cfi__raw_spin_lock+0x10/0x10
[  498.181482][   T37]  ? __cfi_fuse_flush+0x10/0x10
[  498.186384][   T37]  filp_close+0xbd/0x160
[  498.190656][   T37]  __close_range+0x50e/0x6c0
[  498.195285][   T37]  ? __cfi___close_range+0x10/0x10
[  498.200415][   T37]  ? __kasan_check_write+0x18/0x20
[  498.205658][   T37]  ? fpregs_restore_userregs+0x11d/0x260
[  498.211331][   T37]  __x64_sys_close_range+0x7e/0x90
[  498.216999][   T37]  x64_sys_call+0x1686/0x2ee0
[  498.221825][   T37]  do_syscall_64+0x58/0xf0
[  498.226600][   T37]  ? clear_bhb_loop+0x50/0xa0
[  498.231725][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  498.238010][   T37] RIP: 0033:0x7f2987f8eec9
[  498.242627][   T37] RSP: 002b:00007ffede8f9cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  498.251141][   T37] RAX: ffffffffffffffda RBX: 0000000000058ea5 RCX: 00007f2987f8eec9
[  498.259338][   T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  498.267454][   T37] RBP: 00007f29881e7da0 R08: 0000000000000001 R09: 00000010de8f9fbf
[  498.275583][   T37] R10: 0000001b2d520000 R11: 0000000000000246 R12: 00007f29881e5fac
[  498.283585][   T37] R13: 00007f29881e5fa0 R14: ffffffffffffffff R15: 00007ffede8f9de0
[  498.291630][   T37]  </TASK>
[  498.294880][   T37] NMI backtrace for cpu 0
[  498.294938][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  498.294987][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  498.295002][   T37] Call Trace:
[  498.295010][   T37]  <TASK>
[  498.295019][   T37]  __dump_stack+0x21/0x30
[  498.295054][   T37]  dump_stack_lvl+0x10c/0x190
[  498.295084][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  498.295117][   T37]  dump_stack+0x19/0x20
[  498.295144][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  498.295172][   T37]  ? rcu_read_unlock_special+0xab/0x410
[  498.295201][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  498.295226][   T37]  ? sched_show_task+0x379/0x560
[  498.295256][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  498.295282][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  498.295312][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  498.295341][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  498.295369][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  498.295398][   T37]  watchdog+0xd8f/0xed0
[  498.295430][   T37]  ? __cfi_watchdog+0x10/0x10
[  498.295460][   T37]  ? __kasan_check_read+0x15/0x20
[  498.295493][   T37]  ? __kthread_parkme+0x138/0x180
[  498.295515][   T37]  ? schedule+0xc6/0x240
[  498.295544][   T37]  kthread+0x2ca/0x370
[  498.295567][   T37]  ? __cfi_watchdog+0x10/0x10
[  498.295597][   T37]  ? __cfi_kthread+0x10/0x10
[  498.295621][   T37]  ret_from_fork+0x67/0xa0
[  498.295652][   T37]  ? __cfi_kthread+0x10/0x10
[  498.295676][   T37]  ret_from_fork_asm+0x1a/0x30
[  498.295711][   T37]  </TASK>
[  498.448879][   T37] Sending NMI from CPU 0 to CPUs 1:
[  498.454112][    C1] NMI backtrace for cpu 1
[  498.454127][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  498.454148][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  498.454160][    C1] RIP: 0010:pv_native_safe_halt+0x17/0x20
[  498.454183][    C1] Code: cc cc cc b8 de e5 d6 e0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90
[  498.454198][    C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2
[  498.454214][    C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff858d20be
[  498.454228][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000069f194
[  498.454239][    C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6
[  498.454252][    C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd980
[  498.454265][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb1da8
[  498.454277][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  498.454292][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  498.454304][    C1] CR2: 00007fe3e5bb4198 CR3: 000000010b2ce000 CR4: 00000000003526b0
[  498.454320][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  498.454330][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  498.454341][    C1] Call Trace:
[  498.454347][    C1]  <TASK>
[  498.454355][    C1]  default_idle+0x17/0x30
[  498.454373][    C1]  arch_cpu_idle+0xd/0x20
[  498.454389][    C1]  default_idle_call+0x3f/0x80
[  498.454406][    C1]  do_idle+0x1a0/0x470
[  498.454424][    C1]  ? idle_inject_timer_fn+0x80/0x80
[  498.454443][    C1]  cpu_startup_entry+0x48/0x70
[  498.454460][    C1]  start_secondary+0x12e/0x140
[  498.454482][    C1]  common_startup_64+0x13b/0x157
[  498.454506][    C1]  </TASK>