last executing test programs:

2m36.166086802s ago: executing program 0 (id=1855):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000140000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x45809000)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m36.165567772s ago: executing program 0 (id=1856):
syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x842)
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x8e, 0x400)
syz_open_dev$evdev(&(0x7f00000001c0), 0x7, 0x20200)
r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x680881)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105006401010000000000000000000000000000000000320000"], 0x1fc}}, 0x0)
ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0)
r3 = dup(r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x11000000)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000004840)={{0x2, 0x0, 0x80, {0x5000, 0x80a0000, 0x3}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e6c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b07900"})
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000109090300000000000000000100000308000340000000030900010073797a3000000000087384494300c70c08000640000000000c0004800800014000000008"], 0x44}, 0x1, 0x0, 0x0, 0x2040000}, 0x20000000)
setgid(0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000)
madvise(&(0x7f000028d000/0x3000)=nil, 0x3000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

2m36.129003532s ago: executing program 0 (id=1857):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x31)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0xfdfdffffffffffff)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

2m36.029601894s ago: executing program 0 (id=1860):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x111843, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
mkdir(0x0, 0x0)
chdir(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000), 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'unlock', ' ', 'mem'}, 0xb)
r4 = userfaultfd(0x801)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x111843, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) (async)
mkdir(0x0, 0x0) (async)
chdir(0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) (async)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000), 0xa) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async)
write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'unlock', ' ', 'mem'}, 0xb) (async)
userfaultfd(0x801) (async)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13) (async)
ioctl$TCXONC(r5, 0x540a, 0x0) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)

2m36.027864374s ago: executing program 0 (id=1861):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socket(0x1e, 0x4, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, &(0x7f0000000100)=""/159, 0x9f, 0x40, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80)

2m35.903628565s ago: executing program 0 (id=1862):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ff88f1220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000321b00000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c0000000200000000000000000000000000000000000000000000000103400000000000000000000000000000000000000000000000000000000000000000002b00000002000000ac141400000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003c0000000af8ff00fe88000000000000000000000000000100000000040200"], 0x1fc}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4)

2m35.849415716s ago: executing program 32 (id=1862):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ff88f1220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000321b00000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c0000000200000000000000000000000000000000000000000000000103400000000000000000000000000000000000000000000000000000000000000000002b00000002000000ac141400000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003c0000000af8ff00fe88000000000000000000000000000100000000040200"], 0x1fc}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4)

2m27.300678688s ago: executing program 2 (id=2078):
prlimit64(0x0, 0x8, &(0x7f0000000000)={0x0, 0x88}, 0x0)
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfefff000, 0x1000}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0)
prlimit64(r2, 0x3, &(0x7f0000000180)={0x8ab, 0xb}, &(0x7f00000001c0)) (async, rerun: 32)
syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) (rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async, rerun: 64)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (rerun: 64)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{r0}, 0x3, &(0x7f0000000080)=[0xe, 0x6, 0x7], 0x7, 0xd, 0x1})

2m26.735274176s ago: executing program 2 (id=2092):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000)
r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
process_vm_readv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x3ff}, @cpuid={0x2, 0x18, {0x4, 0x9}}, @cpuid={0x2, 0x18, {0x7fff, 0x3}}, @cpuid={0x2, 0x18, {0x7, 0x1}}, @uexit={0x0, 0x18, 0x7ffffffffffffffe}, @cpuid={0x2, 0x18, {0x6, 0x8}}, @code={0x1, 0x52, {"f30fc77104260f1b1de8000000400f017b008f4978db0d8e73c86d0fc7691ac4816d71e306c40239a71766450f5e4355b805000000b96c0000000f01d9360965e1"}}, @code={0x1, 0x53, {"67410f01c9b9b70b0000b802000000ba000000000f30c4a16d66bdbe000000410f0940d3e5363e2e66f3903e6467470f01cbf465f2430f42150a000000f3400fa6c8"}}, @cpuid={0x2, 0x18, {0x3, 0xe}}, @cpuid={0x2, 0x18, {0x3, 0x1}}, @code={0x1, 0x5e, {"b98d030000b800000080ba000000000f302e0faef8f3450f00d5c483fd44ed36440fc7fcb9800000c00f3235001000000f3066420fc730c441bc5f5346b9400b00000f32c4e178ae150d000000"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x9}], 0x1f3})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0xbcb7}]})

2m26.674084026s ago: executing program 2 (id=2093):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = epoll_create1(0x80000)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00')
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
fchdir(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000001})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x66, 0x100)
dup3(r4, 0xffffffffffffffff, 0x80000)

2m26.399772341s ago: executing program 2 (id=2099):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000540), 0x81, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0xac506000)
r2 = fsopen(&(0x7f00000000c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r5, 0x800000008401, 0x1)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000000280)=""/34, 0x22)
pipe(&(0x7f0000000500)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x80, 0x9)
getdents(r7, 0x0, 0x0)
r9 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffffffff7fff, 0x54200)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000380)={r9, 0x1, {0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x4, 0x11, 0x0, "7ba0dcac13137a7a471ed61aaa3ede1112e8f3e1061721741eff458b9f13211dc15f6650a17bd679ecb419d0128737ceb3461563741f457eb1f0c73aa893ce97", "4fbe552a00a5509842cda2a22094bae88727c2d91b4187901c0c1fc970378de7fc6f772a2d5095dd9da806a1c08b512549fb36ef8d4c0f186dc7d214c7e831df", "77f856dee50505296daee400c99b8605b4d6feba1369ff28415eb2bd823b2ba4", [0x1, 0x1caf]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
umount2(&(0x7f00000004c0)='./file0\x00', 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0)
read$FUSE(r11, &(0x7f0000001180)={0x2020}, 0x2020)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/144, 0x90, 0x1, 0x29}, @fda={0x66646185, 0x0, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
madvise(&(0x7f00006aa000/0x2000)=nil, 0x2000, 0xe)

2m25.508142923s ago: executing program 2 (id=2115):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x45, &(0x7f0000000180), 0x8)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
creat(0x0, 0x22)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', r5, 0x1, 0x40, 0x8000, 0xb64, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x3c, 0xe3, 0x1, 0x3, [{@multicast2, 0x10}, {@multicast2, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x8}, {@local}, {@broadcast, 0x7fffffff}, {@multicast1, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x1a, 0x3, 0xb, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x80000001}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x4}, {@broadcast, 0x1000}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x6}, {@loopback, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}]}})
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r6, r0, 0x0, 0x80000000)

2m25.354419505s ago: executing program 2 (id=2119):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fcntl$notify(r0, 0x402, 0x80000020)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f00000003c0)=""/244, &(0x7f00000001c0)=0xf4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x2000000)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200022, 0x0)

2m25.289029016s ago: executing program 33 (id=2119):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fcntl$notify(r0, 0x402, 0x80000020)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f00000003c0)=""/244, &(0x7f00000001c0)=0xf4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x2000000)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200022, 0x0)

2m3.478734146s ago: executing program 3 (id=2656):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="b1616e616d650909ecdb386881cc6e616db4a75058e56f5528fe"])
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)

2m3.358066648s ago: executing program 3 (id=2657):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000400)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xce, 0x0, &(0x7f0000002940))

2m3.356288208s ago: executing program 3 (id=2658):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="0205"], 0x20}}, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd01", 0x3}], 0x1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r6, 0x8010aebc, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600)
r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011b0000f300402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x1}})
setresuid(0x0, 0x0, 0xee01)
faccessat(r5, 0x0, 0x3c6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x45809000)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, 0x0, &(0x7f0000000080))

2m1.854972029s ago: executing program 3 (id=2688):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000040)) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6fb794593ccb97a081b4910f4b8b3c1055d018a4515ee8e2bd398c602434cc9e5c5cc08c283173126f63297443da489b58008ecc3c20d569c959178c1f393748a5fc89cf47537b30aee2d4de78caa39f9adc186a9a141d162c3e9117c0b33b9ea4fa12aaa6409921b9b8e7fb9b1d137437ba9132c4", 0x75}, {&(0x7f0000000280)="e6664a18239f2dd7171a04301503c8c97086ba14a7113ce72c23bc2419cb6b48002fcd61d4ec87319f6de9827a684095fde78869ae974b4ef9503349460fdee16337856d180186e93193423bc3a670abb8808d96db2cae18014cd433fba80ae488b70561830d56f942480b9414f26d295b594e567b9a9360c33a92fe7517fc86fce4eea3920ea59874fe4e3442f619c036fc", 0x92}, {&(0x7f0000000340)="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", 0x461}], 0x3, &(0x7f0000001340)=ANY=[], 0x110}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="b03e2cf377b008743dd4cda76e2f4de152d072826aa31a7f811789e11974c19bdca095e1d2565d04d39bebc397c429eb6622f1ac3b9e8de17870e59048e09549bf243c2619", 0x45}], 0x1}}], 0x3, 0x931766f6319eed40)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"})
futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) (async)
fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00'}) (async)
r7 = syz_open_procfs(r6, &(0x7f00000001c0)='schedstat\x00')
read$FUSE(r2, &(0x7f0000004680)={0x2020}, 0x2020) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000c4024f00000000000800000000000000ec50503ccbe49b1876b27b3595abe82c"]) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0})

2m1.78545165s ago: executing program 3 (id=2691):
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x19}) (async)
socket$inet6(0xa, 0x80000, 0x2)
r0 = socket$inet6(0xa, 0x80004, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast2, r1}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x8001) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21228082}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4040800) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "448afd69643c66db9e5cd7624b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x86, 0xfa, "885e246dd69d54bc866b3e610f736ff22fb73f313390df435f43cc5bf1872a59dd832b94d7ad58633fe4a308ae2411d8ea0b9a68cdaa8351732f55c05e5cbb1f0dbac40d5db4b8791158a901a31cb99221e84ba95d94aa17709e5194500b2155748776887a29808242ee5deb1f7d2e81c8560869215fb3258699925c917b8445c675"}, @NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "45eae7fb812507f549dfeab748739552fd891d47dac1b3fc8976d21559587ac548c47bbb851e613c4f36130686eec1efd79c94bdab5af29ff7905db024a78f74ef7ab1418cb35af2e63c4d127188dbe196ed32e8c517d583d7246be73bb41d679cfcfd161b8b85846a57aa85dca485fd200d611ebce5ff1bcb6bb8fe48caa844d63aed324f240ebc55314f1a5aac5a2113d400861a322b8ec5a1a65e3f03ad943f4f6d8f231b242aa3b849792c49781484f08722071ee61abc2ac9227ed285bafba2e9a3e870256bc0a773e7769b8da51f20f1cf0509619789fcf181f5b0ee1615b523c1d3abe8466e1cf13f3af48462d98aeaf2d794"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffa}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}]]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async)
recvfrom(r4, &(0x7f0000000640)=""/250, 0xfa, 0x2020, &(0x7f0000000740)=@phonet={0x23, 0x3, 0x80, 0xc0}, 0x80)
sendmmsg(r4, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[{0x58, 0x1, 0x3, "1fd8dc84754ffae80510bbed5e62d58263e83e6f9553a05087c5aae302c7af49198b7069dde6768573da6f35e8f4e1c804fb970f4794f78c8d7f60907e57a6518f95"}, {0x110, 0x10a, 0x8, "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"}, {0xc8, 0x84, 0x2, "91b0c863057534bc6bb660c2b929aaea83d82da3c7f05e49df1afe6ff5deec6be810e59c336e04c232f5266d28bf69349dc67034306e27a87f1313dd1266a7dcb4cea099b8fd0229aa9e5f09c81294f33a92eeb1cdc7375471f0a56787f006b3a3de284295511d693f80bc92f427f2082a99a70cbe67878a7c68fdddb7f5d455c72580d477c76269ff45770335ca47687617bd5746425abb77dbad6df3a382cd48af9bf7da5554080b8aff44a2841216769500e03f"}, {0x20, 0x1, 0x8, "743a19be1b704bfe4859efba2383"}, {0x1010, 0x0, 0x9, "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"}], 0x1260}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a80)="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", 0x1000}], 0x1, &(0x7f0000002ac0)=[{0xf0, 0x6, 0x3, "b0f4bf87595167577107a0e4ae168b673c750d8e3d956bf253371b1712363765c08274cbed5f89a38454ed1f16053570d01f92f3e7c7512c3c6e38482b8a3df18c3affaa57d7147415411ebbded3c8a09a5e61914f2fb16c487629710d139812e4b7f17e6ccf6e0b5e7ad7a09fb33f7430b137f3d2ba004b97942fd6d890184f42691c3fb6e47a82ae4f1761c06d53e80795e0ec688824f8ae1692e543b5a76124504da4105577b43676cc6e78784bb884c38c3ddde581950251b0c0b07771c80697c9f4bfa0a754b381f5e48c3ce46e0c7a5e4a3f1a02b6b91a7992f8"}, {0x108, 0x0, 0x8, "616ce13eb28f812f1efa08907c27d6c26377c2116a6f5ad6f2bb4d9a5e495f7b3adbe18a84aab163aa28091e844f93bd99b7f57586ee0bc16f0c59d7cb9f6a5555ee0162de1267c2e1bff7e31c2d13bff41dfb97ec848157209a66fcb89d8baa37f7cc40001f419dc0b139c5171d6a0b9ba84a9e1888167ada2d4f650b075a48da9b208d94059d5248077592e842a8551899535d3146b877242c782ed0e1ff98e98e4b77c0aed31fec3b02ac6e454166c0d7ed4664c51b38ead5d06044ab011a8b7dd8c66418822e7aad0e073a832af5e735939dbecc425d93324048fae52ec7ca3ecc08c6c658dddfe80b1a9253b850801ade542b"}, {0x50, 0x119, 0xfffffff8, "e6b9127db0a4482f41d4d24a851fcf1eefa998ca4e021871cd7e15d1122581945318b43f868d71b9d8cc64e162531afe452c21253c5ba127a2a3"}, {0x78, 0xff, 0xc8d, "169b673486d626bd55f35e76e1be164a3959df3428c193751e0852b450dc416351eedc39fd687a2bf185c869067c909572019e612e859e77bc73f31a513ffc362c054269c5739945efb4ccee57a9ab18d389adc8f807b42f07dfbc1da84a515dbd"}, {0x28, 0x103, 0x9, "cbbaaf09d95e5ddec73cac189c197a34ed2e651fa4ee"}, {0x100, 0x114, 0xe73, "d62695c68d92c5f8b9eff963f2930d745e6cf59c0863f17fedb7e8c716d561379c9fe9f62e2b7436d20a9dcb02c92e6c8c04cc899163c17b9950fd5edf67290f96e8fed6a3f8229729302496a3e00f96bc7b90bc8602d85d4f026616e81b06ef473ee82ba0d3fcaa5712bba59ae0a31a20e8dd0c11af77b52d7e9169bfbf6d03ed43272b46643e1e631b1ec2d59d2970404668336170b14f9756d896cb641ebf3618560c3c769747c8f665cc6653eeb02ef4409b0abce67e185c10746968a0404bbea6395f193564ddef9adeb62fcc6a106df9938090e4251b732424da54092ccca87d571291b6344c6f00beb656cc"}, {0x28, 0x10b, 0x9, "2438c1c4d305b67c9a7e1c50f07c371c1dd5cceb865954"}, {0xb0, 0x814c3728701346d6, 0x2, "0f0792b74fc5542cd59122143634d37f86a177138d960f0bbc8b24f8db99ba7738ca75b9492ef488c5eea159f2a86d7db3dc7a36a5cb4191c462abe5aa33a5c21e17592a419edcd8190ec3fccefdbd8c17cda5e2f0e1cc48251dd136bb664f63a792d684ef0be77955913a38ac5c602a67644a7c3d6f114b1c85fbfd90e95eee820bc75b9fec2b89b214e6483382d7d12ba9f14a0aeaac30f0f122711dd9ea62"}, {0xb0, 0x107, 0x101, "619f24f47f6517c6f2c3eca1625a0d6de6f05c2133e2f95597ede3b449c6d9c7a952779b397c76d92a304b8f1e97599010fa31603df4c928bcd35c6f64a83871c5287ed1d3972cdb161302eda8a0c0861563167c0cd2a2ba432f056c60b11c6534272e37a8eec4b05f9a16b1ea822620abf7f89c4770b742cd3c9fe969196aec3488b25790b3ff62e7af4e9877c6791288b47d68ae7fd54085"}, {0xd0, 0x84, 0x401, "8209ed37b5fd48ceb61627ee4eea7575dfe37a43287e6b311b4cfcabf138590073959fb25c98eb45de229ef928f6b127c544b2a64c05fa49f328f42028138e1219afa86a35a9a61a6e9ae92190d2d93841910d51fa32ea191c91f66dc830fd1d6cd77291a7af322f62a8931017cda286e925d633f6b030c98da072ac0554773ff5b8967e082e291d7d284979f9e9cd74cf48daf7ea6763e62ad4d02858c228c60a5b1c166d0151afffb3f5574340dae24700947c565fc093e200d9"}], 0x640}}, {{&(0x7f0000003100)=@sco={0x1f, @none}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003180)="3f7366f332ad495a42a25bcdc918b98c67bf2f4294b8d6e043689d06270e0ea62d468379b00ecb8e9fd68f5278d3679e2be8179416698ebfd19b3e7a6b5b9ada22cad6c4c710b8b343fc9d4e3959b28be2d2d9f1cb4d5bc2ce7116ecf2701153343af75613289666697124762cdecea7e45ddae738144667a5aa8da2fce97ee8deca5df5d8d328c6eb31a56b43f046460ec2b5dd6b68e6de1deaa7dd2481ee1e425708ea534d5cbd2bd890f3f0", 0xad}], 0x1, &(0x7f0000003280)=[{0x48, 0x114, 0x9, "07d06662454541cdb5c58b315c0af3d68307505883aa91e13d04c55bcc50ca1476651a53c5a41a5854099cf1aa13ba896458f8e8ab"}, {0x48, 0x10a, 0x6, "c040f90ef35868f8c21aa14fe6ca189a73e80f4120bf6a62893a3fbbdcffc1f57c1fd2a6f448051c855788d2a5b20840815d662ee3e16b16"}], 0x90}}, {{&(0x7f0000003340)=@isdn={0x22, 0xfd, 0x2, 0x5, 0x83}, 0x80, &(0x7f00000033c0), 0x0, &(0x7f0000003400)=[{0x48, 0x110, 0x2, "e7eaeceb61fe99f4c93ccc55ff117645535f15e2cd2fc0adb03c9e53624248b048bdf92424d8138d1c3f5c2453f9c1c9c4d0532a63e2827f"}], 0x48}}], 0x4, 0x20000080)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003580), 0x0, 0x0) (async)
r6 = syz_open_dev$loop(&(0x7f00000035c0), 0x5, 0x10000)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000003600)={r6, 0x4, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff0, 0x0, 0x6, 0x5, 0x10, "6b4df78f3374e6ff0abada10d7f53bcb8a8f5a92efb89127a92c621ebeaa65cf42e90998c24fbb14fceb1e8fda69a1a6c028ee947f06628934d5e88f694c67ac", "6902b02b59fbfd7530068bb8834451e2bdc591a2b143b9782442ba6f51aae5472a1fb689b1d6a50daa52c9f6b3bc5cca12ad76afa073567a8a46b9b579b8255b", "eab7e85788bcfd1b09db3e67dbf7c01703700dd7501f4d4c9cf840b2b80557f0", [0x2, 0xb92f]}}) (async)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003740)=""/127, &(0x7f00000037c0)=""/105, &(0x7f0000003840)=""/166, 0x8080000}) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000003940)={@loopback, @multicast2, r1}, 0xc) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000003980), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000039c0)=0x1) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003a80)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x28, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x28}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000003bc0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xb, 0x6, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000045}, 0x40010)
r10 = open_tree(r5, &(0x7f0000003cc0)='./file0\x00', 0x8000)
setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000003d00)={@dev={0xac, 0x14, 0x14, 0x19}, @loopback, 0x0, 0x3, [@remote, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010100]}, 0x1c) (async)
r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003d40), 0x1, 0x0)
recvmmsg$unix(r11, &(0x7f0000007280)=[{{&(0x7f0000003d80), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003e00)=""/105, 0x69}, {&(0x7f0000003e80)=""/125, 0x7d}, {&(0x7f0000003f00)=""/87, 0x57}, {&(0x7f0000003f80)=""/31, 0x1f}, {&(0x7f0000003fc0)=""/208, 0xd0}], 0x5, &(0x7f0000004140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f00000058c0)=[{&(0x7f00000042c0)=""/159, 0x9f}, {&(0x7f0000004380)=""/213, 0xd5}, {&(0x7f0000004480)=""/154, 0x9a}, {&(0x7f0000004540)=""/234, 0xea}, {&(0x7f0000004640)=""/203, 0xcb}, {&(0x7f0000004740)}, {&(0x7f0000004780)=""/175, 0xaf}, {&(0x7f0000004840)=""/96, 0x60}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000005980), 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005a00)=""/145, 0x91}, {&(0x7f0000005ac0)=""/220, 0xdc}, {&(0x7f0000005bc0)=""/32, 0x20}, {&(0x7f0000005c00)=""/210, 0xd2}, {&(0x7f0000005d00)=""/61, 0x3d}, {&(0x7f0000005d40)=""/66, 0x42}, {&(0x7f0000005dc0)=""/47, 0x2f}, {&(0x7f0000005e00)=""/32, 0x20}, {&(0x7f0000005e40)=""/126, 0x7e}], 0x9, &(0x7f0000005f80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000006100), 0x6e, &(0x7f0000006280)=[{&(0x7f0000006180)=""/186, 0xba}, {&(0x7f0000006240)=""/16, 0x10}], 0x2, &(0x7f00000062c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f00000063c0)=""/46, 0x2e}], 0x1, &(0x7f0000006440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000006480), 0x6e, &(0x7f0000006600)=[{&(0x7f0000006500)=""/230, 0xe6}], 0x1, &(0x7f0000006640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f00000067c0), 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006840)=""/85, 0x55}, {&(0x7f00000068c0)=""/92, 0x5c}, {&(0x7f0000006940)=""/162, 0xa2}], 0x3, &(0x7f0000006a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000006b80), 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006c00)=""/117, 0x75}, {&(0x7f0000006c80)=""/72, 0x48}], 0x2, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006e40)=""/54, 0x36}, {&(0x7f0000006e80)=""/134, 0x86}, {&(0x7f0000006f40)=""/227, 0xe3}], 0x3, &(0x7f0000007080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000070c0), 0x6e, &(0x7f0000007140), 0x0, &(0x7f0000007180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0xa, 0x40000001, &(0x7f0000007500))
setsockopt$inet6_group_source_req(r12, 0x29, 0x2b, &(0x7f0000007540)={0x8, {{0xa, 0x4e24, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e23, 0x8001, @local, 0xfffffffd}}}, 0x108)

2m1.76057731s ago: executing program 3 (id=2693):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xfff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

2m1.728387651s ago: executing program 34 (id=2693):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xfff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

1m16.201500537s ago: executing program 5 (id=3847):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1802, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
splice(r1, &(0x7f0000001500)=0x140000000000000, r2, 0x0, 0x9614, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
fcntl$lock(r3, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x5, 0x80000001})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000540)={0x16, 0x0, 0x0})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0xaece, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m16.153693118s ago: executing program 5 (id=3848):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x7f, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x9, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0xb52, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x8000, 0xb, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0xce0, 0x4, 0x2, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x1, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x5, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x6, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0xffffffff, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0xffffffff, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x800a1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
recvfrom$inet6(r1, &(0x7f0000004800)=""/172, 0xac, 0x20, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x3})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ptrace(0x10, 0x0)
r2 = memfd_secret(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0})
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)

1m16.148101178s ago: executing program 5 (id=3850):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x22a00, 0x0) (async, rerun: 64)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async, rerun: 64)
setreuid(0xee00, 0xee00) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x8e, 0x0, 0x0, 0x2000000}}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) (async, rerun: 64)
r2 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000180))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x8)
ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)={0x6000, 0x1, 0x3, 0x9, 0x7})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7fd}, 0x10)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async)
r9 = socket$packet(0x11, 0x2, 0x300) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 64)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) (async, rerun: 64)
readv(r8, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/209, 0xd1}], 0x1) (async)
pread64(r7, &(0x7f0000000100)=""/133, 0x85, 0x8) (async, rerun: 64)
write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700400001000000", 0x18) (async, rerun: 64)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_INFO(r11, 0x0, 0x60, 0x0, &(0x7f0000000080))

1m16.100700099s ago: executing program 5 (id=3853):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f000075d000/0x12000)=nil, 0x12000, 0x3000001, 0x4010, r0, 0x2000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x6cca92ab, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
lsm_set_self_attr(0x69, &(0x7f0000000640)=ANY=[@ANYBLOB="650000000000000000000005000000000000000a5cb59ce81f2c0eaba2993a035a5891cbb5d6979033b78bfcda3975c6c8e770a56a47c2e7ade9b7bcd129da5f523cca4e2d1564e8909a57b2b4f26c2845"], 0x25, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace(0x10, r2)
ptrace$poke(0x4, r2, &(0x7f0000000380), 0x10000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000c00)={<r3=>0xffffffffffffffff, 0x4, 0x100000001, 0x8000})
r4 = getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
syz_pidfd_open(r4, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001980)=ANY=[@ANYBLOB="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"])
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x11)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="1d0000001e005f0214fffffffffffff8070000001d0000000000000008", 0x1d)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
recvmmsg(r8, &(0x7f0000003980)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001340)=""/132, 0x84}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f00000003c0)=""/1, 0x1}], 0x6, &(0x7f00000004c0)=""/215, 0xd7}, 0x80000001}, {{&(0x7f00000005c0)=@sco, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/5, 0x5}, 0x7}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000b00)=""/63, 0x3f}], 0x4, &(0x7f00000052c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000b80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000c40)=""/147, 0x93}, 0xfffe00}, {{&(0x7f0000000d00)=@ax25={{0x3, @rose}, [@remote, @remote, @rose, @rose, @bcast, @null, @netrom, @rose]}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d80)=""/240, 0xf0}, {&(0x7f0000000e80)=""/145, 0x91}, {&(0x7f0000000f40)=""/237, 0xed}, {&(0x7f0000001040)=""/232, 0xe8}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001180)=""/248, 0xf8}], 0x6, &(0x7f0000001300)=""/29, 0x1d}}, {{&(0x7f0000003b40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=""/107, 0x6b}, 0x9}, {{&(0x7f0000001680)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/150, 0x96}, 0x1}], 0x7, 0x10101, &(0x7f0000001840))
splice(r5, &(0x7f0000000040)=0x4, r7, &(0x7f0000000080), 0x1, 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
pipe2$9p(&(0x7f0000001900), 0x80080)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8})

1m15.234195852s ago: executing program 5 (id=3865):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x3}, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0xfa8, 0x8, 0x8, 0xfffff151, 0x400]}, &(0x7f0000000000)=0x54)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)

1m15.113934273s ago: executing program 5 (id=3870):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup3(r0, 0xffffffffffffffff, 0x80000)
accept4$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

1m15.107927273s ago: executing program 35 (id=3870):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup3(r0, 0xffffffffffffffff, 0x80000)
accept4$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

5.380441594s ago: executing program 6 (id=4986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
accept4$unix(r2, 0x0, 0x0, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d6, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x2, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x351f, 0x0, 0xfffffffd, 0x1, 0x4, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async)
ioctl$UI_DEV_CREATE(r3, 0x5501) (async)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x2) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}) (async)
mount(&(0x7f0000000500)=@filename='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='hugetlbfs\x00', 0x9, &(0x7f00000005c0)='\\%\x00') (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_io_uring_setup(0x24f2, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r6 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) (async)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x44}}, 0x14)
r8 = fcntl$dupfd(r6, 0x0, r6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r5) (async)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d"], 0x48}}, 0x4014) (async, rerun: 64)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async, rerun: 64)
r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x67, 0x4, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

5.326245535s ago: executing program 6 (id=4987):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109301, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x8, 0x0, [{0xbc6}, {0x40000070, 0x0, 0x9}, {0x898, 0x0, 0x5}, {0xaf5, 0x0, 0xe}, {0x386, 0x0, 0x5}, {0x89a, 0x0, 0x6}, {0x245}, {0x97d, 0x0, 0x7}]})
fcntl$getflags(r1, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x12, 0x0, 0x0)

5.325562524s ago: executing program 6 (id=4988):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000a61000/0x3000)=nil, 0x3000, 0x3000001, 0x50, r0, 0x31f1b000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4)

5.323900744s ago: executing program 6 (id=4989):
syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000086b1d0101400001020301090281000301084004090400000001010000"], 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/wake_lock', 0x22042, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x6803e000)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101002, 0x0)
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r11=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000000)="8fc5fae78fb67ed8652707fa74d47832", 0x10)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20)
bind$xdp(r9, &(0x7f0000000100)={0x2c, 0xa, r11}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r8, 0x800, 0x5, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x100, 0x21, 0x0, 0x1, 0x2, 0x7, 0x3ff, 0x5, 0x0, 0x81, 'syz1\x00'})

3.433840431s ago: executing program 4 (id=5033):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@multicast1, @private=0xa010100, @remote}, 0xc)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000000c0)=0x564, 0x4)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x1000})
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = gettid()
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6}, 0x10)
close(0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/89, 0x2d, 0x2, 0x2}, @fda={0x66646185, 0x7, 0x0, 0xfffffffffffffffe}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x10}], 0x0, 0x0, 0x0})

3.433157331s ago: executing program 4 (id=5034):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$FITHAW(r1, 0xc0045878)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r3)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbd7250d000000e2b80180182301801400020076657468310000000000000000000000b7eed2d85d1eafc00449048e929f1c1ac1cdb8c148712c3ba4d3215461c5fe4635ca3eef02d1ea9dd31e13d01ccb82d7b562326951ffd3e37497fe1c78059dc5c0ba8da0288848afb01e4bc6a423aa0e07cf2f2f23"], 0x30}, 0x1, 0x0, 0x0, 0x20048880}, 0x8c4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={<r5=>r0, 0x9, 0x4})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'ip6gre0\x00', @multicast})
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000200)={0xa000000c})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
flistxattr(r9, &(0x7f00000020c0)=""/14, 0xe)
r10 = socket$xdp(0x2c, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="800000001000010002000000fedbdf25070000001300000008000000", @ANYRES32=r6, @ANYBLOB="040010007b4af51fc6a5d13f62633ab520ac0c7ee85e10bca9fed53f2c0d8b4a26e8198b6ade8efc8f0d138c06759da75ce002070ce0f2660992a463211d206da165971b7448a4d164b31455e6e48111669d6ed7b56fbb0d05871bdfa54bb3df3af7151e762489b90000000000000000"], 0x80}], 0x1}, 0x0)
getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, 0x0, &(0x7f0000000080))
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, 0x0, 0x0)
r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x10080, 0x0)
openat$incfs(r12, &(0x7f00000001c0)='.pending_reads\x00', 0x4001, 0x3)

3.417127752s ago: executing program 4 (id=5035):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES64=<r3=>r1, @ANYRESDEC=r2, @ANYRESDEC=r1], 0xffdd)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES32=r1, @ANYRES8=r1, @ANYRES8=r3], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket(0x200000100000011, 0x803, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000004c0)=@x86={0x6, 0x5, 0x8, 0x0, 0x4, 0x2, 0x1, 0x2, 0x7, 0x4, 0x7f, 0x5, 0x0, 0x3, 0x4000a, 0x8, 0x81, 0x6, 0x0, '\x00', 0xbf, 0x10001})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r12=>0x0})
sendto$packet(r7, &(0x7f0000000480)="4d01000000000000000100e50414090b0000000086076140f75ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x81, &(0x7f0000000340)={0x11, 0x0, r12, 0x1, 0x6, 0x6, @random="645bcc77540e"}, 0x14)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r12, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000)
r13 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r13, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4)

2.290042158s ago: executing program 6 (id=5041):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
dup(r2) (async)
r5 = dup(r2)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
creat(0x0, 0x22)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r7, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x2, 0x0, &(0x7f0000000580)="de54"}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x2, 0x0, &(0x7f0000000580)="de54"})
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
socket$inet(0x2, 0x3, 0x9)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
setsockopt$inet_mreqn(r8, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) (async)
setsockopt$inet_mreqn(r8, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=f\x00\x00\x00\x00dno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000001,\x00'])
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r10, r0, 0x0, 0x80000000)

1.465447359s ago: executing program 6 (id=5056):
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000001340))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r2, 0xc17a)
lseek(r2, 0x2000, 0x4)
recvmmsg(r1, &(0x7f00000011c0)=[{{&(0x7f00000000c0)=@ll, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f00000002c0)=""/80, 0x50}], 0x3}, 0x8}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/73, 0x49}], 0x4, &(0x7f0000000700)=""/241, 0xf1}, 0x4}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/61, 0x3d}, {&(0x7f00000008c0)=""/87, 0x57}], 0x2, &(0x7f0000000980)=""/15, 0xf}, 0xffffffff}, {{&(0x7f00000009c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/15, 0xf}, {&(0x7f0000000b40)=""/22, 0x16}], 0x3, &(0x7f0000000bc0)=""/177, 0xb1}, 0x1}, {{&(0x7f0000000c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/191, 0xbf}, {&(0x7f0000000dc0)=""/57, 0x39}, {&(0x7f0000000e00)=""/19, 0x13}, {&(0x7f0000000e40)=""/171, 0xab}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/105, 0x69}, {&(0x7f0000001000)=""/129, 0x81}], 0x7, &(0x7f0000001140)=""/66, 0x42}, 0x1}], 0x5, 0x0, &(0x7f0000001300)={0x77359400})
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cf6d9af2900290200000000000000000a003f000800000008000000"], 0x1c}}, 0x20010000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]})

1.39326794s ago: executing program 7 (id=5059):
r0 = open(&(0x7f0000000100)='./file0\x00', 0x880fe, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve1\x00', 0x2})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r2 = gettid()
r3 = gettid()
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
socket(0x29, 0xa, 0x1)
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb719)
open(&(0x7f0000000100)='./file0\x00', 0x880fe, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve1\x00', 0x2}) (async)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) (async)
gettid() (async)
gettid() (async)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)) (async)
timer_settime(r4, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) (async)
tkill(r2, 0x14) (async)
read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) (async)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async)
socket(0x29, 0xa, 0x1) (async)
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb719) (async)

1.391932161s ago: executing program 7 (id=5060):
syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x101080)
close_range(r0, 0xffffffffffffffff, 0x0)

1.377589311s ago: executing program 7 (id=5061):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001)
setresuid(0xee01, 0xee00, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
r7 = getpgrp(0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7})
sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x400000f5, 0x0, 0xffffffff}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

1.358102731s ago: executing program 7 (id=5062):
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x20000011})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0)
close(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0xaece, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x30, r0, 0xac506000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0x22, &(0x7f00000000c0)=0xff, 0x4)
signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x0)

863.089148ms ago: executing program 1 (id=5066):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c0210000500010725"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffff5}, 0xfffffffffffffca8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
process_madvise(r8, &(0x7f0000000240)=[{&(0x7f0000000000)='d', 0x1}], 0x1, 0x3, 0x0)
connect$unix(r6, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={r3, 0x2, 0x8, 0x9})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616eb208b73b914fd2f86f2c6163636573733d757365722c00"])
r9 = open(&(0x7f0000000240)='./file1\x00', 0x10b942, 0x20)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x80501, 0x0)
read$FUSE(r9, &(0x7f0000003180)={0x2020, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_GETXATTR(r10, &(0x7f0000000340)={0x18, 0xffffffffffffff9b, r11}, 0x18)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r12, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdee}, 0x10001}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001f00)=""/51, 0x33}, {&(0x7f0000001f40)=""/72, 0x48}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/82, 0x52}], 0x4}, 0x1}], 0x4, 0x23a0, 0x0)
sendfile(r9, r0, 0x0, 0x80000000)

470.048414ms ago: executing program 7 (id=5067):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0xdddd0000, 0x5, 0x20000000, 0xe47, 0x0, [{0xcb, 0x7f, 0x1, '\x00', 0x9}, {0x5, 0x6, 0x67, '\x00', 0xd1}, {0x6, 0x5, 0xc, '\x00', 0x6}, {0x3, 0x10, 0x8b, '\x00', 0x8}, {0x2, 0x81, 0x0, '\x00', 0x49}, {0x8, 0xa, 0x12, '\x00', 0xf}, {0xd, 0x6, 0x6, '\x00', 0x7}, {0x1, 0x1, 0x2, '\x00', 0x9}, {0xb, 0x9, 0xc, '\x00', 0x80}, {0x1, 0xf7, 0x7}, {0x40, 0x1, 0x9, '\x00', 0x5}, {0xd7, 0x0, 0x44, '\x00', 0x8}, {0x0, 0x9, 0x4, '\x00', 0x5}, {0x1, 0x7, 0x1}, {0x2, 0x9, 0xf5, '\x00', 0x9}, {0x6, 0xf, 0x7, '\x00', 0x9c}, {0x4, 0xfb, 0xf4, '\x00', 0x6}, {0x2, 0x0, 0x3, '\x00', 0x4}, {0x3, 0x81, 0x1, '\x00', 0xfe}, {0xb, 0x6, 0x3, '\x00', 0x9}, {0x0, 0x41, 0x2, '\x00', 0xe3}, {0xc1, 0x8, 0x65, '\x00', 0xc6}, {0x4, 0x4, 0x5b, '\x00', 0x5}, {0x0, 0x7, 0x5}]}})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40000000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xb7, 0x33, 0x45, 0x8, 0x19d2, 0x6a61, 0xb0c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0x90, 0x6c, [{{0x9, 0x4, 0x51, 0x0, 0x0, 0x2, 0x6, 0x0, 0x8e}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(r5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

387.324965ms ago: executing program 4 (id=5068):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10010fffffff) (async, rerun: 64)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async, rerun: 64)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$input_event(r2, &(0x7f0000000080)={{0x77359400}, 0x0, 0x5caa, 0x1ff}, 0x18) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

367.023065ms ago: executing program 4 (id=5069):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) (async)
recvfrom(r1, 0x0, 0x0, 0x40010061, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x1}}, 0x80) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
read$FUSE(r4, 0x0, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00000fe000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, 0x1000})

310.104226ms ago: executing program 4 (id=5070):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"}) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x40004) (async)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

294.370056ms ago: executing program 1 (id=5071):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', 0x1})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1020000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x2d, 0x10100, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480600001000ab", 0x7}], 0x1)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r6 = dup2(r5, r0)
pwritev2(r6, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000100)="9d", 0x1}], 0x2, 0x9, 0xae888b21, 0x16)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x1})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wg0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r10, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)

199.166197ms ago: executing program 1 (id=5072):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000001c0)=0x2001, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000040)=0x4, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)

146.097908ms ago: executing program 1 (id=5073):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000006, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30)
socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x3a, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c)
r3 = socket(0x11, 0x3, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x20044000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0)
mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)

145.246208ms ago: executing program 1 (id=5074):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000080))
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r2, &(0x7f00000002c0)="3f031c000302140006001e00895a054ab82e6a9386ac4a85800088a8dea688a8b00081004a09", 0x26, 0x2004c8d5, &(0x7f0000000100)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000080)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
sendto$packet(r2, &(0x7f00000002c0)="3f031c000302140006001e00895a054ab82e6a9386ac4a85800088a8dea688a8b00081004a09", 0x26, 0x2004c8d5, &(0x7f0000000100)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async)

143.892328ms ago: executing program 1 (id=5075):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4, 0x0)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setreuid(0xffffffffffffffff, r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100000000000000000008007300ac0100c1b90e86f53542b8364720b3883901749faaac5550ac7146828635b1b5fde369e4475d87bc31be3afb93ee3c32e7fe11011eae87d19ca4dece750993c51106ebbb0c63bea7e19a8a651820c052e38c4ff319fa0ce3ef", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800000004000180"], 0x28}], 0x1}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r3, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)='8', 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0xffffff43}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)}}], 0x4, 0x4048841)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
shutdown(r4, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
ftruncate(r6, 0x4000000)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0)
fcntl$lock(r7, 0x5, &(0x7f0000000440)={0x1, 0x4, 0x7ffffffffffffffd, 0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x52)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000005c0)={0x4})

0s ago: executing program 7 (id=5076):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
socket$inet6(0xa, 0x80000, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4003ec0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000)
syz_open_dev$hidraw(0x0, 0x2, 0x418bc0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffd})
madvise(&(0x7f00003c5000/0x4000)=nil, 0x4000, 0x9)

kernel console output (not intermixed with test programs):

nux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=6543 comm=syz.4.2175
[  121.880204][ T6549] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2177'.
[  121.886226][ T1227] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  122.046969][ T1227] usb 2-1: Using ep0 maxpacket: 8
[  122.053347][ T1227] usb 2-1: unable to get BOS descriptor or descriptor too short
[  122.062238][ T1227] usb 2-1: config 5 has an invalid interface number: 56 but max is 0
[  122.070375][ T1227] usb 2-1: config 5 has no interface number 0
[  122.076457][ T1227] usb 2-1: config 5 interface 56 has no altsetting 0
[  122.084563][ T1227] usb 2-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=19.f7
[  122.093654][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.101683][ T1227] usb 2-1: Product: syz
[  122.105844][ T1227] usb 2-1: Manufacturer: syz
[  122.110522][ T1227] usb 2-1: SerialNumber: syz
[  122.137394][  T568] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  122.268023][  T568] usb 5-1: device descriptor read/64, error -71
[  122.321839][ T1227] usb-storage 2-1:5.56: USB Mass Storage device detected
[  122.350205][ T1227] usb 2-1: USB disconnect, device number 4
[  122.509101][  T568] usb 5-1: device descriptor read/64, error -71
[  122.524549][ T6566] 9pnet_fd: Insufficient options for proto=fd
[  122.531366][ T6566] /dev/rnullb0: Can't lookup blockdev
[  122.626772][ T6573] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  122.689762][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'.
[  122.750248][  T568] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  122.774985][ T6590] netlink: 'syz.3.2191': attribute type 4 has an invalid length.
[  122.890796][  T568] usb 5-1: device descriptor read/64, error -71
[  123.111838][   T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  123.142290][  T568] usb 5-1: device descriptor read/64, error -71
[  123.242398][   T64] usb 2-1: device descriptor read/64, error -71
[  123.262575][  T568] usb usb5-port1: attempt power cycle
[  123.483385][   T64] usb 2-1: device descriptor read/64, error -71
[  123.484109][  T534] usb 6-1: USB disconnect, device number 2
[  123.502044][  T534] usblp0: removed
[  123.509812][   T36] audit: type=1326 audit(1752128307.407:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6621 comm="syz.5.2203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  123.603867][  T568] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  123.635082][  T568] usb 5-1: device descriptor read/8, error -71
[  123.668683][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'.
[  123.724396][   T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  123.765561][  T568] usb 5-1: device descriptor read/8, error -71
[  123.854946][   T64] usb 2-1: device descriptor read/64, error -71
[  124.005583][  T568] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  124.036395][  T568] usb 5-1: device descriptor read/8, error -71
[  124.095960][   T64] usb 2-1: device descriptor read/64, error -71
[  124.116032][  T384] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  124.167218][  T568] usb 5-1: device descriptor read/8, error -71
[  124.206558][   T64] usb usb2-port1: attempt power cycle
[  124.276795][  T568] usb usb5-port1: unable to enumerate USB device
[  124.277990][  T384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  124.294225][  T384] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  124.307106][  T384] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  124.316161][  T384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.324918][  T384] usb 6-1: config 0 descriptor??
[  124.547731][   T64] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  124.568776][   T64] usb 2-1: device descriptor read/8, error -71
[  124.699358][   T64] usb 2-1: device descriptor read/8, error -71
[  124.733539][  T384] konepure 0003:1E7D:2DB4.0003: item fetching failed at offset 10/11
[  124.741827][  T384] konepure 0003:1E7D:2DB4.0003: parse failed
[  124.747860][  T384] konepure 0003:1E7D:2DB4.0003: probe with driver konepure failed with error -22
[  124.928703][   T36] audit: type=1400 audit(1752128308.812:472): avc:  denied  { connect } for  pid=6653 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  124.950213][   T64] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  124.960816][  T384] usb 6-1: USB disconnect, device number 3
[  124.980467][   T64] usb 2-1: device descriptor read/8, error -71
[  125.111101][   T64] usb 2-1: device descriptor read/8, error -71
[  125.230532][   T64] usb usb2-port1: unable to enumerate USB device
[  125.633310][ T6667] rust_binder: Write failure EFAULT in pid:115
[  125.718546][ T6674] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  125.742709][ T6677] TCP: out of memory -- consider tuning tcp_mem
[  125.829878][ T6699] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2228'.
[  125.875404][ T6701] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.244220][  T384] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  126.393276][ T6721] 9pnet_fd: Insufficient options for proto=fd
[  126.399442][  T384] usb 5-1: Using ep0 maxpacket: 16
[  126.405715][  T384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.416674][  T384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.426630][  T384] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.433294][  T384] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  126.442501][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.451435][  T384] usb 5-1: config 0 descriptor??
[  126.725465][ T6760] futex_wake_op: syz.5.2250 tries to shift op by 144; fix this program
[  126.966690][  T568] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  127.082544][ T6706] rust_binder: Write failure EFAULT in pid:135
[  127.083236][  T384] usbhid 5-1:0.0: can't add hid device: -71
[  127.095437][  T384] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  127.104500][  T384] usb 5-1: USB disconnect, device number 15
[  127.118616][  T568] usb 2-1: unable to get BOS descriptor or descriptor too short
[  127.127117][  T568] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  127.137976][  T568] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  127.147898][  T568] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.163252][  T568] usb 2-1: string descriptor 0 read error: -22
[  127.169534][  T568] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.178646][  T568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.187975][ T6753] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  127.195252][ T6753] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  127.203028][  T568] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  127.406476][  T568] usb 2-1: USB disconnect, device number 9
[  127.534963][ T6786] /dev/rnullb0: Can't lookup blockdev
[  127.981765][   T36] audit: type=1400 audit(1752128311.861:473): avc:  denied  { write } for  pid=6859 comm="syz.1.2286" name="/" dev="incremental-fs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.004773][   T36] audit: type=1400 audit(1752128311.861:474): avc:  denied  { add_name } for  pid=6859 comm="syz.1.2286" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.025656][   T36] audit: type=1400 audit(1752128311.861:475): avc:  denied  { create } for  pid=6859 comm="syz.1.2286" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  128.046000][   T36] audit: type=1400 audit(1752128311.861:476): avc:  denied  { associate } for  pid=6859 comm="syz.1.2286" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  128.203773][ T6877] tmpfs: Unknown parameter '0x0000000000000005ÿÿÿÿ'
[  128.501680][ T6894] /dev/rnullb0: Can't lookup blockdev
[  128.523908][ T6898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  128.571343][ T6905] /dev/rnullb0: Can't lookup blockdev
[  128.687111][ T6929] tipc: Started in network mode
[  128.692039][ T6929] tipc: Node identity ac14140f, cluster identity 4711
[  128.699227][ T6929] tipc: New replicast peer: 255.255.255.255
[  128.706138][ T6929] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.473125][   T36] audit: type=1400 audit(1752128313.336:477): avc:  denied  { connect } for  pid=6998 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  129.707843][ T7012] netlink: 'syz.3.2340': attribute type 13 has an invalid length.
[  129.825553][   T64] tipc: Node number set to 2886997007
[  129.872758][ T7016] x_tables: duplicate underflow at hook 1
[  129.879319][   T36] audit: type=1400 audit(1752128313.755:478): avc:  denied  { create } for  pid=7015 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  129.880495][ T7016] overlayfs: failed to resolve './file0/file0': -2
[  129.909667][ T7015] TCP: out of memory -- consider tuning tcp_mem
[  130.258388][   T36] audit: type=1400 audit(1752128314.134:479): avc:  denied  { getopt } for  pid=7033 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  130.280007][   T36] audit: type=1400 audit(1752128314.134:480): avc:  denied  { getopt } for  pid=7033 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  130.836076][ T7106] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6416 sclass=netlink_xfrm_socket pid=7106 comm=syz.3.2373
[  130.897321][ T7121] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2378'.
[  131.043826][   T36] audit: type=1326 audit(1752128314.912:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7fc00000
[  131.211966][ T7162] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2393'.
[  131.233894][ T7167] 9pnet_fd: Insufficient options for proto=fd
[  131.402631][ T7169] tmpfs: Bad value for 'huge'
[  131.469831][ T7183] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2400'.
[  131.624954][ T7196] 9pnet_fd: Insufficient options for proto=fd
[  131.651493][ T7200] netlink: 'syz.4.2407': attribute type 16 has an invalid length.
[  131.659552][ T7200] netlink: 'syz.4.2407': attribute type 3 has an invalid length.
[  131.683453][ T7200] netlink: 64054 bytes leftover after parsing attributes in process `syz.4.2407'.
[  131.731087][ T7213] fuse: Unknown parameter 'ÿÿ0x0000000000000048'
[  131.839956][ T7242] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2420'.
[  132.024204][ T7271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2425'.
[  132.049637][ T7274] mmap: syz.4.2426 (7274): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  132.180415][ T7287] tipc: Started in network mode
[  132.186247][ T7287] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[  132.195944][ T7287] tipc: Enabled bearer <eth:vlan1>, priority 10
[  132.457576][ T7305] netlink: 'syz.4.2437': attribute type 13 has an invalid length.
[  132.640887][ T7311] fuse: Unknown parameter '18446744073709551615ÿ'
[  132.648550][   T36] audit: type=1400 audit(1752128316.518:482): avc:  denied  { setattr } for  pid=7310 comm="syz.1.2440" name="NETLINK" dev="sockfs" ino=27791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  133.007106][   T36] audit: type=1400 audit(1752128316.867:483): avc:  denied  { mount } for  pid=7335 comm="syz.4.2450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  133.029706][   T36] audit: type=1400 audit(1752128316.867:484): avc:  denied  { search } for  pid=7335 comm="syz.4.2450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  133.051623][   T36] audit: type=1400 audit(1752128316.867:485): avc:  denied  { write } for  pid=7335 comm="syz.4.2450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  133.073344][   T36] audit: type=1400 audit(1752128316.867:486): avc:  denied  { add_name } for  pid=7335 comm="syz.4.2450" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  133.324473][ T1227] tipc: Node number set to 10070698
[  133.799472][ T7369] netlink: 'syz.4.2463': attribute type 4 has an invalid length.
[  133.807576][ T7369] netlink: 'syz.4.2463': attribute type 5 has an invalid length.
[  133.815335][ T7369] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2463'.
[  134.235671][ T7422] tmpfs: Unknown parameter 'con²'
[  134.753640][ T7470] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  134.763690][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  134.763707][   T36] audit: type=1400 audit(1752128318.623:491): avc:  denied  { relabelto } for  pid=7469 comm="syz.3.2499" name="576" dev="tmpfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  134.796380][   T36] audit: type=1400 audit(1752128318.623:492): avc:  denied  { associate } for  pid=7469 comm="syz.3.2499" name="576" dev="tmpfs" ino=3136 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[  134.823920][   T36] audit: type=1400 audit(1752128318.623:493): avc:  denied  { write } for  pid=7469 comm="syz.3.2499" name="576" dev="tmpfs" ino=3136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  134.850142][   T36] audit: type=1400 audit(1752128318.623:494): avc:  denied  { add_name } for  pid=7469 comm="syz.3.2499" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  134.876242][   T36] audit: type=1400 audit(1752128318.623:495): avc:  denied  { create } for  pid=7469 comm="syz.3.2499" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  134.897815][   T36] audit: type=1400 audit(1752128318.623:496): avc:  denied  { associate } for  pid=7469 comm="syz.3.2499" name="memory.swap.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  134.920307][   T36] audit: type=1400 audit(1752128318.623:497): avc:  denied  { read append open } for  pid=7469 comm="syz.3.2499" path="/576/memory.swap.current" dev="tmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  134.944869][   T36] audit: type=1400 audit(1752128318.623:498): avc:  denied  { map } for  pid=7469 comm="syz.3.2499" path="/576/memory.swap.current" dev="tmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  134.968306][   T36] audit: type=1400 audit(1752128318.623:499): avc:  denied  { write } for  pid=7469 comm="syz.3.2499" path="/576/memory.swap.current" dev="tmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  134.992079][   T36] audit: type=1400 audit(1752128318.633:500): avc:  denied  { remove_name } for  pid=754 comm="syz-executor" name="memory.swap.current" dev="tmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[  135.183852][ T7484] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  135.322829][ T7493] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.025468][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'.
[  136.036985][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2536'.
[  136.041774][ T7572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7572 comm=syz.3.2534
[  136.062386][ T7581] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.145218][ T7596] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2541'.
[  137.259729][ T7653] netlink: 'syz.5.2561': attribute type 63 has an invalid length.
[  137.267701][ T7653] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2561'.
[  138.188179][ T7732] netlink: 'syz.1.2581': attribute type 19 has an invalid length.
[  138.267441][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'.
[  138.792726][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.799920][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.807087][ T7772] bridge_slave_0: entered allmulticast mode
[  138.813359][ T7772] bridge_slave_0: entered promiscuous mode
[  138.820152][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.827267][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.834406][ T7772] bridge_slave_1: entered allmulticast mode
[  138.840775][ T7772] bridge_slave_1: entered promiscuous mode
[  138.846904][ T5704] bridge_slave_1: left allmulticast mode
[  138.852596][ T5704] bridge_slave_1: left promiscuous mode
[  138.858331][ T5704] ªªªªªª: port 2(bridge_slave_1) entered disabled state
[  138.865890][ T5704] ªªªªªª: port 1(bridge_slave_0) entered disabled state
[  138.921424][ T7777] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  138.970254][ T5704] tipc: Disabling bearer <udp:syz0>
[  138.975633][ T5704] tipc: Left network mode
[  138.980997][ T5704] veth0_vlan: left promiscuous mode
[  139.029958][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.037042][ T7772] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.044331][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.051395][ T7772] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.079664][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.087715][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.095529][ T7787] netlink: 57 bytes leftover after parsing attributes in process `syz.4.2598'.
[  139.109054][ T5703] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.116155][ T5703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.125170][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.132245][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.158561][ T7772] veth0_vlan: entered promiscuous mode
[  139.169786][ T7772] veth1_macvtap: entered promiscuous mode
[  139.238491][ T7795] overlayfs: missing 'lowerdir'
[  139.562168][ T7824] rust_binder: Error while translating object.
[  139.562203][ T7824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  139.568629][ T7824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:13
[  139.598979][ T7826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2611'.
[  139.814662][ T7846] rust_binder: Fixups oob 199 202 280 207
[  139.814692][ T7846] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  139.820646][ T7846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  139.829158][ T7846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21
[  139.894045][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  139.894065][   T36] audit: type=1400 audit(1752128323.744:507): avc:  denied  { shutdown } for  pid=7862 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.948302][ T7873] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2628'.
[  140.096856][   T64] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  140.271529][   T64] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  140.279672][   T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.290296][   T64] usb 4-1: config 0 has no interface number 0
[  140.296419][   T64] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.309712][   T64] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  140.319340][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.328748][   T64] usb 4-1: config 0 descriptor??
[  140.343607][ T7733] udevd[7733]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  140.536702][ T7860] rust_binder: Error while translating object.
[  140.536744][ T7860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  140.543142][ T7860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24
[  140.553239][   T64] usb 4-1: USB disconnect, device number 8
[  140.581071][   T36] audit: type=1326 audit(1752128324.426:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.2641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe114b8e929 code=0x0
[  140.658227][ T7922] x_tables: duplicate underflow at hook 1
[  141.015861][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'.
[  141.073355][ T7955] binder: Bad value for 'defcontext'
[  141.126709][ T7962] 9pnet_fd: Insufficient options for proto=fd
[  141.133414][   T36] audit: type=1400 audit(1752128324.976:509): avc:  denied  { relabelfrom } for  pid=7961 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  141.153292][   T36] audit: type=1400 audit(1752128324.976:510): avc:  denied  { relabelto } for  pid=7961 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  141.173478][   T36] audit: type=1400 audit(1752128325.026:511): avc:  denied  { attach_queue } for  pid=7961 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  141.467362][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  141.618502][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.628268][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  141.637962][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.657210][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  141.666806][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  141.675676][   T10] usb 4-1: Product: syz
[  141.681047][   T10] usb 4-1: Manufacturer: syz
[  141.685687][   T10] usb 4-1: SerialNumber: syz
[  141.895389][   T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  141.930721][ T8005] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2672'.
[  142.039747][ T8016] tmpfs: Bad value for 'huge'
[  142.097254][   T10] usb 4-1: USB disconnect, device number 9
[  142.112009][   T10] usblp0: removed
[  142.760958][ T8054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39
[  142.772213][   T36] audit: type=1400 audit(1752128326.616:512): avc:  denied  { unmount } for  pid=7772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  142.964410][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.971517][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.978747][ T8065] bridge_slave_0: entered allmulticast mode
[  142.985003][ T8065] bridge_slave_0: entered promiscuous mode
[  142.991594][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.998688][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.005840][ T8065] bridge_slave_1: entered allmulticast mode
[  143.012142][ T8065] bridge_slave_1: entered promiscuous mode
[  143.021649][ T5703] bridge_slave_1: left allmulticast mode
[  143.027426][ T5703] bridge_slave_1: left promiscuous mode
[  143.033122][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.040889][ T5703] bridge_slave_0: left allmulticast mode
[  143.046538][ T5703] bridge_slave_0: left promiscuous mode
[  143.052266][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.148171][ T5703] veth1_macvtap: left promiscuous mode
[  143.153742][ T5703] veth0_vlan: left promiscuous mode
[  143.203986][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.211091][ T8065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.218448][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.225503][ T8065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.258291][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.265847][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.276174][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.283263][ T5704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.292638][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.299738][ T5704] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.329202][ T8065] veth0_vlan: entered promiscuous mode
[  143.343920][ T8065] veth1_macvtap: entered promiscuous mode
[  143.405338][ T8091] 9pnet_fd: Insufficient options for proto=fd
[  143.438433][   T36] audit: type=1400 audit(1752128327.286:513): avc:  denied  { sys_nice } for  pid=8092 comm="syz.1.2702" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  143.543936][   T36] audit: type=1400 audit(1752128327.386:514): avc:  denied  { read write } for  pid=8109 comm="syz.6.2711" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  143.549110][  T534] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  143.568270][   T36] audit: type=1400 audit(1752128327.386:515): avc:  denied  { open } for  pid=8109 comm="syz.6.2711" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  143.607510][  T534] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  143.742250][ T8131] input: syz0 as /devices/virtual/input/input9
[  143.752544][   T36] audit: type=1400 audit(1752128327.606:516): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=502 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.165889][ T8143] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2722'.
[  144.848815][ T8214] fuse: Unknown parameter ''
[  145.320248][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2752'.
[  145.329554][ T8232] ip6tnl0: entered promiscuous mode
[  145.334998][ T8232] ip6tnl0: entered allmulticast mode
[  145.343959][ T8232] rust_binder: Error while translating object.
[  145.344005][ T8232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  145.351231][ T8232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:28
[  145.470833][ T8241] tmpfs: Unknown parameter 'nr_flocks'
[  145.487424][ T8241] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2756'.
[  145.713859][ T8250] tmpfs: Unknown parameter '�@'
[  145.757378][ T8263] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2765'.
[  145.884484][ T8310] netlink: 'syz.1.2781': attribute type 64 has an invalid length.
[  145.921102][ T8322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=8322 comm=syz.4.2785
[  146.109228][ T8333] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  146.116572][ T8333] rust_binder: Write failure EINVAL in pid:35
[  146.221791][ T8342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  146.228013][ T8342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:43
[  146.387076][ T8367] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000400c630e not found
[  146.404911][ T8367] rust_binder: Write failure EINVAL in pid:60
[  146.432052][ T8375] netlink: 328 bytes leftover after parsing attributes in process `syz.6.2806'.
[  146.487568][ T8377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  146.487604][ T8377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66
[  146.518206][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  146.518228][   T36] audit: type=1326 audit(1752128330.366:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.2811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  146.550205][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2810'.
[  146.565514][ T8388] netlink: 'syz.6.2810': attribute type 1 has an invalid length.
[  146.576076][ T8388] rust_binder: Error while translating object.
[  146.576109][ T8388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  146.582469][ T8388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  146.755727][   T36] audit: type=1326 audit(1752128330.596:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7fc00000
[  146.813585][   T36] audit: type=1400 audit(1752128330.656:524): avc:  denied  { remount } for  pid=8439 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  146.915426][ T8447] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  146.939708][   T36] audit: type=1326 audit(1752128330.786:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.1.2830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x0
[  147.044499][ T8463] /dev/rnullb0: Can't lookup blockdev
[  147.229158][   T36] audit: type=1400 audit(1752128331.076:526): avc:  denied  { getopt } for  pid=8477 comm="syz.4.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  147.229312][ T8478] tmpfs: Invalid uid '0x00000000ffffffff'
[  147.331952][ T8492] 9pnet_fd: p9_fd_create_unix (8492): problem connecting socket: ./file0: -2
[  147.378127][ T8500] netlink: 'syz.4.2852': attribute type 3 has an invalid length.
[  147.398617][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2853'.
[  147.664488][ T8527] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2862'.
[  147.666722][ T8528] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  147.729383][ T8539] netlink: 'syz.4.2866': attribute type 4 has an invalid length.
[  147.739853][ T8539] netlink: 'syz.4.2866': attribute type 4 has an invalid length.
[  147.845849][   T36] audit: type=1400 audit(1752128331.686:527): avc:  denied  { create } for  pid=8552 comm="syz.4.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  148.037944][ T8581] 9pnet_fd: Insufficient options for proto=fd
[  148.195301][ T8604] fuse: Unknown parameter 'user_id!-·ó¨àÚ^'
[  148.443536][   T36] audit: type=1400 audit(1752128332.286:528): avc:  denied  { watch watch_reads } for  pid=8607 comm="syz.5.2892" path="/163/file0" dev="tmpfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  149.026979][ T8621] overlayfs: failed to clone upperpath
[  149.055681][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2899'.
[  149.132245][ T8644] incfs: Options parsing error. -22
[  149.137591][ T8644] incfs: mount failed -22
[  149.173893][ T8653] /dev/loop0: Can't lookup blockdev
[  149.306716][   T36] audit: type=1326 audit(1752128333.146:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe114bc3189 code=0x50000
[  149.329856][   T36] audit: type=1326 audit(1752128333.146:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  149.353187][   T36] audit: type=1326 audit(1752128333.146:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe114b45647 code=0x50000
[  149.993470][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'.
[  150.255382][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'.
[  150.435696][ T8741] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2938'.
[  150.499054][ T8743] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6416 sclass=netlink_xfrm_socket pid=8743 comm=syz.1.2939
[  150.542419][ T8748] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2941'.
[  151.295102][ T8754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.426076][ T8767] fuseblk: Bad value for 'fd'
[  151.443853][ T8782] netlink: 'syz.1.2952': attribute type 13 has an invalid length.
[  151.529221][   T36] kauditd_printk_skb: 31339 callbacks suppressed
[  151.529239][   T36] audit: type=1326 audit(1752128335.376:31871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.559390][   T36] audit: type=1326 audit(1752128335.376:31872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.583386][   T36] audit: type=1326 audit(1752128335.376:31873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.608870][   T36] audit: type=1326 audit(1752128335.376:31874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.632389][   T36] audit: type=1326 audit(1752128335.376:31875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.658997][   T36] audit: type=1326 audit(1752128335.376:31876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.683747][   T36] audit: type=1326 audit(1752128335.376:31877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.712997][   T36] audit: type=1326 audit(1752128335.376:31878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.738119][   T36] audit: type=1326 audit(1752128335.376:31879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  151.763141][   T36] audit: type=1326 audit(1752128335.376:31880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x50000
[  152.876737][ T8909] 9pnet_fd: Insufficient options for proto=fd
[  153.505455][ T8944] netlink: 'syz.4.3011': attribute type 4 has an invalid length.
[  153.514759][ T8944] netlink: 'syz.4.3011': attribute type 4 has an invalid length.
[  153.782026][ T8999] overlayfs: failed to resolve './file0/file0': -2
[  154.165681][ T9019] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  154.189068][ T9021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9021 comm=syz.5.3035
[  154.395941][ T9045] netlink: 'syz.1.3043': attribute type 4 has an invalid length.
[  154.405366][ T9045] netlink: 'syz.1.3043': attribute type 4 has an invalid length.
[  154.887839][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'.
[  156.146868][ T9252] netlink: 'syz.1.3109': attribute type 28 has an invalid length.
[  156.445882][ T9265] x_tables: duplicate underflow at hook 1
[  156.490900][ T9267] No source specified
[  156.496389][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3115'.
[  159.393035][ T9337] tmpfs: Invalid uid '0x00000000ffffffff'
[  160.123096][   T36] kauditd_printk_skb: 5565 callbacks suppressed
[  160.123116][   T36] audit: type=1400 audit(1752128343.966:37446): avc:  denied  { getattr } for  pid=9392 comm="syz.5.3158" path="socket:[35013]" dev="sockfs" ino=35013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  160.257278][   T36] audit: type=1400 audit(1752128344.096:37447): avc:  denied  { map } for  pid=9401 comm="syz.5.3162" path="socket:[35039]" dev="sockfs" ino=35039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  160.296666][ T9404] 9pnet_fd: Insufficient options for proto=fd
[  160.303742][ T9405] 9pnet_fd: Insufficient options for proto=fd
[  160.362135][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3166'.
[  160.439959][ T9418] overlayfs: failed to resolve './file0': -2
[  160.598964][ T9429] cgroup: name respecified
[  160.757319][   T36] audit: type=1400 audit(1752128344.596:37448): avc:  denied  { execute_no_trans } for  pid=9462 comm="syz.6.3182" path=2F6D656D66643A5B0BDB58202864656C6574656429 dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  161.077362][   T36] audit: type=1326 audit(1752128344.916:37449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.5.3193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  161.128505][ T9501] /dev/rnullb0: Can't lookup blockdev
[  161.148434][ T9505] 9pnet_fd: Insufficient options for proto=fd
[  161.168507][ T9509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.947742][ T9569] fuseblk: Bad value for 'user_id'
[  161.952915][ T9569] fuseblk: Bad value for 'user_id'
[  161.971084][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3227'.
[  162.040229][ T9585] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3232'.
[  162.048226][ T9586] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3232'.
[  162.058244][ T9589] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3233'.
[  162.131052][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3241'.
[  162.805628][ T9646] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3254'.
[  162.814970][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'.
[  162.830629][ T9650] netlink: 'syz.4.3256': attribute type 16 has an invalid length.
[  162.838633][ T9650] netlink: 'syz.4.3256': attribute type 3 has an invalid length.
[  162.846437][ T9650] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3256'.
[  163.442472][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3269'.
[  163.512457][ T9706] tmpfs: Unknown parameter '_blowks'
[  163.552075][ T9714] netlink: 'syz.4.3279': attribute type 27 has an invalid length.
[  163.593409][ T9722] overlayfs: failed to clone upperpath
[  163.620517][   T36] audit: type=1400 audit(1752128347.466:37450): avc:  denied  { bind } for  pid=9726 comm="syz.4.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  163.661987][   T36] audit: type=1326 audit(1752128347.506:37451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.4.3285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe114b8e929 code=0x0
[  164.141565][ T9747] tipc: Started in network mode
[  164.146442][ T9747] tipc: Node identity , cluster identity 4711
[  164.152600][ T9747] tipc: Failed to obtain node identity
[  164.158189][ T9747] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  164.168054][ T9747] tipc: Started in network mode
[  164.172981][ T9747] tipc: Node identity , cluster identity 4711
[  164.179146][ T9747] tipc: Failed to obtain node identity
[  164.184672][ T9747] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  164.721846][   T36] audit: type=1326 audit(1752128348.566:37452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9793 comm="syz.5.3308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  164.792769][ T9804] SELinux:  Context system_u:object_r:auditctl_exec_t:s0 is not valid (left unmapped).
[  164.802924][   T36] audit: type=1400 audit(1752128348.656:37453): avc:  denied  { relabelto } for  pid=9803 comm="syz.4.3312" name="file0" dev="tmpfs" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditctl_exec_t:s0"
[  164.829884][   T36] audit: type=1400 audit(1752128348.656:37454): avc:  denied  { associate } for  pid=9803 comm="syz.4.3312" name="file0" dev="tmpfs" ino=2203 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditctl_exec_t:s0"
[  164.931743][ T9808] TCP: out of memory -- consider tuning tcp_mem
[  165.014196][   T36] audit: type=1326 audit(1752128348.856:37455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.6.3320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22cc38e929 code=0x0
[  165.858615][ T9846] __nla_validate_parse: 1 callbacks suppressed
[  165.858637][ T9846] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3327'.
[  166.097371][   T36] audit: type=1326 audit(1752128349.936:37456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.5.3329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  166.238971][   T36] audit: type=1326 audit(1752128350.086:37457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.5.3329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  166.547434][   T36] audit: type=1326 audit(1752128350.386:37458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x7fc00000
[  168.574559][ T9940] /dev/rnullb0: Can't lookup blockdev
[  168.824486][ T9990] 9pnet_fd: Insufficient options for proto=fd
[  168.831831][ T9990] overlayfs: failed to clone upperpath
[  169.329114][ T9995] netlink: 'syz.4.3379': attribute type 25 has an invalid length.
[  169.338666][ T9995] cgroup: none used incorrectly
[  169.452655][   T36] audit: type=1326 audit(1752128353.296:37459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.5.3386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc63058e929 code=0x0
[  169.552689][T10037] netlink: 392 bytes leftover after parsing attributes in process `syz.6.3395'.
[  169.562563][T10038] netlink: 392 bytes leftover after parsing attributes in process `syz.6.3395'.
[  169.664741][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.674152][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.683119][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.692118][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.701077][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.710055][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.719330][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.728384][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.737240][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.746130][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.755023][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.763919][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.772794][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.781730][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.790635][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.799614][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.808513][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.817507][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.826378][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.835320][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.844235][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.853164][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.862072][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.870967][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.879846][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.888823][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.897685][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.906526][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.915442][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.924310][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.933202][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.942077][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.950991][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.959880][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.968867][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.977728][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.986556][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.995473][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.004395][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.015337][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.024685][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.033827][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.042883][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.079916][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.089992][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.098963][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.107984][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.120911][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.130452][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.139795][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.149542][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.158667][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.168287][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.175711][T10084] /dev/loop0: Can't lookup blockdev
[  170.178398][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.191858][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.201686][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.210805][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.220143][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.229359][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.238641][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.249207][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.258532][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.267873][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.282934][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.292241][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.353814][T10115] 9pnet_fd: Insufficient options for proto=fd
[  170.361544][T10115] netlink: 'syz.6.3419': attribute type 11 has an invalid length.
[  170.573654][   T36] audit: type=1400 audit(1752128354.416:37460): avc:  denied  { setattr } for  pid=10127 comm="syz.6.3423" name="PINGv6" dev="sockfs" ino=36977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  170.811487][T10141] fuse: Unknown parameter '†«2ÿÿ'
[  171.515207][T10183] SELinux:  Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped).
[  171.525333][   T36] audit: type=1400 audit(1752128355.366:37461): avc:  denied  { relabelto } for  pid=10182 comm="syz.6.3441" name="file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0"
[  171.552528][   T36] audit: type=1400 audit(1752128355.366:37462): avc:  denied  { associate } for  pid=10182 comm="syz.6.3441" name="file0" dev="tmpfs" ino=1004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:setrans_var_run_t:s0"
[  171.560920][T10187] netlink: 'syz.6.3443': attribute type 7 has an invalid length.
[  171.580737][   T36] audit: type=1400 audit(1752128355.386:37463): avc:  denied  { shutdown } for  pid=10184 comm="syz.6.3442" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  171.589625][T10187] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3443'.
[  171.922563][T10206] overlayfs: failed to clone upperpath
[  172.347725][T10239] Invalid ELF header len 16
[  172.393572][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'.
[  172.473673][T10264] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3470'.
[  172.525609][T10275] futex_wake_op: syz.5.3474 tries to shift op by -1; fix this program
[  172.535123][T10275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3474'.
[  172.561380][   T36] audit: type=1400 audit(1752128356.406:37464): avc:  denied  { setopt } for  pid=10276 comm="syz.5.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  172.593732][T10281] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3477'.
[  172.701000][T10288] futex_wake_op: syz.5.3480 tries to shift op by 144; fix this program
[  173.043545][T10340] /dev/rnullb0: Can't lookup blockdev
[  173.238372][   T36] audit: type=1326 audit(1752128358.087:37465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.6.3500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x0
[  173.521972][T10355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3503'.
[  173.532767][T10355] devtmpfs: Unknown parameter '^	*([%Ž'
[  174.957696][T10393] netlink: 'syz.1.3516': attribute type 12 has an invalid length.
[  175.277837][   T36] audit: type=1326 audit(1752128360.127:37466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.3529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x0
[  175.542059][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'.
[  176.307493][T10452] incfs_lookup_dentry err:-13
[  176.312222][T10452] incfs: Can't find or create .index dir in ./bus
[  176.318902][T10452] incfs: mount failed -13
[  176.324563][T10452] incfs_lookup_dentry err:-13
[  176.329404][T10452] incfs: Can't find or create .index dir in ./bus
[  176.335903][T10452] incfs: mount failed -13
[  176.552837][T10482] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3547'.
[  176.553650][   T36] audit: type=1400 audit(1752128361.397:37467): avc:  denied  { nlmsg_read } for  pid=10481 comm="syz.5.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  177.003238][   T36] audit: type=1400 audit(1752128361.847:37468): avc:  denied  { write } for  pid=321 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37514 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  177.305671][T10504] incfs: Options parsing error. -22
[  177.310977][T10504] incfs: mount failed -22
[  177.584271][T10522] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3561'.
[  178.300137][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'.
[  178.742311][T10580] netlink: 'syz.6.3580': attribute type 4 has an invalid length.
[  178.751558][T10579] netlink: 'syz.6.3580': attribute type 4 has an invalid length.
[  179.261085][   T36] audit: type=1326 audit(1752128364.114:37469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10606 comm="syz.4.3591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x0
[  179.262770][T10607] /dev/rnullb0: Can't lookup blockdev
[  179.347008][T10627] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  179.355374][T10627] overlayfs: missing 'lowerdir'
[  180.072485][T10670] netlink: 'syz.1.3615': attribute type 4 has an invalid length.
[  180.121237][T10678] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  180.745024][T10750] 9pnet_fd: Insufficient options for proto=fd
[  180.895103][T10780] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  180.962665][T10799] /dev/rnullb0: Can't lookup blockdev
[  181.010925][T10809] overlayfs: failed to resolve './file0': -2
[  181.042161][T10813] 9pnet_fd: Insufficient options for proto=fd
[  181.155860][T10815] 9pnet_fd: Insufficient options for proto=fd
[  181.294127][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3666'.
[  183.178306][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3705'.
[  183.289549][T10977] 9pnet_fd: Insufficient options for proto=fd
[  183.969278][   T36] audit: type=1400 audit(1752128368.824:37470): avc:  denied  { getopt } for  pid=11034 comm="syz.6.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  183.993537][   T36] audit: type=1400 audit(1752128368.824:37471): avc:  denied  { create } for  pid=11034 comm="syz.6.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  183.998215][T11039] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3733'.
[  184.674950][T11084] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3750'.
[  186.410045][   T36] audit: type=1326 audit(1752128371.264:37472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.5.3780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63058e929 code=0x0
[  186.477981][   T36] audit: type=1400 audit(1752128371.334:37473): avc:  denied  { accept } for  pid=11173 comm="syz.6.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  186.495739][T11176] 9pnet_fd: Insufficient options for proto=fd
[  186.513511][T11180] tmpfs: Unknown parameter 'smackfsdef'
[  186.537610][T11189] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3789'.
[  186.605836][T11205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3796'.
[  186.625480][T11207] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  186.662030][   T36] audit: type=1326 audit(1752128371.514:37474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7ffc0000
[  186.687972][   T36] audit: type=1326 audit(1752128371.514:37475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7ffc0000
[  186.711844][   T36] audit: type=1326 audit(1752128371.534:37476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe114b8d290 code=0x7ffc0000
[  186.735602][   T36] audit: type=1326 audit(1752128371.534:37477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7ffc0000
[  186.759695][   T36] audit: type=1326 audit(1752128371.534:37478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe114b8e929 code=0x7ffc0000
[  186.783253][   T36] audit: type=1326 audit(1752128371.534:37479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.4.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe114b8e929 code=0x7ffc0000
[  187.828845][T11311] tipc: MTU too low for tipc bearer
[  188.282305][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3839'.
[  188.339076][T11333] tipc: Started in network mode
[  188.345977][T11333] tipc: Node identity , cluster identity 4711
[  188.354308][T11333] tipc: Failed to obtain node identity
[  188.360001][T11333] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  188.904271][T11402] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3861'.
[  189.598370][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3877'.
[  189.631069][T11439] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.638396][T11439] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.645632][T11439] bridge_slave_0: entered allmulticast mode
[  189.652181][T11439] bridge_slave_0: entered promiscuous mode
[  189.658659][T11439] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.665789][T11439] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.673064][T11439] bridge_slave_1: entered allmulticast mode
[  189.679416][T11439] bridge_slave_1: entered promiscuous mode
[  189.728937][T11439] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.735981][T11439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.743278][T11439] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.750356][T11439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.773253][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.780721][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.790287][ T5703] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.797378][ T5703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.806500][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.813565][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.839623][T11439] veth0_vlan: entered promiscuous mode
[  189.851055][T11439] veth1_macvtap: entered promiscuous mode
[  189.932664][T11471] TCP: out of memory -- consider tuning tcp_mem
[  189.976146][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  189.976165][   T36] audit: type=1400 audit(1752128374.824:37483): avc:  denied  { connect } for  pid=11483 comm="syz.7.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  190.134057][T11506] fuseblk: Unknown parameter 'subj_type'
[  190.153425][T11508] x_tables: duplicate underflow at hook 1
[  190.160661][T11508] x_tables: duplicate underflow at hook 1
[  190.179822][T11515] 2N: renamed from vcan0 (while UP)
[  190.394093][T11529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  190.403598][T11530] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  190.444017][T11534] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3904'.
[  190.790048][T11547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3909'.
[  191.318188][   T36] audit: type=1326 audit(1752128376.174:37484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.6.3929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22cc38e929 code=0x0
[  191.429947][  T304] bridge_slave_1: left allmulticast mode
[  191.436858][  T304] bridge_slave_1: left promiscuous mode
[  191.445405][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.454063][  T304] bridge_slave_0: left allmulticast mode
[  191.459849][  T304] bridge_slave_0: left promiscuous mode
[  191.465496][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.607419][  T384] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  191.689984][  T304] veth1_macvtap: left promiscuous mode
[  191.695552][  T304] veth0_vlan: left promiscuous mode
[  191.767449][  T384] usb 8-1: Using ep0 maxpacket: 8
[  191.773723][  T384] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  191.782179][  T384] usb 8-1: config 179 has no interface number 0
[  191.788587][  T384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  191.799701][  T384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  191.811434][  T384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  191.822633][  T384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  191.832701][  T384] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  191.846026][  T384] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  191.855665][  T384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.864855][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  191.873274][  T384] xpad 8-1:179.65: probe with driver xpad failed with error -5
[  192.126236][T11656] rust_binder: 11633 RLIMIT_NICE not set
[  192.130707][   T36] audit: type=1400 audit(1752128376.984:37485): avc:  denied  { write } for  pid=11632 comm="syz.7.3930" path="socket:[40396]" dev="sockfs" ino=40396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.181577][T11656] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.358121][  T384] usb 8-1: USB disconnect, device number 2
[  192.483641][T11662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=11662 comm=syz.1.3939
[  192.876316][T11676] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  192.884374][T11676] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  192.892973][T11676] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  192.900939][T11676] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  193.141066][T11680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.233466][  T384] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  193.292947][   T36] audit: type=1400 audit(1752128378.144:37486): avc:  denied  { read } for  pid=11686 comm="syz.1.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  193.387396][  T384] usb 8-1: Using ep0 maxpacket: 8
[  193.398681][T11678] kvm: pic: non byte write
[  193.405513][  T384] usb 8-1: unable to get BOS descriptor or descriptor too short
[  193.415359][  T384] usb 8-1: unable to read config index 0 descriptor/start: -71
[  193.424078][  T384] usb 8-1: can't read configurations, error -71
[  193.516614][T11706] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3954'.
[  194.427203][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3975'.
[  194.477385][  T384] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  194.628911][  T384] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.640251][  T384] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.650262][  T384] usb 8-1: config 0 interface 0 has no altsetting 0
[  194.656952][  T384] usb 8-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00
[  194.666063][  T384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.674949][  T384] usb 8-1: config 0 descriptor??
[  194.764938][T11777] netlink: 'syz.1.3978': attribute type 13 has an invalid length.
[  194.891759][T11792] Invalid ELF header len 16
[  195.082091][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.082124][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.084213][  T384] wacom 0003:056A:00D1.0005: Unknown device_type for 'HID 056a:00d1'. Assuming pen.
[  195.098843][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.104421][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.127505][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.137421][  T384] wacom 0003:056A:00D1.0005: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.7-1/input0
[  195.154228][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.154918][T11821] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.195612][  T384] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:00D1.0005/input/input10
[  195.247594][  T384] usb 8-1: USB disconnect, device number 4
[  195.262049][T11835] TCP: out of memory -- consider tuning tcp_mem
[  195.301549][   T36] audit: type=1400 audit(1752128380.155:37487): avc:  denied  { remount } for  pid=11832 comm="syz.7.3996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  195.470725][T11857] can: request_module (can-proto-4) failed.
[  195.545936][T11879] binder: Unknown parameter '/dev/audio#'
[  195.566972][T11879] binder: Unknown parameter '/dev/audio#'
[  195.579014][T11879] binder: Unknown parameter '/dev/audio#'
[  195.985808][T11912] 9pnet_fd: Insufficient options for proto=fd
[  196.826775][T11952] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  196.899949][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4041'.
[  196.970781][T11968] rust_binder: Write failure EINVAL in pid:76
[  197.030926][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.044171][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.051369][T11963] bridge_slave_0: entered allmulticast mode
[  197.057723][T11963] bridge_slave_0: entered promiscuous mode
[  197.064394][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.073793][T11963] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.086471][T11963] bridge_slave_1: entered allmulticast mode
[  197.093054][T11963] bridge_slave_1: entered promiscuous mode
[  197.156826][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.163953][T11963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.171370][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.178432][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.199149][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.206782][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.216215][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.223308][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.233497][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.240591][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.267254][T11963] veth0_vlan: entered promiscuous mode
[  197.277945][T11963] veth1_macvtap: entered promiscuous mode
[  197.358678][   T31] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  197.500772][T12011] batadv_slave_0: entered promiscuous mode
[  197.508108][   T31] usb 8-1: device descriptor read/64, error -71
[  197.510498][T12010] batadv_slave_0: left promiscuous mode
[  197.705655][T12037] netlink: 'syz.6.4068': attribute type 3 has an invalid length.
[  197.747408][   T31] usb 8-1: device descriptor read/64, error -71
[  197.989921][   T31] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  198.125949][   T31] usb 8-1: device descriptor read/64, error -71
[  198.146682][T12048] 9pnet_fd: Insufficient options for proto=fd
[  198.231262][T12055] rust_binder: Write failure EFAULT in pid:31
[  198.365125][   T31] usb 8-1: device descriptor read/64, error -71
[  198.484811][   T31] usb usb8-port1: attempt power cycle
[  198.573887][T12066] 9pnet_fd: Insufficient options for proto=fd
[  198.591309][   T36] audit: type=1400 audit(1752128383.447:37488): avc:  denied  { connect } for  pid=12068 comm="syz.6.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  198.833544][   T31] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  198.855668][   T31] usb 8-1: device descriptor read/8, error -71
[  198.984087][   T31] usb 8-1: device descriptor read/8, error -71
[  199.137774][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4089'.
[  199.232242][   T31] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[  199.253418][   T31] usb 8-1: device descriptor read/8, error -71
[  199.301545][T12114] 
: renamed from bond_slave_0
[  199.310191][T12114] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4097'.
[  199.330403][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4098'.
[  199.349990][T12118] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4099'.
[  199.362387][T12118] 9pnet_fd: Insufficient options for proto=fd
[  199.382804][   T31] usb 8-1: device descriptor read/8, error -71
[  199.491508][   T31] usb usb8-port1: unable to enumerate USB device
[  199.740619][  T534] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  199.891920][  T534] usb 5-1: unable to get BOS descriptor or descriptor too short
[  199.900081][  T534] usb 5-1: not running at top speed; connect to a high speed hub
[  199.909140][  T534] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  199.918973][  T534] usb 5-1: config 8 interface 0 has no altsetting 0
[  199.927130][  T534] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  199.936363][  T534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.944484][  T534] usb 5-1: Product: syz
[  199.948932][  T534] usb 5-1: Manufacturer: syz
[  199.950935][   T36] audit: type=1326 audit(1752128384.811:37489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  199.953830][  T534] usb 5-1: SerialNumber: syz
[  199.997747][   T36] audit: type=1326 audit(1752128384.851:37490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.022178][   T36] audit: type=1326 audit(1752128384.851:37491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.035882][T12141] overlayfs: failed to clone upperpath
[  200.046351][   T36] audit: type=1326 audit(1752128384.851:37492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.060695][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'.
[  200.074976][   T36] audit: type=1326 audit(1752128384.851:37493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.110672][   T36] audit: type=1326 audit(1752128384.851:37494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.148089][   T36] audit: type=1326 audit(1752128384.851:37495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.171978][   T36] audit: type=1326 audit(1752128384.851:37496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f22cc38e929 code=0x7ffc0000
[  200.218315][  T534] usb 5-1: selecting invalid altsetting 0
[  200.229817][T12161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4115'.
[  200.232160][  T534] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12
[  200.267602][T11830] udevd[11830]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  200.284871][  T534] usb 5-1: USB disconnect, device number 16
[  200.316466][T12166] rust_binder: Failed to allocate buffer. len:96, is_oneway:true
[  200.334672][T12168] binder: Unknown parameter 'ext01777777777777777777777'
[  200.376333][T12170] overlayfs: failed to clone upperpath
[  200.640746][T12193] input: syz0 as /devices/virtual/input/input13
[  200.810448][T12206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98
[  200.828290][T12213] rust_binder: inc_ref_done called when no active inc_refs
[  200.902660][T12214] netlink: 'syz.6.4136': attribute type 10 has an invalid length.
[  200.935482][T12216] rust_binder: Error while translating object.
[  200.935516][T12216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  200.946499][T12216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38
[  201.403479][T12239] binder: Bad value for 'defcontext'
[  201.477737][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  201.477756][   T36] audit: type=1400 audit(1752128386.356:37498): avc:  denied  { setattr } for  pid=12247 comm="syz.7.4149" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  201.494774][T12250] binder: Unknown parameter 'contextÀ'
[  201.532890][   T36] audit: type=1400 audit(1752128386.356:37499): avc:  denied  { validate_trans } for  pid=12247 comm="syz.7.4149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  201.745345][T12262] usb usb8: usbfs: process 12262 (syz.4.4155) did not claim interface 0 before use
[  202.045567][   T36] audit: type=1326 audit(1752128386.907:37500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.7.4161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x0
[  202.808857][T12306] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  202.817804][T12307] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  203.108119][T12313] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4170'.
[  203.243656][   T36] audit: type=1400 audit(1752128388.121:37501): avc:  denied  { map } for  pid=12316 comm="syz.6.4173" path="socket:[42865]" dev="sockfs" ino=42865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  203.340564][  T384] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  203.500222][  T384] usb 5-1: Using ep0 maxpacket: 16
[  203.507168][  T384] usb 5-1: config 128 has an invalid interface number: 74 but max is 1
[  203.515553][  T384] usb 5-1: config 128 has an invalid interface number: 55 but max is 1
[  203.523992][   T64] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  203.531567][  T384] usb 5-1: config 128 has no interface number 0
[  203.537851][  T384] usb 5-1: config 128 has no interface number 1
[  203.544348][  T384] usb 5-1: config 128 interface 74 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 1023
[  203.554694][  T384] usb 5-1: config 128 interface 74 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  203.566510][  T384] usb 5-1: config 128 interface 74 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  203.577737][  T384] usb 5-1: config 128 interface 74 altsetting 8 has an endpoint descriptor with address 0x1F, changing to 0xF
[  203.589556][  T384] usb 5-1: config 128 interface 74 altsetting 8 endpoint 0xF has an invalid bInterval 70, changing to 10
[  203.600952][  T384] usb 5-1: config 128 interface 74 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  203.612180][  T384] usb 5-1: config 128 interface 55 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024
[  203.617140][   T36] audit: type=1400 audit(1752128388.491:37502): avc:  denied  { listen } for  pid=12335 comm="syz.6.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  203.622534][  T384] usb 5-1: config 128 interface 55 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  203.653225][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  203.659556][T12340] Invalid ELF header len 16
[  203.664067][  T384] usb 5-1: config 128 interface 55 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  203.679669][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  203.690519][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  203.701366][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  203.712321][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  203.725060][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  203.737687][  T384] usb 5-1: config 128 interface 55 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  203.748526][   T64] usb 8-1: Using ep0 maxpacket: 8
[  203.753640][  T384] usb 5-1: config 128 interface 74 has no altsetting 0
[  203.760614][  T384] usb 5-1: config 128 interface 55 has no altsetting 0
[  203.768875][   T64] usb 8-1: unable to get BOS descriptor or descriptor too short
[  203.777076][  T384] usb 5-1: Dual-Role OTG device on HNP port
[  203.783390][   T64] usb 8-1: config 1 has an invalid interface number: 81 but max is 0
[  203.791565][  T384] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=1a.b7
[  203.800661][   T64] usb 8-1: config 1 has no interface number 0
[  203.806855][  T384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.819337][  T384] usb 5-1: Product: syz
[  203.823605][  T384] usb 5-1: Manufacturer: syz
[  203.829100][   T64] usb 8-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0
[  203.839231][  T384] usb 5-1: SerialNumber: syz
[  203.849669][   T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.857822][T12312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  203.869148][   T64] usb 8-1: Product: syz
[  203.873408][   T64] usb 8-1: Manufacturer: syz
[  203.885928][   T64] usb 8-1: SerialNumber: syz
[  204.103268][   T64] usb 8-1: bad CDC descriptors
[  204.119760][   T64] usb 8-1: USB disconnect, device number 9
[  204.281225][T12312] loop2: detected capacity change from 0 to 8388608
[  204.287916][   T36] audit: type=1400 audit(1752128389.163:37503): avc:  denied  { append } for  pid=12310 comm="syz.4.4171" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  204.324392][  T384] usb 5-1: USB disconnect, device number 17
[  204.697706][T12367] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  204.697749][T12367] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  204.705915][T12367] rust_binder: Read failure Err(EFAULT) in pid:132
[  204.726990][T12370] input: syz0 as /devices/virtual/input/input14
[  204.986570][  T384] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  205.009944][T12388] netlink: 'syz.1.4198': attribute type 6 has an invalid length.
[  205.017801][T12388] netlink: 'syz.1.4198': attribute type 4 has an invalid length.
[  205.025614][T12388] netlink: 'syz.1.4198': attribute type 6 has an invalid length.
[  205.033602][T12388] netlink: 'syz.1.4198': attribute type 13 has an invalid length.
[  205.041693][T12388] netlink: 'syz.1.4198': attribute type 15 has an invalid length.
[  205.049746][T12388] netlink: 'syz.1.4198': attribute type 19 has an invalid length.
[  205.057925][T12388] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.4198'.
[  205.136271][  T384] usb 8-1: Using ep0 maxpacket: 8
[  205.136286][  T321] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  205.150986][  T384] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  205.159315][  T384] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  205.169750][  T384] usb 8-1: config 179 has no interface number 0
[  205.176035][  T384] usb 8-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  205.189361][  T384] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  205.198437][  T384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.296918][  T321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.307121][  T321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.318201][  T321] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  205.328242][  T321] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.342495][  T321] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.351608][  T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.359638][  T321] usb 5-1: Product: syz
[  205.363817][  T321] usb 5-1: Manufacturer: syz
[  205.368566][  T321] usb 5-1: SerialNumber: syz
[  205.375021][  T321] cdc_mbim 5-1:1.0: skipping garbage
[  205.407931][T12373] rust_binder: Error while translating object.
[  205.407972][T12373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  205.414209][T12373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:138
[  205.425227][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.443135][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.456976][  T384] usb 8-1: USB disconnect, device number 10
[  205.574645][T12378] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  205.982795][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.992294][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.000422][T12377] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  206.045436][T12465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=12465 comm=syz.6.4224
[  206.088756][T12467] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4225'.
[  206.530754][T12481] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4231'.
[  206.568479][   T36] audit: type=1400 audit(1752128391.448:37504): avc:  denied  { accept } for  pid=12487 comm="syz.1.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  206.658330][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4240'.
[  206.708756][  T321] cdc_mbim 5-1:1.0: bind() failure
[  206.722251][  T321] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  206.734849][  T321] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  206.750390][  T321] usb 5-1: USB disconnect, device number 18
[  225.269936][   T36] audit: type=1400 audit(1752128410.170:37505): avc:  denied  { setopt } for  pid=12544 comm="syz.4.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  225.547510][T12565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  225.547536][T12565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:82
[  225.896190][T12581] cannot load conntrack support for proto=3
[  225.938283][   T36] audit: type=1400 audit(1752128410.840:37506): avc:  denied  { listen } for  pid=12576 comm="syz.1.4266" laddr=fe80::11 lport=58 faddr=ff02::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  226.720876][T12598] 9pnet_fd: Insufficient options for proto=fd
[  226.889960][T12617] tc_dump_action: action bad kind
[  228.001998][T12670] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  228.023406][T12674] netlink: 'syz.7.4300': attribute type 4 has an invalid length.
[  228.033451][T12674] netlink: 'syz.7.4300': attribute type 4 has an invalid length.
[  228.068600][T12678] 9pnet_fd: Insufficient options for proto=fd
[  228.222223][T12693] batadv_slave_1: entered promiscuous mode
[  228.232011][T12692] batadv_slave_1: left promiscuous mode
[  228.588902][T12724] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  228.588923][T12724] rust_binder: Read failure Err(EFAULT) in pid:90
[  228.621733][   T36] audit: type=1400 audit(1752128413.532:37507): avc:  denied  { read } for  pid=12728 comm="syz.4.4321" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  228.651496][   T36] audit: type=1400 audit(1752128413.532:37508): avc:  denied  { open } for  pid=12728 comm="syz.4.4321" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  228.675114][   T36] audit: type=1400 audit(1752128413.532:37509): avc:  denied  { ioctl } for  pid=12728 comm="syz.4.4321" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  228.700041][   T36] audit: type=1400 audit(1752128413.532:37510): avc:  denied  { map } for  pid=12728 comm="syz.4.4321" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  228.700875][T12732] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0
[  228.723310][T12732] rust_binder: Error while translating object.
[  228.731988][T12732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  228.738249][T12732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[  229.087519][T12762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4333'.
[  229.715446][   T36] audit: type=1326 audit(1752128414.622:37511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.7.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7fc00000
[  229.829561][T12808] netlink: 'syz.7.4350': attribute type 30 has an invalid length.
[  230.369455][   T36] audit: type=1400 audit(1752128415.283:37512): avc:  denied  { write } for  pid=12838 comm="syz.4.4360" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  230.608518][   T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  230.758442][   T31] usb 5-1: Using ep0 maxpacket: 16
[  230.765146][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  230.768157][T12846] /dev/rnullb0: Can't lookup blockdev
[  230.773892][   T31] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  230.789393][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  230.795918][T12848] overlayfs: failed to clone lowerpath
[  230.798729][   T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.822564][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.831815][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.839904][   T31] usb 5-1: Product: syz
[  230.843293][T12852] netlink: 'syz.7.4365': attribute type 12 has an invalid length.
[  230.844133][   T31] usb 5-1: Manufacturer: syz
[  230.852960][T12852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12852 comm=syz.7.4365
[  230.856592][   T31] usb 5-1: SerialNumber: syz
[  231.080701][   T31] cdc_ncm 5-1:1.0: skipping garbage
[  231.086483][   T31] cdc_ncm 5-1:1.0: skipping garbage
[  231.091825][   T31] cdc_ncm 5-1:1.0: skipping garbage
[  231.097114][   T31] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  231.103970][   T31] cdc_ncm 5-1:1.0: bind() failure
[  231.110823][   T31] usb 5-1: USB disconnect, device number 19
[  231.335124][T12865] process '/newroot/433/file0' started with executable stack
[  231.372305][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4373'.
[  232.673049][T12940] tipc: Started in network mode
[  232.678200][T12940] tipc: Node identity 7f000001, cluster identity 4711
[  232.685345][T12940] tipc: Enabled bearer <udp:syz2>, priority 10
[  233.327432][  T384] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  233.479016][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.505403][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.524525][  T384] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  233.534082][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.542886][  T384] usb 5-1: config 0 descriptor??
[  233.791152][T12998] 9pnet_fd: Insufficient options for proto=fd
[  233.797403][   T64] tipc: Node number set to 2130706433
[  233.954371][  T384] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x3
[  234.014350][T13015] futex_wake_op: syz.6.4418 tries to shift op by -1; fix this program
[  234.028886][  T384] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found
[  234.151537][T12959] /dev/rnullb0: Can't open blockdev
[  234.157275][T12960] /dev/rnullb0: Can't open blockdev
[  234.168397][  T534] usb 5-1: USB disconnect, device number 20
[  234.691691][T13054] incfs: Options parsing error. -22
[  234.697127][T13054] incfs: mount failed -22
[  234.728874][T13063] netlink: 'syz.6.4437': attribute type 27 has an invalid length.
[  234.737367][T13063] No source specified
[  234.804784][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4441'.
[  234.936883][  T534] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  235.086808][  T534] usb 5-1: Using ep0 maxpacket: 32
[  235.093792][  T534] usb 5-1: config 63 has an invalid interface number: 13 but max is 0
[  235.103407][  T534] usb 5-1: config 63 has no interface number 0
[  235.113963][  T534] usb 5-1: config 63 interface 13 has no altsetting 0
[  235.126379][  T534] usb 5-1: New USB device found, idVendor=0f19, idProduct=0105, bcdDevice= 1.00
[  235.135786][  T534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.147241][  T534] usb 5-1: Product: syz
[  235.154585][  T534] usb 5-1: Manufacturer: syz
[  235.162368][  T534] usb 5-1: SerialNumber: syz
[  235.375065][  T534] usb-storage 5-1:63.13: USB Mass Storage device detected
[  235.385246][  T534] usb-storage 5-1:63.13: Quirks match for vid 0f19 pid 0105: 20
[  235.432652][  T534] usb 5-1: USB disconnect, device number 21
[  235.932710][   T36] audit: type=1400 audit(1752128420.845:37513): avc:  denied  { read } for  pid=13102 comm="syz.4.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  235.963450][T13105] netlink: 57 bytes leftover after parsing attributes in process `syz.4.4450'.
[  236.216488][  T534] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  236.368538][  T534] usb 5-1: config index 0 descriptor too short (expected 1051, got 27)
[  236.381574][  T534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  236.394782][  T534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  236.407166][  T534] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[  236.416353][  T534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.425750][  T534] usb 5-1: Product: syz
[  236.440276][  T534] usb 5-1: Manufacturer: syz
[  236.444935][  T534] usb 5-1: SerialNumber: syz
[  236.451583][  T534] usb 5-1: config 0 descriptor??
[  236.591976][T13142] overlayfs: missing 'lowerdir'
[  236.607649][   T36] audit: type=1326 audit(1752128421.525:37514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.646343][   T36] audit: type=1326 audit(1752128421.525:37515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.670607][T13107] syz.4.4451: attempt to access beyond end of device
[  236.670607][T13107] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[  236.685042][   T36] audit: type=1326 audit(1752128421.525:37516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.694099][T13107] exFAT-fs (loop4): unable to read boot sector
[  236.715658][T13107] exFAT-fs (loop4): failed to read boot sector
[  236.718900][   T36] audit: type=1326 audit(1752128421.525:37517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a649c11e5 code=0x7ffc0000
[  236.722145][T13107] exFAT-fs (loop4): failed to recognize exfat type
[  236.765763][  T384] usb 5-1: USB disconnect, device number 22
[  236.773560][   T36] audit: type=1326 audit(1752128421.535:37518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.816383][   T36] audit: type=1326 audit(1752128421.535:37519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.846374][   T36] audit: type=1326 audit(1752128421.535:37520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.888482][   T36] audit: type=1326 audit(1752128421.535:37521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  236.912147][   T36] audit: type=1326 audit(1752128421.535:37522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.7.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  237.930127][T13203] can: request_module (can-proto-6) failed.
[  237.937757][T13203] 9pnet_fd: Insufficient options for proto=fd
[  238.995812][  T384] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  239.145804][  T384] usb 5-1: Using ep0 maxpacket: 32
[  239.152100][  T384] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  239.163688][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  239.174599][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  239.184378][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  239.195462][  T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  239.207847][  T384] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  239.216976][  T384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.224996][  T384] usb 5-1: Product: syz
[  239.229302][  T384] usb 5-1: Manufacturer: syz
[  239.233930][  T384] usb 5-1: SerialNumber: syz
[  239.239527][  T384] usb 5-1: config 0 descriptor??
[  240.593530][T13305] netlink: 'syz.1.4534': attribute type 4 has an invalid length.
[  240.603507][T13305] netlink: 'syz.1.4534': attribute type 4 has an invalid length.
[  241.564251][T13334] netlink: 'syz.1.4547': attribute type 4 has an invalid length.
[  241.711898][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'.
[  241.750309][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  241.750327][   T36] audit: type=1326 audit(1752128682.665:37529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x7ffc0000
[  241.787368][   T36] audit: type=1326 audit(1752128682.665:37530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7872ab19 code=0x7ffc0000
[  241.799667][  T534] usb 5-1: USB disconnect, device number 23
[  241.829291][T13359] audit: audit_backlog=65 > audit_backlog_limit=64
[  241.835933][T13359] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  241.843663][T13359] audit: backlog limit exceeded
[  241.845101][   T36] audit: type=1326 audit(1752128682.665:37531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x7ffc0000
[  241.872222][   T36] audit: type=1326 audit(1752128682.705:37532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7872ab19 code=0x7ffc0000
[  241.895827][   T36] audit: type=1326 audit(1752128682.705:37533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x7ffc0000
[  241.919484][   T36] audit: type=1326 audit(1752128682.705:37534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7878e929 code=0x7ffc0000
[  241.982284][   T36] audit: type=1326 audit(1752128682.705:37535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.1.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7872ab19 code=0x7ffc0000
[  244.602894][T13458] 9pnet_fd: Insufficient options for proto=fd
[  244.797348][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4603'.
[  244.849973][T13473] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.857178][T13473] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.864553][T13473] bridge_slave_0: entered allmulticast mode
[  244.871809][T13473] bridge_slave_0: entered promiscuous mode
[  244.878589][T13473] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.885933][T13473] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.893092][T13473] bridge_slave_1: entered allmulticast mode
[  244.899672][T13473] bridge_slave_1: entered promiscuous mode
[  244.963250][ T5703] bridge_slave_1: left allmulticast mode
[  244.969057][ T5703] bridge_slave_1: left promiscuous mode
[  244.974763][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.982943][ T5703] bridge_slave_0: left allmulticast mode
[  244.989537][ T5703] bridge_slave_0: left promiscuous mode
[  244.995257][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.074481][T13473] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.081589][T13473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.088941][T13473] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.096012][T13473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.120537][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.128732][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.148233][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.155347][ T5704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.164080][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.171193][ T5704] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.187574][ T5703] tipc: Disabling bearer <udp:syz2>
[  245.209421][ T5703] tipc: Left network mode
[  245.261817][ T5703] veth0_vlan: left promiscuous mode
[  245.375319][T13473] veth0_vlan: entered promiscuous mode
[  245.407004][T13473] veth1_macvtap: entered promiscuous mode
[  245.558796][T13534] kvm: emulating exchange as write
[  245.875856][  T384] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  245.884103][T13562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  245.884126][T13562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:12
[  246.047411][  T384] usb 5-1: unable to get BOS descriptor or descriptor too short
[  246.066241][  T384] usb 5-1: config 4 has an invalid interface number: 116 but max is 0
[  246.074430][  T384] usb 5-1: config 4 has no interface number 0
[  246.080590][  T384] usb 5-1: config 4 interface 116 altsetting 223 has an invalid descriptor for endpoint zero, skipping
[  246.091935][  T384] usb 5-1: config 4 interface 116 altsetting 223 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  246.103165][  T384] usb 5-1: config 4 interface 116 has no altsetting 0
[  246.111806][  T384] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=cf.2c
[  246.126409][  T384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.139546][  T384] usb 5-1: Product: syz
[  246.143812][  T384] usb 5-1: Manufacturer: syz
[  246.148947][  T384] usb 5-1: SerialNumber: syz
[  246.358884][  T384] usb 5-1: unsupported MDLM descriptors
[  246.365734][  T384] usb 5-1: USB disconnect, device number 24
[  246.475829][ T1227] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  246.627062][ T1227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.636894][ T1227] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  246.646199][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.654858][ T1227] usb 2-1: config 0 descriptor??
[  246.660982][ T1227] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  246.802127][T13588] overlayfs: missing 'lowerdir'
[  246.863617][  T534] usb 2-1: USB disconnect, device number 10
[  246.905506][T13609] rust_binder: Error while translating object.
[  246.905548][T13609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  246.911955][T13609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219
[  246.994446][T13616] rust_binder: 13616: no such ref 0
[  247.009372][T13616] rust_binder: Write failure EINVAL in pid:224
[  247.082090][T13618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  247.088382][T13618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:226
[  247.473504][T13639] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  247.735840][  T384] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  247.895867][  T384] usb 2-1: Using ep0 maxpacket: 16
[  247.906299][  T384] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  247.915115][  T384] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[  247.925686][  T384] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  247.935092][  T384] usb 2-1: config 1 has no interface number 1
[  247.941438][  T384] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  247.954491][  T384] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 10
[  247.965819][  T384] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25183, setting to 1024
[  247.978752][  T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.988079][  T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.996315][  T384] usb 2-1: Product: syz
[  248.000602][  T384] usb 2-1: Manufacturer: syz
[  248.005291][  T384] usb 2-1: SerialNumber: syz
[  248.074835][T13665] futex_wake_op: syz.4.4662 tries to shift op by 144; fix this program
[  248.132380][   T36] kauditd_printk_skb: 2966 callbacks suppressed
[  248.132417][   T36] audit: type=1400 audit(1752128689.045:40502): avc:  denied  { listen } for  pid=13668 comm="syz.4.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  248.222318][  T384] usb 2-1: USB disconnect, device number 11
[  248.230051][T13671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  248.230083][T13671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:257
[  248.273856][T13677] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  248.422454][T13702] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0
[  248.430653][T13702] rust_binder: Error while translating object.
[  248.439434][T13702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  248.445812][T13702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271
[  248.455687][T13703] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  248.495041][T13707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  248.495080][T13707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:276
[  248.798912][T13734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  248.808297][T13734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:48
[  248.875331][T13743] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4689'.
[  248.881578][T13742] rust_binder: Write failure EFAULT in pid:53
[  248.911798][T13747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  248.918056][T13747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55
[  249.160777][T13784] netlink: 'syz.7.4703': attribute type 3 has an invalid length.
[  249.165833][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  249.235848][  T534] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  249.335786][   T10] usb 5-1: Using ep0 maxpacket: 8
[  249.345514][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  249.353704][   T10] usb 5-1: no configurations
[  249.358819][   T10] usb 5-1: can't read configurations, error -22
[  249.385800][  T534] usb 2-1: Using ep0 maxpacket: 32
[  249.393032][  T534] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.403495][  T534] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.414725][  T534] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.424990][  T534] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  249.433586][T13797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13797 comm=syz.6.4708
[  249.440824][  T534] usb 2-1: config 0 interface 0 has no altsetting 0
[  249.458185][  T534] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  249.467601][  T534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.486081][  T534] usb 2-1: config 0 descriptor??
[  249.714461][T13810] fuse: Bad value for 'fd'
[  249.874761][T13834] fuse: Bad value for 'fd'
[  249.895639][  T534] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  249.903780][  T534] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  249.911856][  T534] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  249.919855][  T534] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  249.928425][  T534] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  249.938149][  T534] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  249.950290][  T534] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints?
[  250.174098][    C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71
[  250.174174][ T1227] usb 2-1: USB disconnect, device number 12
[  250.216689][T13865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  250.216721][T13865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:319
[  250.605908][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  250.765849][   T10] usb 5-1: Using ep0 maxpacket: 8
[  250.778500][T13877] kvm: pic: non byte write
[  250.779756][T13914] fuse: Unknown parameter 'ÿ0x0000000000000004'
[  250.784809][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  250.804680][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  250.812920][   T10] usb 5-1: can't read configurations, error -71
[  250.826449][T13921] netlink: 392 bytes leftover after parsing attributes in process `syz.6.4751'.
[  251.439949][   T36] audit: type=1400 audit(1752128692.355:40503): avc:  denied  { accept } for  pid=13962 comm="syz.6.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  251.467125][   T36] audit: type=1400 audit(1752128692.355:40504): avc:  denied  { connect } for  pid=13962 comm="syz.6.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  251.492690][T13970] rust_binder: Write failure EFAULT in pid:340
[  251.513916][T13972] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000400c630e not found
[  251.529237][T13972] rust_binder: Write failure EINVAL in pid:342
[  251.586543][T13988] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4776'.
[  251.644259][T13996] tipc: Started in network mode
[  251.649209][T13996] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  251.658366][T13996] tipc: Enabled bearer <udp:s>, priority 10
[  251.675613][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4781'.
[  251.855818][   T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  252.007713][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.018717][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.028494][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  252.041445][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  252.050531][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.059217][   T10] usb 5-1: config 0 descriptor??
[  252.064872][   T10] hub 5-1:0.0: USB hub found
[  252.265979][   T10] hub 5-1:0.0: 14 ports detected
[  252.271251][   T10] hub 5-1:0.0: insufficient power available to use all downstream ports
[  252.688672][T13985] netlink: 'syz.4.4774': attribute type 12 has an invalid length.
[  252.701103][   T10] usb 5-1: USB disconnect, device number 29
[  252.785811][  T384] tipc: Node number set to 4269801488
[  253.174108][T14048] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.227950][T14054] tmpfs: Unknown parameter 'no'
[  253.415417][T14077] /dev/rnullb0: Can't open blockdev
[  253.449152][T14058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4803'.
[  253.459677][T14058] netlink: 1603 bytes leftover after parsing attributes in process `syz.1.4803'.
[  253.502946][T14094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=14094 comm=syz.7.4817
[  253.675801][  T534] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  253.805810][  T534] usb 5-1: device descriptor read/64, error -71
[  254.045813][  T534] usb 5-1: device descriptor read/64, error -71
[  254.071598][T14114] 9pnet_fd: Insufficient options for proto=fd
[  254.171356][T14136] /dev/loop0: Can't lookup blockdev
[  254.285820][  T534] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  254.343814][   T36] audit: type=1326 audit(1752128695.255:40505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14162 comm="syz.1.4842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad49b8e929 code=0x0
[  254.425911][  T534] usb 5-1: device descriptor read/64, error -71
[  254.665797][  T534] usb 5-1: device descriptor read/64, error -71
[  254.672291][T14172] overlay: ./file0 is not a directory
[  254.716431][T14183] tmpfs: Unknown parameter 'ÆÅ'
[  254.722721][T14183] fuse: Unknown parameter '000000000000000000000x0000000000000004'
[  254.786316][  T534] usb usb5-port1: attempt power cycle
[  255.125837][  T534] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  255.146916][  T534] usb 5-1: device descriptor read/8, error -71
[  255.276859][  T534] usb 5-1: device descriptor read/8, error -71
[  255.515808][  T534] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  255.536770][  T534] usb 5-1: device descriptor read/8, error -71
[  255.570568][T14231] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4862'.
[  255.594271][T14233] /dev/rnullb0: Can't lookup blockdev
[  255.621462][T14237] overlay: ./file0 is not a directory
[  255.666849][  T534] usb 5-1: device descriptor read/8, error -71
[  255.776615][  T534] usb usb5-port1: unable to enumerate USB device
[  255.784879][T14248] 9pnet_fd: Insufficient options for proto=fd
[  255.887859][T14275] overlayfs: failed to clone lowerpath
[  256.336226][T14294] netlink: 'syz.1.4886': attribute type 4 has an invalid length.
[  256.344057][T14294] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4886'.
[  256.497190][   T36] audit: type=1400 audit(1752128697.415:40506): avc:  denied  { map } for  pid=14332 comm="syz.4.4900" path="socket:[50564]" dev="sockfs" ino=50564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  256.526421][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4901'.
[  257.019444][T14374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4915'.
[  257.269998][T14414] 9pnet_fd: Insufficient options for proto=fd
[  257.774012][T14452] binder: Unknown parameter 'fscontext?}'
[  257.784287][T14452] binder: Unknown parameter 'fscontext?}'
[  257.845797][   T36] audit: type=1400 audit(1752128698.755:40507): avc:  denied  { append } for  pid=14456 comm="syz.4.4944" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  257.886786][T14461] O3ãc¤±: renamed from bridge_slave_0 (while UP)
[  257.944090][T14466] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 89)
[  257.944118][T14466] rust_binder: Error while translating object.
[  257.966921][T14466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  257.979623][T14466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421
[  258.064682][T14478] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.396186][T14507] overlayfs: failed to clone upperpath
[  258.440045][T14513] overlayfs: failed to resolve './file0/file0': -2
[  258.447539][T14513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.654367][T14546] 2N: renamed from vcan0 (while UP)
[  259.153538][T14558] netlink: 'syz.1.4983': attribute type 25 has an invalid length.
[  259.200370][T14562] netlink: 'syz.6.4985': attribute type 16 has an invalid length.
[  259.519425][   T36] audit: type=1400 audit(1752128700.435:40508): avc:  denied  { ioctl } for  pid=14578 comm="syz.4.4991" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  259.678519][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4996'.
[  260.314841][T14644] tipc: Started in network mode
[  260.319834][T14644] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  260.329066][T14644] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  260.945879][T14685] rust_binder: Error while translating object.
[  260.945912][T14685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  260.952309][T14685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:469
[  260.977248][T14687] binder: Unknown parameter ''
[  261.065028][   T36] audit: type=1400 audit(1752128701.975:40509): avc:  denied  { setattr } for  pid=14693 comm="syz.4.5029" name="RAW" dev="sockfs" ino=52329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  261.161412][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5034'.
[  261.425801][  T534] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  261.555881][  T534] usb 5-1: device descriptor read/64, error -71
[  261.649362][T14715] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5036'.
[  261.800046][  T534] usb 5-1: device descriptor read/64, error -71
[  262.055810][  T534] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  262.185816][  T534] usb 5-1: device descriptor read/64, error -71
[  262.267951][T14729] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  262.377867][T14730] 9pnet: Could not find request transport: f
[  262.425871][  T534] usb 5-1: device descriptor read/64, error -71
[  262.535897][  T534] usb usb5-port1: attempt power cycle
[  262.700796][T14733] bpf: Bad value for 'gid'
[  262.809296][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5051'.
[  262.818585][T14753] bridge_slave_1: left allmulticast mode
[  262.824328][T14753] bridge_slave_1: left promiscuous mode
[  262.830705][T14753] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.839467][T14753] bridge_slave_0: left allmulticast mode
[  262.845275][T14753] bridge_slave_0: left promiscuous mode
[  262.851281][T14753] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.875866][  T534] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  262.906906][  T534] usb 5-1: device descriptor read/8, error -71
[  263.039473][T14765] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  263.056656][  T534] usb 5-1: device descriptor read/8, error -71
[  263.105777][   T36] audit: type=1326 audit(1752128704.015:40510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.6.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cc38e929 code=0x7fc00000
[  263.295784][  T534] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  263.303425][   T36] audit: type=1326 audit(1752128704.215:40511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.352428][   T36] audit: type=1326 audit(1752128704.215:40512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.377823][  T534] usb 5-1: device descriptor read/8, error -71
[  263.391782][   T36] audit: type=1326 audit(1752128704.215:40513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.430165][   T36] audit: type=1326 audit(1752128704.215:40514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.468182][   T36] audit: type=1326 audit(1752128704.215:40515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.491946][   T36] audit: type=1326 audit(1752128704.215:40516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.515664][   T36] audit: type=1326 audit(1752128704.215:40517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.7.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6498e929 code=0x7ffc0000
[  263.540399][  T534] usb 5-1: device descriptor read/8, error -71
[  263.655884][  T534] usb usb5-port1: unable to enumerate USB device
[  264.348362][T14816] netlink: 1603 bytes leftover after parsing attributes in process `syz.1.5071'.
[  265.270243][T14827] TCP: out of memory -- consider tuning tcp_mem
[  265.276942][T14827] ------------[ cut here ]------------
[  265.282421][T14827] WARNING: CPU: 1 PID: 14827 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790
[  265.292074][T14827] Modules linked in:
[  265.296033][T14827] CPU: 1 UID: 0 PID: 14827 Comm: syz.1.5075 Not tainted 6.12.30-syzkaller-gd893caf112c8 #0 64e33962539d0ce7a45dea9f0941eea22919d800
[  265.309640][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  265.319773][T14827] RIP: 0010:inet_sock_destruct+0x681/0x790
[  265.325615][T14827] Code: a3 e8 03 d8 c8 fc 0f 0b e9 53 fe ff ff e8 f7 d7 c8 fc 0f 0b e9 92 fe ff ff e8 eb d7 c8 fc 0f 0b e9 c4 fe ff ff e8 df d7 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff
[  265.345456][T14827] RSP: 0018:ffffc90000e6fbe8 EFLAGS: 00010293
[  265.351598][T14827] RAX: ffffffff84bcd071 RBX: 0000000080004000 RCX: ffff8881499c0000
[  265.359619][T14827] RDX: 0000000000000000 RSI: 0000000080004000 RDI: 0000000000000000
[  265.367717][T14827] RBP: ffffc90000e6fc30 R08: ffff888133f20b7f R09: 1ffff110267e416f
[  265.375916][T14827] R10: dffffc0000000000 R11: ffffed10267e4170 R12: ffff888133f20a00
[  265.383919][T14827] R13: ffff888133f20a00 R14: ffff888133f20b64 R15: 1ffff110267e4142
[  265.392115][T14827] FS:  0000555563253500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  265.401144][T14827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  265.407779][T14827] CR2: 00007f49d3582178 CR3: 00000001242bc000 CR4: 00000000003526b0
[  265.415799][T14827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  265.423858][T14827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  265.431882][T14827] Call Trace:
[  265.435187][T14827]  <TASK>
[  265.438178][T14827]  ? __cfi_inet_sock_destruct+0x10/0x10
[  265.443755][T14827]  __sk_destruct+0x6b/0x6a0
[  265.448300][T14827]  ? __sk_free+0x304/0x410
[  265.452753][T14827]  __sk_free+0x313/0x410
[  265.457054][T14827]  sk_free+0x58/0xb0
[  265.460979][T14827]  tcp_close+0xc4/0x120
[  265.465140][T14827]  inet_release+0x1b4/0x2c0
[  265.469681][T14827]  sock_close+0xdd/0x280
[  265.473955][T14827]  ? __cfi_sock_close+0x10/0x10
[  265.478849][T14827]  __fput+0x1fe/0xa00
[  265.482847][T14827]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  265.488447][T14827]  ____fput+0x20/0x30
[  265.492459][T14827]  task_work_run+0x1e3/0x250
[  265.497113][T14827]  ? __cfi_task_work_run+0x10/0x10
[  265.502251][T14827]  ? __kasan_check_write+0x18/0x20
[  265.507405][T14827]  resume_user_mode_work+0x36/0x50
[  265.512535][T14827]  syscall_exit_to_user_mode+0x64/0xb0
[  265.518051][T14827]  do_syscall_64+0x64/0xf0
[  265.522488][T14827]  ? clear_bhb_loop+0x50/0xa0
[  265.527228][T14827]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  265.533143][T14827] RIP: 0033:0x7fad49b8e929
[  265.537617][T14827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.557276][T14827] RSP: 002b:00007ffeb74f0718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  265.565713][T14827] RAX: 0000000000000000 RBX: 00007fad49db7ba0 RCX: 00007fad49b8e929
[  265.573755][T14827] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  265.581791][T14827] RBP: 00007fad49db7ba0 R08: 0000000000000204 R09: 0000001eb74f0a0f
[  265.589824][T14827] R10: 00007fad49db7ac0 R11: 0000000000000246 R12: 0000000000040a77
[  265.597844][T14827] R13: 00007fad49db6080 R14: ffffffffffffffff R15: 00007ffeb74f0830
[  265.606102][T14827]  </TASK>
[  265.609146][T14827] ---[ end trace 0000000000000000 ]---
[  266.245820][    C0] TCP: out of memory -- consider tuning tcp_mem