last executing test programs:

5m52.625993827s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

5m52.59317134s ago: executing program 2 (id=5):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x48)
openat(r1, &(0x7f0000000180)='./file0\x00', 0x600440, 0xa0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x103})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000040))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x804, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0xffffffffffffff4e, 0x0, 0x0})

5m52.474283562s ago: executing program 2 (id=8):
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x2}, {0x7}, 0x50, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="4882fb9d657e07520ca6efce454b544e4851e174d3b63114b11e0a5cbc8ea245b7c96d14b338bf0c0eaae693599b33b46a276762c9718dde4d623f24a28a7041c5feaf2772f1f1268400ef0023a34db8f5520b0de3e5dbae4fbecd20937a546a73a345bd0c643fb0d34fa52635cc11bfabcb536da6583ae3e01a2f9788f8f5e9191cd8feba0a17d0f00995ca061d0e12723bc3f60030d246c9e3381b19f2bc1e196feb71dd843e9217836da16dd8343f5ffd60c324014728b8a5a575ba131dd00351640f97c664b19563ad3f5553", 0xce, 0x0, &(0x7f0000000200)={0x2, 0x125, {0x0, 0xc, 0x37, "07cd666af869de71e52676438bcb51758f5585138d6ca3b3619c0d06dc2173c6575992122780aa52466bfd94ae9ae9e0126c489c57ac25", 0xe1, "56464bc9558496728ab2a6abf0750dca977e97f9bf275652f3238f7dae9e4c921d91d80b9ba3c99253efbe370baeb8585d7bcbc6b689716e0f4ce2a0e2ef718ae7ea43401d2bc9b8805fa0f59e04e81a77999aa494e1d01fb71a31d03b685399c81892e3fe09df762e2a61ea075850f14ddd74484b8205feb072b165e037c8c744bc7298ddf0a3d235de430a9552ff605c8fd5ffbb21e8959aa9433dc1824514ed762bc156d7468334fdffc7c10646e4cc7510ac48e64a3cf9c590518030046e9fc28afa49cdea99575c23c3b6d5f768b116a90550ede72d27b2e3a9213d4b4709"}, 0x15, "0d9c0415c37651729bd5129ae1b3c9a6b9e48cf722"}, 0x146})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8)
lchown(&(0x7f0000000400)='./file0\x00', r0, 0xffffffffffffffff)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4000, 0xe8)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000005c0)={@id={0x2, 0x0, @auto="0bcd0c78ee8c4a15efc35e857b922c3f"}})
r2 = open(&(0x7f0000000640)='./file0\x00', 0x202000, 0xbe)
r3 = getgid()
fchownat(r2, &(0x7f0000000680)='./file0\x00', r0, r3, 0x800)
ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302)
mount$9p_rdma(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x200401, &(0x7f0000000780)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_user}, {@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x6}}], [{@fowner_lt={'fowner<', r0}}, {@euid_eq={'euid', 0x3d, r0}}]}})
splice(r2, &(0x7f0000000840)=0xffffffffffffffff, r1, &(0x7f0000000880)=0x8db, 0x8000000000000000, 0x3)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000008c0))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000900)={0x5f8, 0xf7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000009880)=""/4096)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000a880), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000a980)={&(0x7f000000a900)={0x70, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048080)
symlinkat(&(0x7f000000aa00)='./file0\x00', r1, &(0x7f000000aa40)='./file0\x00')
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f000000aa80)={0x30, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f000000af40)={0x5, {0x4, 0x1, 0x912, 0x63b, 0x1}})
r5 = openat(r4, &(0x7f000000af80)='./file0\x00', 0x20280, 0x60)
mount$tmpfs(0x0, &(0x7f000000afc0)='./file0\x00', &(0x7f000000b000), 0x0, &(0x7f000000b040)={[{@mode={'mode', 0x3d, 0x8000}}, {@inode32}], [{@euid_eq={'euid', 0x3d, r0}}]})
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r0, &(0x7f000000b080)='./file0\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f000000b0c0), 0x32b800, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f000000b200)={&(0x7f000000b100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b1c0)={&(0x7f000000b140)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000000b240), 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f000000b280), &(0x7f000000b2c0)=0x14)
openat$dir(0xffffffffffffff9c, &(0x7f000000b300)='./file0\x00', 0x0, 0x8)
getpeername$inet(r5, &(0x7f000000b340)={0x2, 0x0, @loopback}, &(0x7f000000b380)=0x10)

5m52.426171336s ago: executing program 32 (id=8):
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x2}, {0x7}, 0x50, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="4882fb9d657e07520ca6efce454b544e4851e174d3b63114b11e0a5cbc8ea245b7c96d14b338bf0c0eaae693599b33b46a276762c9718dde4d623f24a28a7041c5feaf2772f1f1268400ef0023a34db8f5520b0de3e5dbae4fbecd20937a546a73a345bd0c643fb0d34fa52635cc11bfabcb536da6583ae3e01a2f9788f8f5e9191cd8feba0a17d0f00995ca061d0e12723bc3f60030d246c9e3381b19f2bc1e196feb71dd843e9217836da16dd8343f5ffd60c324014728b8a5a575ba131dd00351640f97c664b19563ad3f5553", 0xce, 0x0, &(0x7f0000000200)={0x2, 0x125, {0x0, 0xc, 0x37, "07cd666af869de71e52676438bcb51758f5585138d6ca3b3619c0d06dc2173c6575992122780aa52466bfd94ae9ae9e0126c489c57ac25", 0xe1, "56464bc9558496728ab2a6abf0750dca977e97f9bf275652f3238f7dae9e4c921d91d80b9ba3c99253efbe370baeb8585d7bcbc6b689716e0f4ce2a0e2ef718ae7ea43401d2bc9b8805fa0f59e04e81a77999aa494e1d01fb71a31d03b685399c81892e3fe09df762e2a61ea075850f14ddd74484b8205feb072b165e037c8c744bc7298ddf0a3d235de430a9552ff605c8fd5ffbb21e8959aa9433dc1824514ed762bc156d7468334fdffc7c10646e4cc7510ac48e64a3cf9c590518030046e9fc28afa49cdea99575c23c3b6d5f768b116a90550ede72d27b2e3a9213d4b4709"}, 0x15, "0d9c0415c37651729bd5129ae1b3c9a6b9e48cf722"}, 0x146})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8)
lchown(&(0x7f0000000400)='./file0\x00', r0, 0xffffffffffffffff)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4000, 0xe8)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000005c0)={@id={0x2, 0x0, @auto="0bcd0c78ee8c4a15efc35e857b922c3f"}})
r2 = open(&(0x7f0000000640)='./file0\x00', 0x202000, 0xbe)
r3 = getgid()
fchownat(r2, &(0x7f0000000680)='./file0\x00', r0, r3, 0x800)
ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302)
mount$9p_rdma(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x200401, &(0x7f0000000780)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_user}, {@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x6}}], [{@fowner_lt={'fowner<', r0}}, {@euid_eq={'euid', 0x3d, r0}}]}})
splice(r2, &(0x7f0000000840)=0xffffffffffffffff, r1, &(0x7f0000000880)=0x8db, 0x8000000000000000, 0x3)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000008c0))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000900)={0x5f8, 0xf7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000009880)=""/4096)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000a880), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000a980)={&(0x7f000000a900)={0x70, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048080)
symlinkat(&(0x7f000000aa00)='./file0\x00', r1, &(0x7f000000aa40)='./file0\x00')
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f000000aa80)={0x30, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f000000af40)={0x5, {0x4, 0x1, 0x912, 0x63b, 0x1}})
r5 = openat(r4, &(0x7f000000af80)='./file0\x00', 0x20280, 0x60)
mount$tmpfs(0x0, &(0x7f000000afc0)='./file0\x00', &(0x7f000000b000), 0x0, &(0x7f000000b040)={[{@mode={'mode', 0x3d, 0x8000}}, {@inode32}], [{@euid_eq={'euid', 0x3d, r0}}]})
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r0, &(0x7f000000b080)='./file0\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f000000b0c0), 0x32b800, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f000000b200)={&(0x7f000000b100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b1c0)={&(0x7f000000b140)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000000b240), 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f000000b280), &(0x7f000000b2c0)=0x14)
openat$dir(0xffffffffffffff9c, &(0x7f000000b300)='./file0\x00', 0x0, 0x8)
getpeername$inet(r5, &(0x7f000000b340)={0x2, 0x0, @loopback}, &(0x7f000000b380)=0x10)

5m41.9280503s ago: executing program 3 (id=132):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_io_uring_setup(0x4504, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
pwritev(r3, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
socket(0x18, 0x6, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

5m41.20839426s ago: executing program 3 (id=133):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x3)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x6, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x67}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x5, 0xa, 0x7, 0x5, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x1, 0x4, 0xfc}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x4, 0x9, 0x9, 0x1], 0xff}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x5}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x3, 0x9, "d7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0xfc, 0x1001}, @as_header={0x7, 0x24, 0x1, 0xf, 0x10, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x12, 0x1, 0x3, 0x81, "83e5", "46f7"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0xc, 0x1, "6c10"}]}, {{0x9, 0x5, 0x1, 0x9, 0x9912c4390f84841d, 0x44, 0x3b, 0x8, {0x7, 0x25, 0x1, 0x81, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x80, 'p'}, @as_header={0x7, 0x24, 0x1, 0x18, 0x7, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa9, 0x9, 0x7, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xba, 0x7, 0x1, 0x10, 0x8}, 0xdb, &(0x7f0000000400)={0x5, 0xf, 0xdb, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x0, 0x9, 0x1}, @ptm_cap={0x3}, @generic={0xb7, 0x10, 0x1, "502c5682c69e726eb7b1bbea771e9b0a445d3fc0c5f52b88367361b31e75556b8d3565b8db7bc1028714274d3b1ca5bac6230f691b2d53115453047838e1b821e4852060adcf933b249406cc8411335b387043379d35ed0ceaab37a271243c07d59c91ca7db3e9d1b28d019018c4dba5b92f65a1a35eb0b70ead77688839f7692fa32c48c79f17e309db1479df8bd0c5fb13806e8b2739a2f1622819a64241b6d19c10ad03617f810d958d1daacd50855a304137"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x9, 0x6, 0x7, 0x4}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x144d}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2)
ioctl$PPPIOCGIDLE32(r7, 0x8008743f, &(0x7f0000000700))
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000180)=""/187, 0x2, 0xbb}, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x183, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x3, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0x800ffff, 0x7d5c, 0x7fff, 0x4, 0x6000, 0x4, r5, r6, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0x61, 0xf6, &(0x7f0000000500)="64aa5fd104b5373b5abdb3cfe546999f13c48bd5efa79650d7c6ed8116ec9d960d08da3b2c7029669338a000376bfc3f3e892079194c7ab0ce50482740754468377ecc51d1e2f7f3b5e860c6f31a8c3f91201bf04915171d11a8596838c3c5ce8556ab199391f409c67e18e288f0a19c4ee82d89f6a38832395948e9cbd13a4506c4b5b26dd4992630e21c03cf76fc4adb3f92053c25d5d63ababf7ee1703d5c0ab099173e42e92970e0cb2a3e40cca2b1fc7a1093410e47fee1cc046b2c412755a89ddd8b7a8aa49516bbe3dc3d54a3487558f943773ffe6c61be396b2a6010866970bedbb430eedff5104c97c569ef309d88bfb10e")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m40.063914173s ago: executing program 3 (id=136):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f00000000c0)) (async)
fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="100006000000000020"], 0x54, 0x1) (async)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="100006000000000020"], 0x54, 0x1)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r7)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r7, 0x5501, &(0x7f00000000c0)=0x18)
r8 = syz_create_resource$binfmt(&(0x7f0000000140)='./file1\x00')
execveat$binfmt(0xffffffffffffffff, r8, &(0x7f00000003c0)={[&(0x7f0000000180)='/dev/net/tun\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)='/dev/input/event#\x00', &(0x7f0000000380)='\n\x00']}, &(0x7f0000000640)={[&(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f00000004c0)='@\x00', &(0x7f0000000540)='./binderfs/binder1\x00', &(0x7f0000000580)='./binderfs/binder1\x00', &(0x7f00000005c0)='./binderfs/binder1\x00', &(0x7f0000000600)='-[^(\x00']}, 0x4142b4aefb7f524f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
fstat(r9, &(0x7f0000000440)) (async)
fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setreuid(0x0, r10)
stat(&(0x7f0000007080)='./file0\x00', 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f00000001c0))
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m39.360868902s ago: executing program 3 (id=148):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
close(0x4)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000028e000/0x400000)=nil)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffd)
r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
fcntl$addseals(r2, 0x409, 0x8)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x2c020000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0xf38ae000)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000015000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x39, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

5m38.512108286s ago: executing program 3 (id=155):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020)
r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = creat(&(0x7f0000000180)='./file0\x00', 0x21)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000001c0))
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000100)='./file0\x00', r3)
syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c0210000500010725"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext='])

5m37.877453508s ago: executing program 3 (id=161):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r2 = mmap$binder(&(0x7f000034c000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffff7054)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xa0, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0xa, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @exit_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000280)="39a2389b7046161601f897bb72c2d299f1a6e05ee20555c3686e86cb0e5fdb1dcf79f82735c07d4ec6a965e631053fac0862c276b36683e22763b3bc7a311dc66b3f8e6dd0bd26587c21f37742e8a1226e976764cebb6324e4c535a51850b1375a9423cd85a69a222a4c7d4d29b6844abd2f60713fc3d471aea06a7f18fd988124e9acc238bc15e1c46dc5fe6f8c50c3bec86d19fd8efc3e2d9805fa3e6e1ac01d46f9b4b4e05ab7adbb960eb448d881deec5d5626a6713d5d9ac587", 0xbc}, {&(0x7f0000000080)="6b07dcb0b4cf", 0x6}, {&(0x7f00000000c0)}], 0x4, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x101}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @tclass={{0x14, 0x29, 0x43, 0x1455}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x6, 0x1e, '\x00', [@generic={0x8, 0xe2, "ad30e0d070976d0656ad5ebc404f3d2fa3892d5a31dd93d081ed28acdbe805081b17a95b850093c4fd383f491dca46830187d560ea2769bda60975704210de7076ff83eecdfa267b7b5bcdf9afd20efa13f972761cdd4139eb6a73f1820c3a7b6d435f42f95fcbfe642e0654c2af90e8022f10001a6b60374ae9a93ab963d24f2407f04527832dbdff258b01a02eb8cb679131f47ea323f83bbf82e7b3ce5aaea5e8a6ec9fbceba98ee5221d7d6dbbc4b5d37e8a07974920b1849862710c929125767c511f502c985dccc9fb5dafe0c695b1275ac34037bdfa4b355213c787e0a942"}, @jumbo={0xc2, 0x4, 0xc000000}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x168}, 0x4c000)
r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d07389632a97a72304fe544d7ffcccc000000000000004ae5a9b61769853b9267b964f5b351da0298fdcad9f4bda6e601096f"], 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)={0x8, 0xfff7, 0xf, 0x3, 0x6, 0x1, 0x7}, 0xc)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0)
clock_gettime(0x4, &(0x7f0000000000))
read(r3, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

5m22.91897055s ago: executing program 33 (id=161):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r2 = mmap$binder(&(0x7f000034c000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xffffffffffff7054)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xa0, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0xa, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @exit_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000280)="39a2389b7046161601f897bb72c2d299f1a6e05ee20555c3686e86cb0e5fdb1dcf79f82735c07d4ec6a965e631053fac0862c276b36683e22763b3bc7a311dc66b3f8e6dd0bd26587c21f37742e8a1226e976764cebb6324e4c535a51850b1375a9423cd85a69a222a4c7d4d29b6844abd2f60713fc3d471aea06a7f18fd988124e9acc238bc15e1c46dc5fe6f8c50c3bec86d19fd8efc3e2d9805fa3e6e1ac01d46f9b4b4e05ab7adbb960eb448d881deec5d5626a6713d5d9ac587", 0xbc}, {&(0x7f0000000080)="6b07dcb0b4cf", 0x6}, {&(0x7f00000000c0)}], 0x4, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x101}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @tclass={{0x14, 0x29, 0x43, 0x1455}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x6, 0x1e, '\x00', [@generic={0x8, 0xe2, "ad30e0d070976d0656ad5ebc404f3d2fa3892d5a31dd93d081ed28acdbe805081b17a95b850093c4fd383f491dca46830187d560ea2769bda60975704210de7076ff83eecdfa267b7b5bcdf9afd20efa13f972761cdd4139eb6a73f1820c3a7b6d435f42f95fcbfe642e0654c2af90e8022f10001a6b60374ae9a93ab963d24f2407f04527832dbdff258b01a02eb8cb679131f47ea323f83bbf82e7b3ce5aaea5e8a6ec9fbceba98ee5221d7d6dbbc4b5d37e8a07974920b1849862710c929125767c511f502c985dccc9fb5dafe0c695b1275ac34037bdfa4b355213c787e0a942"}, @jumbo={0xc2, 0x4, 0xc000000}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x168}, 0x4c000)
r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d07389632a97a72304fe544d7ffcccc000000000000004ae5a9b61769853b9267b964f5b351da0298fdcad9f4bda6e601096f"], 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)={0x8, 0xfff7, 0xf, 0x3, 0x6, 0x1, 0x7}, 0xc)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0)
clock_gettime(0x4, &(0x7f0000000000))
read(r3, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

4m29.07192118s ago: executing program 4 (id=881):
unshare(0x8040600)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0xc0100100)
unshare(0x8000400)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000)

4m28.960142871s ago: executing program 4 (id=882):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000003)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m28.956561781s ago: executing program 4 (id=883):
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x2, 0x7, 0x1})
write(r0, &(0x7f0000000400)="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", 0x1f000)

4m28.888178798s ago: executing program 4 (id=885):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))
r2 = syz_io_uring_setup(0xaf91, &(0x7f0000000180)={0x0, 0x9e2d, 0x3010, 0x2, 0x200004, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x1, 0xe, 0x5, 0x11, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_sec_ctx={0x3, 0x18, 0x1, 0x2, 0x9, "eea18f1fefb8964e17"}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0xb53}, @sadb_ident={0x2, 0xa, 0x7, 0x0, 0x80000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0xff, 0x33, 0x1}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28}]}, 0x88}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_NMI(r6, 0xae9a)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

4m28.813303605s ago: executing program 4 (id=888):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYRES64=<r4=>r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', <r6=>0x0, 0x2753ff6a53f54945, 0x4, 0xc, 0x5, 0x0, @private0, @empty, 0x7, 0x8001, 0x3, 0xec}})
setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000003c0)={@empty, r6}, 0x14)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b35b093b90831f110000"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="d6319fc786baf4d7ce64acba9c3952d0ea4290ee8e9a00000000000d0000006af3c71998677a16cac8c078ad542a8328f0d2bc74c387b375f053e421d96f973ea7c2d77e8f6390f38ab076781a425895d1c4bbef11b97fe68aa26410abff87ae8b7d0c26d434ae91e4dd356a0c599641f689cc5815b45cfc38138fb63953f902"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r4, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRESHEX], 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x7a6}}}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x367, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0)
ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x9, 0x12, r9, 0x0)
ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000000b00)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>')
ioctl$ASHMEM_SET_NAME(r9, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"])

4m28.499874386s ago: executing program 4 (id=894):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async)
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x45e, 0x732, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x18, 0x42, [{{0x9, 0x4, 0x0, 0x60, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x7b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xd3, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x0, 0x69, 0x10, 0x5}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x5, 0xf00, 0x80, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0x4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x8df, 0xf00, 0x6f81, [0xc000, 0xc0ff, 0x3f30, 0x0]}]}, 0x5, [{0x9c, &(0x7f0000000100)=@string={0x9c, 0x3, "5d6c25309617f8cb0dab1eb784058d38e4a5e89bd51be9738c1c3fd9ad81fb96fb02461f4af066f98d56f0d184256a2a675cfc8c586be14bcf00e1fa053246fb01228434244e92bfb7ce7aa57f68d5958845a91cbb7b7cc289b13769663e3196d4e0548b45b6c3cf32a9f06bef0ebac8a5b77cc15bda85f114be4d675b775fb3636ea84fc9fc3487ea8ef2f815a1c0637f27cdaed83ce730335a"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}]})
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, &(0x7f0000001400)={0x0, 0x2, 0xbf, {0xbf, 0x21, "a59327760aefc44a6c60f7aac4b6cc55602c972399d7040e07ec5edbad81374de1cecc63877518622019b215cfb372c977e431b43b39f6284b64eccd570dc0b7c268f02cba500534fdcdb2aa13b591edf7f9c3f9e30a3fc8227a782608de8506f5047f5d1ccf2a0a41cf0ef2b78ba46ed47515931e8b3546165d9af872dfd936d49576e3d8254f3a24bb957447c011f5ca097a2edc10b4c7b7233372891cef354bb6f963e840339628c9f6c5986663b5dea819012d0509c82ee56ca25d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000003c0), &(0x7f0000001500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x1, 0x1, {0x22, 0xdd2}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x20, 0xe, 0x69, "109a8f307e3078a89c46609a126769f144170165090d26c8af47cc82ecb61ec8bb571c8a4a0d91bbbd0a2f65f3e243becb77a90eca0b3a6dc42d1710e85444d6b37e7235e0bfa19fc917efd49bf5e0a1d1d8d065a10c55e7cbb46ad047a7de7a3de19ae68bf29d1dfe"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000001680)={0x20, 0x1, 0x37, "5ae1fa9a32464167f2309b25ca42c76dd36c6cc648c5c5d59cf0f3abe1314141ebcdd04e2d73be7b7712735a30acf1ff5987cf721d5710"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0xcc}}) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) (async)
socket(0x25, 0x1, 0x0) (async)
syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x28}], 0x1}, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
write(r3, &(0x7f0000000400)="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", 0x1f000)

4m28.45767668s ago: executing program 34 (id=894):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async)
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x45e, 0x732, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x18, 0x42, [{{0x9, 0x4, 0x0, 0x60, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x7b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xd3, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x0, 0x69, 0x10, 0x5}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x5, 0xf00, 0x80, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x3, 0x4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x8df, 0xf00, 0x6f81, [0xc000, 0xc0ff, 0x3f30, 0x0]}]}, 0x5, [{0x9c, &(0x7f0000000100)=@string={0x9c, 0x3, "5d6c25309617f8cb0dab1eb784058d38e4a5e89bd51be9738c1c3fd9ad81fb96fb02461f4af066f98d56f0d184256a2a675cfc8c586be14bcf00e1fa053246fb01228434244e92bfb7ce7aa57f68d5958845a91cbb7b7cc289b13769663e3196d4e0548b45b6c3cf32a9f06bef0ebac8a5b77cc15bda85f114be4d675b775fb3636ea84fc9fc3487ea8ef2f815a1c0637f27cdaed83ce730335a"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}]})
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, &(0x7f0000001400)={0x0, 0x2, 0xbf, {0xbf, 0x21, "a59327760aefc44a6c60f7aac4b6cc55602c972399d7040e07ec5edbad81374de1cecc63877518622019b215cfb372c977e431b43b39f6284b64eccd570dc0b7c268f02cba500534fdcdb2aa13b591edf7f9c3f9e30a3fc8227a782608de8506f5047f5d1ccf2a0a41cf0ef2b78ba46ed47515931e8b3546165d9af872dfd936d49576e3d8254f3a24bb957447c011f5ca097a2edc10b4c7b7233372891cef354bb6f963e840339628c9f6c5986663b5dea819012d0509c82ee56ca25d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000003c0), &(0x7f0000001500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x1, 0x1, {0x22, 0xdd2}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x20, 0xe, 0x69, "109a8f307e3078a89c46609a126769f144170165090d26c8af47cc82ecb61ec8bb571c8a4a0d91bbbd0a2f65f3e243becb77a90eca0b3a6dc42d1710e85444d6b37e7235e0bfa19fc917efd49bf5e0a1d1d8d065a10c55e7cbb46ad047a7de7a3de19ae68bf29d1dfe"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000001680)={0x20, 0x1, 0x37, "5ae1fa9a32464167f2309b25ca42c76dd36c6cc648c5c5d59cf0f3abe1314141ebcdd04e2d73be7b7712735a30acf1ff5987cf721d5710"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0xcc}}) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) (async)
socket(0x25, 0x1, 0x0) (async)
syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x28}], 0x1}, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
write(r3, &(0x7f0000000400)="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", 0x1f000)

4m19.726833539s ago: executing program 6 (id=995):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0xdddd0000, 0x7000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000)

4m19.646160957s ago: executing program 6 (id=1001):
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "764c3cbd4bfcea3ccf39c5d39a1b806b9b7d59625e8a066879fba0a9f3e6a82551ea6a5cfc4e9b07b71db3eeffa3445ddb573a0d465f42672a21fac054d92ba2", 0x33}, 0x48, 0xfffffffffffffffe)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)
keyctl$search(0xa, r0, &(0x7f00000024c0)='keyring\x00', &(0x7f0000002500)={'syz', 0x1}, r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
fallocate(r2, 0x13, 0x7ffffffffffff, 0x40000b7)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000c40), 0x4)
r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

4m19.583543153s ago: executing program 6 (id=1003):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x3f, 0x1, 0xc3}, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
fadvise64(r0, 0xaec, 0x10, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef61, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800)
sendfile(r0, r0, 0x0, 0x7ffff000)

4m19.463468095s ago: executing program 6 (id=1008):
futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0xccffffffffffffff, 0x8, 0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0)
epoll_pwait2(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x1]}, 0x8)
getgroups(0x2, &(0x7f0000000000)=[0x0, <r4=>0x0])
setresgid(r4, r4, 0x0)
setregid(0x0, 0x0)
fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r2})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) (async)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300), 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ftruncate(r5, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

4m19.323810729s ago: executing program 6 (id=1011):
prlimit64(0x0, 0x0, &(0x7f00000039c0)={0xc, 0xb6}, 0x0) (async)
syz_clone3(&(0x7f0000003e40)={0x100100000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) (async)
sendfile(r1, r2, &(0x7f00000001c0), 0x8) (async)
fcntl$addseals(r2, 0x409, 0x8)
fallocate(r2, 0x3, 0x9100, 0x3) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async, rerun: 32)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
syz_usb_connect(0x2, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2d, 0xf4, 0x9f, 0x40, 0x1686, 0xdd, 0x37c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x2, 0x61, 0x10, 0xe, [{{0x9, 0x4, 0x1, 0xbe, 0x1, 0x3e, 0x4, 0xf2, 0x4, [@generic={0x2, 0x11}, @uac_as], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0xfc, 0x6}}]}}, {{0x9, 0x4, 0x22, 0x8, 0x3, 0x6b, 0x1b, 0x50, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xd1df, 0x1}}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0xc, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x3, 0xf4c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x60}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x2, 0x40, 0x90}}]}}, {{0x9, 0x4, 0x2, 0x9, 0x3, 0x19, 0x7d, 0x19, 0x3, [], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0x6, 0xb4, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x8, 0x5, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xc2, 0x1, 0x7}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xfd, 0x7, 0x6, 0x40, 0x4}, 0x0, 0x0, 0x62, [{0x0, &(0x7f0000000200)=@lang_id={0xffffffffffffff20, 0x3, 0x1c01}}, {0x34, &(0x7f0000000500)=@string={0x4a, 0x3, "3a23cd9f3c4fbbf0020f597d26e42497f608d984ba5b189b905ef1f948dcd76c84ed574fe71853bf9d9102b637016f3c06b99a7f439a298c1924d155f564f437f9622373e2543e153ac48fecbb7916dabeee4942bec07fe30998001df5d62df78a2316bb9bdf39f41fdeac4655dde3b9e9f7b2635f62990c44b99472de7e7b8fa82aaf86d717aecced7415a1ba2efe109bbefb53c96c0a4ce035aa4719098ca2fdd86a18"}}, {0x0, &(0x7f00000005c0)=@lang_id={0x0, 0x3, 0x414}}]}) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, 0xffffffffffffffff, 0x8ee49000)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

4m19.297531132s ago: executing program 6 (id=1012):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd8000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0)
close_range(r1, r1, 0x0)

4m19.245578367s ago: executing program 35 (id=1012):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd8000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0)
close_range(r1, r1, 0x0)

4.739913984s ago: executing program 5 (id=4310):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x9b6, &(0x7f0000000000)=<r1=>0x0)
io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x90)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom0\x00', 0x804, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000380)="de547e22061776f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc245fc9c4d749dbc743d748400183a71be91c798890b10e14564e7d309f20d222f9220c8d9b1b0d196137652587ab1"})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4403c1, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
r5 = dup(r4)
write$cgroup_subtree(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10)
bind$tipc(r3, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000100)=0x924)
write$evdev(r6, &(0x7f0000000040), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
fremovexattr(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="62743201003ff53a4765"])
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x5, 0x0)
r8 = accept4$tipc(r3, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x0)
sendmsg$tipc(r8, &(0x7f0000001b40)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x40008811)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000500)=ANY=[@ANYRES8=r7], 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000400)=0xb959)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

4.074638519s ago: executing program 5 (id=4317):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x5c, 0x594, 0xd3c, 0x7fffbfff, 0x4, 0x40004}}, 0x120)
bind$tipc(r0, &(0x7f0000005a00)=@name={0x1e, 0x2, 0x3, {{0x3, 0x3}, 0x3}}, 0x10) (async)
bind$tipc(r0, &(0x7f0000005a00)=@name={0x1e, 0x2, 0x3, {{0x3, 0x3}, 0x3}}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})

4.035672433s ago: executing program 5 (id=4318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[@uexit={0x0, 0x18, 0x80000001}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0xbfa, 0x6}}, @out_dx={0xaa, 0x28, {0x7816, 0x4, 0x9}}, @wrmsr={0x1e, 0x20, {0x61c, 0x40000}}, @wrmsr={0x1e, 0x20, {0x251, 0x8}}, @code={0xa, 0x6c, {"0f07c4817d7fc367aac744240000000000c744240200600000c7442406000000000f011c242e0f01df3e0fc7ae0000c0fe4e0fae6100b805000000b90d0000000f01d9c7442400d2000000c74424020d000000ff1c2466baa100ed"}}, @out_dx={0xaa, 0x28, {0xe734, 0x3, 0xe000000000000000}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @code={0xa, 0x7b, {"c403056aba2c00000003c4627dbfccc744240098000000c74424021915d652c7442406000000000f011c24400f233c470fc7997d870000c74424005c000000c74424021fa90000ff2c24c4e121655905b9800000c00f3235000400000f3065470f011f0f548100800000"}}, @uexit={0x0, 0x18, 0x5cb}, @out_dx={0xaa, 0x28, {0xe366, 0x0, 0x9}}, @code={0xa, 0x4f, {"65440f1f4000f02094456bedeb7c0f064e0fc75800410fc77b0367450f7996030000000f30b9dc0b0000b80d000000ba000000000f300f01c2c4614f10ca"}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @cpuid={0x14, 0x18}, @rdmsr={0x32, 0x18, {0xb0e}}, @rdmsr={0x32, 0x18, {0x461}}], 0x2d6})
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000980)=ANY=[])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200})
r2 = socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10d40, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000001c0))
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000001d40)=[{&(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRES8, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYBLOB="81f2a5673e74552f69290908719c46299868945480ed7b0c11673b74b92fc4abef7278050f9c55d6b5287fbdfd5ed604b48f5a407fd99cb1c20f2c8bd013dc6b4db6f58a77852dcf20304ddc389f806915809e5e7b414a714bcac317dafeb12c0496de55bd845968e8e78bf9ef97cbbec7ea7aa99fc959375569dace087bc731fffcf97354074cfe940b45859cea8f72e31eeee2d67ade73e0e396ad472223f28d26c8716ea62989fb2f980f46f930d0b75e8e1c79dffd7b2cc247e4adf066471a748f25b23eea118a48d724bac19eeef33e2f9b", @ANYRESHEX=r5, @ANYRES8=r0], 0x2c}], 0x1}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00')
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a2bbbb0000bbbbffffffffffff88aa30008100000018060306cb00000000000000bbbbbbbb640101020180c200000eac1414bb"], 0x36)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x800455ca, 0x1)
iopl(0x2)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x13, r10, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xb62f, 0xa88, 0x3, 0xfffffffffffffffb, 0x19dc00000000000, 0x0, 0x2000, 0xfffffffffffffffe, 0x4, 0x453, 0x3, 0x3, 0x2, 0x3, 0xfffffffffffffffd], 0x1, 0x34240})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x800, 0x1})
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0))

3.954619251s ago: executing program 5 (id=4320):
r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000001c0)=@chain={'key_or_keyring:', r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000740))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3.917420714s ago: executing program 5 (id=4321):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x604}, {}], 0x2, 0x0, 0x0, 0x0)

3.624077153s ago: executing program 7 (id=4326):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})

3.623646253s ago: executing program 7 (id=4327):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000020c000/0x400000)=nil)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

3.45655439s ago: executing program 7 (id=4328):
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x2, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x12b8b000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
mlock(&(0x7f0000385000/0x3000)=nil, 0x3000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x8001, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="2b88e13780a5d2a456e65a773f0d89852d43acdd0d17b6b5ff0201ecea77081484ff59688d0784988c3c2502ecacae8bd3509b9840f576b9209557d875bd7fac671b8874abb111ec7cb92e0c6ec15c3a638d1c8eb34366f852f1cddd", 0x5c}, {&(0x7f0000000080)="812f63d4cae7f3d8ca999c7224c1be83cc8716321b05ff963c6752fae48de8b2e0243219c2501c6a74f3518cc8c3cc5a89f17d", 0x33}, {&(0x7f0000000240)="21bddd29a955f7e583d6970de3f01918cee9fd01f5ba427af622eb8c8ece3a8ffa66617ecfe0bd5f6eef3e66de643d948c383e716d73fd9dcafd67960909e3976512a01ab6a29bec1ac1ccf1d122d2a0b3965833931c759994789c1993222c1710ec393cd1a346c439a8ff8e7d3782b06338823bd528d75babf3239b457a3abeb6d18b506d91", 0x86}, {&(0x7f0000000300)="596e31f4", 0x4}], 0x4}}], 0x1, 0x20000000)

3.407383935s ago: executing program 7 (id=4329):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000000640)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000600)=[{r1, 0x5041}, {r0, 0x6002}, {r1, 0x1000}, {r1, 0x8000}, {r2, 0x1000}], 0x5, &(0x7f0000000700)={r3, r4+60000000}, &(0x7f0000000740)={[0xc0]}, 0x8)
syz_io_uring_setup(0x4504, 0x0, 0x0, 0x0)
r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfd, 0xa0, 0xac, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf7, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r7, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
pwritev(r6, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25cfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r9, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
splice(r2, &(0x7f00000001c0)=0x5, r10, &(0x7f0000000780)=0x9, 0x2e51, 0x2)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x4, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf8, 0x5, 0xdd}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x6, 0x4, 0x8, 0x4}, 0x50, &(0x7f0000000100)={0x5, 0xf, 0x50, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xaa, "ac46afc88462145277b2bd978a54e779"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x45, 0x5, 0x80, 0x3ff, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xc9, 0x35, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0xf000, 0x1, [0xc000, 0xff0030, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x8}]}, 0x4, [{0x5a, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0xf3, &(0x7f0000000240)=@string={0xf3, 0x3, "ae8684ec74649a13b4480f887bf225d5c7e1312eae36775f25e246d65d46e538196a223ca8f9aeeaa3a216588ce50969d54a66f8c06b601ab8f0244d1248ec371057ac04583fd916616c07ee1a79d5a15e10e1ecb9b9dba7171adadd8250672643eef4546508cd74a23ba0782b1462b2fee585b2f93b032c701dcf23d1f8350e85cdb856483b0473cbde6e73fdcce0d134756488887be9d4b6c16d19776e8787b0de5bccc471ab1b8bba048549789d91b4b23a6852e9a54b136ef0c18c6b91b394e4c6b5e9dd0c61e73c4e67da29ab57a7a5713099a524cfbf3788b4b5c8899687cd1cdb15c2d3f4cf00f7dd68750d4c66"}}, {0x33, &(0x7f0000000340)=@string={0x33, 0x3, "543859f054bc5c4571d743173f246c36cc2decf30720d496138846fa0993e206dcf8ad4b87c08a14507dcc9a8efc81ce57"}}, {0x91, &(0x7f0000000380)=@string={0x91, 0x3, "1a73c3d23c24e572d970d9b646a527ee33e7b99dfa0b06ad04452d36c7fea0ecd1755d3eaec315448eac27535691163a177e8094edb8c4723d70f849dc47ae21fd2e2cd1f9c708f4503ce3b4eb4ed23f90fcbc557a0407d8480696a4a5a8935a653f1746d7fe7e7c13d90ee6479d612f720725915f154a00d17e838649221e1c0724099285c0ae42b644eda55a2ee4"}}]})
flistxattr(r1, &(0x7f00000004c0)=""/232, 0xe8)
close_range(r1, 0xffffffffffffffff, 0x0)

3.022237593s ago: executing program 5 (id=4336):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000000)=[{r2, 0x4}], 0x1, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x300)
r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x80000000, 0x0)
ptrace(0x10, r3)
syz_pidfd_open(r3, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)={r3})

1.655491287s ago: executing program 0 (id=4351):
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
r0 = fsopen(&(0x7f0000000000)='befs\x00', 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x1, 0x598, 0x0, &(0x7f0000000040)})
ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f00000000c0))
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x3})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
close_range(r0, r0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfe0}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xaf0}, {0x8, 0xb, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xc}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20048844}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r3=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, <r4=>0x0}, &(0x7f0000000480)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f0000000540)={0x13c4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "6ea326"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'befs\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'befs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\\\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "b54d8e2a572d1ee6da1429405e73764fbd5e31ea9806acfc1a60ef5a43fa57273696df0d7f422ba147946be5da688d11826cbff742c6dcdb9e900b77623da2226cc05b64220f975cda4be6869b5604ee0b303727890ad050af4fb02863d81609d70824d905227d7aa781addb08a6b91e03cdcefa1c1e2abf516dbb52d692bed6c3d662686a89fd4f020563c5664139868ac198107887"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xba2}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "686ab65af3b3f3126171496be46eccc180c0a3fa6923642fa0e05c3e7cdd4270c4f1821d93f6171182b00cafe32982e3791b9db486fc6e55717c1e6ece747646a775c4b9ebc059742efb6ec7d244f2cc10fa2b9fba9b712c0a93d8e79b24768d923e40968989066bf3039a5c60253d9e10bbff0a6037111420fc9f2259"}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x1180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x16, 0x5, "074812642243ce4c41a586fde04a753a4251"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "8e2a88c7994ec6647e0c01d24a7fe6648a680796b0f6074959dcf7b41eef26e9b64c2bec679dc845b12938e650adf3f2ff5f323c54ed1f902f8d5738062917174de5cba87811bb867bccf146a9e490d8c6f9e124db62db2a3746c2d8d56813da90ef0c5bd7e5ea48a49f140a457ce09db4df35f632c4ce41223b29014e753a7a07610a741602f961bc75cb7cac11c2ac39db7482be1c9d9f7242ad8dd650d4"}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "7e694db3a4dbcbdd0b698b1c110aacb17f426443fc045b8a1bf5c5d3a195a04e3966916367781e726c41997b62497d5fd2b1de260a0f48c45cb03757fa17078b323c3ec49de8d203d89bd2c22e1ec61c9e289595d09f02aa3bdd7035"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-*}S\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f00000019c0), &(0x7f0000001a00)=0x4)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001a40), 0x181400, 0x0)
ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000001e80)={0x2, 0x0, 0x4, 0x8, 0x137, &(0x7f0000001a80)="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"})
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001ec0)=0x40, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000003080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003040)={&(0x7f0000001f80)={0x10a0, r8, 0x810, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x53}}}}, [@NL80211_ATTR_IE={0x1d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x19, 0x40}}, @cf={0x4, 0x6, {0x1, 0x6, 0x3, 0x2}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_IE={0x1030, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xf3, @device_b, 0x5, @value=@device_b, 0x8, 0x5, @device_b, 0x2}}, @measure_req={0x26, 0x1003, {0xe8, 0x6, 0xc, "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"}}]}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8054)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f00000030c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}, 0x14)
sendmsg$nl_generic(r1, &(0x7f00000041c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004180)={&(0x7f0000003140)={0x1014, 0x10, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1f}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x4080}, 0x4014)
ioctl$TCFLSH(r7, 0x540b, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x78, 0x2, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x42}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0xc0c0)
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000004440), 0x0, 0x0)
ioctl$TIOCGISO7816(r11, 0x80285442, &(0x7f0000004480))

1.629473889s ago: executing program 0 (id=4352):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x15, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48005}, 0x80)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x424a01, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r4, 0x80927000)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)

1.414829171s ago: executing program 0 (id=4353):
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0f011001daa18c4089612d187301010203010902240001000000000904ef0002caea760009050102df0303000009058202ff01400000fc"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})

1.019336129s ago: executing program 1 (id=4357):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
socketpair(0x28, 0x6, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
preadv2(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000400)=""/104, 0x68}], 0x7, 0x3, 0xe0000000, 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000)

948.168597ms ago: executing program 1 (id=4358):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)

905.353721ms ago: executing program 1 (id=4359):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x108}, 0x1, 0x7}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="28000000040000000000000000000000050000000000000009000000000000000000000000000000eb3ec747202ea53994373d894e4a7153c8fd7a25015b4c017ce221a28f6e136043e512ced0b0d4b7d2a9d3e39ac59bb14889943c2e18f720d7aefc4a7aceff16d68943eec35af2838628145eef6277674f0b0aa71308d72b2d23a6f4861f87d0df9e8fc405b9af9bbd5a8970b48bb5b84175514932651a507e8e166b49462b9744a6934a65d17035f99a81ba1743686c18fbd046666f"], 0x28) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc6101, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x1, 0xe, 0x5, 0x11, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_sec_ctx={0x3, 0x18, 0x1, 0x2, 0x9, "eea18f1fefb8964e17"}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0xb53}, @sadb_ident={0x2, 0xa, 0x7, 0x0, 0x80000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0xff, 0x33, 0x1}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28}]}, 0x88}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_NMI(r3, 0xae9a) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x147342, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sendfile(r4, r4, 0x0, 0x7ffff000)

905.020361ms ago: executing program 1 (id=4360):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

903.635591ms ago: executing program 1 (id=4361):
io_submit(0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r0=>0x0, <r1=>0x0})
setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {r0, r1/1000+60000}}, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(0xffffffffffffffff)
r2 = inotify_init1(0x800)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r3 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r3)
fcntl$setsig(r2, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000d60)
rmdir(&(0x7f0000000100)='./control\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r5 = dup(r4)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc8)
socket$nl_generic(0x14, 0x3, 0x10)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])

733.873878ms ago: executing program 0 (id=4362):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r0 = inotify_init1(0x800)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, &(0x7f0000002140))
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x3000426)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f000048e000/0x1000)=nil, 0x1000, 0x3000006, 0x50, r2, 0xe8b7e000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000001080))
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@mcast2, <r4=>0x0}, &(0x7f0000000300)=0x14)
sendto$packet(r2, &(0x7f0000000140)="728ece2c092c00d7df7c1c4ff03c8cb53d7224c2630bf03c7afb4727366252178af91b75704ae0717cd09d6e0baa23dbd6c64387035b0cd023747b70ec273a932c2b96cca932bfa5f5cdb64b1195", 0x4e, 0x4000000, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x1, 0x6, @remote}, 0x14)

372.935843ms ago: executing program 7 (id=4363):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
move_mount(r6, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x100) (async)
ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000100)=0x2)
syz_io_uring_setup(0x11c7, &(0x7f0000000400)={0x0, 0x5683, 0x80}, &(0x7f0000000080), &(0x7f00000005c0)) (async)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, 0x0, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

268.005854ms ago: executing program 7 (id=4364):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x2e)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x7})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x2, 0x100010, 0xffffffffffffffff, 0x278db000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002280))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x85016, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016002d0d89fdc5111a1fd498ed994ea78905f088ab", 0x19, 0x4004814, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000022c0)={'syzkaller0\x00', 0x4000})
r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[])
r5 = openat$tun(0xffffff9c, &(0x7f0000000180), 0xc125ab146ccd755b, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0x34}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x4}, 0x5e}], 0x1, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r7 = socket$inet6(0x10, 0x3, 0x8001)
sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0x10, 0x3, 0x0)

155.147035ms ago: executing program 0 (id=4365):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x80, @vifc_lcl_ifindex, @broadcast}, 0x10)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x4a, 0x2, 0xff, 0x50, @mcast2, @remote, 0x8010, 0x1, 0x0, 0x8}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x80, @vifc_lcl_ifindex, @broadcast}, 0x10) (async)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x4a, 0x2, 0xff, 0x50, @mcast2, @remote, 0x8010, 0x1, 0x0, 0x8}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async)

72.899353ms ago: executing program 0 (id=4366):
r0 = socket$unix(0x1, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/96)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
read(r2, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x5, 0xa}, 0x8, 0x7, 0x200, 0x0, 0x800000, 0x40, 0x0})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) (async)
write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000457000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000300)="ba410066ed26dbc82ef031630126660f71d30066b90b0800000f32dcb94b003e660fc7714966b93609000066b80100000066ba000000000f30baf80c66b8c0632e8a66efbafc0c66b80040972866ef0f20c06635080000000f22c0"}], 0x1, 0x24, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000457000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000300)="ba410066ed26dbc82ef031630126660f71d30066b90b0800000f32dcb94b003e660fc7714966b93609000066b80100000066ba000000000f30baf80c66b8c0632e8a66efbafc0c66b80040972866ef0f20c06635080000000f22c0"}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000000000073000040"])
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000024d564bc3"])
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
write$uinput_user_dev(r12, &(0x7f00000006c0)={'syz1\x00', {0x1, 0x5, 0x1, 0xfff}, 0x24, [0x7, 0xe16, 0xffffffff, 0x4, 0xd3, 0x0, 0x0, 0xe81d, 0x10, 0x6, 0x1, 0x4, 0x8, 0x6, 0x4, 0x8, 0x9, 0x80000001, 0x80000000, 0x0, 0xaf, 0x1, 0xdf, 0xe9, 0x81, 0xc000000, 0x4, 0x80000001, 0x9, 0x8, 0x8, 0xe, 0x1, 0x8, 0x2, 0x8, 0xa, 0x80000001, 0x7ff, 0x7fffffff, 0x3, 0x3, 0x1, 0x3d3d, 0x8, 0x5, 0x10001, 0x3, 0xe2, 0x1c000000, 0x6, 0x8001, 0xff, 0x4, 0x8, 0x8, 0x8, 0x1, 0x80, 0x6, 0x675c, 0x157, 0x10000, 0x92], [0x6, 0x2, 0x8000008, 0x6, 0x9, 0xfffffff3, 0x0, 0x10001, 0x6, 0x1000, 0xc0e, 0xeb88, 0x7fff, 0x8, 0x401, 0x6, 0x32, 0x9d53, 0x0, 0x0, 0x4, 0x400, 0x4, 0x81, 0x45cf2eb, 0x3, 0x7fff, 0x9, 0x3, 0x40, 0x400, 0xb, 0x6, 0xffffff90, 0xf, 0x8d, 0x4, 0x7, 0x0, 0x0, 0xffff, 0x8, 0x4, 0x8, 0xfffffffa, 0xfffffff7, 0x8, 0x9, 0x0, 0x5, 0x0, 0x10001, 0xb066, 0x535, 0xaeb, 0x7, 0x80000000, 0xddab, 0x8b4, 0x9, 0x8, 0xe, 0xd, 0x60ba4ac], [0x0, 0xb, 0x2000000, 0x4, 0xfffffeff, 0x68, 0x4, 0x0, 0x5, 0xd, 0x7, 0x1005428, 0x1, 0x3, 0x101, 0x81, 0x5, 0x1, 0x2, 0xb1, 0x800, 0x0, 0x1, 0x4, 0x1, 0x8001, 0x0, 0x3, 0x7, 0xe240, 0x5, 0x4, 0xd, 0x1ff, 0x3, 0x4, 0xe4, 0x8, 0x9, 0xf, 0xfd7, 0x0, 0x10, 0xaa, 0x800, 0x10, 0x4, 0x5, 0x1, 0x0, 0x800, 0x3, 0x77, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4, 0x8, 0x6, 0x3, 0x7ff, 0x3], [0x2f8, 0x4, 0x3, 0x3a9d0482, 0x9, 0x6, 0xd, 0x2, 0x401, 0x796f, 0x100, 0xfffffffa, 0x4, 0x5, 0x33, 0x13c, 0x0, 0x1, 0x78, 0x9, 0x0, 0x7, 0xffff, 0x3, 0x81, 0x4, 0xff, 0xbdec, 0xfffffffd, 0xb, 0x3, 0x8, 0x5, 0xf, 0x100, 0x3, 0x3, 0x80000000, 0x7, 0x2, 0x100, 0xb5a, 0xdba, 0x96, 0x8, 0xda92, 0x5e1, 0xffff, 0x9, 0x6, 0xb0, 0x39f0cd38, 0x6, 0xcc5, 0x3, 0x4, 0x1, 0x0, 0x7, 0x9, 0x0, 0x2, 0xffffffff, 0xc]}, 0x45c)
setsockopt$inet6_tcp_int(r11, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) (async)
setsockopt$inet6_tcp_int(r11, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4)
bind$unix(r0, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)

0s ago: executing program 1 (id=4367):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c60000000000000109022400010000000309040000010300010009210000080123070009058103"], 0x0) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c60000000000000109022400010000000309040000010300010009210000080123070009058103"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

089632.703:9070): avc:  denied  { write } for  pid=8133 comm="syz.7.2633" lport=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  271.145609][ T8134] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64
[  271.165557][   T36] audit: type=1400 audit(1760089632.703:9071): avc:  denied  { write } for  pid=8133 comm="syz.7.2633" lport=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  271.172308][ T8134] audit: backlog limit exceeded
[  271.195866][   T36] audit: type=1400 audit(1760089632.703:9072): avc:  denied  { write } for  pid=8133 comm="syz.7.2633" lport=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  271.202384][ T8134] audit: audit_backlog=65 > audit_backlog_limit=64
[  271.222844][   T36] audit: type=1400 audit(1760089632.703:9073): avc:  denied  { write } for  pid=8133 comm="syz.7.2633" lport=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  271.665217][ T8150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  271.665253][ T8150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:700
[  272.540830][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.558536][ T8185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.864150][ T8189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  272.864451][ T8189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663
[  272.963975][ T8191] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  273.477966][ T8214] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  273.493009][ T8214] rust_binder: Error while translating object.
[  273.511965][ T8214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  273.529018][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'.
[  273.530251][ T8214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669
[  273.693791][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.732777][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.746785][ T8232] 9pnet_fd: Insufficient options for proto=fd
[  273.747855][ T8238] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  273.905690][ T8246] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2672'.
[  273.923498][ T8246] 0��{X��: renamed from bridge_slave_1 (while UP)
[  273.932771][ T8246] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  274.091833][ T8256] binder: Bad value for 'stats'
[  274.690623][ T8297] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  274.791245][ T8302] netlink: 'syz.5.2689': attribute type 15 has an invalid length.
[  274.802146][ T8302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  274.802174][ T8302] rust_binder: Error while translating object.
[  274.813741][ T8302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  274.819954][ T8302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136
[  274.875987][ T8304] binder: Bad value for 'defcontext'
[  275.484669][ T8314] tipc: Started in network mode
[  275.489949][ T8314] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711
[  275.499055][ T8314] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  275.725890][ T8327] tipc: Started in network mode
[  275.731714][ T8327] tipc: Node identity 6, cluster identity 4711
[  275.738668][ T8327] tipc: Node number set to 6
[  275.981641][ T8346] tipc: Cannot configure node identity twice
[  276.137642][   T36] kauditd_printk_skb: 1245 callbacks suppressed
[  276.137669][   T36] audit: type=1400 audit(1760089637.753:10182): avc:  denied  { create } for  pid=8359 comm="syz.1.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  276.164275][  T485] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  276.175261][   T36] audit: type=1400 audit(1760089637.753:10183): avc:  denied  { write } for  pid=8359 comm="syz.1.2710" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  276.196398][   T36] audit: type=1400 audit(1760089637.793:10184): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.222166][   T36] audit: type=1400 audit(1760089637.793:10185): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.249465][   T36] audit: type=1400 audit(1760089637.793:10186): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.274822][   T36] audit: type=1400 audit(1760089637.793:10187): avc:  denied  { write } for  pid=8361 comm="syz.1.2711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  276.294647][   T36] audit: type=1400 audit(1760089637.793:10188): avc:  denied  { write } for  pid=8361 comm="syz.1.2711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  276.314308][   T36] audit: type=1400 audit(1760089637.863:10189): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.340540][   T36] audit: type=1400 audit(1760089637.953:10190): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.342955][  T485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.367222][   T36] audit: type=1400 audit(1760089637.953:10191): avc:  denied  { ioctl } for  pid=8332 comm="syz.5.2701" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.377552][  T485] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.413953][  T485] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.424183][  T485] usb 6-1: config 0 interface 0 has no altsetting 0
[  276.431065][  T485] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  276.440541][  T485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.450467][  T485] usb 6-1: config 0 descriptor??
[  276.871926][  T485] kye 0003:0458:5015.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  276.895994][ T8374] netlink: 'syz.1.2714': attribute type 4 has an invalid length.
[  276.928972][  T485] kye 0003:0458:5015.0009: unknown main item tag 0x1
[  276.944985][  T485] kye 0003:0458:5015.0009: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  276.967345][  T485] kye 0003:0458:5015.0009: tablet-enabling feature report not found
[  276.985211][  T485] kye 0003:0458:5015.0009: tablet enabling failed
[  277.086284][  T485] usb 6-1: USB disconnect, device number 32
[  277.130890][ T8380] tmpfs: Unknown parameter '18446744073709551615'
[  277.323202][ T8385] netlink: 'syz.7.2718': attribute type 28 has an invalid length.
[  277.716739][ T8389] rust_binder: Write failure EINVAL in pid:148
[  277.903883][ T8404] tmpfs: Unknown parameter '18446744073709551615'
[  278.603979][ T8436] tmpfs: Unknown parameter '18446744073709551615'
[  278.734983][ T8438] netlink: 'syz.1.2736': attribute type 16 has an invalid length.
[  278.760209][ T8440] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  278.760235][ T8440] rust_binder: Read failure Err(EFAULT) in pid:167
[  278.875520][ T8446] block device autoloading is deprecated and will be removed.
[  278.896582][ T8446] rust_binder: Write failure EFAULT in pid:705
[  278.998554][ T8452] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 18446744073709551507)
[  279.004860][ T8452] rust_binder: Error while translating object.
[  279.018571][ T8452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  279.025791][ T8452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:709
[  279.139626][ T8459] rust_binder: 714: no such ref 1
[  279.247079][ T8467] tmpfs: Unknown parameter '18446744073709551615'
[  279.393360][ T8479] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  279.420718][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.444840][ T8486] rust_binder: Write failure EINVAL in pid:183
[  279.459516][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.502646][ T8481] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  279.505923][ T8479] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  279.599895][ T8496] rust_binder: Write failure EFAULT in pid:186
[  279.606863][ T8494] rust_binder: Write failure EFAULT in pid:186
[  279.627938][ T8501] tmpfs: Unknown parameter '18446744073709551615'
[  279.708735][ T8507] tipc: Cannot configure node identity twice
[  279.888597][ T8521] fuseblk: Bad value for 'max_read'
[  279.924376][ T8523] tmpfs: Unknown parameter '18446744073709551615'
[  280.080321][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.089170][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.157386][ T8538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2769'.
[  280.310349][ T8555] tmpfs: Bad value for 'huge'
[  280.551961][ T8579] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  280.559487][ T8579] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  280.690110][ T8588] tmpfs: Bad value for 'huge'
[  280.793119][ T8592] tipc: Cannot configure node identity twice
[  280.843029][   T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  280.914388][ T8600] binder: Bad value for 'max'
[  280.967646][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2792'.
[  280.982130][ T8604] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  280.987617][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2792'.
[  281.012623][   T10] usb 6-1: config 1 has an invalid interface number: 64 but max is 0
[  281.028425][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.041299][   T10] usb 6-1: config 1 has no interface number 0
[  281.049766][ T8611] tmpfs: Bad value for 'huge'
[  281.054248][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  281.071291][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.082301][   T10] usb 6-1: Product: syz
[  281.088291][   T10] usb 6-1: Manufacturer: syz
[  281.093876][   T10] usb 6-1: SerialNumber: syz
[  281.107904][   T10] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  281.123059][   T10] usb 6-1: No valid video chain found.
[  281.153800][   T36] kauditd_printk_skb: 853 callbacks suppressed
[  281.153818][   T36] audit: type=1400 audit(1760089642.773:11045): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.200206][   T36] audit: type=1400 audit(1760089642.803:11046): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.227117][   T36] audit: type=1400 audit(1760089642.803:11047): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.256188][   T36] audit: type=1400 audit(1760089642.813:11048): avc:  denied  { create } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.303063][   T36] audit: type=1400 audit(1760089642.813:11049): avc:  denied  { setopt } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.319881][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.343020][   T36] audit: type=1400 audit(1760089642.843:11050): avc:  denied  { setopt } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.345789][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.368595][   T36] audit: type=1400 audit(1760089642.843:11051): avc:  denied  { setopt } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.388827][ T8582] rust_binder: Error while translating object.
[  281.390473][ T8582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  281.391815][   T36] audit: type=1400 audit(1760089642.843:11052): avc:  denied  { setopt } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.401356][ T8582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:203
[  281.407383][   T36] audit: type=1400 audit(1760089642.843:11053): avc:  denied  { bind } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  281.455389][   T36] audit: type=1400 audit(1760089642.853:11054): avc:  denied  { create } for  pid=8614 comm="syz.1.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  281.511039][ T8624] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2800'.
[  281.540859][ T8617] /dev/rnullb0: Can't open blockdev
[  281.551786][ T8628] /dev/loop0: Can't lookup blockdev
[  281.714299][ T8639] tmpfs: Unknown parameter 'si18446744073709551615'
[  281.932732][  T485] usb 6-1: USB disconnect, device number 33
[  282.000081][ T8645] rust_binder: Write failure EINVAL in pid:205
[  282.057820][ T8647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  282.064486][ T8647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207
[  282.272619][ T8659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:753
[  282.403147][ T8668] tmpfs: Unknown parameter 'si18446744073709551615'
[  282.463761][ T8670] /dev/rnullb0: Can't open blockdev
[  282.475219][ T8670] /dev/rnullb0: Can't open blockdev
[  282.938892][ T8697] tmpfs: Unknown parameter 'si18446744073709551615'
[  283.063389][ T8701] rust_binder: 235: no such ref 1
[  283.069211][ T8701] rust_binder: Error while translating object.
[  283.069236][ T8701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  283.077206][ T8701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235
[  283.206732][ T8710] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  283.513819][ T8719] binder: Bad value for 'max'
[  283.529041][ T8719] binder: Bad value for 'max'
[  283.594684][ T8721] tmpfs: Unknown parameter 'size18446744073709551615'
[  283.640300][ T8725] overlayfs: failed to clone upperpath
[  283.754343][ T8733] overlayfs: missing 'workdir'
[  283.945469][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'.
[  283.955920][ T8744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  283.955955][ T8744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:774
[  284.033083][ T8742] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  284.046635][ T8742] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  284.095112][ T8757] tmpfs: Unknown parameter 'size18446744073709551615'
[  284.489690][ T8783] tmpfs: Unknown parameter 'size18446744073709551615'
[  284.729228][ T8797] tipc: Cannot configure node identity twice
[  284.844679][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.863203][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.901094][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.933212][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.014933][ T8807] kvm: user requested TSC rate below hardware speed
[  285.028121][ T8807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2307790675 (73849301600 ns) > initial count (32142752608 ns). Using initial count to start timer.
[  285.049921][ T8807] rust_binder: 265: no such ref 0
[  285.214401][ T8815] __vm_enough_memory: pid: 8815, comm: syz.5.2864, bytes: 18014402804453376 not enough memory for the allocation
[  285.229409][ T8816] __vm_enough_memory: pid: 8816, comm: syz.5.2864, bytes: 18014402804453376 not enough memory for the allocation
[  285.524408][ T8829] netlink: 'syz.1.2867': attribute type 8 has an invalid length.
[  285.682773][ T8838] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  286.053152][  T485] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  286.213751][   T36] kauditd_printk_skb: 902 callbacks suppressed
[  286.213767][   T36] audit: type=1400 audit(1760089647.833:11957): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.216498][  T485] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  286.220241][   T36] audit: type=1400 audit(1760089647.833:11958): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.248246][  T485] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.283063][   T36] audit: type=1400 audit(1760089647.833:11959): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.330623][   T36] audit: type=1400 audit(1760089647.833:11960): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.339025][  T485] usb 6-1: config 1 has no interface number 0
[  286.358730][   T36] audit: type=1400 audit(1760089647.833:11961): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.380365][  T485] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  286.389342][   T36] audit: type=1400 audit(1760089647.863:11962): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  286.402634][  T485] usb 6-1: config 1 interface 105 has no altsetting 0
[  286.429043][   T36] audit: type=1400 audit(1760089647.883:11963): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.439953][  T485] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  286.461985][   T36] audit: type=1400 audit(1760089647.883:11964): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.472327][  T485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.499150][   T36] audit: type=1400 audit(1760089647.883:11965): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.506601][  T485] usb 6-1: Product: syz
[  286.533761][   T36] audit: type=1400 audit(1760089647.943:11966): avc:  denied  { create } for  pid=8849 comm="syz.0.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  286.536834][  T485] usb 6-1: Manufacturer: syz
[  286.562195][  T485] usb 6-1: SerialNumber: syz
[  286.775887][  T485] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22
[  287.120973][  T485] usb 6-1: USB disconnect, device number 34
[  287.285536][ T8861] input: syz1 as /devices/virtual/input/input26
[  288.111686][ T8906] netlink: 'syz.5.2894': attribute type 4 has an invalid length.
[  288.119796][ T8906] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.2894'.
[  288.277202][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2895'.
[  288.286575][ T8909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2895'.
[  288.543080][ T2453] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  288.640046][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.649102][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.695848][ T2453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.707851][ T2453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.718720][ T2453] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  288.732174][ T2453] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  288.742006][ T2453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.752422][ T2453] usb 6-1: config 0 descriptor??
[  289.167446][ T2453] usbhid 6-1:0.0: can't add hid device: -71
[  289.187129][ T2453] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  289.196188][ T2453] usb 6-1: USB disconnect, device number 35
[  289.770132][ T8930] tipc: Cannot configure node identity twice
[  289.872652][ T8942] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  290.106203][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.115659][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.137312][ T8951] overlayfs: conflicting options: userxattr,redirect_dir=on
[  291.283668][   T36] kauditd_printk_skb: 1210 callbacks suppressed
[  291.283686][   T36] audit: type=1400 audit(1760089652.903:13177): avc:  denied  { ioctl } for  pid=8988 comm="syz.5.2920" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.354158][   T36] audit: type=1400 audit(1760089652.973:13178): avc:  denied  { ioctl } for  pid=8988 comm="syz.5.2920" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.407392][   T36] audit: type=1400 audit(1760089653.023:13179): avc:  denied  { execmem } for  pid=8990 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  291.428094][ T2453] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  291.435858][   T36] audit: type=1400 audit(1760089653.023:13180): avc:  denied  { execute } for  pid=8990 comm="syz.1.2921" path="/dev/rnullb0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  291.459687][   T36] audit: type=1400 audit(1760089653.023:13181): avc:  denied  { create } for  pid=8990 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  291.480111][   T36] audit: type=1400 audit(1760089653.023:13182): avc:  denied  { getopt } for  pid=8990 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  291.503464][   T36] audit: type=1400 audit(1760089653.023:13183): avc:  denied  { name_bind } for  pid=8990 comm="syz.1.2921" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  291.531463][   T36] audit: type=1400 audit(1760089653.023:13184): avc:  denied  { node_bind } for  pid=8990 comm="syz.1.2921" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  291.554192][   T36] audit: type=1400 audit(1760089653.093:13185): avc:  denied  { ioctl } for  pid=8988 comm="syz.5.2920" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.591810][ T8998] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  291.599596][ T8998] SELinux: failed to load policy
[  291.604438][   T36] audit: type=1400 audit(1760089653.093:13186): avc:  denied  { ioctl } for  pid=8988 comm="syz.5.2920" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.612064][ T8998] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  291.655978][ T2453] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.671794][ T2453] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  291.687447][ T2453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.705209][ T2453] usb 6-1: Product: syz
[  291.710410][ T2453] usb 6-1: Manufacturer: syz
[  291.715246][ T2453] usb 6-1: SerialNumber: syz
[  291.881823][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.890910][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.379283][ T9005] 9pnet_fd: Insufficient options for proto=fd
[  292.475449][ T9012] veth0_to_team: entered promiscuous mode
[  292.481302][ T9012] veth0_to_team: entered allmulticast mode
[  292.739249][ T8989] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2920'.
[  292.755102][ T8989] rust_binder: Error while translating object.
[  292.755343][ T8989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  292.761951][ T8989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326
[  292.775580][ T2453] cdc_ncm 6-1:1.0: failed to get mac address
[  292.804636][ T2453] cdc_ncm 6-1:1.0: bind() failure
[  292.821322][ T2453] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  292.830029][ T2453] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  292.844092][ T2453] usb 6-1: USB disconnect, device number 36
[  292.893227][ T9028] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  293.081915][ T9035] /dev/rnullb0: Can't open blockdev
[  293.201648][ T9039] 9pnet_fd: Insufficient options for proto=fd
[  293.379149][ T9043] rust_binder: Error while translating object.
[  293.379204][ T9043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  293.403039][ T9043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:858
[  293.437964][ T9043] SELinux: security_context_str_to_sid () failed with errno=-22
[  294.555634][ T9103] rust_binder: Write failure EFAULT in pid:335
[  295.542801][ T9117] rust_binder: 877: no such ref 3
[  295.564060][ T9117] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  295.665625][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.674281][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.776299][ T9127] netlink: 'syz.1.2972': attribute type 1 has an invalid length.
[  295.818488][ T9130] 9pnet_fd: Insufficient options for proto=fd
[  296.037499][ T9146] 9pnet_fd: Insufficient options for proto=fd
[  296.304652][   T36] kauditd_printk_skb: 399 callbacks suppressed
[  296.304674][   T36] audit: type=1400 audit(1760089657.923:13586): avc:  denied  { read } for  pid=9168 comm="syz.7.2987" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  296.339728][   T36] audit: type=1400 audit(1760089657.923:13587): avc:  denied  { read open } for  pid=9168 comm="syz.7.2987" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  296.420667][   T36] audit: type=1400 audit(1760089658.033:13588): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.469260][   T36] audit: type=1400 audit(1760089658.043:13589): avc:  denied  { read write } for  pid=7485 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.510648][   T36] audit: type=1400 audit(1760089658.043:13590): avc:  denied  { read write open } for  pid=7485 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.531028][ T9180] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.573194][ T9180] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  296.595906][ T9181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9181 comm=syz.7.2992
[  296.606055][ T9180] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.622280][   T36] audit: type=1400 audit(1760089658.043:13591): avc:  denied  { ioctl } for  pid=7485 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.635065][ T9180] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  296.671199][ T9186] virtio-fs: tag </dev/rnullb0> not found
[  296.702394][   T36] audit: type=1400 audit(1760089658.053:13592): avc:  denied  { read write } for  pid=9168 comm="syz.7.2987" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  296.752568][   T36] audit: type=1400 audit(1760089658.053:13593): avc:  denied  { read write open } for  pid=9168 comm="syz.7.2987" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  296.867620][ T9198] rust_binder: Error while translating object.
[  296.867665][ T9198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  296.882239][   T36] audit: type=1400 audit(1760089658.063:13594): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.924492][ T9198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769
[  296.940327][   T36] audit: type=1400 audit(1760089658.063:13595): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  297.005227][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2999'.
[  297.263012][  T485] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  297.333182][ T9223] /dev/loop0: Can't lookup blockdev
[  297.419618][  T485] usb 6-1: config 162 has an invalid interface number: 79 but max is 1
[  297.428854][  T485] usb 6-1: config 162 has an invalid interface number: 183 but max is 1
[  297.437343][  T485] usb 6-1: config 162 has no interface number 0
[  297.444351][  T485] usb 6-1: config 162 has no interface number 1
[  297.451429][  T485] usb 6-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  297.464885][  T485] usb 6-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  297.476566][  T485] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  297.488184][  T485] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  297.500255][  T485] usb 6-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  297.512326][  T485] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[  297.524544][  T485] usb 6-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  297.538313][  T485] usb 6-1: config 162 interface 79 has no altsetting 0
[  297.545642][  T485] usb 6-1: config 162 interface 183 has no altsetting 0
[  297.557728][  T485] usb 6-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[  297.567541][  T485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.575898][  T485] usb 6-1: Product: syz
[  297.580899][  T485] usb 6-1: Manufacturer: syz
[  297.585629][  T485] usb 6-1: SerialNumber: syz
[  297.810437][ T9209] fuse: Bad value for 'fd'
[  297.822529][  T485] pl2303 6-1:162.79: required endpoints missing
[  297.840530][  T485] pl2303 6-1:162.183: pl2303 converter detected
[  297.848381][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  297.857084][  T485] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  297.865988][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  297.875340][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  297.884015][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  297.893112][  T485] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  297.901979][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  297.911253][  T485] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  297.921481][  T485] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[  297.930458][  T485] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[  297.939714][  T485] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[  297.951700][  T485] usb 6-1: pl2303 converter now attached to ttyUSB0
[  297.964156][  T485] usb 6-1: USB disconnect, device number 37
[  297.984717][  T485] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  298.023323][  T485] pl2303 6-1:162.183: device disconnected
[  298.321591][ T9252] SELinux: security_context_str_to_sid () failed with errno=-22
[  298.460787][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.469716][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.481149][ T9257] rust_binder: Failed to allocate buffer. len:4294968200, is_oneway:false
[  298.481180][ T9257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  298.491157][ T9257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:906
[  298.658519][ T9266] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.074686][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.090079][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.100306][ T9271] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  299.408757][ T9273] tipc: Started in network mode
[  299.422052][ T9273] tipc: Node identity 36b900000000000007, cluster identity 8
[  299.713107][  T485] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  299.895534][  T485] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  299.905249][  T485] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  299.914375][  T485] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  299.925144][  T485] usb 6-1: config 220 has no interface number 2
[  299.933012][  T485] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  299.946814][  T485] usb 6-1: config 220 interface 0 has no altsetting 0
[  299.954797][  T485] usb 6-1: config 220 interface 76 has no altsetting 0
[  299.962229][  T485] usb 6-1: config 220 interface 1 has no altsetting 0
[  299.982791][  T485] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  299.983565][ T9308] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  300.002632][  T485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.020556][  T485] usb 6-1: Product: syz
[  300.024961][  T485] usb 6-1: Manufacturer: syz
[  300.029856][  T485] usb 6-1: SerialNumber: syz
[  300.258150][ T9275] exFAT-fs (rnullb0): invalid boot record signature
[  300.273002][ T9275] exFAT-fs (rnullb0): failed to read boot sector
[  300.299753][ T9275] exFAT-fs (rnullb0): failed to recognize exfat type
[  300.327582][  T485] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  300.338463][  T485] usb 6-1: No valid video chain found.
[  300.344211][  T485] usb 6-1: selecting invalid altsetting 0
[  300.360531][  T485] usb 6-1: USB disconnect, device number 38
[  300.612329][ T9348] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  300.642206][ T9345] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  300.642234][ T9345] rust_binder: Error while translating object.
[  300.651556][ T9350] netlink: 'syz.1.3049': attribute type 1 has an invalid length.
[  300.652914][ T9345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  300.658740][ T9350] netlink: 'syz.1.3049': attribute type 2 has an invalid length.
[  300.667833][ T9345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:930
[  300.682067][ T9350] overlayfs: failed to clone upperpath
[  300.756760][ T9354] netlink: 'syz.0.3050': attribute type 4 has an invalid length.
[  300.782164][ T9354] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3050'.
[  300.818548][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.833165][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.916713][ T9360] netlink: 'syz.5.3053': attribute type 12 has an invalid length.
[  301.094779][ T9374] __vm_enough_memory: pid: 9374, comm: syz.5.3057, bytes: 18014402804453376 not enough memory for the allocation
[  301.152440][ T9376] tmpfs: Unknown parameter 'no'
[  301.366262][   T36] kauditd_printk_skb: 663 callbacks suppressed
[  301.366285][   T36] audit: type=1400 audit(1760089662.973:14259): avc:  denied  { read write } for  pid=9382 comm="syz.5.3060" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.367513][ T9385] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  301.386498][   T36] audit: type=1400 audit(1760089662.973:14260): avc:  denied  { read write open } for  pid=9382 comm="syz.5.3060" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.433275][ T9385] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  301.511926][   T36] audit: type=1400 audit(1760089662.973:14261): avc:  denied  { ioctl } for  pid=9382 comm="syz.5.3060" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.562885][   T36] audit: type=1400 audit(1760089662.973:14262): avc:  denied  { mounton } for  pid=9382 comm="syz.5.3060" path="/126/bus" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  301.592822][   T36] audit: type=1400 audit(1760089662.983:14263): avc:  denied  { mounton } for  pid=9382 comm="syz.5.3060" path="/126/bus" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  301.617762][   T36] audit: type=1400 audit(1760089663.023:14264): avc:  denied  { unlink } for  pid=9382 comm="syz.5.3060" name="#f" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  301.641545][   T36] audit: type=1400 audit(1760089663.023:14265): avc:  denied  { mount } for  pid=9382 comm="syz.5.3060" name="/" dev="overlay" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  301.710868][ T9396] rust_binder: Failed copying remainder into alloc: EFAULT
[  301.710894][ T9396] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  301.721228][ T9396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  301.723031][   T36] audit: type=1400 audit(1760089663.033:14266): avc:  denied  { read write } for  pid=9382 comm="syz.5.3060" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.741260][ T9396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:385
[  301.818318][   T36] audit: type=1400 audit(1760089663.033:14267): avc:  denied  { read write open } for  pid=9382 comm="syz.5.3060" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.931307][ T9408] GUP no longer grows the stack in syz.7.3069 (9408): 200000001000-200000c01000 (200000000000)
[  301.948403][ T9410] audit: audit_backlog=65 > audit_backlog_limit=64
[  301.957864][ T9409] __vm_enough_memory: pid: 9409, comm: syz.0.3066, bytes: 18014402804453376 not enough memory for the allocation
[  301.973047][ T9408] CPU: 1 UID: 0 PID: 9408 Comm: syz.7.3069 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627
[  301.973085][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  301.973102][ T9408] Call Trace:
[  301.973110][ T9408]  <TASK>
[  301.973120][ T9408]  __dump_stack+0x21/0x30
[  301.973173][ T9408]  dump_stack_lvl+0x10c/0x190
[  301.973206][ T9408]  ? __cfi_dump_stack_lvl+0x10/0x10
[  301.973236][ T9408]  ? find_vma+0xcd/0x110
[  301.973262][ T9408]  dump_stack+0x19/0x20
[  301.973294][ T9408]  __get_user_pages+0x1e34/0x22d0
[  301.973326][ T9408]  ? __kasan_check_write+0x18/0x20
[  301.973364][ T9408]  ? down_read_killable+0x79/0xf0
[  301.973390][ T9408]  ? populate_vma_page_range+0x230/0x230
[  301.973420][ T9408]  ? kernel_text_address+0xa9/0xe0
[  301.973452][ T9408]  ? unwind_get_return_address+0x51/0x90
[  301.973482][ T9408]  __gup_longterm_locked+0xcb1/0x1580
[  301.973517][ T9408]  ? stack_depot_save_flags+0x38/0x800
[  301.973546][ T9408]  gup_fast_fallback+0x12ae/0x14a0
[  301.973578][ T9408]  ? kasan_save_track+0x3e/0x80
[  301.973603][ T9408]  ? __kmalloc_cache_noprof+0x24c/0x490
[  301.973627][ T9408]  ? futex_lock_pi+0x77a/0xa10
[  301.973660][ T9408]  ? get_user_pages_fast_only+0xc0/0xc0
[  301.973695][ T9408]  get_user_pages_fast+0x73/0xb0
[  301.973726][ T9408]  get_futex_key+0x24d/0x930
[  301.973749][ T9408]  ? __cfi_get_futex_key+0x10/0x10
[  301.973772][ T9408]  ? futex_lock_pi+0x77a/0xa10
[  301.973801][ T9408]  ? futex_setup_timer+0xb4/0xd0
[  301.973823][ T9408]  futex_lock_pi+0x1c0/0xa10
[  301.973850][ T9408]  ? futex_unqueue+0x136/0x160
[  301.973876][ T9408]  ? __cfi_futex_lock_pi+0x10/0x10
[  301.973905][ T9408]  ? __cfi_futex_wake_mark+0x10/0x10
[  301.973945][ T9408]  ? futex_setup_timer+0xb4/0xd0
[  301.973969][ T9408]  ? __cfi_futex_wake_mark+0x10/0x10
[  301.974001][ T9408]  ? __kasan_check_write+0x18/0x20
[  301.974037][ T9408]  ? up_read+0x26/0x1d0
[  301.974069][ T9408]  do_futex+0x25c/0x500
[  301.974094][ T9408]  ? __cfi_do_futex+0x10/0x10
[  301.974119][ T9408]  ? vm_mmap_pgoff+0x145/0x4e0
[  301.974143][ T9408]  __se_sys_futex+0x28f/0x300
[  301.974171][ T9408]  ? __x64_sys_futex+0x110/0x110
[  301.974324][ T9408]  ? __kasan_check_write+0x18/0x20
[  301.974371][ T9408]  __x64_sys_futex+0xe9/0x110
[  301.974411][ T9408]  x64_sys_call+0x227f/0x2ee0
[  301.974456][ T9408]  do_syscall_64+0x58/0xf0
[  301.974487][ T9408]  ? clear_bhb_loop+0x50/0xa0
[  301.974515][ T9408]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  301.974557][ T9408] RIP: 0033:0x7fe8ffd8eec9
[  301.974589][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.974611][ T9408] RSP: 002b:00007fe900cd9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  301.974646][ T9408] RAX: ffffffffffffffda RBX: 00007fe8fffe5fa0 RCX: 00007fe8ffd8eec9
[  301.974668][ T9408] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00
[  301.974686][ T9408] RBP: 00007fe8ffe11f91 R08: 0000000000000000 R09: 0000000000000002
[  301.974704][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.974720][ T9408] R13: 00007fe8fffe6038 R14: 00007fe8fffe5fa0 R15: 00007ffe2fda11c8
[  301.974743][ T9408]  </TASK>
[  302.358742][ T9425] netlink: 'syz.5.3074': attribute type 4 has an invalid length.
[  302.481758][ T9432] 9pnet_fd: Insufficient options for proto=fd
[  302.759310][ T9450] random: crng reseeded on system resumption
[  302.998146][ T9459] 9pnet_fd: Insufficient options for proto=fd
[  303.176578][ T9475] netlink: 'syz.1.3092': attribute type 10 has an invalid length.
[  303.184507][ T9475] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3092'.
[  303.193797][ T9475] bridge_slave_1: entered allmulticast mode
[  303.323656][ T9486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  303.323693][ T9486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:952
[  303.828921][ T9500] netlink: 1072 bytes leftover after parsing attributes in process `syz.5.3099'.
[  303.848138][ T9500] netlink: 280 bytes leftover after parsing attributes in process `syz.5.3099'.
[  303.885993][ T9502] tmpfs: Unknown parameter 'no'
[  303.978125][ T9508] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9508 comm=syz.5.3103
[  304.020176][ T9513] overlayfs: failed to clone upperpath
[  304.433007][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.453047][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.942727][ T9561] tipc: Cannot configure node identity twice
[  305.199236][ T9575] netlink: 'syz.1.3125': attribute type 5 has an invalid length.
[  305.207575][ T9575] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3125'.
[  306.206098][ T9608] fuseblk: Bad value for 'fd'
[  306.423783][   T36] kauditd_printk_skb: 459 callbacks suppressed
[  306.423821][   T36] audit: type=1400 audit(1760089668.043:14707): avc:  denied  { create } for  pid=9611 comm="syz.7.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.450557][   T36] audit: type=1400 audit(1760089668.043:14708): avc:  denied  { connect } for  pid=9611 comm="syz.7.3143" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.472135][   T36] audit: type=1400 audit(1760089668.043:14709): avc:  denied  { write } for  pid=9611 comm="syz.7.3143" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.494262][   T36] audit: type=1400 audit(1760089668.043:14710): avc:  denied  { write } for  pid=9611 comm="syz.7.3143" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.515440][   T36] audit: type=1400 audit(1760089668.043:14711): avc:  denied  { mounton } for  pid=9611 comm="syz.7.3143" path="/294/file0" dev="tmpfs" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  306.629326][   T36] audit: type=1400 audit(1760089668.243:14712): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.655985][   T36] audit: type=1400 audit(1760089668.243:14713): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.683202][   T36] audit: type=1400 audit(1760089668.243:14714): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.742464][   T36] audit: type=1400 audit(1760089668.333:14715): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.787646][   T36] audit: type=1400 audit(1760089668.333:14716): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.967751][ T9631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  306.967786][ T9631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:976
[  307.155551][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3151'.
[  307.506166][ T9642] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3153'.
[  307.515832][ T9642] gretap0: entered promiscuous mode
[  307.531654][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  307.703551][ T9665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9665 comm=syz.1.3160
[  307.738465][ T9665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3160'.
[  307.787201][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[  307.802928][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.832631][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.863025][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.875753][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.888580][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.908615][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.931794][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.941415][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.953010][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.967237][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.985914][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.020985][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.078836][ T9677] fuse: Bad value for 'fd'
[  308.344349][ T9698] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  308.787438][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.797309][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.933610][ T9732] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  309.281398][ T9766] netlink: 'syz.7.3193': attribute type 1 has an invalid length.
[  309.289238][ T9766] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3193'.
[  309.515603][ T9769] ptm ptm30: ldisc open failed (-12), clearing slot 30
[  309.589807][ T9773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:999
[  309.658928][ T9775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1001
[  309.933070][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3198'.
[  310.143651][ T9801] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  310.147831][ T9800] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  310.161345][ T9800] rust_binder: Error while translating object.
[  310.173348][ T9800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  310.179636][ T9800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1013
[  311.921142][   T36] kauditd_printk_skb: 673 callbacks suppressed
[  311.921163][   T36] audit: type=1400 audit(1760089673.533:15390): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.952049][   T36] audit: type=1400 audit(1760089673.533:15391): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.977579][   T36] audit: type=1400 audit(1760089673.533:15392): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.033981][   T36] audit: type=1400 audit(1760089673.633:15393): avc:  denied  { create } for  pid=9820 comm="syz.0.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  312.058474][   T36] audit: type=1400 audit(1760089673.653:15394): avc:  denied  { ioctl } for  pid=9820 comm="syz.0.3211" path="socket:[50144]" dev="sockfs" ino=50144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  312.065838][ T9821] rust_binder: Write failure EFAULT in pid:1029
[  312.084967][   T36] audit: type=1400 audit(1760089673.673:15395): avc:  denied  { write } for  pid=9820 comm="syz.0.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  312.111835][   T36] audit: type=1400 audit(1760089673.673:15396): avc:  denied  { read } for  pid=9820 comm="syz.0.3211" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  312.136344][   T36] audit: type=1400 audit(1760089673.673:15397): avc:  denied  { read open } for  pid=9820 comm="syz.0.3211" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  312.161909][   T36] audit: type=1400 audit(1760089673.683:15398): avc:  denied  { ioctl } for  pid=9820 comm="syz.0.3211" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  312.198332][ T9823] SELinux:  Context system_u:object_r:kvm_device_t:s0 is not valid (left unmapped).
[  312.208570][   T36] audit: type=1400 audit(1760089673.723:15399): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  313.263796][ T9872] netlink: 'syz.1.3229': attribute type 6 has an invalid length.
[  313.280190][ T9872] netlink: 'syz.1.3229': attribute type 4 has an invalid length.
[  313.289324][ T9872] netlink: 'syz.1.3229': attribute type 6 has an invalid length.
[  313.299805][ T9872] netlink: 5944 bytes leftover after parsing attributes in process `syz.1.3229'.
[  313.310086][ T9873] netlink: 'syz.1.3229': attribute type 6 has an invalid length.
[  313.326680][ T9873] netlink: 'syz.1.3229': attribute type 4 has an invalid length.
[  313.342289][ T9873] netlink: 'syz.1.3229': attribute type 6 has an invalid length.
[  313.358596][ T9873] netlink: 5944 bytes leftover after parsing attributes in process `syz.1.3229'.
[  313.949191][ T9908] tipc: Enabled bearer <eth:ip6gre0>, priority 24
[  313.990091][ T9908] rust_binder: Write failure EFAULT in pid:1062
[  314.133302][ T9914] exFAT-fs (rnullb0): invalid boot record signature
[  314.153857][ T9914] exFAT-fs (rnullb0): failed to read boot sector
[  314.160439][ T9914] exFAT-fs (rnullb0): failed to recognize exfat type
[  314.184869][ T9914] rust_binder: Error while translating object.
[  314.184904][ T9914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  314.191210][ T9914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1064
[  314.609012][ T9947] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  314.627148][ T9947] rust_binder: Write failure EINVAL in pid:1072
[  315.072275][   T10] tipc: Node number set to 2886997007
[  315.312416][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3263'.
[  315.359733][ T9961] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3264'.
[  315.378204][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3264'.
[  315.515175][ T9969] binder: Bad value for 'max'
[  316.153249][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'.
[  316.378105][T10014] rust_binder: Got transaction with invalid offset.
[  316.378183][T10014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  316.398216][T10014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1091
[  316.538568][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3284'.
[  316.598734][T10027] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3284'.
[  316.628650][T10027] z00�X��: renamed from gretap0 (while UP)
[  316.644200][T10027] z00�X��: entered allmulticast mode
[  317.060852][   T36] kauditd_printk_skb: 530 callbacks suppressed
[  317.060874][   T36] audit: type=1400 audit(1760089678.673:15931): avc:  denied  { mounton } for  pid=10046 comm="syz.1.3291" path="/345/file0" dev="tmpfs" ino=1882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  317.093788][   T36] audit: type=1400 audit(1760089678.673:15930): avc:  denied  { execmem } for  pid=10046 comm="syz.1.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  317.144936][   T36] audit: type=1400 audit(1760089678.713:15932): avc:  denied  { mount } for  pid=10046 comm="syz.1.3291" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  317.189055][   T36] audit: type=1400 audit(1760089678.773:15933): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.290081][   T36] audit: type=1400 audit(1760089678.773:15934): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.353052][   T36] audit: type=1400 audit(1760089678.773:15935): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.424661][   T36] audit: type=1400 audit(1760089678.953:15936): avc:  denied  { create } for  pid=10057 comm="syz.7.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  317.453980][T10059] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3293'.
[  317.490346][   T36] audit: type=1400 audit(1760089678.963:15937): avc:  denied  { connect } for  pid=10057 comm="syz.7.3294" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  317.527349][T10077] netlink: 4432 bytes leftover after parsing attributes in process `syz.5.3301'.
[  317.536806][   T36] audit: type=1400 audit(1760089678.993:15938): avc:  denied  { setopt } for  pid=10057 comm="syz.7.3294" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  317.558822][   T36] audit: type=1400 audit(1760089678.993:15939): avc:  denied  { setopt } for  pid=10057 comm="syz.7.3294" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  318.069364][T10129] netlink: 'syz.5.3319': attribute type 4 has an invalid length.
[  318.079582][T10130] netlink: 'syz.5.3319': attribute type 4 has an invalid length.
[  318.257370][T10147] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.257832][T10147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1101
[  318.313456][T10153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3327'.
[  318.775250][T10197] netlink: 'syz.5.3343': attribute type 4 has an invalid length.
[  318.783814][T10197] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3343'.
[  318.878332][T10203] 9pnet_fd: Insufficient options for proto=fd
[  319.014276][T10216] overlayfs: failed to clone upperpath
[  319.021966][T10217] overlayfs: failed to clone upperpath
[  319.255576][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.283233][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.298474][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.319354][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.904254][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.912917][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.429402][T10311] overlayfs: failed to clone lowerpath
[  321.088207][T10353] 9pnet_fd: Insufficient options for proto=fd
[  321.101806][T10353] 9pnet_fd: Insufficient options for proto=fd
[  321.113027][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.132365][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.005456][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.033015][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.043168][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.065316][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.506961][   T36] kauditd_printk_skb: 652 callbacks suppressed
[  322.506981][   T36] audit: type=1400 audit(1760089684.123:16592): avc:  denied  { create } for  pid=10423 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  322.533414][   T36] audit: type=1400 audit(1760089684.133:16593): avc:  denied  { name_bind } for  pid=10423 comm="syz.1.3423" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  322.555951][   T36] audit: type=1400 audit(1760089684.133:16594): avc:  denied  { node_bind } for  pid=10423 comm="syz.1.3423" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  322.579904][   T36] audit: type=1400 audit(1760089684.133:16595): avc:  denied  { bind } for  pid=10423 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  322.611687][   T36] audit: type=1400 audit(1760089684.223:16596): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.643093][   T36] audit: type=1400 audit(1760089684.223:16597): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.686003][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.703136][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.710999][   T36] audit: type=1400 audit(1760089684.223:16598): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.746977][T10426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  322.753006][   T36] audit: type=1400 audit(1760089684.293:16599): avc:  denied  { create } for  pid=10425 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.776920][   T36] audit: type=1400 audit(1760089684.303:16600): avc:  denied  { write } for  pid=10425 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.797872][   T36] audit: type=1400 audit(1760089684.303:16601): avc:  denied  { read write } for  pid=10425 comm="syz.0.3424" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  323.189348][T10440] netlink: 'syz.1.3428': attribute type 16 has an invalid length.
[  323.197447][T10440] __nla_validate_parse: 2 callbacks suppressed
[  323.197471][T10440] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.3428'.
[  323.680042][T10460] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  323.700489][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.709607][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.949028][T10464] netlink: 'syz.5.3435': attribute type 1 has an invalid length.
[  324.036661][T10472] overlayfs: failed to clone upperpath
[  324.115357][T10479] overlayfs: regular lower layers cannot follow data lower layers
[  325.338769][T10523] SELinux: security_context_str_to_sid () failed with errno=-22
[  325.359985][T10525] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3460'.
[  325.555823][T10533] __vm_enough_memory: pid: 10533, comm: syz.0.3461, bytes: 18014402804453376 not enough memory for the allocation
[  325.614464][T10531] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3462'.
[  325.980470][T10560] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=10560 comm=syz.0.3470
[  326.001563][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.024661][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.211068][T10571] netlink: 'syz.7.3474': attribute type 2 has an invalid length.
[  326.228233][T10573] netlink: 'syz.7.3474': attribute type 2 has an invalid length.
[  326.928216][T10618] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3491'.
[  327.116703][T10630] overlayfs: failed to clone upperpath
[  327.161881][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.191439][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.233784][T10634] 9pnet_fd: Insufficient options for proto=fd
[  327.307573][T10647] /dev/rnullb0: Can't lookup blockdev
[  327.320259][T10649] fuse: Bad value for 'group_id'
[  327.328837][T10649] fuse: Bad value for 'group_id'
[  327.566433][   T36] kauditd_printk_skb: 527 callbacks suppressed
[  327.566453][   T36] audit: type=1400 audit(1760089689.183:17129): avc:  denied  { create } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.594065][   T36] audit: type=1400 audit(1760089689.183:17130): avc:  denied  { create } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.615443][   T36] audit: type=1400 audit(1760089689.183:17131): avc:  denied  { write } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.636316][   T36] audit: type=1400 audit(1760089689.183:17132): avc:  denied  { read } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.657272][   T36] audit: type=1400 audit(1760089689.183:17133): avc:  denied  { read } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.678383][   T36] audit: type=1400 audit(1760089689.183:17134): avc:  denied  { write } for  pid=10676 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.769692][   T36] audit: type=1400 audit(1760089689.383:17135): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.829203][   T36] audit: type=1400 audit(1760089689.383:17136): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.882512][   T36] audit: type=1400 audit(1760089689.383:17137): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.910519][   T36] audit: type=1400 audit(1760089689.523:17138): avc:  denied  { read } for  pid=10678 comm="syz.0.3511" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  328.029741][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.044739][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.082446][T10688] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  328.082471][T10688] rust_binder: Read failure Err(EFAULT) in pid:1204
[  328.147741][T10692] fuse: Bad value for 'user_id'
[  328.160425][T10692] fuse: Bad value for 'user_id'
[  328.331517][T10710] x_tables: unsorted underflow at hook 4
[  328.435157][T10721] syz.1.3525 (10721): attempted to duplicate a private mapping with mremap.  This is not supported.
[  328.618724][T10732] tmpfs: Unknown parameter 'hu'gZ�i�K�hin_'
[  328.783746][T10749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1211
[  328.970674][T10759] 9pnet_fd: Insufficient options for proto=fd
[  329.110010][T10767] overlay: ./file0 is not a directory
[  329.129752][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.162322][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.844763][T10810] 9pnet_fd: Insufficient options for proto=fd
[  330.943293][T10816] rust_binder: Failed copying into alloc: EFAULT
[  330.943319][T10816] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  330.949890][T10816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  330.973016][T10816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1227
[  331.208084][T10826] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.224943][T10826] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.236437][T10826] bridge0: entered allmulticast mode
[  331.558952][T10848] netlink: 'syz.0.3566': attribute type 16 has an invalid length.
[  331.581966][T10848] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3566'.
[  331.955977][T10888] binder: Bad value for 'max'
[  332.280570][T10904] IPv6: ': Disabled Multicast RS
[  332.321053][T10906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=10906 comm=syz.1.3585
[  332.339634][T10906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10906 comm=syz.1.3585
[  332.729469][   T36] kauditd_printk_skb: 489 callbacks suppressed
[  332.729493][   T36] audit: type=1400 audit(1760089694.343:17628): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.780078][   T36] audit: type=1400 audit(1760089694.343:17629): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.823006][   T36] audit: type=1400 audit(1760089694.343:17630): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.890389][   T36] audit: type=1400 audit(1760089694.423:17631): avc:  denied  { read write } for  pid=10914 comm="syz.0.3597" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  332.955658][   T36] audit: type=1400 audit(1760089694.423:17632): avc:  denied  { read write open } for  pid=10914 comm="syz.0.3597" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  332.963085][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.018986][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.031619][   T36] audit: type=1400 audit(1760089694.423:17633): avc:  denied  { map } for  pid=10914 comm="syz.0.3597" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  333.057505][   T36] audit: type=1400 audit(1760089694.423:17634): avc:  denied  { execmem } for  pid=10914 comm="syz.0.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  333.110189][   T36] audit: type=1400 audit(1760089694.423:17635): avc:  denied  { read execute } for  pid=10914 comm="syz.0.3597" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  333.139605][   T36] audit: type=1400 audit(1760089694.493:17636): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  333.170423][   T36] audit: type=1400 audit(1760089694.493:17637): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  333.481390][T10965] /dev/loop0: Can't lookup blockdev
[  333.622365][T10983] netlink: 'syz.7.3608': attribute type 1 has an invalid length.
[  333.637256][T10983] x_tables: unsorted underflow at hook 2
[  333.694752][T10989] fuse: Bad value for 'user_id'
[  333.700863][T10989] fuse: Bad value for 'user_id'
[  333.851351][T10994] tmpfs: Bad value for 'huge'
[  334.191890][T11024] fuse: Invalid rootmode
[  334.808176][T11055] FAULT_INJECTION: forcing a failure.
[  334.808176][T11055] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  334.823072][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.0.3636 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627
[  334.823111][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  334.823127][T11055] Call Trace:
[  334.823136][T11055]  <TASK>
[  334.823145][T11055]  __dump_stack+0x21/0x30
[  334.823182][T11055]  dump_stack_lvl+0x10c/0x190
[  334.823214][T11055]  ? __cfi_dump_stack_lvl+0x10/0x10
[  334.823244][T11055]  ? kstrtoull+0x13b/0x1e0
[  334.823280][T11055]  dump_stack+0x19/0x20
[  334.823310][T11055]  should_fail_ex+0x3d9/0x530
[  334.823335][T11055]  should_fail+0xf/0x20
[  334.823357][T11055]  should_fail_usercopy+0x1e/0x30
[  334.823382][T11055]  _copy_from_user+0x22/0xb0
[  334.823411][T11055]  ___sys_sendmsg+0x159/0x2a0
[  334.823445][T11055]  ? __sys_sendmsg+0x280/0x280
[  334.823478][T11055]  ? proc_fail_nth_write+0x17e/0x210
[  334.823509][T11055]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  334.823549][T11055]  __x64_sys_sendmsg+0x1eb/0x2c0
[  334.823581][T11055]  ? fput+0x1a5/0x240
[  334.823609][T11055]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  334.823643][T11055]  ? ksys_write+0x1ef/0x250
[  334.823667][T11055]  ? __kasan_check_read+0x15/0x20
[  334.823704][T11055]  x64_sys_call+0x2a4c/0x2ee0
[  334.823751][T11055]  do_syscall_64+0x58/0xf0
[  334.823780][T11055]  ? clear_bhb_loop+0x50/0xa0
[  334.823804][T11055]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  334.823842][T11055] RIP: 0033:0x7f4904f8eec9
[  334.823862][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.823884][T11055] RSP: 002b:00007f4905dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.823910][T11055] RAX: ffffffffffffffda RBX: 00007f49051e5fa0 RCX: 00007f4904f8eec9
[  334.823930][T11055] RDX: 0000000020000040 RSI: 0000200000002e40 RDI: 0000000000000003
[  334.823947][T11055] RBP: 00007f4905dcf090 R08: 0000000000000000 R09: 0000000000000000
[  334.823963][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.823979][T11055] R13: 00007f49051e6038 R14: 00007f49051e5fa0 R15: 00007ffe70b9b008
[  334.824001][T11055]  </TASK>
[  335.150860][T11057] rust_binder: Error while translating object.
[  335.150919][T11057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  335.158008][T11057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1288
[  335.804367][T11088] /dev/rnullb0: Can't lookup blockdev
[  336.096572][T11101] tipc: Cannot configure node identity twice
[  336.246379][T11113] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.3656'.
[  336.285759][T11115] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  336.296997][T11113] rust_binder: inc_ref_done called when no active inc_refs
[  336.297025][T11113] rust_binder: Write failure EINVAL in pid:1305
[  336.439438][T11125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3659'.
[  336.607769][T11133] tipc: Cannot configure node identity twice
[  336.740723][T11142] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3665'.
[  336.751559][T11143] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3665'.
[  336.864179][T11147] netlink: 'syz.0.3666': attribute type 4 has an invalid length.
[  336.897487][T11147] netlink: 'syz.0.3666': attribute type 5 has an invalid length.
[  336.923430][T11147] netlink: 'syz.0.3666': attribute type 1 has an invalid length.
[  337.044045][T11158] rust_binder: Failed copying remainder into alloc: EFAULT
[  337.044076][T11158] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  337.051529][T11158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  337.088866][T11158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1320
[  337.372853][T11167] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock
[  337.394401][T11167] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  337.402799][T11167] rust_binder: Write failure EINVAL in pid:1322
[  337.447072][T11184] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3681'.
[  337.733226][   T36] kauditd_printk_skb: 574 callbacks suppressed
[  337.733247][   T36] audit: type=1400 audit(1760089699.353:18179): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.767133][   T36] audit: type=1400 audit(1760089699.353:18180): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.807344][   T36] audit: type=1400 audit(1760089699.353:18181): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.854134][   T36] audit: type=1400 audit(1760089699.403:18182): avc:  denied  { read write } for  pid=11192 comm="syz.0.3683" name="binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.883792][   T36] audit: type=1400 audit(1760089699.403:18183): avc:  denied  { read write open } for  pid=11192 comm="syz.0.3683" path="/dev/binderfs/binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.913924][   T36] audit: type=1400 audit(1760089699.403:18184): avc:  denied  { create } for  pid=11192 comm="syz.0.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  337.938824][   T36] audit: type=1400 audit(1760089699.403:18185): avc:  denied  { setopt } for  pid=11192 comm="syz.0.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  337.982995][   T36] audit: type=1400 audit(1760089699.413:18186): avc:  denied  { mounton } for  pid=11192 comm="syz.0.3683" path="/443/file1" dev="tmpfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  338.008566][   T36] audit: type=1400 audit(1760089699.413:18187): avc:  denied  { mounton } for  pid=11192 comm="syz.0.3683" path="/443/bus" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  338.033046][   T36] audit: type=1400 audit(1760089699.423:18188): avc:  denied  { unlink } for  pid=11192 comm="syz.0.3683" name="#19" dev="tmpfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  338.221496][T11211] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768
[  338.230555][T11211] rust_binder: Write failure EINVAL in pid:1338
[  338.318221][T11219] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3693'.
[  338.485884][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.494399][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.505735][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.514462][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.220968][T11250] /dev/rnullb0: Can't lookup blockdev
[  339.244777][T11250] overlayfs: failed to resolve './file1': -2
[  339.472904][T11254] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3705'.
[  339.489686][T11254] gretap0: entered promiscuous mode
[  339.853103][T11278] rust_binder: Error while translating object.
[  339.853160][T11278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  339.862766][T11278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1366
[  340.209997][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3722'.
[  340.477065][T11318] No source specified
[  340.576024][T11323] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3730'.
[  341.384164][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.392852][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.418602][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.427363][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.445086][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.453881][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.469438][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.471982][T11344] SELinux:  Context system_u is not valid (left unmapped).
[  341.484810][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.922267][   T36] kauditd_printk_skb: 631 callbacks suppressed
[  342.922288][   T36] audit: type=1400 audit(1760089704.533:18820): avc:  denied  { create } for  pid=11403 comm="syz.5.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  342.950444][   T36] audit: type=1400 audit(1760089704.543:18821): avc:  denied  { create } for  pid=11403 comm="syz.5.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.970927][   T36] audit: type=1400 audit(1760089704.543:18822): avc:  denied  { setopt } for  pid=11403 comm="syz.5.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.999170][   T36] audit: type=1400 audit(1760089704.543:18823): avc:  denied  { execmem } for  pid=11403 comm="syz.5.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  343.088943][   T36] audit: type=1400 audit(1760089704.703:18824): avc:  denied  { create } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  343.109484][   T36] audit: type=1400 audit(1760089704.703:18825): avc:  denied  { getopt } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  343.132263][   T36] audit: type=1400 audit(1760089704.703:18826): avc:  denied  { accept } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  343.154203][   T36] audit: type=1400 audit(1760089704.703:18827): avc:  denied  { create } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  343.176608][   T36] audit: type=1400 audit(1760089704.703:18828): avc:  denied  { write } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  343.199060][   T36] audit: type=1400 audit(1760089704.713:18829): avc:  denied  { read } for  pid=11418 comm="syz.5.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  343.768323][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3780'.
[  343.775572][T11463] netlink: 'syz.5.3781': attribute type 6 has an invalid length.
[  343.967178][T11484] netlink: 'syz.7.3790': attribute type 16 has an invalid length.
[  344.365165][T11500] 9pnet_fd: Insufficient options for proto=fd
[  344.371771][T11499] 9pnet_fd: Insufficient options for proto=fd
[  344.680728][T11507] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  344.774729][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3799'.
[  344.956529][T11512] syz.0.3800: attempt to access beyond end of device
[  344.956529][T11512] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  344.970053][T11512] FAT-fs (loop0): unable to read boot sector
[  346.236224][T11587] tipc: Cannot configure node identity twice
[  346.658008][T11610] rust_binder: Write failure EFAULT in pid:1406
[  347.216461][T11642] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3845'.
[  347.275485][T11642] overlayfs: missing 'lowerdir'
[  347.445823][T11655] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  347.467291][T11655] rust_binder: Write failure EINVAL in pid:1424
[  347.506268][T11660] overlayfs: failed to clone upperpath
[  347.628139][T11663] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  347.707066][T11666] tipc: Cannot configure node identity twice
[  347.914396][T11686] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[  347.932429][   T36] kauditd_printk_skb: 568 callbacks suppressed
[  347.932447][   T36] audit: type=1400 audit(1760089709.543:19398): avc:  denied  { write } for  pid=11685 comm="syz.5.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  348.018901][   T36] audit: type=1400 audit(1760089709.553:19399): avc:  denied  { create } for  pid=11691 comm="syz.0.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  348.118989][   T36] audit: type=1400 audit(1760089709.553:19400): avc:  denied  { create } for  pid=11692 comm="syz.1.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  348.187016][T11713] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.203340][T11713] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64
[  348.218354][T11713] audit: backlog limit exceeded
[  348.219015][   T36] audit: type=1400 audit(1760089709.553:19401): avc:  denied  { create } for  pid=11691 comm="syz.0.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  348.235561][T11713] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.254240][T11713] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64
[  348.262623][T11713] audit: backlog limit exceeded
[  348.267691][T11713] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  348.277673][T11713] tipc: Enabled bearer <udp:syz0>, priority 10
[  348.287810][T11713] rust_binder: Error while translating object.
[  348.287857][T11713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  348.294426][T11713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1437
[  348.376050][T11726] overlayfs: failed to clone upperpath
[  348.601767][T11739] netlink: 'syz.0.3880': attribute type 3 has an invalid length.
[  348.692805][T11741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1448
[  348.929441][T11753] 9pnet_fd: Insufficient options for proto=fd
[  348.969219][T11757] 9pnet_fd: Insufficient options for proto=fd
[  349.077042][T11761] 8021q: VLANs not supported on lo
[  349.143557][T11765] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  349.470584][T11791] /dev/rnullb0: Can't lookup blockdev
[  349.480912][T11793] x_tables: duplicate underflow at hook 4
[  349.636635][T11807] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3908'.
[  351.113477][T11879] /dev/rnullb0: Can't lookup blockdev
[  351.122034][T11879] netlink: 393 bytes leftover after parsing attributes in process `syz.7.3935'.
[  351.475040][T11895] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3940'.
[  351.973536][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.997249][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.016283][T11921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  352.016347][T11921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1493
[  352.846538][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'.
[  352.943799][   T36] kauditd_printk_skb: 580 callbacks suppressed
[  352.943821][   T36] audit: type=1400 audit(1760089714.563:19982): avc:  denied  { create } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.027297][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.040228][   T36] audit: type=1400 audit(1760089714.563:19983): avc:  denied  { write } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.068175][T11954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.097347][   T36] audit: type=1400 audit(1760089714.563:19984): avc:  denied  { read } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.124224][T11977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11977 comm=syz.5.3969
[  353.141761][   T36] audit: type=1400 audit(1760089714.563:19985): avc:  denied  { read } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.168002][   T36] audit: type=1400 audit(1760089714.573:19986): avc:  denied  { write } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.191090][   T36] audit: type=1400 audit(1760089714.573:19987): avc:  denied  { write } for  pid=11968 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  353.212700][   T36] audit: type=1400 audit(1760089714.593:19988): avc:  denied  { create } for  pid=11970 comm="syz.7.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  353.256007][   T36] audit: type=1400 audit(1760089714.613:19989): avc:  denied  { write } for  pid=11970 comm="syz.7.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  353.279980][   T36] audit: type=1400 audit(1760089714.613:19990): avc:  denied  { nlmsg_write } for  pid=11970 comm="syz.7.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  353.302043][   T36] audit: type=1400 audit(1760089714.623:19991): avc:  denied  { write } for  pid=11970 comm="syz.7.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  354.397690][T12048] netlink: 'syz.1.3993': attribute type 27 has an invalid length.
[  354.405727][T12048] lo: entered promiscuous mode
[  354.410677][T12048] lo: entered allmulticast mode
[  354.416410][T12048] tunl0: entered promiscuous mode
[  354.421547][T12048] tunl0: entered allmulticast mode
[  354.427013][T12048] gre0: entered promiscuous mode
[  354.432075][T12048] gre0: entered allmulticast mode
[  354.437636][T12048] z00�X��: entered promiscuous mode
[  354.443707][T12048] erspan0: entered promiscuous mode
[  354.451286][T12048] erspan0: entered allmulticast mode
[  354.463088][T12048] ip_vti0: entered promiscuous mode
[  354.471041][T12048] ip_vti0: entered allmulticast mode
[  354.477302][T12048] ip6_vti0: entered promiscuous mode
[  354.483190][T12048] ip6_vti0: entered allmulticast mode
[  354.489374][T12048] sit0: entered promiscuous mode
[  354.498445][T12048] sit0: entered allmulticast mode
[  354.504432][T12048] ip6tnl0: entered promiscuous mode
[  354.509983][T12048] ip6tnl0: entered allmulticast mode
[  354.515856][T12048] ip6gre0: entered promiscuous mode
[  354.521540][T12048] ip6gre0: entered allmulticast mode
[  354.527431][T12048] ip6gretap0: entered promiscuous mode
[  354.542987][T12048] ip6gretap0: entered allmulticast mode
[  354.549322][T12048] vcan0: entered promiscuous mode
[  354.560425][T12048] vcan0: entered allmulticast mode
[  354.571793][T12048] dummy0: entered promiscuous mode
[  354.585725][T12048] dummy0: entered allmulticast mode
[  354.598048][T12048] veth0: entered promiscuous mode
[  354.603320][T12048] veth0: entered allmulticast mode
[  354.609052][T12048] veth1: entered promiscuous mode
[  354.614391][T12048] veth1: entered allmulticast mode
[  354.620122][T12048] wg0: entered promiscuous mode
[  354.625153][T12048] wg0: entered allmulticast mode
[  354.630625][T12048] wg1: entered promiscuous mode
[  354.638091][T12048] wg1: entered allmulticast mode
[  354.650192][T12048] wg2: entered promiscuous mode
[  354.663092][T12048] wg2: entered allmulticast mode
[  354.671868][T12048] veth0_to_bridge: entered promiscuous mode
[  354.685151][T12048] veth0_to_bridge: entered allmulticast mode
[  354.697972][T12048] bridge_slave_0: entered promiscuous mode
[  354.704768][T12048] bridge_slave_0: entered allmulticast mode
[  354.711704][T12048] veth1_to_bridge: entered promiscuous mode
[  354.717790][T12048] veth1_to_bridge: entered allmulticast mode
[  354.724640][T12048] bridge_slave_1: entered promiscuous mode
[  354.731391][T12048] veth0_to_bond: entered promiscuous mode
[  354.737545][T12048] veth0_to_bond: entered allmulticast mode
[  354.744286][T12048] bond_slave_0: entered promiscuous mode
[  354.750392][T12048] bond_slave_0: entered allmulticast mode
[  354.757234][T12048] veth1_to_bond: entered promiscuous mode
[  354.763410][T12048] veth1_to_bond: entered allmulticast mode
[  354.770133][T12048] bond_slave_1: entered promiscuous mode
[  354.775985][T12048] bond_slave_1: entered allmulticast mode
[  354.783382][T12048] team_slave_0: entered promiscuous mode
[  354.789153][T12048] team_slave_0: entered allmulticast mode
[  354.796459][T12048] veth1_to_team: entered promiscuous mode
[  354.802394][T12048] veth1_to_team: entered allmulticast mode
[  354.809230][T12048] team_slave_1: entered promiscuous mode
[  354.815000][T12048] team_slave_1: entered allmulticast mode
[  354.821501][T12048] veth0_to_batadv: entered promiscuous mode
[  354.827601][T12048] veth0_to_batadv: entered allmulticast mode
[  354.834584][T12048] batadv_slave_0: entered promiscuous mode
[  354.840682][T12048] batadv_slave_0: entered allmulticast mode
[  354.847338][T12048] veth1_to_batadv: entered promiscuous mode
[  354.853368][T12048] veth1_to_batadv: entered allmulticast mode
[  354.859989][T12048] batadv_slave_1: entered promiscuous mode
[  354.866292][T12048] batadv_slave_1: entered allmulticast mode
[  354.873759][T12048] xfrm0: entered promiscuous mode
[  354.879041][T12048] xfrm0: entered allmulticast mode
[  354.885036][T12048] veth0_to_hsr: entered promiscuous mode
[  354.890967][T12048] veth0_to_hsr: entered allmulticast mode
[  354.897369][T12048] hsr_slave_0: entered promiscuous mode
[  354.903340][T12048] hsr_slave_0: entered allmulticast mode
[  354.909658][T12048] veth1_to_hsr: entered promiscuous mode
[  354.916556][T12048] veth1_to_hsr: entered allmulticast mode
[  354.923930][T12048] hsr_slave_1: entered promiscuous mode
[  354.929853][T12048] hsr_slave_1: entered allmulticast mode
[  354.937396][T12048] veth1_virt_wifi: entered promiscuous mode
[  354.944408][T12048] veth1_virt_wifi: entered allmulticast mode
[  354.951255][T12048] veth0_virt_wifi: entered promiscuous mode
[  354.958406][T12048] veth0_virt_wifi: entered allmulticast mode
[  354.965970][T12048] veth1_vlan: entered promiscuous mode
[  354.971832][T12048] veth1_vlan: entered allmulticast mode
[  354.979161][T12048] veth0_vlan: entered allmulticast mode
[  354.986577][T12048] vlan1: entered promiscuous mode
[  354.991884][T12048] vlan1: entered allmulticast mode
[  354.998833][T12048] veth1_macvtap: entered allmulticast mode
[  355.006196][T12048] veth0_macvtap: entered promiscuous mode
[  355.012024][T12048] veth0_macvtap: entered allmulticast mode
[  355.019646][T12048] macsec0: entered promiscuous mode
[  355.026049][T12048] macsec0: entered allmulticast mode
[  355.032009][T12048] ip6_vti1: entered promiscuous mode
[  355.038757][T12048] ip6_vti1: entered allmulticast mode
[  355.045898][T12048] team_slave_0.00: entered promiscuous mode
[  355.052004][T12048] team_slave_0.00: entered allmulticast mode
[  355.059849][T12048] veth0_vlan.0001: entered promiscuous mode
[  355.066773][T12048] veth0_vlan.0001: entered allmulticast mode
[  355.074870][T12048] ': entered promiscuous mode
[  355.079771][T12048] ': entered allmulticast mode
[  355.178406][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4000'.
[  355.334385][T12085] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  355.731099][T12128] tc_dump_action: action bad kind
[  355.907059][T12148] 9pnet_fd: Insufficient options for proto=fd
[  355.913965][T12149] 9pnet_fd: Insufficient options for proto=fd
[  355.975915][T12158] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4030'.
[  356.575104][T12182] netlink: 'syz.7.4041': attribute type 1 has an invalid length.
[  356.604611][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.636446][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.655394][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.673278][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.701584][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.729277][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.768342][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.790393][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.823006][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.854775][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.892980][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.910633][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.041073][   T36] kauditd_printk_skb: 408 callbacks suppressed
[  358.043328][   T36] audit: type=1400 audit(1760089719.653:20400): avc:  denied  { read write } for  pid=12208 comm="syz.0.4050" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  358.075977][   T36] audit: type=1400 audit(1760089719.653:20401): avc:  denied  { read write open } for  pid=12208 comm="syz.0.4050" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  358.077449][T12209] binder: Bad value for 'stats'
[  358.109666][   T36] audit: type=1400 audit(1760089719.663:20402): avc:  denied  { ioctl } for  pid=12208 comm="syz.0.4050" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  358.137805][   T36] audit: type=1400 audit(1760089719.693:20403): avc:  denied  { mounton } for  pid=12208 comm="syz.0.4050" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  358.163080][   T36] audit: type=1400 audit(1760089719.723:20404): avc:  denied  { create } for  pid=12212 comm="syz.7.4051" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.197376][   T36] audit: type=1400 audit(1760089719.723:20405): avc:  denied  { ioctl } for  pid=12212 comm="syz.7.4051" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58013 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.245966][   T36] audit: type=1400 audit(1760089719.723:20406): avc:  denied  { ioctl } for  pid=12212 comm="syz.7.4051" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58013 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.449210][   T36] audit: type=1400 audit(1760089719.813:20407): avc:  denied  { ioctl } for  pid=12212 comm="syz.7.4051" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58013 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.476872][   T36] audit: type=1400 audit(1760089719.863:20408): avc:  denied  { create } for  pid=12223 comm="syz.1.4053" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.498723][   T36] audit: type=1400 audit(1760089719.863:20409): avc:  denied  { map } for  pid=12223 comm="syz.1.4053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  358.710582][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'.
[  358.725965][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.739875][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.758141][T12243] x_tables: unsorted entry at hook 2
[  359.345193][T12269] overlayfs: failed to clone upperpath
[  359.424399][T12278] netlink: 182 bytes leftover after parsing attributes in process `syz.1.4069'.
[  359.788188][T12301] 9pnet_fd: Insufficient options for proto=fd
[  359.994862][T12318] 9pnet_fd: Insufficient options for proto=fd
[  360.645275][T12354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12354 comm=syz.7.4092
[  360.658125][T12354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12354 comm=syz.7.4092
[  361.029797][T12373] overlayfs: failed to clone lowerpath
[  361.576286][T12418] 9pnet_fd: Insufficient options for proto=fd
[  361.676438][T12426] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4118'.
[  361.709686][T12431] binder: Bad value for 'stats'
[  362.071919][T12450] 9pnet_fd: Insufficient options for proto=fd
[  362.081701][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.095377][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.270349][T12462] 9pnet_fd: Insufficient options for proto=fd
[  363.376095][   T36] kauditd_printk_skb: 387 callbacks suppressed
[  363.376122][   T36] audit: type=1400 audit(1760089980.988:20797): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  363.417256][   T36] audit: type=1400 audit(1760089981.018:20798): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  363.449545][   T36] audit: type=1400 audit(1760089981.018:20799): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  363.502994][   T36] audit: type=1400 audit(1760089981.028:20800): avc:  denied  { create } for  pid=12514 comm="syz.1.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.529307][   T36] audit: type=1400 audit(1760089981.058:20801): avc:  denied  { create } for  pid=12522 comm="syz.0.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  363.549352][   T36] audit: type=1400 audit(1760089981.088:20802): avc:  denied  { block_suspend } for  pid=12519 comm="syz.5.4150" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  363.573020][   T36] audit: type=1400 audit(1760089981.088:20803): avc:  denied  { execmem } for  pid=12519 comm="syz.5.4150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  363.593647][   T36] audit: type=1400 audit(1760089981.158:20804): avc:  denied  { create } for  pid=12526 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.622491][   T36] audit: type=1400 audit(1760089981.158:20805): avc:  denied  { create } for  pid=12526 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.663775][   T36] audit: type=1400 audit(1760089981.158:20806): avc:  denied  { connect } for  pid=12526 comm="syz.5.4151" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  364.124203][T12564] /dev/loop0: Can't lookup blockdev
[  364.216679][T12565] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.224020][T12565] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.231382][T12565] bridge_slave_0: entered allmulticast mode
[  364.239028][T12565] bridge_slave_0: entered promiscuous mode
[  364.249725][T12565] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.258055][T12565] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.266137][T12565] bridge_slave_1: entered allmulticast mode
[  364.272804][T12565] bridge_slave_1: entered promiscuous mode
[  364.469321][T12565] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.476836][T12565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.484331][T12565] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.491681][T12565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.573405][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.593437][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.624401][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.631810][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.670370][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.677506][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.833399][T12565] veth0_vlan: entered promiscuous mode
[  364.889586][T12565] veth1_macvtap: entered promiscuous mode
[  365.046470][T12600] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  365.228531][T12609] binder: Unknown parameter ''
[  365.292499][T12612] overlayfs: conflicting options: userxattr,redirect_dir=on
[  365.440439][T12616] rust_binder: Error while translating object.
[  365.440497][T12616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  365.462629][T12616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1574
[  366.171318][T12668] netlink: 'syz.1.4200': attribute type 5 has an invalid length.
[  366.190053][T12668] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4200'.
[  366.219987][T12669] rust_binder: 12: no such ref 1
[  366.236237][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12670 comm=syz.1.4200
[  366.249379][T12669] rust_binder: 12: no such ref 1
[  366.254654][T12669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[  366.273731][T12668] netlink: 'syz.1.4200': attribute type 12 has an invalid length.
[  366.320931][T12668] 9pnet: p9_errstr2errno: server reported unknown error O�����X��۵רѳl��u�9v�
[  366.343144][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'.
[  366.400245][T12680] rust_binder: 12673 RLIMIT_NICE not set
[  366.403495][T12681] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  366.463314][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.483779][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.551257][T12683] rust_binder: Error while translating object.
[  366.551300][T12683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  366.568237][T12683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1589
[  366.726966][T12703] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4212'.
[  366.746093][T12703] gretap0: entered promiscuous mode
[  366.754445][T12703] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4212'.
[  366.764427][T12703] 0��{X��: renamed from gretap0
[  366.770099][T12703] 0��{X��: left promiscuous mode
[  366.775420][T12703] 0��{X��: entered allmulticast mode
[  366.781565][T12703] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  366.801535][T12703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12703 comm=syz.5.4212
[  367.291137][T12720] binder: Unknown parameter 's'
[  368.478279][   T36] kauditd_printk_skb: 1411 callbacks suppressed
[  368.478299][   T36] audit: type=1400 audit(1760089986.088:22218): avc:  denied  { execmem } for  pid=12733 comm="syz.1.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  368.559604][   T36] audit: type=1400 audit(1760089986.168:22219): avc:  denied  { name_bind } for  pid=12737 comm="syz.1.4222" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  368.582107][   T36] audit: type=1400 audit(1760089986.168:22220): avc:  denied  { node_bind } for  pid=12737 comm="syz.1.4222" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  368.606508][   T36] audit: type=1400 audit(1760089986.168:22221): avc:  denied  { name_bind } for  pid=12737 comm="syz.1.4222" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  368.629817][   T36] audit: type=1400 audit(1760089986.168:22222): avc:  denied  { node_bind } for  pid=12737 comm="syz.1.4222" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  368.653400][   T36] audit: type=1400 audit(1760089986.228:22223): avc:  denied  { mounton } for  pid=12737 comm="syz.1.4222" path="/576/file0" dev="tmpfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  368.677664][   T36] audit: type=1400 audit(1760089986.278:22224): avc:  denied  { name_bind } for  pid=12741 comm="syz.1.4223" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  368.701948][   T36] audit: type=1400 audit(1760089986.278:22225): avc:  denied  { node_bind } for  pid=12741 comm="syz.1.4223" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  368.724875][   T36] audit: type=1400 audit(1760089986.328:22226): avc:  denied  { create } for  pid=12743 comm="syz.1.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  368.745955][   T36] audit: type=1400 audit(1760089986.328:22227): avc:  denied  { sys_module } for  pid=12743 comm="syz.1.4224" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  369.522033][T12761] 9pnet_fd: Insufficient options for proto=fd
[  369.595505][T12767] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  369.595873][T12767] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  369.694952][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.714224][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.744433][T12776] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  369.764254][T12776] rust_binder: Write failure EINVAL in pid:1600
[  369.845385][T12784] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  369.986671][T12796] EXT4-fs: dax option not supported
[  370.051811][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'.
[  370.066991][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'.
[  370.530156][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.574456][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.872218][T12830] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.889554][T12830] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.906934][T12830] bridge_slave_0: entered allmulticast mode
[  370.921449][T12830] bridge_slave_0: entered promiscuous mode
[  370.949829][T12830] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.969022][T12830] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.993883][T12830] bridge_slave_1: entered allmulticast mode
[  371.025407][T12830] bridge_slave_1: entered promiscuous mode
[  371.143539][T12844] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  371.151438][T12844] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  371.459495][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.466709][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.488336][T12112] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.495480][T12112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.725999][T12830] veth0_vlan: entered promiscuous mode
[  371.806050][T12830] veth1_macvtap: entered promiscuous mode
[  372.409311][T12863] fuse: Bad value for 'rootmode'
[  372.493014][T12865] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  372.493060][T12865] rust_binder: Error while translating object.
[  372.515261][T12865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  372.521648][T12865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1615
[  373.376404][T12892] No source specified
[  373.492265][   T36] kauditd_printk_skb: 513 callbacks suppressed
[  373.492285][   T36] audit: type=1400 audit(1760089991.098:22741): avc:  denied  { create } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  373.521101][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'.
[  373.572972][   T36] audit: type=1400 audit(1760089991.108:22742): avc:  denied  { write } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  373.602604][   T36] audit: type=1400 audit(1760089991.108:22743): avc:  denied  { create } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  373.625048][T12907] fuseblk: Bad value for 'fd'
[  373.642870][   T36] audit: type=1400 audit(1760089991.108:22744): avc:  denied  { write } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  373.668729][T12911] overlayfs: missing 'lowerdir'
[  373.682325][   T36] audit: type=1400 audit(1760089991.108:22745): avc:  denied  { nlmsg_write } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  373.711900][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4277'.
[  373.731016][   T36] audit: type=1400 audit(1760089991.108:22746): avc:  denied  { create } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.753607][   T36] audit: type=1400 audit(1760089991.108:22747): avc:  denied  { setopt } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.776461][   T36] audit: type=1400 audit(1760089991.108:22748): avc:  denied  { write } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.803046][   T36] audit: type=1400 audit(1760089991.108:22749): avc:  denied  { create } for  pid=12899 comm="syz.5.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  373.834233][   T36] audit: type=1400 audit(1760089991.108:22750): avc:  denied  { getopt } for  pid=12899 comm="syz.5.4274" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  373.911560][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.920712][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.444068][T12946] rust_binder: Error while translating object.
[  374.444120][T12946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  374.450451][T12946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52
[  374.499653][T12948] fuse: Bad value for 'fd'
[  374.551101][T12950] netlink: 'syz.5.4292': attribute type 4 has an invalid length.
[  374.569814][T12950] netlink: 'syz.5.4292': attribute type 2 has an invalid length.
[  375.071945][T12992] overlayfs: failed to clone upperpath
[  376.886881][T13066] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  376.886906][T13066] rust_binder: Read failure Err(EFAULT) in pid:1670
[  376.992134][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'.
[  377.161180][T13085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.169983][T13085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.184384][T13085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.196246][T13085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.310328][T13094] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  377.436143][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.459665][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.060821][T13104] binder: Bad value for 'max'
[  378.194357][T13114] overlayfs: failed to resolve './file0': -2
[  378.508619][   T36] kauditd_printk_skb: 572 callbacks suppressed
[  378.508640][   T36] audit: type=1400 audit(1760089997.118:23323): avc:  denied  { read write } for  pid=4993 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.539595][   T36] audit: type=1400 audit(1760089997.118:23324): avc:  denied  { read write open } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.571658][   T36] audit: type=1400 audit(1760089997.118:23325): avc:  denied  { ioctl } for  pid=4993 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.581914][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.598667][   T36] audit: type=1400 audit(1760089997.188:23326): avc:  denied  { read write } for  pid=13121 comm="syz.0.4353" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  378.633797][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.640101][   T36] audit: type=1400 audit(1760089997.188:23327): avc:  denied  { read write open } for  pid=13121 comm="syz.0.4353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  378.655217][T13122] rust_binder: Write failure EFAULT in pid:1706
[  378.668560][   T36] audit: type=1400 audit(1760089997.188:23328): avc:  denied  { ioctl } for  pid=13121 comm="syz.0.4353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  378.700920][   T36] audit: type=1400 audit(1760089997.188:23329): avc:  denied  { ioctl } for  pid=13121 comm="syz.0.4353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  378.727989][   T36] audit: type=1400 audit(1760089997.258:23330): avc:  denied  { read } for  pid=13121 comm="syz.0.4353" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  378.751737][   T36] audit: type=1400 audit(1760089997.258:23331): avc:  denied  { read open } for  pid=13121 comm="syz.0.4353" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  378.777103][   T36] audit: type=1400 audit(1760089997.258:23332): avc:  denied  { map } for  pid=13121 comm="syz.0.4353" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  379.234443][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.245645][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.798071][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.811922][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.825658][T13154] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  379.901629][T13159] ------------[ cut here ]------------
[  379.907201][T13159] WARNING: CPU: 1 PID: 13159 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  379.917143][T13159] Modules linked in:
[  379.921076][T13159] CPU: 1 UID: 0 PID: 13159 Comm: syz.0.4366 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627
[  379.932781][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  379.942999][T13159] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  379.949296][T13159] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  379.969498][T13159] RSP: 0018:ffffc900037c7540 EFLAGS: 00010246
[  379.975634][T13159] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[  379.983852][T13159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900037c75f8
[  379.991868][T13159] RBP: ffffc900037c7680 R08: ffffc900037c75f7 R09: 0000000000000000
[  379.999998][T13159] R10: ffffc900037c75e0 R11: fffff520006f8ebf R12: ffffc900037c7580
[  380.008135][T13159] R13: dffffc0000000000 R14: 1ffff920006f8eac R15: 0000000000000000
[  380.016351][T13159] FS:  00007f4905dcf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  380.025449][T13159] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.032075][T13159] CR2: 00007f4905daed58 CR3: 000000012aa1c000 CR4: 00000000003526b0
[  380.040282][T13159] Call Trace:
[  380.043652][T13159]  <TASK>
[  380.046634][T13159]  ? vfs_write+0x3c0/0xf30
[  380.051418][T13159]  ? ksys_write+0x141/0x250
[  380.055982][T13159]  ? x64_sys_call+0x271c/0x2ee0
[  380.060931][T13159]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  380.066746][T13159]  ? hashtab_init+0xdb/0x1f0
[  380.071618][T13159]  ___kmalloc_large_node+0x81/0x220
[  380.077134][T13159]  ? hashtab_init+0xdb/0x1f0
[  380.082113][T13159]  __kmalloc_large_node_noprof+0x1e/0xe0
[  380.088010][T13159]  ? hashtab_init+0xdb/0x1f0
[  380.092730][T13159]  __kmalloc_noprof+0x336/0x530
[  380.097836][T13159]  ? kasan_save_alloc_info+0x40/0x50
[  380.103529][T13159]  hashtab_init+0xdb/0x1f0
[  380.108126][T13159]  ? class_read+0x162/0x8a0
[  380.112700][T13159]  symtab_init+0x44/0x70
[  380.117006][T13159]  class_read+0x1df/0x8a0
[  380.121402][T13159]  ? hashtab_init+0xdb/0x1f0
[  380.126162][T13159]  ? __cfi_class_read+0x10/0x10
[  380.131047][T13159]  ? hashtab_init+0x105/0x1f0
[  380.135821][T13159]  policydb_read+0xaa8/0x28c0
[  380.140678][T13159]  ? __kasan_kmalloc+0x96/0xb0
[  380.145587][T13159]  ? __cfi_policydb_read+0x10/0x10
[  380.151196][T13159]  ? security_load_policy+0x128/0x12f0
[  380.156720][T13159]  security_load_policy+0x162/0x12f0
[  380.162043][T13159]  ? avc_has_perm_noaudit+0x21c/0x360
[  380.167691][T13159]  ? _raw_spin_unlock+0x45/0x60
[  380.172777][T13159]  ? __check_object_size+0x50a/0x810
[  380.178171][T13159]  ? __cfi_security_load_policy+0x10/0x10
[  380.183963][T13159]  ? __kasan_check_write+0x18/0x20
[  380.189123][T13159]  sel_write_load+0x298/0x5e0
[  380.193936][T13159]  ? futex_wait+0x29a/0x7a0
[  380.198574][T13159]  ? __cfi_sel_write_load+0x10/0x10
[  380.204417][T13159]  ? __cfi_futex_wait+0x10/0x10
[  380.209483][T13159]  ? bpf_lsm_file_permission+0xd/0x20
[  380.215116][T13159]  ? __cfi_sel_write_load+0x10/0x10
[  380.220475][T13159]  vfs_write+0x3c0/0xf30
[  380.224966][T13159]  ? __cfi_vfs_write+0x10/0x10
[  380.229841][T13159]  ? __kasan_check_write+0x18/0x20
[  380.235199][T13159]  ? mutex_lock+0x92/0x1c0
[  380.239827][T13159]  ? __cfi_mutex_lock+0x10/0x10
[  380.244774][T13159]  ? __fget_files+0x2c5/0x340
[  380.249580][T13159]  ksys_write+0x141/0x250
[  380.254458][T13159]  ? xfd_validate_state+0x68/0x150
[  380.259752][T13159]  ? __cfi_ksys_write+0x10/0x10
[  380.264897][T13159]  ? __kasan_check_write+0x18/0x20
[  380.270407][T13159]  ? fpregs_restore_userregs+0x11d/0x260
[  380.276198][T13159]  __x64_sys_write+0x7f/0x90
[  380.280952][T13159]  x64_sys_call+0x271c/0x2ee0
[  380.285809][T13159]  do_syscall_64+0x58/0xf0
[  380.290411][T13159]  ? clear_bhb_loop+0x50/0xa0
[  380.295199][T13159]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  380.301198][T13159] RIP: 0033:0x7f4904f8eec9
[  380.305781][T13159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.326001][T13159] RSP: 002b:00007f4905dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  380.334595][T13159] RAX: ffffffffffffffda RBX: 00007f49051e5fa0 RCX: 00007f4904f8eec9
[  380.342719][T13159] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000008
[  380.350940][T13159] RBP: 00007f4905011f91 R08: 0000000000000000 R09: 0000000000000000
[  380.359144][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.367218][T13159] R13: 00007f49051e6038 R14: 00007f49051e5fa0 R15: 00007ffe70b9b008
[  380.375466][T13159]  </TASK>
[  380.378606][T13159] ---[ end trace 0000000000000000 ]---
[  380.384500][T13159] SELinux: failed to load policy
[  380.390237][T13160] SELinux: failed to load policy