last executing test programs:

5.821469741s ago: executing program 0 (id=6):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3cd842, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x7f, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
r5 = syz_pidfd_open(r1, 0x0)
r6 = pidfd_getfd(r5, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
r8 = openat(r6, &(0x7f0000000300)='./file0\x00', 0xa60, 0xc8)
ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f00000005c0)=0x1)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x1, 0xfffffffffffffffa, r1})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="a8ef76b4c71589502bbaf172f9ad8d16b96528b7e39675fbc47b196f044e4a5ecc24743e63997b43e42026a27b5db7b42d8ec0376b4369dcd3e71cca1888e6ddb5f0ed1f3625ca786edaa2937bf762df325eec434ca05b375cfbb032784f427ba14513f8175a41db747ab0148f6d714f3d62e7ac67d4c389e5cfd5d443"], 0x8)
syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0004070000002200001001f1ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
ptrace$setregs(0xd, r1, 0x7, &(0x7f00000001c0)="cf003653bd540582de005a88a40b27d37653b3ca4e9a8c96b03b09040016d67d7d1484b7b889306f2a09c3")
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="b70b0000007c7d04652538"], 0x14}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r11 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r11, 0x107, 0xa, 0x0, &(0x7f00000000c0))

4.06214418s ago: executing program 0 (id=14):
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000400))
getitimer(0x1, &(0x7f0000000080))
r0 = socket$netlink(0x10, 0x3, 0x0)
mount$incfs(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x2020081, &(0x7f0000000700)={[{@readahead={'readahead', 0x3d, 0x9}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0xef5}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x14c}}, {@rlog_pages={'rlog_pages', 0x3d, 0x2}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@obj_role}, {@audit}, {@obj_role={'obj_role', 0x3d, '/selinux/avc/cache_stats\x00'}}]})
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000340)={0x5, 0x2})
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000640)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000600)=0x6})
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000003c0)={0xb9, 0x10, [0xf9bd, 0x3, 0x0, 0x80000000], &(0x7f0000000380)=[0x0, 0x0]})

4.05944808s ago: executing program 0 (id=15):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
dup3(r1, r0, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x0)

4.05897902s ago: executing program 0 (id=16):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f00000020c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x7, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x7d, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x9}})
ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0xe00000, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xffffff01, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4000)
write$P9_RLERRORu(r9, &(0x7f0000000140)={0x11, 0x7, 0x1, {{0x4, '#\xe0\\*'}, 0x1}}, 0x11)
close_range(r0, 0xffffffffffffffff, 0x0)

3.084267267s ago: executing program 0 (id=34):
prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) (async)
prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
pipe2(&(0x7f0000000480)={<r1=>0xffffffffffffffff}, 0x4000)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async)
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=<r2=>0x0)
ioctl$TUNSETOWNER(r1, 0x400454cc, r2) (async)
ioctl$TUNSETOWNER(r1, 0x400454cc, r2)
getpgid(0x0) (async)
r3 = getpgid(0x0)
capset(&(0x7f0000000400)={0x20071026, r3}, &(0x7f0000000440)={0x8, 0x6, 0x1, 0x5, 0x0, 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x52242, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x52242, 0x0)
r5 = fcntl$getown(r4, 0x9)
capset(&(0x7f0000000140)={0x20080522, r5}, &(0x7f0000000180)={0x6, 0x1000, 0x7, 0x3, 0x8, 0x5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x188d1}, 0x4044015)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f13", 0x27}], 0x1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

3.026213261s ago: executing program 1 (id=36):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
fsopen(0x0, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.946522588s ago: executing program 0 (id=37):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x90, 0xc6, 0xd3, 0x40, 0x54c, 0x10, 0x506, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x87, 0x50, 0x81, [{{0x9, 0x4, 0xbc, 0x7, 0x1, 0x3a, 0x10, 0xf4, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x53f0b8d8254d13e7, 0x81, 0x4, 0xa}}]}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB="b9606cfdc264"], 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xe, [{@remote}]}]}}}], 0x20}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000040)=0x46a0d53c, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2.946257938s ago: executing program 1 (id=38):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])

2.584445876s ago: executing program 3 (id=42):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe3071000) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r3) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', <r5=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2509000000080003007ddb93ef83cd2ae859c57714f7863d9f6b9e5ec8cd877efe45320e609fd8b13cff0bbecdb820846aaa170ae090f990756c1beff314cb7f97368b150f4d06d424157da54cd2d42a2c444a3ea173b1f0649a1184ace6810b3625848023ac0ca91dcc5ad5340d72ef9de82d15c9db6184df841e1d9727a4c92825be6b1e16815d825ce38540dc2b08135dc5063e8e1a45d4c726a8e621f250fe8b4466", @ANYRES32=r5, @ANYBLOB="0500070000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x84}, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async, rerun: 64)
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f00000029c0)='./file0/file0\x00', &(0x7f0000002a00)={0x2482c1, 0x0, 0x8}, 0x18) (async)
recvmsg$unix(r7, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/228, 0xe4}, {&(0x7f0000002880)=""/177, 0xb1}, {&(0x7f00000026c0)=""/215, 0xd7}], 0x4}, 0x40000300) (async)
r8 = socket(0x35, 0xa, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r8, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')

2.573467317s ago: executing program 3 (id=44):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r1, &(0x7f0000001cc0)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000003800)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0)
sendto(r4, &(0x7f0000000200)="cf6e382ed33771286a1e9e508e06a1f0d48c3fd287d337f7b022c24c03927b63f503c117213d3e70dc4791ac80c49a8794adcb65e389552c7ad2584b6dfe138c6411b67ce0901cc8ed0863a85db258ba06b40f6a816eeec202c1a68d4b2fea9d02d03deb32a0bf270b0e2be3c16fe460ac65b204f1b44ef3271aace4f9f19e3a2411ea8154c6887bfe3a9375add591219d3268303375f83b408606dd4ed8cce3f11f5ec0134f41c822746d6a6bed5f0edcb45ecf752d5203", 0xb8, 0x44, &(0x7f0000000100)=@in={0x2, 0x4e24, @empty}, 0x80)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x2, 0x81, 0x0, [@loopback]}, 0x18)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000000000))

2.573065867s ago: executing program 3 (id=45):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40102, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
dup3(r2, r0, 0x80000)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x2f8100, 0x66)
mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f00000001c0)='./file0\x00', 0x4a9)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', <r9=>0x0})
sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0}, 0x14)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r10, &(0x7f0000000680)='N', 0x1)
splice(r10, &(0x7f0000000040), r6, 0x0, 0x800000000ff, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_GET_XSAVE2(r11, 0x9000aecf, &(0x7f00007b9000/0x3000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

2.567746738s ago: executing program 3 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
fremovexattr(r3, &(0x7f0000000140)=@random={'security.', '/dev/fuse\x00'})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.537927599s ago: executing program 2 (id=49):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x100)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0x96}, 0x20)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x81031, 0xffffffffffffffff, 0x10000000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
close_range(r0, 0xffffffffffffffff, 0x0)

1.39993535s ago: executing program 2 (id=50):
unshare(0x8040600)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000001800)=0x7fe, 0x4)
recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x2)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'pim6reg0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x20, 0xc4, "e7793892d0863f3a67dc7e90257aa6b3069f483a2978986ce4b0f3df23111ab3e837eab5948da172f150882cee5b8726f2461a292a6d9a0c5e9f173f47d2f65a51d31b8d8e75b788a72f65e9280ede4388e866eddfda3224fdb178d5bbcb0c134e9ed43fa88f6d7b66c82a480ade86345784e43843ce4d508d5d4a7c9556b60b1eb9d41bc64019ac7765e282fa8fbdfc69a0ca1c6e774fa51e3d2efd8a4c36fb5ff62cc8e2d5df4754a9f12f68db1b71fac7657dd64b819008efb81481af2ddf2bc6e338"}})
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f00000002c0)='./control\x00')
ptrace(0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9}, 0x20)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000100)=0x8, 0x4)
sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x10f, 0xb, "bde2"}], 0x18}}], 0x1, 0x402c030)
r9 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x368, 0x1, 0x1, {0x22, 0xa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xfb, 0x7, 0x80}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x4, 0x10, 0xce93f6c44be34dcb, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x75, &(0x7f0000000400)=@string={0x75, 0x3, "0e2ea0ca6cc3362f0802485d825d6aed68cedbd173be6b436eb9ab5cf211c4d045109419ec913278894047fee86c923f99fe27941a8915bc923097e603c689e71d9f1c2d7515edaf51f18b74ff68fb6b558e5afaa022b2494a840e1c7cb1db0b44462dfe4f5b71153be4495f07497bfd40b7c9"}}, {0x66, &(0x7f0000000480)=@string={0x66, 0x3, "a20346c41cc11447bb509f2c4f3f5f4de3588b3c82abec7ad03b9e8ccaccb3ac19fcc055ca94a8e70bd48c740d7dd4ffa3ff9ac8223298a66d580072bd368dc86cbfe4b38ec509f601259e829d89d90a606ba2449da582cb4f520496d1547cd20c36c0c5"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x240a}}, {0x46, &(0x7f00000005c0)=@string={0x46, 0x3, "b8c36e3dba4a5f0bf635403d8a9fe61abfda05625a8465b4f35a345784ba3e36bd90dd5f043f15ab726375cf43f67c314dd2814e9ce509210550f3fe553a9580314a7aec"}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "4f8d721466101d119655113f9105f865a4f5cbb143825537a3316e81c435e6c8452aabbb248d482b260a59d19293abe83acaa783d96451dda370706c4e54f681349490582ea00c844feee7dfe27e4ad404d6ba7d8b679c67a7ecd933bc9586c9820d7af0224c1e8db95703959ba8d821846311cc7a04948006e04ddeb290f9e7624dee86c5822feecb8edaf3621b5898799056573c76e88455ffa3b11b8bcbead43f02"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}]})
syz_usb_control_io$hid(r9, &(0x7f0000000940)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="4002660000006630d4c11d3730ffce82b72211018e8fe42dd95bec0b3ceb80f59e3ba8e02e411460fcb7aba50873d06f0b1063c90019040000000000005f0b7aadf1cd83ae462e809755f0a02bcd3dc7643bb9a6d9c1d071a9c7d0a14f80bafb7aede5a1aeaadb6309bd598e"], &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000000880)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "aeea77c2"}, @local=@item_4={0x3, 0x2, 0x5, "84ff02d3"}, @global=@item_012={0x1, 0x1, 0xe, 'G'}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x69, 0x1, {0x22, 0x22b}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000980)={0x0, 0x15, 0xff, "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"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b40)={0x20, 0x1, 0xbb, "fa8932f00be6a02f61ba49c9307122d0f2de1b178bc2077b3d07b81b678b8d19e7dbe0772c35a9992146369f84bd5ffd4f8f1f7b2ed2405b42fe78f4263c09f1c751d2b8b1c0da005269f0ecdc71966e004a89c139fa4df2e45fdd1f5769faee7affca4b7b64ac524dcd3f8194c3070ad3a0db3bc481223dd5b8bac90d52a595d6f0956678f7447f624dd82a195910697580d00df5cafbf7cf0a60659cff748658552e75f80249b9bb40bf5e9a9b704e1b2d3c5436e1e5ba0dd1ce"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x1}})
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)

895.928269ms ago: executing program 1 (id=51):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x27) (async)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async)
r4 = accept$inet(r1, &(0x7f0000001cc0)={0x2, 0x0, @multicast1}, &(0x7f0000001d00)=0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000001d40)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
fchdir(r3) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
sendto(r3, 0x0, 0x0, 0x4041, 0x0, 0x60) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000001dc0)={0x2}) (async)
ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
statx(r5, &(0x7f00000000c0)='./file0\x00', 0x100, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002c80)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000002d80)=0xe8) (async)
lstat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
sendmsg$netlink(r6, &(0x7f0000002f00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000140)={0x54, 0x28, 0x800, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@local}, @nested={0x18, 0x5e, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x3f}]}, @typed={0x17, 0x103, 0x0, 0x0, @str='cgroup.controllers\x00'}]}, 0x54}, {&(0x7f00000004c0)={0x12e8, 0x2e, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x7c, 0x0, 0x0, @fd=r3}, @generic="64a7efee0534eb20a74b917181f8dce83f33ca8512b131ff2bea38ed210f6c29d120903be9fb1653f7d23152e1b5007abae9d07a0d82a77a45fc3fcbcbff3810ec58f018f2f0539617940433804fc42e614a17b186d7539fe66cf913eccd9ed7d68be811c7a888a86b381690f524a6af41d433afda23391aa12b049960167f4fd5128f", @nested={0x119, 0x11, 0x0, 0x1, [@nested={0x4, 0x33}, @nested={0x4, 0x74}, @nested={0x4, 0x2}, @typed={0xd3, 0xd7, 0x0, 0x0, @binary="b3c2140eddb2c30b2dc9b5521e8c582b496608c8629cdf78861c34ee5e0c70966f758586c130429d3f7271ad7822c642442f60ccb784494f8a107ce1d3214a14151b7a6085c1c7772cbcaac572326d33f06f5bcd215c94c4e308b621bded90d884bb541b1885a28e4578ca4c39f6413c9fa0c97e6a884e17d38c5cb964f0cb5967b2b091e5d44bd30dbf05cdd0aed5123418e2babb10e485f2ed2c21c5a6c40aafa1e33f980c5c7087851ede55eac742e46732f34f8f3138c2bf4b20c83218beff19f8fbe481f7a2216fa7c2e1f32d"}, @typed={0x8, 0xad, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xe5}, @generic="46f9a03d3afde2cba222ad7fed394132dbc5abf1f9c812d60c3adc92e26c01c7ae8c5be6bba3266718"]}, @typed={0x4, 0x28}, @typed={0xcd, 0x23, 0x0, 0x0, @binary="c23299689627b51bb1177947ea9177931dd2c47d5e86932edc11845a7d5a513cf4483347c4c605ba1fad47263660587e2f877b97b1b4fd16149c996c2f2a2c9dea2392d44c4cdb8517235a813917806c1318dcc8ff253dff8ed5e40011951c247097121cd410ae48be19651e63ffd28a27d94cc81038358ba87dcb7fcbd7e28339b61e0a4023b564f4d35bc46f1f6c22bdd69f179b636a9fb41972b5ce5172b0a4172108dd32f903b0d03a80ff792696d33a37692e4dba3b4ddc33fbd52ce051fd102a6bbe47265112"}, @generic="02a56a730d5bc410e25ee8e21c9adea0d4ec4bf0ae65e02b43828017849eeaa2fb5c44f0d605f13ed4d77ba3bff8d8f043bc8f09992870192afd060e1f8f243558ae0797141a4f3d3645937b2e3709", @nested={0x100c, 0x6a, 0x0, 0x1, [@nested={0x4, 0x62}, @generic="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", @nested={0x4, 0xdf}]}]}, 0x12e8}, {&(0x7f00000017c0)={0x1ac, 0x41, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="9fdee00b7fb09228a4ae96fcec68382bddea2eda4f16aa2d77d9d53dfca7f29ac19740edfb4bd9aa81f6c915521d57eedf33fb81aa69f9e6de3018b54643a4bece93de", @nested={0x111, 0x63, 0x0, 0x1, [@generic="764e7473320288c8de1a7b2fec19c4e365e8cb561feafcf3883d908b4e1344965f87ee38db19f31af71eca46458e963d6158729d32ad6b437e0d24731e48d78c8b7ef7e8f4db124fb981c302e2b4e661d89eeeb9c894", @nested={0x4, 0x60}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}, @generic="1d00e760f7c75b07e0d3deaec96b8987e8664f8229a97c", @nested={0x4, 0x4e}, @generic="8073504dab46f423b82d3e379a65e1e2dae37cbd0d841fa6e5382ec7e22c9438548500d681b4921a2743771b601458986a20ae18bd05f98a989d5f30e7581e1b4731927bc02861948a143567ad4e6fb446ed16fe567f315480628c790da4b79511ee1852f96c0536f7c9cf0c050990e322cefae3f8d6a272", @typed={0x17, 0x8b, 0x0, 0x0, @binary="2639913876eb3c369ef8c87e882ca3813b058f"}]}, @nested={0x2e, 0x5d, 0x0, 0x1, [@nested={0x4, 0x90}, @nested={0x4, 0x148}, @typed={0x4, 0x103}, @generic="80ce9063f1567cbf0825", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x1ac}, {&(0x7f0000001980)={0xd8, 0x42, 0x400, 0x70bd25, 0x25dfdbfc, "", [@generic="3235c84c54c737c3f0b9fc37978b357201232edf53c70b19fe69b9e7eb2392d756ed4c80c3280fdd3d60ea35233c79a752b0ef8fdd807fb8b3a2f27a09e06fabe991df8a2df466f8b78d4effa18088ef655f2338f3912d844f30b7694c795a457af77c92967a96a7b01785ba230bc77c91dfe43edb9dbeb1800a212a8e448fedfb778ee06985fecddfe5c4c961d62578041ae25703fea963dfcbf68d5f3cd8a01f7bb15c30d584bf68189c9adf4dfba7cc6f08", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xd8}, {&(0x7f0000001a80)={0x88, 0x22, 0x300, 0x70bd26, 0x25dfdbff, "", [@generic="ef2eccd8ee2b3c1d16fd7de6a1a9777ffa89eb96ef03a3d056f0809a5d11af1a84307c5e8cb04446946c8e6223e37db135a9d447f6878bb3d26b302e202337ff5019deb27f99b82accfa492fb197c5a4af6d5fccb8b5050ee5d3bb8b7d909bcfd06bfb7c31bd57308603425b339d921d6f31da84fd46fc"]}, 0x88}, {&(0x7f0000001b40)={0xec, 0x1c, 0x4, 0x70bd28, 0x25dfdbfd, "", [@typed={0xdc, 0xba, 0x0, 0x0, @binary="283c71bfd70aad24d9226b7dba657b2e5479104eec23ce834b36d8658a237083838b9f4e542a9a8b80e853f9a591c472a97fbcad48df9fa3127a86f8bf16fbbfec11133d0f997509ad3c0e76d24c024314e611696386d74b05ee4066d125931ac4525209e6b9825d2f7a7ee2ffbc05fb5148bf52568a1be02a2d6e581d367171201b0ab5ebf6675c4ba6ded19393ac3305b92987de5a40a838ebe84e6a4905bc56faa5cdc053a5c5d409f66f04fae0b860e689fcca29916dd0260f75af489d727df6a3e1ac862a40a91e592f4cde4c38a17ea11b3064f220"}]}, 0xec}, {&(0x7f0000004240)=ANY=[@ANYBLOB="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"], 0x1068}], 0x7, &(0x7f0000002e80)=[@rights={{0x28, 0x1, 0x1, [r1, r5, r5, r1, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}], 0x68, 0x8045}, 0x4080) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
getdents64(r5, &(0x7f0000001c40)=""/79, 0x4f) (async)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0)
ioctl$PTP_PIN_SETFUNC(r10, 0x40043d0d, 0x0) (async)
syz_open_procfs(r2, &(0x7f0000000100)='pagemap\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100124e09f4099040250b5c60102030109021b0001040000020904560301902d2349090506034000fd010803d6d9b5ce819925af866382577aa1df48faa3a90947f6e0ebf18699e96208cc5a3e2fee96175434f34580fbdd26a047a13c78e0a8d439638c584b6beb59629a251d2f8d97244320d82f1cf419b1ecd2cde98df34ad3223c9d625b7bf2b89a08f6165166b3a86efd5f7df6425172be4d9cd3863660cfdce55a91e93c44f74a28339016f54c16bb8200f72d02d53931710fac76ab6d63f0d3defa266fd39807024ae0d6eb534625b0b75bacd9ae84774089ad85e88803"], 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

893.653299ms ago: executing program 1 (id=52):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @increfs_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300})
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
timerfd_gettime(r5, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x1}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

682.673146ms ago: executing program 2 (id=53):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff3900002bd7705000000000000000000000630000"], 0x24}, 0x1, 0x0, 0x0, 0x24048834}, 0x0)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000002640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f00000001c0)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000004}, 0x20000010)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0})
sendmsg(r0, &(0x7f0000000000)={&(0x7f0000001440)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f00000000c0), 0x5, &(0x7f00000015c0)=ANY=[@ANYRESDEC=r3], 0x1010}, 0x400c084)

644.003509ms ago: executing program 2 (id=54):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) (async)
listxattr(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) (async)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180))

584.149914ms ago: executing program 2 (id=55):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0xd09ff41af8efc9b8)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x8, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0080"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x40)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000540))
open(&(0x7f0000000200)='./file0\x00', 0x200, 0xd09ff41af8efc9b8) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x8, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0080"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x40) (async)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r0}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000540)) (async)

577.664734ms ago: executing program 2 (id=56):
getpgrp(0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
getgroups(0x2, &(0x7f0000000140)=[<r1=>0x0, <r2=>0xee00])
setregid(0x0, r2)
setresgid(r2, r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'xfrm0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000005c0)="46b83076", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r6=>0x0, 0x700, 0x7, 0x5, 0x0, {{0x30, 0x4, 0x2, 0x20, 0xc0, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0x9, "972121632dd0f0"}, {0x2, 0x5, "fb8434"}, {0x6, 0x7, "56a92abf61"}, {0x6, 0x4, "ace9"}, {0x1, 0x5, "270584"}]}, @timestamp_addr={0x44, 0x44, 0x2e, 0x1, 0xf, [{@multicast2, 0x8}, {@broadcast, 0x4}, {@multicast2, 0x8e02}, {@local, 0x8}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x5}, {@broadcast, 0x8}, {@multicast2, 0xd11d}]}, @lsrr={0x83, 0x7, 0xa0, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x5, [{@private=0xa010102, 0x6}, {@empty}]}, @cipso={0x86, 0x25, 0x2, [{0x7, 0xe, "37254315679ca970ceec38ab"}, {0x1, 0x11, "f03c8f4583d8963b625da73e492f07"}]}, @end]}}}}})
sendto$packet(r4, &(0x7f0000000600)="39723d12a8ff8f5c35816e3c84d06db21d19b62d381997505faeddb3ed30aeef0abb7e5ad563956604e9786b1170aa11ded5ba21ad4c800b07e9b657e3d9a4279807efb727abba8b40c07a759cd0e703af5ebf2616722d85f5f9aa4c35897e4b0f05dbc5ce9c3698038180c85d175d6df07c17feaac98214e0dc414aaff550629505e329639328b122f65c2348d01ed8056c05312e260d857688d796bd46c4dc97b4ab7c7778bc89418d11ca38d9b491cdc79bd56d747b09a3a39dcd222de87e67ba1c404d994afba02ac3a5cacd106e4d091a8a7dd06df5429058936689a5c0fb40014c90cb2154c1e1c9a216fe0f4439590e86996f74c4766b71d7bb9a693796a52b6f96b8bd8659aa2b3ebf785880aa45810024c5d30686079dda87529c35710c0d2b9f923dd1af427929181ca3df818f3eb5d94af7a1747be2a4fb232b891d3a28dd6c8352024d1f2df82e20e6c46cecf75332f2ab57982fd36e32e145d0ed4fd12e5f92f7e05e73cddf7b835b6b3d8d5fb4bf3e1c69dba16e0bba85a909391458d88bac461a57640e8ec4eaff3c4dfa0c01e0e20a647a1f798016274da6a6095392732cee468d0dd6c790d5ef0aaa2556e9a5830c9a753be093d20744c2caf1073f92cadfbc6a93ce20c1a403088d628df7d55309e77ad662ad030f5dfae4f96791769985e8fb214991ae7bde153b9b7bf0591f6f37d50c0cd65cd5ec29b7baa1981ec20216c29b9a336c54aa766fccc06298937f0d1cc6d6796af784478adebfdcb44b00047df30b0b31bf6a82c1f6db61f3c4e4f4e6c195ef6e74ea1ede160c9cd13ef053009e9e795b663f00c2581a7a0eff9c66d19896628cfdbe1f36aaffa053c14fe0d8076b583e9f9363eaa47c0a48f6e3568f3c27ba0f29736527bce7341754a42053530d7f7c649687dff33505240cb74e040ebbf167681197433db134ad9a6d4b24f5941550fe2afc0566306904a0b1e44037590b500f21ff0f85eb2585dc1c101cf5033eab2f74343ee1f0b10814dfbf99acdd7d151106990d708cf08afd052bded6f9ab7d21e86267ea2a96b7841efc71d3b806d8735875c9e718f26815a8b1c4e6d744b01066b9f052900e0c99cca5ba6069bc6155d311308b0c0efbe38f1f37e06ba0467b65d151a4683cad21404294d6867195d68065c3c3426b2d1519a5d5af64aced7db82377ed9da60c450267be72755a13c59dd6a5eec7b032cb86f511fcd656dbe57d6965b8ab246626c8d5e876e1f3aadbd4046ff8cf1b9c85c8939908653fd7b209f4f46571c17f0ef6189c35f808a2a7eeb3c208d1a189770e056d3206ea124e2c7e843b90e32659f1067af863c7f696cf184cd7958ffcfb8110580d16d48eac7a5f8c6f39aa63a246f7b18a01bec35439ae4997ba7c5e4f2f3723a73ba168154e549319716cd295627f4b575710d2cac78f6cba7c9dc2a6caab09479a48dbc77d029b20d1be7675b01deca57aa94bf4d330aaf89222d9ec55363889812a60645d6074bd83e26104cb0af69a8d6eb0a4754acab936ded5320a3c63dd6835ed74ecbc013eb49b8b9c4deeb2e286c081d9a670dd1986bb680e5cc50359a6e1aebe3c0da266515f44b2d8a2bce776414d602d084724945f6f662b46c8f38213b3155e96fa4b59c3e08179af542ff7d3b4c1d0e70b000243006f61f6b63aae546ee2a8b10cdd82dfa025dddf9d049593e7d06d632884dbe4a5753aca0de650a2678af9babcc8e1dd86e052104c7fc825fe0112a11b74a351ff07c2994bbf0a7d235adc18a27e9ddf88169d3445df99a30a7aad9291444d1f073fe08674e06ca70ffdc7cdf59c24813e748a0ae36353eb57fcc68d878645569a9285cc13f0e425d9c02911119baa9a37b8abeee31607963c67fe6ad000ae0ddf6730a9e1ef450a909807dc34f54fed62f42f7b0f1be440a945e9b5a319311db0334d12d58a2637d0e79397c36e27935435b417256c15073682d06d98af744c42d3d110832888bdbcb3317facaf614180b0a8bf1d4f6518ea347b215a3db787d9f9264f5fb9dbe5516de548d4a8a70e8803d620692c95c2190cb94da0d38db5ab271beedc735b70786539d31cd4a8420b6d4a2241efdafb7e3c8f69b28ce47e634f73ec19b2bf9fd707f607078d36235ff51f5fce43c7ad25120e9e21731f2656961b0a664bcaabf137f831ce22287479f8465b7fd8a7633ede1513a48b2c217dc085e218f937e197d15b53fdc131a8f8e08a375614aea879126f72a9cc1708e966efcf961eb76fac8abb9184426d80a342e67c01380017d557287497b09312942d9f39c3a963bf08274785d574d8a89260513ab84f34722ba4173e8f5590017faa6ceca0a796766c94e2442a1b91d5510edec8aa1097396231fdfc38e28e37748bec0b9d8585538cd6f07c600ed8422326e8d932e5795cbff8ddc2615b640f1de4c8d979100e448055195bb3f132d26784c9d7d653b4a8d0a66d81f7b13318a836b41316c3028e10dcd38ab40c50c5ffddfec81c11867461a8ef01070ad03692c1ecd6997d97368fcdc31a7ca353c04b3476b90ffbdfb27c5f9b21b6a907cee9b3c35341cf7b0fee3898d1dc8668b201d0d1d162e11f36e3a97377c8a11230b0bb79d5f66092d103562b11f046ab9f1f869a35af2fc1c2ea591d4dd6d26274c083c95b5c6ddf0f149d251e11bc32d2861e38839c1794babccfb4cf0b1bcb723a182d652a9c740d3354b529d939efc8b92b994f02a83ed2dd6affb345d929713c82b7bfb7ef1b27d26a0e31f288d0f12ba407fc2781c62e98758b9396912b89767139bd63581c4a43528fa03189eeb845d1fcee458e1745c650c2b20a283e75a539954d005f10705c02251a3158f3b4c950f6d1627bdcecc28cfe2dc76b9329bf262c5d81f7f6d7e146f1c4aaaf18583a69e156032f40b042481b64ee0958ffe76623532c6a6c5717b632b7f55feb123b34d604431ccbf94b7da14b5dc104cb0174bdea842181f73ed9b07b04ffc47226cf1a4819bd0db7e312f54c85106c01363a9101807adab2fae38beb70ff46db6d06de483304d11dee29b1caa93eddaf930b01517cd4f82c8c1823b2903dc3c453c5508379d845ee20a2c75ef5f042d82fa9fb2f6dba17ea5d99fb83f5b359ccb323feb8f7b807f17ffadea6e2869a641fcbdecaa58a41cf55e0fb61076e39beeac8acf10c97cb48ee5b901ff6c18a6d63b1bd9c95dc0583d9a895edce9cfd8f838401405e979973a259ff5efdc08f673fb65c9456e7ce68c3b2085e3c9faeb750a7ff5f43fa54b5d0bf09531f0ebe353d02425a661173c1065ca4cf5621dbbf84b13efaa6e1133dfe8537296829779448ef47ecc845aadcd61f075657ae8704a8003dd9fc0a95e2a02edbb885d435563312a6b4c6b0f49d85a72d71f0d8d1b735acf4a1fc602c56119504419577cd308f30592018af14c05687fb8e5011f0df8064dd64329b0bdcd5008fec53a36d737fcd9a46e40caa48444bb4b8a5a08f615fcadeaa5e2e7d02437be7d256582819507c7e5b26d7c81c8fa418f06214582183574e7ae13a45fe9f0ab0077cd3e174d7172dd68e80a5fe9da4856959e5894499fc00c044d4afe3edd85bdbc6f80d3a123b43b93079be6bddb08bf1e6cdb1bb0c46b283151d1667de4e459fef68292429896463b76044980760603adc0dc7040639f188e97d573912c80faff7949781f919fe3e59b7516f3f23a068825bdd41e53ec1a968a4326c68d44ccfc2ebd7462ad55dbed1f2e2772891f285679d2d6fbf1568a9e4066137e6a10b1b7a48d8b91e5800200b69b7440c434dfaa08189096465349d3ce3a95f3df7d2595054dcf2533d4f6186b39349b6867b94eb171593439a16b304f2c48e5a399839c811a2c69cf0cb5f2539e177e5cf6657d19d3395202ec4b25ff8f5b646406ec22e40c4eb2d85a9ca4fda66d216c2bc404440973439279aa6afd36fc5a164037a5a9cbeb8ed942b6d7b5cbe0c7de95c518e20c4c05e10f43a71386b3e66bc576e778132d086ea11580e57ed6b48d9b04d0e292613ecd57b71fb83a833f3988056fb677b2ab5c4d68765ef0130e2a7b5de4bf5241b05fa5a5cd5f32af3c93e819d2812c31cf741d21891360cf51e7133896e70a228ee2a34a1b925a8b23631e4119426d36a72026fcfbb57c767938a71623c56085c6b5c52a6011fa6b5ca446db5231815d2f9ab51fde2e6bf7f7f454e2a07d75984f390174b6c1c963377913e0168206d48a6ea4fdc64f88f493587ab89129ac9d7729091c8bf5190f20dea10fccf9fcdc2c57a4fdd6273b84b3e41cfbfd31f1f44500ae9db665ab73cd2a6ae0fe4b2b41702d36d7fb2591cb311551ca81beafe1d82cc3f8a9cf95e028764bbb2a9b639143ddd6b1a123a54fae27facba82d0a2b628d465f29354568c76f8e02d20ef9dfe2a19ab09f2a08245d77902d93b85ab1426b5851a5b14d2ee093e837cd65930365649b38ad6945f07a45530686adacdd063a9c5e835a89eeb44641022f19795ccb2538dec01febeb013966bc11f5b2adaa4648b594c1290d930a33a69f6d4d70275699bac5e538fe6d96aadf0110159fb11ba55b9a115532754cb141116df1e8359504fe83e4e93bec46a17a69e95902d5d0f9433e3c62f76eb41a325d2ea53e83073b19d3177959d365ae4b17e58a83227fa178bc00bd3f643119b1f14b01273819f6c6f8ffaa46dc24e3a9926f945f7b21887727176e776edaa8fe5b9bdb09a0e4e2c64c47d7044d1eebc8d50dd4c5a430290cb1307f19a3b5141dafa47bbd03bd19eb4cdf9266d4e3238256db824d725c5c05bdc616623a9daf35c76fa3e99a8522301771a204fd8658f119c9a198e474b8325c342d2c5c3fcc3a7e99dab53bb7402d4402313e6c5f5b11f4c18aa81a12dc4886fa931b24893ec67289b86e09e7aecf0484d437381e681855e1befddfcd0c6719f884759245b07d502d51e513ce3d2e7f0ae0b719987548382b8080dad8ef1080ee601c9efa97cabcd72000330cdde4f8bab2ec3005ca3e07cda46be44821ab3bdd72d5fe2a31008ca942aa2de79f8fa72808a523c913ba3f76d34050499ebd98b252d1cfe014fa3ba9441ece101f5ec6b01c01dfe9833a17f8394232ba016ecb5546f7e2ee2eb8b2c1da012d492dff23fcc522fdb0a1015fa1a8b0bdb25ad050f8435f913fd411cd721cf26ab934473b5f8157878c6820f477418c165e8dcbffad61ca8b4931839c8d6af576bb366955f173db54570b646778c53d4282067952896af89dea622d20eea16d59b4d36b729f1ef082b4b6c28edd3b0ac95249548051b3c4cb1046357df8f514626b05b9d06fe90ecae55c372b0d0a581fb02cc088f8f9950d6a9aa461b1785ba603a7af306cc9714605b6b9c06f74ca468bc272a621c855e673bc59ab454ddbc28e02f78064cbd07ca8f942109238f3c5d3333990fc5a8df1e51a2528215f08e55538129281fe4f28615a7ee394bc29ffb7535d8b29b78ab5fa2be058bd26bc496dc3e47644bf2a6d8139369e3d54fc70deb1d9ffd13c39540772a24c50c8e0dab47953dffb3f1f8484e9768161d19823f3205b6ea9d6f032207ab3cccf70f260f914ca03c6b1aed96702168161430f259fc7e799d51b17907874bb18d335c8fa5c7d5348f4f04febc17cb908b33c13b9a5ba81318901498e31fa8e2222b6c59feb9250c62256b14b24016fff2f91d9991aad51ee0d9c453e872fdad0f5b2460f5fdd60d2ba3755f4588c8f75ec69926e725c3e99c387fe0a74cc393", 0x1000, 0x4004880, &(0x7f00000000c0)={0x11, 0x3, r6, 0x1, 0x1}, 0x14)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

380.82759ms ago: executing program 3 (id=57):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000440)=""/275, 0x113}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42141, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004411fffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64], 0x7a)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder0\x00', 0x802, 0x0) (async)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYRESOCT=r6], 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
bind$xdp(r7, &(0x7f0000000300)={0x2c, 0x2}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000040)
sendto$inet6(r2, &(0x7f0000000340)="a4db2e5aa01e55adb6fc8c720a7bfb3626831c49975e63651d27975b411e8fef3354aa57b55a2d223ecd51751b305f17f592b6095acd9c860cd46e9993ab7d9011bbd05a44a92957de7a2822133c1a513f4956f0ce5e79479a7e36237847c4ab1ede04a4f4f8b937efae0f1dd961d3e0264e8e9bcc532a8167cc4b90c7787f8e", 0x80, 0x4040080, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r1, 0x57788000)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x44, 0x4)
sendmsg$nl_xfrm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001200010828bd7000fadbdf2500000000000000000000ffffac1e0001000004d602002b0014000d00e000000100"/60], 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)

348.795282ms ago: executing program 3 (id=58):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0xc0300100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3}, 0x58)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x5, 0x8000, 0x9, 0x7ff, 0x0, 0x3})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1000, 0x0)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013"], 0x24}}, 0x0)
write$char_usb(r3, &(0x7f0000000180)="be726d1cefd0bb4bf898c3d6d1364960c9e81caa392737cc2ee4e8accabfc26d619ff726d62c301757040b5c0cc91463fcc7b75e41ea6256a612ae3976e04a6d5f7d5550c72692f9023d039470dea9b805d7261a543fec4dd133a8cd424b638e10a10206b0c7afd4d8f62ea8216bc6e0d044726a284682966beb92c307a138e48cd2c6e42b978f88668b1704cd050f1e83c7f9ed9150c434a541e73e786a756456c03e61b1de66c5686f1585", 0xac)
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0xffffffffffffffda}, 0x10)

242.48µs ago: executing program 1 (id=59):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0xefffff15, 0x787, 0x8001, 0x4, 0x401, 0x1c44, 0x7, 0x40, 0xffffffff, 0x0, 0x2009}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=60):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0)
fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000200)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000440)={0xaba6a7517055ffce, 0x0, @ioapic={0x4, 0xa, 0x8, 0x6, 0x0, [{0x3, 0xd, 0x6, '\x00', 0x4}, {0x4, 0x2, 0xfc, '\x00', 0xa}, {0xd4, 0x2, 0xc, '\x00', 0xa}, {0x6, 0x7f, 0x7, '\x00', 0x64}, {0x2, 0x6, 0x0, '\x00', 0x4}, {0x4, 0x3, 0x4, '\x00', 0x5}, {0x3, 0x0, 0x7, '\x00', 0x2}, {0x1, 0x5, 0x6, '\x00', 0xb}, {0x57, 0x7e, 0x8, '\x00', 0x2}, {0x4, 0x0, 0x6}, {0x8, 0xa, 0x4, '\x00', 0x66}, {0x0, 0x44, 0x7, '\x00', 0x6}, {0x4, 0xc, 0x0, '\x00', 0xff}, {0x0, 0x1, 0x4, '\x00', 0x1e}, {0x5, 0xfa, 0x2, '\x00', 0x1}, {0x71, 0x0, 0x10, '\x00', 0x5}, {0x1, 0x0, 0x5a, '\x00', 0x7}, {0x2, 0x26, 0x4, '\x00', 0x6}, {0x5, 0x69, 0x4, '\x00', 0x9}, {0x7, 0x9, 0x3, '\x00', 0x18}, {0xe4, 0x3, 0xec, '\x00', 0x35}, {0xd0, 0xb0, 0x42, '\x00', 0x5}, {0x6, 0x2, 0x4, '\x00', 0xf}, {0x3, 0x3, 0x3, '\x00', 0x6}]}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x110a}, @fda={0x66646185, 0x1, 0x1, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts.
[   26.384043][   T36] audit: type=1400 audit(1756203846.230:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.385631][  T281] cgroup: Unknown subsys name 'net'
[   26.406839][   T36] audit: type=1400 audit(1756203846.230:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.434303][   T36] audit: type=1400 audit(1756203846.260:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.434509][  T281] cgroup: Unknown subsys name 'devices'
[   26.637711][  T281] cgroup: Unknown subsys name 'hugetlb'
[   26.643349][  T281] cgroup: Unknown subsys name 'rlimit'
[   26.799458][   T36] audit: type=1400 audit(1756203846.650:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.822744][   T36] audit: type=1400 audit(1756203846.650:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.847407][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.856128][   T36] audit: type=1400 audit(1756203846.650:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.879402][   T36] audit: type=1400 audit(1756203846.700:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.892193][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.904948][   T36] audit: type=1400 audit(1756203846.700:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.939267][   T36] audit: type=1400 audit(1756203846.740:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.964925][   T36] audit: type=1400 audit(1756203846.740:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.108852][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.116022][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.123125][  T288] bridge_slave_0: entered allmulticast mode
[   28.129679][  T288] bridge_slave_0: entered promiscuous mode
[   28.137413][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.144558][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.151701][  T288] bridge_slave_1: entered allmulticast mode
[   28.158203][  T288] bridge_slave_1: entered promiscuous mode
[   28.281004][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.288269][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.295636][  T290] bridge_slave_0: entered allmulticast mode
[   28.302115][  T290] bridge_slave_0: entered promiscuous mode
[   28.319169][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.326306][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.333456][  T290] bridge_slave_1: entered allmulticast mode
[   28.339877][  T290] bridge_slave_1: entered promiscuous mode
[   28.350418][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.357659][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.364847][  T293] bridge_slave_0: entered allmulticast mode
[   28.371928][  T293] bridge_slave_0: entered promiscuous mode
[   28.379982][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.387252][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.394420][  T293] bridge_slave_1: entered allmulticast mode
[   28.400841][  T293] bridge_slave_1: entered promiscuous mode
[   28.467144][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.474207][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.481564][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.488743][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.533356][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.540546][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.547783][  T294] bridge_slave_0: entered allmulticast mode
[   28.554148][  T294] bridge_slave_0: entered promiscuous mode
[   28.561095][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.568226][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.575445][  T294] bridge_slave_1: entered allmulticast mode
[   28.581755][  T294] bridge_slave_1: entered promiscuous mode
[   28.658502][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.665676][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.673062][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.680115][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.715524][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.722915][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.730997][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.738213][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.760150][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.767352][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.782991][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.790107][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.798406][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.805761][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.813500][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.820589][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.876735][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.883798][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.892680][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.899762][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.927268][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.934504][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.949299][  T288] veth0_vlan: entered promiscuous mode
[   28.958345][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.965945][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.976849][  T293] veth0_vlan: entered promiscuous mode
[   28.991062][  T288] veth1_macvtap: entered promiscuous mode
[   29.017369][  T290] veth0_vlan: entered promiscuous mode
[   29.032276][  T293] veth1_macvtap: entered promiscuous mode
[   29.058263][  T290] veth1_macvtap: entered promiscuous mode
[   29.068102][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.100200][  T332] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   29.112522][  T294] veth0_vlan: entered promiscuous mode
[   29.156771][  T294] veth1_macvtap: entered promiscuous mode
[   29.291444][  T335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.328741][  T335] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   29.511495][  T355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   29.555232][  T329] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   29.585250][    T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   29.716160][  T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   29.727615][  T329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.744656][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   29.756227][  T329] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00
[   29.766776][    T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[   29.776689][  T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.785161][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.793919][  T329] usb 1-1: config 0 descriptor??
[   29.799553][    T9] usb 2-1: config 0 descriptor??
[   29.804908][  T346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   30.015088][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.166025][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.176673][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.186446][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.195891][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   30.203986][   T10] usb 4-1: SerialNumber: syz
[   30.215333][    T9] uclogic 0003:5543:0522.0002: No inputs registered, leaving
[   30.224515][  T329] wacom 0003:056A:0020.0003: unknown main item tag 0x2
[   30.231832][  T329] wacom 0003:056A:0020.0003: unknown main item tag 0x1
[   30.239288][    T9] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0
[   30.256653][  T329] wacom 0003:056A:0020.0003: item fetching failed at offset 4/5
[   30.265670][  T329] wacom 0003:056A:0020.0003: parse failed
[   30.271616][  T329] wacom 0003:056A:0020.0003: probe with driver wacom failed with error -22
[   30.410434][  T362] netlink: 'syz.3.10': attribute type 4 has an invalid length.
[   30.416078][   T46] usb 2-1: USB disconnect, device number 2
[   30.432607][   T31] usb 1-1: USB disconnect, device number 2
[   30.552907][   T10] usb 4-1: invalid UAC_HEADER (v1)
[   30.562864][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   30.576974][   T10] usb 4-1: USB disconnect, device number 2
[   30.590167][  T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.762819][  T373] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   30.783109][  T373] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   30.790721][  T373] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   30.791007][  T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16
[   31.052468][   T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   31.096173][   T10] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   31.193433][  T392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.250333][  T394] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   31.250361][  T394] rust_binder: Read failure Err(EFAULT) in pid:23
[   31.266699][  T394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23
[   31.297598][  T397] rust_binder: Error while translating object.
[   31.311375][  T397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.318128][  T397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25
[   31.352256][  T399] SELinux: security_context_str_to_sid () failed with errno=-22
[   31.387792][  T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.387824][  T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   31.400072][   T36] kauditd_printk_skb: 93 callbacks suppressed
[   31.400090][   T36] audit: type=1400 audit(1756203851.250:167): avc:  denied  { setopt } for  pid=401 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.441864][   T36] audit: type=1400 audit(1756203851.270:168): avc:  denied  { read } for  pid=401 comm="syz.2.22" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   31.486647][   T36] audit: type=1400 audit(1756203851.270:169): avc:  denied  { open } for  pid=401 comm="syz.2.22" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   31.525057][   T36] audit: type=1400 audit(1756203851.300:170): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.556076][   T36] audit: type=1400 audit(1756203851.340:171): avc:  denied  { read } for  pid=419 comm="syz.3.27" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   31.596727][   T36] audit: type=1400 audit(1756203851.340:172): avc:  denied  { open } for  pid=419 comm="syz.3.27" path="pid:[4026532390]" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   31.633118][   T36] audit: type=1400 audit(1756203851.340:173): avc:  denied  { mounton } for  pid=419 comm="syz.3.27" path="/proc/17/cgroup" dev="proc" ino=3538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   31.675495][   T36] audit: type=1400 audit(1756203851.340:174): avc:  denied  { unmount } for  pid=419 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1
[   31.696673][  T426] rust_binder: 22: no such ref 2
[   31.718241][  T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[   31.718572][  T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22
[   31.753452][   T36] audit: type=1400 audit(1756203851.600:175): avc:  denied  { append } for  pid=427 comm="syz.2.30" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   31.788734][   T36] audit: type=1400 audit(1756203851.640:176): avc:  denied  { create } for  pid=427 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   31.862254][  T435] __vm_enough_memory: pid: 435, comm: syz.1.32, bytes: 18014402804453376 not enough memory for the allocation
[   31.938591][  T439] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure
[   31.950717][  T440] tipc: Started in network mode
[   31.970115][  T440] tipc: Node identity 1268e4c9085, cluster identity 4711
[   31.981815][  T440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   31.991619][  T438] tipc: Disabling bearer <eth:syzkaller0>
[   32.355092][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.355089][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   32.487131][   T45] Bluetooth: hci0: Frame reassembly failed (-84)
[   32.494187][   T45] Bluetooth: hci0: Frame reassembly failed (-84)
[   32.516573][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   32.516865][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.525244][   T31] usb 1-1: config 7 has an invalid interface number: 188 but max is 0
[   32.535559][   T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   32.543510][   T31] usb 1-1: config 7 has no interface number 0
[   32.552913][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.559345][   T31] usb 1-1: config 7 interface 188 altsetting 7 endpoint 0x1 has invalid maxpacket 5095, setting to 64
[   32.568750][   T10] usb 2-1: config 0 descriptor??
[   32.578484][   T31] usb 1-1: config 7 interface 188 has no altsetting 0
[   32.591939][   T31] usb 1-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 5.06
[   32.601335][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.609538][   T31] usb 1-1: Product: syz
[   32.613773][   T31] usb 1-1: Manufacturer: syz
[   32.618459][   T31] usb 1-1: SerialNumber: syz
[   32.826264][  T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.835147][  T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.896385][  T476] rust_binder: 449 RLIMIT_NICE not set
[   32.991893][   T10] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[   33.007636][   T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input4
[   33.079438][   T10] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   33.361710][  T485] Zero length message leads to an empty skb
[   33.523160][  T447] =======================================================
[   33.523160][  T447] WARNING: The mand mount option has been deprecated and
[   33.523160][  T447]          and is ignored by this kernel. Remove the mand
[   33.523160][  T447]          option from the mount to silence this warning.
[   33.523160][  T447] =======================================================
[   33.573653][  T447] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   33.584670][  T335] usb 2-1: USB disconnect, device number 3
Stopping sshd: stopped /usr/sbin/sshd (pid 200)
OK
Stopping crond: stopped /usr/sbin/crond (pid 193)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 147)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: done
Stopping klogd: OK
Stopping acpid: [   34.371109][  T544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'.
[   34.393474][  T544] rust_binder: Write failure EFAULT in pid:61
[   34.425888][  T549] rust_binder: Error while translating object.
[   34.432395][  T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   34.438947][  T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:66
[   34.524962][  T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71
[   34.565267][  T473] Bluetooth: hci0: command 0x1003 tx timeout
[   34.581122][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   34.585304][  T472] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   35.003585][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.011735][   T10] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   35.038708][  T570] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[   35.075781][  T569] ------------[ cut here ]------------
[   35.081351][  T569] WARNING: CPU: 1 PID: 569 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0
[   35.091439][  T569] Modules linked in:
[   35.095085][  T329] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   35.095448][  T569] CPU: 1 UID: 0 PID: 569 Comm: syz.1.60 Not tainted syzkaller #0 cf5fa0ddcc8aee0a441189d525bb38feba3bb086
[   35.114674][  T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.125254][  T569] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0
[   35.131421][  T569] Code: 00 48 8b 5d a0 74 08 48 89 df e8 02 44 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0
[   35.151337][  T569] RSP: 0018:ffffc9000db1fc88 EFLAGS: 00010202
[   35.157861][  T569] RAX: 1ffffd1ffff863ca RBX: ffffc9000dbab8e8 RCX: ffffffff816dc859
[   35.165877][  T569] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc31e50
[   35.173891][  T569] RBP: ffffc9000db1fcf0 R08: ffffe8ffffc31e57 R09: 1ffffd1ffff863ca
[   35.181914][  T569] R10: dffffc0000000000 R11: fffff91ffff863cb R12: dffffc0000000000
[   35.190225][  T569] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc31e50
[   35.198608][  T569] FS:  0000555556d30500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   35.207729][  T569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.214690][  T569] CR2: 00007f92be354f98 CR3: 0000000118d1c000 CR4: 00000000003526b0
[   35.222727][  T569] Call Trace:
[   35.226244][  T569]  <TASK>
[   35.229244][  T569]  kvm_put_kvm+0x1100/0x12b0
[   35.233889][  T569]  ? __cfi_kvm_vm_release+0x10/0x10
[   35.235068][  T329] usb 4-1: device descriptor read/64, error -71
[   35.239150][  T569]  kvm_vm_release+0x47/0x70
[   35.250094][  T569]  __fput+0x1fb/0xa00
[   35.254262][  T569]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   35.259872][  T569]  ____fput+0x20/0x30
[   35.263883][  T569]  task_work_run+0x1e3/0x250
[   35.268545][  T569]  ? __cfi_task_work_run+0x10/0x10
[   35.273687][  T569]  ? __kasan_check_write+0x18/0x20
[   35.279032][  T569]  resume_user_mode_work+0x36/0x50
[   35.284216][  T569]  syscall_exit_to_user_mode+0x64/0xb0
[   35.289834][  T569]  do_syscall_64+0x64/0xf0
[   35.294458][  T569]  ? clear_bhb_loop+0x50/0xa0
[   35.299370][  T569]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.305422][  T569] RIP: 0033:0x7f92bd58ebe9
[   35.310192][  T569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.330452][  T569] RSP: 002b:00007fff724014b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   35.339001][  T569] RAX: 0000000000000000 RBX: 00000000000088c0 RCX: 00007f92bd58ebe9
OK[   35.347179][  T569] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003

[   35.355939][  T569] RBP: 00007f92bd7b7da0 R08: 0000000000000001 R09: 0000000a724017af
[   35.364102][  T569] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007f92bd7b5fac
[   35.372225][  T569] R13: 00007f92bd7b5fa0 R14: ffffffffffffffff R15: 00007fff724015d0
[   35.380319][  T569]  </TASK>
[   35.383374][  T569] ---[ end trace 0000000000000000 ]---
Stopping syslogd: [   35.391035][   T31] usb-storage 1-1:7.188: USB Mass Storage device detected
[   35.399359][   T31] usb-storage 1-1:7.188: Quirks match for vid 054c pid 0010: 1
stopped /sbin/syslogd (pid 91)
OK
[   35.469038][   T31] usb 1-1: USB disconnect, device number 3
[   35.486591][  T329] usb 4-1: device descriptor read/64, error -71
umount: can't remount debugfs read-only
Connection to 10.128.1.234 closed by remote host.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[   35.737479][  T328] bridge_slave_1: left allmulticast mode
[   35.743277][  T328] bridge_slave_1: left promiscuous mode
[   35.752847][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.765368][  T328] bridge_slave_0: left allmulticast mode
[   35.771093][  T328] bridge_slave_0: left promiscuous mode
[   35.776860][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.937696][  T328] veth1_macvtap: left promiscuous mode
[   35.943341][  T328] veth0_vlan: left promiscuous mode
[   36.207386][  T328] bridge_slave_1: left allmulticast mode
[   36.213068][  T328] bridge_slave_1: left promiscuous mode
[   36.218765][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.226252][  T328] bridge_slave_0: left allmulticast mode
[   36.231911][  T328] bridge_slave_0: left promiscuous mode
[   36.237777][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.245579][  T328] bridge_slave_1: left allmulticast mode
[   36.251233][  T328] bridge_slave_1: left promiscuous mode
[   36.257027][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.264628][  T328] bridge_slave_0: left allmulticast mode
[   36.270364][  T328] bridge_slave_0: left promiscuous mode
[   36.275996][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.283755][  T328] bridge_slave_1: left allmulticast mode
[   36.289460][  T328] bridge_slave_1: left promiscuous mode
[   36.295123][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.302683][  T328] bridge_slave_0: left allmulticast mode
[   36.308764][  T328] bridge_slave_0: left promiscuous mode
[   36.314544][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.608086][  T328] tipc: Left network mode
[   36.614256][  T328] veth1_macvtap: left promiscuous mode
[   36.619884][  T328] veth0_vlan: left promiscuous mode
[   36.625443][  T328] veth1_macvtap: left promiscuous mode
[   36.631064][  T328] veth0_vlan: left promiscuous mode
[   36.636502][  T328] veth1_macvtap: left promiscuous mode
[   36.642009][  T328] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[   37.691121][  T579] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   37.697943][  T579] ACPI: PM: Preparing to enter system sleep state S5
[   37.704930][  T579] kvm: exiting hardware virtualization
[   37.710465][  T579] reboot: Power down
serialport: VM disconnected.