last executing test programs:

2m37.702091051s ago: executing program 2 (id=36):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x5, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r5 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
write(r4, &(0x7f0000000400)="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", 0x1f000)

2m37.577126143s ago: executing program 2 (id=37):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x8b}], 0x2, 0x10001, 0x0)
ppoll(&(0x7f0000000280)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00"], 0x20}}, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x8b}], 0x2, 0x10001, 0x0) (async)
ppoll(&(0x7f0000000280)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00"], 0x20}}, 0x0) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async)

2m37.561662584s ago: executing program 2 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="660faef726f3360f009819febaa100ec660f383ec866b9800000c00f326635000400000f3066b9990b000066b83a79000066ba000000000f3066b9240b000066b8eb00000066ba000000000f30b8ba048ec0650fc73cf30faee6", 0x5a}], 0x1, 0x8f, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = eventfd2(0x3, 0x1)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r6, 0x7ff, 0x2, r6})
ioctl$KVM_SET_IRQCHIP(r5, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r5, 0xae71, &(0x7f00000002c0)={[{0x10010000, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x10}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x33, 0x0, 0x0, 0xfe}]})
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8000)
mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r11=>0x0})
sendto$packet(r9, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x6000895}, 0x1100)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0})

2m37.423650546s ago: executing program 2 (id=41):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c, 0x80800)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4)

2m37.407286976s ago: executing program 2 (id=42):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async)
unshare(0x2040400) (async)
fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0})

2m37.325970658s ago: executing program 2 (id=43):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pread64(r0, 0x0, 0x0, 0xffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0)
recvfrom$unix(r2, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x80)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000)
r5 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
fsetxattr$security_ima(r5, &(0x7f0000000080), 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x3, 0x200, 0x7, 0x9, 0x6, 0x200})
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800)

2m37.311955098s ago: executing program 32 (id=43):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pread64(r0, 0x0, 0x0, 0xffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0)
recvfrom$unix(r2, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x80)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000)
r5 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
fsetxattr$security_ima(r5, &(0x7f0000000080), 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x3, 0x200, 0x7, 0x9, 0x6, 0x200})
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800)

2m28.300890242s ago: executing program 3 (id=140):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000000000000000]}, 0x8)
fcntl$setstatus(r2, 0x4, 0x400)
fcntl$setstatus(r2, 0x4, 0x4000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, 0x0, 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
listen(r3, 0xfffffff2)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0xe)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffffd, 0x10000, 0xfffffffd})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r6, 0xa0e4f000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m28.157276915s ago: executing program 3 (id=142):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1})
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000280)=0x1, 0x4)
sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f62c14755f13bd8739bd70000f0000ffffffff00000000000000640101010000000000000000000000000b000404"], 0x38}}, 0x4014)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000031c0)={0xfffffffffffffde4, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

2m28.096932047s ago: executing program 3 (id=144):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000)
syz_clone(0x9000500, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200)="d3e0606f1e0437d6d6936ce7696b787e391a2fa69cf876f3a5f1ec30ac692d611e5d1625426157a15bd7ec43b00344c735936e74574924b6d3d0906c510b3605efcbfa54ef95fa03b88805")
syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000580)={0x3, {{0x2, 0x4e1c, @empty}}, {{0x2, 0x5, @multicast1}}}, 0x108)
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000040)={[0x7]})
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0x1000, 0x9, 0x1, 0x0, r2})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000001100)="26650f01d1f20faef2ba200066edf367f3d9faf0838000000066b80c0000000f23c00f21f86635030006000f23f866b9d10200000f32f20f79cd64f16764360f38cc5606", 0x44}], 0x1, 0x5c, 0x0, 0x0)

2m28.056403157s ago: executing program 3 (id=145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3) (async)
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0)
unshare(0x22020600) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

2m28.007885728s ago: executing program 3 (id=147):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 32)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private1, 0x56}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0)
pidfd_send_signal(r3, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async, rerun: 32)
r4 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]})
socket(0x80000000000000a, 0x2, 0x0) (async)
close_range(0xffffffffffffffff, r4, 0x0)
read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0x7, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x7ffffffe, r6, &(0x7f00000001c0)={0x30000000}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32)

2m27.969572199s ago: executing program 3 (id=148):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'batadv_slave_0\x00', 0xc00})
dup(r1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x5, &(0x7f00000001c0)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0xffffffff, 0x10, 0x24, 0x60, 0x8})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}, 0x1, 0x0, 0x0, 0x815}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0xa})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x8, 0x11, 0x0, 0x3, 0xff, 0x80, 0x3, 0xf, 0x7, 0x54, 0x6, 0x0, 0x2309, 0x8, 0xc, 0xb, 0x0, 0x40, '\x00', 0x97, 0x1000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd)

2m27.91875889s ago: executing program 33 (id=148):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'batadv_slave_0\x00', 0xc00})
dup(r1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x5, &(0x7f00000001c0)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0xffffffff, 0x10, 0x24, 0x60, 0x8})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c010000170001"], 0x16c}, 0x1, 0x0, 0x0, 0x815}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0xa})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x8, 0x11, 0x0, 0x3, 0xff, 0x80, 0x3, 0xf, 0x7, 0x54, 0x6, 0x0, 0x2309, 0x8, 0xc, 0xb, 0x0, 0x40, '\x00', 0x97, 0x1000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd)

2m27.36206014s ago: executing program 1 (id=151):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ptrace$getregset(0x4204, 0xffffffffffffffff, 0x201, &(0x7f0000000100)={&(0x7f0000000340)=""/102, 0x66})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xffff, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}])
ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000040)=0x2)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xb0, 0x6, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x0, 0x0, 0x50, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0xdddd1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0x2, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0xdddd0000, 0xd, 0xf7, 0x5, 0x86, 0xd, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x81, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x50039, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]})
close_range(r0, 0xffffffffffffffff, 0x0)

2m27.153762925s ago: executing program 1 (id=154):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
socket(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
syz_clone3(0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x22, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x1b04, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e36039, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x10005, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
listen(0xffffffffffffffff, 0x15) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="660f2025640f01cbb805000000b90e0000000f01d9186cf0a70fc72b650f070f225eb9000200000f320f840100000066ba4200b000ee", 0x36}], 0x1, 0x0, &(0x7f0000000100)=[@dstype0={0x6, 0x2}], 0x1)

2m27.141080615s ago: executing program 1 (id=156):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1c3041, 0x196)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000180)={0x20, 0xd, 0x6, "f430cc86704c"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async)
fcntl$setlease(r1, 0x400, 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1c3041, 0x196) (async)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000180)={0x20, 0xd, 0x6, "f430cc86704c"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

2m25.410081758s ago: executing program 1 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
clock_adjtime(0x2, &(0x7f0000000040)={0x2, 0x3, 0x3, 0xa, 0x1fd6, 0x5, 0x1, 0x0, 0x1, 0x4, 0x4, 0x8, 0x4, 0xee3, 0x9, 0x80000001, 0x2, 0x5, 0x5, 0x1, 0x4, 0x7, 0xfffffffffffffffa, 0x80000000, 0x8, 0xfff})
readahead(0xffffffffffffffff, 0x1de, 0x6)
mkdir(0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x91, 0x10000b9}, {0x5, 0x10000b9}, 0x5, 0x4})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000300)={0xffffffc0, 0x80})
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020)

2m25.152123903s ago: executing program 1 (id=183):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0xd, 0x1000, 0x10, 0x4, 0x8]}, &(0x7f0000000280)=0x54)
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@version_L}, {@nodevmap}, {@noxattr}]}})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)

2m25.088116465s ago: executing program 1 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@verity_on}]})
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='verity=on', &(0x7f0000000180)='lowerdir', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100b2008000000000030000060600064000010000"], 0xffffffffffffff40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) (async)
read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f)

2m24.976692077s ago: executing program 34 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@verity_on}]})
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='verity=on', &(0x7f0000000180)='lowerdir', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100b2008000000000030000060600064000010000"], 0xffffffffffffff40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) (async)
read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f)

2m24.633264613s ago: executing program 4 (id=195):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x5)
fchdir(r2)
unlink(&(0x7f0000000040)='./file1\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_io_uring_setup(0x25dd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x1, 0x1, 0xfffffffc}, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x14, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x4, 0x1e}]}, 0x14}], 0x1}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = open(0x0, 0x0, 0x718bb647156ec3b7)
ppoll(&(0x7f0000000440)=[{r5, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

2m24.599194034s ago: executing program 4 (id=196):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

2m24.557891615s ago: executing program 4 (id=197):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0xffffffff, 0x6)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="650f136099b8880b8ed80fc71b0f2de6250050f236f00fb0aa1f18f3f69a5c000f01ca440f20c066350d000000440f22c0360f38c867bc", 0x37}], 0x1, 0x10, &(0x7f0000000100), 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close_range(r0, 0xffffffffffffffff, 0x0)

2m24.27510843s ago: executing program 4 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2d0102, 0x0)
fcntl$getflags(r0, 0x1)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x80000000, 0x42000000, 0x0, 0x5, 0x1000, 0x1400000, 0x0, 0x0, 0x2, 0x8000}}, 0x50)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020)

2m24.186101102s ago: executing program 4 (id=202):
r0 = getpid()
syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x101000)
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1)
setns(r1, 0x24020000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000006303000000000000902b0040001f0000"])
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000080)={0x8000, 0x5})
umount2(&(0x7f0000000040)='.\x00', 0x2)

2m24.022019955s ago: executing program 4 (id=206):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
wait4(r3, 0x0, 0xa, 0x0) (async)
wait4(r3, 0x0, 0xa, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl(r4, 0x4, &(0x7f0000000100)="5a67d100b7bfd5b0196f75aac45a2b54")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

2m23.929260907s ago: executing program 35 (id=206):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
wait4(r3, 0x0, 0xa, 0x0) (async)
wait4(r3, 0x0, 0xa, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl(r4, 0x4, &(0x7f0000000100)="5a67d100b7bfd5b0196f75aac45a2b54")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

21.513107014s ago: executing program 0 (id=2118):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in6=@mcast1, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1fe, 0x0, 0x2, 0x2dcc, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd29, 0x70bd2d, 0x70bd26, 0x10}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r3, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x4, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x9, 0x8200, 0x1, 0x1, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x7ffffff9, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x1000000f, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x1000, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffff9, 0x4, 0x3, 0x3, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x400, 0x2, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x2, 0x3, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x49, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8392, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x8000009, 0x6e, 0x8001, 0xb922, 0x3, 0x6, 0x5, 0x2, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xf9, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0x40, 0xffffff4e, 0x9, 0x2, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0x2, 0x3, 0xdaa, 0x4, 0x3, 0x102, 0x6, 0xcc, 0x1fffc000, 0x1, 0xffffffff, 0xffbffffc, 0x40, 0x80000000, 0x4, 0x7, 0x6, 0x4, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x7, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) (async)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r3, 0x5501) (async)
prctl$PR_MCE_KILL_GET(0x22) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) (async)
r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000700)=[@wr_crn={0x46, 0x20, {0x0, 0x5}}, @code={0xa, 0x65, {"66b857008ee066baf80cb8580c008cef66bafc0cedf2f30f07440f20c03503000000440f22c00f01d1660fc7751064400f2087470f01c466ba4200ed48b8ca000000000000000f23d80f21f835c00000900f23f8"}}, @code={0xa, 0x73, {"65460f01f8c74424000af2ffffc74424020b000000c7442406000000000f011c24c7442400e5000000c744240200000000ff2c24f23e0f01f866baf80cb89420f389ef66bafc0c66b8000066ef0fe7520c4066908f09f0923f410f30660f3a202f00"}}, @wrmsr={0x1e, 0x20, {0x209, 0x7c}}, @rdmsr={0x32, 0x18, {0xe0}}, @code={0xa, 0x5f, {"c74424006d640000c7442402fab40000c7442406000000000f0114240f01cbc463fd48d10066ba4100b80d000000efc4c15972d1d1450f01c8b9770b00000f3266480f38f638f3430f22e70fc73a"}}, @cpuid={0x14, 0x18, {0x7fffffff, 0x8a}}, @cpuid={0x14, 0x18, {0x6, 0x7fffffff}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x3, 0x8}}, @cpuid={0x14, 0x18, {0xa680, 0x2}}, @wrmsr={0x1e, 0x20, {0x375, 0x200}}, @cpuid={0x14, 0x18, {0x1ea, 0x8}}, @rdmsr={0x32, 0x18, {0xa5d}}, @cpuid={0x14, 0x18, {0x1, 0x8001}}, @code={0xa, 0x55, {"66baf80cb885c02d8fef66bafc0cec263e2ef20f01b5630000000f08f30f51600066baa100b80b000000ef0f019e27f017e10f20ddf04011a7c1cfe798440f01c83e479c"}}, @wrmsr={0x1e, 0x20, {0x3b2, 0x6}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0xa5, 0x3}}, @code={0xa, 0x84, {"0fc79bf0ffffff66baa10066ed66baf80cb8680cb68bef66bafc0ced420f01c2c74424000e000000c7442402427b0000c7442406000000000f01142466baf80cb8701d8b84ef66bafc0cec0fc7990000000065260f2398410f013848b800500000000000000f23d00f21f8352000000e0f23f8"}}, @rdmsr={0x32, 0x18, {0x9ed}}, @wrmsr={0x1e, 0x20, {0xb47, 0xfffffffffffffffe}}, @code={0xa, 0x50, {"66b80b008ec80f01cb7709c403055cc50266400f38821e6466460fc7b589a60000c4a1e9602336450f01c30f01cfb9c5080000b806000000ba000000000f30"}}, @rdmsr={0x32, 0x18, {0xbbf}}, @rdmsr={0x32, 0x18, {0xa65}}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @wr_crn={0x46, 0x20}], 0x490})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="3ef30f117b00827c0901b832008ec866b80500000066b91b0800000f01c1640f12ef670fc737660f3a15730b073e260f32f30f0966b809c6e4040f23d80f21f86635800000900f23f8", 0x49}], 0x1, 0x78, &(0x7f00000003c0)=[@efer={0x2, 0xa000}, @vmwrite={0x8, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0xaaa3}], 0x2) (async)
syz_open_procfs(r4, &(0x7f0000000000)='map_files\x00')
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={r4, 0x0, 0x8001}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r7 = socket(0xa, 0x3, 0x3a) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r9=>0x0})
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) (async)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r9, 0xffffff8f}, 0xc) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)

21.464055635s ago: executing program 0 (id=2120):
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendto$packet(r0, 0x0, 0xfffffffffffffcc0, 0x4000004, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0x4018aee2, &(0x7f0000000000))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})

21.382666647s ago: executing program 0 (id=2122):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x8, 0x1b, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x2, 0x7a, 0x1, {0x22, 0x781}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x9, 0xc, 0x9, 0x8, 0x3}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x843}}, {0x65, &(0x7f0000000440)=@string={0x65, 0x3, "ffa93fcc85078204d4fbdfeaa055412ac5b420c7692e34b2715531d833e80d4612dbb55df9f6fc6c27eda7399cc5cc24eecf7a27a665092b1ec15c93c69a3505648208019270f3cbc1b28b7cf9be9244d249b419fd1d4b8d22d5b50a6c267eae1a561f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40e}}, {0x68, &(0x7f0000000580)=@string={0x68, 0x3, "afd09cc7fb7f9ca68d397250b365428583fad048605b1f01135d8ff85c418802610cb2209031d0d1079d27c05be8c29acd639ea4ae5edaae6566cb99f54c138ad97679088b84f4d75dd7026b01336bc49b3f45fed9254b742aaafb021c1c74fdd47baae121c6"}}, {0x82, &(0x7f0000000740)=ANY=[@ANYBLOB="8203114fe5bf35e5dc88ad01d871bc3f2e7bfa5ccc03af8ca63d6485e1644e865d6ec873f8823cefcbc33a56e65c7bd4ee9357014b9ceaa4c4ffa6b9de5f2cfc0f5bc6c2e51c99ddae4470941089d4ac74721d3bd75972b3d57239539cfc58a1f9ca0c72dc11a7f7863a"]}, {0xa8, &(0x7f0000000800)=@string={0xa8, 0x3, "4f2de0e0ad5049780651cbad7f428a0a7a1b00f987664dd72df7957eadfe99f119b327c89070b15b6f0121c46657597b76ed1f1a4b73ab347185b1e2190762388501205a52c0fc87dfc56da4991072732aef7080e061c01bb4f214f43717381450f5144bf710a421ba707ba1e9c1755e978c529794b9b4b4f83b910eb91d4b3417fa56f61a06d1acd9c84d976c1232a28472792d3e61c534bc35db3a359cb711e6159be3650d"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x400a}}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="450f01f866b832008ee066f3450f7ff8f30fc7b000000100480fc71d0000000065f3410f5cc8b9ae0b00000f32f3450f1ef89b40d1d0", 0x36}], 0x1, 0x10, &(0x7f0000000240)=[@dstype3={0x7, 0x2}, @flags={0x3, 0x2400}], 0x2)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000980)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @fda={0x66646185, 0x4, 0x0, 0x17}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000)
listen(0xffffffffffffffff, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1000009ee8, 0x12)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000001400)=[@decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) (async)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x8, 0x1b, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x2, 0x7a, 0x1, {0x22, 0x781}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x27, 0x7}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x9, 0xc, 0x9, 0x8, 0x3}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x843}}, {0x65, &(0x7f0000000440)=@string={0x65, 0x3, "ffa93fcc85078204d4fbdfeaa055412ac5b420c7692e34b2715531d833e80d4612dbb55df9f6fc6c27eda7399cc5cc24eecf7a27a665092b1ec15c93c69a3505648208019270f3cbc1b28b7cf9be9244d249b419fd1d4b8d22d5b50a6c267eae1a561f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40e}}, {0x68, &(0x7f0000000580)=@string={0x68, 0x3, "afd09cc7fb7f9ca68d397250b365428583fad048605b1f01135d8ff85c418802610cb2209031d0d1079d27c05be8c29acd639ea4ae5edaae6566cb99f54c138ad97679088b84f4d75dd7026b01336bc49b3f45fed9254b742aaafb021c1c74fdd47baae121c6"}}, {0x82, &(0x7f0000000740)=ANY=[@ANYBLOB="8203114fe5bf35e5dc88ad01d871bc3f2e7bfa5ccc03af8ca63d6485e1644e865d6ec873f8823cefcbc33a56e65c7bd4ee9357014b9ceaa4c4ffa6b9de5f2cfc0f5bc6c2e51c99ddae4470941089d4ac74721d3bd75972b3d57239539cfc58a1f9ca0c72dc11a7f7863a"]}, {0xa8, &(0x7f0000000800)=@string={0xa8, 0x3, "4f2de0e0ad5049780651cbad7f428a0a7a1b00f987664dd72df7957eadfe99f119b327c89070b15b6f0121c46657597b76ed1f1a4b73ab347185b1e2190762388501205a52c0fc87dfc56da4991072732aef7080e061c01bb4f214f43717381450f5144bf710a421ba707ba1e9c1755e978c529794b9b4b4f83b910eb91d4b3417fa56f61a06d1acd9c84d976c1232a28472792d3e61c534bc35db3a359cb711e6159be3650d"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x400a}}]}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="450f01f866b832008ee066f3450f7ff8f30fc7b000000100480fc71d0000000065f3410f5cc8b9ae0b00000f32f3450f1ef89b40d1d0", 0x36}], 0x1, 0x10, &(0x7f0000000240)=[@dstype3={0x7, 0x2}, @flags={0x3, 0x2400}], 0x2) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000980)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @fda={0x66646185, 0x4, 0x0, 0x17}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000) (async)
listen(0xffffffffffffffff, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x1000009ee8, 0x12) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000001400)=[@decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) (async)

21.294155508s ago: executing program 0 (id=2123):
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x9, @any, 0x8}, 0xe)

21.293718948s ago: executing program 0 (id=2124):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x6e426000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000740)=[@exit_looper, @dead_binder_done], 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)={{0x7, 0x6}, {0x80000001, 0xff}, 0x80})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
ioctl$KDGETKEYCODE(r3, 0x4b4c, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0xd3, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x10000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4002}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="020040006e1f29361000000000000000f0ffffffffff03001000000000000000fbcaf2d813a18d38d547b1ab74d920808a85564bc7e1298d014bd5508718bb2ce552784b04c38b92574f42ab71331848d099136163e73545d34ca7ea63165a4d8ca2589e541ec357af91134294ad5d38ef2d210c115b692f306a7a69161b10786100333a97199c630735"])
read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0x12b5)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r10, 0x0)
connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10)

21.239811249s ago: executing program 0 (id=2125):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffdfe}, 0x1, 0x0, 0x0, 0x40050}, 0x448d5)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = dup(0xffffffffffffffff)
getsockname$packet(r3, 0x0, &(0x7f0000000280))
io_setup(0x8, &(0x7f0000004200))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x3, 0x80a0000, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180))

10.755176362s ago: executing program 7 (id=2157):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3})
r3 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3})
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x8800, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0xfffffff9, 0x0, r3})
close_range(r0, 0xffffffffffffffff, 0x0)

9.259996341s ago: executing program 6 (id=2159):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0x2, 0x6, 0x2, 0xfe3, 0x0, 0x151}})

9.255692831s ago: executing program 7 (id=2160):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b6e65745f636c73202d63707561636a57202d6d656d6f7279202d000020006e65745f7072696f202b626c6b696f202b6dd16d6f727920"], 0x37)
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r3, 0x400448e4, &(0x7f0000000480))
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100})
r7 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2)
write(r7, &(0x7f0000000040)="06", 0x1)
sendfile(r7, r7, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r7, 0x0)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
read$FUSE(r5, &(0x7f0000006840)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000001040)={0x14}, 0x14)
r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1101, 0x5})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

9.254628991s ago: executing program 5 (id=2161):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
pipe(&(0x7f0000019480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) (async)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000100)={0x1a, 0x0, [{0xc0000001, 0xfff, 0x0, 0x9, 0x5, 0x9, 0x8}]}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
write$binfmt_aout(r1, &(0x7f0000000980)={{0xcc, 0x4, 0x1, 0xd6, 0x119, 0x5, 0x30a, 0x3}, "e239bd1bfb865997d2aad4", ['\x00', '\x00', '\x00']}, 0x32b) (async)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async)
gettid()
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000005c0))
mkdir(&(0x7f0000000040)='./file0\x00', 0x106) (async)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
syz_open_dev$hiddev(0x0, 0x9, 0x2000)
ppoll(&(0x7f0000000100)=[{r6, 0x2001}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x2, 0x0, 0x13}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}, 0x400}], 0x0, 0x0, 0x0})

7.574027353s ago: executing program 6 (id=2162):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000009a000040"])
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x110, r0, 0x1dfd1000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
tkill(r4, 0x36)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0xc)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

7.572806003s ago: executing program 5 (id=2163):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

5.880106886s ago: executing program 6 (id=2164):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x9286f9ce86a82d0b}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0})

5.873996846s ago: executing program 7 (id=2165):
r0 = socket$inet6(0xa, 0x80000, 0x47)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x2, 0xa, 0x300)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840)
sendto$inet(r1, &(0x7f0000000240)="b4", 0x1, 0x4, 0x0, 0x0)
shutdown(r1, 0x1)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1)
splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) (async)
splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x1589, {{0xa, 0x4e24, 0x3, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x400, @empty, 0x81}}}, 0x108)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x4f7caa5df93f1fa2, 0x0, 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x4f7caa5df93f1fa2, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0xb, 0xeb, {0xeb, 0x24, "dcbcc68acf06d65a125af46daa067ac8e277db78d9ca8d225e90e69e303eeb6ed8b7bec899b2a414ad2cecac2e060a41fccf028b033dd4efaee78a4112f16b0e2e908c4c67bb3d4b692549b70cc5067b005856bf6130d076a89004a6ccf4feb137241dbd57e9b2ea818769bd712a23daf0dcd497d86699dfc27ce7f53bd345a6362f588a5f986320b0ec811ccdfee741b4ae045ee1cc235e013f2a6ef0c90002f1c3198dc772c7cb2fbaebc7ad2770bbd0b9a4d448a831e9e1185a09ad56dd96468d674e931a1d2f1dcdaa4d9f543ce8281ce5f5fa6798c7555d622760cc87f8f819798671a8d69bf0"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000840)={0x44, &(0x7f00000008c0)={0x20, 0x0, 0x19, "dd37f10acdf0b87369ed46f50237d8a4abcc1e7177e7492240"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000040)=ANY=[@ANYBLOB="2081b8719173df89d8b103000000d8684a"], &(0x7f0000000740)={0x20, 0x82, 0x2, "81d3"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "4323c9"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "81aeaf"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "bae6af"}}) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0xb, 0xeb, {0xeb, 0x24, "dcbcc68acf06d65a125af46daa067ac8e277db78d9ca8d225e90e69e303eeb6ed8b7bec899b2a414ad2cecac2e060a41fccf028b033dd4efaee78a4112f16b0e2e908c4c67bb3d4b692549b70cc5067b005856bf6130d076a89004a6ccf4feb137241dbd57e9b2ea818769bd712a23daf0dcd497d86699dfc27ce7f53bd345a6362f588a5f986320b0ec811ccdfee741b4ae045ee1cc235e013f2a6ef0c90002f1c3198dc772c7cb2fbaebc7ad2770bbd0b9a4d448a831e9e1185a09ad56dd96468d674e931a1d2f1dcdaa4d9f543ce8281ce5f5fa6798c7555d622760cc87f8f819798671a8d69bf0"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000840)={0x44, &(0x7f00000008c0)={0x20, 0x0, 0x19, "dd37f10acdf0b87369ed46f50237d8a4abcc1e7177e7492240"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000040)=ANY=[@ANYBLOB="2081b8719173df89d8b103000000d8684a"], &(0x7f0000000740)={0x20, 0x82, 0x2, "81d3"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "4323c9"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "81aeaf"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "bae6af"}})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r7 = gettid()
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x200000000003]}, 0x8, 0x800) (async)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x200000000003]}, 0x8, 0x800)
readv(r8, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1) (async)
readv(r8, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1)
rt_sigqueueinfo(r7, 0x21, &(0x7f0000000180)={0x30, 0x40000020, 0xfffffffb})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)

5.813941288s ago: executing program 5 (id=2166):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000040)={'syz0\x00', {0x2, 0x1, 0xff}, 0x1d, [0x0, 0xfffffbff, 0xfffffff9, 0x43, 0x100, 0x6, 0x3, 0x5, 0x35b6a01c, 0x0, 0x4, 0x1000, 0x97, 0x5, 0xe, 0x8, 0x6, 0x0, 0xb, 0x0, 0x7, 0x9, 0x7ff, 0x80000000, 0x2668, 0x3, 0xd99, 0x1, 0x0, 0x80000001, 0x4, 0x40, 0xdf8, 0x0, 0x0, 0xa, 0x2, 0x7, 0x3fda, 0x6, 0x7f, 0xb, 0x3ff, 0x80000000, 0x3, 0x4, 0x6, 0xbc, 0x1000, 0xc, 0x7, 0x6d, 0x5, 0x0, 0x8, 0x6, 0x6, 0x7, 0xd6, 0x81, 0x1, 0x4, 0x2, 0x5], [0x0, 0x40000000, 0x6, 0x5, 0x6, 0x8, 0x1, 0x3, 0x3a, 0x80000001, 0x81, 0xfffffffb, 0x800, 0x7f, 0xb53d, 0xe, 0xad4, 0x6, 0x4, 0x7, 0x0, 0x5, 0x4, 0xfffffff1, 0x7, 0x7, 0xa, 0x6, 0xffffffff, 0x5, 0x8, 0x7, 0xdca, 0x4, 0xd6c, 0x9, 0x80000000, 0x1, 0x7, 0x66c, 0x0, 0x200, 0x4, 0x80000000, 0xff, 0x5ab, 0x3, 0x7, 0x0, 0x8a0, 0x3dba, 0x9, 0x3, 0x71e, 0x4d9, 0x80, 0x8, 0x2, 0x4, 0x40, 0x4, 0xebf, 0x1, 0x38], [0x0, 0x5, 0x6, 0x0, 0xfffffffe, 0x9, 0x4, 0xcea, 0xfffffffa, 0xfffffffc, 0x60ee, 0x3, 0x6, 0x8001, 0x5, 0x4, 0x0, 0x705a040a, 0x8, 0xbde, 0x4, 0x10000, 0x5, 0x6, 0x5, 0xff, 0x8, 0x4, 0x9, 0x8, 0x7, 0x3, 0xc, 0x7f, 0x4, 0x6, 0x80000000, 0x401, 0x8001, 0x1, 0x3, 0x5, 0x4, 0x2, 0x7, 0x2fc, 0x6, 0x7, 0x6ae, 0x64ff05d9, 0x0, 0x1, 0x10000, 0x0, 0x6, 0xe1a, 0x4, 0x3, 0x7, 0x5, 0xc00, 0xdcf, 0x10000, 0x2], [0x9, 0xdd, 0x6, 0xfffffffd, 0x9, 0x3, 0x0, 0x1, 0x0, 0x9, 0xacb, 0xf, 0x800, 0x4, 0x7f, 0xffffffff, 0x9, 0x6, 0x1ff, 0x8, 0x7ff, 0x6, 0x10001, 0x800, 0x0, 0x2, 0x8, 0x10000, 0x5, 0x4, 0x800, 0x2, 0x1, 0x200, 0x1ff, 0x4, 0xd, 0x8, 0xab35, 0x0, 0x2, 0x2, 0xffffff64, 0x200, 0x2, 0x3, 0x3, 0x3, 0x400, 0x7, 0x8, 0x8, 0x401, 0x5, 0x80000000, 0x100, 0x0, 0x1f2ab932, 0x80000000, 0xf1, 0x7, 0xfffffffe, 0xe7, 0xfff]}, 0x45c)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ftruncate(r1, 0xea69)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r10, 0xaea2, 0x7fffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

4.035937672s ago: executing program 6 (id=2167):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980080001"], 0x44}}, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, 0x0)
ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000000200))
keyctl$clear(0x3, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x800454e1, 0x17)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
memfd_create(&(0x7f0000000000)='-::^#\x00', 0x3)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

4.034408692s ago: executing program 7 (id=2168):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004580)=""/4090, 0xffa}, {&(0x7f0000000000)=""/192, 0xc0}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f00000000c0)=""/65, 0x41}], 0x7}, 0xc98}], 0x1, 0x40000000, 0x0) (async, rerun: 64)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x52, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x2}], 0x4, 0x0, &(0x7f0000000880)="877c98ab"})

4.033172402s ago: executing program 5 (id=2169):
clock_getres(0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000180))
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setuid(r6)
setresuid(r3, r4, r6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "bf55a46a"}, 0x28)
sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.08597216s ago: executing program 6 (id=2170):
r0 = memfd_create(&(0x7f0000000240)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf2\xb5\xd7\xe1{\xfdD\x85\x026\xd1\xeb\xfb=\x86\xa0z\x1aN', 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) (async)
splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (rerun: 64)

2.08510552s ago: executing program 7 (id=2171):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="68060000", @ANYRES16=r3, @ANYBLOB="10002abd7000fddbdf2501000000000000000141000000180017000000010000000869623a6d6163736563300000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async, rerun: 32)
r4 = dup3(r1, r0, 0x0) (async, rerun: 32)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x9) (async)
sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000031c0)={0xfffffffffffffde4, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

2.077218069s ago: executing program 5 (id=2172):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil)
madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
clock_gettime(0x4, &(0x7f00000004c0))

1.966149ms ago: executing program 6 (id=2173):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x800001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
close(r5)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000280)={[], 0xffffffffffffff8c}, 0x0, 0x0)
socket(0x1, 0x6, 0x7)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000780)=""/10, &(0x7f0000000080)=0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
mmap(&(0x7f000010d000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r6, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e23000100000000020000004d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000320000006401010000000000000000000000000000000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000200000000000000fcffffffffffffff0c00000000000000000000002abd7000000000000200000000000000000000004c001200726663343534332867636d2861657329290000000000000000000000000000000000000000001400000000000000d69b000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14, 0x80800)
getsockname$packet(r11, &(0x7f0000000700), &(0x7f0000000740)=0x14)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x4, 0x40, 0x7f, 0xff, 0xb, 0x7f, 0x2e, 0x8, 0x8, 0x3, 0x0, 0x7f, 0x9, 0xe2}})

1.545899ms ago: executing program 7 (id=2174):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r0)
keyctl$search(0xa, r0, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0xfffffffe})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={r5, 0x3, r1, 0x4})
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
syz_clone(0x4000000, &(0x7f00000001c0)="338454a8401811680dca0d8e2ef9f13689bbc3f1d11b6e2a605f9ef50bdfc83056eaa22204a891a965e2bb2c5cd1d0e2a338f28262fba72a8c46c8ee13258da387548223786fed5202ed4dd84c17495243125d175f5000ba9125d3a87d39982a7477d4f39571f338fd9ee5b4cc93236e0d57c9a3aa5f362b924b1290ddd2b41cee1ff955995a33b4e180abee9f349da3e8eb35e5dca7b15f39ebb99f82b5370cb79755969dbec5174ab7bef70ceee738b0e2e11ad200ddbd5806", 0xba, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140)="a96c0475ac36792958ea43546307e2")
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=2175):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x6, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f00000001c0))
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

kernel console output (not intermixed with test programs):

cess permissive=1
[   17.694098][   T36] audit: type=1400 audit(1757295025.730:63): avc:  denied  { siginh } for  pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts.
[   26.088721][   T36] audit: type=1400 audit(1757295034.140:64): avc:  denied  { mounton } for  pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.090246][  T283] cgroup: Unknown subsys name 'net'
[   26.111411][   T36] audit: type=1400 audit(1757295034.140:65): avc:  denied  { mount } for  pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.138857][   T36] audit: type=1400 audit(1757295034.170:66): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.139146][  T283] cgroup: Unknown subsys name 'devices'
[   26.259319][  T283] cgroup: Unknown subsys name 'hugetlb'
[   26.264987][  T283] cgroup: Unknown subsys name 'rlimit'
[   26.381013][   T36] audit: type=1400 audit(1757295034.430:67): avc:  denied  { setattr } for  pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.404455][   T36] audit: type=1400 audit(1757295034.430:68): avc:  denied  { mounton } for  pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.420276][  T285] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.429531][   T36] audit: type=1400 audit(1757295034.430:69): avc:  denied  { mount } for  pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.461025][   T36] audit: type=1400 audit(1757295034.490:70): avc:  denied  { relabelto } for  pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.481267][  T283] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.487301][   T36] audit: type=1400 audit(1757295034.490:71): avc:  denied  { write } for  pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.525156][   T36] audit: type=1400 audit(1757295034.530:72): avc:  denied  { read } for  pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.552216][   T36] audit: type=1400 audit(1757295034.530:73): avc:  denied  { open } for  pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.732975][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.740349][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.747533][  T290] bridge_slave_0: entered allmulticast mode
[   27.753959][  T290] bridge_slave_0: entered promiscuous mode
[   27.760537][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.767661][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.775464][  T290] bridge_slave_1: entered allmulticast mode
[   27.781865][  T290] bridge_slave_1: entered promiscuous mode
[   27.930900][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.938048][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.945395][  T295] bridge_slave_0: entered allmulticast mode
[   27.951835][  T295] bridge_slave_0: entered promiscuous mode
[   27.958030][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.965087][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.972313][  T293] bridge_slave_0: entered allmulticast mode
[   27.978663][  T293] bridge_slave_0: entered promiscuous mode
[   27.987528][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.994588][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.001723][  T295] bridge_slave_1: entered allmulticast mode
[   28.008066][  T295] bridge_slave_1: entered promiscuous mode
[   28.014203][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.021345][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.028484][  T293] bridge_slave_1: entered allmulticast mode
[   28.034720][  T293] bridge_slave_1: entered promiscuous mode
[   28.060007][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.067108][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.074195][  T296] bridge_slave_0: entered allmulticast mode
[   28.080633][  T296] bridge_slave_0: entered promiscuous mode
[   28.096654][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.103727][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.111078][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.118142][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.130527][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.137621][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.144912][  T296] bridge_slave_1: entered allmulticast mode
[   28.151291][  T296] bridge_slave_1: entered promiscuous mode
[   28.270396][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.277907][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.303409][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.310515][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.318361][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.325407][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.399469][  T290] veth0_vlan: entered promiscuous mode
[   28.425624][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.432724][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.463257][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.470347][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.478261][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.485331][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.493056][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.500137][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.509689][  T290] veth1_macvtap: entered promiscuous mode
[   28.521769][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.528872][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.536729][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.543790][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.597752][  T295] veth0_vlan: entered promiscuous mode
[   28.606127][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.612522][  T295] veth1_macvtap: entered promiscuous mode
[   28.652697][  T293] veth0_vlan: entered promiscuous mode
[   28.664874][  T296] veth0_vlan: entered promiscuous mode
[   28.687676][  T293] veth1_macvtap: entered promiscuous mode
[   28.708853][  T296] veth1_macvtap: entered promiscuous mode
[   28.742505][  T335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.862025][  T359] 9pnet_fd: Insufficient options for proto=fd
[   28.924114][  T369] exFAT-fs (rnullb0): invalid boot record signature
[   28.931117][  T369] exFAT-fs (rnullb0): failed to read boot sector
[   28.937614][   T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   28.937943][  T369] exFAT-fs (rnullb0): failed to recognize exfat type
[   29.006689][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   29.086572][   T64] usb 1-1: device descriptor read/64, error -71
[   29.106656][   T87] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   29.156760][   T10] usb 2-1: Using ep0 maxpacket: 16
[   29.163245][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.174970][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   29.184220][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.193462][   T10] usb 2-1: config 0 descriptor??
[   29.216812][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.246810][   T87] usb 3-1: device descriptor read/64, error -71
[   29.336660][   T64] usb 1-1: device descriptor read/64, error -71
[   29.367684][   T31] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[   29.375959][   T31] usb 4-1: config 0 has no interface number 1
[   29.382408][   T31] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   29.392723][   T31] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   29.404286][   T31] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[   29.413414][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   29.421586][   T31] usb 4-1: SerialNumber: syz
[   29.427095][   T31] usb 4-1: config 0 descriptor??
[   29.433193][   T31] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[   29.440185][   T31] usb 4-1: No valid video chain found.
[   29.486624][   T87] usb 3-1: device descriptor read/64, error -71
[   29.576733][   T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   29.602252][   T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0001/input/input4
[   29.615601][   T10] appleir 0003:05AC:8241.0001: input,hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[   29.635510][  T371] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.706655][   T64] usb 1-1: device descriptor read/64, error -71
[   29.726631][   T87] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   29.758532][   T31] usb 4-1: USB disconnect, device number 2
[   29.807106][  T381] usb 2-1: USB disconnect, device number 2
[   29.856589][   T87] usb 3-1: device descriptor read/64, error -71
[   29.946700][   T64] usb 1-1: device descriptor read/64, error -71
[   30.056699][   T64] usb usb1-port1: attempt power cycle
[   30.096653][   T87] usb 3-1: device descriptor read/64, error -71
[   30.196618][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   30.206732][   T87] usb usb3-port1: attempt power cycle
[   30.348137][   T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   30.356712][   T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   30.367296][   T31] usb 4-1: config 220 has no interface number 2
[   30.373583][   T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   30.387057][   T31] usb 4-1: config 220 interface 0 has no altsetting 0
[   30.393889][   T31] usb 4-1: config 220 interface 76 has no altsetting 0
[   30.400952][   T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   30.408538][   T31] usb 4-1: config 220 interface 1 has no altsetting 0
[   30.417140][   T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   30.426396][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.435501][   T31] usb 4-1: Product: syz
[   30.439762][   T31] usb 4-1: Manufacturer: syz
[   30.444628][   T31] usb 4-1: SerialNumber: syz
[   30.450074][   T64] usb 1-1: device descriptor read/8, error -71
[   30.546606][   T87] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   30.571951][   T87] usb 3-1: device descriptor read/8, error -71
[   30.598343][   T64] usb 1-1: device descriptor read/8, error -71
[   30.682161][  T395] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   30.682367][  T395] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   30.707782][   T87] usb 3-1: device descriptor read/8, error -71
[   30.736418][   T31] usb 4-1: selecting invalid altsetting 0
[   30.742576][   T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   30.749468][   T31] usb 4-1: No valid video chain found.
[   30.757647][   T31] usb 4-1: USB disconnect, device number 3
[   30.837250][   T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   30.857983][   T64] usb 1-1: device descriptor read/8, error -71
[   30.966637][   T87] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   30.987915][   T87] usb 3-1: device descriptor read/8, error -71
[   30.994461][   T64] usb 1-1: device descriptor read/8, error -71
[   31.106662][   T64] usb usb1-port1: unable to enumerate USB device
[   31.117943][   T87] usb 3-1: device descriptor read/8, error -71
[   31.226790][   T87] usb usb3-port1: unable to enumerate USB device
[   31.380642][  T400] rust_binder: Error in use_page_slow: ESRCH
[   31.380677][  T400] rust_binder: use_range failure ESRCH
[   31.386776][  T400] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false
[   31.392390][  T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   31.400560][  T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:43
[   31.423741][  T402] rust_binder: 12: no such ref 3
[   31.438559][  T404] rust_binder: Write failure EINVAL in pid:12
[   31.451846][   T36] kauditd_printk_skb: 66 callbacks suppressed
[   31.451866][   T36] audit: type=1400 audit(1757295039.500:140): avc:  denied  { create } for  pid=405 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   31.483320][   T36] audit: type=1400 audit(1757295039.520:141): avc:  denied  { read write } for  pid=410 comm="syz.1.24" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   31.526584][   T36] audit: type=1400 audit(1757295039.570:142): avc:  denied  { ioctl } for  pid=412 comm="syz.3.25" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   31.550217][   T36] audit: type=1400 audit(1757295039.600:143): avc:  denied  { create } for  pid=412 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.581681][   T36] audit: type=1400 audit(1757295039.620:144): avc:  denied  { connect } for  pid=412 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.641861][   T36] audit: type=1400 audit(1757295039.690:145): avc:  denied  { mounton } for  pid=419 comm="syz.3.28" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   31.685646][   T36] audit: type=1400 audit(1757295039.720:146): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   31.711386][   T36] audit: type=1400 audit(1757295039.760:147): avc:  denied  { read } for  pid=421 comm="syz.0.29" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.734232][   T36] audit: type=1400 audit(1757295039.760:148): avc:  denied  { open } for  pid=421 comm="syz.0.29" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.757224][   T36] audit: type=1400 audit(1757295039.760:149): avc:  denied  { read write } for  pid=421 comm="syz.0.29" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   31.991155][  T435] 9pnet_fd: Insufficient options for proto=fd
[   32.056594][   T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   32.209415][   T64] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   32.236670][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.250801][   T64] usb 4-1: Product: syz
[   32.255164][   T64] usb 4-1: Manufacturer: syz
[   32.260243][   T64] usb 4-1: SerialNumber: syz
[   32.271651][  T439] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   32.286630][  T439] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   32.295775][  T439] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   32.307881][  T439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   32.925107][  T453] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   32.934087][  T453] rust_binder: Write failure EINVAL in pid:20
[   33.089633][   T13] bridge_slave_1: left allmulticast mode
[   33.101602][   T13] bridge_slave_1: left promiscuous mode
[   33.107609][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.115534][   T13] bridge_slave_0: left allmulticast mode
[   33.121568][   T13] bridge_slave_0: left promiscuous mode
[   33.127526][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.259833][  T465] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.267049][  T465] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.274201][  T465] bridge_slave_0: entered allmulticast mode
[   33.281265][  T465] bridge_slave_0: entered promiscuous mode
[   33.288581][   T13] veth1_macvtap: left promiscuous mode
[   33.294193][   T13] veth0_vlan: left promiscuous mode
[   33.341593][  T465] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.350921][  T465] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.358622][  T465] bridge_slave_1: entered allmulticast mode
[   33.365518][  T465] bridge_slave_1: entered promiscuous mode
[   33.435501][  T475] Zero length message leads to an empty skb
[   33.457851][  T465] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.464981][  T465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.472489][  T465] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.479545][  T465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.529936][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.548006][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.555095][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.596461][  T465] veth0_vlan: entered promiscuous mode
[   33.614939][  T465] veth1_macvtap: entered promiscuous mode
[   33.713246][  T499] rust_binder: Write failure EFAULT in pid:2
[   33.805679][  T509] binder: Bad value for 'max'
[   33.824313][  T511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[   33.904217][  T515] rust_binder: Error while translating object.
[   33.913534][  T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   33.920221][  T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45
[   34.078605][  T522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'.
[   34.121571][  T526] fuse: Unknown parameter 'ĺŁ'
[   34.167459][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   34.198466][  T531] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   34.219196][  T533] __vm_enough_memory: pid: 533, comm: syz.4.64, bytes: 18014402804453376 not enough memory for the allocation
[   34.306879][   T10] usb 2-1: device descriptor read/64, error -71
[   34.546571][   T10] usb 2-1: device descriptor read/64, error -71
[   34.786612][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   34.826572][   T87] usb 4-1: USB disconnect, device number 4
[   34.926727][   T10] usb 2-1: device descriptor read/64, error -71
[   35.166585][   T10] usb 2-1: device descriptor read/64, error -71
[   35.172957][   T87] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   35.286742][   T10] usb usb2-port1: attempt power cycle
[   35.327903][   T87] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   35.337263][   T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.346246][   T87] usb 4-1: config 0 descriptor??
[   35.353729][  T594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.79'.
[   35.626641][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   35.647654][   T10] usb 2-1: device descriptor read/8, error -71
[   35.777655][   T10] usb 2-1: device descriptor read/8, error -71
[   36.016596][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   36.037608][   T10] usb 2-1: device descriptor read/8, error -71
[   36.168096][   T10] usb 2-1: device descriptor read/8, error -71
[   36.279818][   T10] usb usb2-port1: unable to enumerate USB device
[   36.556679][   T87] usb 4-1: Cannot set autoneg
[   36.562519][   T87] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   36.574954][   T87] usb 4-1: USB disconnect, device number 5
[   36.725278][  T611] netlink: 'syz.4.84': attribute type 32 has an invalid length.
[   36.735783][  T611] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   36.888934][  T619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86'.
[   36.899399][  T619] 2N: renamed from vcan0 (while UP)
[   36.925592][   T36] kauditd_printk_skb: 56 callbacks suppressed
[   36.925620][   T36] audit: type=1400 audit(1757295044.970:206): avc:  denied  { ioctl } for  pid=623 comm="syz.1.88" path="socket:[5772]" dev="sockfs" ino=5772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.952029][  T626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   37.044243][   T36] audit: type=1400 audit(1757295045.080:207): avc:  denied  { read write } for  pid=633 comm="syz.1.93" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.082595][   T36] audit: type=1400 audit(1757295045.080:208): avc:  denied  { open } for  pid=633 comm="syz.1.93" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.112046][   T36] audit: type=1400 audit(1757295045.080:209): avc:  denied  { ioctl } for  pid=633 comm="syz.1.93" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.138189][   T36] audit: type=1400 audit(1757295045.080:210): avc:  denied  { write } for  pid=633 comm="syz.1.93" name="unix" dev="proc" ino=4026532425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   37.291851][  T642] netlink: 'syz.4.92': attribute type 7 has an invalid length.
[   37.299561][  T642] netlink: 'syz.4.92': attribute type 5 has an invalid length.
[   37.307524][  T642] netlink: 17 bytes leftover after parsing attributes in process `syz.4.92'.
[   37.308333][  T653] =======================================================
[   37.308333][  T653] WARNING: The mand mount option has been deprecated and
[   37.308333][  T653]          and is ignored by this kernel. Remove the mand
[   37.308333][  T653]          option from the mount to silence this warning.
[   37.308333][  T653] =======================================================
[   37.316363][   T36] audit: type=1400 audit(1757295045.360:211): avc:  denied  { mounton } for  pid=652 comm="syz.0.97" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   37.318517][  T630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.375864][  T630] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   37.385469][  T630] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:52
[   37.460858][  T664] rust_binder: Error while translating object.
[   37.469556][  T664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.475769][  T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57
[   37.501272][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   37.527169][   T36] audit: type=1326 audit(1757295045.580:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=671 comm="syz.4.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15df38ebe9 code=0x0
[   37.550526][   T36] audit: type=1400 audit(1757295045.580:213): avc:  denied  { read } for  pid=670 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.569791][   T36] audit: type=1400 audit(1757295045.580:214): avc:  denied  { write } for  pid=670 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.589302][   T36] audit: type=1400 audit(1757295045.610:215): avc:  denied  { map } for  pid=677 comm="syz.0.106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   37.687643][   T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   37.698604][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.710224][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.720210][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   37.734094][   T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   37.743478][   T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   37.751681][   T31] usb 4-1: Manufacturer: syz
[   37.757426][   T31] usb 4-1: config 0 descriptor??
[   38.011653][  T700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.164605][   T31] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   38.171954][   T31] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   38.180843][   T31] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   38.236600][  T350] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   38.266605][   T87] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   38.378364][  T703] rust_binder: Write failure EFAULT in pid:67
[   38.387764][  T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.396625][   T87] usb 2-1: device descriptor read/64, error -71
[   38.404849][  T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.420897][  T350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   38.434596][  T350] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   38.439678][  T645] overlayfs: failed to resolve './bus/file0': -2
[   38.443965][  T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.459311][  T350] usb 1-1: config 0 descriptor??
[   38.464770][  T372] usb 4-1: USB disconnect, device number 6
[   38.626562][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   38.646819][   T87] usb 2-1: device descriptor read/64, error -71
[   38.776557][   T31] usb 5-1: Using ep0 maxpacket: 16
[   38.783708][   T31] usb 5-1: config 1 interface 0 has no altsetting 0
[   38.791859][   T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40
[   38.800982][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.809036][   T31] usb 5-1: Product: syz
[   38.813314][   T31] usb 5-1: Manufacturer: syz
[   38.817962][   T31] usb 5-1: SerialNumber: syz
[   38.823214][   T31] usb 5-1: rejected 1 configuration due to insufficient available bus power
[   38.832534][   T31] usb 5-1: no configuration chosen from 1 choice
[   38.872661][  T350] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[   38.881398][  T350] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   38.886629][   T87] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   38.890712][  T350] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   39.036718][   T87] usb 2-1: device descriptor read/64, error -71
[   39.276620][   T87] usb 2-1: device descriptor read/64, error -71
[   39.386812][   T87] usb usb2-port1: attempt power cycle
[   39.726595][   T87] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   39.747671][   T87] usb 2-1: device descriptor read/8, error -71
[   39.877727][   T87] usb 2-1: device descriptor read/8, error -71
[   40.116600][   T87] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   40.137683][   T87] usb 2-1: device descriptor read/8, error -71
[   40.267760][   T87] usb 2-1: device descriptor read/8, error -71
[   40.296588][   T10] usb 1-1: reset high-speed USB device number 6 using dummy_hcd
[   40.376656][   T87] usb usb2-port1: unable to enumerate USB device
[   41.050933][  T724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   41.133635][  T733] rust_binder: Read failure Err(EAGAIN) in pid:129
[   41.134084][  T733] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   41.148709][  T733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   41.378129][  T381] usb 5-1: USB disconnect, device number 2
[   41.416590][  T350] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   41.524522][  T750] netlink: 'syz.4.128': attribute type 2 has an invalid length.
[   41.587821][  T350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.598172][  T350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.611498][  T350] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.632207][  T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.640942][  T350] usb 2-1: SerialNumber: syz
[   41.677012][  T372] usb 1-1: USB disconnect, device number 6
[   41.871036][  T771] exFAT-fs (rnullb0): invalid boot record signature
[   41.877976][  T771] exFAT-fs (rnullb0): failed to read boot sector
[   41.884550][  T771] exFAT-fs (rnullb0): failed to recognize exfat type
[   41.917484][  T774] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 220)
[   41.917510][  T774] rust_binder: Error while translating object.
[   41.928798][  T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.935195][  T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101
[   41.949076][  T774] rust_binder: 101: no such ref 3
[   41.966651][  T774] rust_binder: 101: no such ref 3
[   41.972069][  T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101
[   41.998746][  T777] netlink: 44 bytes leftover after parsing attributes in process `syz.4.135'.
[   42.130318][  T350] usb 2-1: 0:2 : does not exist
[   42.136065][  T350] usb 2-1: unit 5: unexpected type 0x09
[   42.145097][  T350] usb 2-1: USB disconnect, device number 11
[   42.176568][  T372] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   42.201008][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.262882][  T796] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   42.268814][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   42.268837][   T36] audit: type=1400 audit(1757295050.310:232): avc:  denied  { bind } for  pid=797 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   42.273576][  T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.298614][  T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[   42.309094][  T798] can0: slcan on ttyS3.
[   42.310061][  T372] usb 1-1: device descriptor read/64, error -71
[   42.322885][   T36] audit: type=1400 audit(1757295050.370:233): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   42.381603][  T801] x_tables: duplicate entry at hook 1
[   42.388431][  T798] can0 (unregistered): slcan off ttyS3.
[   42.479232][   T13] bridge_slave_1: left allmulticast mode
[   42.486594][   T13] bridge_slave_1: left promiscuous mode
[   42.492392][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.500438][   T13] bridge_slave_0: left allmulticast mode
[   42.506179][   T13] bridge_slave_0: left promiscuous mode
[   42.512240][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.566587][  T372] usb 1-1: device descriptor read/64, error -71
[   42.604956][   T36] audit: type=1400 audit(1757295050.650:234): avc:  denied  { mounton } for  pid=811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   42.641557][   T13] veth1_macvtap: left promiscuous mode
[   42.647165][   T13] veth0_vlan: left promiscuous mode
[   42.717386][  T811] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.724552][  T811] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.733276][  T811] bridge_slave_0: entered allmulticast mode
[   42.745704][  T811] bridge_slave_0: entered promiscuous mode
[   42.746607][   T36] audit: type=1400 audit(1757295050.790:235): avc:  denied  { read } for  pid=815 comm="syz.1.150" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   42.775680][  T811] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.783427][  T811] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.793560][  T811] bridge_slave_1: entered allmulticast mode
[   42.800245][  T811] bridge_slave_1: entered promiscuous mode
[   42.807601][   T36] audit: type=1400 audit(1757295050.790:236): avc:  denied  { open } for  pid=815 comm="syz.1.150" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   42.836626][  T372] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   42.861041][   T36] audit: type=1400 audit(1757295050.790:237): avc:  denied  { ioctl } for  pid=815 comm="syz.1.150" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   42.928570][  T811] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.935636][  T811] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.943099][  T811] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.950199][  T811] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.971940][  T552] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.979791][  T552] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.986993][  T372] usb 1-1: device descriptor read/64, error -71
[   42.996935][  T552] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.004036][  T552] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.013678][  T559] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.020789][  T559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.052819][  T811] veth0_vlan: entered promiscuous mode
[   43.066136][  T811] veth1_macvtap: entered promiscuous mode
[   43.212538][   T36] audit: type=1400 audit(1757295051.260:238): avc:  denied  { wake_alarm } for  pid=830 comm="syz.5.152" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.234567][  T372] usb 1-1: device descriptor read/64, error -71
[   43.264555][  T831] tipc: Can't bind to reserved service type 0
[   43.271249][   T36] audit: type=1400 audit(1757295051.310:239): avc:  denied  { bind } for  pid=830 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.348384][  T372] usb usb1-port1: attempt power cycle
[   43.547751][  T856] rust_binder: Write failure EFAULT in pid:10
[   43.616615][  T381] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   43.676830][   T36] audit: type=1400 audit(1757295051.730:240): avc:  denied  { create } for  pid=862 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   43.707077][  T372] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   43.727927][  T372] usb 1-1: device descriptor read/8, error -71
[   43.776629][  T381] usb 2-1: Using ep0 maxpacket: 16
[   43.782791][   T36] audit: type=1400 audit(1757295051.830:241): avc:  denied  { append } for  pid=868 comm="syz.4.164" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.783180][  T381] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   43.814114][  T381] usb 2-1: config 0 has no interface number 0
[   43.820288][  T381] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   43.830176][  T381] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   43.843298][  T381] usb 2-1: config 0 interface 41 has no altsetting 0
[   43.851807][  T381] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   43.866242][  T877] overlayfs: conflicting options: verity=on,redirect_dir=follow
[   43.874932][  T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.875608][  T372] usb 1-1: device descriptor read/8, error -71
[   43.883081][  T381] usb 2-1: Product: syz
[   43.893840][  T381] usb 2-1: Manufacturer: syz
[   43.898790][  T381] usb 2-1: SerialNumber: syz
[   43.907988][  T381] usb 2-1: config 0 descriptor??
[   43.913581][  T849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   43.915429][  T879] netlink: 188 bytes leftover after parsing attributes in process `syz.4.167'.
[   43.921257][  T849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   44.137524][  T849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   44.144790][  T849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   44.152405][  T372] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   44.177671][  T372] usb 1-1: device descriptor read/8, error -71
[   44.307728][  T372] usb 1-1: device descriptor read/8, error -71
[   44.416672][  T372] usb usb1-port1: unable to enumerate USB device
[   44.717201][  T889] rust_binder: Write failure EFAULT in pid:20
[   44.754281][  T381] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   44.977947][  T381] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   45.013281][  T381] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[   45.025609][  T381] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   45.037702][  T381] usb 2-1: USB disconnect, device number 12
[   45.164589][  T922] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.165394][  T921] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   45.182604][  T922] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   45.269661][  T931] rust_binder: 146: no such ref 2
[   45.288078][  T931] rust_binder: 146: no such ref 1
[   45.293308][  T931] rust_binder: Read failure Err(EAGAIN) in pid:146
[   45.294487][  T933] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607)
[   45.311267][  T933] rust_binder: Error while translating object.
[   45.326580][  T933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.339388][  T933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[   45.350493][  T933] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.368722][  T552] bridge_slave_1: left allmulticast mode
[   45.380187][  T552] bridge_slave_1: left promiscuous mode
[   45.387372][  T552] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.395593][  T552] bridge_slave_0: left allmulticast mode
[   45.405012][  T552] bridge_slave_0: left promiscuous mode
[   45.415103][  T552] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.572068][  T552] veth1_macvtap: left promiscuous mode
[   45.586718][  T552] veth0_vlan: left promiscuous mode
[   45.664074][  T952] rust_binder: 154: no such ref 0
[   45.673793][  T952] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   45.694965][  T950] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   45.696577][  T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154
[   45.716784][  T950] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   45.819391][  T957] can0: slcan on ttyS3.
[   45.840183][  T948] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.863963][  T948] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.872677][  T948] bridge_slave_0: entered allmulticast mode
[   45.879351][  T948] bridge_slave_0: entered promiscuous mode
[   45.905221][  T948] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.912722][  T948] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.920135][  T948] bridge_slave_1: entered allmulticast mode
[   45.927359][  T948] bridge_slave_1: entered promiscuous mode
[   45.953662][  T970] tipc: Started in network mode
[   45.959191][  T970] tipc: Node identity 66a0c4385779, cluster identity 4711
[   45.966883][  T970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.021238][  T970] syzkaller0: entered promiscuous mode
[   46.027029][  T970] syzkaller0: entered allmulticast mode
[   46.033025][  T970] tipc: Resetting bearer <eth:syzkaller0>
[   46.073286][  T976] tipc: Resetting bearer <eth:syzkaller0>
[   46.102132][  T976] tipc: Disabling bearer <eth:syzkaller0>
[   46.172665][  T989] binder: Unknown parameter '˙˙'
[   46.205155][  T956] can0 (unregistered): slcan off ttyS3.
[   46.261758][  T948] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.268897][  T948] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.276247][  T948] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.283349][  T948] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.321115][ T1008] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   46.326583][ T1008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61
[   46.348806][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.376782][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.427437][  T559] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.434653][  T559] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.463504][  T559] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.471888][  T559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.517293][  T948] veth0_vlan: entered promiscuous mode
[   46.545148][  T948] veth1_macvtap: entered promiscuous mode
[   46.561703][  T559] bridge_slave_1: left allmulticast mode
[   46.576765][  T559] bridge_slave_1: left promiscuous mode
[   46.582624][  T559] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.593129][  T559] bridge_slave_0: left allmulticast mode
[   46.607478][  T559] bridge_slave_0: left promiscuous mode
[   46.613667][  T559] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.770197][ T1034] overlay: ./file0 is not a directory
[   46.802366][  T559] tipc: Left network mode
[   46.808350][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.815521][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.823428][ T1028] bridge_slave_0: entered allmulticast mode
[   46.830572][ T1028] bridge_slave_0: entered promiscuous mode
[   46.840302][  T559] veth1_macvtap: left promiscuous mode
[   46.846044][  T559] veth0_vlan: left promiscuous mode
[   46.912866][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.923544][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.930962][ T1028] bridge_slave_1: entered allmulticast mode
[   46.939650][ T1028] bridge_slave_1: entered promiscuous mode
[   47.041649][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.048767][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.056074][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.063169][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.089882][  T552] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.097640][  T552] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.124393][  T552] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.131545][  T552] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.140258][  T552] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.147432][  T552] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.167154][ T1028] veth0_vlan: entered promiscuous mode
[   47.178948][ T1028] veth1_macvtap: entered promiscuous mode
[   47.508954][   T36] kauditd_printk_skb: 34 callbacks suppressed
[   47.508974][   T36] audit: type=1400 audit(1757295055.560:276): avc:  denied  { block_suspend } for  pid=1056 comm="syz.6.215" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   47.538674][   T36] audit: type=1400 audit(1757295055.590:277): avc:  denied  { ioctl } for  pid=1050 comm="syz.7.213" path="socket:[10421]" dev="sockfs" ino=10421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   47.576156][  T363] rust_binder: 1050: removing orphan mapping 0:24
[   47.587269][   T36] audit: type=1400 audit(1757295055.600:278): avc:  denied  { mount } for  pid=1059 comm="syz.0.212" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   47.620632][   T36] audit: type=1400 audit(1757295055.670:279): avc:  denied  { read } for  pid=1069 comm="syz.7.216" path="socket:[9614]" dev="sockfs" ino=9614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.671063][   T36] audit: type=1400 audit(1757295055.720:280): avc:  denied  { bind } for  pid=1069 comm="syz.7.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.899286][ T1086] syzkaller0: entered promiscuous mode
[   47.904799][ T1086] syzkaller0: entered allmulticast mode
[   47.946799][   T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   48.099462][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.111836][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.122106][   T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   48.138856][   T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   48.148726][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.158165][   T31] usb 7-1: config 0 descriptor??
[   48.384402][ T1105] capability: warning: `syz.5.227' uses deprecated v2 capabilities in a way that may be insecure
[   48.385138][   T31] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[   48.395966][ T1105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82
[   48.406340][   T31] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   48.423294][   T36] audit: type=1404 audit(1757295056.470:281): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   48.428498][   T36] audit: type=1400 audit(1757295056.480:282): avc:  denied  { read write } for  pid=811 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   48.447262][   T31] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   48.481265][   T36] audit: type=1400 audit(1757295056.520:283): avc:  denied  { ioctl } for  pid=1098 comm="syz.0.224" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[   48.531199][   T36] audit: type=1400 audit(1757295056.530:284): avc:  denied  { create } for  pid=1098 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   48.559473][   T36] audit: type=1400 audit(1757295056.530:285): avc:  denied  { read } for  pid=1108 comm="syz.5.228" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   48.641065][ T1129] capability: warning: `syz.0.235' uses 32-bit capabilities (legacy support in use)
[   49.667821][ T1204] syz.0.259 uses obsolete (PF_INET,SOCK_PACKET)
[   50.030570][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[   50.606918][  T350] usb 7-1: USB disconnect, device number 2
[   51.015285][ T1284] syzkaller0: entered promiscuous mode
[   51.020958][ T1284] syzkaller0: entered allmulticast mode
[   52.106699][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   52.106958][ T1252] Bluetooth: hci0: command 0x1003 tx timeout
[   52.536532][   T36] kauditd_printk_skb: 704 callbacks suppressed
[   52.536552][   T36] audit: type=1400 audit(1757295060.580:990): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.582072][   T36] audit: type=1400 audit(1757295060.590:991): avc:  denied  { remount } for  pid=1410 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0
[   52.605034][   T36] audit: type=1400 audit(1757295060.590:992): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.635519][   T36] audit: type=1400 audit(1757295060.590:993): avc:  denied  { read write } for  pid=1028 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.660396][   T36] audit: type=1400 audit(1757295060.630:994): avc:  denied  { read } for  pid=1414 comm="syz.0.331" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   52.688444][   T36] audit: type=1400 audit(1757295060.630:995): avc:  denied  { create } for  pid=1414 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   52.712469][   T36] audit: type=1400 audit(1757295060.630:996): avc:  denied  { read } for  pid=1412 comm="syz.7.332" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   52.737365][   T36] audit: type=1400 audit(1757295060.630:997): avc:  denied  { read write } for  pid=1412 comm="syz.7.332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[   52.761722][   T36] audit: type=1400 audit(1757295060.630:998): avc:  denied  { read write } for  pid=1414 comm="syz.0.331" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[   52.766114][ T1419] netlink: 'syz.0.331': attribute type 2 has an invalid length.
[   52.785093][   T36] audit: type=1400 audit(1757295060.630:999): avc:  denied  { read write } for  pid=1414 comm="syz.0.331" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   54.186540][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.860865][ T1521] mmap: syz.7.369 (1521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   55.023198][ T1541] netlink: 'syz.6.381': attribute type 4 has an invalid length.
[   55.037510][ T1541] netlink: 'syz.6.381': attribute type 4 has an invalid length.
[   55.301684][ T1551] syz.5.385 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.751575][ T1576] syz.7.393 (1576): attempted to duplicate a private mapping with mremap.  This is not supported.
[   57.029636][ T1638] netlink: 40 bytes leftover after parsing attributes in process `syz.7.415'.
[   57.292507][ T1659] 2N: renamed from vcan0 (while UP)
[   57.962553][   T36] kauditd_printk_skb: 824 callbacks suppressed
[   57.962571][   T36] audit: type=1400 audit(1757295066.010:1824): avc:  denied  { read write } for  pid=811 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   57.993277][   T36] audit: type=1400 audit(1757295066.020:1825): avc:  denied  { read } for  pid=1685 comm="syz.5.432" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   58.016502][   T36] audit: type=1400 audit(1757295066.020:1826): avc:  denied  { mounton } for  pid=1685 comm="syz.5.432" path="/58/bus" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   58.040714][   T36] audit: type=1400 audit(1757295066.020:1827): avc:  denied  { create } for  pid=1685 comm="syz.5.432" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0
[   58.083575][   T36] audit: type=1400 audit(1757295066.020:1828): avc:  denied  { create } for  pid=1685 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[   58.106783][   T36] audit: type=1400 audit(1757295066.020:1829): avc:  denied  { relabelfrom } for  pid=1685 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0
[   58.134066][   T36] audit: type=1400 audit(1757295066.040:1830): avc:  denied  { read write } for  pid=948 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   58.163939][   T36] audit: type=1400 audit(1757295066.040:1831): avc:  denied  { read } for  pid=1687 comm="syz.6.433" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   58.190253][   T36] audit: type=1400 audit(1757295066.040:1832): avc:  denied  { mounton } for  pid=1687 comm="syz.6.433" path="/66/bus" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   58.246997][   T36] audit: type=1400 audit(1757295066.070:1833): avc:  denied  { read write } for  pid=948 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   58.280689][ T1709] netlink: 'syz.0.441': attribute type 12 has an invalid length.
[   58.387072][ T1739] netlink: 'syz.5.451': attribute type 4 has an invalid length.
[   58.405464][ T1738] syzkaller0: entered promiscuous mode
[   58.411035][ T1738] syzkaller0: entered allmulticast mode
[   58.490366][ T1752] pim6reg1: entered promiscuous mode
[   58.495699][ T1752] pim6reg1: entered allmulticast mode
[   58.646211][ T1770] pim6reg1: entered promiscuous mode
[   58.651584][ T1770] pim6reg1: entered allmulticast mode
[   60.186694][ T1252] Bluetooth: hci0: command 0x1003 tx timeout
[   60.186699][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   60.602854][ T1959] netlink: 'syz.0.529': attribute type 15 has an invalid length.
[   60.610726][ T1959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'.
[   60.621562][  T559] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.671695][ T2004] syzkaller0: entered promiscuous mode
[   61.677254][ T2004] syzkaller0: entered allmulticast mode
[   62.666551][ T1252] Bluetooth: hci0: command 0x1003 tx timeout
[   62.672640][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   62.967409][   T36] kauditd_printk_skb: 1182 callbacks suppressed
[   62.967426][   T36] audit: type=1400 audit(1757295071.020:2887): avc:  denied  { read write } for  pid=1028 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   62.997997][   T36] audit: type=1400 audit(1757295071.020:2888): avc:  denied  { read write } for  pid=2050 comm="syz.7.561" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   63.021223][   T36] audit: type=1400 audit(1757295071.060:2889): avc:  denied  { create } for  pid=2048 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   63.040837][   T36] audit: type=1400 audit(1757295071.070:2890): avc:  denied  { read write } for  pid=948 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   63.043816][ T2056] audit: audit_backlog=65 > audit_backlog_limit=64
[   63.065411][   T36] audit: type=1400 audit(1757295071.070:2891): avc:  denied  { read write } for  pid=2055 comm="syz.6.562" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[   63.071681][ T2056] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64
[   63.095263][   T36] audit: type=1400 audit(1757295071.070:2892): avc:  denied  { read write } for  pid=2055 comm="syz.6.562" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[   63.112571][ T2056] audit: backlog limit exceeded
[   63.126057][   T36] audit: type=1400 audit(1757295071.070:2893): avc:  denied  { read write } for  pid=2055 comm="syz.6.562" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[   63.193051][ T2071] 2N: renamed from vcan0 (while UP)
[   63.936547][ T2131] can0: slcan on ttyS3.
[   64.722136][ T2129] can0 (unregistered): slcan off ttyS3.
[   64.826226][ T2172] netlink: 'syz.7.598': attribute type 4 has an invalid length.
[   64.925895][ T2175] syzkaller0: entered promiscuous mode
[   64.931910][ T2175] syzkaller0: entered allmulticast mode
[   65.072420][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.079708][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.106592][ T2188] bridge0: entered promiscuous mode
[   65.111866][ T2188] bridge0: entered allmulticast mode
[   65.145582][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.152724][ T2194] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.160118][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.167185][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.271339][  T559] Bluetooth: hci0: Frame reassembly failed (-84)
[   65.695241][ T2215] syzkaller0: entered promiscuous mode
[   65.707061][ T2215] syzkaller0: entered allmulticast mode
[   66.158022][ T2235] syzkaller0: entered promiscuous mode
[   66.163543][ T2235] syzkaller0: entered allmulticast mode
[   66.187448][ T2238] netlink: 'syz.6.621': attribute type 46 has an invalid length.
[   66.195448][ T2238] netlink: 44 bytes leftover after parsing attributes in process `syz.6.621'.
[   67.062666][  T559] Bluetooth: hci1: Frame reassembly failed (-84)
[   67.069230][ T2296] Bluetooth: hci1: Frame reassembly failed (-84)
[   67.306539][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   67.306548][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   67.976570][   T36] kauditd_printk_skb: 31959 callbacks suppressed
[   67.976588][   T36] audit: type=1400 audit(1757295076.030:34457): avc:  denied  { create } for  pid=2317 comm="syz.7.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0
[   68.008090][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   68.014637][  T150] audit: audit_lost=193 audit_rate_limit=0 audit_backlog_limit=64
[   68.023364][ T1028] audit: audit_backlog=65 > audit_backlog_limit=64
[   68.030018][  T150] audit: backlog limit exceeded
[   68.034989][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   68.036741][ T1028] audit: audit_lost=194 audit_rate_limit=0 audit_backlog_limit=64
[   68.041639][   T36] audit: type=1400 audit(1757295076.030:34459): avc:  denied  { read } for  pid=2317 comm="syz.7.646" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   68.050014][ T1028] audit: backlog limit exceeded
[   68.072084][  T150] audit: audit_lost=195 audit_rate_limit=0 audit_backlog_limit=64
[   68.438062][ T2361] ptm ptm3: ldisc open failed (-12), clearing slot 3
[   69.066567][ T1252] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   69.072772][ T1251] Bluetooth: hci1: command 0x1003 tx timeout
[   69.341470][ T2415] 2N: renamed from vcan0 (while UP)
[   69.419406][ T2424] netlink: 'syz.7.682': attribute type 2 has an invalid length.
[   69.500444][ T2437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=2437 comm=syz.7.686
[   70.434709][ T2501] bridge0: port 3(ip6gretap0) entered blocking state
[   70.443267][ T2501] bridge0: port 3(ip6gretap0) entered disabled state
[   70.467016][ T2501] ip6gretap0: entered allmulticast mode
[   70.473796][ T2501] ip6gretap0: entered promiscuous mode
[   70.481083][ T2501] bridge0: port 3(ip6gretap0) entered blocking state
[   70.487851][ T2501] bridge0: port 3(ip6gretap0) entered forwarding state
[   70.647582][ T2527] veth1_vlan: entered promiscuous mode
[   70.656527][ T2527] veth1_vlan: entered allmulticast mode
[   72.002716][ T2583] can0: slcan on ptm0.
[   72.078395][ T2583] can0 (unregistered): slcan off ptm0.
[   72.572083][ T2595] bridge0: port 3(syz_tun) entered blocking state
[   72.587289][ T2595] bridge0: port 3(syz_tun) entered disabled state
[   72.598363][ T2595] syz_tun: entered allmulticast mode
[   72.604329][ T2595] syz_tun: entered promiscuous mode
[   72.659880][ T2595] bridge0: port 3(syz_tun) entered blocking state
[   72.666368][ T2595] bridge0: port 3(syz_tun) entered forwarding state
[   72.986549][   T36] kauditd_printk_skb: 49743 callbacks suppressed
[   72.986565][   T36] audit: type=1400 audit(72.974:81986): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   73.013523][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   73.020122][  T150] audit: audit_lost=935 audit_rate_limit=0 audit_backlog_limit=64
[   73.029939][  T150] audit: backlog limit exceeded
[   73.034994][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   73.041623][  T150] audit: audit_lost=936 audit_rate_limit=0 audit_backlog_limit=64
[   73.049566][   T36] audit: type=1326 audit(72.964:81979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.7.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2178ebe9 code=0x50000
[   73.072120][  T150] audit: backlog limit exceeded
[   73.077086][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   73.083716][  T150] audit: audit_lost=937 audit_rate_limit=0 audit_backlog_limit=64
[   73.577607][ T2618] netlink: 'syz.7.745': attribute type 6 has an invalid length.
[   73.638847][ T2628] netlink: 'syz.7.749': attribute type 16 has an invalid length.
[   73.647170][ T2628] netlink: 'syz.7.749': attribute type 3 has an invalid length.
[   73.655305][ T2628] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.749'.
[   74.146901][ T2650] netlink: 'syz.6.757': attribute type 4 has an invalid length.
[   75.433610][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.466520][ T1251] Bluetooth: hci0: command 0x1003 tx timeout
[   77.472637][ T1252] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   77.997490][   T36] kauditd_printk_skb: 17726 callbacks suppressed
[   77.997507][   T36] audit: type=1400 audit(77.984:99661): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   78.058238][   T36] audit: type=1400 audit(77.984:99662): avc:  denied  { read write } for  pid=948 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   78.086726][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   78.093413][  T150] audit: audit_lost=955 audit_rate_limit=0 audit_backlog_limit=64
[   78.097842][  T948] audit: audit_backlog=65 > audit_backlog_limit=64
[   78.101311][  T150] audit: backlog limit exceeded
[   78.101770][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   78.112782][  T948] audit: audit_lost=956 audit_rate_limit=0 audit_backlog_limit=64
[   78.119850][   T36] audit: type=1400 audit(78.014:99663): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   78.122476][  T948] audit: backlog limit exceeded
[   78.767997][ T2838] netlink: 'syz.6.820': attribute type 4 has an invalid length.
[   78.838871][ T2840] netlink: 'syz.5.821': attribute type 10 has an invalid length.
[   79.143604][ T2868] netlink: 'syz.5.832': attribute type 4 has an invalid length.
[   80.433155][ T2895] netlink: 1072 bytes leftover after parsing attributes in process `syz.5.840'.
[   80.442575][ T2895] netlink: 280 bytes leftover after parsing attributes in process `syz.5.840'.
[   81.066851][ T2913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.074127][ T2913] IPv6: NLM_F_CREATE should be set when creating new route
[   81.081394][ T2913] IPv6: NLM_F_CREATE should be set when creating new route
[   82.359795][ T2948] netlink: 'syz.0.858': attribute type 4 has an invalid length.
[   82.376743][ T2948] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.858'.
[   82.389797][ T2948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2948 comm=syz.0.858
[   83.006618][   T36] kauditd_printk_skb: 9283 callbacks suppressed
[   83.006637][   T36] audit: type=1400 audit(82.994:108930): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.037453][   T36] audit: type=1400 audit(82.994:108931): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.046648][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   83.059133][   T36] audit: type=1400 audit(82.994:108932): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.064809][  T150] audit: audit_lost=963 audit_rate_limit=0 audit_backlog_limit=64
[   83.085230][   T36] audit: type=1400 audit(82.994:108933): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.095696][  T150] audit: backlog limit exceeded
[   83.113587][   T36] audit: type=1400 audit(82.994:108934): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.122255][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   83.138946][   T36] audit: type=1400 audit(82.994:108935): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   83.350972][ T2978] can0: slcan on ttyS3.
[   83.411920][ T2977] can0 (unregistered): slcan off ttyS3.
[   83.515789][ T2988] can0: slcan on ttyS3.
[   83.609354][ T2985] can0 (unregistered): slcan off ttyS3.
[   84.170984][ T3029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3029 comm=syz.6.886
[   85.217086][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[   85.223629][ T3084] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[   85.246880][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[   85.437183][ T3096] netlink: 5 bytes leftover after parsing attributes in process `syz.5.907'.
[   85.467700][ T3096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.226524][ T1251] Bluetooth: hci0: command 0x1003 tx timeout
[   87.232627][ T1252] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   88.016742][   T36] kauditd_printk_skb: 9287 callbacks suppressed
[   88.016761][   T36] audit: type=1400 audit(88.004:118131): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.070295][   T36] audit: type=1400 audit(88.004:118132): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.099529][   T36] audit: type=1400 audit(88.004:118133): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   88.116281][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.127112][  T150] audit: audit_lost=995 audit_rate_limit=0 audit_backlog_limit=64
[   88.139491][ T3190] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.146113][  T150] audit: backlog limit exceeded
[   88.152832][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.155627][ T3196] audit: audit_backlog=65 > audit_backlog_limit=64
[   88.161586][ T3190] audit: audit_lost=996 audit_rate_limit=0 audit_backlog_limit=64
[   89.527169][ T3260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3260 comm=syz.5.961
[   91.104995][ T3308] netlink: 5 bytes leftover after parsing attributes in process `syz.6.977'.
[   92.449183][ T3379] sit0: entered promiscuous mode
[   92.458393][ T3379] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[   92.466275][ T3379] netlink: 1 bytes leftover after parsing attributes in process `syz.0.999'.
[   93.026607][   T36] kauditd_printk_skb: 9128 callbacks suppressed
[   93.026626][   T36] audit: type=1400 audit(93.014:127257): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.069129][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   93.075768][  T150] audit: audit_lost=999 audit_rate_limit=0 audit_backlog_limit=64
[   93.084939][  T150] audit: backlog limit exceeded
[   93.091263][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   93.097925][   T36] audit: type=1400 audit(93.014:127258): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   93.119976][  T150] audit: audit_lost=1000 audit_rate_limit=0 audit_backlog_limit=64
[   93.128978][  T150] audit: backlog limit exceeded
[   93.134509][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   93.142273][   T36] audit: type=1400 audit(93.014:127259): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.498853][ T3519] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1052'.
[   97.424794][ T3619] syzkaller0: entered promiscuous mode
[   97.436533][ T3619] syzkaller0: entered allmulticast mode
[   98.036857][   T36] kauditd_printk_skb: 7136 callbacks suppressed
[   98.036876][   T36] audit: type=1400 audit(98.024:134244): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.088884][   T36] audit: type=1400 audit(98.054:134245): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.094078][ T3646] netlink: 'syz.7.1091': attribute type 11 has an invalid length.
[   98.114484][   T36] audit: type=1400 audit(98.054:134246): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.138602][ T3647] audit: audit_backlog=65 > audit_backlog_limit=64
[   98.138972][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[   98.146574][ T3647] audit: audit_lost=1052 audit_rate_limit=0 audit_backlog_limit=64
[   98.155970][  T150] audit: audit_lost=1053 audit_rate_limit=0 audit_backlog_limit=64
[   98.170698][   T36] audit: type=1400 audit(98.054:134247): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   98.170714][  T150] audit: backlog limit exceeded
[   98.170733][   T36] audit: type=1400 audit(98.054:134248): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.594094][ T3749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3749 comm=syz.0.1125
[  102.464193][ T3825] pim6reg1: entered promiscuous mode
[  102.469701][ T3825] pim6reg1: entered allmulticast mode
[  103.046958][   T36] kauditd_printk_skb: 8670 callbacks suppressed
[  103.046977][   T36] audit: type=1400 audit(103.034:142879): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  103.092609][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.099818][ T3873] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.106067][ T3875] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.106405][  T150] audit: audit_lost=1067 audit_rate_limit=0 audit_backlog_limit=64
[  103.112914][   T36] audit: type=1400 audit(103.034:142880): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  103.123093][ T3873] audit: audit_lost=1068 audit_rate_limit=0 audit_backlog_limit=64
[  103.146568][ T3875] audit: audit_lost=1069 audit_rate_limit=0 audit_backlog_limit=64
[  103.149374][  T150] audit: backlog limit exceeded
[  103.160170][ T3876] audit: audit_backlog=65 > audit_backlog_limit=64
[  103.591948][ T3896] netlink: 'syz.6.1177': attribute type 4 has an invalid length.
[  103.600757][ T3896] netlink: 'syz.6.1177': attribute type 4 has an invalid length.
[  105.647533][  T552] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.213989][ T3984] netlink: 'syz.7.1207': attribute type 3 has an invalid length.
[  107.706508][ T1251] Bluetooth: hci0: command 0x1003 tx timeout
[  107.712688][ T1252] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  107.972845][ T3997] bridge0: port 3(syz_tun) entered disabled state
[  107.993350][ T3997] syz_tun (unregistering): left allmulticast mode
[  108.007463][ T3997] syz_tun (unregistering): left promiscuous mode
[  108.023953][ T3997] bridge0: port 3(syz_tun) entered disabled state
[  108.058214][   T36] kauditd_printk_skb: 7159 callbacks suppressed
[  108.058235][   T36] audit: type=1400 audit(108.044:149949): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.111070][   T36] audit: type=1400 audit(108.054:149950): avc:  denied  { read write } for  pid=1028 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  108.152127][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.166521][  T150] audit: audit_lost=1100 audit_rate_limit=0 audit_backlog_limit=64
[  108.178375][  T150] audit: backlog limit exceeded
[  108.183337][   T36] audit: type=1400 audit(108.074:149951): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  108.204985][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.213436][  T150] audit: audit_lost=1101 audit_rate_limit=0 audit_backlog_limit=64
[  108.221718][  T150] audit: backlog limit exceeded
[  108.227428][ T4005] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.272829][ T4005] !@˙: renamed from xfrm0 (while UP)
[  108.682049][ T4027] syzkaller0: entered promiscuous mode
[  108.696537][ T4027] syzkaller0: entered allmulticast mode
[  109.032030][ T4055] can0: slcan on ttyS3.
[  109.101562][ T4053] can0 (unregistered): slcan off ttyS3.
[  109.269410][ T4070] pim6reg1: entered promiscuous mode
[  109.281023][ T4070] pim6reg1: entered allmulticast mode
[  110.133084][ T4113] netlink: 'syz.5.1247': attribute type 4 has an invalid length.
[  110.298888][ T4123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=4123 comm=syz.7.1252
[  110.935374][ T4165] pim6reg1: entered promiscuous mode
[  110.945827][ T4165] pim6reg1: entered allmulticast mode
[  111.106766][ T4176] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1270'.
[  111.148788][ T4175] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1270'.
[  111.378839][ T4191] 2N: renamed from vcan0 (while UP)
[  111.843468][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1277'.
[  112.113900][ T4205] netlink: 'syz.7.1280': attribute type 15 has an invalid length.
[  112.147352][ T4205] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1280'.
[  112.579753][  T552] Bluetooth: hci0: Frame reassembly failed (-84)
[  113.074168][   T36] kauditd_printk_skb: 7689 callbacks suppressed
[  113.074188][   T36] audit: type=1400 audit(113.056:157639): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  113.124450][   T36] audit: type=1400 audit(113.066:157640): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  113.140993][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  113.147521][ T4249] audit: audit_backlog=65 > audit_backlog_limit=64
[  113.153800][ T4247] audit: audit_backlog=65 > audit_backlog_limit=64
[  113.159666][ T4248] audit: audit_backlog=65 > audit_backlog_limit=64
[  113.167331][  T150] audit: audit_lost=1103 audit_rate_limit=0 audit_backlog_limit=64
[  113.171816][ T4249] audit: audit_lost=1104 audit_rate_limit=0 audit_backlog_limit=64
[  113.180865][ T4247] audit: audit_lost=1105 audit_rate_limit=0 audit_backlog_limit=64
[  113.187615][   T36] audit: type=1400 audit(113.066:157641): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  114.586508][ T1252] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  114.592723][ T1251] Bluetooth: hci0: command 0x1003 tx timeout
[  115.182492][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[  115.381251][ T4356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4356 comm=syz.0.1333
[  115.396787][ T4356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4356 comm=syz.0.1333
[  117.226547][ T1252] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  117.471032][ T4453] netlink: 'syz.6.1365': attribute type 13 has an invalid length.
[  118.076792][   T36] kauditd_printk_skb: 9009 callbacks suppressed
[  118.076812][   T36] audit: type=1400 audit(118.066:166232): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  118.120108][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  118.136570][  T150] audit: audit_lost=1255 audit_rate_limit=0 audit_backlog_limit=64
[  118.145225][   T36] audit: type=1400 audit(118.066:166233): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  118.166159][  T150] audit: backlog limit exceeded
[  118.172245][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  118.186499][  T150] audit: audit_lost=1256 audit_rate_limit=0 audit_backlog_limit=64
[  118.195671][   T36] audit: type=1400 audit(118.066:166234): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  118.217058][  T150] audit: backlog limit exceeded
[  118.223846][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  118.461511][ T4477] can0: slcan on ptm0.
[  118.569991][ T4475] can0 (unregistered): slcan off ptm0.
[  120.211265][ T4538] netlink: 'syz.6.1396': attribute type 4 has an invalid length.
[  120.229318][ T4538] netlink: 'syz.6.1396': attribute type 4 has an invalid length.
[  123.086870][   T36] kauditd_printk_skb: 6366 callbacks suppressed
[  123.086890][   T36] audit: type=1400 audit(123.076:172566): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  123.159165][   T36] audit: type=1400 audit(123.106:172567): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  123.183376][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  123.196543][  T150] audit: audit_lost=1269 audit_rate_limit=0 audit_backlog_limit=64
[  123.204530][  T150] audit: backlog limit exceeded
[  123.217725][ T4626] audit: audit_backlog=65 > audit_backlog_limit=64
[  123.230682][   T36] audit: type=1400 audit(123.106:172568): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  123.237804][ T4626] audit: audit_lost=1270 audit_rate_limit=0 audit_backlog_limit=64
[  123.252069][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  123.268070][ T4626] audit: backlog limit exceeded
[  123.603365][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.612713][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.622393][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.631596][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.640907][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.650511][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.659757][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.669354][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.678701][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  123.687864][ T4645] netlink: 'syz.5.1433': attribute type 4 has an invalid length.
[  124.243993][ T4663] can0: slcan on ttyS3.
[  124.340340][ T4667] can0 (unregistered): slcan off ttyS3.
[  125.018146][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'.
[  125.737525][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1465'.
[  126.338570][ T4760] pim6reg1: entered promiscuous mode
[  126.352311][ T4760] pim6reg1: entered allmulticast mode
[  128.096774][   T36] kauditd_printk_skb: 7811 callbacks suppressed
[  128.096794][   T36] audit: type=1400 audit(128.076:180345): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  128.134011][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  128.140647][  T150] audit: audit_lost=1283 audit_rate_limit=0 audit_backlog_limit=64
[  128.148661][  T150] audit: backlog limit exceeded
[  128.152248][   T36] audit: type=1400 audit(128.076:180346): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  128.158429][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  128.175387][   T36] audit: type=1400 audit(128.076:180347): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  128.188740][  T150] audit: audit_lost=1284 audit_rate_limit=0 audit_backlog_limit=64
[  128.203492][   T36] audit: type=1400 audit(128.076:180348): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  128.220060][  T150] audit: backlog limit exceeded
[  128.813761][ T4860] validate_nla: 23 callbacks suppressed
[  128.813781][ T4860] netlink: 'syz.5.1511': attribute type 4 has an invalid length.
[  128.830412][ T4861] netlink: 'syz.5.1511': attribute type 4 has an invalid length.
[  129.167079][ T4880] +$<¶: renamed from bridge0 (while UP)
[  130.111012][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.118317][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.135852][ T4917] bridge0: entered promiscuous mode
[  130.151428][ T4917] bridge0: entered allmulticast mode
[  133.106746][   T36] kauditd_printk_skb: 7863 callbacks suppressed
[  133.106765][   T36] audit: type=1400 audit(133.096:188060): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  133.135242][   T36] audit: type=1400 audit(133.096:188061): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  133.145886][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  133.157416][   T36] audit: type=1400 audit(133.096:188062): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  133.162803][  T150] audit: audit_lost=1336 audit_rate_limit=0 audit_backlog_limit=64
[  133.184555][   T36] audit: type=1400 audit(133.096:188063): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  133.191496][  T150] audit: backlog limit exceeded
[  133.212908][   T36] audit: type=1400 audit(133.096:188064): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  133.219529][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  133.243923][  T150] audit: audit_lost=1337 audit_rate_limit=0 audit_backlog_limit=64
[  133.310502][ T5022] syzkaller0: entered promiscuous mode
[  133.316184][ T5022] syzkaller0: entered allmulticast mode
[  133.534760][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[  134.057760][ T5056] netlink: 'syz.7.1579': attribute type 4 has an invalid length.
[  135.546499][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  135.552782][ T1252] Bluetooth: hci0: command 0x1003 tx timeout
[  137.162736][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'.
[  137.416558][ T5179] netlink: 'syz.0.1622': attribute type 13 has an invalid length.
[  137.454541][ T5179] erspan0: refused to change device tx_queue_len
[  138.116551][   T36] kauditd_printk_skb: 7471 callbacks suppressed
[  138.116570][   T36] audit: type=1400 audit(138.110:195370): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  138.157189][   T36] audit: type=1400 audit(138.110:195371): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  138.163838][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.178236][   T36] audit: type=1400 audit(138.110:195372): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  138.186419][  T150] audit: audit_lost=1393 audit_rate_limit=0 audit_backlog_limit=64
[  138.205691][   T36] audit: type=1400 audit(138.110:195373): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  138.215412][  T150] audit: backlog limit exceeded
[  138.234990][   T36] audit: type=1400 audit(138.110:195374): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  138.242586][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.260311][   T36] audit: type=1400 audit(138.110:195375): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  139.240823][ T5253] syz.5.1651 (5253): /proc/5252/oom_adj is deprecated, please use /proc/5252/oom_score_adj instead.
[  140.237612][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'.
[  140.260819][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'.
[  141.946529][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  143.127575][   T36] kauditd_printk_skb: 8194 callbacks suppressed
[  143.127594][   T36] audit: type=1400 audit(143.120:203475): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  143.191252][   T36] audit: type=1400 audit(143.120:203476): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  143.206327][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  143.217073][ T5458] audit: audit_backlog=65 > audit_backlog_limit=64
[  143.228500][ T5461] audit: audit_backlog=65 > audit_backlog_limit=64
[  143.236154][   T36] audit: type=1400 audit(143.120:203477): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  143.244271][  T150] audit: audit_lost=1426 audit_rate_limit=0 audit_backlog_limit=64
[  143.266538][ T5458] audit: audit_lost=1427 audit_rate_limit=0 audit_backlog_limit=64
[  143.272551][  T150] audit: backlog limit exceeded
[  143.277149][ T5461] audit: audit_lost=1428 audit_rate_limit=0 audit_backlog_limit=64
[  143.393148][ T5470] netlink: 'syz.6.1727': attribute type 4 has an invalid length.
[  143.405931][ T5471] netlink: 'syz.6.1727': attribute type 4 has an invalid length.
[  144.239189][ T5507] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  144.690809][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1747'.
[  145.750960][ T5571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5571 comm=syz.7.1762
[  145.980310][ T5585] can0: slcan on ptm0.
[  146.047153][ T5584] can0 (unregistered): slcan off ptm0.
[  146.686840][ T5614] netlink: 'syz.5.1773': attribute type 4 has an invalid length.
[  146.696407][ T5611] netlink: 'syz.5.1773': attribute type 4 has an invalid length.
[  146.924576][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1776'.
[  148.137366][   T36] kauditd_printk_skb: 7904 callbacks suppressed
[  148.137385][   T36] audit: type=1400 audit(148.130:211377): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  148.216243][   T36] audit: type=1400 audit(148.150:211378): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  148.239030][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.245056][ T5671] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.245574][  T150] audit: audit_lost=1430 audit_rate_limit=0 audit_backlog_limit=64
[  148.257581][  T811] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.261437][   T36] audit: type=1400 audit(148.150:211379): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  148.281842][ T5669] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.289051][  T150] audit: backlog limit exceeded
[  148.300169][  T811] audit: audit_lost=1431 audit_rate_limit=0 audit_backlog_limit=64
[  149.535838][ T5746] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  150.447239][ T5782] ptm ptm23: ldisc open failed (-12), clearing slot 23
[  151.548024][ T5815] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1847'.
[  153.146690][   T36] kauditd_printk_skb: 8338 callbacks suppressed
[  153.146710][   T36] audit: type=1400 audit(153.140:219611): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  153.202656][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  153.209290][   T36] audit: type=1400 audit(153.160:219612): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  153.229918][  T150] audit: audit_lost=1468 audit_rate_limit=0 audit_backlog_limit=64
[  153.240388][  T150] audit: backlog limit exceeded
[  153.245726][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  153.252331][   T36] audit: type=1400 audit(153.160:219613): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  153.276754][  T150] audit: audit_lost=1469 audit_rate_limit=0 audit_backlog_limit=64
[  153.284997][  T150] audit: backlog limit exceeded
[  153.305284][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64
[  153.987442][ T5878] pim6reg1: entered promiscuous mode
[  153.992824][ T5878] pim6reg1: entered allmulticast mode
[  155.387614][ T5943] netlink: 'syz.5.1890': attribute type 58 has an invalid length.
[  155.398684][ T5943] netlink: 'syz.5.1890': attribute type 58 has an invalid length.
[  156.059739][ T5965] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.292380][ T5985] x_tables: duplicate underflow at hook 1
[  156.408640][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'.
[  156.448520][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'.
[  156.604844][ T6000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2048 sclass=netlink_audit_socket pid=6000 comm=syz.7.1907
[  157.264798][ T6039] netlink: 'syz.7.1923': attribute type 12 has an invalid length.
[  158.157051][   T36] kauditd_printk_skb: 6990 callbacks suppressed
[  158.157069][   T36] audit: type=1400 audit(158.150:226569): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  158.188250][ T6081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6081 comm=syz.7.1936
[  158.219827][   T36] audit: type=1400 audit(158.170:226570): avc:  denied  { read } for  pid=6080 comm="syz.7.1936" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[  158.247225][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  158.249583][   T36] audit: type=1400 audit(158.170:226571): avc:  denied  { read write } for  pid=6080 comm="syz.7.1936" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0
[  158.257830][  T150] audit: audit_lost=1482 audit_rate_limit=0 audit_backlog_limit=64
[  158.276882][   T36] audit: type=1400 audit(158.170:226572): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  158.290926][ T6083] audit: audit_backlog=65 > audit_backlog_limit=64
[  158.312202][   T36] audit: type=1400 audit(158.170:226573): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  158.315413][  T150] audit: backlog limit exceeded
[  158.337175][   T36] audit: type=1400 audit(158.170:226574): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  160.667963][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'.
[  160.952909][ T6223] syzkaller0: entered promiscuous mode
[  160.959082][ T6223] syzkaller0: entered allmulticast mode
[  160.966359][  T559] syzkaller0: tun_net_xmit 48
[  160.972886][ T6223] syzkaller0: tun_chr_ioctl cmd 1074025677
[  160.978914][ T6223] syzkaller0: Linktype set failed because interface is up
[  162.014021][ T6271] netlink: 'syz.5.1999': attribute type 4 has an invalid length.
[  163.171397][   T36] kauditd_printk_skb: 8042 callbacks suppressed
[  163.171418][   T36] audit: type=1400 audit(163.150:234552): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  163.204924][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  163.209912][  T811] audit: audit_backlog=65 > audit_backlog_limit=64
[  163.217807][ T6337] audit: audit_backlog=65 > audit_backlog_limit=64
[  163.220629][ T6331] audit: audit_backlog=65 > audit_backlog_limit=64
[  163.225786][  T150] audit: audit_lost=1505 audit_rate_limit=0 audit_backlog_limit=64
[  163.238074][ T1028] audit: audit_backlog=65 > audit_backlog_limit=64
[  163.246558][ T6337] audit: audit_lost=1506 audit_rate_limit=0 audit_backlog_limit=64
[  163.249406][  T811] audit: audit_lost=1507 audit_rate_limit=0 audit_backlog_limit=64
[  163.265349][  T150] audit: backlog limit exceeded
[  163.495212][ T6360] incfs: Backing dir is not set, filesystem can't be mounted.
[  163.525635][ T6360] incfs: mount failed -2
[  164.078121][ T6373] netlink: 'syz.5.2036': attribute type 4 has an invalid length.
[  164.088228][ T6373] netlink: 'syz.5.2036': attribute type 4 has an invalid length.
[  164.423068][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6388 comm=syz.5.2042
[  165.225363][ T6433] syzkaller0: entered promiscuous mode
[  165.240783][ T6433] syzkaller0: entered allmulticast mode
[  165.714262][ T6458] netlink: 'syz.6.2067': attribute type 4 has an invalid length.
[  166.224539][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'.
[  166.841830][ T6524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6524 comm=syz.0.2090
[  166.952589][ T6526] syzkaller0: entered promiscuous mode
[  166.958286][ T6526] syzkaller0: entered allmulticast mode
[  167.692753][ T6540] syzkaller0: entered promiscuous mode
[  167.714488][ T6540] syzkaller0: entered allmulticast mode
[  168.176760][   T36] kauditd_printk_skb: 7810 callbacks suppressed
[  168.176780][   T36] audit: type=1400 audit(168.170:242357): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  168.212174][   T36] audit: type=1400 audit(168.190:242358): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  168.256144][   T36] audit: type=1400 audit(168.190:242359): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  168.288860][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  168.295526][  T150] audit: audit_lost=1510 audit_rate_limit=0 audit_backlog_limit=64
[  168.303693][   T36] audit: type=1400 audit(168.200:242360): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  168.318092][ T6565] audit: audit_backlog=65 > audit_backlog_limit=64
[  168.331542][  T150] audit: backlog limit exceeded
[  168.337898][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  168.343596][ T6565] audit: audit_lost=1511 audit_rate_limit=0 audit_backlog_limit=64
[  169.408997][   T46] bridge_slave_1: left allmulticast mode
[  169.414791][   T46] bridge_slave_1: left promiscuous mode
[  169.428672][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.436557][   T46] bridge_slave_0: left allmulticast mode
[  169.442717][   T46] bridge_slave_0: left promiscuous mode
[  169.450312][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.562580][   T46] veth1_macvtap: left promiscuous mode
[  169.576543][   T46] veth0_vlan: left promiscuous mode
[  172.580693][ T6663] netlink: 'syz.5.2140': attribute type 4 has an invalid length.
[  173.186616][   T36] kauditd_printk_skb: 10063 callbacks suppressed
[  173.186635][   T36] audit: type=1400 audit(2000000004.870:252355): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.215388][   T36] audit: type=1400 audit(2000000004.870:252356): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.233734][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  173.237859][   T36] audit: type=1400 audit(2000000004.870:252357): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.243630][  T150] audit: audit_lost=1535 audit_rate_limit=0 audit_backlog_limit=64
[  173.266104][   T36] audit: type=1400 audit(2000000004.870:252358): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.273539][  T150] audit: backlog limit exceeded
[  173.295802][   T36] audit: type=1400 audit(2000000004.870:252359): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  173.302593][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  173.321914][   T36] audit: type=1400 audit(2000000004.870:252360): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  175.670332][ T6688] netlink: 'syz.6.2147': attribute type 4 has an invalid length.
[  175.688510][ T6688] netlink: 'syz.6.2147': attribute type 4 has an invalid length.
[  178.202060][   T36] kauditd_printk_skb: 11221 callbacks suppressed
[  178.202080][   T36] audit: type=1400 audit(2000000009.880:263472): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  178.229209][ T6713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6713 comm=syz.7.2154
[  178.235817][   T36] audit: type=1400 audit(2000000009.880:263473): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  178.300193][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  178.311606][  T150] audit: audit_lost=1573 audit_rate_limit=0 audit_backlog_limit=64
[  178.314865][   T36] audit: type=1400 audit(2000000009.880:263474): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  178.322494][  T150] audit: backlog limit exceeded
[  178.343121][   T36] audit: type=1400 audit(2000000009.880:263475): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  178.352616][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  178.369347][   T36] audit: type=1400 audit(2000000009.880:263476): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  178.377428][  T150] audit: audit_lost=1574 audit_rate_limit=0 audit_backlog_limit=64
[  181.260257][  T540] Bluetooth: hci0: Frame reassembly failed (-84)
[  183.206671][   T36] kauditd_printk_skb: 10665 callbacks suppressed
[  183.206691][   T36] audit: type=1400 audit(2000000014.890:274141): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.235858][   T36] audit: type=1400 audit(2000000014.890:274142): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.244226][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  183.259072][   T36] audit: type=1400 audit(2000000014.890:274143): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.264991][  T150] audit: audit_lost=1575 audit_rate_limit=0 audit_backlog_limit=64
[  183.287960][   T36] audit: type=1400 audit(2000000014.890:274144): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.294819][  T150] audit: backlog limit exceeded
[  183.317493][   T36] audit: type=1400 audit(2000000014.890:274145): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.321886][ T1251] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  183.344628][   T36] audit: type=1400 audit(2000000014.890:274146): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  183.348952][ T1252] Bluetooth: hci0: command 0x1003 tx timeout
[  183.371794][   T36] audit: type=1400 audit(2000000014.890:274147): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  184.608811][ T6751] sit0: entered promiscuous mode
[  184.616158][ T6751] netlink: 'syz.7.2165': attribute type 1 has an invalid length.
[  184.631347][ T6751] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2165'.
[  184.659681][ T6751] pim6reg1: entered promiscuous mode
[  184.665141][ T6751] pim6reg1: entered allmulticast mode
[  188.216724][   T36] kauditd_printk_skb: 11793 callbacks suppressed
[  188.216743][   T36] audit: type=1400 audit(2000000019.900:285545): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.245323][   T36] audit: type=1400 audit(2000000019.900:285546): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.256777][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  188.267506][   T36] audit: type=1400 audit(2000000019.900:285547): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.273296][  T150] audit: audit_lost=1708 audit_rate_limit=0 audit_backlog_limit=64
[  188.295349][   T36] audit: type=1400 audit(2000000019.900:285548): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.302748][  T150] audit: backlog limit exceeded
[  188.324989][   T36] audit: type=1400 audit(2000000019.900:285549): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  188.331782][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  188.357462][  T150] audit: audit_lost=1709 audit_rate_limit=0 audit_backlog_limit=64
[  190.727382][   T46] bridge_slave_1: left allmulticast mode
[  190.733156][   T46] bridge_slave_1: left promiscuous mode
[  190.756748][   T46] +$<¶: port 2(bridge_slave_1) entered disabled state
[  190.773784][   T46] bridge_slave_0: left allmulticast mode
[  190.786241][   T46] bridge_slave_0: left promiscuous mode
[  190.800484][   T46] +$<¶: port 1(bridge_slave_0) entered disabled state
[  190.920600][   T46] veth1_macvtap: left promiscuous mode
[  190.927157][   T46] veth0_vlan: left promiscuous mode
[  191.180257][   T46] ip6gretap0: left allmulticast mode
[  191.185745][   T46] ip6gretap0: left promiscuous mode
[  191.192154][   T46] bridge0: port 3(ip6gretap0) entered disabled state
[  191.200202][   T46] bridge_slave_1: left allmulticast mode
[  191.207327][   T46] bridge_slave_1: left promiscuous mode
[  191.213179][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.222150][   T46] bridge_slave_0: left allmulticast mode
[  191.228960][   T46] bridge_slave_0: left promiscuous mode
[  191.234770][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.351377][   T46] veth1_macvtap: left promiscuous mode
[  191.356986][   T46] veth0_vlan: left promiscuous mode
[  193.226662][   T36] kauditd_printk_skb: 10863 callbacks suppressed
[  193.226682][   T36] audit: type=1400 audit(2000000024.910:296367): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.255741][   T36] audit: type=1400 audit(2000000024.910:296368): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.264110][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  193.278793][   T36] audit: type=1400 audit(2000000024.910:296369): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.284715][  T150] audit: audit_lost=1725 audit_rate_limit=0 audit_backlog_limit=64
[  193.307095][   T36] audit: type=1400 audit(2000000024.910:296370): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.314231][  T150] audit: backlog limit exceeded
[  193.339288][   T36] audit: type=1400 audit(2000000024.910:296371): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  193.344952][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  193.368628][   T36] audit: type=1400 audit(2000000024.910:296372): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.236539][   T36] kauditd_printk_skb: 11714 callbacks suppressed
[  198.236558][   T36] audit: type=1400 audit(2000000029.920:307974): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.264680][   T36] audit: type=1400 audit(2000000029.920:307975): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.273455][  T150] audit: audit_backlog=65 > audit_backlog_limit=64
[  198.285927][   T36] audit: type=1400 audit(2000000029.920:307976): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.294716][  T150] audit: audit_lost=1764 audit_rate_limit=0 audit_backlog_limit=64
[  198.313663][   T36] audit: type=1400 audit(2000000029.920:307977): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.313698][   T36] audit: type=1400 audit(2000000029.920:307978): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.313725][   T36] audit: type=1400 audit(2000000029.920:307979): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.313753][   T36] audit: type=1400 audit(2000000029.920:307980): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  198.324188][  T150] audit: backlog limit exceeded