last executing test programs:

4.351951128s ago: executing program 1 (id=2867):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000100)=ANY=[@ANYBLOB="7365636c6162656c2c00373ad7ea031a84e6ad0ed486d55af15b721cadf0fcc9527c59efd63faf3fff37ba2f08000dfdece07adfdcfa968f0c705e9e"])
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x1, 0x50, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000020001000000000000000141"], 0x34}}, 0x0)
ioctl$TIOCNOTTY(r1, 0x5422)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x4)
write$uinput_user_dev(r6, &(0x7f0000000240)={'syz0\x00', {0x9, 0x6, 0x5, 0x81}, 0x37, [0x2067c000, 0x2, 0x1, 0xd5d, 0xe, 0x7, 0x9, 0x3, 0x3, 0x0, 0x4, 0x8, 0x8, 0xec9, 0x8, 0x9e, 0x2, 0x7, 0x2, 0x4, 0xffffffff, 0x7, 0x0, 0x2, 0x1, 0x8b5, 0x3, 0x2, 0x4, 0x7, 0x4, 0x0, 0x4, 0x4, 0x8, 0x9, 0x1c, 0xffc, 0x2, 0x540, 0x1, 0x3, 0x7, 0x7c, 0xa77, 0xfffffffb, 0x7, 0x7, 0xefcd, 0x64d, 0x200, 0x7ff, 0x2, 0x95, 0x6, 0x3, 0x8, 0x1, 0x5, 0x8, 0x7ff, 0xc, 0xf, 0x401], [0x2, 0x5, 0x8, 0xa, 0x80, 0x7fff, 0x400000, 0x1000, 0x0, 0xa458, 0xfffffff9, 0x2, 0x7, 0x8, 0x2, 0xfffffffd, 0x400, 0x9, 0x6, 0x18, 0x3, 0x4, 0x3, 0x4c9d, 0x3, 0x8, 0x101, 0x0, 0xd, 0x8, 0x5, 0x4, 0x5, 0xfff, 0x8813, 0x0, 0x0, 0x2, 0x6, 0x5, 0x6f, 0x4, 0xd426, 0x6, 0x0, 0x400, 0x4, 0x5, 0x9, 0x3, 0x0, 0xa0, 0x1, 0x6, 0x5, 0x9, 0x1, 0x9, 0x7, 0x1, 0x1, 0x2, 0x0, 0x5], [0x43, 0x81, 0x3, 0x1, 0x8, 0x60, 0x2, 0x200, 0x3, 0x1, 0x9, 0x7, 0x6, 0x4, 0xc5d2, 0x7, 0xd, 0x10000, 0xfffffff9, 0x8000, 0x7f, 0x7fffffff, 0x4, 0x675, 0x1, 0x6, 0x8b7, 0xfffffffe, 0xfd, 0x0, 0x9, 0x4, 0xffffffff, 0x81, 0xd8b7, 0x1447, 0x5, 0x6, 0xd1c, 0x9, 0x400, 0x7, 0x29243924, 0x8, 0x3, 0x9, 0x6, 0xe, 0x0, 0xfffffff7, 0x9, 0x78029545, 0x5, 0x1000, 0x8801, 0x8, 0x0, 0x100, 0x80000000, 0xb, 0x80000001, 0x7, 0xd, 0x3], [0x4, 0x8, 0x7f, 0x7ff, 0x3, 0x3, 0x3, 0x10000, 0x4, 0x2, 0x10, 0x8, 0x9, 0x4, 0x4, 0x200, 0xbb7, 0x6, 0x10, 0x3, 0x6, 0x0, 0x3, 0x9, 0xfffffff0, 0x200, 0xd10c, 0x5, 0xbe6f, 0xf62e, 0x9, 0x3, 0x1, 0x401, 0x5, 0x8000, 0xe2ee, 0x3f, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0xfd4, 0x0, 0x5, 0xffffffff, 0x31a, 0x4e, 0x5, 0x2549, 0x8, 0x1, 0x6, 0xc, 0x7fff, 0x5, 0x4a, 0x5, 0x8001, 0x3ff00000, 0xfff, 0x8, 0x81]}, 0x45c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0})
ioctl$UI_DEV_CREATE(r6, 0x5501)
r8 = geteuid()
getresgid(&(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000200), &(0x7f0000000240))
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x4000)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000900", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000400f545cf502b6ae381f0052d4c096e8c6b1e1e5700e77ec1d7c42cfae9507edb63f61c65ac41b47719735b83386ae934626698bc6fcbf36a7bd4114a72feb9bc01aa861b8ce38181100568898edcd3342a0db8882385545ffb92c844d8a2ff7550b8c7a417b504a23670e4f2", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="040002000000000008000500", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB="10000400000000002000040000000000"], 0x7c, 0x2)
quotactl$Q_QUOTAON(0xffffffff80000203, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r8, &(0x7f00000000c0)='./file0\x00')

3.827372911s ago: executing program 1 (id=2882):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x5e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396a", 0x17}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="74eae251735bf963", 0x8}], 0x1, &(0x7f0000001c00)=ANY=[], 0xc0}}], 0x2, 0x8008801)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x1)
close_range(r0, r2, 0x0)

3.413031304s ago: executing program 3 (id=2886):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f30658154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b8620100000000000000000f300fc79d53bf0000c4e16dd3010f2202", 0x50}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000340)={0x0, 0x4, 0x5, {0x5, 0x23, "6534a4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r4, 0xa0e52000)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = dup2(r4, r4)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000947000/0x2000)=nil, 0x2000})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', <r7=>0x0, 0x700, 0x8, 0x1000, 0xfffff6b6, {{0x1e, 0x4, 0x1, 0x7, 0x78, 0x68, 0x0, 0x92, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x82, 0x2}, @timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@multicast2, 0x77d0}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x416}]}, @rr={0x7, 0xf, 0xd7, [@dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x83, 0x12, "157982a3c37d37dd4f5c3e64f6f2bdd3"}, @noop, @end, @generic={0x94, 0x10, "77889e37b06e44458d5ef509b61e"}, @rr={0x7, 0x13, 0xa9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="380000002d000100000000000000000008000200", @ANYRES32, @ANYBLOB="0b005682f3f06a01af5c30001400018038b7741b49e8324113e0c15b81d7da39"], 0x38}], 0x1}, 0xcc000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x33c, r6, 0xe1c4869fc7eb742c, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'logon\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}-$[\\,!*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x391}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'G@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'logon\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/\'.-#/{%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x771c}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "7dbeae27b8654740ec3670ceec6d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5a5}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "7b2fdef9a03d4a8ab8af9bf39571331663406574cab7defd345775d9192d4c2f3a763965b963153cfe122713c45bfdc55bf2ecdbb0dad700ad0bec701a70115dd7"}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "c7a9fccfe0e59ac2e71023680dd2293020d4c7a8c0d3f7ebbc3aad9aa0846268d3ea9781dd06474211533f57ca29a636d908b403d21e73c7168e3e092bf6e88a1b62de5d60c37deada393bffa732390ee354f2d501a08e6469c92588d1310073f5ed6107a2659db63f47946b833cfdaa7d7e91bab8925b962c6fdbe62495af8de80ca55397c6123af1204cba54442f41560be26ac1f85f7be9f8e1bda7cfa833ae0e5d59e69a9cc3fff1f69d19f7e4b1660af9deb5d02b081cb245f6b0ac533d12376f1703201d0483619ca0431b5da0d26b63379b68c6e281d6c631751d4417018a56dd76d165ac9463b8886062e429c06dcf9cb550d968c6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x10000051}, 0x4001)
syz_open_dev$hiddev(&(0x7f0000000280), 0xf65, 0x408803)

3.287324975s ago: executing program 1 (id=2887):
r0 = socket$inet6(0xa, 0x80000, 0x7)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xfffffff8, 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r1, 0x9d881000)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0)
madvise(&(0x7f0000040000/0x2000)=nil, 0x2000, 0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013fbbc"], 0x24}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$inet6(0xa, 0x3, 0x5)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @mcast2, 0x4c5b}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.22815232s ago: executing program 1 (id=2888):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x10}, 0x1, 0x7}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41900})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x0)

3.227508049s ago: executing program 1 (id=2889):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x3)
r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8994, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0})

2.704776322s ago: executing program 1 (id=2899):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async)
r3 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xe}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1.594266862s ago: executing program 2 (id=2918):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0xf, 0x0, 0x0, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r6 = dup(r5)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4d)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x6})
r7 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
unshare(0x62040200)
unshare(0x18000200)
r8 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
prlimit64(0x0, 0x5, 0x0, 0x0)
r9 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0x7005, 0x0)
readv(r9, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3)
write(r0, &(0x7f0000000200)="fcd40049bde6ab6d5b581c9358d33819535ff6f2532254c35f995d9967f8d89c9a47aad07cbede31714492db89accefe902113073181680a3dd2ac9939c1282942643e4df4f4bf4a72847b026854db1bf5b47b3d49489a0943120b7b20434c5c7fb92fda7e9c0dcb46f025248c6fb7515fcb713f00850bc9f727eb322a84ce538900e072cb140f0c3614dd99cfda1b786bae80701917b1e7090ca32926fd47fb33c02790ec47a01b4eae6a60b5c086462747e0ecbf8c05c0ecb5a44c7749da237dc9367da275e6378dc4650478f1946eccd8029d5d6b12cfec2f8888a4337f8606cdae9ec9a1005f0af9952a0765c6456ace014aca20555c88", 0xf9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r4], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
setsockopt$inet6_int(r8, 0x29, 0x1, &(0x7f0000000180)=0xc, 0x4)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000140)=0x400000000000008)
close_range(r1, 0xffffffffffffffff, 0x0)

1.540161216s ago: executing program 3 (id=2919):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@handle={0x73682a85, 0x1100, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"})
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x240, 0x6a, 0x27}, 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @adiantum, 0x10, @desc4})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r3)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f00000000000000000700"], 0x20}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
r5 = openat2(r3, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)={0xc000, 0x0, 0xc}, 0x18)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000340)={0x6, 0x1})

1.531464597s ago: executing program 3 (id=2920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
timer_create(0x4, &(0x7f0000000040)={0x0, 0x17, 0x1}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syslog(0xa, 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640))

1.531287737s ago: executing program 3 (id=2921):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1.522573468s ago: executing program 0 (id=2922):
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000040)={{r0, r1/1000+10000}}, &(0x7f0000000080))
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/240, 0xf0}], 0x1, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000580)=""/42, 0x2a}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000780)=""/49, 0x31}, {&(0x7f00000007c0)=""/33, 0x21}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff]}}], 0xa0}}], 0x4, 0x10000, &(0x7f0000000a40)={0x77359400})
getdents64(r8, &(0x7f0000000a80)=""/100, 0x64)
syz_usb_connect(0x2, 0x51a, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0xea, 0x4a, 0x2a, 0x40, 0x4fc, 0x500c, 0x7c98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x508, 0x2, 0x8, 0x10, 0x40, 0x6, [{{0x9, 0x4, 0xf6, 0x1, 0xc, 0xcc, 0x44, 0xdb, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x4}, [@selector_unit={0xa, 0x24, 0x5, 0x2, 0x75, "a136b4e8b5"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0xc7e0, 0x7f, '#'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x3, 0x2, 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x7, 0x400, 0x81, "0f"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x6, 0x1, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x4, 0x4, 0x8}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1ab57096bbaa"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x2, 0x87}, {0x6, 0x24, 0x1a, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x7d, 0x5}, @country_functional={0x12, 0x24, 0x7, 0x4, 0x6, [0x100, 0x4, 0x7fff, 0x9, 0x10, 0x7]}, @dmm={0x7, 0x24, 0x14, 0x1, 0xf6}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}]}], [{{0x9, 0x5, 0x4, 0xc, 0x8, 0xc5, 0x8, 0xea}}, {{0x9, 0x5, 0xc, 0x10, 0xce5f15b63d92720e, 0x4, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0xd5, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x6, 0x5}, @generic={0xc8, 0x35, "a221c5e67a3d562bb6225b7d378831e0079687f98dcadfe59ac9e5486fbad559c3cf25b9edc4711a675063eccff6913b9355af32173a2116db30ceca3177c28ccd635c50005110bbb471b1add96b45113d58a78f8cb1d90fb10f14a51ab47203058256ca4b082bb4956e2433e4527e5665a771a8f026a349e724bc4497b1318c31c871b5bfb998026a0cc5cfe67b001c12f48b4aaa995d350d48061eb73128fd49b3f8c6fbaeb48c95f8e16bd8d01e7ec5edcd4e18fc6a42f96f44426c55074b31c6f1f7adf8"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7c, 0x7, 0x4, [@generic={0x3f, 0x5, "855927f0a72e6c5038099810a3e0961f112fcab32f0e3cd5e6a9d40ac099cfe4e7e75947775a0be8c8dad27f26e6e8864b77bd85487c66c1477ebe0777"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xff, 0x2, 0x9, [@generic={0xc7, 0x6, "17176fe9d0883c12c70ca4da69e9d94a39b4bc5f010c43d9dfea5924f8189dd49263df6dd403c442cad075fff662e3451715754db68ade7b6a8597ac41c1ff0d76a99c1b217abfca26323210c9c6b5382d649b7153ee436e2495a59092fc7f762deec5821217a016e814a015e19ed079fcb7f8eac49d66f52173b63eb1265fd5c50a2e0039cf54df0b3a1ab8ed5a11d67cbc2db9b101fe23d400834134adca57867088be63d950c8b6650a0fa9d03aa8e7e9bac45d8346b9c8cea85578e3bc639b9eb786f1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xce8}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x6, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfeff}, @generic={0xeb, 0x6, "19f864a3e5d34621888e2383c1168c16c344904bf215069099f5b2ee9b69399e335146956862c49e4ecc6e7f66e423294735c36d7a1cbf5e7a041eb46dbb688659b03e02db648dd63a7962299c3ed698ad30394a768ffd9e99ddcc5aa2ee96b0b4b09e2a37797ad9134fca75aa98f64d76a0987b7de5b713b5635f636d2682f493b4dc103cf4f2317c4c3870083a18e097c0a97377c89b8bdc566aaf7b05f50ac74b6742a55f9b2c2cb688437e07c4ec03af68a5712ac82ca4c0edb1352e22fc67776e3126af619251dd054b346cd62a9b948cb75d198fb3561fcf6aace103fbce8a0c7d7f007aa697"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x7d7, 0x0, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2ab}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x1, 0xf0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x1}]}}, {{0x9, 0x5, 0x80, 0x9357b47c52605caf, 0x3ff, 0x3, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfa89}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x9, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0x93}, @generic={0x92, 0xc, "3be2d9ca6e4d6c7d72f0d8e0ce47620520fe92ee28c1f61c71502bf47c089696a78f4f0b9dcd049933543e062f84a56b39f8bb029b4845faeadd8c1ae4543a3ba1df7b9c9ef30c8df9e3d3e063333a5c6c76ff53d332c2afcb2114e28d43e077da8d2b340d0d36a067b906bde28d13ae8133cd75580d84471d901cebf47333d70bb00836362967638fb83a3a84ccdb7d"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7f, 0x8, 0xd1}}]}}, {{0x9, 0x4, 0xb9, 0x8, 0x6, 0x4d, 0xfc, 0xe3, 0xe, [], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0x7, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x60, 0xb, 0xf6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x80, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x958}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x3800}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0xc, 0x6, 0xa}}, {{0x9, 0x5, 0x2, 0x12, 0x400, 0x6, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0xf, 0x1}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x201, 0x2, 0x10, 0x5, 0xff, 0x3}, 0x30, &(0x7f0000001080)={0x5, 0xf, 0x30, 0x1, [@generic={0x2b, 0x10, 0x2, "0d9c16e6f4610e8dca456e81d87bbbb4b0dafd040eba7262bfe923f7b78971030a0de02a4f403814"}]}, 0x7, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x41d}}, {0x28, &(0x7f0000001180)=@string={0x28, 0x3, "63e48d39bc4e233895414a5d8d6bffd72ac4d4989a8e88c4ca1d610403fb1a14d42f157cdec4"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x877}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xc01}}, {0x25, &(0x7f0000001240)=@string={0x25, 0x3, "546a1aa75a0a30e77c9263408f0fd8b6801429ec8838c5327298dfff3a96a81b37cca9"}}]})
clock_settime(0x2, &(0x7f0000001300)={0x0, 0x989680})
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x78)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7d)
r14 = open$dir(&(0x7f0000001340)='./file0\x00', 0x4000, 0x14)
futimesat(r14, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={{0x0, 0xea60}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000028c0)={'syztnl1\x00', &(0x7f0000002800)={'syztnl1\x00', <r15=>0x0, 0x40, 0x8, 0x2, 0x200000, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, {[@timestamp_prespec={0x44, 0x14, 0x58, 0x3, 0x3, [{@empty, 0x58}, {@empty, 0x57}]}, @lsrr={0x83, 0x1b, 0x40, [@local, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote]}, @ssrr={0x89, 0x27, 0xb0, [@empty, @loopback, @rand_addr=0x64010100, @loopback, @broadcast, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x27, 0x7, [@private=0xa010101, @multicast1, @multicast1, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @loopback, @local]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002c00)={'team0\x00', <r16=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000002c80)={'tunl0\x00', &(0x7f0000002c40)={'tunl0\x00', <r17=>0x0, 0x8000, 0x10, 0x6, 0x3ff, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x0, 0xc0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@ra={0x94, 0x4, 0x1}, @end]}}}}})
sendmmsg$inet(r12, &(0x7f0000004040)=[{{&(0x7f0000001400)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f0000001440)="e4990534b3242c9eac5236b663a3c22d4a13308213f258711a06feb45ee05d66b24da2d7d48bd2fd97da3f15d9dbdfed297f69a1dccca577ce354b7eb73cfbda4240aacd14e0dc21bccd58e2df6f5f98a5f3e187af588d9a3b7bd24fd20735c2b420b389079e2db8289c65f7b6ac83cfcbf28874be05a58e5ef8bc9c0509cd278ac5da84b29e37c17f930e9739d691", 0x8f}, {&(0x7f0000001500)="9d60db79dc987c8115e2a2220cf8b2d2aa6d55b3503bbe8fadaba1cab6ec793676dd512c482f8856f9a90c742c2242ae18985e4aaba5d79d6337f3ed519bf196a42a1524475ed534c7c979ddf769c919653b60415519127b22784c671aed4731a53f900c152d866d172b0d26cea197e6f7fb37b50add433cce672508a8e6", 0x7e}, {&(0x7f0000001580)="523097dd8eb14b665577522a2d4a10d1c58014b674cde6f87ea64a560a7751a42513174831d001956cc47961ec893f665d02eb5a70bc3cb723fa73f0abb44044b88787439b0adfc5106c50726aa6861e30c8e76d8a19153ff6713634bab97ad2d3a914591a1de4d04e05ea99e7b3592c45c3e23d3bd0a956490704e0f8ec5f5e74133a6301dee197119253eb667a1afb7b254a1a9a772e9559cd66cb7d266513879886add29bfc4ca86d6b840a5693ddd1e7", 0xb2}, {&(0x7f0000001640)="c1ec9788b9e42aad366c9ba1d0237d1e3eb79c9dce9c0988689b391dae89f572115a26ede778a9fe8e19c46626cbde14bf6f8609e67fcfdf4044ba4e9be56b661ced7d52b978eb5b3c81dc9659dd77eb173a84d1aa7de288acec535c21561c61629ed2b02475ff43bcf8d192054b35d5ad2a0f94a823fe4fc422e8e0e927f55c328ec368530ab9dcd0345cce49f5e46c72df86c8336302d545ba74f7dcb425f0ed419628b32e7ebc7dd60831232059879018ca9ed7ce9ce7075c52a75f7b11f0f55cfaaa", 0xc4}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="49c414e42afb9b09dfec8ae57685196e051c4a9211598fc1d52653b02a1bd5016f263fabca8b", 0x26}], 0x6, &(0x7f0000002900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14}}], 0x58}}, {{&(0x7f0000002980)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000029c0)="4eaf61f5a3206cbe66cffa4261656bc8a87328606be8e5e3158616ca81e5e18b2f13c1f8a81ccb1c614e88f719934f5ba0a4a8d19efb47099c9b0019fd4eaf240f0cc9054e7db21d64c29975620568349500532f33c8c5834520f3f334af5253b2052331dc7ffaaec6ff076426be7a94f72d9d3693e239fca01534fd0ebac6ebc180ae", 0x83}, {&(0x7f0000002a80)="9e78e864eb1d0016bc5f297669620f280a1363a9fcf85e3d743a6f5b44ab7783865b6e67889317d8b088a4109657a054b63a9c413b53c306c151db95c73482d006192d11e798e3c013a69fc62e8c6f5b0eaf439a314fbeb83d1e848cd16c010b562a5fc429908fb296adfba33706a9d0da2d71aa5704ec0f255855fb19bccfb0269ce94718c5d270e66b2f183b3bf805a906a6", 0x93}, {&(0x7f0000002b40)="113fc5094ad326242d12bcf70b60f2880b1af7ab74b29ce57475f09c40402e1ad1bc41d862e26ed3362b73978aea9db12ebf2ac3b393b905d8539c780ed2ad05a8fc465873cf83e1f463d806ad1b88bb1b4d06285d1102f6c60f0ece4d1178bf8f22952fda75744602c8faa65030fa", 0x6f}], 0x3, &(0x7f0000002cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x9b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x3, [{@empty, 0x9}, {@multicast1, 0x401}, {@multicast2, 0xd}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x6184}]}, @timestamp={0x44, 0x8, 0xe4, 0x0, 0x1, [0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x148}}, {{&(0x7f0000002e40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000004000)=[{&(0x7f0000002e80)="e52e9f3f813bdf14dfb5c3e9a2c105920a604ed3fce9688d4b1a3a9273127d09372b9d5a72cb8334975146ea85c24c80d440dc64ef59f172056b2ff16fa2b345e3924e83502c0d811dd50c42d4395f6459c553c981673cced64e6971c9667933903d2db3b60b522508fb4734590ef2512e131de5fb5dad4472cfc52eaa474837d526b24dbff8fb1c4dd6ac3e8d0f58c67291ae508161cf4bb9c02778264f311d0fc2f2bf5d0186d1524d7f4cf12498a74de8d8047d20032e6caf4af1da4d94b8e01842567d3fb4e05c81df0277b88c985adf659304703c0631aaae1e1b8a17ad0b53ecb6642a3dab530f7460cebf7b723805915ea5cf146a765a2cd4ddb04cd319db133e20d27fd301d9dcccaa3357940a0cfdc01b87af1d93dce18ed606af6d144cf4ebb31f99333d0b57008afb54074ee40e23fcec4d384281b93f142f31bddabcb67e58a562bdf78b0d8f20c9c66136635df6c3ec235e5aea77b78b071a4a49c9b11426fb4fad0b70633d7a992d498c3f3875b08f353ce3606931d0513d22983a62221f33c6d7380f7b61209e4e45be24f50e5327e8bf42f8c8268b4cca57ebafa4ba7da0f58383dbcbd5b43b5ae1785677f2bc58aabef0f617daa89557088e2c3b65d79522289c976d8215b9cdbf5170088a2afda34474d63d7e74d2fc060b7068c1b949823f4e3bc0bd892f500579a683db813e712a3817f57e01cb98b1ae570f3c7137fb84874c62be27bd2d82a79c22267f6aa416145222d52f7fdaa34098391960a9ab861eac4e6f5e2a9f32d5e9bdbb5059c58d1fe2bfc975d5d74996b7c3cd29991496ed57cf47f6b96e975bd2dabf0285560b9fb00fbeaa150eab90d5a3df32a30002141ed41a79919a25aa979dadfe8e899ac84603d74ff7a364742a99aa4033c4cc8d2a4beff41dd21162759f527b10a5cb436801ea03d3e432d80ca7463a60a906954f3a9d60ebb0231c3e792622b96fccd1ec4d953c2d6feb1ea5092efd0e7eb3ba372a70e89be7851bab1137c384d994f761c617ca5ef0a3e603bdc783251af11b2114ca8ecc986e98b9c0e92389943bff76b4e60cba4c60c86b66e1dc0710c378b764e6a39972e59a865b8d5d75656833d23e3c0cbb760d9ae9f3a065344b0098f4549a8ebc183582a52c3d8a9cb0dd31cdca6afa75d7aa85c1a022e68d05199d94428e88f1470f4f2716689c3d048bf11a2cadf7438d88736e10fb91825858e57c7dbaf101a918b88d96bf67e1c194def5acaa2128feae719e8250cc97c2c7a61f468dd3a4fff249824d96968e6c074d4669601f25daadcd18f3f7f7dece9c5751f721b3ca351a9536036b325dbf03f00d07c6a47a35faedce53a02172677a3d352ac72e6a76fb2a561bbabe324a61142469fbc225bd80bf7dce316b895c12a472c2e6b619a4aec7db1211ef6ce55ce9e3479f165824831e3c743e8a180c1817ca4b6822679cc5b6405e233987c501b98f920c7cfaa20012d5ec3322809d01ffa15453f5d97bc77ea3741d9d0979c0d6d572c86c8ac223a5ea66e6870cdbff18f18a54994a7b5051099c216158b83d309213435920a3f5675f64879f98c18cd753d8536a25c534259694906635986daa0852ac3acba4e9b1f1a7f6681268df402d640ad4c05bd4972e5ad3aa9225e2a965e9bc62aaee95aa0d507630ab25595f1d8e5f198ebd367fa8d8f67c4eea6e4d670fa136c275c6f03915360e3360d321c42780573e9fdf928a7b522eaa0d2fc1400c7abfd2cfeb25c4005bee83ffd88b60135d1894361ff55fd04a421055a07aa55cc6ba9a4b7cba6e224d7198737bac2480a78bc77b41c2986297f7f9e5de04645f88969152ba6bc06e5b31b73b8038e3007aa7647fbdac240db0b8fc149462c5b91eb1e67d62cb3b6af843b8fa94e1eb9f019505f95add65d48a6f1c48da75ccd8970fe6aa43bcb8ea7929711b30f59578b6ddcb063d7cc3ecc2fd0501f55e1690e40fe033601e1836fac4b1363161ffa2e0685200268edd2f319318f09aac0a975e80ac6ae19538504160afabc276ebf371aeaaba3dbdc075edb4343616738bca86a2a61630a48fa36a78d4a6cfeaca2100a2dfda2d5386f87d18cfc73ec8ce6f48a856ed107d15db48e9f171b34f07cedf1ebec4186e735a97e95a8a4d1ff4c03283f3410438e856c72811adacf172c71090f0b5e1b3beda55ab319c6388b3ea2522c0c1680f153884095f7422132f2b8ef20d8c7d11867b2d8e7c1950a4a2dfc2a064e43f3b7a55783a150eb90625ac6f375595443ede4d5a652915e478298bb659b988179752a35fa37c345fa5c135faffabab61841adb2401ee73d4c087a1f5b180cc181369f60e429a060197b26986be8aa8b1039336d4033e710d06d4c70f6a2a76a511f5c4b63e6f17098c375e31a9fbfcbcea3259b19918eddc548a2f4c9151a0219c2248158575c00e6a4bdf34ab68db3bc6391f09a0114151d73c765bcb47c98b1efb7d618f80af076c2dd84309042b853fd7e885db0fd31a1938c431890d546e25beea8a420eb4ea6aad54d9c04029c1ac10dfd315137ffa130013fdd205b6a51ac8f4e8880b04be28b0334264c29f54f38b67662f178e35621fa9eb60c1f9b24112e269b08e54a4b0b700f856d784d99f0cc498898fb5895f63eb670982d250b3602bbef3d8a4c108f9d1167dd5fa4aaff9ea9b58885a39c40449cc8b52661722f2760ddb3c6eabb8c0014959313d783c2119ae0a572f69c650d11b6d3bed74ed6e8c798cfdd353f8a6d55c146385540be57f33d2864a8dd564cf6e17543fb974d4ab8223b449e271cd400c18988f1ce489e5451a876b1e24fb30ee15dfc8fa54fd33e4bbd642a3507a1ddfaecc6e57694e2c117a801b5b12048c59f073e5c0bd8f19483586d14a060ca973db434a122f9bab9ebf782428763533f780d771ce50507a57a8bce369c53501b6ddac33092c13460cb7504acd8c98f8dc9951d21d69ced35158a0cadd3d30fec8aa25da67259ca9cbc43bdc739970e983eb98dbbcc2f5d3eda9373ca7fb26737b57bf64850e8db5d6ef8f3c2c74f31ef3d63f3e0960e87ef4facdaa6d68f0923cda18cf779d9d200589f58d134d9782a2ad3d7179f3929954c41910368f73bf0971027f2b523ac8f2a3a2e24b7c845c2f169c7b1ca7ae4422b007e6ef4e0b5ecf19c2b5c3d34ff8ac719689096913c2f28ce4b0a386db9727e0218802d18d81ee79be90cc8e8ad136232ce449771889870a25717f4c2d046a809289a79371353555ed2fcff31641b261226325d435593bc57b65e73577b131147f868f745569df5f5c13370870591a69ea0dbaa63c91cdfda6385204aa74d58d6758b7fb65dc01e0c4d612f55154ae612cbbe316026188d5ff9400251026ecda78254721ee4aaac4155987cca1c9e90028324fa70e2346810e647e4e02763ee1f44e65dca83583b576933194c84fad0b89030d8d11dbf3fdd3cb11897f06d093dd9a3dca4d8fd87932171085b72a23e479a26f997adbc98c4352338b7df9bccb4763eb454d9bda0410e72b16914a9dab0b40aaf497d8ea217fd9d7b6495cd4e9e04241c96b5c1c24ca5dedc4a08aa27e0f8b4f52a2a9ee2966327e3b1b045e34f680ddf04d749deb8f797d64cc61d7f1cb1f5f0b63df4c8a94a6a4a39f996467aa04d5f3154272d454984a701abcccb8809eaa8aa4447fbe285667343b5515f1ac8d5d35c31b3f996bfea2a031bcee56a8c36bbb87bfcc75c58594a10e9a89353276c2f0c0753dcc2011c39bd1afe564ffa19b7c54e6cb8135e3aad747f972a5e491f784a9c401f2b5189191940e2d8e2cc2dbfdd585cfd58893fd00681aa74ed666413d8cda8519d83bf0ad334bca0b705133aeb4d17b7154eed90659a5d35a20209e950df63288f0c960c04153e94b0873d8de6441711a421948139485456b5678a99a87d3b203f1f77774d64fe6c977f390d94b0d0a599544507f5ef44ebc8f451ac212ac1af1a99184b8030da7001742fc614d7c8a3a67ac202ca9ee11ded7bb6d6a6a32f90f3f5879f49c4c0afbf0b36ee8b508cf5785f81f2508419cee408270380b92bd3d4ff5e4f206727842d5f50575be4a25650bea4bcfa59b3c80df4f56dcf0bd14b9a59478aae2c0fbab99584bf74afc3ab93207463a4d02c365eb8e15f1e6344627946deb1b3162625cb39f37331576c2a82b081d3b066a9b94e7e3bd41d9d76593ab9a884e54177bd30aba7d439f15af84add86001d41f254331b77222f95e9690cadcba7acf43a6fb8d6fc8acb9537841ed6e1862377f35dd9a6d4f8014e7f7e8ad73ae11624291ce6e6306bb767bd185ce0281f77ba7e3c463b5bdde6924863c71a5ca08aa82d9c85fffdf959ddb385e43dc1d01b2c0d8ee6402874afc27809b2292c2b276479a1c1f81af0543555478e9170fc3517035eb3d317dd945d12c99b472bdbfafabc0ab798fd513e2fabc236fcd3000f765a76fc2b2e652ea5c36b5de884f17317c8c089f3e5bbabc3c47a95f4a3817444727a6b06e4b613abcd08f527c7860f719ba43049618ba3565f26e7dfca2277046530ee911d4fa4f55102da6cda84ef7f4c04458529e4400a64d2b18403c96e8dd4dad4accaa3db9dde1cf96717332b0b98425e5cd33c708c4dfcb7475b4027441e98a8d84f47271ba462e597e00ac71640e619f766b2505e3bc7f7bab73172b09906734afa19295fb94a9c0bfb0b44246b35315976371afe495db2a4aab23ad7ddcf9e9fd95ec8cd0642828a39d5e559b0ce0623ce1eb8b6e42c3b46aa65738bbb2f095c81c37d9f558456f608ce613373aaddecd0bc8e64f2bc1de04f21bb4fd684ff19351e7bffcec65b5f486340d9f65bfb1bf1433cf75969e61ffb5f906435a64c30da9c5ecb54c8701d93ed4634e42175a1e5700690913558771a181a29407fac674ce244cf2a3426362eea99ae9892904ef87924574ba1c18f19d4eea3474a093ae2e8f02145ff2c091ea1f57e489e70695c4f539f39614d7ddabc134741f6fb4fabe19fb4eeb74396090e664d69d9c29c4b80ae83463723676ba06170df9f6455cb845fc6b77681a03f9c82ea7dd9a21b2f341a74480418121c084d4688ae40a88ba5dd0457460b7e5c57a6654796a69b1aa4e40041151974006d4de8a78a64eb2bdf6d28256f036637b0899c98921539c8392b2ab7b2648f058078df6fb9e629cab74ed6d8c9d66a80c9c9d8dc6c74ed029efc3f75b2f42d2f538f4e68ec9c23809105b4f10b83023b12b41a06079e67212ed1a412d359e109d8f45993a7f49d7f79dd296a2c8c74430512d624080899b88b01f0916130f9362e60e42584bdcea4172ef7c2999a56809ceca763d14dfee69ebcc4abdbf3cf8a92f667e8b395551f7feb20983e890503da3daefb72405ccb4f37feebd6970dc88002cb8e587aefdbf075ff9620940dfc4b2fbd8515148e3a1b8eb49968fa8569ae2a57c552767ccefac1e891417b2f553703e588e6fb13e4fc221af11e9d56ce839bc4fde06ee5d241b0987336ad098ed7839edec181db9d7c2da8f02d19baa7aa7122931bed0f42f188e46543ce5f9a59a4d40491135c60e5b588248b7e711ccba197a86afc4e3bdb5c0282083d3e0314ad300c6f006a323957f9d12c523d77aeae7f390f64202aaebe273869d962af7b0c78047184d559fdeecfe5781ccba60e44e95b23114db8347ad0b6ecc0795c770857401090af01e10e8851a8a985a620f1225db002189b455a018d1bf987acd0d7da896e557ad516107c55e0a5932d2", 0x1000}, {&(0x7f0000003e80)="e97d99d4f101e6223021cc5f8522eab5e2ea773590057c1a157bfbdd2daee77078e5007773a4cd4b3c57219376f1c72e635bbd2cc129a0b49decf45eb688e45ec8426970574b110d234b4966524d105aec08cba7680c506cf969e08b9e058533e33175d5ffd42e51f81cd59473a94ef0c45270c335d75d0f87d65ea67d7a03d7245499ef23dea1cde3009dad8c320f93e4ef606e32febad279b8c4dab410d54ca615a3c39af618d58d49299fe013b37114e392c5955c975e99cf8eee3284a6c21ea9b5f8c98c4b799bbe29d956fe72155c01023ecb463f093bb19efccebb56143dc3", 0xe2}, {&(0x7f0000003f80)='y', 0x1}, {&(0x7f0000003fc0)="4bae4a85a3b0729fc1733476cf97ce4d70d0360a13a7b728e0bc4e4a24f7aa8d264f8a83ff42776273192185110afc3540b42e4593654201bed5b8a87f81", 0x3e}], 0x4}}], 0x3, 0xcc84)
close(r14)
ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000004100)=0x7)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r5)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x8b76f573c77811f4}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x14, r18, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000810)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000042c0)={'wlan0\x00', <r19=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000004440)={&(0x7f0000004280), 0xc, &(0x7f0000004400)={&(0x7f0000004300)={0xd0, r18, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e4789ffd558e0891009fe5e1a98833afc1a9bd3b147e934"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d722e1f3d999ce4fb4c57e377dbd674e95e30137a0a90e98"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ae8c57e9446e4393a1f5eff394ce305c28a3035de8259017"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4004040)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000004780)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004740)={&(0x7f00000044c0)={0x24c, r18, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2a}}}}, [@NL80211_ATTR_FRAME_MATCH={0xbc, 0x5b, "7e81e30e55b0d6d5333d27112b462eaaa472393f599336a6b612781712d195d61177c46d794a8eaf90f006c7aae740d36ccdf7c6d191af43ab8a8254bc34a72d9b4c9a15b2989d69e3cfabc06d92ca4625d1873dd8ee8609fcf0297d988d1fbaa0c3138894afa70e08f027b96d7aa61fabed34807439fb2d57011963f9ae59648fab3d02821e9ec0d757f6d92fa7a6ad015318a5ab919d3136aa1a53449c9b3368033a34dede522701228d75e2dcfdccb28c47f679cd0e91"}, @NL80211_ATTR_FRAME_MATCH={0xa7, 0x5b, "525cb62f5a4c107e68050749c220f80ce241dc4ac8a726daab13db6baaa75209c866bc378146f412e48991f3c930839d47a60a08cb087f05999f85b6fab19b743d88cbe3c0d0c46ec9241c4f3ae9455b0821982ef1b5a34a594e25d0a75a2ea50f6b8021110447bfe04255a9dc081daf02e1eb568c838b7a70349019b0091f6a32e3c78aa5374bd8c86eaaaaa0b58e4d639e8daa5fd38814b3b90be3f0f5b8d7820d39"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xb6, 0x5b, "90ac82eec796a854954f73c8fe38d185388a2a6cf80d74fd13e6391c1df24f07c08bba2ce1a5a6cdbf2610491a8702abec3bf5fcc4f3b90857ba1256c0d12bc0cf72423a61137b8a19dadcd97b05af3a0c55c2b046664b82fcdee7a4fac2d7499bebb710eca1b07239736baa84c3d0a3f22958053b221a4e02189e3357448c90924f8b86275b2fa70d44b3e62b2a9446df30b2697862385a982f4d6476054f921b38b39a04685e55cfdcd39c9540050440b4"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8c01)
r20 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r20)
socket(0x28, 0xa, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$UFFDIO_CONTINUE(r13, 0xc020aa07, &(0x7f00000047c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
pselect6(0x40, &(0x7f0000004800)={0x0, 0x0, 0x10001, 0x1, 0x101, 0x4, 0x5, 0x9}, &(0x7f0000004840)={0x1, 0x6, 0x1e, 0x4, 0xf2, 0x2, 0x5, 0x7}, &(0x7f0000004880)={0x1ff, 0xfffffffffffff495, 0x8000000000000001, 0x6, 0x7, 0x3, 0x7, 0xe}, &(0x7f00000048c0)={0x0, 0x989680}, &(0x7f0000004940)={&(0x7f0000004900)={[0x64c]}, 0x8})
capset(&(0x7f0000004980), &(0x7f00000049c0)={0x3, 0x0, 0x1, 0x2, 0xfffffff9, 0x800})

1.477618581s ago: executing program 3 (id=2923):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1a) (async, rerun: 32)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='aio\x00', 0x0, 0x0) (async, rerun: 32)
r0 = inotify_init1(0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r1, 0xfffffffffaa23000)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x810}, 0x400c0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0432c100000000000109022400010000000009040000010300000009210800000122070009058103"], 0x0) (async)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0)
close(0x4) (async, rerun: 64)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000be88a048000000000000000000000700000000000000ff0f0000000000000000000000000000020000ffffffffffffffff0000ffffff000000000000000003d381320000000000000000000000000000000000000000ffffffffffabffffffffffffff00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e00000020000000000200000000000000000000000000000000002000000000000000000000000000a00200000100000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async)
r7 = open(&(0x7f00000000c0)='.\x00', 0x400800, 0x0)
lseek(r7, 0xfffffffffffffffb, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
fstat(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setreuid(0x0, r9) (async)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r9, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x1}) (async)
socket$inet6(0xa, 0x2, 0x0)

1.424129185s ago: executing program 3 (id=2924):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdf, 0x10, 0x50}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
r5 = eventfd2(0x0, 0x1)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xb0000005})
epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
close(0x3)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000340)={{'\x00', 0xc6}, {0x1}, 0x9c, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="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", 0x155, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x222})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
unshare(0x62040200)
syz_open_procfs(0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
unshare(0x22040000)

685.806525ms ago: executing program 2 (id=2925):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024800010100000009040000160202"], 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200)='./cgroup\x00', &(0x7f00000001c0), 0x1014000, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024800010100000009040000160202"], 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200)='./cgroup\x00', &(0x7f00000001c0), 0x1014000, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, 0x0}) (async)

674.385956ms ago: executing program 2 (id=2926):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @pic={0x7, 0x7, 0x0, 0x8, 0x5, 0x2, 0x88, 0x1, 0x2, 0x0, 0xa, 0xf0, 0x6, 0x2, 0x5, 0x1}})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x8001, 0x800)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r3, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

624.20007ms ago: executing program 2 (id=2927):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f000087d000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x1263b000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f0000000580)={{}, 0x0, 0xfff7, 0xfffffffe}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0xe4, 0x12, 0x905, 0x70bd25, 0x25dfdbfd, {0x1f, 0x9, 0x4, 0xfe, {0x4e21, 0x4e24, [0xfffffffb, 0x924, 0x26, 0x6], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x10000, 0x1000]}, 0x20000006, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x97, 0x1, "00b0ae4f89d499a3616b848a0b3f9a23741454aed59b8af6f89e6a60f32545a01ee9bc1a9b89535bd1b6b0d966005654f40347880b6a000000ffcdb376405072b9d28ea842fb58c3215d3ac77216d25521e56373878b4b90a80668110511a0b21609f0b3e8b57d02f2cc8ac4d61ef0b6a1f87f6d937648b1589b70260a4fc36d9219d27fdf70ca5f69c8a6dc4470497a62defe"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008d5}, 0x800)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0xfff, &(0x7f0000001040)=<r9=>0x0)
r10 = eventfd(0x3)
io_submit(r9, 0x1, &(0x7f00000016c0)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000001080)="fa084c0a", 0x4, 0x7fffffffffffffff, 0x0, 0x1, r10}])
socket(0xa, 0x3, 0x3a)

534.484578ms ago: executing program 2 (id=2928):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
pipe2$9p(0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G'])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe)
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)

524.570518ms ago: executing program 2 (id=2929):
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121402, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40000, 0x28, 0x1a}, 0x18)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004bc0)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x20004004)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba00", "2809e8dbe108598948224b084afbc11d87313c5240f45f819e01177d3d458dd4192c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000074000040"])
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0)

112.290852ms ago: executing program 0 (id=2930):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xff02, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

108.846122ms ago: executing program 0 (id=2931):
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

100.914573ms ago: executing program 0 (id=2932):
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x400}, {0x3, 0x5}]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0xfffffff6})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x3, <r1=>r0, 'id0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x4, 0x3, 0x7f, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0xffffffff, 0xfd}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xf)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000440)={0x1, 0x2})
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
ioctl$TCFLSH(r0, 0x540b, 0x1)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000480)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '\xff\xff'}}, 0x23)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f00000004c0))
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000500))
sendmsg$can_bcm(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000600)={&(0x7f0000000580)={0x3, 0x400, 0x9, {0x77359400}, {0x0, 0x2710}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "31bc41be5fb1531a"}}, 0x48}}, 0x2000000)
ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000680)=0x1)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000006c0))
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000700)=[@uexit={0x0, 0x18, 0x1}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @rdmsr={0x32, 0x18, {0x892}}, @wr_crn={0x46, 0x20, {0x8, 0xdd}}, @cpuid={0x14, 0x18, {0x10000, 0x10001}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x32, 0x18, {0xb0b}}, @rdmsr={0x32, 0x18, {0x282}}, @code={0xa, 0x50, {"6626430f01f8c4e279186945470f01c966b88d000f00d0460f01c9640f20a066ba4000b800000000ef36640f01cf450f01f8440f20c03507000000440f22c0"}}, @wrmsr={0x1e, 0x20, {0x845, 0x4}}, @code={0xa, 0x8e, {"c744240000900000c74424020001c0fec7442406000000000f011c240f20d835080000000f22d866baf80cb8bb0c0d86ef66bafc0cb000ee66baf80cb88ec39d8aef66bafc0c66b8003066efc44281911c910f015c46b04e0fc79cecf4ffffff66baf80cb8cd52bf86ef66bafc0cb08aeef3460faecd66470f3880590b"}}, @code={0xa, 0x6e, {"c48255de32c744240000200000c7442402e18f0000c7442406000000000f011c24f30fa7e8c7442400e7000000c744240200000000ff1c24f34c0f1eca640f161866bad00466edc4a18971e600b805000000b9000000000f01d9470f06"}}, @cpuid={0x14, 0x18, {0xf, 0x1}}, @wrmsr={0x1e, 0x20, {0x91e, 0x6}}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0xf295, 0x4}}], 0x2a4})
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a40)=[@text32={0x20, &(0x7f0000000a00)="66b8af008ee8b8000000000f23d80f21f835800000800f23f8c4e1905952080f0667653e0f01c50fc79dad2800000f1ec42ef29b3ef30fc7306bc500", 0x3c}], 0x1, 0x0, &(0x7f0000000a80), 0x0)
getpeername$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14)
clock_gettime(0x0, &(0x7f0000000b40)={<r6=>0x0, <r7=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5, 0x1, 0x7, {r6, r7/1000+10000}, {}, {0x4, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "d2ed4a74b3aaecdd"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000841)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000c80)={{&(0x7f0000fea000/0x4000)=nil, 0x4000}, 0x1})
write$FUSE_INIT(r3, &(0x7f0000002d00)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0xffff, 0x2008000, 0xdc7, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfff}}, 0x50)

90.114683ms ago: executing program 0 (id=2933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000180)=""/133, 0x85)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8)
r2 = getegid()
lchown(&(0x7f0000000040)='./file0/../file0\x00', r1, r2)
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0/../file0'}}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}, {@userxattr}], [{@obj_user}]})
socket(0x4, 0x80000, 0xc)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)

0s ago: executing program 0 (id=2934):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x4e23, @broadcast}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r4, 0x22e7c000)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket(0x10, 0x2, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r4, 0x22e7c000) (async)

kernel console output (not intermixed with test programs):

g=9 arch=c000003e syscall=231 compat=0 ip=0x7f13ec98ebe9 code=0x0
[   67.307722][   T64] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[   67.458822][   T64] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   67.468866][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.478476][   T64] usb 3-1: config 0 descriptor??
[   67.560942][   T36] audit: type=1400 audit(1756437517.138:391): avc:  denied  { bind } for  pid=2550 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   67.615792][   T36] audit: type=1326 audit(1756437517.188:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2563 comm="syz.0.693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7477b8ebe9 code=0x0
[   68.614843][   T36] audit: type=1400 audit(1756437518.188:393): avc:  denied  { getopt } for  pid=2592 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   68.636724][   T36] audit: type=1400 audit(1756437518.188:394): avc:  denied  { create } for  pid=2592 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   68.877669][ T2606] 9pnet_fd: Insufficient options for proto=fd
[   68.888877][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.900010][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.174782][   T36] audit: type=1400 audit(1756437518.748:395): avc:  denied  { listen } for  pid=2623 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   69.269588][ T2635] bpf: Bad value for 'uid'
[   69.276333][ T2635] overlay: Unknown parameter 'permit_directio'
[   69.454028][ T2640] overlayfs: failed to clone upperpath
[   69.815319][ T2676] overlayfs: failed to clone upperpath
[   69.838093][   T36] audit: type=1400 audit(1756437519.418:396): avc:  denied  { listen } for  pid=2678 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.077716][   T64] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   70.088573][   T64] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[   70.100154][   T64] asix 3-1:0.0: probe with driver asix failed with error -71
[   70.109282][   T64] usb 3-1: USB disconnect, device number 15
[   70.397773][   T64] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   70.548789][   T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.559319][   T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   70.570365][   T64] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   70.579839][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   70.588958][   T64] usb 3-1: SerialNumber: syz
[   70.799893][   T64] usb 3-1: 0:2 : does not exist
[   70.808659][   T64] usb 3-1: USB disconnect, device number 16
[   70.834351][  T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   70.876786][ T2711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'.
[   70.913763][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   70.913779][   T36] audit: type=1400 audit(1756437520.488:399): avc:  denied  { read } for  pid=2710 comm="syz.3.744" path="socket:[14291]" dev="sockfs" ino=14291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   71.014465][ T2729] netlink: 57 bytes leftover after parsing attributes in process `syz.3.751'.
[   71.136848][   T36] audit: type=1400 audit(1756437520.708:400): avc:  denied  { map } for  pid=2746 comm="syz.1.756" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.149708][ T2749] /dev/loop0: Can't lookup blockdev
[   71.186713][   T36] audit: type=1400 audit(1756437520.708:401): avc:  denied  { ioctl } for  pid=2746 comm="syz.1.756" path="socket:[14733]" dev="sockfs" ino=14733 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.294967][ T2760] overlayfs: failed to clone upperpath
[   71.336895][ T2767] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   71.697783][   T45] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[   71.724999][   T36] audit: type=1400 audit(1756437521.298:402): avc:  denied  { read } for  pid=2783 comm="syz.1.770" path="socket:[15392]" dev="sockfs" ino=15392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   71.755916][ T2789] netlink: 'syz.1.771': attribute type 27 has an invalid length.
[   71.857469][ T2799] overlayfs: missing 'lowerdir'
[   71.893438][   T36] audit: type=1326 audit(1756437521.468:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2808 comm="syz.3.779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13ec98ebe9 code=0x0
[   72.401519][ T2818] 9pnet_fd: Insufficient options for proto=fd
[   72.734323][   T36] audit: type=1400 audit(1756441874.310:404): avc:  denied  { create } for  pid=2828 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   72.759959][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'.
[   72.769325][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'.
[   72.943322][   T36] audit: type=1326 audit(1756441874.520:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.1.801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1d058ebe9 code=0x0
[   73.098129][ T2862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'.
[   73.653052][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.660580][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.667569][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.678780][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.685627][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.692861][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.699869][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.707249][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.714193][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.721088][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   73.750125][   T36] audit: type=1326 audit(1756441875.330:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2884 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec98ebe9 code=0x7ffc0000
[   73.779428][   T36] audit: type=1326 audit(1756441875.330:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2884 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13ec990b07 code=0x7ffc0000
[   73.810096][   T36] audit: type=1326 audit(1756441875.330:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2884 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13ec990a7c code=0x7ffc0000
[   73.935241][ T2914] netlink: 'syz.1.817': attribute type 11 has an invalid length.
[   74.142328][ T2949] netlink: 'syz.1.829': attribute type 2 has an invalid length.
[   74.151104][ T2949] overlayfs: failed to clone upperpath
[   74.221971][ T2967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2967 comm=syz.0.836
[   74.477668][   T45] usb 3-1: unable to read config index 0 descriptor/start: -71
[   74.500889][   T45] usb 3-1: can't read configurations, error -71
[   74.548527][ T3000] netlink: 'syz.2.846': attribute type 1 has an invalid length.
[   75.050321][ T3012] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   75.205221][ T3060] /dev/loop0: Can't lookup blockdev
[   75.468273][ T3070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3070 comm=syz.0.873
[   75.514067][ T3080] fuse: Bad value for 'rootmode'
[   75.807664][   T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   75.917211][ T3096] overlayfs: failed to clone upperpath
[   75.923184][ T3095] overlayfs: failed to clone upperpath
[   75.958799][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.980768][   T45] usb 3-1: config 0 has no interfaces?
[   75.988208][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   76.000366][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   76.009660][   T45] usb 3-1: Product: syz
[   76.013996][   T45] usb 3-1: Manufacturer: syz
[   76.025690][ T3101] overlayfs: failed to clone upperpath
[   76.027632][   T45] usb 3-1: SerialNumber: syz
[   76.039566][   T45] usb 3-1: config 0 descriptor??
[   76.464322][ T3118] netlink: 'syz.1.888': attribute type 15 has an invalid length.
[   76.472487][ T3118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'.
[   76.493282][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   76.493305][   T36] audit: type=1400 audit(1756441878.070:419): avc:  denied  { create } for  pid=3117 comm="syz.1.888" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   76.534215][   T36] audit: type=1400 audit(1756441878.110:420): avc:  denied  { mounton } for  pid=3117 comm="syz.1.888" path="/267/file0" dev="tmpfs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   76.656999][ T3149] rust_binder: Error while translating object.
[   76.657033][ T3149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   76.664405][ T3149] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   76.679009][ T3149] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:31
[   76.685853][   T36] audit: type=1400 audit(1756441878.250:421): avc:  denied  { map } for  pid=3155 comm="syz.0.900" path="socket:[16010]" dev="sockfs" ino=16010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   76.732434][ T3158] overlayfs: failed to clone upperpath
[   77.211057][ T3166] /dev/loop1: Can't lookup blockdev
[   77.227810][   T36] audit: type=1326 audit(1756441878.800:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3160 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d058ebe9 code=0x7fc00000
[   77.449057][ T3210] overlayfs: failed to clone upperpath
[   77.472562][ T3212] netlink: 37 bytes leftover after parsing attributes in process `syz.0.920'.
[   77.569752][ T3232] overlay: ./file0 is not a directory
[   78.080676][ T3242] overlayfs: failed to clone upperpath
[   78.087180][ T3243] overlayfs: failed to clone upperpath
[   78.584444][  T489] usb 3-1: USB disconnect, device number 19
[   78.591059][    T9] rust_binder: 3085: removing orphan mapping 0:24
[   79.539602][ T3292] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   79.548947][ T3292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44
[   79.553546][ T3293] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   79.781452][ T3325] netlink: 'syz.1.960': attribute type 11 has an invalid length.
[   80.190249][ T3361] 9pnet_fd: Insufficient options for proto=fd
[   80.474068][ T3395] rust_binder: Error in use_page_slow: ESRCH
[   80.474084][ T3395] rust_binder: use_range failure ESRCH
[   80.480366][ T3395] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   80.486145][ T3395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   80.494502][ T3395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62
[   80.622407][   T36] audit: type=1400 audit(1756441882.200:423): avc:  denied  { setattr } for  pid=3418 comm="syz.1.992" name="" dev="pipefs" ino=16945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   81.266327][ T3449] /dev/loop0: Can't lookup blockdev
[   81.368981][   T64] rust_binder: 3404: removing orphan mapping 0:4120
[   81.762756][   T36] audit: type=1400 audit(1756441883.340:424): avc:  denied  { lock } for  pid=3460 comm="syz.1.1010" path="socket:[17593]" dev="sockfs" ino=17593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   81.816155][ T3474] fuse: Unknown parameter 'rootmo�j��bde'
[   81.906385][   T36] audit: type=1400 audit(1756441883.480:425): avc:  denied  { create } for  pid=3486 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   82.042960][ T3492] overlayfs: conflicting options: nfs_export=on,index=off
[   82.457694][  T942] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   82.608820][  T942] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   82.620073][  T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.631160][  T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.641216][  T942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   82.655511][  T942] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   82.668566][  T942] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   82.677203][  T942] usb 3-1: Manufacturer: syz
[   82.685286][  T942] usb 3-1: config 0 descriptor??
[   82.729052][   T36] audit: type=1400 audit(1756441884.310:426): avc:  denied  { listen } for  pid=3531 comm="syz.0.1036" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.752384][ T3533] netlink: 'syz.1.1035': attribute type 4 has an invalid length.
[   82.763125][ T3533] netlink: 'syz.1.1035': attribute type 5 has an invalid length.
[   82.771072][ T3533] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1035'.
[   82.781213][   T36] audit: type=1400 audit(1756441884.370:427): avc:  denied  { accept } for  pid=3529 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   82.909043][ T3550] netlink: 'syz.0.1042': attribute type 25 has an invalid length.
[   83.096406][  T942] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[   83.104019][  T942] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[   83.113331][  T942] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   83.359805][   T64] usb 3-1: USB disconnect, device number 21
[   83.462200][ T3570] netlink: 'syz.0.1050': attribute type 11 has an invalid length.
[   83.594140][   T36] audit: type=1400 audit(1756441885.170:428): avc:  denied  { create } for  pid=3597 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   83.622006][ T3599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3599 comm=syz.1.1058
[   83.716143][ T3613] futex_wake_op: syz.0.1067 tries to shift op by -1; fix this program
[   83.946241][ T3626] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   83.954467][ T3626] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   83.963071][ T3626] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   83.971090][ T3626] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   83.980777][   T36] audit: type=1400 audit(1756441885.560:429): avc:  denied  { map } for  pid=3625 comm="syz.2.1070" path="socket:[17219]" dev="sockfs" ino=17219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   84.030599][ T3634] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.030953][ T3633] rust_binder: 85: no such ref 0
[   84.279178][ T3644] syz.0.1077(3644): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   84.297761][  T942] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   84.447780][  T942] usb 3-1: Using ep0 maxpacket: 8
[   84.455005][  T942] usb 3-1: unable to get BOS descriptor or descriptor too short
[   84.464054][  T942] usb 3-1: config 6 has an invalid interface number: 215 but max is 0
[   84.472667][  T942] usb 3-1: config 6 has no interface number 0
[   84.479036][  T942] usb 3-1: config 6 interface 215 altsetting 5 endpoint 0xB has invalid maxpacket 1999, setting to 1024
[   84.490992][  T942] usb 3-1: config 6 interface 215 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024
[   84.501567][  T942] usb 3-1: config 6 interface 215 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 64
[   84.511848][  T942] usb 3-1: config 6 interface 215 has no altsetting 0
[   84.520365][  T942] usb 3-1: New USB device found, idVendor=0c52, idProduct=2442, bcdDevice=f8.3f
[   84.529693][  T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.534821][   T36] audit: type=1400 audit(1756441886.120:430): avc:  denied  { create } for  pid=3650 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   84.538356][  T942] usb 3-1: Product: syz
[   84.558994][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'.
[   84.562286][  T942] usb 3-1: Manufacturer: syz
[   84.572065][ T3651] erspan0: default FDB implementation only supports local addresses
[   84.576234][  T942] usb 3-1: SerialNumber: syz
[   84.589265][ T3638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   84.596596][ T3638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   84.723921][   T36] audit: type=1326 audit(1756441886.300:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13ec98ebe9 code=0x0
[   84.877056][   T36] audit: type=1326 audit(1756441886.450:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec98ebe9 code=0x7fc00000
[   84.901017][   T36] audit: type=1326 audit(1756441886.450:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f13ec98ebe9 code=0x7fc00000
[   84.909747][ T3661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90
[   85.031522][  T942] ftdi_sio 3-1:6.215: FTDI USB Serial Device converter detected
[   85.050230][  T942] ftdi_sio ttyUSB0: unknown device type: 0xf83f
[   85.060438][  T942] usb 3-1: USB disconnect, device number 22
[   85.068415][  T942] ftdi_sio 3-1:6.215: device disconnected
[   85.482881][ T3668] tipc: Started in network mode
[   85.489776][ T3668] tipc: Node identity 1a8a7412c93e, cluster identity 4711
[   85.498225][ T3668] tipc: Enabled bearer <eth:xfrm0>, priority 10
[   85.524669][ T3672] overlayfs: failed to clone upperpath
[   85.531328][ T3672] 9pnet: Could not find request transport: xen
[   85.533622][ T3673] 9pnet: Could not find request transport: xen
[   85.547709][    T9] rust_binder: 3637: removing orphan mapping 0:24
[   86.463680][ T3735] binder: Bad value for 'max'
[   86.571001][ T3761] netlink: 'syz.3.1118': attribute type 4 has an invalid length.
[   86.589712][ T3761] netlink: 'syz.3.1118': attribute type 4 has an invalid length.
[   86.617886][    T9] tipc: Node number set to 3551818770
[   86.798741][ T3787] netlink: 'syz.2.1128': attribute type 27 has an invalid length.
[   86.848432][ T3795] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1132'.
[   87.752149][ T3877] overlayfs: failed to clone lowerpath
[   88.426845][ T3911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3911 comm=syz.1.1172
[   88.506104][ T3915] fuse: Bad value for 'rootmode'
[   88.554169][ T3934] fuse: Unknown parameter 'gr:���ou�����H}_��;S@�h�*~�@�|�xă���Ɛ}K$e~Vyt<
~�ib?pA��-�F�/H�EW�z��K�x��Rw��3)���è�Z��o��AqCEb�9��T{���E��bw��'
[   88.718888][ T3957] overlayfs: failed to clone upperpath
[   88.738940][   T36] kauditd_printk_skb: 6896 callbacks suppressed
[   88.738958][   T36] audit: type=1400 audit(1756441890.320:7330): avc:  denied  { write } for  pid=3958 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.100156][ T3962] 9pnet_fd: Insufficient options for proto=fd
[   89.228945][   T36] audit: type=1400 audit(1756441890.810:7331): avc:  denied  { ioctl } for  pid=3963 comm="syz.3.1188" path="socket:[18726]" dev="sockfs" ino=18726 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.305852][ T3978] fuse: Bad value for 'group_id'
[   89.311816][ T3978] fuse: Bad value for 'group_id'
[   89.332175][   T36] audit: type=1400 audit(1756441890.910:7332): avc:  denied  { map } for  pid=3982 comm="syz.3.1193" path="socket:[18757]" dev="sockfs" ino=18757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   89.356690][   T36] audit: type=1400 audit(1756441890.910:7333): avc:  denied  { read } for  pid=3982 comm="syz.3.1193" path="socket:[18757]" dev="sockfs" ino=18757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   89.397454][ T3987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1195'.
[   89.572774][ T4012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'.
[   89.720379][   T36] audit: type=1326 audit(1756441891.300:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   89.745979][   T36] audit: type=1326 audit(1756441891.300:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   89.804804][   T36] audit: type=1326 audit(1756441891.320:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   89.829745][   T36] audit: type=1326 audit(1756441891.320:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   89.855307][   T36] audit: type=1326 audit(1756441891.320:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   89.886877][   T36] audit: type=1326 audit(1756441891.320:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[   90.020844][ T4053] overlay: ./file0 is not a directory
[   90.178612][ T4063] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   90.785094][ T4128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1248'.
[   90.885517][ T4139] veth1: entered allmulticast mode
[   90.891203][ T4138] veth1: left allmulticast mode
[   91.207008][ T4171] netlink: 'syz.2.1263': attribute type 28 has an invalid length.
[   91.344988][ T4179] netlink: 'syz.1.1266': attribute type 11 has an invalid length.
[   91.595543][ T4230] fuse: Unknown parameter '��'
[   91.616881][ T4234] No source specified
[   91.729468][ T4252] fuse: Unknown parameter 'grnup_id'
[   91.868946][ T4276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1302'.
[   91.878934][ T4276] overlayfs: failed to clone upperpath
[   92.201967][ T4288] overlayfs: failed to clone upperpath
[   92.338686][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'.
[   92.650598][ T4357] overlayfs: failed to resolve './file1': -2
[   92.676718][ T4367] 9pnet_fd: Insufficient options for proto=fd
[   92.814949][ T4393] fuse: Unknown parameter 'mootmode'
[   93.253872][ T4401] 9pnet_fd: Insufficient options for proto=fd
[   93.370863][ T4416] fuse: Bad value for 'fd'
[   93.397082][ T4418] overlayfs: failed to clone upperpath
[   93.413239][ T4420] incfs: Error accessing: ./file0.
[   93.418978][ T4420] incfs: mount failed -2
[   94.111948][ T4464] overlayfs: failed to clone upperpath
[   94.170551][ T4482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4482 comm=syz.1.1378
[   94.839422][ T4510] 9pnet_fd: Insufficient options for proto=fd
[   94.853526][ T4513] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   94.874076][   T36] kauditd_printk_skb: 32 callbacks suppressed
[   94.874092][   T36] audit: type=1400 audit(1756441896.128:7372): avc:  denied  { map } for  pid=4517 comm="syz.1.1390" path="socket:[19390]" dev="sockfs" ino=19390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   94.905310][   T36] audit: type=1400 audit(1756441896.128:7373): avc:  denied  { read } for  pid=4517 comm="syz.1.1390" path="socket:[19390]" dev="sockfs" ino=19390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   94.929835][   T36] audit: type=1400 audit(1756441896.175:7374): avc:  denied  { create } for  pid=4521 comm="syz.1.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   94.952005][   T36] audit: type=1400 audit(1756441896.175:7375): avc:  denied  { write } for  pid=4521 comm="syz.1.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   95.155026][ T4551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4551 comm=syz.2.1402
[   95.527176][   T36] audit: type=1400 audit(1756441896.736:7376): avc:  denied  { create } for  pid=4582 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   95.547880][   T36] audit: type=1400 audit(1756441896.755:7377): avc:  denied  { create } for  pid=4584 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   95.568248][   T36] audit: type=1400 audit(1756441896.755:7378): avc:  denied  { sys_admin } for  pid=4584 comm="syz.0.1413" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   95.741640][   T36] audit: type=1400 audit(1756441896.932:7379): avc:  denied  { create } for  pid=4602 comm="syz.3.1418" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[   95.850689][ T4623] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1424'.
[   95.940187][   T36] audit: type=1400 audit(1756441897.119:7380): avc:  denied  { nlmsg_write } for  pid=4626 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   95.973750][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'.
[   96.153311][ T4672] overlayfs: failed to clone upperpath
[   96.280829][   T36] audit: type=1400 audit(1756441897.437:7381): avc:  denied  { write } for  pid=4702 comm="syz.0.1455" dev="sockfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.370713][ T4728] 9pnet_fd: Insufficient options for proto=fd
[   96.377867][ T4735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1463'.
[   96.517682][ T4755] netlink: 'syz.3.1472': attribute type 27 has an invalid length.
[   96.526962][ T4755] 9pnet_fd: Insufficient options for proto=fd
[   96.554668][ T4749] 9pnet_fd: Insufficient options for proto=fd
[   97.517483][ T4805] netlink: 'syz.0.1489': attribute type 16 has an invalid length.
[   97.525887][ T4805] netlink: 'syz.0.1489': attribute type 3 has an invalid length.
[   97.534108][ T4805] netlink: 'syz.0.1489': attribute type 1 has an invalid length.
[   97.543630][ T4805] netlink: 64030 bytes leftover after parsing attributes in process `syz.0.1489'.
[   97.706156][ T4827] overlayfs: failed to clone upperpath
[   98.140368][ T4833] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1502'.
[   98.150591][ T4833] tc_dump_action: action bad kind
[   98.318802][ T4877] SELinux:  Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped).
[   98.578367][ T4899] tipc: Started in network mode
[   98.583546][ T4899] tipc: Node identity 100, cluster identity 4711
[   98.590163][ T4899] tipc: Node number set to 256
[   98.971068][ T4965] fuse: Bad value for 'fd'
[   99.051806][ T4990] tipc: Enabling of bearer <eth:syzkaller0 > rejected, failed to enable media
[   99.061826][ T4990] fuse: Bad value for 'group_id'
[   99.067390][ T4990] fuse: Bad value for 'group_id'
[   99.079369][ T4993] 9pnet_fd: Insufficient options for proto=fd
[   99.203155][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'.
[   99.213512][ T4998] netlink: 'syz.3.1561': attribute type 3 has an invalid length.
[   99.652850][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'.
[   99.854511][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[   99.891814][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  100.009326][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[  100.365006][ T5090] fuseblk: Bad value for 'group_id'
[  100.370383][ T5090] fuseblk: Bad value for 'group_id'
[  100.429637][ T5095] fuse: Unknown parameter ''
[  100.987398][   T36] kauditd_printk_skb: 11 callbacks suppressed
[  100.987413][   T36] audit: type=1400 audit(1756441901.842:7393): avc:  denied  { getopt } for  pid=5111 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.170361][   T36] audit: type=1326 audit(1756441902.010:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.1612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7477b8ebe9 code=0x0
[  101.939828][   T36] audit: type=1326 audit(1756441902.730:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec98ebe9 code=0x7fc00000
[  101.974184][ T5172] SELinux:  Context �1i is not valid (left unmapped).
[  101.982704][   T36] audit: type=1400 audit(1756441902.777:7396): avc:  denied  { create } for  pid=5171 comm="syz.3.1616" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  101.993838][ T5172] overlayfs: failed to clone upperpath
[  102.006343][   T36] audit: type=1400 audit(1756441902.777:7397): avc:  denied  { associate } for  pid=5171 comm="syz.3.1616" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=830B3169
[  102.036237][   T36] audit: type=1400 audit(1756441902.786:7398): avc:  denied  { mounton } for  pid=5171 comm="syz.3.1616" path="/464/bus" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  102.041319][ T5172] overlayfs: failed to clone lowerpath
[  102.061232][   T36] audit: type=1400 audit(1756441902.824:7399): avc:  denied  { write } for  pid=5171 comm="syz.3.1616" name="bus" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  102.094208][   T36] audit: type=1400 audit(1756441902.824:7400): avc:  denied  { add_name } for  pid=5171 comm="syz.3.1616" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  102.129147][   T36] audit: type=1400 audit(1756441902.824:7401): avc:  denied  { remove_name } for  pid=5171 comm="syz.3.1616" name=".index" dev="tmpfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  102.155041][   T36] audit: type=1400 audit(1756441902.824:7402): avc:  denied  { rmdir } for  pid=5171 comm="syz.3.1616" name=".index" dev="tmpfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=830B3169
[  102.301275][ T5198] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1625'.
[  102.310522][ T5198] 0��{X��: renamed from gretap0 (while UP)
[  102.317735][ T5198] 0��{X��: entered allmulticast mode
[  102.324369][ T5198] net_ratelimit: 22 callbacks suppressed
[  102.324382][ T5198] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  104.110160][ T5239] overlayfs: failed to clone upperpath
[  104.148903][ T5247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.407330][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'.
[  104.549464][ T5285] fuse: Bad value for 'fd'
[  104.601610][ T5300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1662'.
[  104.611897][ T5300] tipc: Invalid UDP bearer configuration
[  104.611930][ T5300] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.360865][ T5318] 9pnet_fd: Insufficient options for proto=fd
[  105.636242][ T5340] fuse: Unknown parameter 'fd9[ܴ�v*p�"g�����`'
[  105.999198][ T5371] fuseblk: Bad value for 'user_id'
[  106.004658][ T5371] fuseblk: Bad value for 'user_id'
[  106.916367][ T5385] futex_wake_op: syz.0.1694 tries to shift op by 144; fix this program
[  107.255576][ T5410] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  107.320511][ T5418] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1704'.
[  107.342864][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  107.342881][   T36] audit: type=1400 audit(1756441907.780:7410): avc:  denied  { bind } for  pid=5421 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  107.378164][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'.
[  107.430410][ T5430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5430 comm=syz.1.1710
[  107.444882][ T5430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5430 comm=syz.1.1710
[  108.455953][ T5466] netlink: 'syz.2.1724': attribute type 13 has an invalid length.
[  109.049943][   T36] audit: type=1400 audit(1756441909.369:7411): avc:  denied  { map } for  pid=5497 comm="syz.3.1738" path="socket:[22516]" dev="sockfs" ino=22516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  109.078174][   T36] audit: type=1400 audit(1756441909.369:7412): avc:  denied  { mounton } for  pid=5497 comm="syz.3.1738" path="/494/file0" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  109.127171][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'.
[  109.380592][   T36] audit: type=1400 audit(1756441909.687:7413): avc:  denied  { create } for  pid=5521 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  109.402260][   T36] audit: type=1400 audit(1756441909.697:7414): avc:  denied  { accept } for  pid=5521 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.496845][ T5551] netlink: 'syz.1.1759': attribute type 4 has an invalid length.
[  109.505575][ T5551] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1759'.
[  110.672165][   T36] audit: type=1326 audit(1756441910.894:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.1.1783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1d058ebe9 code=0x0
[  110.756065][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'.
[  110.797655][   T36] audit: type=1326 audit(1756441911.015:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.3.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ec98ebe9 code=0x0
[  110.859949][ T5654] netlink: 'syz.1.1790': attribute type 4 has an invalid length.
[  110.868198][ T5654] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1790'.
[  110.929009][ T5665] overlayfs: failed to clone upperpath
[  111.096530][ T5706] overlayfs: failed to resolve './file0': -2
[  111.183624][ T5710] veth1: entered allmulticast mode
[  111.191545][ T5709] veth1: left allmulticast mode
[  111.229363][ T5718] fuse: Bad value for 'user_id'
[  111.234384][ T5718] fuse: Bad value for 'user_id'
[  111.247315][ T5723] netlink: 'syz.1.1816': attribute type 3 has an invalid length.
[  111.255444][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'.
[  111.904762][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'.
[  111.914274][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'.
[  111.926241][   T36] audit: type=1400 audit(1756441912.072:7417): avc:  denied  { map } for  pid=5739 comm="syz.1.1822" path="socket:[23875]" dev="sockfs" ino=23875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  111.952401][   T36] audit: type=1400 audit(1756441912.072:7418): avc:  denied  { accept } for  pid=5739 comm="syz.1.1822" path="socket:[23875]" dev="sockfs" ino=23875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  112.145980][ T5747] veth0: entered promiscuous mode
[  112.151934][ T5746] veth0: left promiscuous mode
[  112.244260][   T36] audit: type=1400 audit(1756441912.362:7419): avc:  denied  { map } for  pid=5767 comm="syz.0.1832" path="socket:[23923]" dev="sockfs" ino=23923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  112.497381][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1837'.
[  112.530162][ T5778] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1836'.
[  113.009898][ T5806] overlayfs: failed to clone upperpath
[  113.478457][ T5830] tmpfs: Unknown parameter 'hugee'
[  113.663278][   T36] audit: type=1326 audit(1756441913.692:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.1855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13ec98ebe9 code=0x0
[  114.135301][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.142705][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.150922][ T5878] bridge_slave_0: entered allmulticast mode
[  114.157281][ T5878] bridge_slave_0: entered promiscuous mode
[  114.166423][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.179410][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.187486][ T5878] bridge_slave_1: entered allmulticast mode
[  114.194312][ T5878] bridge_slave_1: entered promiscuous mode
[  114.234372][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.241804][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.249240][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.256366][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.279456][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.287403][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.297914][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.305026][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.326077][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.333337][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.356185][ T5878] veth0_vlan: entered promiscuous mode
[  114.371044][ T5878] veth1_macvtap: entered promiscuous mode
[  114.409845][ T5910] __vm_enough_memory: 56 callbacks suppressed
[  114.409863][ T5910] __vm_enough_memory: pid: 5910, comm: syz.1.1869, bytes: 18014402804453376 not enough memory for the allocation
[  114.466831][ T5928] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.563010][ T5951] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  114.572368][ T5951] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  114.581413][ T5951] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  114.589835][ T5951] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  115.126093][ T5973] fuse: Bad value for 'user_id'
[  115.131522][ T5973] fuse: Bad value for 'user_id'
[  115.776546][ T6026] binder: Bad value for 'defcontext'
[  115.791296][ T6028] SELinux: security_context_str_to_sid () failed with errno=-22
[  116.284916][ T6061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1926'.
[  116.872417][ T6101] TCP: TCP_TX_DELAY enabled
[  117.153086][   T36] audit: type=1326 audit(1756441916.955:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.2.1955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  117.266413][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6158 comm=syz.2.1961
[  117.542259][ T6167] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1964'.
[  117.820423][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1970'.
[  117.888332][ T6194] overlayfs: failed to clone lowerpath
[  118.020885][ T6216] overlayfs: failed to clone lowerpath
[  118.074027][ T6223] netlink: 'syz.2.1983': attribute type 12 has an invalid length.
[  118.212124][   T36] audit: type=1326 audit(1756441917.946:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.236309][   T36] audit: type=1326 audit(1756441917.946:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.241713][ T6250] No source specified
[  118.271424][   T36] audit: type=1326 audit(1756441917.955:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.295693][   T36] audit: type=1326 audit(1756441917.955:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.319972][   T36] audit: type=1326 audit(1756441917.955:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.344265][   T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  118.351977][   T36] audit: type=1326 audit(1756441917.955:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.375999][   T36] audit: type=1326 audit(1756441917.955:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7477b8ebe9 code=0x7ffc0000
[  118.399837][   T36] audit: type=1326 audit(1756441917.955:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  118.538194][   T31] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  118.547434][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.555697][   T31] usb 2-1: Product: syz
[  118.559940][   T31] usb 2-1: Manufacturer: syz
[  118.564557][   T31] usb 2-1: SerialNumber: syz
[  118.569935][   T31] usb 2-1: config 0 descriptor??
[  118.575885][   T31] usb-storage 2-1:0.0: USB Mass Storage device detected
[  118.794122][   T31] usb 2-1: USB disconnect, device number 12
[  119.366928][ T6283] syz.1.2003: attempt to access beyond end of device
[  119.366928][ T6283] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  119.387560][ T6283] exFAT-fs (loop1): unable to read boot sector
[  119.394308][ T6283] exFAT-fs (loop1): failed to read boot sector
[  119.400640][ T6283] exFAT-fs (loop1): failed to recognize exfat type
[  119.441520][ T6300] 9pnet_fd: Insufficient options for proto=fd
[  119.530083][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  119.551598][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  119.561029][ T6317] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  119.626140][   T36] kauditd_printk_skb: 39 callbacks suppressed
[  119.626158][   T36] audit: type=1400 audit(1756441919.264:7469): avc:  denied  { accept } for  pid=6335 comm="syz.3.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  119.823499][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'.
[  119.861603][   T64] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  120.023566][   T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  120.034018][   T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  120.044251][   T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.058960][   T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  120.068320][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  120.077025][   T64] usb 2-1: Product: syz
[  120.081289][   T64] usb 2-1: Manufacturer: syz
[  120.085878][   T64] usb 2-1: SerialNumber: syz
[  120.308690][   T64] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  120.523510][   T36] audit: type=1400 audit(1756441920.106:7470): avc:  denied  { read write } for  pid=6330 comm="syz.1.2021" name="lp0" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  120.524198][ T6333] rust_binder: Error while translating object.
[  120.547484][   T36] audit: type=1400 audit(1756441920.106:7471): avc:  denied  { open } for  pid=6330 comm="syz.1.2021" path="/dev/usb/lp0" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  120.547652][ T6333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  120.577988][ T6333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89
[  120.591972][ T6333] random: crng reseeded on system resumption
[  120.628504][ T6333] rust_binder: Error while translating object.
[  120.628546][ T6333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.634922][ T6333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89
[  120.647220][   T64] usb 2-1: USB disconnect, device number 13
[  120.663691][   T64] usblp0: removed
[  120.855865][ T6424] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2051'.
[  120.916924][   T36] audit: type=1400 audit(1756441920.471:7472): avc:  denied  { watch_reads } for  pid=6437 comm="syz.0.2058" path="/492" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  120.939965][   T36] audit: type=1326 audit(1756441920.471:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.0.2058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7477b8ebe9 code=0x0
[  121.193045][ T6441] binder: Unknown parameter '01777777777777777777777'
[  121.211432][   T36] audit: type=1400 audit(1756441920.751:7474): avc:  denied  { accept } for  pid=6442 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  121.265823][   T36] audit: type=1400 audit(1756441920.807:7475): avc:  denied  { map } for  pid=6451 comm="syz.1.2063" path="/35/bus" dev="overlay" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  121.288898][   T36] audit: type=1400 audit(1756441920.807:7476): avc:  denied  { execute } for  pid=6451 comm="syz.1.2063" path="/35/bus" dev="overlay" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  121.312236][   T36] audit: type=1326 audit(1756441920.807:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.1.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  121.442596][ T6460] netlink: 'syz.3.2065': attribute type 1 has an invalid length.
[  121.607925][ T6475] 9pnet_fd: p9_fd_create_tcp (6475): problem connecting socket to 127.0.0.1
[  122.449787][  T489] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  122.611318][  T489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64
[  122.622421][  T489] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.635742][  T489] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  122.645030][  T489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.656421][  T489] usb 2-1: config 0 descriptor??
[  122.661766][ T6494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  123.025186][   T36] audit: type=1326 audit(1756441922.443:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.2.2083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  123.098525][  T489] acrux 0003:1A34:0802.0008: unknown main item tag 0x0
[  123.105714][  T489] acrux 0003:1A34:0802.0008: unknown main item tag 0x0
[  123.112679][  T489] acrux 0003:1A34:0802.0008: unknown main item tag 0x0
[  123.120873][  T489] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.fe Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0
[  123.141997][  T489] acrux 0003:1A34:0802.0008: no inputs found
[  123.148208][  T489] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19
[  123.474756][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.484001][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.486707][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.501047][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.512529][   T64] usb 2-1: USB disconnect, device number 14
[  124.990462][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  124.990479][   T36] audit: type=1326 audit(1756441924.285:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.1.2105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  125.046368][   T36] audit: type=1400 audit(1756441924.332:7482): avc:  denied  { audit_read } for  pid=6577 comm="syz.1.2105" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  125.092602][ T6589] netlink: 'syz.3.2109': attribute type 16 has an invalid length.
[  125.100812][ T6589] netlink: 'syz.3.2109': attribute type 3 has an invalid length.
[  125.109214][ T6589] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2109'.
[  125.147781][ T6595] 9pnet_fd: Insufficient options for proto=fd
[  125.261290][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'.
[  125.846377][  T292] bridge_slave_1: left allmulticast mode
[  125.852430][  T292] bridge_slave_1: left promiscuous mode
[  125.858543][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.867758][  T292] tipc: Resetting bearer <eth:xfrm0>
[  125.890518][  T292] tipc: Disabling bearer <eth:xfrm0>
[  125.970389][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.977744][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.984941][ T6610] bridge_slave_0: entered allmulticast mode
[  125.991282][ T6610] bridge_slave_0: entered promiscuous mode
[  125.997584][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.004654][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.012050][ T6610] bridge_slave_1: entered allmulticast mode
[  126.018360][ T6610] bridge_slave_1: entered promiscuous mode
[  126.067360][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.074583][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.082431][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.089669][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.117390][ T6625] erofs: Unknown parameter '^]&�'!{'
[  126.145212][  T292] tipc: Left network mode
[  126.148469][ T6610] veth0_vlan: entered promiscuous mode
[  126.157893][  T292] veth1_macvtap: left promiscuous mode
[  126.164529][  T292] veth0_vlan: left promiscuous mode
[  126.241905][ T6610] veth1_macvtap: entered promiscuous mode
[  126.514097][ T6653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  126.514133][ T6653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151
[  126.569231][   T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.626536][ T6655] rust_binder: Write failure EFAULT in pid:153
[  126.738565][   T64] usb 4-1: Using ep0 maxpacket: 16
[  126.751910][   T64] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  126.761035][   T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.771429][   T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.782532][   T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.791747][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.800224][   T64] usb 4-1: Product: syz
[  126.804835][   T64] usb 4-1: Manufacturer: syz
[  126.809579][   T64] usb 4-1: SerialNumber: syz
[  126.859747][   T36] audit: type=1400 audit(1756441926.034:7483): avc:  denied  { load_policy } for  pid=6658 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  126.859888][ T6659] SELinux: failed to load policy
[  126.889906][ T6659] rust_binder: Error in use_page_slow: ESRCH
[  126.889928][ T6659] rust_binder: use_range failure ESRCH
[  126.896058][ T6659] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false
[  126.901693][ T6659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  126.910067][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:157
[  127.043528][   T64] usb 4-1: 0:2 : does not exist
[  127.061666][   T64] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[  127.073843][   T64] usb 4-1: USB disconnect, device number 5
[  127.082082][ T6664] udevd[6664]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  127.147629][ T6669] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2137'.
[  127.158081][ T6669] af_packet: tpacket_rcv: packet too big, clamped from 592 to 4294967272. macoff=96
[  127.198467][  T533] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  127.287473][   T64] rust_binder: 6668: removing orphan mapping 0:24
[  127.301668][   T64] rust_binder: 0: removing orphan mapping 24:96
[  127.324290][   T36] audit: type=1326 audit(1756441926.464:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.2.2141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  127.358885][  T533] usb 2-1: Using ep0 maxpacket: 8
[  127.365503][  T533] usb 2-1: unable to get BOS descriptor or descriptor too short
[  127.375866][  T533] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  127.384677][  T533] usb 2-1: config 0 has no interface number 0
[  127.391230][  T533] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  127.402603][  T533] usb 2-1: config 0 interface 88 has no altsetting 0
[  127.412387][  T533] usb 2-1: string descriptor 0 read error: -22
[  127.419250][  T533] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  127.429382][  T533] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  127.439939][  T533] usb 2-1: config 0 descriptor??
[  127.447102][  T533] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input6
[  127.562102][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  127.663974][  T533] usb 2-1: USB disconnect, device number 15
[  127.723963][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  127.735977][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.746062][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  127.759995][   T31] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00
[  127.769278][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.779433][   T31] usb 4-1: config 0 descriptor??
[  128.210821][   T36] audit: type=1400 audit(1756441927.296:7485): avc:  denied  { mounton } for  pid=6682 comm="syz.2.2142" path="/278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  128.257018][   T31] saitek 0003:0738:1709.0009: unknown main item tag 0x0
[  128.264494][   T31] saitek 0003:0738:1709.0009: unknown main item tag 0x0
[  128.272378][   T31] saitek 0003:0738:1709.0009: unknown main item tag 0x0
[  128.286942][   T31] saitek 0003:0738:1709.0009: unknown main item tag 0x0
[  128.295594][   T31] saitek 0003:0738:1709.0009: unknown main item tag 0x0
[  128.305548][   T31] saitek 0003:0738:1709.0009: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.3-1/input0
[  128.335228][ T6691] SELinux:  Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped).
[  128.346278][   T36] audit: type=1400 audit(1756441927.427:7486): avc:  denied  { relabelto } for  pid=6690 comm="syz.1.2145" name="file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  128.375465][   T36] audit: type=1400 audit(1756441927.427:7487): avc:  denied  { associate } for  pid=6690 comm="syz.1.2145" name="file0" dev="tmpfs" ino=321 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0"
[  128.493866][    T9] usb 4-1: USB disconnect, device number 6
[  128.508693][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'.
[  128.558732][   T36] audit: type=1400 audit(1756441927.623:7488): avc:  denied  { execute } for  pid=6715 comm="syz.0.2153" path="/dev/rnullb0" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  128.703596][ T6744] overlayfs: failed to clone lowerpath
[  128.720417][ T6746] 9pnet_fd: Insufficient options for proto=fd
[  129.402129][ T6770] 9pnet_fd: Insufficient options for proto=fd
[  129.430607][ T6772] rust_binder: Error while translating object.
[  129.430642][ T6772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  129.437707][ T6772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:177
[  129.501427][ T6776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21
[  129.515098][ T6776] rust_binder: Read failure Err(EFAULT) in pid:21
[  129.541876][ T6779] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.694014][   T36] audit: type=1400 audit(1756441928.680:7489): avc:  denied  { append } for  pid=6773 comm="syz.1.2172" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.798966][   T36] audit: type=1400 audit(1756441928.783:7490): avc:  denied  { getopt } for  pid=6792 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  129.904315][   T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  130.064772][   T45] usb 4-1: Using ep0 maxpacket: 32
[  130.072064][   T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  130.081157][   T45] usb 4-1: config 0 has no interface number 0
[  130.089143][   T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  130.099038][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.107377][   T45] usb 4-1: Product: syz
[  130.111708][   T45] usb 4-1: Manufacturer: syz
[  130.117074][   T45] usb 4-1: SerialNumber: syz
[  130.122818][   T45] usb 4-1: config 0 descriptor??
[  130.129045][   T45] smsc95xx v2.0.0
[  130.492562][  T489] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  130.639550][   T36] audit: type=1400 audit(1756441929.568:7491): avc:  denied  { map } for  pid=6829 comm="syz.2.2194" path="socket:[28201]" dev="sockfs" ino=28201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  130.665784][  T489] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.676913][  T489] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.687546][  T489] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  130.696688][  T489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.705050][  T489] usb 2-1: SerialNumber: syz
[  130.846237][   T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  130.858068][   T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  130.868902][   T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  130.881107][   T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  130.890828][   T45] usb 4-1: USB disconnect, device number 7
[  130.934055][  T489] usb 2-1: 0:2 : does not exist
[  130.941402][  T489] usb 2-1: USB disconnect, device number 16
[  131.226104][   T36] audit: type=1400 audit(1756441930.110:7492): avc:  denied  { shutdown } for  pid=6849 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  131.495566][   T36] audit: type=1400 audit(1756441930.363:7493): avc:  denied  { unmount } for  pid=5878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  131.562088][ T6861] rust_binder: Error while translating object.
[  131.562134][ T6861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  131.568931][ T6861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[  131.760103][ T6871] fuse: Bad value for 'rootmode'
[  132.510002][   T36] audit: type=1326 audit(1756441931.317:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.0.2215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x0
[  132.564296][ T6900] tmpfs: Unknown parameter '����01777777777777777777777����'
[  132.585420][ T6903] incfs: Can't find or create .index dir in ./file0
[  132.588821][   T36] audit: type=1400 audit(1756441931.382:7495): avc:  denied  { mounton } for  pid=6902 comm="syz.1.2220" path="/69/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.592455][ T6903] incfs: mount failed -30
[  132.629499][   T36] audit: type=1400 audit(1756441931.419:7496): avc:  denied  { write } for  pid=6902 comm="syz.1.2220" name="route" dev="proc" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  132.655198][ T6903] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  132.666060][ T6903] SELinux:  Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped).
[  132.677060][   T36] audit: type=1400 audit(1756441931.475:7497): avc:  denied  { relabelto } for  pid=6902 comm="syz.1.2220" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0"
[  132.705070][   T36] audit: type=1400 audit(1756441931.475:7498): avc:  denied  { associate } for  pid=6902 comm="syz.1.2220" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tzdata_exec_t:s0"
[  132.891861][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'.
[  132.901770][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'.
[  132.911087][ T6909] erspan0: default FDB implementation only supports local addresses
[  132.919710][ T6909] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36
[  132.919727][ T6909] rust_binder: Error while translating object.
[  132.928723][ T6909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  132.935469][ T6909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206
[  133.325279][ T6913] netlink: 'syz.3.2224': attribute type 16 has an invalid length.
[  133.440883][   T36] audit: type=1326 audit(1756441932.186:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6928 comm="syz.0.2229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7477b8ebe9 code=0x0
[  133.488549][    T9] rust_binder: 0: removing orphan mapping 0:24
[  133.499513][ T6931] overlayfs: failed to resolve './file0/file0': -2
[  133.673968][   T36] audit: type=1326 audit(1756441932.401:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6907 comm="syz.1.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649eb8ebe9 code=0x7fc00000
[  133.786663][   T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  133.969910][   T45] usb 4-1: not running at top speed; connect to a high speed hub
[  133.978631][   T45] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  133.989917][   T45] usb 4-1: config 1 interface 0 has no altsetting 0
[  133.998408][   T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  134.007725][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.016366][   T45] usb 4-1: Product: syz
[  134.020597][   T45] usb 4-1: Manufacturer: syz
[  134.025497][   T45] usb 4-1: SerialNumber: syz
[  134.031611][ T6929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  134.225191][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  134.300195][   T45] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 253 proto 3 vid 0x0525 pid 0xA4A8
[  134.312687][   T45] usb 4-1: USB disconnect, device number 8
[  134.319437][   T45] usblp0: removed
[  134.396286][    T9] usb 2-1: Using ep0 maxpacket: 32
[  134.402908][    T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  134.413074][    T9] usb 2-1: config 0 has no interface number 0
[  134.419610][    T9] usb 2-1: config 0 interface 184 has no altsetting 0
[  134.428100][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  134.437917][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.446370][    T9] usb 2-1: Product: syz
[  134.450845][    T9] usb 2-1: Manufacturer: syz
[  134.455528][    T9] usb 2-1: SerialNumber: syz
[  134.460973][    T9] usb 2-1: config 0 descriptor??
[  134.467237][    T9] smsc75xx v1.0.0
[  134.875674][ T6958] pim6reg1: entered promiscuous mode
[  134.881126][ T6958] pim6reg1: entered allmulticast mode
[  135.043671][ T6967] overlayfs: failed to clone upperpath
[  135.094048][ T6968] rust_binder: Error while translating object.
[  135.094089][ T6968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  135.100540][ T6968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64
[  135.110090][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[  135.131465][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  135.324259][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  135.335910][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  135.345837][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  135.356272][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  135.365985][    T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32
[  135.603888][ T6986] overlayfs: failed to clone upperpath
[  135.706233][   T45] usb 2-1: USB disconnect, device number 17
[  135.808625][ T7003] input: syz1 as /devices/virtual/input/input8
[  135.820721][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.829027][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.837066][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.845053][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.852767][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.860415][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.867958][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.875775][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.883471][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.891795][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.899585][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.907255][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.915062][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.922766][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.930744][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.941927][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.950352][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.958222][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.965938][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.973762][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.981484][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.989143][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  135.997710][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.005828][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.013378][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.021211][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.028710][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.039324][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.046880][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.054394][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.062137][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.071534][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.076384][ T7012] loop2: detected capacity change from 0 to 7
[  136.079588][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.093529][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.101349][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.110926][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.118698][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.126853][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.135042][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.142482][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.150211][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.157936][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.165641][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.173528][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.181672][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.189483][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.196972][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.204726][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.214495][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.223267][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.231557][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.239521][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.247300][ T7014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2260'.
[  136.256680][ T7014] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2260'.
[  136.265856][ T7014] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2260'.
[  136.275218][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.282825][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.291042][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.298950][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.306476][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.314064][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.321773][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.332468][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.339971][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.348689][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.356469][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.364059][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.371744][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.379846][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.387719][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.396006][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.403506][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.411015][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.418515][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.425952][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.433424][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.441354][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.448871][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.456330][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.463974][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.471539][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.479083][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.486718][    T9] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  136.495415][    T9] hid-generic 0003:0008:000F.000A: hidraw0: USB HID v0.00 Device [syz1] on syz0
[  136.531662][ T7021] fido_id[7021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  136.731884][    T9] rust_binder: 7058: removing orphan mapping 0:24
[  137.079476][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  137.079492][   T36] audit: type=1400 audit(1756441935.580:7503): avc:  denied  { execheap } for  pid=7072 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  137.225573][   T36] audit: type=1400 audit(1756441935.720:7504): avc:  denied  { watch } for  pid=7077 comm="syz.2.2281" path="/327/file0" dev="tmpfs" ino=1796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  137.249756][   T36] audit: type=1326 audit(1756441935.739:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  137.562057][  T533] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  137.722622][  T533] usb 4-1: Invalid ep0 maxpacket: 64
[  137.861552][  T533] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  138.021958][  T533] usb 4-1: Invalid ep0 maxpacket: 64
[  138.027703][  T533] usb usb4-port1: attempt power cycle
[  138.140033][ T7091] overlayfs: failed to clone upperpath
[  138.396311][  T533] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  138.418146][  T533] usb 4-1: Invalid ep0 maxpacket: 64
[  138.557270][  T533] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  138.578602][  T533] usb 4-1: Invalid ep0 maxpacket: 64
[  138.584481][  T533] usb usb4-port1: unable to enumerate USB device
[  138.815108][ T7109] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[  139.015902][ T7114] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  139.428196][ T7125] tipc: Started in network mode
[  139.441645][ T7125] tipc: Node identity ac14140f, cluster identity 4711
[  139.448770][ T7125] tipc: New replicast peer: 255.255.255.255
[  139.454893][ T7125] tipc: Enabled bearer <udp:syz2>, priority 10
[  139.918574][ T7151] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  140.246572][   T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  140.417662][   T64] usb 2-1: Using ep0 maxpacket: 32
[  140.424328][   T64] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  140.433335][   T64] usb 2-1: config 0 has no interface number 0
[  140.441662][   T64] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  140.451314][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.459496][   T64] usb 2-1: Product: syz
[  140.464064][   T64] usb 2-1: Manufacturer: syz
[  140.468679][   T64] usb 2-1: SerialNumber: syz
[  140.474429][   T64] usb 2-1: config 0 descriptor??
[  140.481180][   T64] smsc95xx v2.0.0
[  140.535256][ T7191] rust_binder: Error while translating object.
[  140.535329][ T7191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  140.541531][ T7191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[  140.642287][   T45] tipc: Node number set to 2886997007
[  140.647667][ T7201] rust_binder: Error while translating object.
[  140.657323][ T7201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  140.663963][ T7201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102
[  141.340580][   T36] audit: type=1400 audit(1756441939.573:7506): avc:  denied  { setattr } for  pid=7159 comm="syz.1.2307" name="file0" dev="incremental-fs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  141.383928][   T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  141.419001][   T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  141.423899][ T7223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7223 comm=syz.3.2328
[  141.434694][   T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  141.454680][ T7225] overlayfs: failed to clone upperpath
[  141.462942][   T64] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  141.475268][   T36] audit: type=1400 audit(138.076:7507): avc:  denied  { setattr } for  pid=7222 comm="syz.3.2328" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  141.480281][   T64] usb 2-1: USB disconnect, device number 18
[  141.513054][   T36] audit: type=1326 audit(138.114:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.1.2330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  141.572030][ T7234] overlayfs: failed to clone upperpath
[  141.709092][   T36] audit: type=1326 audit(138.301:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.0.2337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7477b8ebe9 code=0x0
[  141.820907][ T7251] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2337'.
[  141.830438][ T7250] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2337'.
[  141.878716][ T7261] overlayfs: failed to resolve './file0': -2
[  141.938469][ T7272] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  142.151754][ T7292] devpts: called with bogus options
[  142.307944][ T7321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2361'.
[  143.139688][   T36] audit: type=1400 audit(139.638:7510): avc:  denied  { write } for  pid=7369 comm="syz.3.2378" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  143.160679][   T36] audit: type=1400 audit(139.638:7511): avc:  denied  { open } for  pid=7369 comm="syz.3.2378" path="/49/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  143.390943][   T64] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  143.406170][ T7380] 9pnet_fd: Insufficient options for proto=fd
[  143.426958][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  143.551352][   T64] usb 4-1: Using ep0 maxpacket: 32
[  143.557806][   T64] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  143.568765][   T64] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  143.583608][   T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.593943][   T64] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  143.608289][   T64] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  143.618349][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.632412][   T64] usb 4-1: config 0 descriptor??
[  143.864616][   T64] usb 4-1: USB disconnect, device number 13
[  144.495339][ T7413] binder: Bad value for 'max'
[  144.711632][   T36] audit: type=1326 audit(141.106:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.2.2406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  144.857917][   T36] audit: type=1400 audit(141.246:7513): avc:  denied  { lock } for  pid=7456 comm="syz.0.2409" path="socket:[30785]" dev="sockfs" ino=30785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  145.619197][   T13] bridge_slave_1: left allmulticast mode
[  145.625079][   T13] bridge_slave_1: left promiscuous mode
[  145.641689][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.649749][   T13] bridge_slave_0: left allmulticast mode
[  145.655631][   T13] bridge_slave_0: left promiscuous mode
[  145.661711][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.733246][ T7467] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2413'.
[  145.768743][   T13] veth1_macvtap: left promiscuous mode
[  145.774563][   T13] veth0_vlan: left promiscuous mode
[  145.878477][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.889712][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.903763][ T7471] bridge_slave_0: entered allmulticast mode
[  145.910650][ T7471] bridge_slave_0: entered promiscuous mode
[  145.924562][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.947133][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.956606][ T7471] bridge_slave_1: entered allmulticast mode
[  145.963061][ T7471] bridge_slave_1: entered promiscuous mode
[  145.999801][ T7507] overlayfs: failed to clone upperpath
[  146.029554][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.037005][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.044666][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.051693][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.072293][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.080597][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.091200][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.098893][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.109300][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.117248][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.144835][ T7471] veth0_vlan: entered promiscuous mode
[  146.157738][ T7471] veth1_macvtap: entered promiscuous mode
[  146.205060][ T7524] rust_binder: Error while translating object.
[  146.205088][ T7524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  146.211433][ T7524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:7
[  146.230506][ T7527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9
[  146.230510][ T7528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9
[  146.257469][ T7530] /dev/rnullb0: Can't open blockdev
[  146.281731][ T7532] rust_binder: Write failure EFAULT in pid:15
[  146.294008][   T36] audit: type=1400 audit(142.592:7514): avc:  denied  { mounton } for  pid=7535 comm="syz.3.2433" path="/proc/19/cgroup" dev="proc" ino=32065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  146.604616][   T64] usb 1-1: USB disconnect, device number 4
[  146.705425][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.712909][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.720508][ T7541] bridge_slave_0: entered allmulticast mode
[  146.726880][ T7541] bridge_slave_0: entered promiscuous mode
[  146.734715][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.742285][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.750271][ T7541] bridge_slave_1: entered allmulticast mode
[  146.756829][ T7541] bridge_slave_1: entered promiscuous mode
[  146.802323][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.810877][ T7541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.818942][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.826469][ T7541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.849783][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.857973][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.869239][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.877142][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.888637][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.896484][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.904651][   T36] audit: type=1400 audit(143.144:7515): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=580 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  146.942714][   T36] audit: type=1400 audit(143.144:7516): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=580 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  146.971092][ T7541] veth0_vlan: entered promiscuous mode
[  146.975440][   T36] audit: type=1400 audit(143.144:7517): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=580 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  147.012143][ T7541] veth1_macvtap: entered promiscuous mode
[  147.138736][ T7592] netlink: 'syz.0.2449': attribute type 7 has an invalid length.
[  147.239307][ T7601] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  147.246916][ T7601] rust_binder: Write failure EINVAL in pid:20
[  147.383672][ T7613] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2455'.
[  147.401943][ T7613] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.402229][ T7613] rust_binder: Error while translating object.
[  147.409156][ T7614] rust_binder: Error while translating object.
[  147.412659][ T7613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  147.416029][ T7614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  147.422624][ T7613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32
[  147.432232][ T7614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32
[  147.557675][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'.
[  147.648629][   T36] audit: type=1400 audit(143.854:7518): avc:  denied  { getattr } for  pid=7628 comm="syz.2.2460" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=31144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.956511][ T7645] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2465'.
[  148.458277][ T7666] rust_binder: Error while translating object.
[  148.458311][ T7666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  148.464904][ T7666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41
[  148.505569][   T36] audit: type=1400 audit(144.659:7519): avc:  denied  { module_load } for  pid=7672 comm="syz.0.2474" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  148.543814][ T7673] /dev/rnullb0: Can't open blockdev
[  148.649311][ T7682] rust_binder: Error while translating object.
[  148.649355][ T7682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  148.656868][ T7682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57
[  148.767718][   T36] audit: type=1400 audit(144.902:7520): avc:  denied  { mount } for  pid=7693 comm="syz.0.2482" name="/" dev="ramfs" ino=32544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  148.828157][   T36] audit: type=1400 audit(144.958:7521): avc:  denied  { create } for  pid=7699 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  148.830213][ T7700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65
[  148.854595][ T7700] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.859887][   T36] audit: type=1400 audit(144.958:7522): avc:  denied  { write } for  pid=7699 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  148.894540][   T36] audit: type=1400 audit(144.958:7523): avc:  denied  { nlmsg_write } for  pid=7699 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  149.011873][ T7726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7726 comm=syz.2.2491
[  149.026105][ T7727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7727 comm=syz.2.2491
[  149.053518][ T7729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2492'.
[  149.063232][ T7729] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2492'.
[  149.085488][ T7729] netlink: 'syz.2.2492': attribute type 6 has an invalid length.
[  149.093728][ T7729] netlink: 'syz.2.2492': attribute type 5 has an invalid length.
[  149.102044][ T7729] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2492'.
[  149.185606][   T36] audit: type=1400 audit(145.285:7524): avc:  denied  { map } for  pid=7739 comm="syz.0.2496" path="socket:[31359]" dev="sockfs" ino=31359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  149.273358][   T31] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  149.434915][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64
[  149.446155][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.460038][   T31] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  149.469371][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.478547][   T31] usb 4-1: config 0 descriptor??
[  149.484026][ T7724] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.552046][ T7753] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  149.561085][   T36] audit: type=1400 audit(145.640:7525): avc:  denied  { execmem } for  pid=7749 comm="syz.0.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  149.627417][ T7761] overlayfs: disabling nfs_export due to verity=require
[  149.635080][ T7761] overlayfs: missing 'lowerdir'
[  149.850878][   T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  149.922039][   T31] acrux 0003:1A34:0802.000B: unknown global tag 0xd
[  149.928927][   T31] acrux 0003:1A34:0802.000B: item 0 2 1 13 parsing failed
[  149.936950][   T31] acrux 0003:1A34:0802.000B: parse failed
[  149.942792][   T31] acrux 0003:1A34:0802.000B: probe with driver acrux failed with error -22
[  150.000680][   T45] usb 1-1: device descriptor read/64, error -71
[  150.137078][ T7724] rust_binder: Error while translating object.
[  150.137122][ T7724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  150.144020][ T7724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:34
[  150.154925][   T64] usb 4-1: USB disconnect, device number 14
[  150.257254][   T45] usb 1-1: device descriptor read/64, error -71
[  150.292010][ T7803] netlink: 'syz.1.2517': attribute type 4 has an invalid length.
[  150.300113][ T7803] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2517'.
[  150.314038][ T7803] overlayfs: failed to clone upperpath
[  150.348641][   T36] audit: type=1400 audit(146.379:7526): avc:  denied  { bind } for  pid=7808 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  150.348980][ T7809] fuseblk: Unknown parameter '?�T�-�1�F�N('
[  150.391925][ T7811] overlayfs: failed to clone upperpath
[  150.459583][ T7821] 9pnet_fd: Insufficient options for proto=fd
[  150.475004][ T7823] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  150.513943][   T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  150.652968][   T45] usb 1-1: device descriptor read/64, error -71
[  150.717940][   T36] audit: type=1400 audit(146.725:7527): avc:  denied  { read } for  pid=7835 comm="syz.3.2528" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  150.742974][   T36] audit: type=1400 audit(146.725:7528): avc:  denied  { ioctl } for  pid=7835 comm="syz.3.2528" path="/12/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  150.909660][   T45] usb 1-1: device descriptor read/64, error -71
[  151.027396][   T45] usb usb1-port1: attempt power cycle
[  151.218779][ T7888] /dev/loop0: Can't lookup blockdev
[  151.391826][   T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  151.408942][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2547'.
[  151.413380][   T45] usb 1-1: device descriptor read/8, error -71
[  151.418258][ T7890] tipc: Invalid UDP bearer configuration
[  151.424939][ T7890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.563809][   T45] usb 1-1: device descriptor read/8, error -71
[  151.818968][   T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  151.830967][ T7907] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[  151.841385][   T45] usb 1-1: device descriptor read/8, error -71
[  151.991552][   T45] usb 1-1: device descriptor read/8, error -71
[  152.107619][   T45] usb usb1-port1: unable to enumerate USB device
[  152.161627][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  152.322719][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.333796][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.343998][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  152.357526][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  152.367881][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.377692][   T10] usb 4-1: config 0 descriptor??
[  152.815483][   T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd
[  152.837113][   T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  152.847027][   T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  153.187870][  T942] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  153.348136][  T942] usb 1-1: Using ep0 maxpacket: 8
[  153.359920][  T942] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.371339][  T942] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.382048][  T942] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.389022][  T942] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  153.398663][  T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.407564][  T942] usb 1-1: config 0 descriptor??
[  153.725192][ T7968] overlayfs: failed to clone upperpath
[  153.751810][ T7970] fuse: Bad value for 'fd'
[  153.845519][  T942] samsung 0003:0419:0001.000D: hidraw1: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0
[  153.961539][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  154.278812][   T64] usb 1-1: USB disconnect, device number 9
[  154.303896][ T7990] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2582'.
[  154.342901][  T942] usb 4-1: reset high-speed USB device number 15 using dummy_hcd
[  154.670859][ T8030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117
[  154.693592][ T8032] rust_binder: Write failure EFAULT in pid:119
[  154.832045][   T10] rust_binder: 8033: removing orphan mapping 0:24
[  154.845882][   T10] rust_binder: 0: removing orphan mapping 24:96
[  154.857600][ T8037] netlink: 'syz.0.2598': attribute type 46 has an invalid length.
[  154.905941][   T36] audit: type=1326 audit(406.637:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.0.2599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ea8b8ebe9 code=0x0
[  154.961680][ T8041] rust_binder: 126: no such ref 3
[  154.967563][ T8041] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  155.711821][  T942] usb 4-1: device descriptor read/64, error -71
[  155.829893][  T942] usb 4-1: device reset changed ep0 maxpacket size!
[  155.837404][   T31] usb 4-1: USB disconnect, device number 15
[  155.979194][   T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  156.086111][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  156.139592][   T31] usb 4-1: Using ep0 maxpacket: 8
[  156.150212][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.162495][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.173890][   T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  156.183685][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.192911][   T31] usb 4-1: config 0 descriptor??
[  156.258355][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.269906][   T10] usb 1-1: config 0 has no interfaces?
[  156.277162][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  156.287288][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  156.295734][   T10] usb 1-1: Product: syz
[  156.300166][   T10] usb 1-1: Manufacturer: syz
[  156.305483][   T10] usb 1-1: SerialNumber: syz
[  156.311313][   T10] usb 1-1: config 0 descriptor??
[  156.535078][ T8065] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  156.591160][ T8074] random: crng reseeded on system resumption
[  156.628294][   T31] kye 0003:0458:5015.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  156.639390][   T31] kye 0003:0458:5015.000E: unknown main item tag 0x0
[  156.646279][   T31] kye 0003:0458:5015.000E: unknown main item tag 0x0
[  156.654112][   T31] kye 0003:0458:5015.000E: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0
[  156.665442][   T31] kye 0003:0458:5015.000E: tablet-enabling feature report not found
[  156.675097][ T8076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[  156.675211][   T31] kye 0003:0458:5015.000E: tablet enabling failed
[  156.845092][ T8058] netlink: 'syz.3.2605': attribute type 16 has an invalid length.
[  156.854288][   T10] usb 4-1: USB disconnect, device number 16
[  157.000683][   T36] audit: type=1400 audit(408.600:7530): avc:  denied  { setopt } for  pid=8094 comm="syz.2.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.764548][   T36] audit: type=1326 audit(409.311:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  157.886010][   T36] audit: type=1326 audit(409.423:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  157.964765][   T36] audit: type=1326 audit(409.498:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.1.2623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649eb8ebe9 code=0x0
[  158.264098][ T8140] netlink: 'syz.1.2633': attribute type 27 has an invalid length.
[  159.027533][ T8181] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2647'.
[  159.045403][   T64] usb 1-1: USB disconnect, device number 10
[  159.229332][   T36] audit: type=1400 audit(410.676:7534): avc:  denied  { nlmsg_read } for  pid=8224 comm="syz.0.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  159.582230][ T8244] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  159.695752][ T8253] kvm: kvm [8252]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111
[  159.799148][ T8256] rust_binder: Error in use_page_slow: ESRCH
[  159.799173][ T8256] rust_binder: use_range failure ESRCH
[  159.805425][ T8256] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  159.811280][ T8256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  159.819975][ T8256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:92
[  159.915598][ T8264] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  160.021845][   T36] audit: type=1400 audit(411.415:7535): avc:  denied  { read } for  pid=8312 comm="syz.0.2686" dev="sockfs" ino=34378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  160.268493][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'.
[  160.283379][ T8365] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  160.293830][ T8365] rust_binder: 108: no such ref 0
[  160.316113][   T36] audit: type=1400 audit(411.695:7536): avc:  denied  { create } for  pid=8375 comm="syz.2.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.337230][   T36] audit: type=1400 audit(411.695:7537): avc:  denied  { watch_reads } for  pid=8374 comm="syz.1.2707" path="/215/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  160.360615][   T36] audit: type=1400 audit(411.705:7538): avc:  denied  { setcheckreqprot } for  pid=8378 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  160.685088][   T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  160.846748][   T64] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  160.860064][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.872637][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.882834][   T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  160.901485][   T64] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  160.912262][   T64] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  160.921009][   T64] usb 4-1: Manufacturer: syz
[  160.926305][   T64] usb 4-1: config 0 descriptor??
[  160.960820][ T8401] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.988591][ T8403] overlayfs: failed to resolve './file1': -2
[  161.001277][   T36] audit: type=1400 audit(412.340:7539): avc:  denied  { create } for  pid=8402 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  161.148101][   T36] audit: type=1400 audit(412.481:7540): avc:  denied  { setattr } for  pid=8413 comm="syz.0.2724" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  161.219918][ T8425] rust_binder: Failed copying into alloc: EFAULT
[  161.219936][ T8425] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  161.226527][ T8425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  161.235218][ T8425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:229
[  161.255916][ T8427] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  161.265798][ T8427] rust_binder: 231: no such ref 3
[  161.277673][ T8427] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  161.285109][ T8427] rust_binder: 231: no such ref 3
[  161.321486][ T8428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231
[  161.387078][   T64] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  161.403891][   T64] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  161.412849][   T64] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  161.503577][ T8448] 9pnet_fd: Insufficient options for proto=fd
[  161.528482][ T8452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2737'.
[  161.538283][   T36] audit: type=1400 audit(412.836:7541): avc:  denied  { ioctl } for  pid=8451 comm="syz.2.2737" path="socket:[34848]" dev="sockfs" ino=34848 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  161.748285][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.758511][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.783137][   T64] usb 4-1: USB disconnect, device number 17
[  162.017441][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'.
[  162.566976][ T8497] rust_binder: 126: no such ref 2
[  162.572997][ T8497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126
[  162.904363][   T36] audit: type=1400 audit(414.117:7542): avc:  denied  { listen } for  pid=8535 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  162.961602][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2763'.
[  163.114107][ T8544] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  163.114128][ T8544] rust_binder: Read failure Err(EFAULT) in pid:135
[  163.150879][   T36] audit: type=1326 audit(414.351:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.3.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbf8ebe9 code=0x7ffc0000
[  163.181937][   T36] audit: type=1326 audit(414.351:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.3.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f11fbf8ebe9 code=0x7ffc0000
[  163.205755][   T36] audit: type=1326 audit(414.351:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.3.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbf8ebe9 code=0x7ffc0000
[  163.230989][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  163.380238][   T31] usb 1-1: device descriptor read/64, error -71
[  163.560584][ T8564] netlink: 'syz.1.2777': attribute type 16 has an invalid length.
[  163.568755][ T8564] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2777'.
[  163.636970][   T31] usb 1-1: device descriptor read/64, error -71
[  163.669018][  T942] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  163.808065][  T942] usb 4-1: device descriptor read/64, error -71
[  163.893619][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  164.033533][   T31] usb 1-1: device descriptor read/64, error -71
[  164.064728][  T942] usb 4-1: device descriptor read/64, error -71
[  164.289328][   T31] usb 1-1: device descriptor read/64, error -71
[  164.321434][  T942] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  164.407049][   T31] usb usb1-port1: attempt power cycle
[  164.460454][  T942] usb 4-1: device descriptor read/64, error -71
[  164.717169][  T942] usb 4-1: device descriptor read/64, error -71
[  164.770642][   T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  164.793512][   T31] usb 1-1: device descriptor read/8, error -71
[  164.834991][  T942] usb usb4-port1: attempt power cycle
[  164.932319][   T31] usb 1-1: device descriptor read/8, error -71
[  165.187770][   T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  165.198588][  T942] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  165.210372][   T31] usb 1-1: device descriptor read/8, error -71
[  165.221076][  T942] usb 4-1: device descriptor read/8, error -71
[  165.349300][   T31] usb 1-1: device descriptor read/8, error -71
[  165.360104][  T942] usb 4-1: device descriptor read/8, error -71
[  165.465999][   T31] usb usb1-port1: unable to enumerate USB device
[  165.615580][  T942] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  165.638336][  T942] usb 4-1: device descriptor read/8, error -71
[  165.777121][  T942] usb 4-1: device descriptor read/8, error -71
[  165.893761][  T942] usb usb4-port1: unable to enumerate USB device
[  173.093252][ T8600] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2790'.
[  173.093361][ T8603] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.120370][   T36] kauditd_printk_skb: 64 callbacks suppressed
[  173.120391][   T36] audit: type=1400 audit(423.663:7610): avc:  denied  { remount } for  pid=8597 comm="syz.0.2788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  173.162460][ T8615] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.162492][ T8615] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.360892][   T36] audit: type=1400 audit(423.897:7611): avc:  denied  { create } for  pid=8632 comm="syz.0.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  173.615531][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  173.775956][   T31] usb 1-1: Using ep0 maxpacket: 32
[  173.783152][   T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  173.791770][   T31] usb 1-1: config 0 has no interface number 0
[  173.799625][   T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  173.809650][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.823856][   T31] usb 1-1: Product: syz
[  173.832525][   T31] usb 1-1: Manufacturer: syz
[  173.839009][   T31] usb 1-1: SerialNumber: syz
[  173.850145][   T31] usb 1-1: config 0 descriptor??
[  173.858122][ T8646] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  173.861236][   T31] smsc95xx v2.0.0
[  173.985389][ T8660] overlayfs: failed to clone upperpath
[  174.301549][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  174.313011][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  174.579488][ T8689] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  174.580354][ T8689] rust_binder: Error in use_page_slow: ESRCH
[  174.586952][   T36] audit: type=1400 audit(425.038:7612): avc:  denied  { execute } for  pid=8688 comm="syz.3.2820" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  174.629669][ T8689] rust_binder: use_range failure ESRCH
[  174.629710][ T8689] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false
[  174.632852][ T8694] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2822'.
[  174.651414][ T8689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  174.652610][ T8689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:162
[  174.675105][ T8694] tmpfs: Bad value for 'huge'
[  174.921671][ T8729] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[  174.971367][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  174.997797][   T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  175.024466][   T31] usb 1-1: USB disconnect, device number 15
[  175.594154][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  175.755636][    T9] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  175.766599][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.776400][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  175.785865][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  175.794440][    T9] usb 4-1: SerialNumber: syz
[  176.026547][    T9] usb 4-1: 0:2 : does not exist
[  176.031643][    T9] usb 4-1: unit 5 not found!
[  176.048260][    T9] usb 4-1: USB disconnect, device number 23
[  176.314419][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'.
[  176.511347][ T8816] overlayfs: missing 'workdir'
[  176.940265][   T36] audit: type=1400 audit(427.235:7613): avc:  denied  { associate } for  pid=8852 comm="syz.2.2876" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  177.112922][ T8871] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  177.369528][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  177.448686][   T36] audit: type=1400 audit(427.721:7614): avc:  denied  { map } for  pid=8874 comm="syz.3.2885" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.473834][   T36] audit: type=1400 audit(427.721:7615): avc:  denied  { execute } for  pid=8874 comm="syz.3.2885" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.551391][    T9] usb 1-1: Using ep0 maxpacket: 32
[  177.558643][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  177.567660][    T9] usb 1-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64
[  177.578162][    T9] usb 1-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  177.591435][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  177.601394][    T9] usb 1-1: string descriptor 0 read error: -22
[  177.607844][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  177.617195][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.627214][ T8871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  177.634799][ T8871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  177.777641][ T8899] SELinux:  Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped).
[  177.777961][   T36] audit: type=1400 audit(428.030:7616): avc:  denied  { relabelfrom } for  pid=8898 comm="syz.2.2895" name="PACKET" dev="sockfs" ino=36873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  177.810494][   T36] audit: type=1400 audit(428.039:7617): avc:  denied  { relabelto } for  pid=8898 comm="syz.2.2895" name="PACKET" dev="sockfs" ino=36873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:udev_exec_t:s0"
[  177.850832][  T942] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  177.859514][ T8871] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  177.872252][    T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8
[  177.884903][    T9] usb 1-1: USB disconnect, device number 16
[  177.891835][    T9] usblp0: removed
[  178.023129][  T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.033229][  T942] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  178.043704][  T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.052736][  T942] usb 4-1: config 0 descriptor??
[  178.214526][    T9] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=9 comm=kworker/0:0
[  178.420053][ T8916] __vm_enough_memory: pid: 8916, comm: syz.0.2900, bytes: 18014402804453376 not enough memory for the allocation
[  178.473135][ T8918] overlayfs: failed to clone upperpath
[  178.508221][  T942] dragonrise 0003:0079:0006.0010: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[  178.532125][  T942] dragonrise 0003:0079:0006.0010: no inputs found
[  178.534334][ T8936] cgroup: Invalid name
[  178.542907][  T942] dragonrise 0003:0079:0006.0010: force feedback init failed
[  178.783971][  T942] usb 4-1: USB disconnect, device number 24
[  179.154746][ T8949] netlink: 540 bytes leftover after parsing attributes in process `syz.2.2910'.
[  179.195601][ T8954] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  179.335741][ T8969] rust_binder: Error while translating object.
[  179.335785][ T8969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  179.342109][ T8969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191
[  179.346334][   T36] audit: type=1326 audit(429.488:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96d9d8ebe9 code=0x0
[  179.376150][ T8973] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.391327][ T8973] rust_binder: Error in use_page_slow: ESRCH
[  179.397925][ T8973] rust_binder: use_range failure ESRCH
[  179.406537][ T8973] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  179.412159][ T8973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  179.420247][ T8973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195
[  179.658318][ T8008] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  179.701150][  T942] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  179.830246][ T8008] usb 1-1: not running at top speed; connect to a high speed hub
[  179.839158][ T8008] usb 1-1: config 8 has an invalid interface number: 246 but max is 1
[  179.847681][ T8008] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  179.858277][ T8008] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2
[  179.867461][ T8008] usb 1-1: config 8 has no interface number 0
[  179.874228][ T8008] usb 1-1: config 8 interface 246 altsetting 1 endpoint 0x2 has an invalid bInterval 180, changing to 4
[  179.886351][ T8008] usb 1-1: config 8 interface 246 altsetting 1 endpoint 0x2 has invalid maxpacket 13985, setting to 1023
[  179.897799][ T8008] usb 1-1: config 8 interface 246 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  179.911078][ T8008] usb 1-1: config 8 interface 246 has no altsetting 0
[  179.918614][  T942] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11
[  179.930101][  T942] usb 4-1: config 0 interface 0 has no altsetting 0
[  179.936861][  T942] usb 4-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00
[  179.946953][  T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.955871][ T8008] usb 1-1: New USB device found, idVendor=04fc, idProduct=500c, bcdDevice=7c.98
[  179.965144][  T942] usb 4-1: config 0 descriptor??
[  179.970392][ T8008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.978609][ T8008] usb 1-1: Product: Н
[  179.983053][ T8008] usb 1-1: Manufacturer: О
[  179.987688][ T8008] usb 1-1: SerialNumber: 㦍亼㠣䆕嵊殍퟿쐪飔躚쒈᷊ѡffiᐚ⿔簕쓞
[  180.220209][ T8008] usb 1-1: USB disconnect, device number 17
[  180.395308][ T8998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8998 comm=syz.2.2929
[  180.551404][  T942] usbhid 4-1:0.0: can't add hid device: -71
[  180.557572][  T942] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  180.567607][  T942] usb 4-1: USB disconnect, device number 25
[  180.764256][ T9002] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  180.764277][ T9002] rust_binder: Read failure Err(EFAULT) in pid:286
[  180.830423][ T9008] incfs: Unexpected inode type
[  180.843085][ T9008] overlay: Unknown parameter 'obj_user'
[  180.849563][   T36] audit: type=1400 audit(430.900:7619): avc:  denied  { create } for  pid=9007 comm="syz.0.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  180.874511][ T7541] ------------[ cut here ]------------
[  180.880057][ T7541] WARNING: CPU: 0 PID: 7541 at fs/inode.c:340 drop_nlink+0xce/0x110
[  180.888253][ T7541] Modules linked in:
[  180.892255][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[  180.904142][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  180.914415][ T7541] RIP: 0010:drop_nlink+0xce/0x110
[  180.919453][ T7541] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[  180.939339][ T7541] RSP: 0018:ffffc900015bfc60 EFLAGS: 00010293
[  180.945625][ T7541] RAX: ffffffff81edc76e RBX: ffff8881033407e0 RCX: ffff888128b3a600
[  180.953911][ T7541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  180.962426][ T7541] RBP: ffffc900015bfc88 R08: 0000000000000003 R09: 0000000000000004
[  180.971250][ T7541] R10: dffffc0000000000 R11: fffff520002b7f7c R12: dffffc0000000000
[  180.979528][ T7541] R13: 1ffff11020668105 R14: ffff888103340828 R15: 0000000000000000
[  180.987818][ T7541] FS:  000055558ab04500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  180.997730][ T7541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.004411][ T7541] CR2: 000055558ab274e8 CR3: 0000000129e18000 CR4: 00000000003526b0
[  181.012892][ T7541] Call Trace:
[  181.016170][ T7541]  <TASK>
[  181.019240][ T7541]  shmem_rmdir+0x5f/0x90
[  181.023523][ T7541]  vfs_rmdir+0x3e0/0x560
[  181.027889][ T7541]  incfs_kill_sb+0x109/0x230
[  181.032728][ T7541]  deactivate_locked_super+0xd5/0x2a0
[  181.038606][ T7541]  deactivate_super+0xb8/0xe0
[  181.043476][ T7541]  cleanup_mnt+0x3f1/0x480
[  181.047882][ T7541]  __cleanup_mnt+0x1d/0x40
[  181.052588][ T7541]  task_work_run+0x1e3/0x250
[  181.057370][ T7541]  ? __cfi_task_work_run+0x10/0x10
[  181.062901][ T7541]  ? __x64_sys_umount+0x126/0x170
[  181.068207][ T7541]  ? __cfi___x64_sys_umount+0x10/0x10
[  181.073698][ T7541]  ? __kasan_check_read+0x15/0x20
[  181.078831][ T7541]  resume_user_mode_work+0x36/0x50
[  181.084148][ T7541]  syscall_exit_to_user_mode+0x64/0xb0
[  181.089706][ T7541]  do_syscall_64+0x64/0xf0
[  181.094399][ T7541]  ? clear_bhb_loop+0x50/0xa0
[  181.099361][ T7541]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  181.105463][ T7541] RIP: 0033:0x7f1ea8b8ff17
[  181.109978][ T7541] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  181.130514][ T7541] RSP: 002b:00007ffc10a73b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.139258][ T7541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1ea8b8ff17
[  181.147886][ T7541] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc10a73be0
[  181.156124][ T7541] RBP: 00007ffc10a73be0 R08: 0000000000000000 R09: 0000000000000000
[  181.164390][ T7541] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc10a74c70
[  181.172642][ T7541] R13: 00007f1ea8c11c05 R14: 000000000002ab4a R15: 00007ffc10a74cb0
[  181.181215][ T7541]  </TASK>
[  181.184344][ T7541] ---[ end trace 0000000000000000 ]---
[  181.190288][ T7541] ==================================================================
[  181.198628][ T7541] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[  181.205046][ T7541] Write of size 4 at addr 0000000000000168 by task syz-executor/7541
[  181.213297][ T7541] 
[  181.215729][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz-executor Tainted: G        W          syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[  181.215751][ T7541] Tainted: [W]=WARN
[  181.215756][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  181.215762][ T7541] Call Trace:
[  181.215768][ T7541]  <TASK>
[  181.215775][ T7541]  __dump_stack+0x21/0x30
[  181.215795][ T7541]  dump_stack_lvl+0x10c/0x190
[  181.215808][ T7541]  ? __cfi_dump_stack_lvl+0x10/0x10
[  181.215821][ T7541]  print_report+0x3d/0x70
[  181.215832][ T7541]  kasan_report+0x163/0x1a0
[  181.215844][ T7541]  ? ihold+0x24/0x70
[  181.215855][ T7541]  ? _raw_spin_unlock+0x45/0x60
[  181.215869][ T7541]  ? ihold+0x24/0x70
[  181.215880][ T7541]  kasan_check_range+0x299/0x2a0
[  181.215891][ T7541]  __kasan_check_write+0x18/0x20
[  181.215905][ T7541]  ihold+0x24/0x70
[  181.215915][ T7541]  vfs_rmdir+0x26a/0x560
[  181.215928][ T7541]  incfs_kill_sb+0x109/0x230
[  181.215942][ T7541]  deactivate_locked_super+0xd5/0x2a0
[  181.215956][ T7541]  deactivate_super+0xb8/0xe0
[  181.215967][ T7541]  cleanup_mnt+0x3f1/0x480
[  181.216061][ T7541]  __cleanup_mnt+0x1d/0x40
[  181.216072][ T7541]  task_work_run+0x1e3/0x250
[  181.216084][ T7541]  ? __cfi_task_work_run+0x10/0x10
[  181.216096][ T7541]  ? __x64_sys_umount+0x126/0x170
[  181.216110][ T7541]  ? __cfi___x64_sys_umount+0x10/0x10
[  181.216123][ T7541]  ? __kasan_check_read+0x15/0x20
[  181.216137][ T7541]  resume_user_mode_work+0x36/0x50
[  181.216149][ T7541]  syscall_exit_to_user_mode+0x64/0xb0
[  181.216160][ T7541]  do_syscall_64+0x64/0xf0
[  181.216173][ T7541]  ? clear_bhb_loop+0x50/0xa0
[  181.216184][ T7541]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  181.216194][ T7541] RIP: 0033:0x7f1ea8b8ff17
[  181.216204][ T7541] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  181.216213][ T7541] RSP: 002b:00007ffc10a73b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.216227][ T7541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1ea8b8ff17
[  181.216235][ T7541] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc10a73be0
[  181.216241][ T7541] RBP: 00007ffc10a73be0 R08: 0000000000000000 R09: 0000000000000000
[  181.216248][ T7541] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc10a74c70
[  181.216256][ T7541] R13: 00007f1ea8c11c05 R14: 000000000002ab4a R15: 00007ffc10a74cb0
[  181.216266][ T7541]  </TASK>
[  181.216270][ T7541] ==================================================================
[  181.466764][ T7541] Disabling lock debugging due to kernel taint
[  181.473318][ T7541] BUG: kernel NULL pointer dereference, address: 0000000000000168
[  181.481320][ T7541] #PF: supervisor write access in kernel mode
[  181.487631][ T7541] #PF: error_code(0x0002) - not-present page
[  181.493688][ T7541] PGD 8000000119664067 P4D 8000000119664067 PUD 0 
[  181.500455][ T7541] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  181.506721][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz-executor Tainted: G    B   W          syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[  181.520197][ T7541] Tainted: [B]=BAD_PAGE, [W]=WARN
[  181.525393][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  181.535529][ T7541] RIP: 0010:ihold+0x2a/0x70
[  181.540163][ T7541] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd
[  181.560191][ T7541] RSP: 0018:ffffc900015bfca0 EFLAGS: 00010246
[  181.566443][ T7541] RAX: ffff888128b3a600 RBX: 0000000000000000 RCX: ffff888128b3a600
[  181.574533][ T7541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  181.582685][ T7541] RBP: ffffc900015bfcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528
[  181.591253][ T7541] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881033407ec
[  181.599309][ T7541] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  181.607446][ T7541] FS:  000055558ab04500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  181.616547][ T7541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.623128][ T7541] CR2: 0000000000000168 CR3: 0000000129e18000 CR4: 00000000003526b0
[  181.631093][ T7541] Call Trace:
[  181.634363][ T7541]  <TASK>
[  181.637290][ T7541]  vfs_rmdir+0x26a/0x560
[  181.641526][ T7541]  incfs_kill_sb+0x109/0x230
[  181.646202][ T7541]  deactivate_locked_super+0xd5/0x2a0
[  181.651658][ T7541]  deactivate_super+0xb8/0xe0
[  181.656427][ T7541]  cleanup_mnt+0x3f1/0x480
[  181.660854][ T7541]  __cleanup_mnt+0x1d/0x40
[  181.665427][ T7541]  task_work_run+0x1e3/0x250
[  181.670185][ T7541]  ? __cfi_task_work_run+0x10/0x10
[  181.675311][ T7541]  ? __x64_sys_umount+0x126/0x170
[  181.680334][ T7541]  ? __cfi___x64_sys_umount+0x10/0x10
[  181.685787][ T7541]  ? __kasan_check_read+0x15/0x20
[  181.690887][ T7541]  resume_user_mode_work+0x36/0x50
[  181.696006][ T7541]  syscall_exit_to_user_mode+0x64/0xb0
[  181.701490][ T7541]  do_syscall_64+0x64/0xf0
[  181.705917][ T7541]  ? clear_bhb_loop+0x50/0xa0
[  181.710581][ T7541]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  181.716470][ T7541] RIP: 0033:0x7f1ea8b8ff17
[  181.720987][ T7541] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  181.741282][ T7541] RSP: 002b:00007ffc10a73b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.750042][ T7541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1ea8b8ff17
[  181.758296][ T7541] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc10a73be0
[  181.766357][ T7541] RBP: 00007ffc10a73be0 R08: 0000000000000000 R09: 0000000000000000
[  181.774538][ T7541] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc10a74c70
[  181.782600][ T7541] R13: 00007f1ea8c11c05 R14: 000000000002ab4a R15: 00007ffc10a74cb0
[  181.790651][ T7541]  </TASK>
[  181.793747][ T7541] Modules linked in:
[  181.797745][ T7541] CR2: 0000000000000168
[  181.802158][ T7541] ---[ end trace 0000000000000000 ]---
[  181.807711][ T7541] RIP: 0010:ihold+0x2a/0x70
[  181.812384][ T7541] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd
[  181.832499][ T7541] RSP: 0018:ffffc900015bfca0 EFLAGS: 00010246
[  181.838569][ T7541] RAX: ffff888128b3a600 RBX: 0000000000000000 RCX: ffff888128b3a600
[  181.846816][ T7541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  181.854795][ T7541] RBP: ffffc900015bfcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528
[  181.862765][ T7541] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881033407ec
[  181.871120][ T7541] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  181.879357][ T7541] FS:  000055558ab04500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  181.888548][ T7541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.895152][ T7541] CR2: 0000000000000168 CR3: 0000000129e18000 CR4: 00000000003526b0
[  181.903387][ T7541] Kernel panic - not syncing: Fatal exception
[  181.910058][ T7541] Kernel Offset: disabled
[  181.914388][ T7541] Rebooting in 86400 seconds..