last executing test programs:

5m15.564701082s ago: executing program 1 (id=57):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640))
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x7f, [0x0, 0xc6, 0x7, 0x9, 0x0, 0x5]})

5m15.550153472s ago: executing program 1 (id=58):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183183, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r5, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000002580)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})

5m15.467577944s ago: executing program 1 (id=59):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0xe7, 0x2, 0xff, 0x7, '\x00', 0xfffffffe, 0xb52})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x2)
sync_file_range(r0, 0x6, 0x100, 0x2)
pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x90, 0x0, &(0x7f0000001280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x2, 0x0, 0x34}, @fda={0x66646185, 0x3, 0x2, 0x24}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001200)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x5, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}], 0x98, 0x0, &(0x7f0000001340)="118a940e10dff83d640cb35c85b34c908e9b1fe557abf097cbd9d7ed82c10819586ec3518d40bfa1f7e7941181a8075adf365fdea98da24dccf2d95d765dfcf1fc787b8edac3fae2da5b74d606313be514f74fe6a13821622aa8e3a0dfaa00ae652bd39687ed4f5fcfff9cedc5b115a6d9d75260bcc979032c53186dc002f3118125d66b71e5f0aa61964c28e5a1dccafbab099a0e612403"})
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000))

5m15.467140624s ago: executing program 1 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
fdatasync(r0)
unshare(0x22020600)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000640), 0x2, 0x82000)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000680)=""/216)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

5m15.466346284s ago: executing program 1 (id=61):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_disconnect(r0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) (async)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x2, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "91665e441b07"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xa, 0x40, 0xe}, {0x6, 0x24, 0x1a, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xf, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xcb, 0x5, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x4, 0xfa}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x2, 0x4d, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x2c0, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xf, 0x28, 0xd0, 0x40, 0x8dd, 0x120, 0xbde6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ae, 0x1, 0x7, 0x5, 0x30, 0x5, [{{0x9, 0x4, 0x1b, 0x40, 0x6, 0x4a, 0x80, 0x4e, 0x7, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x1, 0x9, 0x8, "", "ef0ca5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc12, 0x1, 0x9, "746ebb"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0x6, "3c578a5969a3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0x9, "4787", "80"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x80, 0xe0, "20c0", "6b80"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x1, 0xf, "c5764a"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x83, 0x4, 0x96, 0x9, "a4020440f487401a"}]}], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2b}]}}, {{0x9, 0x5, 0x9, 0x95e48524330d6d00, 0x10, 0xf5, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x10}, @generic={0x44, 0x31, "06746be94034e2676fa450361fa2cfbe7e8d6b237319f5ab04863d1564138640b2f2c76b90a57f187fb2f5aae4312a792d949098a63ed1afc174491aab4fb71983a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x7, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x5, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9e, 0x1}, @generic={0xfe, 0x5, "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"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x3, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x7f, 0xc, 0x2, [@generic={0xa3, 0x0, "9fd556cd37b8d75c18752390c9f1b9217a3b1a8409dd63675ccce234933fcd0b411bb16bf2808734c8612ca2e7eb4a45862eb3624c927c6b02d95e315997d3db6a8196b49a4e6b7ecc78a09721ff6cd818e5dcf4a030108b9f9515054625a97dfa09433695408945529b621ce34ea91a0db061a74c608733a148be806087afa9391d2daefabf8ff67e92b24b06ade4c2c2a90aca39be7132209967486d55dd968b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x800}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x5, 0xf, 0x5, 0x8, 0xa1}, 0x2e, &(0x7f0000000200)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xcf, 0x4, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "e70eb22176264b8a4379ca357143cf6e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7f, 0x6, 0x101, 0x96}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "363389de02b97fd364fc31603cbf26a03024cad6"}}, {0xec, &(0x7f0000000700)=@string={0xec, 0x3, "9dc9025fe615bfbaa6e5e6ef122a2048933f14a4b9f3674c6c1baccb5a54590e456682bb8deedfb0783220c4b9f134970b8a2ccf99065482241c547bd03943a87a0ecf4d3ffdfc9e4976889300b3bd9137a994b660405a52d81584aac5d88d09ee4fb6d5ce9d47785a68d8668f63462ce4f23e02a6af4984ff8fc46291f4ec3b313d10134fba32285afdcf58a1c7fefbc33b67741dbf78cfc79db5dd72261b08369c3d03b1c5df6c77cb5e12c16029dc477e3d9bf2e790e9dafdba92415f77b36e2fd16b4ad1ec2a049d38884845f1ea8a93031c1a3bd227950caef0944d82d3814013099f8b333ee566"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3401}}, {0xd2, &(0x7f00000008c0)=ANY=[@ANYBLOB="d203be5c92dbacff85eeb86b39c6e3947d6e67dda13292b1c2e8ca8e8223d9213043c484494d4bde0d55dcd30d1fe5d4a5d33eeda3e093bc80fcf630b0c742bba141fc0baf8cc6924f65f0a35e08391b9d091c7387d24749dadaca797ba86625daf13f7987133295c8c2d85c5211b06a8390e7199ec9fd603aaaed3cf8d0e27efeeec5baef0b08d722c78d6ca1e73bc3dcf87ebe1fbbe124a63842de21d2d5f9c4fd61196f01783b2f46691919fdff03e015ea1fba1b9ec4907441e8ec8413da9629ecc6e7443c9432d75b513ba29deccce0"]}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r1, 0xffffffffffffffff, 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r3, 0x829, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) (async)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r3, 0x829, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200), 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000000000009f0b0000000000006c0a00"])
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x802, 0x0) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0xc, 0x4}}}}}]}}]}}, 0x0) (async)
r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0xc, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r9, 0x0, 0x0) (async)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0xf, {0xf, 0x3, "8a4e4abb58df61d19cd2c9ddec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r9, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0xf, {0xf, 0x3, "8a4e4abb58df61d19cd2c9ddec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12014da97c860003000000402505a8a44000010203010902240101090004090400070207010702090501024000085459090582021000060e0300"/68], &(0x7f0000000ec0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x250, 0x80, 0x6, 0x10, 0x10, 0xf9}, 0x47, &(0x7f0000000180)={0x5, 0xf, 0x47, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "9854ede37be4d54aa9974dca5326a744"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "7191c52d70a8839fe7c99954e151e771"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x7ff8001, 0x0, 0x0, [0xcf, 0xc0]}]}, 0x6, [{0xcc, &(0x7f0000000b80)=@string={0xcc, 0x3, "a0f9318d661160e0efd7c9925c93799678cdbb30a3d05ebf545571cbd89c2e3b035a7490a2a7c96e9ecbdfdce2f6b016447ca331055e9821c623a42c76bc07f4d85d01ce7ff37f88d7ecb7ec414e2fc169ebb27ea184fdc9140af3e3bbb2ab49b39f752581743388140626efb283ee68a4042074b5784ba8ba2f0f0ce6e0abeaf4dd4f7578b59f5465b1c038394261032c83d072453b4ca260d1b0c274568b9962759ca58138cfff979bc2ba9286aac2d787fbfddf057df8a5c3420f7fe3c2eb3dd2ca38c8e02ed6bcbb"}}, {0xe9, &(0x7f0000000c80)=@string={0xe9, 0x3, "4918ac81d1354fcb4a4e826b818fa42edff08a8f6c2153661773809a081c38f4afc86822ad729316c4ec836b8b7a92c29d07459ff111964dbbdc85e72332933657a667e176c9fa43383c41136b30495f5984556b872298419ae58744e84a1690e317a412920f2a4edf94a33c02eb3054f837dadc3a5d97c4f782e22a7d7bc3e535c65302b205839bd913ce5762d5efedffc2074d2266ad6a226a7498be25ccb16985baf9d7fd05876b63d4cee2cda2315d5ee576318a03be2f39dd0740e19bd3a1831f3977ba3e0b00d84f5323b8703436ce0791397ee0329839b1b1cdf14fa14e6d5563601621"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x437}}, {0x7a, &(0x7f0000000dc0)=@string={0x7a, 0x3, "3c32e3d9fa92c44d15979ab297d2b6c3571f4eaee72cb242886068976afd2b2ace72bef99c08bea6701fea30f4c3c47f624620885f85acfbd8eed00223b1159161a8607db3ea52e5c9d4e87ac8760f1fe53e64cc7fd542a1458de727e86b94581e4cbb5a01d696f4bc17bb2aca35959b4701c9e3131ace83"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xf0c636df16b59be3}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x43f}}]})
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r10) (async)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r10)

5m15.400785035s ago: executing program 1 (id=62):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0xfffffffffffffcc1, 0x0, 0x0})
io_setup(0x5, &(0x7f0000000480)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x4040, r3, &(0x7f00000004c0)='2', 0x1, 0x0, 0x0, 0x2}])
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'team0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x4071, 0x1, [0x0, 0x37]}})

5m15.347248866s ago: executing program 32 (id=62):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0xfffffffffffffcc1, 0x0, 0x0})
io_setup(0x5, &(0x7f0000000480)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x4040, r3, &(0x7f00000004c0)='2', 0x1, 0x0, 0x0, 0x2}])
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'team0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x4071, 0x1, [0x0, 0x37]}})

4m38.764316578s ago: executing program 2 (id=421):
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x167342, 0x0)
readv(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x34, 0x0, &(0x7f00000007c0)=[@request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc00000000000000008d000000000000ff1a00ff00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999fe00000000000000fc0000000000000000000000000000ffac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

4m38.649293601s ago: executing program 2 (id=422):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async, rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 32)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x37)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m38.372917586s ago: executing program 2 (id=426):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000200)=""/74, 0x0, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000b17000/0x3000)=nil, 0x3000}, 0x1})
sendmmsg(r0, 0x0, 0x0, 0x24008841)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

4m36.661637289s ago: executing program 2 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[])
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x44, 0x4)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

4m36.544601941s ago: executing program 2 (id=453):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6c)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x80106725, &(0x7f00000000c0))
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)

4m36.310431556s ago: executing program 2 (id=457):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0xf300, &(0x7f0000002e80)=[{&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/257, 0x101}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x5, 0x0, 0x0)

4m36.256600826s ago: executing program 33 (id=457):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0xf300, &(0x7f0000002e80)=[{&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/257, 0x101}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x5, 0x0, 0x0)

2m32.991593523s ago: executing program 5 (id=2096):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
timerfd_create(0x8, 0x80000) (async)
timerfd_create(0x8, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1) (async)
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) (async)
ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5})
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x2000000, 0x0)

2m32.902017375s ago: executing program 5 (id=2099):
mkdir(&(0x7f0000002e80)='./file0\x00', 0x1c)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$sock(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0xdebe, 0x4000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000dc0)="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", 0x1000}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0xe23}}], 0x48}}, {{&(0x7f00000001c0)=@caif=@dgm={0x25, 0x0, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="cd888ad8c6881b0ed73d625ee27af69d180c113bde230d24468dce332daaf5da9064960f2844ddaca8e72fd4d888bbed1ef1750712cb", 0x36}, {&(0x7f0000000280)="5f7f1d92875636813756da0537fa7a4bb6eb20d25f9b229d19ba7e276f99ce310953511a6e9d5ca1d46336f9ba0509e1e7a35fd0ca430f83fd08be7443e24dea968c408494b6a47dae69f20ecb7faa0ad186b9095911f890aec7307801bc01edb7394fe8855e19cba343fe6f00b1ced5909bcd08", 0x74}, {&(0x7f0000000300)="f0c95d8feaf87b5dc19f359a5e3e5c665dc0c9d92d54cc731379e4a735fddf879a42eff4bb02557f661fdda75ee4ac025acf8190c538695cbd59850e33bd55e227b43afb90236c2f96404189d096af850dead7341e75e445644de207f4d0d606a8abed16e441c147fe276581c1b8aceecc00f2cc2d3172a54a7b3248fc48a04cb90fa2e53ebcdcebac4c5b221b5d18713cae3bd2d846f02e50cff4f8ab3c08fa3943955ed6f37d497da22a77f434bf75f6ef4ff6702672b59ee47085738ac15bcc50", 0xc2}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000000400)="f737285da6fff19ac6319217fe360ed7b9e2cb277a91a9cb30df52b5688f033441097d205f732453cdc0ff3228a6994b9a36a4a26ce96b4584c379de268f02fd44da2a966600a59c2a296e8fcd5d74d3a827803ccec0626a860cfd3d36186f39e056ca3825781783efd914141018b43c30cd486bf738c83a4933049217f8727990d99b6dd2249e59260585af7e3207629d5b63a17be933b0ea1a9ba658aaae516a916fb5eda691db72ac98080793f77f352da80f280f179f9b7501cd909e7d16446ae6a176d10a1a5ca8fb7416104e99861f688d89a76a783c4dd6a2", 0xdc}, {&(0x7f0000000500)="8e5fd8b834c56b0076c0069f914561b883e742df091a47e01b4379016b8f40cdb9cc13b48afda52d17fd0649b92dfcca97c9dfce7d8a27634283c86b8f317d0e778424afcad5d1425acd09113a4ce29f2d45dbf0", 0x54}, {&(0x7f0000000580)="20b5a3a9", 0x4}, {&(0x7f00000005c0)="888bccc7212e290dbaa5a9aa", 0xc}], 0x8, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xe08f}}], 0x30}}, {{&(0x7f00000006c0)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)="158b43919d1cf709d38918d551477fd1cce3a149dee6898a268f8def5635b839501a9547682668ee663d78c13e84f19b3d060885321564157ddd9e39e7e4aabca89944860ea6a0ba38a6b6ac0335aec11e8e109689ac0686d3bc5dd29f4f978e2090714b75ce74e0b22fa1bec173efd36bfee5c6c04b2579db52a6eb0d160a4ad490d2cf1b3bfd4b41d4cd1aaa148311e2fa1ffae69d7954b580440c8a388b07832748ca8bd4c1e3b0371a82e3e289fed1a514513b618bee3bb54ff9c5bf31860ed1c45c8838233c823ff21ee10fcfd208e88eb04657db5393dc4e35dee31c71e334f957", 0xe4}, {&(0x7f0000000840)="2f3676f238", 0x5}, {&(0x7f0000000880)="a8d3ee1814e97c52883aec0e1a85233e8062e690d981d902836efb37b31fe79a6415f5def8f92d202b4adc063935c46bd39f8ce3d4728480d4245c33305c40a0febe1493736ef828653341680e273e298dc5667497528f8938bda45dda07a7461443b49782bd2616d99b8f70eed27c4d32b1f7a225a7a26043b7a005c8c9d817d2d8549504626e41ee718bca0e90e51149fa70839544f252871736b54766f649ba35ee2b7927c5e94fb6d243830751a55f838f9328027a94f889e228533499502aa2f829165b2952d8281b1dbbf8b5eda35b7aa089674caf24745b1d", 0xdc}, {&(0x7f0000000980)="2aa9c25ca86699a38db29b5bf727e34c0f46930e8820f5a7105f3ad6bb574f26c337b55d3664e67afabffc4a2b7d35aa59f4a6da38d242e646e95219bb8ca4ad8781042a51200affe77a0893aa0189f12af4321e061844dccc4d7026ccb14e39e52076483face1fa104c9c458b", 0x6d}, {&(0x7f0000000a00)="e649a8131642f41a3bdd4bf0208b5b0ddade8c87e9178b", 0x17}, {&(0x7f0000000a40)="a34a49b3cba18c5ca08646349eb42fe962b464c135524e1a155341800c312c86d2448f5cfe821168ec6d9bfd2acb5ca72be94c099282804e4f02f6b5aba908d064b56f9d2c11b3f25379753a1fc78022f66c7f47b8b613c4ed94261dd4080167b5e6b5c8a3cc2870bb14449ee4cf0a0407c9dade2ee88959a1414060d48cc68b771a462af38db7fe3a952bc3a296efcf866875a13b675ef240b3096fbd6ffbc6df7f", 0xa2}, {&(0x7f0000000b00)="db2e475ffd27c139a85dabf616cc0e60bfa82b9abb2b7333ced4829fa213804bd6349552c887da582e3b69b9fbb18c1058c332ddc0cf4c7020305f2abf5bab946babc85570a078d9e72946c38f7d8f891ac0b938c128ffbe46a375c9590ba6ae998e3dc41d606bf08d82b39edbfe699b6506a1517f7f4061bee07ac569ed9a85a125eda7f928b3058c0651e30574ec", 0x8f}], 0x7}}], 0x3, 0x81)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000002e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xbe03169052bf673f}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

2m32.781778577s ago: executing program 5 (id=2103):
mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f)

2m32.658389069s ago: executing program 5 (id=2107):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x3, 0x2000, 0x1000, &(0x7f0000b2d000/0x1000)=nil})
shutdown(0xffffffffffffffff, 0x1)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3000003, 0x13, 0xffffffffffffffff, 0x85b84000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYBLOB="01da649ea47f41faec0bfefd993be00d0481f561753d536da98981fb6e1441be681fb2413997a1b92e05f757052dec7a33c8bb4774872cc1db6f79494d0ec4a873826e723e35e9379bffa65475c640885eea7931bea5e8910145c49d0c3a91ea2e0cbad047f48dabbbb71859f428e6cac43a2b6f9b701278fd4314ae011015258ecdd072c50dfb25ae74cbc83137821ab843c479ac58ac9e9f7c4fcad45e131b2b3acf1dcbae69b93a1d83f959e5831559eff9ed73d87ea84954c76b0aabe6c272156a13ba887204c68e3724ceca2d94311109cec413d9fb264f25844b44", @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030040000000000000030302c757365725f69643d37e63a5181c8f016ea771821bcb51ddb383b9a9749de23df7b9ebee32f9dd03713eb487b82e2698c53e5622cdb3e9862f6b2a9541f90a65527529ec5c47cbbb5a8c64b5972ea00b5eba3c32f550331c7d599eed9b263c8457902", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r4, 0xd6baf000)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1838c0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0})

2m32.482875942s ago: executing program 5 (id=2110):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41)
chmod(&(0x7f0000000080)='./file1\x00', 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mlock(&(0x7f0000339000/0x3000)=nil, 0x3000)

2m32.303058516s ago: executing program 5 (id=2111):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) (async)
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) (async)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

2m32.260949567s ago: executing program 34 (id=2111):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) (async)
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) (async)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

2m6.753233806s ago: executing program 4 (id=2409):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x8)
sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="22f89dbcae43", 0x6}], 0x1, &(0x7f0000000480)="ec1d493e4e377150e5242cefd7fb52b65a0cb5d0426562713f58aca6fed8c30ccda4fe96a2e202ee900407e3781be7e203641616f90699fbf8308396d2132fc8b05a4dea7a0f84f5d825547ff4cb682873b0ff2d90c7582f3f6a797a8595a4ef6a889ea6d27a114ceadcd58c7cb57f79cff45a3e33b68d211de52aec5b3daf1d7b882ec0006004536ba1e7df5299858973507dd93374f334173f58a6711361cc0bb83cba0a902268f7c2ee4b9e07ff752cd58de9568dff192936198887dd", 0xbe, 0x4}, 0x1)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/80, 0x50}, {0x0}], 0x2)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe64, 0x5, @empty, 0x2}, 0x1c)
connect$unix(r6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r7=>0x0})
sendmsg$can_raw(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x4, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "35a25acd7dbe1cdb"}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0xc000)
bind$tipc(r0, 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
r9 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
getsockopt$inet6_buf(r9, 0x29, 0x3d, &(0x7f0000000080)=""/60, &(0x7f0000000200)=0x3c)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

1m59.649902453s ago: executing program 4 (id=2415):
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x167342, 0x0)
readv(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x34, 0x0, &(0x7f00000007c0)=[@request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc00000000000000008d000000000000ff1a00ff00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000ffac1e000100000000000000000300000000000000000000000a0040"], 0xb8}}, 0x0)

1m59.649003533s ago: executing program 4 (id=2417):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
r2 = socket$inet6(0xa, 0x3, 0x8)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1f64}, 0x1c, 0x0}}], 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000580))
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
futex_waitv(&(0x7f00000005c0)=[{0xfffffffffffffffd, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000740)={0x0, 0x989680}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x28600, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)

1m59.646652973s ago: executing program 4 (id=2419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)={0x27000, 0xd4, 0x1}, 0x18)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)={0x500, 0x80, 0x14}, 0x18)
linkat(r0, &(0x7f0000000180)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x600)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)

1m59.413439827s ago: executing program 4 (id=2423):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1m59.090035374s ago: executing program 4 (id=2426):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket(0xa, 0x801, 0x0)
getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffc}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000640)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8ab8148a0e021b5cf4690a761ba22fd7fca4f6c2d"})

1m59.001736215s ago: executing program 35 (id=2426):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket(0xa, 0x801, 0x0)
getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffc}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x50, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000640)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8ab8148a0e021b5cf4690a761ba22fd7fca4f6c2d"})

1m5.002645922s ago: executing program 6 (id=3025):
getgroups(0x2, &(0x7f0000005e00)=[<r0=>0x0, <r1=>0x0])
setregid(r1, r1) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
bind$unix(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1, 0x8, 0x101) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0)
r5 = creat(&(0x7f0000000380)='./file0\x00', 0xa0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8)
write$P9_RSTATu(r5, &(0x7f0000000580)={0x5f, 0x7d, 0x1, {{0x0, 0x45, 0x32b4, 0x401, {0x4, 0x3, 0x8}, 0x10200000, 0x2, 0xadf, 0x80, 0x6, 'tmpfs\x00', 0x6, 'tmpfs\x00', 0x0, '', 0x6, 'tmpfs\x00'}, 0x5, ')/!&+', r6, r0}}, 0x5f) (async)
r7 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0)
syz_usb_control_io(r7, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(0x0, 0x80) (async)
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r8, &(0x7f0000003800)={0x2020}, 0x2020) (async)
timer_create(0x2, &(0x7f0000000500)={0x0, 0xb, 0x4, @thr={&(0x7f00000000c0)="566bdbbc07700600000000eb9e", &(0x7f0000000100)="fc82da24558f3433200dea608c62c407d78021262f492fa608a2fd71186fa43b22bf4e4fb8a21f3c3472602e982531f3665eb582d4686b6f1a4f4aa80ba2390522780eb399ba4913fa0eae9141d2961a77b9d71338b77776810f2ccf2e6a013aa2f6608749e88ba50bbaad67970dc94531abb883a4c1f1"}}, &(0x7f0000000200)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000280)) (async)
listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/82, 0x52) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1})

1m4.815674756s ago: executing program 6 (id=3028):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x94\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xffH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)

1m4.783906336s ago: executing program 6 (id=3029):
mkdir(&(0x7f0000003080)='./file0\x00', 0x108)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
mount$bpf(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x800, &(0x7f0000003140)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',mode=00'])
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cpuset\x00')
read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020)

1m4.741104537s ago: executing program 6 (id=3030):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00')
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

1m4.213232137s ago: executing program 6 (id=3032):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
accept(r1, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x2}, 0x8})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
accept(r1, 0x0, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x2}, 0x8}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x3}) (async)

1m3.925382043s ago: executing program 6 (id=3035):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
sync_file_range(r1, 0x3, 0x2, 0x2)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa)
mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xfffffcfb)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
setrlimit(0xc, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
write(r0, &(0x7f0000000400)="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", 0x1f000)

1m3.768772856s ago: executing program 36 (id=3035):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
sync_file_range(r1, 0x3, 0x2, 0x2)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa)
mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xfffffcfb)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
setrlimit(0xc, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
write(r0, &(0x7f0000000400)="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", 0x1f000)

24.50231356s ago: executing program 7 (id=3363):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
r1 = inotify_init1(0x800)
sync_file_range(r1, 0xfffffffffffff800, 0x10004, 0x5)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000000100)="c7ff719e41e5bfbe23d190d7bc88c6d6c8572f3b2fb25d303f90ae8d5064f135fa4d2e7949f2189f2f4c0396eeb1599ef7a83c434362bf2eeec50c9f9bf4bc7e125707ba7bc708b383c46b418ab8037822922d1af858ae33e60899e3ebb34911acfeff614ad63fb7a5fe758c79fed06c3976fb880f181206169c648354cd085149588c1c59f312", 0x87, 0x8040, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) (async)
inotify_init1(0x800) (async)
sync_file_range(r1, 0xfffffffffffff800, 0x10004, 0x5) (async)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x1) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x2) (async)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
sendto$inet6(r2, &(0x7f0000000100)="c7ff719e41e5bfbe23d190d7bc88c6d6c8572f3b2fb25d303f90ae8d5064f135fa4d2e7949f2189f2f4c0396eeb1599ef7a83c434362bf2eeec50c9f9bf4bc7e125707ba7bc708b383c46b418ab8037822922d1af858ae33e60899e3ebb34911acfeff614ad63fb7a5fe758c79fed06c3976fb880f181206169c648354cd085149588c1c59f312", 0x87, 0x8040, 0x0, 0x0) (async)

24.264675964s ago: executing program 7 (id=3367):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff})
listen(r2, 0xfffffff2)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffc, 0x2}, 0x5)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0xa0e4f000)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x1000000012abec)
listen(r0, 0x800)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

23.339547331s ago: executing program 7 (id=3387):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa)
read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020)
dup2(0xffffffffffffffff, r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000005, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x860a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000040)=[{0x5, 0x6, 0x4, 0x4a}, {0x40, 0xd5, 0x6, 0x400}, {0xb, 0x4, 0xc, 0xb}, {0x2, 0xf8, 0x0, 0x401}, {0xdbe, 0x0, 0xfe}, {0x5, 0x79, 0x3, 0x6}, {0x8, 0x7, 0x43, 0x1}, {0x5, 0x2, 0x8, 0x1da}, {0x0, 0x2, 0x4, 0x1}]})
r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r5, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

23.006211158s ago: executing program 7 (id=3390):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x51f282, 0x0)
alarm(0x0) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async)
r1 = gettid() (async)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000080)=0x4, 0x4) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2dce01, 0x0)
alarm(0x6) (async)
r6 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) (async)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32)
r7 = dup(r6) (rerun: 32)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b19430d3a49c249f9d81d1ef249de6f19f96a005acb50a85f"], 0xa8) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa7040, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[])
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000480))
pipe2(&(0x7f0000000000), 0x0) (async)
r10 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000)
flock(r10, 0x8)

22.855572441s ago: executing program 7 (id=3394):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x36)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x1, 0x68, 0x38}, 0x18)
mkdirat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x92)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x60)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0x10, 0x4)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0)
ptrace$cont(0x20, r3, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202)
ioctl$LOOP_SET_FD(r6, 0x4c00, r0)

22.689050664s ago: executing program 7 (id=3395):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

7.627774413s ago: executing program 37 (id=3395):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

3.784182927s ago: executing program 8 (id=3648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000040), 0x4)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1be2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
creat(0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000140)="7bcbe431667f2f9b193e4924c737864ca70a0573d0d614140e77494e137dfe7cde53b742dd4d164639d32632314c3cae7a32ddd1a3a7d4e2ba9e55147ebd726903efd4d493e9817a849344d0def441d611553bfea47a2a3fb9714783a9b9a8d5b3cfe0b8d29adce16f75da49c490cafb42fe1c515ec33f0434e5651c90a24fb290b503e65ea0c43d091ca3fb4719e4100cf846a686feeb292cb819b727716018e1dd2605b0601a0231", 0xa9}, {&(0x7f0000000000)="019f35936394e12dc5336206eb109c2a618f34ae916a698cdcfaba775f8eee37b7858c59c527e99f1b0cc5bf83dcac4ec9619104fa4d2a", 0x37}, {&(0x7f0000000200)="3e1e04769e346aca1db0cb5c78964271bc27e19e0d791533b5a2a3bed36e7b0baa5b52647cf7fa1f3e3e410cd6a7ac0dba382cec231a3140beef382a3632f72f2367e71529b4fc56d50e49bb43346a9faa886c8da1c75211c926d7e423edeb7c1118565199413dd9a2433e4e3268f423becde4548401ff49ecc14744153924d29ede9e3ba4ee891d4e10f22b7a4ca347d2a42c8acc1670b860d3650f451787e836f29a6a359eb0358a3c5d4a2c43c98dca32ca8080e4e5b1f495c4cfdafbd6a59d", 0xc1}, {&(0x7f0000000300)="a561769807cc15daca4fdd453db13b8298caa8b124b7ca5ca8cad05813acd39d1189986ecd99808668944148fde24681604c1a9581b3f59026364d1581e040ad45e20fbc65e3e40e409a677a0e21abdb4e026ded3ba76053917dd482104f194fb6348522921e470b95e1f31f27cea0cf1cdd7a2ee7b874aa1e637cdb7e1e8c651a2c17f75f254dffee1929d07d7b701b991a0118f6b793eb459a81d8b935440f983acf24e903813bb57b1acfc7e916fc3d6f9f2c821e0f228098e824bed70b2e784c38869593cb4db7e50f39e6ac56e8", 0xd0}, {&(0x7f0000000400)="87992d63a96e589aba8d0b7752bdfd62ac66db0542e1e8bf5bcaf190ef7fb45b239f8e2b311fbf2c4b074fc50f515ed9268806eb00ce7f7500e5560052534f1a1f6eba9cf6939de9b927ad2716cb5c5a73ac67b5e6ae078e0f5c489139b9a12be8205d4f846cc734058507", 0x6b}, {&(0x7f0000000480)="a765fea68eab3c36ad34383eae9859646d5470d546c00a13f1fa817c40d865124fa1a3819e3c418056b03688fb5fb57917c4b9d02489b09771dcad96865d8e07d4620788ace05d4a3a70419a01fa38b4e38ea8fb5a72785984da68ee81f10e4f03e51fc9c1130c81870c3eff9ad45188ad6e84c78cc154a93186c52a", 0x7c}], 0x6)

3.707358129s ago: executing program 8 (id=3650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x3})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x3}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

3.600476661s ago: executing program 8 (id=3651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, <r4=>0x0}, &(0x7f0000000180)=0x14)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@empty, <r5=>0x0}, &(0x7f0000000200)=0x14)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', <r8=>0x0, 0x4, 0x80, 0x0, 0x7f, 0x2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x0, 0x3}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000084}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

3.479217893s ago: executing program 9 (id=3653):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}]})
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000500000000000000fdffffffffffffff00000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
dup(r3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x40, 0x20, 0x8, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000140)=ANY=[], 0x138)
mount$9p_fd(0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x2080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}], [{@measure}]}})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020)

3.327417236s ago: executing program 9 (id=3656):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x4, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x8c0}, 0x15)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000580)='.\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000300)='./file0\x00', 0x10000861)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x4000008)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRES16=r4, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYRES16, @ANYBLOB="9692979ab896b630c8889c0421904f5d90e2516cb2e78ad853b8610c6eeb970b037f436e65f5db9ee7c1c992d35fb02180e687fc208ea698b322c942c1e6b8cbd37993002a35ec5f8f185db5", @ANYRES32=r0], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="400d010095809b8115607c90678273f900baed81a8a56cbcfede6981961a738292d190e837e3fc6568a4e5c8d6c78d33c978ff53d17a2a2e369648580711ec71f2d562a756"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1f9003, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00#'])
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)

3.15053643s ago: executing program 8 (id=3657):
r0 = memfd_create(0x0, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x800000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r2, &(0x7f0000000040)={0x4, 0x2, 0x6, 0x734, 0x8, 0xfffffffffffffff7, 0x5, 0x100000001})
r3 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f00005c0000/0x2000)=nil, 0x2000, 0x1000005, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0x5, 0xb, 0xa, 0xe, 0x0, 0x70bd23, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbbc4}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x6, 0x1}, @sadb_address={0x5, 0x5, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}}, 0x84)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000000)={0x2, 0x1, 0x2})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0xd4, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e3ae63c37bef004777e7f37b5e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}], @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @random="163c940f4049"}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "4fef46fd0902590f22263babc9d8"}], @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c1dddd445f"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7dadcaa28a"}, @NL80211_ATTR_KEY_TYPE={0x8}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040}, 0x2040080)

3.10830794s ago: executing program 8 (id=3658):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
futex(&(0x7f000000cffc)=0xfffffffe, 0x1, 0x7fe, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000f020b0109025c0002017f400f09040007010202000005241a"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300))
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r1, &(0x7f0000000140), 0x42)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@wr_crn={0x46, 0x20, {0x4, 0x5}}, @wrmsr={0x1e, 0x20, {0xb6a, 0x10001}}, @wrmsr={0x1e, 0x20, {0xa4b, 0x81}}, @rdmsr={0x32, 0x18, {0xb72}}, @cpuid={0x14, 0x18, {0x7, 0x80000000}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @code={0xa, 0x68, {"b9bf0900000f320f217a470f1c50d20fc7b18acc000066b88f008ee066baa00066b8490066ef470f32b9800000c00f3235000100000f300f0fc8a0c744240002000000c744240200c00000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0xffffffffffffff03}, @wrmsr={0x1e, 0x20, {0x2d3}}, @wr_crn={0x46, 0x20, {0x2, 0xffffffff}}, @uexit={0x0, 0x18, 0x8671}, @wr_crn={0x46, 0x20, {0x2, 0x9}}, @wrmsr={0x1e, 0x20, {0x9b7}}, @wrmsr={0x1e, 0x20, {0x80c, 0xfa}}, @rdmsr={0x32, 0x18, {0x826}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}, @code={0xa, 0x5c, {"0f07660f38826808b9cd0b0000b8d59e8e7aba000000000f3066ba430066ed450f01df0f08c4e24d9f35fa4a0000360f78486066ba6100ecc744240035000000c7442402ec000000ff1c24"}}, @code={0xa, 0x7c, {"66baf80cb8c4affb87ef66bafc0ced430f080f798a0300000066baf80cb8de3b3486ef66bafc0c66edb9800000c00f3235000400000f30c4a21996e966bad104b0fbee0f01980000000048b83620d5a7000000000f23c00f21f83503000c000f23f8c48291bbb2bd960000"}}, @cpuid={0x14, 0x18, {0x2, 0x4}}, @rdmsr={0x32, 0x18, {0xa16}}], 0x328})
write(r2, &(0x7f0000000180)="511412f29e68848fb659e7fe9867720ea26d9c1053827f47db4647e5408940049e8140139c84455e6fa6de40438107362cac405410e15c2cc7f766bd6b24d564d7aaa8f4d375ec07b458fb38acf309cad2ab4b0956b17ab459099ce6ea4d52a34f8046fdc78f8b1a03a39fa491d9f9294f631697ebc8d0b890666b5411eaedca9d670b52f01b4f1aa11856f93b331829ab372e4b2c9fbd6f8659dc53438c0f2a8c23a16363171d8f4b3a357e32e4f4e6e9e181edfb9b01574107dc1c700fc887476088edb761c476db32631c675dc0fa0217f370cd857caa31adbd2eb1a4d4807daa4cdb34b09bad91", 0xe9)
lseek(r1, 0xb19f, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000100))
setpriority(0x2, 0x0, 0xf)
r4 = getpgrp(0xffffffffffffffff)
tkill(r4, 0x7)

920.483082ms ago: executing program 0 (id=3690):
mkdir(&(0x7f0000000040)='./file0\x00', 0x18e)
stat(&(0x7f0000000440)='./file0\x00', 0xfffffffffffffffe)

913.542232ms ago: executing program 0 (id=3691):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)

884.201833ms ago: executing program 0 (id=3692):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14)
getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0)

815.572354ms ago: executing program 0 (id=3693):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x400000000000b, 0x100000300000003})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001})

815.435234ms ago: executing program 0 (id=3694):
syz_open_pts(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000140)=@in6={0x18, 0x0, 0x401}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x180}, 0xc0e)

796.845674ms ago: executing program 0 (id=3695):
r0 = socket(0x11, 0x3, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51})
recvmmsg(r0, &(0x7f0000000100), 0x10, 0x2, 0x0)

243.616695ms ago: executing program 9 (id=3697):
open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0, 0x0)

243.266655ms ago: executing program 3 (id=3698):
r0 = socket(0x18, 0x1, 0x0)
close(r0)
listen(r0, 0xdd)

234.976455ms ago: executing program 3 (id=3699):
setsockopt(0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000080)="c5", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f0000000040), &(0x7f0000000080)=0x4)

196.725846ms ago: executing program 9 (id=3700):
mlock(&(0x7f0000ff5000/0xa000)=nil, 0xa000)
mprotect(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x2)
mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000)

147.565027ms ago: executing program 3 (id=3701):
fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1, 0x6, 0x2fffffffc})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000300000080})

147.218047ms ago: executing program 3 (id=3702):
r0 = socket(0x18, 0x2, 0x0)
setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14)

117.656568ms ago: executing program 9 (id=3703):
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x167342, 0x0)
readv(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
fcntl$notify(0xffffffffffffffff, 0x402, 0x11)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x34, 0x0, &(0x7f00000007c0)=[@request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc00000000000000008d000000000000ff1a00ff00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000ffac1e000100000000000000000000000000000000000300000a0040"], 0xb8}}, 0x0)

101.932568ms ago: executing program 3 (id=3704):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000001280)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"])
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
cachestat(r5, &(0x7f0000000540)={0x20000040265, 0x80000fff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xffff8000)

27.045129ms ago: executing program 8 (id=3705):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x648)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80)
sendfile(r4, r4, 0x0, 0x7a680000)
preadv2(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1, 0xa07, 0x9, 0x3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000)

26.477869ms ago: executing program 3 (id=3706):
r0 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x6, "77c83d77"}]}}}], 0x18}}], 0x1, 0x46000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040))
connect$unix(r6, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4}, 0x6e)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3ff}, 0x1c)
dup2(r4, r5)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xc)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000001c0)={0x0, 0xcc})
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
modify_ldt$write(0x1, &(0x7f0000000900)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000800, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x30000014})

0s ago: executing program 9 (id=3707):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x7, 0x1, 0x3, 0xa, 0x8, 0x30000, 0x5, 0x1, 0x80000000, 0x80000000, 0x4, 0x7, 0x8c, 0x80000001, 0xfa], 0xdddd0000, 0x1f513})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x18)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0xff, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x8, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xe, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0x6, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0xeeee8000, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x1}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0x2}, {0x8080000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x128, 0xb, 0xf801, 0xffff1000, [0x7ff, 0x0, 0x1]})
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000000c0)='{A,\x00', &(0x7f0000000380)='./file0\x00', r2)
sendto(r2, &(0x7f0000000240)="f1f9115649b46d4a70b0694d608b941afa95c540018dc8435d6a083ebac453d0a36eda9616b1d2dbf0e6a25df1af7f9acaf750e171b9d11c66e20f6065a2a18dc4960e4e43e7fb751673a0647aa99134a7cf79bbf5142bf7b2849512e1ceaa3eca4ae7f74d7ae01f2103dc90583571d8636e6f84dcfdc66b", 0x78, 0x48001, &(0x7f0000000300)=@sco, 0x80)

kernel console output (not intermixed with test programs):

/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.640220][   T36] audit: type=1400 audit(1758061408.797:26879): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.641044][  T571] usb 7-1: device descriptor read/8, error -71
[  248.667743][   T36] audit: type=1400 audit(1758061408.797:26880): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.697982][   T36] audit: type=1400 audit(1758061408.797:26881): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.723722][   T36] audit: type=1400 audit(1758061408.797:26882): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.749888][   T36] audit: type=1400 audit(1758061408.827:26883): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.814507][   T36] audit: type=1400 audit(1758061408.977:26884): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.839632][   T36] audit: type=1400 audit(1758061408.977:26885): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.864804][   T36] audit: type=1400 audit(1758061408.997:26886): avc:  denied  { ioctl } for  pid=8316 comm="syz.6.2668" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  248.890453][  T571] usb 7-1: device descriptor read/8, error -71
[  249.003461][  T571] usb usb7-port1: unable to enumerate USB device
[  249.057609][ T8377] rust_binder: Write failure EFAULT in pid:162
[  249.337625][ T8386] can0: slcan on ttyS3.
[  249.456469][ T8386] can0 (unregistered): slcan off ttyS3.
[  249.553326][  T571] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  249.713319][  T571] usb 8-1: Using ep0 maxpacket: 16
[  249.736772][  T571] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.747489][  T571] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.768419][  T571] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.783332][  T365] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  249.788214][  T571] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.805361][  T571] usb 8-1: Product: syz
[  249.813330][  T571] usb 8-1: Manufacturer: syz
[  249.818603][  T571] usb 8-1: SerialNumber: syz
[  249.980609][  T365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.003340][  T365] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  250.033328][  T365] usb 7-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  250.046805][  T365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.060994][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.079639][  T365] usb 7-1: config 0 descriptor??
[  250.093460][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.107325][  T365] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  250.678865][ T8438] overlayfs: failed to clone upperpath
[  251.349923][ T8483] SELinux: security_context_str_to_sid () failed with errno=-22
[  251.693617][ T8508] binder: Unknown parameter 'fscontext?}'
[  251.806660][ T8512] rust_binder: 296: no such ref 3
[  251.819907][ T8512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[  251.821479][ T8511] rust_binder: Error while translating object.
[  251.835168][ T8511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  251.841584][ T8511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[  252.176075][  T571] usb 8-1: 0:2 : does not exist
[  252.226436][  T571] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  252.255654][  T571] usb 8-1: USB disconnect, device number 8
[  252.464135][  T571] usb 7-1: USB disconnect, device number 15
[  252.496275][ T7631] udevd[7631]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  252.598431][ T8530] fuse: Unknown parameter 'fd-0x0000000000000004'
[  252.837222][ T8541] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  252.935791][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.978365][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.005368][ T8548] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2723'.
[  253.113924][ T8550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180
[  253.223079][ T8554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  253.274393][ T8554] rust_binder: 183: no such ref 3
[  253.320408][ T8554] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  253.376698][ T8555] rust_binder: 8554 RLIMIT_NICE not set
[  253.377798][ T8554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  253.383589][ T8554] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  253.408238][ T8554] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:183
[  253.430676][ T8554] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  253.463362][ T8554] rust_binder: Write failure EINVAL in pid:183
[  253.542769][   T36] kauditd_printk_skb: 979 callbacks suppressed
[  253.542791][   T36] audit: type=1400 audit(1758061413.697:27866): avc:  denied  { read write } for  pid=7217 comm="syz-executor" name="loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.633419][   T36] audit: type=1400 audit(1758061413.697:27867): avc:  denied  { read write open } for  pid=7217 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.709152][   T36] audit: type=1400 audit(1758061413.717:27868): avc:  denied  { ioctl } for  pid=7217 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.763332][   T36] audit: type=1400 audit(1758061413.757:27869): avc:  denied  { read } for  pid=8556 comm="syz.7.2727" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  253.788768][   T36] audit: type=1400 audit(1758061413.757:27870): avc:  denied  { read open } for  pid=8556 comm="syz.7.2727" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  253.863331][   T36] audit: type=1400 audit(1758061413.827:27871): avc:  denied  { read } for  pid=8558 comm="syz.0.2728" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  253.923327][   T36] audit: type=1400 audit(1758061413.827:27872): avc:  denied  { read open } for  pid=8558 comm="syz.0.2728" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  253.947951][  T571] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  254.003324][   T36] audit: type=1400 audit(1758061413.827:27873): avc:  denied  { ioctl } for  pid=8558 comm="syz.0.2728" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  254.103323][   T36] audit: type=1400 audit(1758061413.827:27874): avc:  denied  { set_context_mgr } for  pid=8558 comm="syz.0.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  254.153382][  T571] usb 8-1: Using ep0 maxpacket: 8
[  254.173382][   T36] audit: type=1400 audit(1758061413.827:27875): avc:  denied  { ioctl } for  pid=8556 comm="syz.7.2727" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  254.211060][  T571] usb 8-1: unable to get BOS descriptor or descriptor too short
[  254.221771][  T571] usb 8-1: config 6 has an invalid interface number: 28 but max is 1
[  254.240094][  T571] usb 8-1: config 6 has an invalid interface number: 164 but max is 1
[  254.273319][  T571] usb 8-1: config 6 has an invalid interface number: 104 but max is 1
[  254.299250][ T8569] rust_binder: Write failure EINVAL in pid:323
[  254.299680][ T8569] rust_binder: Write failure EINVAL in pid:323
[  254.305963][  T571] usb 8-1: config 6 has 3 interfaces, different from the descriptor's value: 2
[  254.343165][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  254.351892][  T571] usb 8-1: config 6 has no interface number 0
[  254.363311][  T571] usb 8-1: config 6 has no interface number 1
[  254.372325][  T571] usb 8-1: config 6 has no interface number 2
[  254.379527][  T571] usb 8-1: config 6 interface 28 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[  254.390453][  T571] usb 8-1: config 6 interface 28 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  254.402203][  T571] usb 8-1: config 6 interface 28 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  254.412930][  T571] usb 8-1: config 6 interface 28 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  254.423639][  T571] usb 8-1: config 6 interface 28 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  254.434589][  T571] usb 8-1: config 6 interface 28 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  254.452354][  T571] usb 8-1: config 6 interface 28 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 12
[  254.466123][  T571] usb 8-1: too many endpoints for config 6 interface 164 altsetting 132: 121, using maximum allowed: 30
[  254.479523][  T571] usb 8-1: config 6 interface 164 altsetting 132 has a duplicate endpoint with address 0xF, skipping
[  254.491374][  T571] usb 8-1: config 6 interface 164 altsetting 132 has a duplicate endpoint with address 0xC, skipping
[  254.514592][  T571] usb 8-1: config 6 interface 164 altsetting 132 has a duplicate endpoint with address 0xA, skipping
[  254.534495][  T571] usb 8-1: config 6 interface 164 altsetting 132 endpoint 0x9 has invalid wMaxPacketSize 0
[  254.545574][  T571] usb 8-1: config 6 interface 164 altsetting 132 has 5 endpoint descriptors, different from the interface descriptor's value: 121
[  254.560156][  T571] usb 8-1: config 6 interface 104 altsetting 2 has a duplicate endpoint with address 0xA, skipping
[  254.573394][  T571] usb 8-1: config 6 interface 104 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  254.584608][  T571] usb 8-1: config 6 interface 104 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  254.595885][  T571] usb 8-1: config 6 interface 104 altsetting 2 has a duplicate endpoint with address 0xA, skipping
[  254.607271][  T571] usb 8-1: config 6 interface 104 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  254.618278][  T571] usb 8-1: config 6 interface 104 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  254.629745][  T571] usb 8-1: config 6 interface 104 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[  254.640905][  T571] usb 8-1: config 6 interface 164 has no altsetting 0
[  254.648241][  T571] usb 8-1: config 6 interface 104 has no altsetting 0
[  254.659792][  T571] usb 8-1: New USB device found, idVendor=182d, idProduct=0269, bcdDevice=37.c9
[  254.669385][  T571] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.677919][  T571] usb 8-1: Product: syz
[  254.682582][  T571] usb 8-1: Manufacturer: syz
[  254.687484][  T571] usb 8-1: SerialNumber: syz
[  254.697748][ T8559] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  254.714128][ T8559] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  255.446911][  T571] usb 8-1: USB disconnect, device number 9
[  255.699625][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.726570][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.009091][ T8623] fuse: Unknown parameter 'appraise'
[  256.112798][ T8625] pim6reg1: entered promiscuous mode
[  256.118257][ T8625] pim6reg1: entered allmulticast mode
[  256.375540][  T331] rust_binder: 8631: removing orphan mapping 0:24
[  256.394085][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  256.407734][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'.
[  256.451258][ T8640] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  256.497910][ T8640] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  256.528772][ T8640] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  256.552712][ T8640] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  256.631270][ T8648] rust_binder: Got transaction with invalid offset.
[  256.631317][ T8648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  256.652913][ T8648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199
[  256.845617][ T8655] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  256.994810][ T8659] rust_binder: Error while translating object.
[  256.994916][ T8659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  257.002569][ T8659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205
[  257.533330][   T64] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  257.733617][ T8689] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2775'.
[  257.736329][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.755301][ T8696] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  257.755795][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.793063][   T64] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  257.803358][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.821029][   T64] usb 7-1: config 0 descriptor??
[  257.996490][ T8466] Bluetooth: hci0: Frame reassembly failed (-84)
[  258.002955][ T8466] Bluetooth: hci0: Frame reassembly failed (-84)
[  258.580783][   T36] kauditd_printk_skb: 749 callbacks suppressed
[  258.580802][   T36] audit: type=1400 audit(1758061418.737:28625): avc:  denied  { read write } for  pid=7627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.613420][   T36] audit: type=1400 audit(1758061418.747:28626): avc:  denied  { name_bind } for  pid=8713 comm="syz.3.2784" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  258.644896][   T36] audit: type=1400 audit(1758061418.747:28627): avc:  denied  { node_bind } for  pid=8713 comm="syz.3.2784" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  258.670740][   T36] audit: type=1400 audit(1758061418.747:28628): avc:  denied  { read write open } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.678824][   T64] hid-led 0003:27B8:01ED.001C: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0
[  258.735738][   T64] hid-led 0003:27B8:01ED.001C: ThingM blink(1) initialized
[  258.751759][   T36] audit: type=1400 audit(1758061418.747:28629): avc:  denied  { ioctl } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  258.818278][ T8721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  258.818319][ T8721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:218
[  258.833334][   T36] audit: type=1400 audit(1758061418.807:28630): avc:  denied  { read } for  pid=8715 comm="syz.7.2785" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  258.923331][   T36] audit: type=1400 audit(1758061418.807:28631): avc:  denied  { read open } for  pid=8715 comm="syz.7.2785" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  258.950542][    T9] usb 7-1: USB disconnect, device number 16
[  258.996097][   T36] audit: type=1400 audit(1758061418.827:28632): avc:  denied  { ioctl } for  pid=8667 comm="syz.6.2768" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  259.028203][   T36] audit: type=1400 audit(1758061418.827:28633): avc:  denied  { ioctl } for  pid=8667 comm="syz.6.2768" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  259.073347][   T36] audit: type=1400 audit(1758061418.827:28634): avc:  denied  { map } for  pid=8715 comm="syz.7.2785" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  259.605240][ T8739] netlink: 'syz.7.2792': attribute type 4 has an invalid length.
[  259.614537][ T8739] netlink: 'syz.7.2792': attribute type 2 has an invalid length.
[  259.774243][ T8744] veth0_virt_wifi: entered allmulticast mode
[  259.780612][ T8743] veth0_virt_wifi: left allmulticast mode
[  260.036696][ T8756] random: crng reseeded on system resumption
[  260.073332][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  260.079457][  T979] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  260.351922][ T8769] overlayfs: failed to resolve './bus': -2
[  260.363343][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  260.533324][    T9] usb 8-1: Using ep0 maxpacket: 32
[  260.545556][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.564565][    T9] usb 8-1: config 1 interface 0 altsetting 15 endpoint 0x1 has invalid wMaxPacketSize 0
[  260.576362][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.589042][    T9] usb 8-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 0
[  260.607808][    T9] usb 8-1: config 1 interface 0 has no altsetting 0
[  260.635191][    T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  260.653601][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.662981][    T9] usb 8-1: Product: 緩霡앗듃鲘’޷ځ緓䑩າ뵕膫嬯䝵욭ꩃ駊鐟╝뚱㝲㌕霬虩鵉ⰸ豛᳂भꎜ틹퐅꘹㚛鵿燈焉
[  260.700534][    T9] usb 8-1: SerialNumber: Џ
[  260.935654][    T9] usb 8-1: USB disconnect, device number 10
[  260.963342][   T64] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  261.135747][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.146859][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.156697][   T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  261.169673][   T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.178842][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.188503][   T64] usb 7-1: config 0 descriptor??
[  261.527344][ T8785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  261.614782][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.648241][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.664520][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.678329][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.686443][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.695488][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.702975][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.711422][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.719558][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.727097][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.734548][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.741951][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.750065][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.757784][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.765237][   T64] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  261.772784][   T64] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  261.784331][   T64] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  261.873349][    T9] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  261.876322][  T331] usb 7-1: USB disconnect, device number 17
[  262.036445][    T9] usb 8-1: config index 0 descriptor too short (expected 19492, got 36)
[  262.044864][    T9] usb 8-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  262.053511][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 36
[  262.062487][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  262.073482][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.083230][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.096158][    T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  262.105244][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.115048][    T9] usb 8-1: config 0 descriptor??
[  262.455837][ T8811] rust_binder: 240: no such ref 0
[  262.520044][ T8818] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2817'.
[  262.529823][ T8817] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2817'.
[  262.540761][    T9] lg-g15 0003:046D:C225.001E: unknown main item tag 0x3
[  262.551316][    T9] lg-g15 0003:046D:C225.001E: hidraw1: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.7-1/input0
[  262.599261][ T8821] SELinux:  Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped).
[  262.696417][ T8828] 9pnet_fd: Insufficient options for proto=fd
[  262.713534][  T365] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  262.744333][ T8788] rust_binder: 243: no such ref 0
[  262.752050][  T331] usb 8-1: USB disconnect, device number 11
[  262.835954][ T8833] overlayfs: failed to clone upperpath
[  262.866358][  T365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.877860][  T365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.888690][  T365] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  262.898632][  T365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.909933][  T365] usb 7-1: config 0 descriptor??
[  263.123807][  T365] usbhid 7-1:0.0: can't add hid device: -71
[  263.147515][  T365] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  263.162796][  T365] usb 7-1: USB disconnect, device number 18
[  263.295112][ T8854] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  263.295564][ T8854] rust_binder: 245: no such ref 2
[  263.308449][ T8854] rust_binder: 245: no such ref 1
[  263.548685][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.557448][  T331] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  263.565283][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.579006][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.587641][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.597670][   T36] kauditd_printk_skb: 554 callbacks suppressed
[  263.597689][   T36] audit: type=1400 audit(1758061423.754:29189): avc:  denied  { ioctl } for  pid=8857 comm="syz.0.2832" path="/dev/vsock" dev="devtmpfs" ino=207 ioctlcmd=0x5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  263.628575][   T36] audit: type=1400 audit(1758061423.754:29190): avc:  denied  { ioctl } for  pid=8857 comm="syz.0.2832" path="/dev/vsock" dev="devtmpfs" ino=207 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  263.653812][   T36] audit: type=1400 audit(1758061423.814:29191): avc:  denied  { ioctl } for  pid=8853 comm="syz.7.2830" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  263.685336][   T36] audit: type=1400 audit(1758061423.844:29192): avc:  denied  { read write } for  pid=7327 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.709788][   T36] audit: type=1400 audit(1758061423.844:29193): avc:  denied  { read write open } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.744270][   T36] audit: type=1400 audit(1758061423.844:29194): avc:  denied  { ioctl } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  263.767590][ T8860] rust_binder: 8860 RLIMIT_NICE not set
[  263.772094][   T36] audit: type=1400 audit(1758061423.894:29195): avc:  denied  { read } for  pid=8859 comm="syz.6.2833" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  263.796411][   T31] rust_binder: 8859: removing orphan mapping 0:1024
[  263.803179][   T36] audit: type=1400 audit(1758061423.894:29196): avc:  denied  { read open } for  pid=8859 comm="syz.6.2833" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  263.837632][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  263.838139][   T36] audit: type=1400 audit(1758061423.904:29197): avc:  denied  { create } for  pid=8859 comm="syz.6.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  263.845516][  T331] usb 8-1: can't read configurations, error -61
[  263.875612][   T36] audit: type=1400 audit(1758061423.904:29198): avc:  denied  { map } for  pid=8859 comm="syz.6.2833" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  263.904651][ T8866] pim6reg1: entered promiscuous mode
[  263.911329][ T8866] pim6reg1: entered allmulticast mode
[  264.023345][  T331] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  264.132496][ T8878] veth1: entered allmulticast mode
[  264.198437][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  264.206694][  T331] usb 8-1: can't read configurations, error -61
[  264.214848][  T331] usb usb8-port1: attempt power cycle
[  264.309600][ T8890] overlayfs: failed to resolve './file0': -2
[  264.363015][ T8895] rust_binder: Read failure Err(EAGAIN) in pid:384
[  264.414300][ T8898] binder: Unknown parameter 'defcontext01777777777777777777777'
[  264.476489][ T8900] Unsupported ieee802154 address type: 0
[  264.553824][  T331] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  264.599505][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  264.623314][  T331] usb 8-1: can't read configurations, error -61
[  264.753344][  T331] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  264.780380][ T8912] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2850'.
[  264.804638][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  264.812255][  T331] usb 8-1: can't read configurations, error -61
[  264.822040][  T331] usb usb8-port1: unable to enumerate USB device
[  264.851397][ T8872] veth1: left allmulticast mode
[  265.096459][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.114731][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.201378][ T8928] rust_binder: Write failure EFAULT in pid:253
[  265.270643][ T8931] can0: slcan on ttyS3.
[  265.334267][ T8930] can0 (unregistered): slcan off ttyS3.
[  265.553386][  T331] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  265.712063][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  265.720216][  T331] usb 8-1: can't read configurations, error -61
[  265.853443][  T331] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  266.006494][  T331] usb 8-1: unable to read config index 0 descriptor/start: -61
[  266.014301][  T331] usb 8-1: can't read configurations, error -61
[  266.020692][  T331] usb usb8-port1: attempt power cycle
[  266.363358][  T331] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  266.472463][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2862'.
[  266.575871][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.586411][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.793326][  T331] usb 8-1: device not accepting address 18, error -71
[  266.802634][ T8956] __vm_enough_memory: pid: 8956, comm: syz.7.2864, bytes: 18014402804453376 not enough memory for the allocation
[  267.890027][ T8987] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  267.947339][ T8989] rust_binder: Error while translating object.
[  267.970252][ T8989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  267.976571][ T8989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[  268.070172][ T8996] overlayfs: failed to clone upperpath
[  268.113377][ T8999] tipc: Started in network mode
[  268.121985][ T8999] tipc: Node identity ac14140f, cluster identity 4711
[  268.141005][ T8999] tipc: New replicast peer: 255.255.255.255
[  268.153598][ T8999] tipc: Enabled bearer <udp:syz2>, priority 10
[  268.173406][  T365] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  268.317055][  T365] usb 7-1: device descriptor read/64, error -71
[  268.563324][  T365] usb 7-1: device descriptor read/64, error -71
[  268.615480][   T36] kauditd_printk_skb: 621 callbacks suppressed
[  268.615500][   T36] audit: type=1400 audit(1758061428.774:29820): avc:  denied  { read write } for  pid=7627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  268.647159][   T36] audit: type=1400 audit(1758061428.774:29821): avc:  denied  { read write open } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  268.679247][   T36] audit: type=1400 audit(1758061428.774:29822): avc:  denied  { ioctl } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  268.703618][ T9023] overlay: filesystem on ./bus is read-only
[  268.707256][   T36] audit: type=1400 audit(1758061428.834:29823): avc:  denied  { mounton } for  pid=9022 comm="syz.7.2888" path="/92/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  268.734170][   T36] audit: type=1400 audit(1758061428.834:29824): avc:  denied  { mount } for  pid=9022 comm="syz.7.2888" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  268.756701][   T36] audit: type=1400 audit(1758061428.834:29825): avc:  denied  { mount } for  pid=9022 comm="syz.7.2888" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  268.779557][   T36] audit: type=1400 audit(1758061428.834:29826): avc:  denied  { mounton } for  pid=9022 comm="syz.7.2888" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  268.802182][   T36] audit: type=1400 audit(1758061428.864:29827): avc:  denied  { ioctl } for  pid=8990 comm="syz.6.2877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  268.833331][  T365] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  268.856445][   T36] audit: type=1400 audit(1758061428.864:29828): avc:  denied  { ioctl } for  pid=8990 comm="syz.6.2877" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  268.909542][   T36] audit: type=1400 audit(1758061428.914:29829): avc:  denied  { unmount } for  pid=7627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  268.938093][ T9029] loop4: detected capacity change from 0 to 8388608
[  268.983337][  T365] usb 7-1: device descriptor read/64, error -71
[  269.163323][   T31] tipc: Node number set to 2886997007
[  269.233375][  T365] usb 7-1: device descriptor read/64, error -71
[  269.343886][  T365] usb usb7-port1: attempt power cycle
[  269.703328][  T365] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  269.753542][  T365] usb 7-1: device descriptor read/8, error -71
[  269.796011][ T9045] 9pnet: Could not find request transport: fdfdno=
[  269.886086][  T365] usb 7-1: device descriptor read/8, error -71
[  270.123426][  T365] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  270.146207][  T365] usb 7-1: device descriptor read/8, error -71
[  270.284337][  T365] usb 7-1: device descriptor read/8, error -71
[  270.337645][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.347414][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.394277][  T365] usb usb7-port1: unable to enumerate USB device
[  270.968742][ T9088] kvm: pic: level sensitive irq not supported
[  270.969023][ T9088] kvm: pic: single mode not supported
[  271.323369][  T514] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  271.503332][  T514] usb 7-1: Using ep0 maxpacket: 8
[  271.512823][  T514] usb 7-1: unable to get BOS descriptor or descriptor too short
[  271.524344][  T514] usb 7-1: config 3 has an invalid interface number: 235 but max is 1
[  271.533308][  T514] usb 7-1: config 3 has an invalid interface association descriptor of length 2, skipping
[  271.544634][  T514] usb 7-1: config 3 has an invalid interface number: 19 but max is 1
[  271.552825][  T514] usb 7-1: config 3 has 3 interfaces, different from the descriptor's value: 2
[  271.563154][  T514] usb 7-1: config 3 has no interface number 0
[  271.571548][  T514] usb 7-1: config 3 has no interface number 2
[  271.578615][  T514] usb 7-1: config 3 interface 235 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 16
[  271.589577][  T514] usb 7-1: config 3 interface 235 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  271.615227][  T514] usb 7-1: too many endpoints for config 3 interface 19 altsetting 144: 251, using maximum allowed: 30
[  271.637739][  T514] usb 7-1: config 3 interface 19 altsetting 144 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  271.653992][  T514] usb 7-1: config 3 interface 19 altsetting 144 has 2 endpoint descriptors, different from the interface descriptor's value: 251
[  271.669936][  T514] usb 7-1: config 3 interface 1 has no altsetting 0
[  271.677767][  T514] usb 7-1: config 3 interface 235 has no altsetting 0
[  271.684524][ T9098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  271.684576][ T9098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:468
[  271.685968][  T514] usb 7-1: config 3 interface 19 has no altsetting 0
[  271.717610][  T514] usb 7-1: language id specifier not provided by device, defaulting to English
[  271.764206][  T514] usb 7-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=2e.ef
[  271.773432][  T514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.781471][  T514] usb 7-1: Product: syz
[  271.807286][  T514] usb 7-1: SerialNumber: syz
[  272.211868][ T9111] rust_binder: 295: no such ref 3
[  272.224512][ T9111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295
[  272.426951][ T9095] syz.3.2913: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[  272.458950][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.3.2913 Not tainted syzkaller #0 c99467cd6756103055c98b8b2c0cb99eaa178386
[  272.458988][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  272.459004][ T9095] Call Trace:
[  272.459012][ T9095]  <TASK>
[  272.459023][ T9095]  __dump_stack+0x21/0x30
[  272.459059][ T9095]  dump_stack_lvl+0x10c/0x190
[  272.459091][ T9095]  ? __cfi_dump_stack_lvl+0x10/0x10
[  272.459123][ T9095]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  272.459160][ T9095]  dump_stack+0x19/0x20
[  272.459189][ T9095]  warn_alloc+0x1bc/0x2a0
[  272.459218][ T9095]  ? do_syscall_64+0x58/0xf0
[  272.459253][ T9095]  ? __cfi_warn_alloc+0x10/0x10
[  272.459281][ T9095]  ? __get_vm_area_node+0x1dc/0x3a0
[  272.459316][ T9095]  ? xp_create_and_assign_umem+0x203/0x1050
[  272.459346][ T9095]  __vmalloc_node_range_noprof+0x68e/0x1420
[  272.459393][ T9095]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  272.459425][ T9095]  ? __kmalloc_large_node_noprof+0x1e/0xe0
[  272.459460][ T9095]  ? __kmalloc_node_noprof+0x2a5/0x450
[  272.459494][ T9095]  __kvmalloc_node_noprof+0xfc/0x300
[  272.459527][ T9095]  ? xp_create_and_assign_umem+0x203/0x1050
[  272.459556][ T9095]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  272.459587][ T9095]  ? ref_tracker_alloc+0x308/0x540
[  272.459613][ T9095]  ? __cfi_ref_tracker_alloc+0x10/0x10
[  272.459638][ T9095]  xp_create_and_assign_umem+0x203/0x1050
[  272.459670][ T9095]  xsk_bind+0x38a/0xde0
[  272.459695][ T9095]  __sys_bind+0x2ff/0x3f0
[  272.459728][ T9095]  ? __cfi___sys_bind+0x10/0x10
[  272.459763][ T9095]  ? fput+0x1a5/0x240
[  272.459792][ T9095]  ? __kasan_check_read+0x15/0x20
[  272.459824][ T9095]  ? fpregs_assert_state_consistent+0xb7/0xe0
[  272.459854][ T9095]  __x64_sys_bind+0x7e/0x90
[  272.459886][ T9095]  x64_sys_call+0x1ffd/0x2ee0
[  272.459921][ T9095]  do_syscall_64+0x58/0xf0
[  272.459954][ T9095]  ? clear_bhb_loop+0x50/0xa0
[  272.459984][ T9095]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  272.460012][ T9095] RIP: 0033:0x7ff1fd58eba9
[  272.460039][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.460061][ T9095] RSP: 002b:00007ff1fbfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  272.460087][ T9095] RAX: ffffffffffffffda RBX: 00007ff1fd7d6180 RCX: 00007ff1fd58eba9
[  272.460105][ T9095] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004
[  272.460122][ T9095] RBP: 00007ff1fd611e19 R08: 0000000000000000 R09: 0000000000000000
[  272.460137][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.460152][ T9095] R13: 00007ff1fd7d6218 R14: 00007ff1fd7d6180 R15: 00007ffe00cf4828
[  272.460173][ T9095]  </TASK>
[  272.460228][ T9095] Mem-Info:
[  272.482971][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.499119][ T9095] active_anon:56818 inactive_anon:4 isolated_anon:0
[  272.499119][ T9095]  active_file:22950 inactive_file:2667 isolated_file:0
[  272.499119][ T9095]  unevictable:17127 dirty:121 writeback:0
[  272.499119][ T9095]  slab_reclaimable:5203 slab_unreclaimable:72992
[  272.499119][ T9095]  mapped:25936 shmem:32923 pagetables:1160
[  272.499119][ T9095]  sec_pagetables:0 bounce:0
[  272.499119][ T9095]  kernel_misc_reclaimable:0
[  272.499119][ T9095]  free:1370394 free_pcp:3931 free_cma:0
[  272.519510][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.525205][ T9095] Node 0 active_anon:227272kB inactive_anon:16kB active_file:91800kB inactive_file:10668kB unevictable:68508kB isolated(anon):0kB isolated(file):0kB mapped:103744kB dirty:484kB writeback:0kB shmem:131692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6380kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no
[  272.822399][ T9095] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:0kB free_cma:0kB
[  272.852160][ T9095] lowmem_reserve[]: 0 3921 3921
[  272.857088][ T9095] Normal free:2521236kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:227200kB inactive_anon:16kB active_file:92164kB inactive_file:10796kB unevictable:68520kB writepending:540kB present:5242880kB managed:4016120kB mlocked:12kB bounce:0kB free_pcp:9604kB local_pcp:8124kB free_cma:0kB
[  272.889088][ T9095] lowmem_reserve[]: 0 0 0
[  272.893621][ T9095] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  272.909202][ T9095] Normal: 2*4kB (UM) 2*8kB (ME) 35*16kB (UME) 38*32kB (ME) 19*64kB (UME) 15*128kB (UME) 15*256kB (ME) 25*512kB (UME) 25*1024kB (UME) 12*2048kB (UME) 598*4096kB (UM) = 2521160kB
[  272.927341][ T9095] 75784 total pagecache pages
[  272.932087][ T9095] 6 pages in swap cache
[  272.936324][ T9095] Free swap  = 124384kB
[  272.940917][ T9095] Total swap = 124996kB
[  272.945144][ T9095] 2097051 pages RAM
[  272.949137][ T9095] 0 pages HighMem/MovableOnly
[  272.954517][ T9095] 351533 pages reserved
[  272.954621][  T514] ftdi_sio 7-1:3.1: FTDI USB Serial Device converter detected
[  272.958694][ T9095] 0 pages cma reserved
[  272.961738][ T9095] Memory allocations:
[  272.974867][ T9095]          0 B        0 init/main.c:1370 func:do_initcalls
[  272.982249][ T9095]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  272.987376][  T514] ftdi_sio ttyUSB0: unknown device type: 0x2eef
[  272.992202][ T9095]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  273.007072][  T514] usb 7-1: USB disconnect, device number 23
[  273.013366][ T9095]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  273.015143][  T514] ftdi_sio 7-1:3.1: device disconnected
[  273.027423][ T9095]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  273.038836][ T9095]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  273.055709][ T9095]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  273.064504][ T9095]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  273.072535][ T9095]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  273.081674][ T9095]          0 B        0 init/initramfs.c:101 func:find_link
[  273.511418][ T9135] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  273.511447][ T9135] rust_binder: Read failure Err(EFAULT) in pid:490
[  273.646677][   T36] kauditd_printk_skb: 494 callbacks suppressed
[  273.646696][   T36] audit: type=1400 audit(1758061433.804:30324): avc:  denied  { read write } for  pid=7327 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.746129][   T36] audit: type=1400 audit(1758061433.854:30325): avc:  denied  { read write open } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.776274][   T36] audit: type=1400 audit(1758061433.854:30326): avc:  denied  { ioctl } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  273.856770][ T9150] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  273.858309][   T36] audit: type=1400 audit(1758061433.864:30327): avc:  denied  { mounton } for  pid=9141 comm="syz.0.2928" path="/167/file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  273.900231][   T36] audit: type=1400 audit(1758061433.864:30328): avc:  denied  { mount } for  pid=9141 comm="syz.0.2928" name="/" dev="incremental-fs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  273.960646][   T36] audit: type=1400 audit(1758061433.874:30329): avc:  denied  { read append } for  pid=9141 comm="syz.0.2928" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  274.014634][ T9154] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  274.033315][   T36] audit: type=1400 audit(1758061433.874:30330): avc:  denied  { read append open } for  pid=9141 comm="syz.0.2928" path="/167/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  274.133404][   T36] audit: type=1400 audit(1758061433.874:30331): avc:  denied  { ioctl } for  pid=9141 comm="syz.0.2928" path="/167/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  274.230406][   T36] audit: type=1400 audit(1758061433.904:30332): avc:  denied  { read } for  pid=9144 comm="syz.6.2930" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  274.307190][   T36] audit: type=1400 audit(1758061433.904:30333): avc:  denied  { read open } for  pid=9144 comm="syz.6.2930" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  274.341596][ T9163] rust_binder: 497: no such ref 0
[  274.433332][  T571] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  274.603930][  T571] usb 7-1: Using ep0 maxpacket: 16
[  274.610496][  T571] usb 7-1: too many configurations: 77, using maximum allowed: 8
[  274.638075][  T571] usb 7-1: unable to read config index 0 descriptor/start: -61
[  274.653314][  T571] usb 7-1: can't read configurations, error -61
[  274.704768][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.724050][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.803375][  T571] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  274.972629][  T571] usb 7-1: Using ep0 maxpacket: 16
[  274.986358][  T571] usb 7-1: too many configurations: 77, using maximum allowed: 8
[  275.013773][  T571] usb 7-1: unable to read config index 0 descriptor/start: -61
[  275.023307][  T571] usb 7-1: can't read configurations, error -61
[  275.036793][  T571] usb usb7-port1: attempt power cycle
[  275.091051][  T365] rust_binder: 9188: removing orphan mapping 0:4208
[  275.132264][ T9192] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  275.132290][ T9192] rust_binder: Read failure Err(EFAULT) in pid:318
[  275.393358][  T571] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  275.454457][  T571] usb 7-1: Using ep0 maxpacket: 16
[  275.475409][  T571] usb 7-1: too many configurations: 77, using maximum allowed: 8
[  275.485752][  T571] usb 7-1: unable to read config index 0 descriptor/start: -61
[  275.504475][  T571] usb 7-1: can't read configurations, error -61
[  275.516322][ T9204] rust_binder: Write failure EINVAL in pid:513
[  275.539868][ T9206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9206 comm=syz.3.2950
[  275.583561][ T9207] tap0: tun_chr_ioctl cmd 1074025675
[  275.589084][ T9207] tap0: persist enabled
[  275.594174][ T9207] tap0: tun_chr_ioctl cmd 1074025675
[  275.599499][ T9207] tap0: persist disabled
[  275.604112][ T9207] tap0: tun_chr_ioctl cmd 1074025675
[  275.609445][ T9207] tap0: persist disabled
[  275.623343][ T9209] fuse: Bad value for 'group_id'
[  275.628398][ T9209] fuse: Bad value for 'group_id'
[  275.637273][ T9210] 9pnet_fd: Insufficient options for proto=fd
[  275.653350][  T571] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  275.674079][  T571] usb 7-1: Using ep0 maxpacket: 16
[  275.681016][  T571] usb 7-1: too many configurations: 77, using maximum allowed: 8
[  275.694372][  T571] usb 7-1: unable to read config index 0 descriptor/start: -61
[  275.702465][  T571] usb 7-1: can't read configurations, error -61
[  275.709683][  T571] usb usb7-port1: unable to enumerate USB device
[  275.729935][ T9216] 9pnet_fd: Insufficient options for proto=fd
[  276.974640][ T9239] overlayfs: failed to resolve './file2': -2
[  276.987536][ T9241] overlayfs: missing 'workdir'
[  276.994327][ T9240] overlayfs: missing 'workdir'
[  277.077474][ T9243] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  277.111553][ T9243] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  277.191852][ T9246] tipc: Started in network mode
[  277.201697][ T9246] tipc: Node identity 32c47482caec, cluster identity 4711
[  277.218980][ T9246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.234039][ T9246] tipc: Disabling bearer <eth:syzkaller0>
[  277.364026][ T9253] __vm_enough_memory: pid: 9253, comm: syz.6.2967, bytes: 18014402804453376 not enough memory for the allocation
[  277.386061][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.401990][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.994831][ T9273] __vm_enough_memory: pid: 9273, comm: syz.6.2973, bytes: 21200350474240 not enough memory for the allocation
[  278.072894][ T9277] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2975'.
[  278.100284][ T9277] rust_binder: 542: no such ref 0
[  278.105520][ T9277] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  278.115045][ T9277] rust_binder: 542: no such ref 64
[  278.120442][ T9277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:542
[  278.125096][ T9280] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  278.289858][ T9292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2978'.
[  278.520320][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.532947][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.542386][ T9304] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  278.542412][ T9304] rust_binder: Error while translating object.
[  278.552985][ T9304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  278.560109][ T9304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556
[  278.947114][   T36] kauditd_printk_skb: 655 callbacks suppressed
[  278.947136][   T36] audit: type=1400 audit(1758061439.104:30983): avc:  denied  { read write } for  pid=7327 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  279.013148][   T36] audit: type=1400 audit(1758061439.104:30984): avc:  denied  { read write open } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  279.040309][   T36] audit: type=1400 audit(1758061439.104:30985): avc:  denied  { ioctl } for  pid=7327 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  279.067050][   T36] audit: type=1400 audit(1758061439.194:30986): avc:  denied  { create } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.094310][   T36] audit: type=1400 audit(1758061439.194:30987): avc:  denied  { write } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.171151][   T36] audit: type=1400 audit(1758061439.194:30988): avc:  denied  { nlmsg_write } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.214910][ T9311] netlink: 'syz.6.2987': attribute type 1 has an invalid length.
[  279.222755][   T36] audit: type=1400 audit(1758061439.194:30989): avc:  denied  { create } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.253204][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2987'.
[  279.284562][   T36] audit: type=1400 audit(1758061439.194:30990): avc:  denied  { write } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.334930][   T36] audit: type=1400 audit(1758061439.194:30991): avc:  denied  { nlmsg_write } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.375284][   T36] audit: type=1400 audit(1758061439.194:30992): avc:  denied  { create } for  pid=9305 comm="syz.6.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  279.386184][ T9317] binder: Unknown parameter '��������'
[  279.524442][ T9326] netlink: 'syz.3.2992': attribute type 1 has an invalid length.
[  279.617907][ T9332] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  279.629830][ T9332] rust_binder: Write failure EINVAL in pid:303
[  279.639164][ T9335] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  279.669504][ T9335] rust_binder: Write failure EINVAL in pid:303
[  279.805736][ T9352] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  279.855674][ T9357] /dev/rnullb0: Can't open blockdev
[  279.954236][ T9364] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3002'.
[  281.524050][ T9382] rust_binder: Got transaction with invalid offset.
[  281.524099][ T9382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  281.530882][ T9382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:335
[  281.718070][ T9389] __vm_enough_memory: pid: 9389, comm: syz.6.3013, bytes: 18014402804453376 not enough memory for the allocation
[  281.748457][ T9391] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  282.932049][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3020'.
[  282.947528][ T9413] tipc: Invalid UDP bearer configuration
[  282.947580][ T9413] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  283.193840][ T9436] fuse: Unknown parameter 'gRu'
[  283.413921][ T9447] can0: slcan on ttyS3.
[  283.495158][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.509659][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.575379][ T9447] can0 (unregistered): slcan off ttyS3.
[  283.960640][   T36] kauditd_printk_skb: 671 callbacks suppressed
[  283.960660][   T36] audit: type=1400 audit(1758061700.109:31664): avc:  denied  { search } for  pid=9461 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.009087][   T36] audit: type=1400 audit(1758061700.149:31665): avc:  denied  { search } for  pid=9461 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.051086][   T36] audit: type=1400 audit(1758061700.149:31666): avc:  denied  { search } for  pid=9461 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.079151][ T8462] bridge_slave_1: left allmulticast mode
[  284.088164][ T8462] bridge_slave_1: left promiscuous mode
[  284.103335][   T36] audit: type=1400 audit(1758061700.149:31667): avc:  denied  { getattr } for  pid=9461 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=5033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  284.113408][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.166329][ T8462] bridge_slave_0: left allmulticast mode
[  284.167670][   T36] audit: type=1400 audit(1758061700.149:31668): avc:  denied  { search } for  pid=9461 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.186429][ T8462] bridge_slave_0: left promiscuous mode
[  284.219950][   T36] audit: type=1400 audit(1758061700.149:31669): avc:  denied  { search } for  pid=9461 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.233409][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.255188][ T9472] audit: audit_backlog=65 > audit_backlog_limit=64
[  284.261735][ T9472] audit: audit_lost=996 audit_rate_limit=0 audit_backlog_limit=64
[  284.272371][   T36] audit: type=1400 audit(1758061700.149:31670): avc:  denied  { search } for  pid=9461 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.298669][ T9472] audit: backlog limit exceeded
[  284.468227][ T8462] tipc: Left network mode
[  284.486605][ T8462] veth1_macvtap: left promiscuous mode
[  284.502375][ T8462] veth0_vlan: left promiscuous mode
[  284.600070][ T9488] overlayfs: failed to clone upperpath
[  284.781126][ T9495] 9pnet_fd: Insufficient options for proto=fd
[  284.894925][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.902006][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.920226][ T9482] bridge_slave_0: entered allmulticast mode
[  284.926735][ T9482] bridge_slave_0: entered promiscuous mode
[  284.934815][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.942727][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.952817][ T9482] bridge_slave_1: entered allmulticast mode
[  284.983675][ T9482] bridge_slave_1: entered promiscuous mode
[  284.997797][ T9513] overlayfs: failed to clone upperpath
[  285.058874][ T9513] overlayfs: failed to clone upperpath
[  285.343987][ T9525] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  285.392433][ T9537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351
[  285.497806][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.514060][ T8466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.533220][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.540407][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.625930][ T9482] veth0_vlan: entered promiscuous mode
[  285.698621][ T9482] veth1_macvtap: entered promiscuous mode
[  286.253356][  T331] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  286.405696][  T331] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  286.418463][  T331] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.420140][ T9574] netlink: 'syz.0.3062': attribute type 16 has an invalid length.
[  286.428682][  T331] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  286.438312][ T9574] netlink: 'syz.0.3062': attribute type 2 has an invalid length.
[  286.456706][  T331] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  286.457477][ T9574] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.3062'.
[  286.468276][  T331] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.483752][  T331] usb 9-1: Product: syz
[  286.487984][  T331] usb 9-1: Manufacturer: syz
[  286.492594][  T331] usb 9-1: SerialNumber: syz
[  286.499329][  T331] usb 9-1: config 0 descriptor??
[  286.506474][  T331] usb-storage 9-1:0.0: USB Mass Storage device detected
[  286.515761][  T331] usb-storage 9-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  287.275624][ T9590] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  287.287396][ T9590] rust_binder: Error while translating object.
[  287.299804][ T9590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  287.306234][ T9590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:614
[  287.317774][ T9590] rust_binder: Error while translating object.
[  287.327650][ T9590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  287.334686][ T9590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:614
[  287.381907][ T9592] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9592 comm=syz.0.3067
[  287.546324][ T9601] 9pnet_fd: Insufficient options for proto=fd
[  288.167634][ T9606] fuseblk: Bad value for 'fd'
[  288.443385][ T9623] mmap: syz.3.3076 (9623) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  288.814710][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.839137][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.868741][ T9638] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.881285][ T9638] rust_binder: Write failure EINVAL in pid:640
[  288.963508][   T36] kauditd_printk_skb: 981 callbacks suppressed
[  288.963529][   T36] audit: type=1400 audit(1758061705.119:32529): avc:  denied  { mounton } for  pid=9637 comm="syz.0.3080" path="/213/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  289.008630][   T36] audit: type=1400 audit(1758061705.159:32530): avc:  denied  { mount } for  pid=9637 comm="syz.0.3080" name="/" dev="incremental-fs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  289.038086][  T365] usb 9-1: USB disconnect, device number 2
[  289.073292][   T36] audit: type=1400 audit(1758061705.219:32531): avc:  denied  { read write } for  pid=9482 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  289.134971][   T36] audit: type=1400 audit(1758061705.219:32532): avc:  denied  { read write open } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  289.161934][   T36] audit: type=1400 audit(1758061705.219:32533): avc:  denied  { ioctl } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  289.211239][   T36] audit: type=1400 audit(1758061705.339:32534): avc:  denied  { read write } for  pid=9644 comm="syz.8.3082" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  289.236445][   T36] audit: type=1400 audit(1758061705.339:32535): avc:  denied  { read write open } for  pid=9644 comm="syz.8.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  289.261091][   T36] audit: type=1400 audit(1758061705.339:32536): avc:  denied  { ioctl } for  pid=9644 comm="syz.8.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  289.286673][   T36] audit: type=1400 audit(1758061705.339:32537): avc:  denied  { ioctl } for  pid=9644 comm="syz.8.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  289.311760][   T36] audit: type=1400 audit(1758061705.339:32538): avc:  denied  { ioctl } for  pid=9644 comm="syz.8.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  289.503331][  T365] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  289.653339][  T365] usb 9-1: Using ep0 maxpacket: 32
[  289.661945][  T365] usb 9-1: unable to get BOS descriptor or descriptor too short
[  289.671450][  T365] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.685167][  T365] usb 9-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[  289.694345][  T365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.702351][  T365] usb 9-1: Product: syz
[  289.706599][  T365] usb 9-1: Manufacturer: syz
[  289.711250][  T365] usb 9-1: SerialNumber: syz
[  289.717814][  T365] usb 9-1: config 0 descriptor??
[  289.934741][  T365] usb 9-1: USB disconnect, device number 3
[  291.092513][ T9696] rust_binder: Write failure EFAULT in pid:16
[  291.363371][  T365] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  291.525841][  T365] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.536925][  T365] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.546757][  T365] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  291.560028][  T365] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  291.569159][  T365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.579469][  T365] usb 9-1: config 0 descriptor??
[  291.589898][  T365] usbhid 9-1:0.0: can't add hid device: -22
[  291.595422][ T9700] vfat: Unknown parameter 'discardWNib+�^��'
[  291.596800][ T9701] vfat: Unknown parameter 'discardWNib+�^��'
[  291.608144][  T365] usbhid 9-1:0.0: probe with driver usbhid failed with error -22
[  291.884436][ T9705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.893013][ T9705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.505068][ T9741] veth0_virt_wifi: entered allmulticast mode
[  292.515716][ T9743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9743 comm=syz.3.3119
[  292.578399][ T9739] veth0_virt_wifi: left allmulticast mode
[  292.678358][ T9751] fuse: Unknown parameter 'fd9�x�.�X4�'�b�-�8�n�}��%�n�܆1��yV��!��oI�<0x0000000000000004'
[  292.704694][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.714049][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.131710][   T31] usb 9-1: USB disconnect, device number 4
[  294.153891][   T36] kauditd_printk_skb: 395 callbacks suppressed
[  294.153910][   T36] audit: type=1400 audit(1758061710.299:32934): avc:  denied  { read write } for  pid=9482 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.198286][ T9761] rust_binder: 9761 RLIMIT_NICE not set
[  294.206020][   T64] rust_binder: 9760: removing orphan mapping 0:1024
[  294.226918][   T36] audit: type=1400 audit(1758061710.299:32935): avc:  denied  { read write open } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.260683][   T36] audit: type=1400 audit(1758061710.299:32936): avc:  denied  { ioctl } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  294.292710][   T36] audit: type=1400 audit(1758061710.329:32937): avc:  denied  { read } for  pid=9760 comm="syz.8.3125" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.319218][   T36] audit: type=1400 audit(1758061710.329:32938): avc:  denied  { read open } for  pid=9760 comm="syz.8.3125" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.347525][   T36] audit: type=1400 audit(1758061710.339:32939): avc:  denied  { map } for  pid=9760 comm="syz.8.3125" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.371815][   T36] audit: type=1400 audit(1758061710.339:32940): avc:  denied  { read } for  pid=9760 comm="syz.8.3125" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.395888][   T36] audit: type=1400 audit(1758061710.339:32941): avc:  denied  { ioctl } for  pid=9760 comm="syz.8.3125" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  294.421522][   T36] audit: type=1400 audit(1758061710.339:32942): avc:  denied  { set_context_mgr } for  pid=9760 comm="syz.8.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  294.441536][   T36] audit: type=1400 audit(1758061710.339:32943): avc:  denied  { read } for  pid=9760 comm="syz.8.3125" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  294.663336][   T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  294.817649][   T31] usb 9-1: config 3 has an invalid interface number: 161 but max is 3
[  294.825952][   T31] usb 9-1: config 3 has an invalid interface number: 222 but max is 3
[  294.835082][   T31] usb 9-1: config 3 has an invalid interface number: 63 but max is 3
[  294.843219][   T31] usb 9-1: config 3 has an invalid interface number: 11 but max is 3
[  294.851450][   T31] usb 9-1: config 3 has an invalid interface number: 97 but max is 3
[  294.859581][   T31] usb 9-1: config 3 has 5 interfaces, different from the descriptor's value: 4
[  294.868570][   T31] usb 9-1: config 3 has no interface number 0
[  294.874688][   T31] usb 9-1: config 3 has no interface number 1
[  294.880776][   T31] usb 9-1: config 3 has no interface number 2
[  294.886947][   T31] usb 9-1: config 3 has no interface number 3
[  294.893047][   T31] usb 9-1: config 3 has no interface number 4
[  294.899174][   T31] usb 9-1: config 3 interface 161 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  294.912269][   T31] usb 9-1: config 3 interface 222 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  294.923682][   T31] usb 9-1: config 3 interface 222 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  294.934680][   T31] usb 9-1: config 3 interface 222 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[  294.945395][   T31] usb 9-1: config 3 interface 222 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  294.956710][   T31] usb 9-1: config 3 interface 222 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  294.967475][   T31] usb 9-1: config 3 interface 222 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  294.978239][   T31] usb 9-1: config 3 interface 222 altsetting 5 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  294.991585][   T31] usb 9-1: too many endpoints for config 3 interface 63 altsetting 48: 178, using maximum allowed: 30
[  295.002578][   T31] usb 9-1: config 3 interface 63 altsetting 48 has an invalid descriptor for endpoint zero, skipping
[  295.013557][   T31] usb 9-1: config 3 interface 63 altsetting 48 has a duplicate endpoint with address 0xD, skipping
[  295.024272][   T31] usb 9-1: config 3 interface 63 altsetting 48 has 2 endpoint descriptors, different from the interface descriptor's value: 178
[  295.037711][   T31] usb 9-1: config 3 interface 11 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  295.048889][   T31] usb 9-1: config 3 interface 97 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  295.059810][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  295.070504][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  295.081168][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[  295.091802][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  295.102421][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0xC, skipping
[  295.113063][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  295.123724][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  295.134414][   T31] usb 9-1: config 3 interface 97 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  295.145136][   T31] usb 9-1: config 3 interface 97 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  295.156032][   T31] usb 9-1: config 3 interface 97 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  295.166824][   T31] usb 9-1: config 3 interface 161 has no altsetting 0
[  295.173643][   T31] usb 9-1: config 3 interface 222 has no altsetting 0
[  295.180437][   T31] usb 9-1: config 3 interface 63 has no altsetting 0
[  295.187162][   T31] usb 9-1: config 3 interface 11 has no altsetting 0
[  295.194051][   T31] usb 9-1: config 3 interface 97 has no altsetting 0
[  295.204756][   T31] usb 9-1: New USB device found, idVendor=0bda, idProduct=8186, bcdDevice=d6.11
[  295.213956][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.221952][   T31] usb 9-1: Product: syz
[  295.226159][   T31] usb 9-1: Manufacturer: ࡃ
[  295.230768][   T31] usb 9-1: SerialNumber: syz
[  295.461579][   T31] usb 9-1: Found UVC 0.00 device syz (0bda:8186)
[  295.473364][   T31] usb 9-1: No valid video chain found.
[  295.490822][   T31] usb 9-1: USB disconnect, device number 5
[  295.682930][ T9780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.701726][ T9780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.709204][ T9780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:391
[  295.889951][ T9784] ./cgroup: Can't lookup blockdev
[  296.015995][ T9787] SELinux: security_context_str_to_sid () failed with errno=-22
[  296.729699][ T9806] fuse: Bad value for 'fd'
[  296.972459][ T9821] 9pnet_fd: Insufficient options for proto=fd
[  296.980484][ T9821] 9pnet_fd: Insufficient options for proto=fd
[  296.989216][ T9821] 9pnet_fd: Insufficient options for proto=fd
[  296.997468][ T9821] 9pnet_fd: Insufficient options for proto=fd
[  297.120675][ T9827] rust_binder: Write failure EINVAL in pid:61
[  297.267899][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.282962][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.353358][  T365] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  297.506528][  T365] usb 9-1: unable to get BOS descriptor or descriptor too short
[  297.514874][  T365] usb 9-1: not running at top speed; connect to a high speed hub
[  297.524689][  T365] usb 9-1: config 4 has an invalid interface number: 147 but max is 0
[  297.532882][  T365] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  297.543061][  T365] usb 9-1: config 4 has no interface number 0
[  297.552262][  T365] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  297.561366][  T365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.569392][  T365] usb 9-1: Product: syz
[  297.573575][  T365] usb 9-1: Manufacturer: syz
[  297.578186][  T365] usb 9-1: SerialNumber: syz
[  297.795364][  T365] usb 9-1: Found UVC 0.00 device syz (04f2:b746)
[  297.805028][  T365] usb 9-1: No valid video chain found.
[  297.811406][  T365] usb 9-1: USB disconnect, device number 6
[  304.721219][   T36] kauditd_printk_skb: 394 callbacks suppressed
[  304.721240][   T36] audit: type=1400 audit(1758061720.869:33338): avc:  denied  { read write } for  pid=9834 comm="syz.7.3149" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.763393][   T36] audit: type=1400 audit(1758061720.869:33339): avc:  denied  { read write open } for  pid=9834 comm="syz.7.3149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.789200][   T36] audit: type=1400 audit(1758061720.869:33340): avc:  denied  { ioctl } for  pid=9834 comm="syz.7.3149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.816309][   T36] audit: type=1400 audit(1758061720.869:33341): avc:  denied  { ioctl } for  pid=9834 comm="syz.7.3149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.846362][ T9838] veth1_macvtap: left promiscuous mode
[  304.855754][   T36] audit: type=1400 audit(1758061720.869:33342): avc:  denied  { ioctl } for  pid=9834 comm="syz.7.3149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.882975][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.913737][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.922258][   T36] audit: type=1400 audit(1758061720.869:33343): avc:  denied  { ioctl } for  pid=9834 comm="syz.7.3149" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  304.949229][   T36] audit: type=1400 audit(1758061720.909:33344): avc:  denied  { remount } for  pid=9833 comm="syz.0.3148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  304.999708][   T36] audit: type=1400 audit(1758061720.909:33345): avc:  denied  { create } for  pid=9842 comm="syz.8.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  305.046016][ T9856] audit: audit_backlog=65 > audit_backlog_limit=64
[  305.052658][   T36] audit: type=1400 audit(1758061720.919:33346): avc:  denied  { setopt } for  pid=9842 comm="syz.8.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  305.297018][ T9861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76
[  305.673821][ T9873] /dev/rnullb0: Can't open blockdev
[  306.058903][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  306.069267][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  306.329856][ T9883] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false
[  306.329889][ T9883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  306.339298][ T9883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:679
[  306.433006][ T9890] can0: slcan on ttyS3.
[  306.451139][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.474029][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.542517][ T9890] can0 (unregistered): slcan off ttyS3.
[  307.373794][ T9927] binder: Unknown parameter 'defcontext01777777777777777777777'
[  307.584810][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'.
[  307.596265][ T9935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9935 comm=syz.3.3176
[  308.073314][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  308.079448][  T979] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  308.293877][ T9959] netlink: 'syz.8.3184': attribute type 6 has an invalid length.
[  308.368556][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.378914][ T9964] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[  308.380165][ T9967] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  308.403308][ T9968] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[  308.423853][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.722449][ T9989] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  308.722765][ T9989] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  309.055594][T10014] overlay: Unknown parameter 'measure'
[  309.733650][   T36] kauditd_printk_skb: 920 callbacks suppressed
[  309.733669][   T36] audit: type=1400 audit(1758061732.894:34238): avc:  denied  { read write } for  pid=9482 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  309.775932][   T36] audit: type=1400 audit(1758061732.924:34239): avc:  denied  { read write open } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  309.803868][   T36] audit: type=1400 audit(1758061732.924:34240): avc:  denied  { ioctl } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  309.830981][   T36] audit: type=1400 audit(1758061732.964:34241): avc:  denied  { create } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  309.853843][   T36] audit: type=1400 audit(1758061732.964:34242): avc:  denied  { write } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  309.903299][   T36] audit: type=1400 audit(1758061732.964:34243): avc:  denied  { nlmsg_write } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  309.945901][   T36] audit: type=1400 audit(1758061732.964:34244): avc:  denied  { create } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  309.988781][   T36] audit: type=1400 audit(1758061732.964:34245): avc:  denied  { write } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  310.027304][   T36] audit: type=1400 audit(1758061732.964:34246): avc:  denied  { nlmsg_write } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  310.063438][   T36] audit: type=1400 audit(1758061732.964:34247): avc:  denied  { create } for  pid=10036 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.528204][T10078] rust_binder: Write failure EFAULT in pid:704
[  311.726049][T10090] SELinux:  policydb version -387806652 does not match my version range 15-33
[  311.806934][T10090] SELinux: failed to load policy
[  311.935250][T10099] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  312.034818][T10103] can0: slcan on ttyS3.
[  312.044524][T10101] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.046733][T10101] rust_binder: Write failure EINVAL in pid:712
[  312.084236][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.121278][T10109] rust_binder: Error in use_page_slow: ESRCH
[  312.121305][T10109] rust_binder: use_range failure ESRCH
[  312.133353][T10109] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  312.138152][T10105] can0 (unregistered): slcan off ttyS3.
[  312.138976][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.167376][T10109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  312.167428][T10109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:712
[  312.190087][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.223313][   T45] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  312.235088][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.245784][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.260242][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.270865][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.279473][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.290512][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.298663][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.308729][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.316695][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.326816][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.334594][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.344654][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.352415][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.362316][T10108] netlink: 'syz.3.3228': attribute type 4 has an invalid length.
[  312.370279][T10108] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3228'.
[  312.396623][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.407929][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.417767][   T45] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  312.426962][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.436939][   T45] usb 9-1: config 0 descriptor??
[  312.865113][   T45] hid-led 0003:27B8:01ED.001F: unknown main item tag 0x0
[  312.872369][   T45] hid-led 0003:27B8:01ED.001F: unknown main item tag 0x0
[  312.896442][T10121] syz.0.3233: attempt to access beyond end of device
[  312.896442][T10121] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  312.909507][T10121] exFAT-fs (loop0): unable to read boot sector
[  312.917252][T10121] exFAT-fs (loop0): failed to read boot sector
[  312.917359][   T45] hid-led 0003:27B8:01ED.001F: unknown main item tag 0x0
[  312.927539][T10121] exFAT-fs (loop0): failed to recognize exfat type
[  312.940747][   T45] hid-led 0003:27B8:01ED.001F: unknown main item tag 0x0
[  312.953338][   T45] hid-led 0003:27B8:01ED.001F: unknown main item tag 0x0
[  312.986239][T10126] pim6reg1: entered promiscuous mode
[  312.991689][T10126] pim6reg1: entered allmulticast mode
[  313.139846][T10133] __nla_validate_parse: 56 callbacks suppressed
[  313.139869][T10133] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3236'.
[  313.190009][T10140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  313.212671][T10141] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  313.229071][T10141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  313.238412][T10141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:730
[  313.267875][   T45] hid-led 0003:27B8:01ED.001F: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0
[  313.306121][T10144] veth0_virt_wifi: entered allmulticast mode
[  313.323177][T10143] veth0_virt_wifi: left allmulticast mode
[  313.327881][   T45] hid-led 0003:27B8:01ED.001F: ThingM blink(1) initialized
[  313.468640][   T64] usb 9-1: USB disconnect, device number 8
[  314.018566][T10175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10175 comm=syz.8.3249
[  314.162479][T10182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.647648][T10217] fuse: Invalid gid '00000000000037777777777'
[  314.860625][   T36] kauditd_printk_skb: 555 callbacks suppressed
[  314.860645][   T36] audit: type=1400 audit(1758061739.015:34803): avc:  denied  { read write } for  pid=9482 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  314.894349][   T36] audit: type=1400 audit(1758061739.015:34804): avc:  denied  { read write open } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  314.943298][   T36] audit: type=1400 audit(1758061739.015:34805): avc:  denied  { ioctl } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  314.973446][   T36] audit: type=1400 audit(1758061739.055:34806): avc:  denied  { create } for  pid=10223 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  314.999688][   T36] audit: type=1400 audit(1758061739.055:34807): avc:  denied  { write } for  pid=10223 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  315.020098][   T36] audit: type=1400 audit(1758061739.055:34808): avc:  denied  { write } for  pid=10223 comm="syz.8.3268" lport=54982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  315.041563][   T36] audit: type=1400 audit(1758061739.055:34809): avc:  denied  { read } for  pid=10223 comm="syz.8.3268" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  315.063720][   T36] audit: type=1400 audit(1758061739.055:34810): avc:  denied  { read open } for  pid=10223 comm="syz.8.3268" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  315.088350][   T36] audit: type=1400 audit(1758061739.055:34811): avc:  denied  { create } for  pid=10223 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  315.109367][   T36] audit: type=1400 audit(1758061739.075:34812): avc:  denied  { bind } for  pid=10223 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  315.480692][T10234] overlayfs: failed to clone upperpath
[  315.630524][T10251] 9pnet_fd: Insufficient options for proto=fd
[  315.646276][T10252] 9pnet_fd: Insufficient options for proto=fd
[  316.002792][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3285'.
[  316.191732][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'.
[  316.512205][T10287] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  316.521037][T10287] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  316.530070][T10287] overlayfs: missing 'lowerdir'
[  316.565408][T10287] kvm: Disabled LAPIC found during irq injection
[  316.571801][T10287] kvm: apic: phys broadcast and lowest prio
[  316.828752][T10295] overlayfs: failed to clone upperpath
[  316.847006][T10295] overlayfs: failed to clone upperpath
[  317.104662][T10314] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3302'.
[  317.376695][T10317] binder: Unknown parameter 'fscontext?}'
[  318.060568][T10331] fuse: Bad value for 'user_id'
[  318.065507][T10331] fuse: Bad value for 'user_id'
[  318.798077][T10352] rust_binder: Error while translating object.
[  318.798161][T10352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  318.804894][T10350] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[  318.822716][T10352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448
[  318.908582][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10354 comm=syz.0.3316
[  318.953569][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10354 comm=syz.0.3316
[  318.966473][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10354 comm=syz.0.3316
[  318.979407][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10354 comm=syz.0.3316
[  318.992245][T10354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10354 comm=syz.0.3316
[  319.430303][T10373] can: request_module (can-proto-0) failed.
[  319.456461][T10374] fuse: Unknown parameter '���"'
[  319.663344][   T64] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  319.826145][   T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.837424][   T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.848562][   T64] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  319.858664][   T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.873574][   T64] usb 9-1: config 0 descriptor??
[  319.880276][   T36] kauditd_printk_skb: 389 callbacks suppressed
[  319.880295][   T36] audit: type=1400 audit(1758061744.035:35202): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  319.936022][   T36] audit: type=1400 audit(1758061744.035:35203): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  319.988111][   T36] audit: type=1400 audit(1758061744.035:35204): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.014451][   T36] audit: type=1400 audit(1758061744.035:35205): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.089492][   T36] audit: type=1400 audit(1758061744.245:35206): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.115018][   T36] audit: type=1400 audit(1758061744.245:35207): avc:  denied  { ioctl } for  pid=10371 comm="syz.8.3324" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.170410][   T36] audit: type=1400 audit(1758061744.325:35208): avc:  denied  { read write } for  pid=7627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.241911][   T36] audit: type=1400 audit(1758061744.325:35209): avc:  denied  { read write open } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.289425][   T36] audit: type=1400 audit(1758061744.325:35210): avc:  denied  { ioctl } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.319318][   T36] audit: type=1400 audit(1758061744.375:35211): avc:  denied  { read write } for  pid=10376 comm="syz.7.3325" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.727247][   T64] hid-led 0003:27B8:01ED.0020: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0
[  320.757893][   T64] hid-led 0003:27B8:01ED.0020: ThingM blink(1) initialized
[  320.927918][   T45] usb 9-1: USB disconnect, device number 9
[  321.214338][T10392] overlayfs: failed to clone upperpath
[  322.032093][T10416] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  322.032117][T10416] rust_binder: Read failure Err(EFAULT) in pid:193
[  322.084814][T10420] rust_binder: validate_parent_fixup: new_min_offset=36, sg_entry.length=0
[  322.091520][T10420] rust_binder: Error while translating object.
[  322.103962][T10420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  322.110178][T10420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198
[  322.202007][T10423] cgroup: Invalid name
[  322.275776][T10426] overlayfs: failed to resolve './cgroup': -2
[  322.291775][T10426] overlayfs: failed to resolve './cgroup': -2
[  322.308444][T10426] overlayfs: failed to resolve './cgroup': -2
[  322.330528][T10426] overlayfs: failed to resolve './cgroup': -2
[  322.450439][T10433] devpts: called with bogus options
[  323.247348][T10454] rust_binder: 10444 RLIMIT_NICE not set
[  323.280293][T10456] veth0_virt_wifi: entered allmulticast mode
[  323.292595][T10455] veth0_virt_wifi: left allmulticast mode
[  323.405709][T10467] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  323.960321][T10506] validate_nla: 58 callbacks suppressed
[  323.960345][T10506] netlink: 'syz.8.3371': attribute type 4 has an invalid length.
[  323.980918][T10506] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3371'.
[  324.066963][T10513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10513 comm=syz.8.3373
[  324.151940][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3374'.
[  324.266780][T10521] fuse: Unknown parameter ''
[  324.927477][   T36] kauditd_printk_skb: 597 callbacks suppressed
[  324.927525][   T36] audit: type=1400 audit(1758061749.085:35809): avc:  denied  { unmount } for  pid=7627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  324.959685][   T36] audit: type=1400 audit(1758061749.115:35810): avc:  denied  { create } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  324.984989][   T36] audit: type=1400 audit(1758061749.135:35811): avc:  denied  { write } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.028127][   T36] audit: type=1400 audit(1758061749.135:35812): avc:  denied  { read } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.068930][   T36] audit: type=1400 audit(1758061749.135:35813): avc:  denied  { read } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.117166][   T36] audit: type=1400 audit(1758061749.145:35814): avc:  denied  { read write } for  pid=7627 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.166427][   T36] audit: type=1400 audit(1758061749.145:35815): avc:  denied  { read write open } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.221169][   T36] audit: type=1400 audit(1758061749.145:35816): avc:  denied  { ioctl } for  pid=7627 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.239943][T10585] overlayfs: failed to resolve './file1/file0': -2
[  325.277752][   T36] audit: type=1400 audit(1758061749.165:35817): avc:  denied  { write } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.331777][   T36] audit: type=1400 audit(1758061749.165:35818): avc:  denied  { write } for  pid=10572 comm="syz.3.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.343330][   T45] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  325.546595][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.563290][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.573064][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.617640][   T45] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  325.633288][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.654265][   T45] usb 9-1: config 0 descriptor??
[  325.674141][   T45] usbhid 9-1:0.0: can't add hid device: -22
[  325.680148][   T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -22
[  327.360322][T10671] netlink: 'syz.0.3424': attribute type 16 has an invalid length.
[  327.444635][T10677] cgroup: none used incorrectly
[  328.093700][   T64] usb 9-1: USB disconnect, device number 10
[  329.756843][T10756] syz.8.3456: attempt to access beyond end of device
[  329.756843][T10756] loop8: rw=2048, sector=0, nr_sectors = 8 limit=0
[  329.803576][T10756] rust_binder: Error while translating object.
[  329.803623][T10756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  329.809843][T10756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:266
[  329.918041][T10768] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  329.943891][   T36] kauditd_printk_skb: 279 callbacks suppressed
[  329.943913][   T36] audit: type=1400 audit(1758061754.105:36098): avc:  denied  { map } for  pid=10767 comm="syz.8.3460" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  329.945444][T10768] rust_binder: Error in use_page_slow: ESRCH
[  329.950378][   T36] audit: type=1400 audit(1758061754.105:36099): avc:  denied  { read } for  pid=10767 comm="syz.8.3460" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  329.966754][T10768] rust_binder: use_range failure ESRCH
[  330.023885][   T36] audit: type=1400 audit(1758061754.105:36100): avc:  denied  { ioctl } for  pid=10767 comm="syz.8.3460" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  330.043447][T10768] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  330.063314][   T36] audit: type=1400 audit(1758061754.105:36101): avc:  denied  { call } for  pid=10767 comm="syz.8.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  330.063352][T10768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  330.075066][   T36] audit: type=1400 audit(1758061754.145:36102): avc:  denied  { execmem } for  pid=10769 comm="syz.0.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  330.110990][T10768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:269
[  330.129793][   T36] audit: type=1400 audit(1758061754.275:36103): avc:  denied  { create } for  pid=10769 comm="syz.0.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.160837][   T36] audit: type=1400 audit(1758061754.275:36104): avc:  denied  { create } for  pid=10769 comm="syz.0.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.245564][T10775] audit: audit_backlog=65 > audit_backlog_limit=64
[  330.252120][T10775] audit: audit_lost=1048 audit_rate_limit=0 audit_backlog_limit=64
[  330.253322][   T36] audit: type=1400 audit(1758061754.275:36105): avc:  denied  { write } for  pid=10769 comm="syz.0.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  330.568624][T10788] rust_binder: Error while translating object.
[  330.568668][T10788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  330.583406][T10788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:277
[  330.698572][T10790] rust_binder: Write failure EINVAL in pid:279
[  330.877516][T10794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  331.270080][T10811] netlink: 'syz.8.3477': attribute type 6 has an invalid length.
[  331.723315][  T331] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  331.880228][  T331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.892902][  T331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.902989][  T331] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  331.917540][  T331] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  331.927455][  T331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.938825][  T331] usb 9-1: config 0 descriptor??
[  331.952846][  T331] usbhid 9-1:0.0: can't add hid device: -22
[  331.966129][  T331] usbhid 9-1:0.0: probe with driver usbhid failed with error -22
[  333.422996][T10838] overlayfs: failed to clone upperpath
[  333.699136][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3490'.
[  334.382548][T10847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3493'.
[  334.449614][   T45] usb 9-1: USB disconnect, device number 11
[  334.460520][T10849] 9pnet_fd: p9_fd_create_tcp (10849): problem connecting socket to 127.0.0.1
[  334.543090][T10852] 9pnet_fd: Insufficient options for proto=fd
[  334.550231][T10859] overlayfs: failed to resolve './file0': -2
[  334.967187][   T36] kauditd_printk_skb: 508 callbacks suppressed
[  334.967206][   T36] audit: type=1400 audit(1758061759.125:36406): avc:  denied  { read write open } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.041165][   T36] audit: type=1400 audit(1758061759.155:36407): avc:  denied  { ioctl } for  pid=9482 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.125795][   T36] audit: type=1400 audit(1758061759.195:36408): avc:  denied  { read } for  pid=10880 comm="syz.8.3505" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.199091][   T36] audit: type=1400 audit(1758061759.195:36409): avc:  denied  { read open } for  pid=10880 comm="syz.8.3505" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.227848][   T36] audit: type=1400 audit(1758061759.245:36410): avc:  denied  { ioctl } for  pid=10880 comm="syz.8.3505" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.283339][   T36] audit: type=1400 audit(1758061759.245:36411): avc:  denied  { set_context_mgr } for  pid=10880 comm="syz.8.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  335.308676][   T36] audit: type=1400 audit(1758061759.245:36412): avc:  denied  { map } for  pid=10880 comm="syz.8.3505" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.334230][   T36] audit: type=1400 audit(1758061759.245:36413): avc:  denied  { read } for  pid=10880 comm="syz.8.3505" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.403508][   T36] audit: type=1400 audit(1758061759.255:36414): avc:  denied  { mounton } for  pid=10884 comm="syz.3.3506" path="/479/file0" dev="tmpfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  335.451158][   T36] audit: type=1400 audit(1758061759.265:36415): avc:  denied  { mounton } for  pid=10884 comm="syz.3.3506" path="/479/file0" dev="tmpfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  335.684264][T10912] cgroup2: Unknown parameter 'uid<00000000000000000000'
[  335.888358][T10926] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0
[  335.888385][T10926] rust_binder: Error while translating object.
[  335.897936][T10926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.905452][T10926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317
[  336.066430][T10933] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  336.252770][T10941] 9pnet_fd: Insufficient options for proto=fd
[  336.259286][T10940] 9pnet_fd: Insufficient options for proto=fd
[  338.004919][T10987] fuseblk: Bad value for 'fd'
[  338.010344][T10986] fuseblk: Bad value for 'fd'
[  338.145230][T10993] 9pnet_fd: Insufficient options for proto=fd
[  338.801992][T11017] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  339.644725][T11057] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  339.652943][T11057] rust_binder: Write failure EINVAL in pid:365
[  339.913311][  T365] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  339.978850][   T36] kauditd_printk_skb: 2479 callbacks suppressed
[  339.978870][   T36] audit: type=1400 audit(1758061764.135:38895): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.023290][   T36] audit: type=1400 audit(1758061764.165:38896): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.063313][   T36] audit: type=1400 audit(1758061764.165:38897): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.099148][   T36] audit: type=1400 audit(1758061764.165:38898): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.122530][   T36] audit: type=1400 audit(1758061764.165:38899): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.133356][  T365] usb 9-1: Using ep0 maxpacket: 16
[  340.144816][   T36] audit: type=1400 audit(1758061764.165:38900): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.166161][  T365] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  340.170408][   T36] audit: type=1400 audit(1758061764.165:38901): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.195406][  T365] usb 9-1: config 0 has no interface number 0
[  340.223306][  T365] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  340.228901][   T36] audit: type=1400 audit(1758061764.165:38902): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.253306][  T365] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  340.255611][   T36] audit: type=1400 audit(1758061764.165:38903): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.286768][T11094] overlayfs: failed to clone lowerpath
[  340.307643][T11094] overlayfs: failed to clone lowerpath
[  340.314691][  T365] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  340.323182][   T36] audit: type=1400 audit(1758061764.165:38904): avc:  denied  { create } for  pid=11080 comm="syz.0.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  340.333307][  T365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.346874][T11094] overlayfs: failed to clone lowerpath
[  340.370410][  T365] usb 9-1: Product: syz
[  340.393290][  T365] usb 9-1: Manufacturer: syz
[  340.397943][  T365] usb 9-1: SerialNumber: syz
[  340.411601][  T365] usb 9-1: config 0 descriptor??
[  340.424769][T11057] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  340.432441][T11057] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  340.671425][T11057] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  340.682640][T11057] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  340.699556][T11104] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.715514][T11104] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.732958][T11104] bridge_slave_0: entered allmulticast mode
[  340.743801][T11104] bridge_slave_0: entered promiscuous mode
[  340.761733][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.769087][T11104] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.785106][T11104] bridge_slave_1: entered allmulticast mode
[  340.801704][T11104] bridge_slave_1: entered promiscuous mode
[  340.981212][ T8466] bridge_slave_1: left allmulticast mode
[  340.987011][ T8466] bridge_slave_1: left promiscuous mode
[  340.997900][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.006655][ T8466] bridge_slave_0: left allmulticast mode
[  341.012444][ T8466] bridge_slave_0: left promiscuous mode
[  341.020434][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.108598][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.115725][T11104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.123040][T11104] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.130221][T11104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.151558][  T365] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  341.166123][  T365] asix 9-1:0.251: probe with driver asix failed with error -524
[  341.176330][ T8466] tipc: Left network mode
[  341.189490][ T8466] veth1_macvtap: left promiscuous mode
[  341.201370][ T8466] veth0_vlan: left promiscuous mode
[  341.326440][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.335187][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.366589][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.373693][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.387260][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.394365][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.438590][T11146] kernel profiling enabled (shift: 0)
[  341.528434][T11104] veth0_vlan: entered promiscuous mode
[  341.566702][T11155] erofs: dax options not supported
[  341.594096][T11104] veth1_macvtap: entered promiscuous mode
[  341.970716][T11179] rust_binder: 11176 RLIMIT_NICE not set
[  341.985762][T11179] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.160417][   T45] rust_binder: 0: removing orphan mapping 0:24
[  342.199618][T11196] batadv_slave_0: mtu less than device minimum
[  342.230507][T11199] x_tables: duplicate underflow at hook 1
[  342.257269][T11200] x_tables: duplicate underflow at hook 1
[  342.262759][T11197] overlayfs: cannot append lower layer
[  342.497925][T11216] overlay: filesystem on ./bus is read-only
[  343.117132][T11244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[  343.119484][T11245] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  343.211813][T11252] rust_binder: Write failure EFAULT in pid:20
[  343.302305][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'.
[  343.320159][T11259] veth0_virt_wifi: entered allmulticast mode
[  343.327720][T11258] veth0_virt_wifi: left allmulticast mode
[  343.360541][T11261] veth0_virt_wifi: entered allmulticast mode
[  343.367057][T11260] veth0_virt_wifi: left allmulticast mode
[  343.454008][   T64] usb 9-1: USB disconnect, device number 12
[  343.493325][  T365] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  343.663287][  T365] usb 10-1: Using ep0 maxpacket: 32
[  343.672601][  T365] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.691674][T11279] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[  343.691714][T11279] rust_binder: Error in use_page_slow: EFAULT
[  343.702854][  T365] usb 10-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  343.704185][T11279] rust_binder: use_range failure EFAULT
[  343.709553][  T365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.718304][T11279] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[  343.725190][  T365] usb 10-1: Product: syz
[  343.732074][T11279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  343.744055][  T365] usb 10-1: Manufacturer: syz
[  343.744369][T11279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:375
[  343.755597][  T365] usb 10-1: SerialNumber: syz
[  343.774937][  T365] usb 10-1: config 0 descriptor??
[  343.782131][  T365] plusb 10-1:0.0: probe with driver plusb failed with error -22
[  343.983449][T11256] /dev/rnullb0: Can't open blockdev
[  343.989107][   T45] usb 10-1: USB disconnect, device number 2
[  344.984546][   T36] kauditd_printk_skb: 1427 callbacks suppressed
[  344.984566][   T36] audit: type=1400 audit(1758061769.145:40332): avc:  denied  { read write } for  pid=11332 comm="syz.8.3658" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.014603][   T36] audit: type=1400 audit(1758061769.145:40333): avc:  denied  { read write open } for  pid=11332 comm="syz.8.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.039281][   T45] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  345.039301][   T36] audit: type=1400 audit(1758061769.145:40334): avc:  denied  { ioctl } for  pid=11332 comm="syz.8.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.072038][   T36] audit: type=1400 audit(1758061769.145:40335): avc:  denied  { ioctl } for  pid=11332 comm="syz.8.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.097329][   T36] audit: type=1400 audit(1758061769.145:40336): avc:  denied  { ioctl } for  pid=11332 comm="syz.8.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.123491][   T36] audit: type=1400 audit(1758061769.145:40337): avc:  denied  { ioctl } for  pid=11332 comm="syz.8.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.148797][   T36] audit: type=1400 audit(1758061769.205:40338): avc:  denied  { ioctl } for  pid=11327 comm="syz.9.3656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.173907][   T45] usb 10-1: device descriptor read/64, error -71
[  345.173929][   T36] audit: type=1400 audit(1758061769.205:40339): avc:  denied  { ioctl } for  pid=11327 comm="syz.9.3656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.205554][   T36] audit: type=1400 audit(1758061769.205:40340): avc:  denied  { ioctl } for  pid=11327 comm="syz.9.3656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.231303][   T36] audit: type=1400 audit(1758061769.205:40341): avc:  denied  { ioctl } for  pid=11327 comm="syz.9.3656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.263318][  T365] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  345.403324][  T365] usb 9-1: device descriptor read/64, error -71
[  345.413907][   T45] usb 10-1: device descriptor read/64, error -71
[  345.643315][  T365] usb 9-1: device descriptor read/64, error -71
[  345.653328][   T45] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  345.793314][   T45] usb 10-1: device descriptor read/64, error -71
[  345.883345][  T365] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  346.012956][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'.
[  346.023316][  T365] usb 9-1: device descriptor read/64, error -71
[  346.033303][   T45] usb 10-1: device descriptor read/64, error -71
[  346.058689][T11358] netlink: 'syz.0.3667': attribute type 4 has an invalid length.
[  346.066551][T11358] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3667'.
[  346.143814][   T45] usb usb10-port1: attempt power cycle
[  346.263342][  T365] usb 9-1: device descriptor read/64, error -71
[  346.373825][  T365] usb usb9-port1: attempt power cycle
[  346.493298][   T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  346.516501][   T45] usb 10-1: device descriptor read/8, error -71
[  346.657507][   T45] usb 10-1: device descriptor read/8, error -71
[  346.723326][  T365] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  346.761992][  T365] usb 9-1: device descriptor read/8, error -71
[  346.903290][   T45] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  346.905041][  T365] usb 9-1: device descriptor read/8, error -71
[  346.946134][   T45] usb 10-1: device descriptor read/8, error -71
[  347.087018][   T45] usb 10-1: device descriptor read/8, error -71
[  347.163319][  T365] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  347.194561][  T365] usb 9-1: device descriptor read/8, error -71
[  347.204386][   T45] usb usb10-port1: unable to enumerate USB device
[  347.325824][  T365] usb 9-1: device descriptor read/8, error -71
[  347.433743][  T365] usb usb9-port1: unable to enumerate USB device
[  348.059724][T11457] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  348.072368][T11457] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  348.080811][T11457] CPU: 1 UID: 0 PID: 11457 Comm: syz.8.3705 Not tainted syzkaller #0 c99467cd6756103055c98b8b2c0cb99eaa178386
[  348.092485][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  348.102570][T11457] RIP: 0010:iter_file_splice_write+0xa44/0x1100
[  348.108869][T11457] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24
[  348.128515][T11457] RSP: 0018:ffffc90003ebf820 EFLAGS: 00010202
[  348.134632][T11457] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88815a7d2600
[  348.142651][T11457] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7
[  348.150829][T11457] RBP: ffffc90003ebfa40 R08: ffff8881f6f722c0 R09: 1ffff1103edee458
[  348.158917][T11457] R10: 1ffff1103edee45b R11: 0000000000000fd8 R12: dffffc0000000000
[  348.166913][T11457] R13: 7ffffffffffff9b7 R14: ffff888127c37838 R15: ffff888127c37828
[  348.174923][T11457] FS:  00007f5b609e86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  348.183888][T11457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  348.190499][T11457] CR2: 00007f01d41056c0 CR3: 0000000153540000 CR4: 00000000003526b0
[  348.198503][T11457] Call Trace:
[  348.201800][T11457]  <TASK>
[  348.204752][T11457]  ? __cfi_iter_file_splice_write+0x10/0x10
[  348.210656][T11457]  ? __kasan_kmalloc+0x96/0xb0
[  348.215449][T11457]  ? __kasan_check_write+0x18/0x20
[  348.220569][T11457]  ? __cfi_iter_file_splice_write+0x10/0x10
[  348.226482][T11457]  direct_splice_actor+0x276/0x4b0
[  348.231639][T11457]  splice_direct_to_actor+0x4fe/0xbc0
[  348.237020][T11457]  ? __cfi_direct_splice_actor+0x10/0x10
[  348.242661][T11457]  ? __cfi_splice_direct_to_actor+0x10/0x10
[  348.248569][T11457]  do_splice_direct+0x182/0x270
[  348.253459][T11457]  ? __cfi_do_splice_direct+0x10/0x10
[  348.258840][T11457]  ? __cfi_direct_file_splice_eof+0x10/0x10
[  348.264745][T11457]  ? security_file_permission+0x2e/0xc0
[  348.270294][T11457]  ? rw_verify_area+0xac/0x230
[  348.275067][T11457]  do_sendfile+0x5c8/0xfb0
[  348.279489][T11457]  ? vfs_writev+0xcf0/0xcf0
[  348.283995][T11457]  ? __se_sys_futex+0x28f/0x300
[  348.288854][T11457]  __x64_sys_sendfile64+0x193/0x1f0
[  348.294087][T11457]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[  348.299821][T11457]  ? switch_fpu_return+0x12/0x20
[  348.304808][T11457]  x64_sys_call+0xa26/0x2ee0
[  348.309418][T11457]  do_syscall_64+0x58/0xf0
[  348.313849][T11457]  ? clear_bhb_loop+0x50/0xa0
[  348.318538][T11457]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  348.324440][T11457] RIP: 0033:0x7f5b5fb8eba9
[  348.328863][T11457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.348671][T11457] RSP: 002b:00007f5b609e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  348.357103][T11457] RAX: ffffffffffffffda RBX: 00007f5b5fdd5fa0 RCX: 00007f5b5fb8eba9
[  348.365084][T11457] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008
[  348.373076][T11457] RBP: 00007f5b5fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  348.381055][T11457] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000
[  348.389052][T11457] R13: 00007f5b5fdd6038 R14: 00007f5b5fdd5fa0 R15: 00007ffed538a0a8
[  348.397036][T11457]  </TASK>
[  348.400061][T11457] Modules linked in:
[  348.404294][T11457] ---[ end trace 0000000000000000 ]---
[  348.414493][T11457] RIP: 0010:iter_file_splice_write+0xa44/0x1100
[  348.421043][T11457] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24
[  348.445582][T11457] RSP: 0018:ffffc90003ebf820 EFLAGS: 00010202
[  348.451975][T11457] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88815a7d2600
[  348.478490][T11457] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7
[  348.486556][T11457] RBP: ffffc90003ebfa40 R08: ffff8881f6f722c0 R09: 1ffff1103edee458
[  348.494639][T11457] R10: 1ffff1103edee45b R11: 0000000000000fd8 R12: dffffc0000000000
[  348.502641][T11457] R13: 7ffffffffffff9b7 R14: ffff888127c37838 R15: ffff888127c37828
[  348.510790][T11457] FS:  00007f5b609e86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  348.521851][T11457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  348.528557][T11457] CR2: 00007f84d09a3ad8 CR3: 0000000153540000 CR4: 00000000003526b0
[  348.536684][T11457] Kernel panic - not syncing: Fatal exception
[  348.543031][T11457] Kernel Offset: disabled
[  348.547363][T11457] Rebooting in 86400 seconds..