last executing test programs:

3m33.814128936s ago: executing program 3 (id=1809):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0xffff}}, 0x50)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)="ee00", 0x2)
io_setup(0x9, &(0x7f0000000000)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x58}])
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x2, 0x8000, 0x8})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)="48f1695f4ca302593a5aa06e822551586d6d50f077b0cbcfc2c59a93f40104f1417baaa25e3ca5170692ed9b6d1612dabed5cb139eb9925ccb1ab3632987b5b861e38c23694a1547eea2ceb63542a7ff25bfabf9baca6195c45acef95bcb5be94d455cf1dcee90c356043fd56bcf31baae8b67f8698e203683738fe093268d7f62af0466fb479bcf9c34509c9c53cf85edcd8adbabaae490008c4b3f1412a9c3fa6c3ce7941d611d28a85e2cdadb6f5bbe45670ee34534139ef4c98846ba4b01735f2dcc04e6", 0xc6}, {&(0x7f0000000340)="ee2fdc154049570d6137e246ca3566bc9cb241d8db78fbcf941fffede7e7d761", 0x20}, {&(0x7f0000000380)="19c798daf91bf2c75e7bb7acdbd01eb75fedf3b6e92726a9b73da975a5ff368461c5e6a614ad50fe0ffe261f272e4aeb0f538ca308ff25a2a0c5d0dfe55d4cd79a1c281cf3913869dd44fa49ba2b29e01eac903e1235777761", 0x59}, {&(0x7f0000000400)="bb0b8d95b2065f0ccd6d6c341d79bca4b714513f1b1f501b7c87462876c8e1acc5c5ec4cba437ead4b6b486817a696b9919517a17f75ce5d41045d424a1236700c219f163cf7cc4ae35eb469e60861e4", 0x50}, {&(0x7f0000000480)="0fe02e61200361922faae026f1c9b72384897559a1349d8e57ab069b738ab5b90244cab838d3886081c4fc8c88087a8ba0415ea0251eec6d610b19bc6c1f07264d5e65c8b9014a6b62af56b4b6ec266ae0158bfcb231d577a90876086517734755d9b5d807bd2413fc507c4d57bb99cb063c919ebb315fb56d48dcf0dd6aeeaf9ce5cc0ba23f4c160392fdcdcb8ea1e7c7691fe3ad5a1329ba34c8f8512708a5d433ed4e6140cdac28b0b46bd5ea29fc818f29dd34abff5cbc88b7ef44ea", 0xbe}, {&(0x7f0000000540)="901fcca7fd36cdb9d71fd3f6fe5883d3646d78be88cd77bed94298a4726058e14dbf34c028f50da7a4bdbd9d4b7e3185b891508c320d17fcfcdd6f028bc085c99df2af2e2e6f821db3fb505087635ff451882e86dfae5b4df90c76eb4c97b07e4fe45ea6e7918f6b453bc9f278ca8b25d1758567c43b81c910e43310fb975b1ec7cede02d5225368a8a6e958a070a3c2a02deab5868b25170d93e6b44337667ff3bf4ff71f6ebd0bc66993310e75a021314811964d2433f6428590eb4c842212c08893111a5f2cba53f3f311cc99cac4dd2f231904762f5ccec8", 0xda}, {&(0x7f0000000640)="40e3c0a2e21ab341791217a11ba059a1e962be9bccc8487c33950aa3676046a609e05b6f83e0c65bd2a913f9312c9544213ae9a077c5e1544d35dcb7fe3ffa2549449327f11180bdae6f1783a9217e01be37f3fd76dc2751615eeaec9f0677c8745f4f3149d062c2", 0x68}, {&(0x7f00000006c0)="0bf62d2a0d185638d0fcfe7d9b9aa49f9770a00865d8a37a13a2a4ab0e26d7d115dbb83cb039e36bc1ce92a91130f9a611dcf45b87906b0a9aa0d3c66b227ecbdc46543f319bad98159418c261898c39710a8b7e015f7f84f1024dee1719bbd0f83485b06b66bceff44c618394adc5681262dd1ee7c778e4", 0x78}, {&(0x7f0000000740)="e51eaea6f7f3ce0d9866d725637060aeb1fe87c037d410601218f2e72929a5e824636fd9deb3827e50b0d221f84b9f944c89b8231b8daa81b7cce83f3b7473d3866d9030e587f1bf1ce072101ded0d3e1126113ff1efe90f9783f3be1fb5ac19052e6b51c7d985c9cd9c0d10adb20a9e6b93e768a3e07cfa4887a7926ae14cd71d", 0x81}, {&(0x7f0000000800)="0e9e5775f1a0c5f6ef790e7d7b621e660c2ffa3b17df95f3e6579ca3fbb468547cbf6a679f60e9ac07e88c602c7885e4b013ae7f2b9c091a312af68eba9f1fd79e63ce7a40dab815249ceb2d06d3821e7aa84b49e000b7654a8ac5c24631e3a73f35c25b12e16053d10c1f892d9d7366b5dc6e1fd1481be40cd453f2481423180ba4dc5456e872ed4a", 0x89}], 0xa)
ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000001400)=0xe)
close_range(r6, r6, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000000)={0x4})
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040))
readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

3m31.826283605s ago: executing program 3 (id=1817):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x4c, &(0x7f0000000500), 0x0, 0x0, 0x0})

3m31.704139748s ago: executing program 3 (id=1835):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x96d7)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000080)=0x8)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"})
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x5, 0x2, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fchdir(r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
pread64(r0, &(0x7f00000029c0)=""/4082, 0xff2, 0xd36) (async)
pread64(r0, &(0x7f00000029c0)=""/4082, 0xff2, 0xd36)

3m31.384207504s ago: executing program 3 (id=1838):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
dup(r2) (async)
r3 = dup(r2)
r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_GETXATTR(r3, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x9ab}}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$cont(0x11, r5, 0x0, 0xffffffff)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_ATTR(r6, &(0x7f0000000140)={0x78, 0x0, 0x0, {0x254, 0x4, 0x0, {0x5, 0x10001, 0x7, 0x9, 0x65e6, 0xcf93, 0x3, 0x2, 0x6, 0xa000, 0x8000000, 0x0, 0x0, 0x2, 0x80}}}, 0x78)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) (async)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

3m30.678283998s ago: executing program 3 (id=1852):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffff8000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12011001070102109806826bebd30102030109021200010600b06a091f"], 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
fremovexattr(r3, &(0x7f0000000380)=@known='system.posix_acl_default\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3m30.519583731s ago: executing program 3 (id=1854):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')
r1 = fsopen(&(0x7f00000000c0)='omfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
rmdir(&(0x7f0000000280)='./file0\x00')
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

3m30.496732332s ago: executing program 32 (id=1854):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')
r1 = fsopen(&(0x7f00000000c0)='omfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
rmdir(&(0x7f0000000280)='./file0\x00')
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

3m13.768516238s ago: executing program 2 (id=2031):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3m13.66789486s ago: executing program 2 (id=2033):
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="401804"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x9, 0xbf, {0xbf, 0x4, "9af50a55845577ac1bacb182438c037e58b2e7b0d72dc3b33b688e56a9c237a89e5512878d1d4edda25b7627e000481b062f523c432d48701f54c7e35215a6b40bff63b086b7ecb951f4d9356eea2640aca4be23bedc5a4242184db40aae2b069a370664bae56f7d93efffe216e08d1062f0dd751bde36670d6fda0a24d878943a2959d2946b2d1d5f68de4e4c36146f5a4e56edf91a0cb1720c10858e9d4a6bf54255a5a7e02b1c434c5b2b012098055e6cd25879db38f037d9e1569b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "032478cb"}, @main=@item_4={0x3, 0x0, 0xa, "eeb6517e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4b, 0x4, 0x1, {0x22, 0xf59}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x40, 0x16, 0xe5, "24e21fd2a749b0042bd314dd48803e233d0c3dc3e795b39a2469b72493f182fb0751e3d995f9091b62e08a0d59a25158412bb1cdb4aa4d247cd85bcd41435e28ddfa57e78a2f189c993bd1b0250854bd9e4f511fd59e303b624a0bd2317e34881742fec3dd8a4cf51dba49465e0c7800cac4812335a41ee9bf78858c20a5a66c0e171deabf7e3ab8e73abe448e12a3fbb3cf4b6b005d6f5bf96545fafde751e2e93a00c48e030806aad0c0da3b92affcf91ce016be885d56a69de1659f1e943d6ebcb2aa8486727a04943cb7d5863b1bcd02238da1a045979b5f41f431b7b32762eedf4e26"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x70, "b8dfbb5e1f9c654c59cca9c636b5b4fb0bf1621b1c14967bd68ab10be402c56755156de62a1800eebca99f7c682d1d354058a74fafbbf4266fb4151fb13e91c837140508a0e63c69ec03d603fb6bd11de44924a12c1c09223d152f56f1312fc9b525689a470c2b1bd7daaa58945aa6a4"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x1}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x8, 0x1a, "51f1372fe409578091e906ec66dd79f874e39c3a6b4d5b1217d1"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3m1.880841559s ago: executing program 2 (id=2078):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"])
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setresuid(r0, r0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2001001, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',grpquota_inode_hardlimit=-3,func=KEXEC_KERNEL_CHECK,obj_type=\'K+,subj_type=./binderfs\x00,\x00'])
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
setresuid(r0, r0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2001001, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',grpquota_inode_hardlimit=-3,func=KEXEC_KERNEL_CHECK,obj_type=\'K+,subj_type=./binderfs\x00,\x00']) (async)

3m1.761498972s ago: executing program 2 (id=2080):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0xa7, 0x4, 0xc}})
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003dc1db6089904131067520102030109021b000104bd790009043e030115fe6f0809050710080000"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r2, &(0x7f0000000240)='./file0/../file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x70)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000500)=""/191, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
mmap(&(0x7f0000e2e000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0xd2db8000)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffd}, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/203, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)

3m0.34693293s ago: executing program 2 (id=2098):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = socket(0x2, 0xa, 0xffffff4a)
bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe) (async)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0xfe, 0x6, 0x7, 0x7, 0x7}) (async)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000140)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x20}}, 0x24040091) (async)
bind$unix(r1, 0x0, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f00000002c0), 0x4) (async)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x4400, 0xc, 0x4}, 0x18)
r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x317240, 0x1ef)
syz_io_uring_setup(0x5e3a, &(0x7f0000000400)={0x0, 0xdff, 0xe827f2724af90346, 0x2, 0x21c, 0x0, r5}, &(0x7f0000000480), &(0x7f00000004c0))
write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff36030004000000004000000000000000f500000000000000000000002c8f380001000000faff000003"], 0x78) (async)
close(r5) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500)={<r6=>0x0}, &(0x7f0000000540)=0xc)
r7 = syz_open_procfs(r6, &(0x7f0000000200)='map_files\x00')
write$selinux_create(r7, &(0x7f0000000240)=@access={'system_u:object_r:device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x4}, 0x51) (async)
memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc\xbe\xb6\xa7w\x9d\xf1\xe5V\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xd37f, 0x0, 0x368, 0x3, 0x3}}, 0x120) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) (async)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x5}, {r9, 0x9}], 0x2, 0x7ff)
preadv2(r7, &(0x7f0000002600)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1, 0x1, 0x8, 0x8) (async)
read$FUSE(r7, 0x0, 0x0)

3m0.052211525s ago: executing program 2 (id=2102):
futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffe, 0x2)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

3m0.029625396s ago: executing program 33 (id=2102):
futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffe, 0x2)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

1m40.751471214s ago: executing program 5 (id=2945):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000001380)={0x1f, 0x1, 0x3}, 0x6)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @multicast2, 0xffffffffffffffff, "2af1c30b02f7a7cc7a21a506ba3f9fb30b57e1718b9a56e0f108bf4f954bb8d2", 0x7, 0x4, 0x400, 0x3ff}, 0x3c)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x4}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', <r11=>0x0})
sendto$packet(r9, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4})
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r12, 0x1, 0x4b, 0x0, &(0x7f0000000440))
r13 = socket(0x1, 0x2, 0x1)
ioctl$SIOCGETLINKNAME(r13, 0x89e0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)

1m40.464207599s ago: executing program 5 (id=2946):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x20001004, 0x45c5, 0xc595, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0))
ioctl$TIOCPKT(r3, 0x5420, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r7)
ioctl$EVIOCGMASK(r8, 0x60b, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

1m39.551094057s ago: executing program 5 (id=2965):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x11, 0x2, 0x0)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000069a383310280050001000000000008000740000000000800084000000003"], 0x9c}}, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@cpuid={0x14, 0x18, {0x7, 0x8}}, @in_dx={0x82, 0x20, {0x8b08, 0x1}}, @in_dx={0x82, 0x20, {0xe7fa, 0x2}}, @cpuid={0x14, 0x18, {0x49cd, 0x7ff}}, @wrmsr={0x1e, 0x20, {0xc0000084, 0xea}}, @uexit={0x0, 0x18, 0xffffffffffffffc0}, @uexit={0x0, 0x18, 0x100000001}, @out_dx={0xaa, 0x28, {0x2574, 0x2, 0x200}}, @code={0xa, 0x5a, {"440f20c0350a000000440f22c00fc7ad6e15bbb946d0ba07000000c441785a44d33db9380a00000f32b9800000c00f3235008000000f300f0866baa10066ed66b830018ec0420f01cf"}}, @out_dx={0xaa, 0x28, {0x921b, 0x4, 0x1}}, @code={0xa, 0x4d, {"660fdf47070f0d2266420f38807f00f2440f1af4c4e17d2b6300400f78eab8010000000f01d9f30f167b0066b857000f00d0c4837d4b2d0080000000"}}, @uexit={0x0, 0x18, 0x1}, @out_dx={0xaa, 0x28, {0xe83a, 0x2, 0x8}}, @wr_drn={0x6e, 0x20, {0x4}}], 0x217})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009d, 0x0, 0x2}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
socket(0x11, 0x2, 0x0) (async)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000069a383310280050001000000000008000740000000000800084000000003"], 0x9c}}, 0x0) (async)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@cpuid={0x14, 0x18, {0x7, 0x8}}, @in_dx={0x82, 0x20, {0x8b08, 0x1}}, @in_dx={0x82, 0x20, {0xe7fa, 0x2}}, @cpuid={0x14, 0x18, {0x49cd, 0x7ff}}, @wrmsr={0x1e, 0x20, {0xc0000084, 0xea}}, @uexit={0x0, 0x18, 0xffffffffffffffc0}, @uexit={0x0, 0x18, 0x100000001}, @out_dx={0xaa, 0x28, {0x2574, 0x2, 0x200}}, @code={0xa, 0x5a, {"440f20c0350a000000440f22c00fc7ad6e15bbb946d0ba07000000c441785a44d33db9380a00000f32b9800000c00f3235008000000f300f0866baa10066ed66b830018ec0420f01cf"}}, @out_dx={0xaa, 0x28, {0x921b, 0x4, 0x1}}, @code={0xa, 0x4d, {"660fdf47070f0d2266420f38807f00f2440f1af4c4e17d2b6300400f78eab8010000000f01d9f30f167b0066b857000f00d0c4837d4b2d0080000000"}}, @uexit={0x0, 0x18, 0x1}, @out_dx={0xaa, 0x28, {0xe83a, 0x2, 0x8}}, @wr_drn={0x6e, 0x20, {0x4}}], 0x217}) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009d, 0x0, 0x2}]}) (async)

1m39.430640499s ago: executing program 5 (id=2968):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$selinux_create(r1, 0x0, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000) (async)
getdents64(r3, 0x0, 0x0) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0))
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x408, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000001140)=ANY=[@ANYRESOCT=r7]) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) (async)
preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000640)=""/61, 0x3d}], 0x1, 0x8000, 0xb) (async, rerun: 32)
r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x86)
fchdir(r9) (async)
mkdir(&(0x7f0000000140)='./control\x00', 0x191) (async)
rmdir(&(0x7f0000000100)='./control\x00')
listen(r4, 0xa) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

1m39.330597471s ago: executing program 5 (id=2970):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x120024, &(0x7f0000000080)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT, @ANYRESHEX, @ANYRES16])
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r1 = dup(r0)
r2 = socket(0x8, 0x5, 0x20e0)
recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400120a0, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1m39.235861943s ago: executing program 5 (id=2973):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
r0 = socket(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000007c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, r5, {0x4}}, 0x18)
ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000000c0))
write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async)
write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0])
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020)

1m24.214146796s ago: executing program 34 (id=2973):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
r0 = socket(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000007c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, r5, {0x4}}, 0x18)
ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000000c0))
write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async)
write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0])
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020)

4.286112136s ago: executing program 4 (id=4195):
pipe(&(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0})

4.163950468s ago: executing program 4 (id=4196):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0x106}], 0x1}}], 0x1, 0xc080)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9008, 0x9, 0x8, 0xd, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x4, 0x8, 0x7, 0xc1, 0xffffffffffffffff, 0x1000007ff, 0x101, 0x10001, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x5, 0x81, 0xb, 0xa, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x5, 0x8, 0x6, 0x400, 0x3, 0xfffffffffffffff7, 0x80, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x3, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffbfd, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x10003, 0x4, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff81, 0x0, 0xff, 0x6, 0x28400000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x40004, 0x6, 0x9, 0x7, 0x81, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffd, 0xa692, 0xcc, 0x1, 0x1000003]}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00b320908400f30d6d60826f30fc7b2050000000f326691dac7110ff56198030ff5619803980f320f3566b857000f00d0", 0x5c}], 0x1, 0x15, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) (rerun: 32)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0)
ioctl$TCSETSF(r4, 0x5404, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32)
r7 = socket$packet(0x11, 0xa, 0x300) (async, rerun: 32)
r8 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000000c0)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

3.939477233s ago: executing program 4 (id=4197):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT])
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x5)
unshare(0x400)
write$nbd(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f00000007c0)={0x20, 0xf, 0x4, "a1847802"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x800c)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0)
ioctl$TIOCGPGRP(r4, 0x540f, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x0, 0xd, 0xa1, {0xa1, 0x11, "d23f7ae8878242a98277ba0badc5937ad6965409317e942d950932377dae5e1df1571d4733d4935e7a83bece929ef804b51c865ecd1e8a55b42b252eadb502e3e7416247df28b044f44c1e568aff7deb29536c0d0b6f3eda440a125a76a65484a8f8330d4748ca1b109775906654a77e26c1d07dd147d368e91e588b5ec1457ad6574a1cf6bfa58a0d67b9782145f0e426a595eddc7add11f87a3ad5071411"}}, &(0x7f00000000c0)={0x0, 0x3, 0x33, @string={0x33, 0x3, "bea3df53230aaef8f239ed4c041ced064b313e6821755630fa487f9b6ce94a42c4b5923a1c68811656a4176fc938afba9e"}}, &(0x7f0000000200)={0x0, 0x22, 0x17, {[@global=@item_012={0x2, 0x1, 0x8, "f32a"}, @global=@item_4={0x3, 0x1, 0x9, "da6f1487"}, @main=@item_4={0x3, 0x0, 0xc, "616bf2bf"}, @local=@item_012={0x1, 0x2, 0x0, "d1"}, @global=@item_012={0x2, 0x1, 0x6, "7ada"}, @global=@item_4={0x3, 0x1, 0x0, "d277c4f6"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7d, 0x4f, 0x1, {0x22, 0x9dc}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x30, 0xa9, "e5fc1a5e95479127adff86f68b0a4bcaabbae86250192183d1eb9e8c7453093328ec276dd6792634cc121e1568e54d2d250823820dd3a00d8533a904eb6499340fe5cd04ec9d5a22b6fbb03e75aaccbc320812e0a86dd01c1ed1f6ed357fed7877927544c22b068c5039106dd7863ee350ad802d5ba094f09dde1bbce152efb38c261c1b01a6e6d30acd94c5829ffc4485f262d1d933d4ef03a996ecc9880cd40cd43d771c53e2f7c3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x59, "b7bfb85880e3742a94e00b845448c3986444498c5f254cc4a23449a83166b2d4a51dafb52f86c77691292b45a3e6bc32f3da28ed79f69c20fe59b41a258fda307b90f6bf36f2141a92330caf25be4cae1e3c3082c8dade12ce"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1}})
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

3.168092808s ago: executing program 0 (id=4199):
umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64)
keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) (async, rerun: 64)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000003c0)) (async)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

3.159677818s ago: executing program 0 (id=4200):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00')
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x1)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="28000000180015002abd7000fffffffe0a00000002020000000800020c00098005000000e200000011e6953f1a0bd8ff1ec5ef97d4921eb177c48ad3cacf0a2aa353ef8886dae6f362b5370cc5953e34b9084a09d6bcca910ce885ade262be45c6b7f43b2a7cf1795ca8ebc6bf94eef73b79e8a13b38ae1bb03f701904306a90f79b02c960fe6b18ba192aac02a0700473ece91d1cb76e3820aeea9acfb01a4d0744cb105b1004e88ab6f4b99fa770a03a23c534a1cafa203e4aef2479b7cae4694192"], 0x28}], 0x1}, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x40010, r1, 0x976b7000)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40880)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xc, 0x2, 0x8000007}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

3.091019189s ago: executing program 0 (id=4201):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0})

2.988093392s ago: executing program 0 (id=4203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) (async)
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000000000)=0xffffffffffffff71) (async)
sched_setscheduler(r0, 0xd, &(0x7f0000000000)=0x4) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141240, 0x0) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
close(r1) (async, rerun: 32)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000100)={r3, r2, 0xffffffff}) (async, rerun: 32)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f00000000c0)={0x3, 0x0, 0x1}) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410103ef9220570521201a740102030109022400010103300009048904028d80f7000905060221021204050905820200"], 0x0) (async)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1)

2.986945122s ago: executing program 6 (id=4204):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4)
mprotect(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8)

2.983130382s ago: executing program 6 (id=4205):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x1000, 0x4) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x40}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"})

2.915440583s ago: executing program 0 (id=4206):
syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102000000106b1d010140000102030109027a00"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getpriority(0x1, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x10ac043, 0x0) (async)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}, 0x0) (async)
ptrace$cont(0x7, r0, 0xb, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
sendfile(r3, r1, 0x0, 0x7fffb002)

2.914699313s ago: executing program 6 (id=4207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd826}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffc01}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x40010)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000180)=[@out_dx={0xaa, 0x28, {0x5fdf, 0x5, 0x5}}, @cpuid={0x14, 0x18, {0x8, 0x2a8}}, @out_dx={0xaa, 0x28, {0xe9f6, 0x2, 0x5}}, @out_dx={0xaa, 0x28, {0xb39, 0x0, 0x4}}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x32, 0x18, {0xce}}, @cpuid={0x14, 0x18, {0x4b, 0x2}}, @uexit={0x0, 0x18, 0x1}, @in_dx={0x82, 0x20, {0x3830, 0x2}}, @out_dx={0xaa, 0x28, {0x44b7, 0x6, 0x6e1}}, @wrmsr={0x1e, 0x20, {0x0, 0x21}}, @cpuid={0x14, 0x18, {0xfa4, 0x6}}, @cpuid={0x14, 0x18, {0x2, 0x4}}, @code={0xa, 0x4f, {"8f68309e7a9df03e0f352e64660f178294ffcf920f0666ba4100ed0f20e035000020000f22e0c462a9aec866baa100b804703e12ef26410f01c9450f01c5"}}, @wr_crn={0x46, 0x20, {0x4}}, @rdmsr={0x32, 0x18, {0x8c5}}, @in_dx={0x82, 0x20, {0xb6f, 0x7}}, @out_dx={0xaa, 0x28, {0x265c, 0x1}}, @uexit={0x0, 0x18, 0x4}], 0x26f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2$9p(&(0x7f00000004c0)={<r3=>0xffffffffffffffff}, 0x4000)
r4 = getuid()
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@version_u}, {@cache_fscache}, {@directio}, {@mmap}, {@cache_none}, {@fscache}, {@cachetag={'cachetag', 0x3d, '.'}}, {@debug={'debug', 0x3d, 0x3}}, {@afid={'afid', 0x3d, 0x6}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@fowner_lt={'fowner<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x37, 0x62, 0x37, 0x52, 0x32, 0x30, 0x36], 0x2d, [0x36, 0x0, 0x65, 0x65], 0x2d, [0x35, 0x33, 0x32], 0x2d, [0x64, 0x36, 0x63, 0x38], 0x2d, [0x38, 0x5c, 0x61, 0x64, 0x61, 0x0, 0x39, 0x34]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r4}}, {@obj_user={'obj_user', 0x3d, 'IPVS\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@flag='nolazytime'}]}})
getrandom(&(0x7f0000000680)=""/109, 0x6d, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000700)={0x0, 0x4}, 0x8)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000740)={0x80000, 0x0, {[0x9, 0xfff, 0x7, 0x3f, 0x3, 0x5, 0x8000, 0x2]}})
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000007c0))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010)
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000a80)={<r8=>0x0, 0x6})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000e80)={0x8, 0x5, {0xffffffff00000000, @struct={0x2, 0x10001}, 0x0, 0x0, 0xffffffff80000000, 0xc, 0xfffffffffffff1be, 0xec, 0x1, @usage=0x5, 0x5, 0x7, [0x5, 0x5, 0x0, 0x1, 0x9, 0x4]}, {0x9, @usage=0x3ff, 0x0, 0x5, 0x0, 0x1, 0x9, 0x38e0eeac, 0x54, @usage=0x40, 0x3, 0x8000, [0x4, 0x5, 0x8, 0x5, 0x0, 0xfffffffffffffffc]}, {0x6, @usage=0x9, r8, 0x6, 0x81, 0x7fffffff, 0x4, 0x0, 0x1, @struct={0xfff, 0x1}, 0xfffffff8, 0x6, [0x9, 0x7, 0x80000001, 0xa2c, 0x3]}, {0xfffffffffffffff9, 0x1839, 0x7}})
ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, &(0x7f0000001280))
r9 = syz_open_dev$rtc(&(0x7f00000013c0), 0x3, 0x40400)
ioctl$RTC_WIE_ON(r9, 0x700f)
getrandom(&(0x7f0000001400)=""/51, 0x33, 0x2)
r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000001480)={0x5c, @remote, 0x4e21, 0x4, 'rr\x00', 0x4, 0x1, 0x7f}, 0x2c)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000014c0)={0x2710, 0x2, 0xeeee8000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$RTC_WIE_OFF(r9, 0x7010)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001500)={{0xd000, 0x8080000, 0x3, 0x0, 0x5, 0x3, 0x1, 0x6, 0x7f, 0x4, 0x8}, {0x5000, 0xdddd1000, 0x8, 0x2, 0x1, 0x50, 0x10, 0x2, 0xc7, 0xfa, 0x10, 0xa}, {0x80a1000, 0xeeee0000, 0x4, 0xe, 0x4, 0xef, 0x9, 0x4, 0x1, 0x3, 0x6, 0x89}, {0xffff1000, 0x4000, 0xc, 0x5, 0xff, 0xe, 0x0, 0x7, 0x6, 0x4, 0x84, 0x7}, {0x2000, 0xdddd0000, 0xd, 0x0, 0x2, 0xed, 0x93, 0x2, 0x2, 0xff, 0x7, 0x3}, {0x0, 0x4000, 0xb, 0xc, 0x7, 0x1, 0x0, 0x7, 0xd3, 0x90, 0x68, 0x8}, {0x0, 0xeeee0000, 0xb9fe6ded7d595137, 0x0, 0x0, 0xa1, 0xd5, 0x3, 0xd, 0x80, 0x0, 0xb}, {0x2000, 0x9003, 0xe, 0x2, 0x7f, 0x9, 0x3, 0x2, 0x8, 0x7, 0x81, 0xc}, {0x10001, 0x7}, {0x10000}, 0x1, 0x0, 0x2, 0x160040, 0x0, 0x1, 0x80a0000, [0x8, 0x101, 0x8, 0x7ff]})
move_mount(r10, &(0x7f0000001640)='./file1\x00', r10, &(0x7f0000001680)='./file0\x00', 0x100)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.850466674s ago: executing program 0 (id=4208):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003dc1db6089904131067520102030109021b000104bd790009043e030115fe6f0809050710080000", @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="5d4d49845883ec3073347ac4719b923428ba62681c4b9297a35f0672d0f03ffaaae387a09b24a18588177de059c810bcebfceee2aef597c1e827166d221146d94ea18f8f0e5e40c023ad764c01a27624"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x163380, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x8000000000000003, 0xfffffffffffffffd, 0x8}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000340)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/203, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.771937596s ago: executing program 6 (id=4209):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x63, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x2, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x4], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x6, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x7, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x2, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x2, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xfffc, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x0, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x6, 0x4, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000380)="05030006", 0x4, 0x0, &(0x7f0000000a80)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @random="0c5d4f602aff"}, 0x14)
setns(r0, 0x10000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x8003899, 0x400, 0x1, 0x27, 0x0, r0}, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x40940)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00200002700000126bd7000fedbdf250c0000008c02428004002180140039000000000000000000000000000000000062024380d40190802cbe4e1b2ca5ddd33de99d1f3b59636e41cab9f5b90c614f3f07940d8cc32747e09acb9a4b36b8a76c49312b1047c6b2cc9aae744e04ddb34735dd39bf8826d8fcfb60fa520f076de32ea50960c793c3018d41d2bc619e5b13d6901dca8b249fd93a25708dd0ca5edb8a4427fac52142651ed0d847a16052dc991a59899a33f0110c11fd2aff30ec36b2e105c7731f4265d06276de4a9425a4bf9ae4dcf5769a9b953ffe95173ff42b4ac4ede6ef3ec31c81f4ce0c3cb7d3dad535024f661ea202bbdce77edca17d82e3d0264b1596676a06000000000000002f57046295"], 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)

2.392012893s ago: executing program 6 (id=4212):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r4 = dup(r3)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x20)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000030000000100000000000000000000000200000000000000feffffffffffffff0600000000ce000000000000070000000300f9"])
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80027)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async)
dup(r3) (async)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x20) (async)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000030000000100000000000000000000000200000000000000feffffffffffffff0600000000ce000000000000070000000300f9"]) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80027) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)

2.391617263s ago: executing program 6 (id=4213):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = socket(0xb, 0x4, 0x4f)
setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, &(0x7f0000000080)={0x14, &(0x7f0000000340)={0x60, 0x918da4c1d1246a48, 0x2, {0x2, 0x24}}, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010021000000fec0df250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000001900020004000e00"], 0x2c}}, 0x4014080)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r6, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000800}, 0x40840)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x6fb5, 0x20480000000005, 0x9, 0xfc, 0x400000000000006, 0x2, 0x1041, 0x80b, 0x0, 0x32a, 0xffffffffffffffff, 0x8000000fffffffa, 0x4, 0x10000, 0x4000000000800005, 0x6a], 0xdddd1000, 0x41012})
process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)="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", 0x1000}], 0x1, 0xe, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x4000, 0x0, 0x0)
r9 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000000))

737.290405ms ago: executing program 1 (id=4224):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000005500010200040000feffffff070000"], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x400c080)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xd, "f4624400"/13}}) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e3c4a4dcc8b2fb5ecfbe7ae169785448cf2be9b0785197d25294e55747b4a604cd83593c3499bbb6d6364be3d9389e8f178647b1db7e74f93c50a369bd2e57fdb900d3b636bea05630f51e9fc21a3d8d6721fdd50524b91ac83ba44b7d48062afdfdf13bfbbeea9e4bd970c5ff9313aa5e137a409ed41461b4ea84d2b6e81eb0f", @ANYRES16=r3, @ANYBLOB="20002bbd7000fcdbdf250c000000050037000000000008000600", @ANYRES32=r4, @ANYBLOB="05002d00010000000500350003000000060028000200000008000300", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2)

679.365147ms ago: executing program 1 (id=4225):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="000001"])
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @empty}}}], 0x20}}], 0x1, 0x8000004)
r8 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r8, 0x9, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003180)={0x16d0, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid}, @generic="122cf9e56eba1d96c1b07a9e8865110cea1406a663b9c3430bb90d369b17bd6f8b9909d08f8fd874cfc76d7db2c76a557ed66065ec0f2fa15c362f964a41308789d2c146f67b71a0d7f435cd083c020ce8a271675d8b35f3e8fc63c627a6e1864f89f1edffdd4a33615a1b350158f23d7a8c1cd2a50b343e48d6fa37471383b1e94afc6cac3619c4221f0f05804f9c26005c829453c3ff30bdea466166d530ff2c01a6e40bd6753b5f02760b9daf33ab188d68463f45c8d3cbd1d7ee448285990e87a3a8eed22388e83e64644899bac3988a205c3aad3b468b", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r0}, @nested={0x15c7, 0x109, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd}, @generic="94566404030a074764b43de64e8b9485f740634950ab4dfc269f89e82b72988513489b4ae062bb83295afd9d2850a232e4fe33e5b0c79040c857abed3ef7435d73acf7cc5eeb19b68a9e111da2aa6b5ebc6c12ce3a87f91ae3d3b0584c509fab4da16cc9a65351c9e6571f1470797f98fe286bbf997531c5473938ec78d236eaae3b951d666ef6fb50d8e0067acf8b84528fa41dff1c8328e018b1c6d3e6289259ec55373ae61b34bebf107c1e1b3c7c0de5552246d801bdca9f10fe68ca1163d7d0a1c21f51e30ad8d7644ee2de273046851ca98a29581e6d2f1a5e983e134e7f3610668150fc5a08d7aa975bbdf6d96c0eae5dba9c471369fc8d858f7d1746b9673895b03576d00552fcfc03327335dbb7087015e2ccea85400fd2fa335bda62eb4ffe47edfeda694b47c4689cbec4a9e1b2b40821ec012ba90ab6c0454e8d2b61c4bd17275f0834aaeeb0c9ba64e51e0ae4d47b3b898150805920f6b5d765442a272f65fb3873b86b39c1643665a551b15a2f0db10d5fff816fdd84fc1288688db74434683c9e42f901a242f6a896509a4ac4bfc3a525919b19108d04a24ccb480a15bed611b9f5e855b3d3bb8899fab6778b2a23e27ffae565f2036da42d690cc3a055a8331df2ccf7023be2572d357ddbd6016728dd411febe800cb28239df3bc366dad486724ee7fb785999a95e3d2f910973f3a42bc6eadda9688bf9dbd78e42398199fbe1f06acc031a80b808df8ac00687c074dbf4ad4829512ba17ddca8a2bf9fd21314fcedac99692be7c369d998b45d2792e4fe44baa6555c9fcabe4314af314bf6dc54646843c3d45af4522a9f0ac96fbad4841912670f512f93b830fe7de8283ed358d66a7ab8b3acea5a77477dbb2f75e1342546533fdbb78eeedfc3b92c93537bafd1e972d272ff7879c73670cc5a805f5ede63f9a85531b434767a9b0d87930c3a3b8bcbaf9625eb8dd17449db7f1f48da641a1037267d63b66801edf7cecc8d61afad66b8206a355d5cc5c16876d7a572ab86fd572cd0568cb9b4245f86279b5212565b78b4f7bb24110bb52f1d62980d5b4539ead2bf382380a34f6b374f901ccebcbf5d304cc83129a2bfc9ad66a5d2f05148b420be3502fbbcc514c86df252399b761bc43019cfa731555511c8f60692d7207a9e13db347041adb412d8206fa7ba7675c2e360a5941ebe73b28286953ccd6025484fe177db75a2623670000453d9559e42aeeb143f325caab6d082e456061db07659dbaf4a5bb64d98d61a95a06bd01f1c26559a1a1045d7eca60e0c5b3dedc7bb45a584c5a8a8e6bcdddb0e49eb0f9ff6b7226271be3e4395acab01dc3af71915ea689df0d7c40d62baa60c667a6d86817b88796958dd0ecdcec4a46f77ed27e0b6f310d1a00c55325af7458cdfa657d091ea0b38f5b05ea1df414cf32b2695ad71bc3bd57ce9264abcc11d589870e264725aafac43458d9326fde67beee399a016ed947b3f0d32fb7c936543240f7e36f41612c05bd337a29c8fe110c99828ae0e0f45830e1c29eb9417de021b20ba23fc50fad579b591684e9f1b3d4122f26f9ebaeef7dda0587f9472e1514fd7e0dd411f7c47e20d62d71264bd4c8d2a814fb08b83b6fed23ebdcbcd7080ef6f499839c3b5380ea8ede07dd45f5046c12cbed6d498beb95191cec90a72749f01c222bfa7d023d07218a18161e420b0fa50cf9a6f5360ffa666727905817c46f3aac60034efd56e82f38353eecb52c9aa494e106a583d12756062497ea68dd25a50276930ba47426c66e581b9d5b986880b9994c65085c3f347f1ae197cd8cedabccb890f8db02f5868358387253778cf975fd838c2a18a3b145a10989d83e2a713f3d5744a6a3c97740aa0ef4eec307b3c4e9d80cfd6f4bb596f3dfea2476c424d2059322041383d398c739173233bf603696c1fe19e14e4fce0f85b6dd7ecae534f37dfe491a7975dcf15677342aa03f89f12540b390cf6c5d0d974ae48c298feb1597032c50c53f3f7a3d26047a16a0d6d736e33f6e5b2cbb610dd7c09d6cc94001f8c78b76d2d1414455e473fd4b45a0214378345c632b898b185b5bd765f3d0faaaeae95bdaa5d37055d5b878a076a0491af8f4b9bbc2bd99df99f3722e8c66f93ba847882fa62166045c9e47baa15a5ccedf662f0391934b09ff3b0b9268eb2bc07481eb41798e49cbfe5b7cfd7f0a724270055843cbb22db9ffd9fa4ff5112e851921b8e9908e32ec4f815711a87dae6e645ea7691c9df01e66c2e92984bce3898c9c587535d38b07af1cd7e01efcedc9507ad3a5e77e64d90fa0ba42e6a75c40bbc24e3a27813deded75ccb865e6a3cdc4b13aeda82ca527aba9752183afca52514670c44a96250ca8577e0eb36fcc0af0330d1363f881f81d47b686b9e09be7e43bdbc871b0a552c1abd2cd92c32cb0e744667b59ca89736bf8717c5919b11807f65533919cafd6ed242e8079eed9b3e65ad67ec58290475ee4af6c3af93c846e78df4799ca9adfd49d6084f97ad342c693dda14b92b20e2ba58e64dccc55dad11d6d508daaa96a4b0b4bb19f619220f6847b52a8a01fa2e2c3cab7a9df0dc140c7ee887b00f01a6e2b739ee4d618d409eb490fefb4251c552da6fd131e10ba13d8846dd775b88d79ff2a69e31e094892e9dc8cf450b423d53b0a83acd78de6a5536f5a2940b7d72c862cb3b8e32be86bd465007fc98bc6c62b9f3ef8a23ee873687ab12e523a99166fb028e66c87d74fc091255b3d760f301f1ba3e1b903ef0f04b7e0ac2a32982a510717bd4fa19900c5892a9681365b304076b80286402af902bedb584b2100a79598b0054b3ff2cb97c6c1909e34fabb794dbd6c8f86dcdf371f15be40bfb74bd8fb504211301fc4dcd40b03fad7719f720929c5fb729bce3d66afe390e8968129f1d304fd0fcd0e2d8198d918c305c623703e819a0c7c0a515e202518f6f55b5b634057f3fa05b5fa82b04515df890de159ff05de12c01c911af03056b881ba9ce747576fedf02142dc1601237eb8c9859193550fdf7dca7e2a551b3e1bb27e5139898d1f19feecfd963b0c56fab6b027d622c5e669440a24bef58fb1b5db481e3c47bba711a2461ad1964f1f71a15bff9935e4c9f61373a735c7f8e645252c07ff399fcf825469e2aa9f5f11034138e593edbf19905d5b4f00b1acd36f23d0fcf8db9fa55304db33f06707fd72cda91cb71b5fd09d90393b5c1058b6abdc513a88012d39997610ed4a820e3f39ddfe025fb530def8145a9fa446bca84d991d723f9cecf1ab5ae034b9c07a6c04538ef3a54bedb61617c46461123589efb129f4a3ea2c5b4df2d6e0cf24a3b66054da0ac89e3a9478697e94411c7adff5b4276d65537ad921d854f9336683e364e4274900c414ac4abe0d8e9369c1ab8dc9c3143630f5e730d50245d0d2f63ae0fe764909e3699ae05ac5da85123bfd7068e223c6bbf9debb722f5433ada9b5ce0a08ee1b4f66cc62247bcb87a90b07aceba086697c54ee1288fc4f342a17ad091a60368aac102db527a7d93cd3e016e830c865984bd1ea02fb32c1507f7a379a364e703af17edd8dc66d55e51fba4296883c59459d88e7a8ed51cb61b74ecec6dbfb6cdd6aba3028a87ac8cef6ac41d7642f061a1c04d277f9dae4c93ac7f2047dd9932b41222d1ba45d9e0f110b9b6cace927a4ab962ca9e1af8a26f1b16984ab2b77b20f79b3372d29f5f68e64626dac2dd65b0aaf6bb33d4552a045165250942631972b4eed74ef16bba916f76b79e60d191d05c1247a58ec8f276c8285b153ed3453b8ca01643a276066f5ebed303c59da8960d664a09654488bca271b877e493b23cb990b9fd7034a446403623789a7ef3673bf53bc836657e289cc8abf76703219bf8c336cdc0627a54f693260886c9ac018cc2a2ba2253d14492adacc98579f875e323a2e0c1ff0b7df312f12e2548ab7f6988f80d4e03eec343e2be3f288d58f2a677efa1b9587925a9e93f4f2e3fba67c393d84918b24672d08af831049c2f3d9369430d348db95750e3615d47ad16fcae77531f7d84d05170e7e6915c8a042037b34bde21d0b9b7ea85c46d6e5b478e0481329471a747705cd9e406cae8d8b8be9a7800edcea985ced63eb6e0766cd831dfa485523cf7b2383fbbf07d9b2650bbbd73c3ebd4da15cf67236db48901f7f1318f33a1bf78409ac4b420b472178c4f44fcd1e2b966405aa1cd0aeecaf8f9ea4bae4f3d137b0c84768475ed3a8b34b200911ca11fac1a3345a54838ba6620ea6bc086e22d6f99c8a4930d6d1757d2ab3ac85f07caa4f50469a42aebc1d5a803dedac5e61539e6194ff3a1ad170da1ec2fab4fb9f68e8f83ceb168478f152e3187a06f76bc9b2a907a8ae55296ea7b6aaef642c6ac7f84743f0df4b75e20ec5c338906294995a0fada86c6444b5c2eda7753b9f4dbd6cc059a506a56f0e3ecbeb23220fad7fc3e94d6e384243c21e331171bba40fe96b2446a5026f72c9a9905e60a15bf2a5255f4ff1e1c40232a8efb1399fa5f333e087bfefa7a92f7d5efc3764b9ebc9e33e53c67b1d6152fba099334b451c301185e96c19f770e2a22c272fa88c1371ccdb7b58fab1f6df83dbdd8b19a9faae7a4ea734c04e5478f0ad75709b62fd5a38674428e5ae41b8de5f2d0f0af62fcf89cce589ba8589b05bd6548e5343d9390775776bcd198ceae0e9f38cdcc5b0a8a6b7a2c3cb89e10a08e399717f7d1b5381f1b582fc6186b692b0de1684560d1e10181bdb67301aefea8673e1d591896a7f112221108937eafd4041fff245b0534c788c3fbf8ac0effcab5b7d274a1cdd39f2aaeb3d978e7bfe38a649e53fb7963fd9627d41611b3de93f5770960346c9771673d4c9b54b3266a2e0248e34ea36871b339564c65b9671fd8f65e33077f2f94aef05280570497181d930f547d7f76461e7b00c510215cbdbe9ac5c926090a8165287ad85a6fd6d2e15cfb0b669fe0929c9de4369b95dad07f8d8d36ecdc92a9dd1a3f3c82807ddfb694dacd91f4bfb955db65ec0f6d2d75e72450345112653937831cbc6cdab291fcba35c726e709e0d1f943b7b053b797e8eae70cf96e7596eff0a0a2a5c8abe5304a3834a8f151525250fd67fec2d19a0579a1ef379e418aca2650c3e01906c14392066c60d34bacf57bd64bf4554457e7d2eac50a603f2ad0d8c79da5b30c91a6e553123e985c6322e9602c11080cde2502050ddaa8149e9e10a2b978a8ae5a0e946d5c26e0ec1bf5a63b4142b2d402b6618b4f1c9839197c8db02c80b10595fa505a1827e355fb9a4950ccd747e883d6cfd5304f556bb4daf55e84e94c534feed5a6801a249fbcc5cf8891cf86fa6fd8c76700ba90f236978bbc0086bec059cb83177786200aab25cc04a9df7a565da33ce0797a2028a4f5bd9d4c013f1737091bd8b207523ab3dff92283ca86fd7504f733070e33b4c19651a46325b88165709a7576a7e103500a2c0585fa34d3733c39f0581a4c87c594d0bbd1837ca8d47b062914ec202b0fd365deb96ef5c66c0a28d6440ff15a9323a24d6f1aa263e390a5af45cf94dbb9470d9155be56314638cedd34c766b767bb42af78978a231abf8d5775dfbba9964c4493a468674105981bed75e2ced1fe3e16bedebff296e822b585e644515fc1dd68865c3b808bcb4ddcc4fbd60b7270aa5e12d9a4873b62e86523d0b9b34301dcaf1b6048c7e048b6f835eaecb1a606fa025add54e5e1287221baa5a41312a56ffdc821b9edde995029b62ef6b", @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}, @generic="d6decd5d1dee50ebb11e39fec4ac17cf39169ded20ff2a9a6eed6416f8a983008f088f0f30dd162533a8ae07a3968981678149a181707925cca05eda10accbb4eb0f28008cb4a7a3751695292f0224b841187c3164ff00d3b09d23c8c776a0db2d24a4cce77b298a4452bbba9e7b0372e5a3b719060f3863628b909c8a8baae4b79143884617c8f04114673cc9d1873cd6f3894a7ae784e593e7bc76a0452b324045a7ecb1d7a9056837c209a95063c1f481232a0a0ef0394326ea55a0a7a33d1b1655074ed62fe78ce41e1227f688418e711eedd24445", @nested={0x324, 0x46, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @u32=0xff}, @nested={0x4, 0xf}, @nested={0x310, 0xb6, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @pid=r8}, @nested={0x302, 0x86, 0x0, 0x1, [@nested={0x114, 0xe4, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @ipv4=@local}, @generic="c041b1c785aa3a8100793b03f57db83428cbae3f3ea866c215213054947bbf3a89922065587e0902", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r0}, @typed={0xe, 0x11a, 0x0, 0x0, @str=']#*,^^;/.\x00'}, @nested={0xb8, 0x56, 0x0, 0x1, [@typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x121}, @nested={0x4, 0x2c}, @generic="14ead973a8240c3e84bb4d29289bc144078434b101dd028fa681f7fff843812668a6b98102561a7e8f34ebfe3d31d020f91cf958f02bd050637b961f91f97360c16fd5b739280083b9c2694ea940e137119676e151da14819de9a12d822510ee12c8eb5e762504643a17b48264669b97a5c5460e205839c0333f5e194cf3ee52baca64cfd5e1491558a06004441dcacd720e4d23575000019dafa840"]}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x84}, @generic="205f80796050accb50733d1f3b404d93cdad60264551033f6c19d9d2497b523069b84b017c52048bc719d102d9441cd893863f76fa99b6b34f94e3da7d5cd71c79fdd3154438229fcaf10cd780bdc6fd6316dccc9fb49f34e0f65e01c508ddc9fd4d218bcedac9448af30e733e2a6680ee40c1ea4081ebe9a8577e2ffb900ad0c8bf478c447dfc9cee5446b2af7c3576e351ecf1a8a4b0f72d35f0ec2d3b724f6fdb16935c4a173417d48267a4a95186e18511d12ad877fc4fac600066b43ba303eafe14bf04ab3172cbf6860865b995239f02eaca9e8db964c09a650c50cbdfc2dda71034667f0856a730fee2b89803babf", @nested={0xed, 0xf8, 0x0, 0x1, [@generic="d0b8e4827f51a884c490033efc58e08f2bcfb635d6db9af7ac3c93c13a0af55a9a890499d33366aa0304bfe5ff411608838ebb3774347add3685a07d58e991aaedfd0590b30b0bf8cb183d5b73f7e4ad1950082cce681504f266ca77e3e6fae4a58a5ba3c781b9e4900b31a4ded387d05f3f9910ab2ff1b8e01981d7390b5f8d7c0b2140a50573c67b250043505ccc2507e5f72a0348424ce2e0c9932b1ca9f4a3784f8d3b2f0142e24da6b5e8146bca5b0ff0632f7f4f5e563751f910f5879b5c134ee496b67d0d5ad8cee976bef1f88551bf48a8a6814195", @typed={0xf, 0x53, 0x0, 0x0, @str='./binderfs\x00'}]}]}]}, @typed={0x4, 0x149}]}, @nested={0xec, 0xd1, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x4, 0xd2}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x72}, @typed={0xcf, 0xc, 0x0, 0x0, @binary="a59570e40efdb789e20da8fb63437cae743ee5a79b7a535e7bf7dba6bf1dd77bb80c91dc2cdee5dea748a4e2ae44d8f4ead8658af3f2119d9ab56777993db42bd7de2784fb3c19f79b7736d5597e7eb246a533a25223cc33e2bfac482508e4af18de5b67a4baa19e8098301be04cc24edcc6342ba22649e25b623d0fb69fcb9facaaa372b9dd70ba26c0403a027112b4d0fe3b5289daef9f7c97c45e96e9ac195be9617d984bd5bbd25c5e9baef09e2de67a69c94066671f057ded433ea0964c3e1634ba0d951c8bbca423"}, @nested={0x4, 0xb2}]}, @nested={0x32, 0x116, 0x0, 0x1, [@generic="8f8da91aea4d0d66a5866797228cc7ef22de", @typed={0x8, 0xff, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x62}, @nested={0x4, 0x57}, @typed={0xc, 0x87, 0x0, 0x0, @u64=0x7}]}, @typed={0x96, 0x113, 0x0, 0x0, @binary="7cdba0891b419fbe6da98f156f182bd8b1d8221e05e06d3b5263f9fe4a652d702f78f50ede6bafe63191ecdc22ebbf5141bdf235562b2a2a7ce7ad24d50865a4b6763f0a6213b4e39e13033fe94587318f36597554110051f38080aa5dc38c7904a38a4be499f0df59b8dfba14b6284b23a4a382a17662759a7ab104f7ed041662f5ae5e788f168dbf7cb55c8e689084e2f1"}]}]}, 0x16d0}}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg$unix(r9, 0x0, 0x0, 0x1, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000680)=@req3={0xfd, 0x7, 0x81000, 0x6, 0xa06, 0x7}, 0x1c)
r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r10, &(0x7f0000000400)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x8001, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x16}]}, 0x1c}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x240000d0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

552.026269ms ago: executing program 1 (id=4226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300))
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000900)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x49, 0x38}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0x6, 0x5, 0x0, 0x1, [{0x4}, {0x4}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r4=>0x0})
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000)=0xffff, 0x4)
sendto$packet(r1, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
prctl$PR_SET_TSC(0x1a, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
pivot_root(0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68)

539.089529ms ago: executing program 1 (id=4227):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x0, 0x0})

492.55616ms ago: executing program 1 (id=4228):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x80000000040)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioprio_get$pid(0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000})
futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

376.134073ms ago: executing program 4 (id=4229):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x19, 0x0, &(0x7f0000002680), 0x0, 0x0, 0x0})

237.970675ms ago: executing program 4 (id=4230):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket(0x1e, 0x4, 0x0)
recvmsg$unix(r0, &(0x7f00000012c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/77, 0x4d}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x80010141) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x10f, 0x15, 0x0, 0x62)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async)
r4 = fcntl$dupfd(r3, 0x406, r3)
write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, 0x0, 0x0) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000280)={0x1, 0x1ff, 0x1, 0x3, 0x9d, 0x8c, 0x11}, 0xc) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

204.820746ms ago: executing program 1 (id=4231):
r0 = socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0x5000)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x10001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80)
sendfile(r7, r7, 0x0, 0x7a680000)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d800800"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000000)=[@register_looper, @increfs_done], 0x5f, 0x0, &(0x7f0000000040)="0f6fbf0e8295de9056927eec1785b89452352f9289b4116117af413f7f789989c5818706501843d96b7b09200c13f4a363f45f03c599d37342852a0f440d413e237ea344287895e4ac3d08b77b267153140b87ccfc030f19b870b3e8450c31"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
setreuid(0xee00, 0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r9, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=4232):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0)
clock_nanosleep(0xa, 0x1, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000001c0)=0x48e4)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

tform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  289.871438][T10856] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  289.874900][T10856] rust_binder: Error in use_page_slow: ESRCH
[  289.882312][T10856] rust_binder: use_range failure ESRCH
[  289.888397][T10856] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  289.895221][T10856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  289.904055][T10856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:310
[  289.963402][T10859] usb usb7: usbfs: process 10859 (syz.0.3324) did not claim interface 0 before use
[  290.012079][T10858] rust_binder: Write failure EFAULT in pid:312
[  290.089166][  T457] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  290.120835][  T457] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  290.205303][T10863] fido_id[10863]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  290.519012][  T390] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  290.679043][  T390] usb 1-1: Using ep0 maxpacket: 16
[  290.687961][  T390] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.699198][  T390] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  290.712512][  T390] usb 1-1: config 1 interface 0 has no altsetting 0
[  290.722929][  T390] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40
[  290.732033][  T390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.740300][  T390] usb 1-1: Product: syz
[  290.744480][  T390] usb 1-1: Manufacturer: 쥎≫舦럔廡䦼ᙾ⚆酉衣▧줨蛦닟暕❾ȩ쥫蘭孔洂洫꟤ｽ뜟㱥
[  290.756615][  T390] usb 1-1: SerialNumber: syz
[  291.167545][   T36] kauditd_printk_skb: 592 callbacks suppressed
[  291.167564][   T36] audit: type=1400 audit(1759169452.384:71093): avc:  denied  { ioctl } for  pid=10865 comm="syz.0.3326" path="socket:[46473]" dev="sockfs" ino=46473 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.201395][   T36] audit: type=1400 audit(1759169452.394:71094): avc:  denied  { read write } for  pid=10865 comm="syz.0.3326" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.228094][  T390] usbhid 1-1:1.0: can't add hid device: -71
[  291.239112][  T390] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  291.247043][   T36] audit: type=1400 audit(1759169452.394:71095): avc:  denied  { read write open } for  pid=10865 comm="syz.0.3326" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.274544][  T390] usb 1-1: USB disconnect, device number 55
[  291.283157][   T36] audit: type=1400 audit(1759169452.394:71096): avc:  denied  { ioctl } for  pid=10865 comm="syz.0.3326" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.309379][   T36] audit: type=1400 audit(1759169452.424:71097): avc:  denied  { write } for  pid=10865 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.330616][   T36] audit: type=1400 audit(1759169452.424:71098): avc:  denied  { ioctl } for  pid=10865 comm="syz.0.3326" path="socket:[46473]" dev="sockfs" ino=46473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.381866][   T36] audit: type=1400 audit(1759169452.424:71099): avc:  denied  { sys_module } for  pid=10865 comm="syz.0.3326" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  291.444337][   T36] audit: type=1400 audit(1759169452.424:71100): avc:  denied  { write } for  pid=10865 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.465674][   T36] audit: type=1400 audit(1759169452.424:71101): avc:  denied  { write } for  pid=10865 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.497581][   T36] audit: type=1400 audit(1759169452.424:71102): avc:  denied  { create } for  pid=10865 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  291.531932][T10890] __vm_enough_memory: pid: 10890, comm: syz.6.3334, bytes: 18014402804453376 not enough memory for the allocation
[  291.550506][T10893] 9pnet_fd: Insufficient options for proto=fd
[  291.669730][T10902] netlink: 'syz.4.3337': attribute type 15 has an invalid length.
[  291.681486][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3337'.
[  291.813531][T10912] __vm_enough_memory: pid: 10912, comm: syz.6.3342, bytes: 18014402804453376 not enough memory for the allocation
[  291.847463][T10914] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3344'.
[  292.065217][T10922] overlayfs: failed to clone lowerpath
[  292.138891][T10929] 9pnet_fd: Insufficient options for proto=fd
[  292.177173][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'.
[  292.375403][   T65] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  292.539269][   T65] usb 1-1: Using ep0 maxpacket: 32
[  292.547484][   T65] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  292.557039][   T65] usb 1-1: config 0 has no interface number 0
[  292.569006][   T65] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  292.586464][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.595226][   T65] usb 1-1: Product: syz
[  292.600054][   T65] usb 1-1: Manufacturer: syz
[  292.604798][   T65] usb 1-1: SerialNumber: syz
[  292.611690][   T65] usb 1-1: config 0 descriptor??
[  292.620731][   T65] smsc95xx v2.0.0
[  292.721852][T10954] fuse: Bad value for 'fd'
[  293.028815][   T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  293.040484][   T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  293.090366][T10966] syzkaller0: entered promiscuous mode
[  293.095963][T10966] syzkaller0: entered allmulticast mode
[  293.153410][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3366'.
[  293.209235][T10970] netlink: 'syz.6.3367': attribute type 4 has an invalid length.
[  293.222652][T10970] netlink: 'syz.6.3367': attribute type 17 has an invalid length.
[  293.449942][T10982] rust_binder: Write failure EFAULT in pid:124
[  293.516409][T10986] netlink: 182 bytes leftover after parsing attributes in process `syz.6.3372'.
[  293.779330][  T382] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  293.933451][  T382] usb 7-1: not running at top speed; connect to a high speed hub
[  293.944180][  T382] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  293.963126][  T382] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.972756][  T382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.980871][  T382] usb 7-1: Product: 룚懖䗙ࢳ쒝㒤钾栙혈ꅆ≾䬙攤퍼ᒆ蔽༻療锶瞘퇙䲪藰ꋢ쏌ꝇ⹝粹⪜辳鼄ၯ！蹕ख쌄᛼㉥摩阹罉≁둕쨫߆䵀ᩍ殡옕㔶캥
[  294.000473][  T382] usb 7-1: Manufacturer: 숱䣦ũ쯭歈摦쇧ꆲꚈ⡵䒿更缾ꕷ눾뉏戾夓时繥壶㼟꡹㤓ʋ⿾ዄ䢿貊ꖚⱲ匟韌琗ᒎ짐䱇ᘓ曫䵚ﴊ⌘狒၆臑訦聺䨆閕ᅧ桮崫峙ሬ檔ﵸᇖ兊纃憂Ｆﳡ벨竉ᔟࢻ㙒촻魠◜
[  294.025745][  T382] usb 7-1: SerialNumber: ࡃ
[  294.130085][T11011] overlayfs: missing 'lowerdir'
[  294.177114][T11013] overlayfs: failed to clone lowerpath
[  294.299494][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  294.458896][  T382] cdc_ncm 7-1:1.0: bind() failure
[  294.465326][  T382] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  294.475927][  T382] cdc_ncm 7-1:1.1: bind() failure
[  294.483766][  T382] usb 7-1: USB disconnect, device number 4
[  294.676506][   T65] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  294.701202][   T65] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  294.713746][   T65] usb 1-1: USB disconnect, device number 56
[  295.076086][T11052] overlayfs: failed to clone upperpath
[  295.255948][T11060] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.312215][T11064] rust_binder: Error in use_page_slow: ESRCH
[  295.318810][T11064] rust_binder: use_range failure ESRCH
[  295.324954][T11064] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false
[  295.330614][T11064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  295.339167][T11064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:329
[  295.599357][   T65] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  295.749352][   T65] usb 1-1: device descriptor read/64, error -71
[  295.821001][T11081] rust_binder: Error while translating object.
[  295.821055][T11081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  295.827277][T11081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:150
[  295.861893][T11086] overlayfs: failed to clone upperpath
[  295.956392][T11094] 9pnet_fd: Insufficient options for proto=fd
[  295.981116][T11096] xt_NFQUEUE: number of total queues is 0
[  295.989587][   T65] usb 1-1: device descriptor read/64, error -71
[  296.119364][  T382] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  296.169832][   T36] kauditd_printk_skb: 661 callbacks suppressed
[  296.169852][   T36] audit: type=1400 audit(1759169457.394:71764): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.202191][   T36] audit: type=1400 audit(1759169457.424:71765): avc:  denied  { ioctl } for  pid=11087 comm="syz.6.3408" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.229356][   T65] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  296.237907][   T36] audit: type=1400 audit(1759169457.454:71766): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.264355][   T36] audit: type=1400 audit(1759169457.494:71767): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.279409][  T382] usb 7-1: Using ep0 maxpacket: 32
[  296.289611][   T36] audit: type=1400 audit(1759169457.494:71768): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.297958][  T382] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  296.320527][   T36] audit: type=1400 audit(1759169457.494:71769): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.328573][  T382] usb 7-1: config 0 has no interface number 0
[  296.355659][   T36] audit: type=1400 audit(1759169457.494:71770): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.365117][  T382] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  296.385519][   T36] audit: type=1400 audit(1759169457.494:71771): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.394239][  T382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.420110][   T36] audit: type=1400 audit(1759169457.494:71772): avc:  denied  { ioctl } for  pid=11059 comm="syz.0.3399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.426716][   T65] usb 1-1: device descriptor read/64, error -71
[  296.453724][   T36] audit: type=1400 audit(1759169457.514:71773): avc:  denied  { ioctl } for  pid=11087 comm="syz.6.3408" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.458436][  T382] usb 7-1: Product: syz
[  296.488002][  T382] usb 7-1: Manufacturer: syz
[  296.492659][  T382] usb 7-1: SerialNumber: syz
[  296.500671][  T382] usb 7-1: config 0 descriptor??
[  296.519794][  T382] smsc95xx v2.0.0
[  296.677583][T11108] cgroup: fork rejected by pids controller in /syz1
[  296.689344][   T65] usb 1-1: device descriptor read/64, error -71
[  296.802315][   T65] usb usb1-port1: attempt power cycle
[  296.919248][  T382] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  296.923908][T11146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=11146 comm=syz.4.3417
[  296.930079][  T382] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  296.983717][T11199] 9pnet_fd: Insufficient options for proto=fd
[  297.067235][T11259] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.134959][T11263] /dev/rnullb0: Can't lookup blockdev
[  297.151080][   T65] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  297.190067][   T65] usb 1-1: device descriptor read/8, error -71
[  297.321942][   T65] usb 1-1: device descriptor read/8, error -71
[  297.561705][   T65] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  297.593932][   T65] usb 1-1: device descriptor read/8, error -71
[  297.731932][   T65] usb 1-1: device descriptor read/8, error -71
[  297.839445][   T65] usb usb1-port1: unable to enumerate USB device
[  298.312786][T11297] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.313312][T11297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332
[  298.586116][  T382] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  298.619371][  T382] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  298.639408][  T382] usb 7-1: USB disconnect, device number 5
[  298.660637][T11313] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.663291][T11314] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.695317][T11313] rust_binder: Error in use_page_slow: ESRCH
[  298.713378][T11313] rust_binder: use_range failure ESRCH
[  298.731396][T11313] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  298.737007][T11313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  298.757251][T11313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:341
[  298.848102][T11325] xt_NFQUEUE: number of total queues is 0
[  298.868714][T11325] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3444'.
[  299.177564][T11340] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  299.256452][T11351] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.397418][T11362] 9pnet_fd: Insufficient options for proto=fd
[  299.493403][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'.
[  299.567670][T11373] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.577413][T11373] rust_binder: Error in use_page_slow: ESRCH
[  299.584063][T11373] rust_binder: use_range failure ESRCH
[  299.590333][T11373] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  299.595931][T11373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  299.619441][T11373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:361
[  299.880100][T11389] 9pnet_fd: Insufficient options for proto=fd
[  299.973303][T11391] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3467'.
[  300.178800][T11401] overlayfs: missing 'lowerdir'
[  300.718346][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.718765][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.747812][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.748136][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.763991][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.770964][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.777198][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.784336][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  300.832223][T11423] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3479'.
[  300.847903][T11423] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3479'.
[  301.154436][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'.
[  301.237486][   T36] kauditd_printk_skb: 488 callbacks suppressed
[  301.237506][   T36] audit: type=1400 audit(1759169462.454:72262): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.244260][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.274195][   T36] audit: type=1400 audit(1759169462.504:72263): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.274701][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.304561][   T36] audit: type=1400 audit(1759169462.534:72264): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.305108][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.335193][   T36] audit: type=1400 audit(1759169462.564:72265): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.335792][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.364098][   T36] audit: type=1400 audit(1759169462.584:72266): avc:  denied  { mounton } for  pid=11442 comm="syz.6.3487" path="/58" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  301.368216][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.387477][   T36] audit: type=1400 audit(1759169462.584:72267): avc:  denied  { mount } for  pid=11442 comm="syz.6.3487" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  301.395386][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.415156][   T36] audit: type=1400 audit(1759169462.584:72268): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.423071][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.444614][   T36] audit: type=1400 audit(1759169462.624:72269): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.452545][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.474359][   T36] audit: type=1400 audit(1759169462.644:72270): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.482124][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.503727][   T36] audit: type=1400 audit(1759169462.674:72271): avc:  denied  { mounton } for  pid=11447 comm="syz.4.3488" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.511589][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.539629][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.546004][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.552668][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.559151][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.565659][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.571980][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.578230][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.584869][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.591401][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.597669][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.604300][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.611415][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.618238][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.626627][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.640819][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.653601][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.661669][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.668768][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.676943][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.684833][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.692437][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.717914][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.734879][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.743778][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.751442][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.758422][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.766961][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.775695][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.783853][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.790591][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.797458][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.806041][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.812811][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.820057][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.828473][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.836162][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.843823][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.851454][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.858224][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.866295][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.874105][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.900752][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.909337][  T382] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  301.917470][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.939570][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.951025][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.970960][T11448] /dev/rnullb0: Can't lookup blockdev
[  301.994418][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.031065][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.038048][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.044935][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.051760][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.058601][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.065561][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.072396][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.079139][T11448] /dev/rnullb0: Can't lookup blockdev
[  302.084649][  T382] usb 1-1: Using ep0 maxpacket: 32
[  302.092729][  T382] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00
[  302.102284][  T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.112614][  T382] usb 1-1: config 0 descriptor??
[  302.166611][T11469] fuse: Bad value for 'fd'
[  302.440240][T11484] fuse: Bad value for 'fd'
[  302.527205][  T382] wacom 0003:056A:00B2.0016: unknown main item tag 0x0
[  302.540218][  T382] wacom 0003:056A:00B2.0016: item fetching failed at offset 3/5
[  302.548222][  T382] wacom 0003:056A:00B2.0016: parse failed
[  302.555340][  T382] wacom 0003:056A:00B2.0016: probe with driver wacom failed with error -22
[  302.733145][T11452] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  302.733952][T11452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  302.740622][T11452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:375
[  303.282202][   T10] usb 1-1: USB disconnect, device number 61
[  303.729375][   T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  303.897633][T11551] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  303.899711][   T10] usb 1-1: Using ep0 maxpacket: 8
[  303.919065][T11551] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  303.941337][   T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  303.949560][   T10] usb 1-1: config 0 has no interface number 0
[  303.963842][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16
[  303.977533][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.988351][   T10] usb 1-1: Product: syz
[  303.992730][   T10] usb 1-1: Manufacturer: syz
[  303.997653][   T10] usb 1-1: SerialNumber: syz
[  304.008906][   T10] usb 1-1: config 0 descriptor??
[  304.029017][T11563] fuse: Unknown parameter 'grou00000000000000000000'
[  304.236796][   T10] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  304.256203][   T10] usb 1-1: No valid video chain found.
[  304.270408][   T10] usb 1-1: USB disconnect, device number 62
[  304.284876][ T8831] udevd[8831]: setting mode of /dev/bus/usb/001/062 to 020664 failed: No such file or directory
[  304.310081][ T8831] udevd[8831]: setting owner of /dev/bus/usb/001/062 to uid=0, gid=0 failed: No such file or directory
[  304.432386][T11581] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  304.452722][T11585] fuse: Unknown parameter '000000000000000000040x0000000000000004'
[  304.494024][T11581] rust_binder: Error in use_page_slow: ESRCH
[  304.494055][T11581] rust_binder: use_range failure ESRCH
[  304.505632][T11581] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  304.522083][T11581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  304.531531][T11581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:384
[  304.556913][T11587] fuse: Unknown parameter 'grou00000000000000000000'
[  304.651746][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'.
[  304.841694][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3542'.
[  304.859860][T11601] bridge_slave_1: left allmulticast mode
[  304.869694][T11601] bridge_slave_1: left promiscuous mode
[  304.879494][T11601] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.895554][T11601] bridge_slave_0: left allmulticast mode
[  304.907525][T11601] bridge_slave_0: left promiscuous mode
[  304.921723][T11601] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.079347][ T7560] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  305.249338][ T7560] usb 1-1: config 0 has an invalid interface number: 182 but max is 1
[  305.264182][ T7560] usb 1-1: config 0 has no interface number 1
[  305.271390][ T7560] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  305.287582][ T7560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.300935][ T7560] usb 1-1: config 0 descriptor??
[  305.346994][T11622] fuse: Unknown parameter 'grou00000000000000000000'
[  305.518840][T11599] futex_wake_op: syz.0.3541 tries to shift op by 144; fix this program
[  305.736150][ T7560] usb 1-1: USB disconnect, device number 63
[  306.053453][T11643] fuse: Unknown parameter 'group_i00000000000000000000'
[  306.256776][   T36] kauditd_printk_skb: 687 callbacks suppressed
[  306.256798][   T36] audit: type=1400 audit(1759169481.480:72959): avc:  denied  { read write } for  pid=8446 comm="syz-executor" name="loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.288591][   T36] audit: type=1400 audit(1759169481.480:72960): avc:  denied  { read write open } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.332021][   T36] audit: type=1400 audit(1759169481.480:72961): avc:  denied  { ioctl } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  306.359312][   T36] audit: type=1400 audit(1759169481.550:72962): avc:  denied  { read write } for  pid=11657 comm="syz.0.3563" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  306.387270][   T36] audit: type=1400 audit(1759169481.550:72963): avc:  denied  { read write open } for  pid=11657 comm="syz.0.3563" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  306.412071][   T36] audit: type=1400 audit(1759169481.610:72964): avc:  denied  { mounton } for  pid=11659 comm="syz.6.3564" path="/80/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  306.435093][   T36] audit: type=1400 audit(1759169481.610:72965): avc:  denied  { mounton } for  pid=11659 comm="syz.6.3564" path="/80/file0" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  306.458074][   T36] audit: type=1400 audit(1759169481.610:72966): avc:  denied  { create } for  pid=11659 comm="syz.6.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  306.502797][   T36] audit: type=1400 audit(1759169481.610:72967): avc:  denied  { write } for  pid=11659 comm="syz.6.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  306.524492][   T36] audit: type=1400 audit(1759169481.610:72968): avc:  denied  { read } for  pid=11659 comm="syz.6.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  306.567777][T11664] devpts: called with bogus options
[  306.697399][T11672] fuse: Unknown parameter 'group_i00000000000000000000'
[  306.814793][T11679] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3571'.
[  306.869363][ T7560] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  307.029699][ T7560] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping
[  307.046567][ T7560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.059146][ T7560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.060754][T11695] fuse: Unknown parameter 'group_i00000000000000000000'
[  307.079808][ T7560] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  307.089444][T11696] overlayfs: failed to clone upperpath
[  307.095804][ T7560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.124256][ T7560] usb 1-1: Manufacturer: ь
[  307.134805][ T7560] usb 1-1: SerialNumber: 조Ṧ㯇簵䧎愑篷峺틳㵗⋢ꝿ쉵옐⩭咖檷眮댟ᙀ㎢錘굉슁㑡찐
[  307.308579][T11716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.385211][T11723] fuse: Unknown parameter 'group_id00000000000000000000'
[  307.421242][ T7560] usb 1-1: 0:2 : does not exist
[  307.443225][ T7560] usb 1-1: USB disconnect, device number 64
[  307.502524][ T8831] udevd[8831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  307.969165][T11738] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.976472][T11738] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.984834][T11738] bridge_slave_0: entered allmulticast mode
[  307.994616][T11738] bridge_slave_0: entered promiscuous mode
[  308.011421][T11738] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.018521][T11738] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.026781][T11738] bridge_slave_1: entered allmulticast mode
[  308.035914][T11738] bridge_slave_1: entered promiscuous mode
[  308.042720][ T1248] tipc: Left network mode
[  308.062452][ T1248] veth1_macvtap: left promiscuous mode
[  308.068127][ T1248] veth0_vlan: left promiscuous mode
[  308.207605][T11738] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.214711][T11738] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.222062][T11738] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.229116][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.249402][  T382] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  308.289366][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.296928][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.317023][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.324160][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.336429][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.343572][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.409666][  T382] usb 1-1: Using ep0 maxpacket: 16
[  308.413705][T11755] fuse: Unknown parameter 'group_id00000000000000000000'
[  308.435154][  T382] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  308.459382][  T382] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.479365][  T382] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  308.488380][  T382] usb 1-1: config 1 has no interface number 1
[  308.512419][T11738] veth0_vlan: entered promiscuous mode
[  308.520412][  T382] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  308.549696][  T382] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  308.581315][  T382] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.592075][  T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.611352][T11738] veth1_macvtap: entered promiscuous mode
[  308.619127][  T382] usb 1-1: Product: syz
[  308.623807][  T382] usb 1-1: Manufacturer: syz
[  308.628499][  T382] usb 1-1: SerialNumber: syz
[  308.853305][T11745] overlayfs: failed to resolve '/	�': -2
[  308.858215][T11783] fuse: Unknown parameter 'group_id00000000000000000000'
[  308.899042][T11745] rust_binder: Error in use_page_slow: ESRCH
[  308.899076][T11745] rust_binder: use_range failure ESRCH
[  308.906955][T11745] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  308.922668][T11745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  308.941351][T11745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:401
[  308.962001][  T382] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  308.985460][  T382] usb 1-1: found format II with max.bitrate = 0, frame size=0
[  308.994648][  T382] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  309.010102][  T382] usb 1-1: USB disconnect, device number 65
[  309.095432][ T8831] udevd[8831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  309.359503][   T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  309.509337][   T65] usb 5-1: Using ep0 maxpacket: 16
[  309.525969][   T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.548382][   T65] usb 5-1: config 0 has no interfaces?
[  309.564146][   T65] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  309.592048][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.613437][   T65] usb 5-1: config 0 descriptor??
[  310.123619][T11806] overlayfs: failed to clone upperpath
[  310.193304][T11808] fuse: Bad value for 'user_id'
[  310.198371][T11808] fuse: Bad value for 'user_id'
[  310.442272][T11814] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3617'.
[  310.711424][T11827] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  311.298977][   T36] kauditd_printk_skb: 583 callbacks suppressed
[  311.299057][   T36] audit: type=1400 audit(1759169486.520:73552): avc:  denied  { read write } for  pid=8446 comm="syz-executor" name="loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.367850][   T36] audit: type=1400 audit(1759169486.570:73553): avc:  denied  { read write open } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.398474][   T36] audit: type=1400 audit(1759169486.570:73554): avc:  denied  { ioctl } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  311.433838][   T36] audit: type=1400 audit(1759169486.590:73555): avc:  denied  { read write } for  pid=11831 comm="syz.0.3624" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  311.457483][   T36] audit: type=1400 audit(1759169486.590:73556): avc:  denied  { read write open } for  pid=11831 comm="syz.0.3624" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  311.482970][   T36] audit: type=1400 audit(1759169486.620:73557): avc:  denied  { read write } for  pid=11831 comm="syz.0.3624" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.507817][   T36] audit: type=1400 audit(1759169486.620:73558): avc:  denied  { read write open } for  pid=11831 comm="syz.0.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.532534][   T36] audit: type=1400 audit(1759169486.620:73559): avc:  denied  { ioctl } for  pid=11831 comm="syz.0.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.558028][   T36] audit: type=1400 audit(1759169486.620:73560): avc:  denied  { ioctl } for  pid=11831 comm="syz.0.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.584214][   T36] audit: type=1400 audit(1759169486.620:73561): avc:  denied  { ioctl } for  pid=11831 comm="syz.0.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  311.639381][   T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  311.789344][   T10] usb 1-1: Using ep0 maxpacket: 8
[  311.798124][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  311.808342][   T10] usb 1-1: config 4 has an invalid interface number: 62 but max is 0
[  311.816517][   T10] usb 1-1: config 4 has no interface number 0
[  311.823461][   T10] usb 1-1: config 4 interface 62 has no altsetting 0
[  311.835899][   T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1013, bcdDevice=52.67
[  311.846500][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.855443][   T10] usb 1-1: Product: syz
[  311.856535][   T65] usb 5-1: USB disconnect, device number 6
[  311.860315][   T10] usb 1-1: Manufacturer: syz
[  311.872157][   T10] usb 1-1: SerialNumber: syz
[  311.962383][T11838] exFAT-fs (rnullb0): invalid boot record signature
[  311.979224][T11838] exFAT-fs (rnullb0): failed to read boot sector
[  311.985936][T11838] exFAT-fs (rnullb0): failed to recognize exfat type
[  312.184496][   T10] snd-usb-audio 1-1:4.62: probe with driver snd-usb-audio failed with error -2
[  312.201278][T11845] binder: Bad value for 'max'
[  312.210242][   T10] usb 1-1: USB disconnect, device number 66
[  312.343341][ T8831] udevd[8831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.62/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  312.529420][T11874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3635'.
[  312.679386][   T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  312.843128][   T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  312.854961][   T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.866670][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  312.874304][   T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  312.884480][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.895628][   T10] usb 5-1: config 0 descriptor??
[  313.323129][   T10] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0
[  313.330976][   T10] hid-steam 0003:28DE:1102.0017: unknown main item tag 0x0
[  313.340078][   T10] hid-steam 0003:28DE:1102.0017: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  313.480204][   T10] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' connected
[  313.492161][   T10] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0017/input/input28
[  313.521969][   T10] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0
[  313.537554][   T10] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0
[  313.556464][   T10] hid-steam 0003:28DE:1102.0018: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  313.591968][   T10] usb 5-1: USB disconnect, device number 7
[  313.618273][   T10] hid-steam 0003:28DE:1102.0017: Steam Controller 'XXXXXXXXXX' disconnected
[  313.756092][T11902] fido_id[11902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  313.776165][T11907] KVM: debugfs: duplicate directory 11907-7
[  314.181174][ T4726] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  314.359379][ T4726] usb 1-1: Using ep0 maxpacket: 32
[  314.389392][ T4726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  314.399219][ T4726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  314.430208][ T4726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  314.447570][ T4726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.478892][ T4726] usb 1-1: Product: 跎ꇌꉱꡂຏ蛆甔쬰䶡嗕㒖떭ռ࣊珄悹闭浝臶⭴ꩻເ黖紐ꙍ裪䂻畁㰗䉸뷸慲쌟뼕崏ࣥ힅䏌㥏㢂⊎掕ળ䌚넫೽㘨㽴띸堖ဌ∠泥嬸⓸倦㙣粜柂휔譹鈬햘悀뺞裢ܒ㋇⥯籩淛밠܅鱅Ⳡ③ﱪ권䃼紴ퟐ㏱騪操娙賀핌逝ٛ쮕鋻⥛⒂ꂚ淇傿嘕ﱠ툹폼[㕖齉ﴯ䒘㕱뗺Ꮗ
[  314.540001][T11936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  314.540046][T11936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24
[  314.550489][ T4726] usb 1-1: Manufacturer: ب
[  314.574698][ T4726] usb 1-1: SerialNumber: 䅤Ⰼ
[  314.763889][T11946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  314.763927][T11946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32
[  314.893780][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'.
[  314.925189][T11955] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  314.926231][T11955] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false
[  314.962672][T11961] fuse: Bad value for 'fd'
[  315.014493][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.059541][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.097612][ T4726] cdc_ncm 1-1:1.0: bind() failure
[  315.115109][ T4726] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  315.127321][ T4726] cdc_ncm 1-1:1.1: bind() failure
[  315.133769][T11969] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  315.137652][ T4726] usb 1-1: USB disconnect, device number 67
[  315.559366][ T4726] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  315.647375][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  315.668690][T11983] rust_binder: Write failure EFAULT in pid:428
[  315.718754][ T4726] usb 5-1: unable to get BOS descriptor or descriptor too short
[  315.756625][T11987] fuse: Bad value for 'fd'
[  315.761243][ T4726] usb 5-1: not running at top speed; connect to a high speed hub
[  315.780345][ T4726] usb 5-1: too many endpoints for config 1 interface 0 altsetting 2: 166, using maximum allowed: 30
[  315.799875][ T4726] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 951, setting to 64
[  315.811141][ T4726] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[  315.825243][ T4726] usb 5-1: config 1 interface 0 has no altsetting 0
[  315.843847][ T4726] usb 5-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.40
[  315.872415][ T4726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.882338][ T4726] usb 5-1: Product: syz
[  315.886565][ T4726] usb 5-1: Manufacturer: syz
[  315.892250][ T4726] usb 5-1: SerialNumber: syz
[  315.901463][T11980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  315.929170][T11996] tc_dump_action: action bad kind
[  316.060079][T12003] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  316.065987][T12003] rust_binder: Error in use_page_slow: ESRCH
[  316.078327][T12003] rust_binder: use_range failure ESRCH
[  316.089351][T12003] rust_binder: Failed to allocate buffer. len:200, is_oneway:true
[  316.094875][T12003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  316.109493][T12003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:435
[  316.134878][ T4726] usb 5-1: USB disconnect, device number 8
[  316.282012][T12015] fuse: Bad value for 'fd'
[  316.316097][   T36] kauditd_printk_skb: 574 callbacks suppressed
[  316.316119][   T36] audit: type=1400 audit(1759169491.540:74136): avc:  denied  { read write } for  pid=8446 comm="syz-executor" name="loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.349332][   T36] audit: type=1400 audit(1759169491.540:74137): avc:  denied  { read write open } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.388705][   T36] audit: type=1400 audit(1759169491.540:74138): avc:  denied  { ioctl } for  pid=8446 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=576 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.434713][   T36] audit: type=1400 audit(1759169491.580:74139): avc:  denied  { create } for  pid=12009 comm="syz.6.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  316.461734][   T36] audit: type=1400 audit(1759169491.610:74140): avc:  denied  { read } for  pid=12017 comm="syz.0.3684" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.486291][   T36] audit: type=1400 audit(1759169491.610:74141): avc:  denied  { read open } for  pid=12017 comm="syz.0.3684" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.559441][   T36] audit: type=1400 audit(1759169491.610:74142): avc:  denied  { create } for  pid=12011 comm="syz.1.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  316.597130][   T36] audit: type=1400 audit(1759169491.610:74143): avc:  denied  { ioctl } for  pid=12017 comm="syz.0.3684" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.623469][   T36] audit: type=1400 audit(1759169491.610:74144): avc:  denied  { write } for  pid=12011 comm="syz.1.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  316.643923][   T36] audit: type=1400 audit(1759169491.660:74145): avc:  denied  { read write } for  pid=8446 comm="syz-executor" name="loop0" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.868787][T12044] fuse: Invalid rootmode
[  316.897705][T12046] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  316.915955][T12046] rust_binder: Error in use_page_slow: ESRCH
[  316.927198][T12046] rust_binder: use_range failure ESRCH
[  316.934680][T12046] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  316.941654][T12046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  316.950737][T12046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:455
[  317.024867][ T1248] Bluetooth: hci0: Frame reassembly failed (-84)
[  317.149901][T12060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461
[  317.204360][T12061] exFAT-fs (rnullb0): invalid boot record signature
[  317.220250][T12061] exFAT-fs (rnullb0): failed to read boot sector
[  317.226585][T12061] exFAT-fs (rnullb0): failed to recognize exfat type
[  318.202168][T12088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  318.884255][T12115] 9pnet_fd: Insufficient options for proto=fd
[  318.892472][T12114] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.930825][T12114] kvm: kvm [12112]: vcpu6, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x3008000
[  318.961017][T12114] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  318.961046][T12114] rust_binder: Read failure Err(EFAULT) in pid:478
[  319.099328][  T358] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  319.099385][  T357] Bluetooth: hci0: command 0x1003 tx timeout
[  319.160775][T12132] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.272158][T12139] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.280117][T12139] rust_binder: Error in use_page_slow: ESRCH
[  319.286583][T12139] rust_binder: use_range failure ESRCH
[  319.306316][T12139] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  319.317687][T12139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  319.336077][T12139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:482
[  319.610692][T12160] tmpfs: Unknown parameter '�'
[  319.932983][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3740'.
[  320.809201][  T457] rust_binder: 12207: removing orphan mapping 0:4200
[  320.849359][ T4726] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  320.955423][T12219] fuse: Unknown parameter 'use00000000000000000000'
[  321.019404][ T4726] usb 1-1: Using ep0 maxpacket: 8
[  321.028592][ T4726] usb 1-1: unable to get BOS descriptor or descriptor too short
[  321.040122][ T4726] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024
[  321.051444][ T4726] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024
[  321.063605][ T4726] usb 1-1: config 12 interface 0 has no altsetting 0
[  321.077557][ T4726] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  321.088161][ T4726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.097171][ T4726] usb 1-1: Product: syz
[  321.102416][ T4726] usb 1-1: Manufacturer: syz
[  321.107061][ T4726] usb 1-1: SerialNumber: syz
[  321.115839][T12203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  321.309193][T12230] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  321.340450][   T36] kauditd_printk_skb: 752 callbacks suppressed
[  321.340473][   T36] audit: type=1400 audit(1759169496.570:74874): avc:  denied  { name_bind } for  pid=12202 comm="syz.0.3746" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  321.341039][T12203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  321.354486][   T36] audit: type=1400 audit(1759169496.570:74875): avc:  denied  { ioctl } for  pid=12202 comm="syz.0.3746" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  321.396035][T12203] rust_binder: Error in use_page_slow: ESRCH
[  321.403133][T12203] rust_binder: use_range failure ESRCH
[  321.405366][   T36] audit: type=1400 audit(1759169496.600:74876): avc:  denied  { map } for  pid=12202 comm="syz.0.3746" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  321.413321][T12203] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  321.414938][   T36] audit: type=1400 audit(1759169496.600:74877): avc:  denied  { read } for  pid=12202 comm="syz.0.3746" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  321.442687][T12230] netlink: 'syz.1.3757': attribute type 27 has an invalid length.
[  321.446796][   T36] audit: type=1400 audit(1759169496.600:74878): avc:  denied  { read } for  pid=12202 comm="syz.0.3746" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  321.472704][T12203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  321.483796][T12233] 9pnet_fd: Insufficient options for proto=fd
[  321.506279][T12230] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  321.512281][   T36] audit: type=1400 audit(1759169496.600:74879): avc:  denied  { read open } for  pid=12202 comm="syz.0.3746" path="net:[4026532499]" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  321.518206][T12203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:503
[  321.544539][   T36] audit: type=1400 audit(1759169496.600:74880): avc:  denied  { create } for  pid=12202 comm="syz.0.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  321.595793][ T4726] usb 1-1: selecting invalid altsetting 0
[  321.626694][ T4726] usb 1-1: USB disconnect, device number 68
[  321.641254][   T36] audit: type=1400 audit(1759169496.600:74881): avc:  denied  { read } for  pid=12202 comm="syz.0.3746" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  321.698821][   T36] audit: type=1400 audit(1759169496.600:74882): avc:  denied  { read open } for  pid=12202 comm="syz.0.3746" path="net:[4026532499]" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  321.724495][   T36] audit: type=1400 audit(1759169496.600:74883): avc:  denied  { create } for  pid=12202 comm="syz.0.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  321.796957][ T8860] udevd[8860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  321.939769][T12247] fuse: Unknown parameter 'use00000000000000000000'
[  322.084613][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3766'.
[  322.222960][T12262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  322.231968][T12262] rust_binder: Error in use_page_slow: ESRCH
[  322.244092][T12261] netlink: 'syz.4.3769': attribute type 12 has an invalid length.
[  322.258141][T12262] rust_binder: use_range failure ESRCH
[  322.258179][T12262] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  322.263878][T12262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  322.272379][T12262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:505
[  322.283034][T12261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=12261 comm=syz.4.3769
[  322.330965][T12261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12261 comm=syz.4.3769
[  322.494722][T12268] fuse: Unknown parameter 'user_i00000000000000000000'
[  322.574949][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.589928][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.799367][  T382] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  322.977298][  T382] usb 1-1: device descriptor read/64, error -71
[  323.173251][T12294] overlayfs: failed to resolve './file0/file0': -2
[  323.181794][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'.
[  323.259379][  T382] usb 1-1: device descriptor read/64, error -71
[  323.270125][T12298] fuse: Unknown parameter 'user_i00000000000000000000'
[  323.499428][  T382] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  323.639377][  T382] usb 1-1: device descriptor read/64, error -71
[  323.746807][T12313] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.763310][T12313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12313 comm=syz.6.3787
[  323.889375][  T382] usb 1-1: device descriptor read/64, error -71
[  323.970345][T12326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2088 sclass=netlink_route_socket pid=12326 comm=syz.6.3791
[  324.009880][  T382] usb usb1-port1: attempt power cycle
[  324.022034][T12329] netlink: 'syz.6.3792': attribute type 4 has an invalid length.
[  324.029988][T12329] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3792'.
[  324.174477][T12348] fuse: Unknown parameter 'user_id00000000000000000000'
[  324.350728][  T382] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  324.391782][  T382] usb 1-1: device descriptor read/8, error -71
[  324.523960][  T382] usb 1-1: device descriptor read/8, error -71
[  324.746567][T12376] fuse: Unknown parameter 'user_id00000000000000000000'
[  324.779449][  T382] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  324.802390][  T382] usb 1-1: device descriptor read/8, error -71
[  324.942224][  T382] usb 1-1: device descriptor read/8, error -71
[  325.051150][  T382] usb usb1-port1: unable to enumerate USB device
[  325.069369][   T65] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  325.177517][T12392] fuse: Unknown parameter 'rootm�e'
[  325.229431][   T65] usb 5-1: Using ep0 maxpacket: 16
[  325.237143][   T65] usb 5-1: config 4 has an invalid interface number: 137 but max is 1
[  325.245978][   T65] usb 5-1: config 4 has an invalid interface number: 56 but max is 1
[  325.255322][   T65] usb 5-1: config 4 has an invalid interface number: 202 but max is 1
[  325.264480][   T65] usb 5-1: config 4 has an invalid interface number: 201 but max is 1
[  325.272775][   T65] usb 5-1: config 4 has an invalid interface number: 156 but max is 1
[  325.281013][   T65] usb 5-1: config 4 has 5 interfaces, different from the descriptor's value: 2
[  325.290200][   T65] usb 5-1: config 4 has no interface number 0
[  325.296323][   T65] usb 5-1: config 4 has no interface number 1
[  325.302448][   T65] usb 5-1: config 4 has no interface number 2
[  325.308642][   T65] usb 5-1: config 4 has no interface number 3
[  325.314763][   T65] usb 5-1: config 4 has no interface number 4
[  325.320900][   T65] usb 5-1: config 4 interface 137 altsetting 3 endpoint 0x5 has an invalid bInterval 99, changing to 7
[  325.333118][   T65] usb 5-1: config 4 interface 137 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1023
[  325.343272][   T65] usb 5-1: config 4 interface 137 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  325.354358][   T65] usb 5-1: config 4 interface 137 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 11
[  325.367560][   T65] usb 5-1: too many endpoints for config 4 interface 56 altsetting 104: 162, using maximum allowed: 30
[  325.378753][   T65] usb 5-1: config 4 interface 56 altsetting 104 has a duplicate endpoint with address 0xD, skipping
[  325.389582][   T65] usb 5-1: config 4 interface 56 altsetting 104 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  325.400723][   T65] usb 5-1: config 4 interface 56 altsetting 104 endpoint 0xA has invalid maxpacket 512, setting to 64
[  325.411779][   T65] usb 5-1: config 4 interface 56 altsetting 104 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  325.422873][   T65] usb 5-1: config 4 interface 56 altsetting 104 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  325.433977][   T65] usb 5-1: config 4 interface 56 altsetting 104 has 8 endpoint descriptors, different from the interface descriptor's value: 162
[  325.447410][   T65] usb 5-1: config 4 interface 202 altsetting 16 has an invalid descriptor for endpoint zero, skipping
[  325.458402][   T65] usb 5-1: config 4 interface 202 altsetting 16 has a duplicate endpoint with address 0x8, skipping
[  325.469238][   T65] usb 5-1: config 4 interface 202 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[  325.482535][   T65] usb 5-1: too many endpoints for config 4 interface 201 altsetting 223: 40, using maximum allowed: 30
[  325.493655][   T65] usb 5-1: config 4 interface 201 altsetting 223 endpoint 0x7 has invalid maxpacket 1025, setting to 64
[  325.505010][   T65] usb 5-1: config 4 interface 201 altsetting 223 has an invalid descriptor for endpoint zero, skipping
[  325.516332][   T65] usb 5-1: config 4 interface 201 altsetting 223 has a duplicate endpoint with address 0x5, skipping
[  325.527306][   T65] usb 5-1: config 4 interface 201 altsetting 223 has a duplicate endpoint with address 0xA, skipping
[  325.538338][   T65] usb 5-1: config 4 interface 201 altsetting 223 has a duplicate endpoint with address 0xA, skipping
[  325.549303][   T65] usb 5-1: config 4 interface 201 altsetting 223 has a duplicate endpoint with address 0x1, skipping
[  325.560320][   T65] usb 5-1: config 4 interface 201 altsetting 223 has 7 endpoint descriptors, different from the interface descriptor's value: 40
[  325.583429][   T65] usb 5-1: config 4 interface 156 altsetting 104 has a duplicate endpoint with address 0x2, skipping
[  325.619323][   T65] usb 5-1: config 4 interface 156 altsetting 104 has an invalid descriptor for endpoint zero, skipping
[  325.639336][   T65] usb 5-1: config 4 interface 156 altsetting 104 has a duplicate endpoint with address 0x6, skipping
[  325.663619][   T65] usb 5-1: config 4 interface 156 altsetting 104 has a duplicate endpoint with address 0x6, skipping
[  325.699347][   T65] usb 5-1: config 4 interface 156 altsetting 104 has a duplicate endpoint with address 0x3, skipping
[  325.719323][   T65] usb 5-1: config 4 interface 156 altsetting 104 has a duplicate endpoint with address 0xD, skipping
[  325.732580][   T65] usb 5-1: config 4 interface 137 has no altsetting 0
[  325.739463][   T65] usb 5-1: config 4 interface 56 has no altsetting 0
[  325.746185][   T65] usb 5-1: config 4 interface 202 has no altsetting 0
[  325.753057][   T65] usb 5-1: config 4 interface 201 has no altsetting 0
[  325.759906][   T65] usb 5-1: config 4 interface 156 has no altsetting 0
[  325.774391][   T65] usb 5-1: Dual-Role OTG device on HNP port
[  325.789523][   T65] usb 5-1: New USB device found, idVendor=0af0, idProduct=d035, bcdDevice=f9.5f
[  325.798677][   T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.809319][   T65] usb 5-1: Product: 징ڍ퀾螵됃怏ᮾ뙊自䪟蝋픡˚龋研㛹୵㲀ᠥ臘갽ᕿ䠒೐Ꮼዄ껌偾ꊫ鉃䊍㼉풔砮䇜汝﷈㩪ﺚ떎텥抣㐍𣏕接뵏踢龚䩹䬨⡀襧㻪毾弰쓙臰絀䪣뫮奇ᱧꗴ묩韙혁綷桑럈樫렅Ḍ⤙൳쇘ᜒ귭徼亂᳃ؐ
[  325.859360][   T65] usb 5-1: Manufacturer: ᐊ
[  325.864033][   T65] usb 5-1: SerialNumber: ч
[  325.882519][T12378] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  326.071568][T12401] fuse: Unknown parameter 'user_id00000000000000000000'
[  326.159476][   T65] usb 5-1: USB disconnect, device number 9
[  326.188360][ T8831] udevd[8831]: setting owner of /dev/bus/usb/005/009 to uid=0, gid=0 failed: No such file or directory
[  326.295713][T12409] netlink: 'syz.1.3817': attribute type 46 has an invalid length.
[  326.349322][   T36] kauditd_printk_skb: 7165 callbacks suppressed
[  326.349347][   T36] audit: type=1326 audit(1759169501.570:82049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.391725][   T36] audit: type=1326 audit(1759169501.570:82050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.416258][T12415] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.419139][   T36] audit: type=1326 audit(1759169501.570:82051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.425154][T12415] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64
[  326.446394][   T36] audit: type=1326 audit(1759169501.570:82052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.446438][   T36] audit: type=1326 audit(1759169501.570:82053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.446468][   T36] audit: type=1326 audit(1759169501.570:82054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.446496][   T36] audit: type=1326 audit(1759169501.570:82055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.446526][   T36] audit: type=1326 audit(1759169501.570:82056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b7f38d97f code=0x50000
[  326.830590][T12419] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  326.830622][T12419] rust_binder: Read failure Err(EFAULT) in pid:98
[  326.924795][T12421] incfs: Can't find or create .index dir in ./cgroup
[  326.939757][T12421] incfs: mount failed -22
[  327.562474][T12455] fuse: Bad value for 'fd'
[  327.807172][T12466] rust_binder: Write failure EFAULT in pid:119
[  327.896274][T12472] netlink: 'syz.4.3838': attribute type 4 has an invalid length.
[  327.920035][T12472] netlink: 'syz.4.3838': attribute type 4 has an invalid length.
[  327.935450][T12472] __vm_enough_memory: pid: 12472, comm: syz.4.3838, bytes: 18014402804453376 not enough memory for the allocation
[  328.077848][ T1246] Bluetooth: hci0: Frame reassembly failed (-84)
[  328.124936][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3840'.
[  328.687680][T12483] fuse: Unknown parameter '0x0000000000000005'
[  328.777779][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  328.791141][T12487] FAT-fs (rnullb0): bogus number of reserved sectors
[  328.797886][T12487] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  329.076762][T12506] overlayfs: failed to clone lowerpath
[  329.085544][T12506] overlayfs: missing 'lowerdir'
[  329.304105][T12513] fuse: Unknown parameter '0x0000000000000006'
[  329.534412][T12530] rust_binder: Error in use_page_slow: ESRCH
[  329.534442][T12530] rust_binder: use_range failure ESRCH
[  329.559389][T12530] rust_binder: Failed to allocate buffer. len:4136, is_oneway:false
[  329.564954][T12530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  329.608393][T12530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:539
[  329.624203][T12530] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  329.633422][T12530] rust_binder: Read failure Err(EFAULT) in pid:539
[  329.734339][T12546] fuse: Unknown parameter '0x0000000000000005'
[  329.972534][T12564] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3869'.
[  330.146422][  T358] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  330.148215][  T357] Bluetooth: hci0: command 0x1003 tx timeout
[  330.339449][T12582] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3877'.
[  330.385513][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'.
[  330.431596][T12582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3877'.
[  330.779646][  T735] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  330.932536][  T735] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  330.941849][  T735] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  330.953828][  T735] usb 5-1: config 220 has no interface number 2
[  330.961175][  T735] usb 5-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF
[  330.974012][  T735] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7
[  330.986222][  T735] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  331.000463][  T735] usb 5-1: config 220 interface 0 has no altsetting 0
[  331.007295][  T735] usb 5-1: config 220 interface 76 has no altsetting 0
[  331.015483][  T735] usb 5-1: config 220 interface 1 has no altsetting 0
[  331.028069][  T735] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  331.038288][  T735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.047378][  T735] usb 5-1: Product: syz
[  331.052669][  T735] usb 5-1: Manufacturer: syz
[  331.057434][  T735] usb 5-1: SerialNumber: syz
[  331.388062][  T735] usb 5-1: selecting invalid altsetting 0
[  331.400470][  T735] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  331.407562][   T36] kauditd_printk_skb: 24763 callbacks suppressed
[  331.407583][   T36] audit: type=1400 audit(1759169506.630:106807): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  331.420769][T12621] netlink: 'syz.6.3887': attribute type 32 has an invalid length.
[  331.433827][  T735] usb 5-1: No valid video chain found.
[  331.434544][   T36] audit: type=1400 audit(1759169506.640:106808): avc:  denied  { getattr } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  331.479455][  T735] usb 5-1: USB disconnect, device number 10
[  331.510254][   T36] audit: type=1400 audit(1759169506.640:106809): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.532723][   T36] audit: type=1400 audit(1759169506.650:106810): avc:  denied  { write } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.553239][   T36] audit: type=1400 audit(1759169506.650:106811): avc:  denied  { nlmsg_write } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.574536][   T36] audit: type=1400 audit(1759169506.670:106812): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  331.594349][   T36] audit: type=1400 audit(1759169506.670:106813): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  331.615530][   T36] audit: type=1400 audit(1759169506.670:106814): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.637523][   T36] audit: type=1400 audit(1759169506.670:106815): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.681064][   T36] audit: type=1400 audit(1759169506.680:106816): avc:  denied  { create } for  pid=12620 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.931537][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'.
[  331.940958][T12641] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.951333][T12641] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.986253][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  331.996664][T12644] cgroup2: Unknown parameter 'nsdelegatel'
[  332.289335][  T735] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  332.326773][T12661] fuse: Unknown parameter 'sootmode000000000000000000040000'
[  332.370311][T12663] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3901'.
[  332.429375][  T735] usb 5-1: device descriptor read/64, error -71
[  332.447066][T12669] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  332.669356][  T735] usb 5-1: device descriptor read/64, error -71
[  332.909362][  T735] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  333.049355][  T735] usb 5-1: device descriptor read/64, error -71
[  333.078226][T12689] 9pnet_fd: Insufficient options for proto=fd
[  333.289352][  T735] usb 5-1: device descriptor read/64, error -71
[  333.399505][  T735] usb usb5-port1: attempt power cycle
[  333.739358][  T735] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  333.761785][  T735] usb 5-1: device descriptor read/8, error -71
[  333.891783][  T735] usb 5-1: device descriptor read/8, error -71
[  333.979481][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  334.059355][  T358] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  334.059369][  T357] Bluetooth: hci0: command 0x1003 tx timeout
[  334.139380][  T735] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  334.162752][  T735] usb 5-1: device descriptor read/8, error -71
[  334.231479][T12707] fuse: Unknown parameter '?���܃A
[  334.231479][T12707] ݭ���ܺt�z�|pQ�h�R2;�S3�5��.�I$H�\��x�3�kw�M�����v&��r'
[  334.302162][  T735] usb 5-1: device descriptor read/8, error -71
[  334.374212][T12715] 9pnet_fd: Insufficient options for proto=fd
[  334.413367][  T735] usb usb5-port1: unable to enumerate USB device
[  334.627657][T12717] binder: Unknown parameter '�^.�҂�c�U��n�*(u�����
8:S�+w��b�>��r�2Z�F�'
[  334.699191][T12721] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.793035][T12726] /dev/sr0: Can't lookup blockdev
[  335.018288][T12734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.018328][T12734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584
[  335.137795][T12740] rust_binder: Write failure EFAULT in pid:137
[  335.191891][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.220558][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.221619][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.246003][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.246325][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.275503][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.275836][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.289797][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.290142][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.299600][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.310200][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.310640][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.333769][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.334420][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.348332][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.349003][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.359945][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.365396][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.372186][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.378918][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.385916][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.391889][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.398881][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.404753][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.411538][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.418302][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.425179][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.431749][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.461405][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.461767][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.468556][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.475504][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.482621][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.492264][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.500915][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.508420][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.515060][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.523158][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.539256][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.550239][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.556986][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.564952][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.572618][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.580299][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.586859][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.610408][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.617142][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.641292][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.641620][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.653566][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.672896][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.689708][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.691491][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'.
[  335.710604][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.712356][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.736913][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.749066][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.760183][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.771918][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.784948][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.801946][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.817891][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.832199][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.846030][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.852718][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.859413][T12743] rust_binder: Write failure EFAULT in pid:141
[  335.956238][T12759] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  335.992601][T12759] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  336.004574][T12759] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  336.027924][T12759] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  336.372378][  T735] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  336.392996][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  336.475692][   T36] kauditd_printk_skb: 648 callbacks suppressed
[  336.475717][   T36] audit: type=1400 audit(2000000004.114:107465): avc:  denied  { ioctl } for  pid=12767 comm="syz.4.3938" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.526620][  T735] usb 1-1: Using ep0 maxpacket: 16
[  336.538382][   T36] audit: type=1400 audit(2000000004.182:107466): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.542924][  T735] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.570383][   T36] audit: type=1400 audit(2000000004.182:107467): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.604721][   T36] audit: type=1400 audit(2000000004.182:107468): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.619169][  T735] usb 1-1: config 1 interface 0 has no altsetting 0
[  336.631541][   T10] usb 5-1: Using ep0 maxpacket: 8
[  336.641801][   T36] audit: type=1400 audit(2000000004.182:107469): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.660584][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  336.669624][   T36] audit: type=1400 audit(2000000004.182:107470): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.685938][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.709936][   T36] audit: type=1400 audit(2000000004.182:107471): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.715393][   T10] usb 5-1: config 0 descriptor??
[  336.738242][   T36] audit: type=1400 audit(2000000004.182:107472): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.770635][  T735] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40
[  336.787793][  T735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.796029][  T735] usb 1-1: Product: syz
[  336.800247][  T735] usb 1-1: Manufacturer: syz
[  336.805160][  T735] usb 1-1: SerialNumber: syz
[  336.810603][   T36] audit: type=1400 audit(2000000004.182:107473): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.839311][   T36] audit: type=1400 audit(2000000004.182:107474): avc:  denied  { ioctl } for  pid=12766 comm="syz.0.3939" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  336.971461][T12783] overlayfs: failed to clone lowerpath
[  337.203616][   T10] magicmouse 0003:05AC:0324.0019: item fetching failed at offset 3/5
[  337.212561][   T10] magicmouse 0003:05AC:0324.0019: magicmouse hid parse failed
[  337.221569][   T10] magicmouse 0003:05AC:0324.0019: probe with driver magicmouse failed with error -22
[  337.420147][   T10] usb 5-1: USB disconnect, device number 15
[  337.752068][T12800] tmpfs: Unknown parameter 'no'
[  337.758711][T12800] overlay: ./file1 is not a directory
[  338.613645][T12821] 9pnet_fd: Insufficient options for proto=fd
[  338.784333][T12831] overlayfs: failed to clone upperpath
[  339.106992][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3962'.
[  339.223565][  T735] usbhid 1-1:1.0: can't add hid device: -71
[  339.229771][  T735] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  339.267100][  T735] usb 1-1: USB disconnect, device number 73
[  339.362679][T12842] binder: Bad value for 'max'
[  339.496726][T12846] overlay: ./file0 is not a directory
[  339.980369][T12855] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  340.127876][T12865] binder: Bad value for 'defcontext'
[  340.455652][T12886] rust_binder: 166: no such ref 1
[  340.474349][T12886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166
[  340.590070][ T4726] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  340.714882][T12898] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3980'.
[  340.765471][ T4726] usb 1-1: config 2 has an invalid interface number: 253 but max is 0
[  340.774379][ T4726] usb 1-1: config 2 has no interface number 0
[  340.781279][ T4726] usb 1-1: config 2 interface 253 has no altsetting 0
[  340.794929][ T4726] usb 1-1: New USB device found, idVendor=0424, idProduct=9505, bcdDevice=4e.de
[  340.804154][ T4726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.812272][ T4726] usb 1-1: Product: syz
[  340.816820][ T4726] usb 1-1: Manufacturer: syz
[  340.822692][ T4726] usb 1-1: SerialNumber: syz
[  341.047543][ T4726] smsc95xx v2.0.0
[  341.054836][ T4726] smsc95xx 1-1:2.253 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  341.066268][ T4726] smsc95xx 1-1:2.253: probe with driver smsc95xx failed with error -22
[  341.379043][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3993'.
[  341.538191][T12946] rust_binder: Error while translating object.
[  341.538237][T12946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  341.545475][T12946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178
[  341.557229][   T36] kauditd_printk_skb: 571 callbacks suppressed
[  341.557252][   T36] audit: type=1400 audit(2000000010.146:108046): avc:  denied  { create } for  pid=12945 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  341.592871][   T36] audit: type=1400 audit(2000000010.156:108047): avc:  denied  { read write } for  pid=12945 comm="syz.4.3997" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.617219][   T36] audit: type=1400 audit(2000000010.156:108048): avc:  denied  { read write open } for  pid=12945 comm="syz.4.3997" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.642886][   T36] audit: type=1400 audit(2000000010.156:108049): avc:  denied  { map } for  pid=12945 comm="syz.4.3997" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.677716][   T36] audit: type=1400 audit(2000000010.156:108050): avc:  denied  { read write } for  pid=12945 comm="syz.4.3997" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.708300][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  341.711579][   T36] audit: type=1400 audit(2000000010.176:108051): avc:  denied  { ioctl } for  pid=12945 comm="syz.4.3997" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.739648][   T36] audit: type=1400 audit(2000000010.206:108052): avc:  denied  { read write } for  pid=11738 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.765147][   T36] audit: type=1400 audit(2000000010.206:108053): avc:  denied  { read write open } for  pid=11738 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.791134][   T36] audit: type=1400 audit(2000000010.206:108054): avc:  denied  { ioctl } for  pid=11738 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.818415][   T36] audit: type=1400 audit(2000000010.256:108055): avc:  denied  { read write } for  pid=12947 comm="syz.4.3998" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.294176][   T10] usb 1-1: USB disconnect, device number 74
[  343.334655][T13018] 9pnet_fd: Insufficient options for proto=fd
[  343.341602][T13017] 9pnet_fd: Insufficient options for proto=fd
[  343.478244][T13024] rust_binder: Write failure EFAULT in pid:637
[  343.672733][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4026'.
[  343.688519][T13040] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4026'.
[  343.697659][T13040] tipc: Invalid UDP bearer configuration
[  343.697690][T13040] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  343.780019][  T358] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  343.784360][  T357] Bluetooth: hci0: command 0x1003 tx timeout
[  343.859837][T13044] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  343.861931][T13044] rust_binder: Error in use_page_slow: ESRCH
[  343.868694][T13044] rust_binder: use_range failure ESRCH
[  343.875013][T13044] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[  343.880540][T13044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  343.888742][T13044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:652
[  344.024979][T13115] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.630412][T13140] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  344.656852][T13140] rust_binder: Read failure Err(EFAULT) in pid:659
[  344.938478][T13157] cgroup: Invalid name
[  344.939822][T13156] cgroup: Invalid name
[  344.960199][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  345.128015][   T10] usb 5-1: Using ep0 maxpacket: 32
[  345.136118][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  345.151863][   T10] usb 5-1: config 0 has no interface number 0
[  345.166926][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  345.176334][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.184427][   T10] usb 5-1: Product: syz
[  345.189452][   T10] usb 5-1: Manufacturer: syz
[  345.194180][   T10] usb 5-1: SerialNumber: syz
[  345.200898][   T10] usb 5-1: config 0 descriptor??
[  345.209388][   T10] smsc95xx v2.0.0
[  345.305259][T13163] rust_binder: Error while translating object.
[  345.305341][T13163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  345.311681][T13163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:671
[  345.594958][T13169] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.605948][T13169] rust_binder: Error in use_page_slow: ESRCH
[  345.613654][T13169] rust_binder: use_range failure ESRCH
[  345.619758][T13169] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  345.623025][T13148] input: syz1 as /devices/virtual/input/input31
[  345.627789][T13169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  345.639822][T13169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:677
[  345.655021][T13169] rust_binder: Read failure Err(EAGAIN) in pid:677
[  345.687173][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  345.741885][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  345.748552][T13172] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.760490][T13172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  345.767073][T13172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:679
[  345.871914][T13180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.879947][T13182] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.4051'.
[  345.898215][T13182] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4051'.
[  345.901276][T13180] rust_binder: Read failure Err(EAGAIN) in pid:682
[  345.979271][T13186] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.993640][T13186] rust_binder: Error in use_page_slow: ESRCH
[  346.000480][T13186] rust_binder: use_range failure ESRCH
[  346.006838][T13186] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false
[  346.013226][T13186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  346.021887][T13186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:684
[  346.091725][T13190] random: crng reseeded on system resumption
[  346.269305][T13196] /dev/rnullb0: Can't open blockdev
[  346.417683][T13205] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.418771][T13206] rust_binder: Error in use_page_slow: ESRCH
[  346.426105][T13206] rust_binder: use_range failure ESRCH
[  346.433046][T13206] rust_binder: Failed to allocate buffer. len:72, is_oneway:true
[  346.438734][T13206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  346.448419][T13206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:698
[  346.580548][   T36] kauditd_printk_skb: 864 callbacks suppressed
[  346.580573][   T36] audit: type=1400 audit(2000000015.166:108920): avc:  denied  { ioctl } for  pid=13147 comm="syz.4.4040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.581535][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  346.591961][   T36] audit: type=1400 audit(2000000015.166:108921): avc:  denied  { ioctl } for  pid=13147 comm="syz.4.4040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.596579][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61
[  346.641111][   T36] audit: type=1400 audit(2000000015.216:108922): avc:  denied  { ioctl } for  pid=13207 comm="syz.0.4061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.700522][   T36] audit: type=1400 audit(2000000015.286:108923): avc:  denied  { ioctl } for  pid=13207 comm="syz.0.4061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.749309][   T36] audit: type=1400 audit(2000000015.316:108924): avc:  denied  { execmem } for  pid=13209 comm="syz.1.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  346.768895][   T36] audit: type=1400 audit(2000000015.316:108925): avc:  denied  { execmem } for  pid=13209 comm="syz.1.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  346.790066][  T382] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  346.799327][   T36] audit: type=1400 audit(2000000015.376:108926): avc:  denied  { ioctl } for  pid=13207 comm="syz.0.4061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.826297][   T36] audit: type=1400 audit(2000000015.376:108927): avc:  denied  { ioctl } for  pid=13207 comm="syz.0.4061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.878727][   T36] audit: type=1400 audit(2000000015.376:108928): avc:  denied  { ioctl } for  pid=13207 comm="syz.0.4061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.909817][   T36] audit: type=1400 audit(2000000015.396:108929): avc:  denied  { ioctl } for  pid=13147 comm="syz.4.4040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.953702][  T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.966422][  T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.000041][  T382] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  347.010607][  T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.029525][  T382] usb 1-1: config 0 descriptor??
[  347.155342][T13217] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.162636][T13217] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.170133][T13217] bridge_slave_0: entered allmulticast mode
[  347.176613][T13217] bridge_slave_0: entered promiscuous mode
[  347.184790][T13217] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.192182][T13217] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.199372][T13217] bridge_slave_1: entered allmulticast mode
[  347.206003][T13217] bridge_slave_1: entered promiscuous mode
[  347.311309][T13217] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.318486][T13217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.325909][T13217] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.333015][T13217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.396093][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.404012][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.419898][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.427046][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.439067][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.446216][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.460820][  T382] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0
[  347.481520][  T382] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0
[  347.489057][  T382] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0
[  347.497349][  T382] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0
[  347.505186][  T382] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0
[  347.517335][  T382] playstation 0003:054C:0DF2.001A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  347.631752][T13217] veth0_vlan: entered promiscuous mode
[  347.639034][T13234] lo: MTU too low for tipc bearer
[  347.644228][T13234] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  347.659080][  T382] playstation 0003:054C:0DF2.001A: Invalid byte count transferred, expected 20 got 0
[  347.669844][  T382] playstation 0003:054C:0DF2.001A: Failed to retrieve DualSense pairing info: -22
[  347.680915][  T382] playstation 0003:054C:0DF2.001A: Failed to get MAC address from DualSense
[  347.690091][  T382] playstation 0003:054C:0DF2.001A: Failed to create dualsense.
[  347.699721][T13217] veth1_macvtap: entered promiscuous mode
[  347.700868][  T382] playstation 0003:054C:0DF2.001A: probe with driver playstation failed with error -22
[  347.838174][T13237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  347.838213][T13237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  347.866040][  T457] usb 1-1: USB disconnect, device number 75
[  347.958857][T13243] devpts: called with bogus options
[  348.045361][T13248] input: syz0 as /devices/virtual/input/input32
[  348.063261][T13252] binder: Binderfs stats mode cannot be changed during a remount
[  348.213458][   T10] usb 5-1: USB disconnect, device number 16
[  348.526942][  T457] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  348.594192][T13272] rust_binder: Read failure Err(EAGAIN) in pid:711
[  348.700219][  T457] usb 2-1: Using ep0 maxpacket: 16
[  348.730103][  T457] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.760131][  T457] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  348.792881][  T457] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  348.816343][  T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.830623][  T457] usb 2-1: Product: syz
[  348.834955][  T457] usb 2-1: Manufacturer: syz
[  348.841387][  T457] usb 2-1: SerialNumber: syz
[  348.858712][  T457] usb 2-1: config 0 descriptor??
[  348.866607][T13278] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  348.866633][T13278] rust_binder: Read failure Err(EFAULT) in pid:713
[  348.938479][T13292] usb usb9: usbfs: process 13292 (syz.4.4084) did not claim interface 0 before use
[  348.994747][T13291] syz.4.4084: attempt to access beyond end of device
[  348.994747][T13291] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0
[  349.008250][T13291] EXT4-fs (loop4): unable to read superblock
[  349.059611][ T7560] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  349.085341][ T7560] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  349.628327][T13309] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  349.777810][T13319] binder: Bad value for 'stats'
[  349.834453][T13321] rust_binder: 732: no such ref 0
[  349.846064][T13321] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  349.853453][T13321] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  350.103077][T13330] rust_binder: Error while translating object.
[  350.103138][T13330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  350.116164][T13330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228
[  350.126002][  T457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  350.176616][  T457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  350.178430][T13333] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4093'.
[  350.211096][  T457] asix 2-1:0.0: probe with driver asix failed with error -71
[  350.225457][T13333] gretap0: left allmulticast mode
[  350.233127][  T457] usb 2-1: USB disconnect, device number 38
[  350.259341][T13336] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4093'.
[  350.270963][T13336] 0��{X��: renamed from gretap0
[  350.277497][T13336] 0��{X��: left promiscuous mode
[  350.284314][T13336] 0��{X��: entered allmulticast mode
[  350.291761][T13336] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  350.329923][   T65] rust_binder: 13334: removing orphan mapping 0:4120
[  351.190071][  T457] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  351.343069][  T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.357378][  T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.370765][  T457] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  351.384758][  T457] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  351.396381][  T457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.408489][  T457] usb 1-1: config 0 descriptor??
[  351.603110][   T36] kauditd_printk_skb: 671 callbacks suppressed
[  351.603343][   T36] audit: type=1400 audit(2000000020.186:109601): avc:  denied  { unmount } for  pid=11738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  351.638082][   T36] audit: type=1400 audit(2000000020.216:109602): avc:  denied  { ioctl } for  pid=13368 comm="syz.0.4109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  351.672399][   T36] audit: type=1400 audit(2000000020.216:109603): avc:  denied  { ioctl } for  pid=13368 comm="syz.0.4109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  351.716486][  T457] usbhid 1-1:0.0: can't add hid device: -71
[  351.731415][  T457] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  351.741148][  T457] usb 1-1: USB disconnect, device number 76
[  351.747939][   T36] audit: type=1400 audit(2000000020.216:109604): avc:  denied  { create } for  pid=13391 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  351.789918][   T36] audit: type=1400 audit(2000000020.216:109605): avc:  denied  { connect } for  pid=13391 comm="syz.6.4118" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  351.813141][   T36] audit: type=1400 audit(2000000020.216:109606): avc:  denied  { setattr } for  pid=13391 comm="syz.6.4118" name="RAWv6" dev="sockfs" ino=55455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  351.851773][   T36] audit: type=1400 audit(2000000020.216:109607): avc:  denied  { mounton } for  pid=13391 comm="syz.6.4118" path="/251/file0" dev="tmpfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  351.915257][   T36] audit: type=1400 audit(2000000020.256:109608): avc:  denied  { create } for  pid=13368 comm="syz.0.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  351.956213][   T36] audit: type=1400 audit(2000000020.256:109609): avc:  denied  { write } for  pid=13368 comm="syz.0.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  352.008062][   T36] audit: type=1400 audit(2000000020.256:109610): avc:  denied  { ioctl } for  pid=13368 comm="syz.0.4109" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  352.342936][  T457] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  352.390114][T13430] overlayfs: failed to resolve './bus': -2
[  352.504989][  T457] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  352.513819][  T457] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.525373][  T457] usb 1-1: config 0 has no interface number 0
[  352.536265][  T457] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  352.546810][  T457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.555584][  T457] usb 1-1: Product: syz
[  352.559929][  T457] usb 1-1: Manufacturer: syz
[  352.565613][  T457] usb 1-1: SerialNumber: syz
[  352.575931][  T457] usb 1-1: config 0 descriptor??
[  352.707572][T13448] rust_binder: Error while translating object.
[  352.707647][T13448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  352.714833][T13448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36
[  352.771895][T13450] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.4132'.
[  352.827237][  T457] usb 1-1: USB disconnect, device number 77
[  353.100032][   T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  353.260509][   T10] usb 2-1: Using ep0 maxpacket: 16
[  353.272330][   T10] usb 2-1: too many configurations: 55, using maximum allowed: 8
[  353.321838][   T10] usb 2-1: string descriptor 0 read error: -71
[  353.329618][   T10] usb 2-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58
[  353.354577][   T10] usb 2-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158
[  353.382211][   T10] usb 2-1: rejected 8 configurations due to insufficient available bus power
[  353.400053][   T10] usb 2-1: no configuration chosen from 8 choices
[  353.408368][   T10] usb 2-1: USB disconnect, device number 39
[  353.440955][T13458] __vm_enough_memory: pid: 13458, comm: syz.0.4136, bytes: 18014402804453376 not enough memory for the allocation
[  353.559662][T13463] rust_binder: Error while translating object.
[  353.559714][T13463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  353.602047][T13463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:258
[  353.617013][T13469] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  353.643496][T13469] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  353.667915][T13471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.675271][T13471] IPv6: NLM_F_CREATE should be set when creating new route
[  353.682602][T13471] IPv6: NLM_F_CREATE should be set when creating new route
[  354.311648][ T1246] Bluetooth: hci0: Frame reassembly failed (-84)
[  354.380079][  T457] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  354.487971][T13504] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  354.503722][T13516] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4157'.
[  354.542595][  T457] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  354.551530][  T457] usb 2-1: config 0 has no interface number 0
[  354.571564][  T457] usb 2-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b
[  354.586861][  T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.611769][  T457] usb 2-1: Product: syz
[  354.621617][  T457] usb 2-1: Manufacturer: syz
[  354.631856][  T457] usb 2-1: SerialNumber: syz
[  354.644771][  T457] usb 2-1: config 0 descriptor??
[  354.862623][T13499] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.863594][T13499] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  354.876670][  T457] rtl8150 2-1:0.51: couldn't find required endpoints
[  354.895151][  T457] rtl8150 2-1:0.51: probe with driver rtl8150 failed with error -5
[  354.904522][  T457] usb 2-1: USB disconnect, device number 40
[  355.423601][T13533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4163'.
[  355.724299][T13545] overlayfs: failed to clone upperpath
[  355.746013][T13547] netlink: 'syz.4.4168': attribute type 33 has an invalid length.
[  355.755051][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4168'.
[  356.340032][  T357] Bluetooth: hci0: command 0x1003 tx timeout
[  356.370080][  T358] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  356.376671][ T1248] Bluetooth: hci0: Frame reassembly failed (-84)
[  356.388512][ T1248] Bluetooth: hci0: Frame reassembly failed (-84)
[  356.570130][ T4726] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  356.661616][   T36] kauditd_printk_skb: 575 callbacks suppressed
[  356.661640][   T36] audit: type=1400 audit(2000000025.247:110186): avc:  denied  { ioctl } for  pid=13582 comm="syz.1.4179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  356.699917][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4180'.
[  356.720079][ T4726] usb 2-1: device descriptor read/64, error -71
[  356.728725][   T36] audit: type=1400 audit(2000000025.247:110187): avc:  denied  { read write } for  pid=11738 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.760136][   T36] audit: type=1400 audit(2000000025.247:110188): avc:  denied  { read write open } for  pid=11738 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.795677][   T36] audit: type=1400 audit(2000000025.247:110189): avc:  denied  { ioctl } for  pid=11738 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.822548][   T36] audit: type=1400 audit(2000000025.277:110190): avc:  denied  { create } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  356.843352][   T36] audit: type=1400 audit(2000000025.277:110191): avc:  denied  { create } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  356.864812][   T36] audit: type=1400 audit(2000000025.277:110192): avc:  denied  { write } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  356.886118][   T36] audit: type=1400 audit(2000000025.277:110193): avc:  denied  { read } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  356.912682][ T7560] rust_binder: 0: removing orphan mapping 0:4120
[  356.919201][   T36] audit: type=1400 audit(2000000025.277:110194): avc:  denied  { read } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  356.940274][   T36] audit: type=1400 audit(2000000025.277:110196): avc:  denied  { create } for  pid=13587 comm="syz.4.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  356.970057][ T4726] usb 2-1: device descriptor read/64, error -71
[  357.070164][T13598] rust_binder: Error while translating object.
[  357.070209][T13598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  357.076776][T13598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301
[  357.230166][ T4726] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  357.289264][T13507] Bluetooth: hci0: Opcode 0x1003 failed: -4
[  357.390064][ T4726] usb 2-1: device descriptor read/64, error -71
[  357.439675][T13612] overlayfs: failed to clone upperpath
[  357.487073][T13619] rust_binder: Write failure EFAULT in pid:310
[  357.608203][T13624] 9pnet_fd: p9_fd_create_tcp (13624): problem connecting socket to 127.0.0.1
[  357.650066][ T4726] usb 2-1: device descriptor read/64, error -71
[  357.654832][T13624] rust_binder: Write failure EINVAL in pid:313
[  357.770605][ T4726] usb usb2-port1: attempt power cycle
[  357.802634][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4195'.
[  357.811709][   T10] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  357.825596][T13628] rust_binder: Write failure EFAULT in pid:317
[  357.975791][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  357.999776][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  358.011664][   T10] usb 1-1: config 7 has an invalid interface number: 85 but max is 0
[  358.020803][   T10] usb 1-1: config 7 has no interface number 0
[  358.030097][   T10] usb 1-1: config 7 interface 85 has no altsetting 0
[  358.051279][   T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00
[  358.064397][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.073676][   T10] usb 1-1: Product: syz
[  358.077893][   T10] usb 1-1: Manufacturer: syz
[  358.088373][   T10] usb 1-1: SerialNumber: syz
[  358.140102][ T4726] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  358.172937][ T4726] usb 2-1: device descriptor read/8, error -71
[  358.181063][T13636] binder: Unknown parameter 'defcontext01777777777777777777777'
[  358.318126][   T10] usb-storage 1-1:7.85: USB Mass Storage device detected
[  358.342127][ T4726] usb 2-1: device descriptor read/8, error -71
[  358.389372][   T10] usb 1-1: USB disconnect, device number 78
[  358.460054][  T382] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  358.590170][ T4726] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  358.612475][ T4726] usb 2-1: device descriptor read/8, error -71
[  358.620081][  T382] usb 5-1: Using ep0 maxpacket: 32
[  358.627584][  T382] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  358.635867][  T382] usb 5-1: config 0 has no interface number 0
[  358.642072][  T382] usb 5-1: config 0 interface 184 has no altsetting 0
[  358.652782][  T382] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  358.662031][  T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.670141][  T382] usb 5-1: Product: syz
[  358.674337][  T382] usb 5-1: Manufacturer: syz
[  358.678977][  T382] usb 5-1: SerialNumber: syz
[  358.685742][  T382] usb 5-1: config 0 descriptor??
[  358.694098][  T382] smsc75xx v1.0.0
[  358.742915][ T4726] usb 2-1: device descriptor read/8, error -71
[  358.861646][ T4726] usb usb2-port1: unable to enumerate USB device
[  358.933572][T13647] rust_binder: Error while translating object.
[  358.933632][T13647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  358.940588][T13647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783
[  359.312996][  T382] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  359.350428][  T382] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  359.531792][T13684] rust_binder: 60: no such ref 4099
[  359.580057][ T4726] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  359.730052][ T4726] usb 1-1: Using ep0 maxpacket: 8
[  359.740848][ T4726] usb 1-1: unable to get BOS descriptor or descriptor too short
[  359.750968][ T4726] usb 1-1: config 4 has an invalid interface number: 62 but max is 0
[  359.759138][ T4726] usb 1-1: config 4 has no interface number 0
[  359.765373][ T4726] usb 1-1: config 4 interface 62 has no altsetting 0
[  359.776219][ T4726] usb 1-1: New USB device found, idVendor=0499, idProduct=1013, bcdDevice=52.67
[  359.785483][ T4726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.793722][ T4726] usb 1-1: Product: syz
[  359.798099][ T4726] usb 1-1: Manufacturer: syz
[  359.802866][ T4726] usb 1-1: SerialNumber: syz
[  360.083423][ T4726] snd-usb-audio 1-1:4.62: probe with driver snd-usb-audio failed with error -2
[  360.095176][ T4726] usb 1-1: USB disconnect, device number 79
[  360.157301][ T8860] udevd[8860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.62/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  360.212531][  T382] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  360.224035][  T382] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  360.235390][  T382] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  360.245245][  T382] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  360.346539][T13695] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  360.346574][T13695] rust_binder: Error while translating object.
[  360.356457][T13695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  360.363451][T13695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63
[  360.966151][T13712] incfs: Error accessing: ./file0.
[  360.994261][T13711] rust_binder: Error while translating object.
[  360.994335][T13711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  360.998785][T13712] incfs: mount failed -20
[  361.003191][T13711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78
[  361.123370][T13718] binder: Bad value for 'max'
[  361.285859][T13724] rust_binder: 13722 RLIMIT_NICE not set
[  361.291701][T13722] rust_binder: pid 13722 performed invalid decrement on ref
[  361.344062][T13726] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4224'.
[  361.405185][T13729] syzkaller0: entered promiscuous mode
[  361.410808][T13729] syzkaller0: entered allmulticast mode
[  361.424923][T13729] netlink: 5804 bytes leftover after parsing attributes in process `syz.1.4225'.
[  361.541845][T13734] rust_binder: pid 13734 performed invalid decrement on ref
[  361.624344][ T7560] usb 5-1: USB disconnect, device number 17
[  361.664915][T13736] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.671354][   T36] kauditd_printk_skb: 705 callbacks suppressed
[  361.671376][   T36] audit: type=1400 audit(2000000030.257:110901): avc:  denied  { read open } for  pid=13735 comm="syz.1.4228" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.714747][   T36] audit: type=1400 audit(2000000030.297:110902): avc:  denied  { ioctl } for  pid=13735 comm="syz.1.4228" path="/dev/binderfs/binder0" dev="binder" ino=34 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.715487][T13736] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  361.766745][   T36] audit: type=1400 audit(2000000030.297:110903): avc:  denied  { call } for  pid=13735 comm="syz.1.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  361.775576][T13739] rust_binder: Write failure EINVAL in pid:328
[  361.794393][   T36] audit: type=1400 audit(2000000030.337:110904): avc:  denied  { read write } for  pid=13738 comm="syz.4.4229" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.824487][   T36] audit: type=1400 audit(2000000030.337:110905): avc:  denied  { read write open } for  pid=13738 comm="syz.4.4229" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.850847][   T36] audit: type=1400 audit(2000000030.347:110906): avc:  denied  { ioctl } for  pid=13738 comm="syz.4.4229" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.877477][   T36] audit: type=1400 audit(2000000030.347:110907): avc:  denied  { set_context_mgr } for  pid=13738 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  361.908780][   T36] audit: type=1400 audit(2000000030.347:110908): avc:  denied  { map } for  pid=13738 comm="syz.4.4229" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  361.970077][   T36] audit: type=1400 audit(2000000030.347:110909): avc:  denied  { read } for  pid=13738 comm="syz.4.4229" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  362.023634][   T36] audit: type=1400 audit(2000000030.357:110910): avc:  denied  { ioctl } for  pid=13738 comm="syz.4.4229" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  362.053738][T13745] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[  362.068482][T13745] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  362.187934][T13750] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  362.200977][T13750] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  362.209432][T13750] CPU: 1 UID: 0 PID: 13750 Comm: syz.1.4231 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c
[  362.221189][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  362.231284][T13750] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  362.237588][T13750] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24
[  362.257605][T13750] RSP: 0018:ffffc900017e7820 EFLAGS: 00010202
[  362.263749][T13750] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811952cc00
[  362.271870][T13750] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff
[  362.279896][T13750] RBP: ffffc900017e7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448
[  362.287928][T13750] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000
[  362.295952][T13750] R13: 7ffffffffffeffff R14: ffff8881013ec810 R15: ffff8881013ec800
[  362.304069][T13750] FS:  00007fd2ab1d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  362.313042][T13750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  362.319668][T13750] CR2: 000000110c32b62b CR3: 0000000122200000 CR4: 00000000003526b0
[  362.327880][T13750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  362.335905][T13750] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  362.343934][T13750] Call Trace:
[  362.347263][T13750]  <TASK>
[  362.350255][T13750]  ? __cfi_iter_file_splice_write+0x10/0x10
[  362.356254][T13750]  ? __kasan_kmalloc+0x96/0xb0
[  362.361174][T13750]  ? __kasan_check_write+0x18/0x20
[  362.366368][T13750]  ? __cfi_iter_file_splice_write+0x10/0x10
[  362.372413][T13750]  direct_splice_actor+0x279/0x4b0
[  362.377589][T13750]  splice_direct_to_actor+0x4fe/0xbc0
[  362.383027][T13750]  ? __cfi_direct_splice_actor+0x10/0x10
[  362.388806][T13750]  ? __cfi_splice_direct_to_actor+0x10/0x10
[  362.394866][T13750]  do_splice_direct+0x182/0x270
[  362.399788][T13750]  ? __cfi_do_splice_direct+0x10/0x10
[  362.405257][T13750]  ? __cfi_direct_file_splice_eof+0x10/0x10
[  362.411422][T13750]  ? security_file_permission+0x2e/0xc0
[  362.417126][T13750]  ? rw_verify_area+0xac/0x230
[  362.422000][T13750]  do_sendfile+0x5c8/0xfb0
[  362.426486][T13750]  ? vfs_writev+0xcf0/0xcf0
[  362.431047][T13750]  ? __se_sys_futex+0x28f/0x300
[  362.436054][T13750]  __x64_sys_sendfile64+0x193/0x1f0
[  362.441328][T13750]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[  362.447115][T13750]  ? switch_fpu_return+0x12/0x20
[  362.452215][T13750]  x64_sys_call+0xa26/0x2ee0
[  362.457137][T13750]  do_syscall_64+0x58/0xf0
[  362.461621][T13750]  ? clear_bhb_loop+0x50/0xa0
[  362.466447][T13750]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  362.472498][T13750] RIP: 0033:0x7fd2ac78eec9
[  362.476966][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.496793][T13750] RSP: 002b:00007fd2ab1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  362.505266][T13750] RAX: ffffffffffffffda RBX: 00007fd2ac9e6090 RCX: 00007fd2ac78eec9
[  362.513286][T13750] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b
[  362.521298][T13750] RBP: 00007fd2ac811f91 R08: 0000000000000000 R09: 0000000000000000
[  362.529491][T13750] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000
[  362.537653][T13750] R13: 00007fd2ac9e6128 R14: 00007fd2ac9e6090 R15: 00007ffdb70cc1b8
[  362.545774][T13750]  </TASK>
[  362.548840][T13750] Modules linked in:
[  362.553257][T13750] ---[ end trace 0000000000000000 ]---
[  362.582689][T13753] netlink: 'syz.1.4231': attribute type 13 has an invalid length.
[  362.583328][T13750] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  362.611420][T13750] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24
[  362.641918][T13750] RSP: 0018:ffffc900017e7820 EFLAGS: 00010202
[  362.648236][T13750] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811952cc00
[  362.657400][T13750] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff
[  362.666396][T13750] RBP: ffffc900017e7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448
[  362.692093][T13750] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000
[  362.712315][T13750] R13: 7ffffffffffeffff R14: ffff8881013ec810 R15: ffff8881013ec800
[  362.724015][T13750] FS:  00007fd2ab1d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  362.736198][T13754] rust_binder: 13753 RLIMIT_NICE not set
[  362.736352][T13750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  362.750363][T13750] CR2: 00007fdc93db4198 CR3: 0000000122200000 CR4: 00000000003526b0
[  362.758925][T13750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  362.768422][T13750] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  362.777488][T13750] Kernel panic - not syncing: Fatal exception
[  362.783959][T13750] Kernel Offset: disabled
[  362.788309][T13750] Rebooting in 86400 seconds..