last executing test programs:

56.8067757s ago: executing program 3 (id=972):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x11, r0, 0x20000000000008)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
unshare(0x62040200)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r3, &(0x7f0000003ac0), 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone(0x5104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/udplite6\x00')
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCXONC(r6, 0x40045436, 0x3)
syz_fuse_handle_req(r5, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

55.5689037s ago: executing program 3 (id=991):
setresgid(0xee00, 0xee01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919c", 0x5}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f00000006c0)=[{0x0, 0x5c}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000002780)=""/143, 0x8f}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/4096, 0x1000}], 0x7)
mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1)
lseek(r1, 0xfffd, 0x0)

55.460368347s ago: executing program 3 (id=992):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407800904001f00000000010000000000000800170001000000", 0x24)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0x1, 0x0, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3) (async)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000640)=0x1, 0x4) (async)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc299, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0x8c, 0x1, {0x22, 0x6f9}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x7, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x7ff, 0x10, 0x1, 0x4}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0xa0, 0x6, 0x8, 0x4}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x1, 0x2}]}, 0x8, [{0x5d, &(0x7f0000000100)=@string={0x5d, 0x3, "8ff938ea0fcd80e711ac8bcdad4e3751a48c9d83ad39f531205d56c90967d0498e1360038281b144f8e80f6445acecd546f2ae6f0e98ad861f7f3dcf61d2eb0c215466e3064cea96f26b8b5737d99c19b964efba4007a308572dde"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "a720da80756cfe40d55c668630e49dcccf64a14ee45f466b5eec98fc63a739a84fc21117aa775df762c5f7d35ccbf8b67903b210fe043bc7a44c2e66f06560bd7ae313c17263ecb67d04257bf63db96d778f26f93357bb0b1325c46562af12c989efe23a43f03c4b1117a50f47ea"}}, {0xae, &(0x7f0000000340)=@string={0xae, 0x3, "cc758eff4aaf751eb72f557592dba50e5c6f03f9fe25aa09001578ae2d60fb50a1def18275de6bc259335ca1d70c333dcac2b8fadcb3f7c60b8ff1bbd5e624f6f6ed6fe88b0a3ad9376166dd93f4cadeadf08924bd217b470aaaa140819f9b0ed87dfb4d923592e09d5329e5cff168dc6ca833a042c90f174f0db3610a31372f0cec9907f3f48b81b34be8aa54ac31ade642a856a10cc6b44630b751924bca6f9c80488595782337d32670d5"}}, {0xac, &(0x7f0000000400)=@string={0xac, 0x3, "f7a3d13191f555ada9ab7b64db924232b47576ef108c41d6972959787a28973c6e9e6bdb7e310c03b3ca168d2eb553241613130f943f9aaec148936da917609bf9bea046237cd779910fb7c6038d450ec77f2950614bbaa811549ad30a2a80af1ae8c8369b4fc8fee4812fb8998984ad6f67d2e7404fe51966916d0b736e01894efb6637ce18a9981f02a3759c58d4219031860b2945015cc0477e3140e90572b71995213979f9ce9b1f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x68, &(0x7f00000004c0)=@string={0x68, 0x3, "ff77f01a47445249b4179b7c9724e0ea7fc5ce5d9aad3e0cda4c182f77416868f0046a213eda6d8019a07f592f0283394fe149b55a2037da76ff6390bead0100dfa5abcdf21e328c7d7d87887d8013461b099e008275a42af1b1cfc5b77f95b89db94275497f"}}, {0x69, &(0x7f0000000540)=@string={0x69, 0x3, "e478b0334312dc6ae3d84411a7c2085d5d31259ac8bdad0936c9911553e96cfbc6ca925f1463d14b6545fb3f2afe32bc793a20cab7078914a5f08525768c15581e17730a0a13d6bc3a7eb456b06d83cab5b964443fa99cad4bf6115b1e4fec66cbdb5720ffe49a"}}]})

54.190216639s ago: executing program 3 (id=1008):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5d24d732f0816929545bae7b372fc6a9ef943151647abe12809266be9905d2b8078f11301156cec61fdc57e374c940afe0", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
write$FUSE_POLL(r1, &(0x7f00000004c0)={0x18, 0x0, r3, {0xece}}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044004}, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff})
r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
fcntl$lock(r4, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
tgkill(0x0, 0x0, 0x22)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xffff, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000240)={&(0x7f0000000180)="7c649a07b378e68298843ba1eac6b5f6d73f96ebd45f1210ddbde6bed70e75b83934c2b55028baeb9b4a9f772ea8a8a773ffc04c222ab52bba65e79cc0307b2ff8d4429871e04e3e49dc6222a475fe835fe2d25215a824338243951ba1e8c392114ded9e0d3f92609e382d8e816ea1e55614e641117463251da829868558998984ee905c5932a5beb06a3214f4868d6a42abea602fe2a678c025226183a689b3dac055b27e5a8959b02fe501155d2be578b0", 0xb2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

54.188293859s ago: executing program 3 (id=1011):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0)
memfd_create(&(0x7f0000000000)='mountinfo\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
userfaultfd(0x80801)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000200)=0x1d, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2$9p(0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000480), 0xc000, 0x142) (async)
r6 = syz_open_dev$evdev(&(0x7f0000000480), 0xc000, 0x142)
write$evdev(r6, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {{}, 0x0, 0x0, 0x41}], 0x30)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r8=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="6c030000180015002abd7000fcdbdf2508000000", @ANYRES32=r8, @ANYBLOB="54030980500308800400b9001800398014008500000000000000000000000000000000010400f4000600fd00233a00002203358004002080dc4c55c12f98c9bfc794f66c3326856262e11dcdc04217b8e6116b06fe13603238971f0a87a801e9294982e8019d63f845231c75d1667cff64ed57f62051ba50f6cdbbee3f2a8c2ea4c6f84ccca87db3493d79453f312c5e80c5fad571cb153de06d5af030c6f58c463c8a20562afb440c5019c6d0b4f19cb8a6985992db3017569fa87172c22fccf648b442cd8dcd5117bb78b0a8efa3509d8f82ea78e5a7b126339f18d93f4d05fc449f2dfe9f0623a523530d32a7cb916858ac721ef0a21f5a3412b812685bab18cdd33406486d9bf579a09c20bf3d066a988afe7b370209e18046130039828bfbee8f78dd1883a29d44a0f2331939e613bfaebf2da94cd86670e7a253416eaa7d6c224f1ea744d77473dbf79329822006f04e8d3bcbbd7251becd785e7f4d30515ec88f303e168c130857628436e16e4de1ebd67b6364562a461bd8479c1d99f095f1d7cf576bbd614413895971541cfb3c580f66bf3c8f79968186a9f6124b5484a21f6f2737ab41d404a15f5ac8fcb00cf2412627c9cea732ec525b39a90e8af12d30c69640380d10ee306251519800e53beebea98aed19801bda89264640a7d9e150ea31d59eabd5e37691dcb9119eac39f3be3aff6ba2865d6b9cff0e9cd35648f9af77355ad266203d41c12464259c6b754b8884af564434ccec5e364e89baa682424601de2b393461b1beb36a2b6831493238fbd5471a0d1b224ac37280927102e2db312afea8871fb87138fe3a5a7518415e288a1f6fac082a3b5913234a42b84c8627ec2b5e2e4cc3026c97974a6f670812bfe71a02fde23662bf4131a679fdbe0ca963c1da80dce1605cf986480fad7d834e4e50df8b47a10bd0face3d21f78e95ec3e6efd37ca9831d3d844c945f6ad20550f5bb624d5bae87b4b80c73c87762f5f529d22d45524ca973e277b8f2df8bb3c46ce6748c83bd22ca9477492971afa878ae169bf6656565b10f94cd0767879025a13b2b882766d752b5652d8dc562af22e56c3adae5b4cc7bf6af3b0453270ba17e269e6c41118412066e653796e1738b23504b19b9643ce8c73ad4220175a9d3ef9e8a7633a73ef2798477f2da1118d030eb9854309969c074369040000800000eda53eae8d0244d26ee950cf1452f6e7b1e50aa0610307bbeb1bc217dfacfb7bd11ab50f6a159bc2e3a5c5aa2030c1459ed0a5275e034d4f26e3daa70a9179ec83f111a3b520310e325c9067dc47fda4dcf634e2874922e511266763e1d0ea08a25fca4ed649a64a62947215237a2b2ff881681f5851553c548db0cb30b36ed2dc891c9cfe985f3f851366e48b250ceaae2b5f2e9a3d88630b5cb937dfa6abdde8ec31f2af9e87261b59f358fa974bf1cff538023f084c11bcd6a8a8ecc5db4f7e275a3f22c90f792ac09279e1a6f75ad6e29eeb2ace411d713f7e8883f62cfa975fafe2ac6dbb9a02bc817564d8ddd3cbe5a3d0479dab8323340f4c8a26f5dd240744e0367e6fdcb1"], 0x36c}], 0x1, 0x0, 0x0, 0x20008890}, 0x0)
r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$binfmt_register(r9, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

54.067043037s ago: executing program 3 (id=1013):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x4000})
fadvise64(r0, 0x81, 0xc, 0x2)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a$\r'], 0x38}}], 0x1, 0x46000)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005})
r5 = socket$igmp(0x2, 0x3, 0x2)
accept4$inet(r5, 0x0, &(0x7f0000000040), 0x800)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @remote}, {0x4, 0x4e22, @broadcast}, {0x2, 0x4e24, @multicast2}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000480)='virt_wifi0\x00', 0xfffffffffffffffd, 0x2, 0x6})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0x60, 0x0, [{@broadcast}, {@loopback}, {}, {@loopback}, {@private}, {@multicast1}]}})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1)

53.367852412s ago: executing program 2 (id=1024):
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = getpid()
ioprio_set$pid(0x1, r3, 0x4004)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000440))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x0, 0xd}, @fda={0x66646185, 0x2, 0x0, 0x24}, @ptr={0x70742a85, 0x1, 0x0, 0x50, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0xfffffdd9, 0x0, 0x0})

53.270856779s ago: executing program 2 (id=1029):
creat(&(0x7f00000000c0)='./bus\x00', 0x118)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0xe, 0x100}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2})
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"})
write(r0, &(0x7f0000000380)="4ae0c67c1cb786f5b19c5d6dea57ef9e636a97893fbff2967e20910e0e3606caca8083fe07c8a54e39dd9212d24c9776bdc13feda59617c6d379bdcfb85cc006e28cc305a88bfd70694bc6ad0c4ad9389e7aeb867e84eb605905254c12b4c4623266d225a652231bfa8d66da0902e9a86825aeac220808b1dd980824e331a35061d92a74fd60ad42fa78784698a304f342125634d0a21c605bd4ffdc719761dd666e09230b", 0xa5)

51.972361353s ago: executing program 2 (id=1042):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r2 = dup(r1)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc9)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={[{@userxattr}, {@index_off}, {@redirect_dir_on}, {@redirect_dir_off}], [{@fsname}, {@permit_directio}, {@measure}, {@subj_role}]})

51.930589015s ago: executing program 2 (id=1045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e001000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})

50.666091828s ago: executing program 2 (id=1072):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x24540, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000083000040"])
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="66440f383da5f4ffffff2e480fc76d00b805000000b92d0000000f01d9c423210d695d00440f20c03509000000440f22c0260fc736d37300c4c279591e66baf80cb8bda1bd83ef66bafc0cb000ee440f20c03509000000440f22c0", 0x5b}], 0x1, 0x0, &(0x7f0000000300), 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="66440f383da5f4ffffff2e480fc76d00b805000000b92d0000000f01d9c423210d695d00440f20c03509000000440f22c0260fc736d37300c4c279591e66baf80cb8bda1bd83ef66bafc0cb000ee440f20c03509000000440f22c0", 0x5b}], 0x1, 0x0, &(0x7f0000000300), 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x101000, 0x82) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x101000, 0x82)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x800, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r8, 0x9) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r8, 0x9)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"})
setuid(0xee00)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000440)="360fc77f00140066b80001c0fe0f23d00f21f86635200000070f23f80f381d580dbad10466b8218a17ae66efc4e27dcf150fc7300f009bcc19ba4200ec260f01c3", 0x41}], 0x1, 0x4, &(0x7f0000000580), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x833, 0x0, 0x7}]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r10, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000e05010125bd7000fcdbdf25070000061400"/40], 0x28}, 0x1, 0x0, 0x0, 0x4008851}, 0x20048010)

50.659874388s ago: executing program 2 (id=1073):
unshare(0x24020400) (async)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x1840, 0x1ce, 0x8}, 0x18) (async)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='./binderfs\x00') (async)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x4}}, 0x26)
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
setreuid(r1, r3) (async)
cachestat(r0, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (async)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

50.622007591s ago: executing program 32 (id=1073):
unshare(0x24020400) (async)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x1840, 0x1ce, 0x8}, 0x18) (async)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='./binderfs\x00') (async)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x4}}, 0x26)
read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
setreuid(r1, r3) (async)
cachestat(r0, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (async)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

38.836617854s ago: executing program 33 (id=1013):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x4000})
fadvise64(r0, 0x81, 0xc, 0x2)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a$\r'], 0x38}}], 0x1, 0x46000)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005})
r5 = socket$igmp(0x2, 0x3, 0x2)
accept4$inet(r5, 0x0, &(0x7f0000000040), 0x800)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @remote}, {0x4, 0x4e22, @broadcast}, {0x2, 0x4e24, @multicast2}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000480)='virt_wifi0\x00', 0xfffffffffffffffd, 0x2, 0x6})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x24002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0x60, 0x0, [{@broadcast}, {@loopback}, {}, {@loopback}, {@private}, {@multicast1}]}})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1)

22.006313494s ago: executing program 1 (id=1589):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000040)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x63}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x110}, 0x0)
syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406bb98971edc8199d0b55e0d487d476f1a4c94d1206f62ed668d9615e79c1604c3b0b70966268f2d199e32129178c8072df7e551a8d5f3cffd243e0455969fc42ccd91dc7c858a42261cd74ef8fcec94f51a9492664d755dcfea1154d8410ab077a5be47f12bfffbf75b35a919cf65376ebfab", @ANYBLOB="c9df766ea4d7370fb649014b12a9963a8159038c0f75396a"], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x12b8a000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="080027bd7000fcdbdf251f0000000400cc00680022801c0000010800070007000000080002000000000008000700010000003400008008000300008000000800050000000000080006000000000a0800010001000000080004002800000008000600ffffffff1400008008000100050000000800040010000000080001001f0000000600210062000000"], 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x2000)

21.521825516s ago: executing program 1 (id=1590):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r0, &(0x7f0000000080)="1dfe94edd196a73955348d2cb827babd1187ef7261f73e3b613d5a2ec28566833cd4d3a00dbdda228163b7166163cd2f52f9b1d18d7526951977dfc9d304e7b9aa94de3f9832d5e18cdd79b4b27ef89286a79de69a69ff2eda46ffe3914dbc76ca4679a192c79c377e0e2bd9f8090e4b98b6cac3cd268ff2c5be40a776d094381ec54e85262325672098d900829c8aa186ac1911316e90848e039090887d8d92019d94aa37992faedae2cd", 0xab, 0x4040044, &(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000309040000ff020200000524060000052400030e0d240f010000000005000000000424130009058100200000000009058202200000000009050302"], 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x17add, &(0x7f0000000040)=ANY=[@ANYBLOB="73745ce8733d676c6f62616c2c00"])
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x2) (async)
sendto$inet(r0, &(0x7f0000000080)="1dfe94edd196a73955348d2cb827babd1187ef7261f73e3b613d5a2ec28566833cd4d3a00dbdda228163b7166163cd2f52f9b1d18d7526951977dfc9d304e7b9aa94de3f9832d5e18cdd79b4b27ef89286a79de69a69ff2eda46ffe3914dbc76ca4679a192c79c377e0e2bd9f8090e4b98b6cac3cd268ff2c5be40a776d094381ec54e85262325672098d900829c8aa186ac1911316e90848e039090887d8d92019d94aa37992faedae2cd", 0xab, 0x4040044, &(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10) (async)
syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000309040000ff020200000524060000052400030e0d240f010000000005000000000424130009058100200000000009058202200000000009050302"], 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x17add, &(0x7f0000000040)=ANY=[@ANYBLOB="73745ce8733d676c6f62616c2c00"]) (async)

21.012102979s ago: executing program 1 (id=1596):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x200004ffc000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x2e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"})

21.004752769s ago: executing program 1 (id=1597):
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x0, r2, 0x4007)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004)
r4 = getpgrp(r2)
ptrace$pokeuser(0x6, r4, 0xbeb, 0x7)

20.954258453s ago: executing program 1 (id=1598):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
close_range(r0, r0, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e3, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0})

20.953789463s ago: executing program 1 (id=1599):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1504000065ffff0010000008003950323030302e75bc7c333f0888232dbadb3a8e44911831f023f0f63e2e2a1c68fbe883c068094f71a9540a07c8feff2d109a6b25709c12d9e2977307ac8fd8bbe9c4fdeb493d2a942d5a577fccd3260ee5b5f50fdecc39891be8f6f3ee2649b3730d137b03d4931b714b6bdd4365a77ee269613f1cf1e14342697bd3c993b97e3ecc22"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) (async)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0xa8)
r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async)
r5 = socket(0x11, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
bind$packet(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) (async)
r7 = socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
sendto$packet(r8, &(0x7f00000004c0)="9f0da3c5e85d96bf5ce3c80994c10767ea23d41e16dedfe2161bed8b9a88f780e90d1985b929283b47a598951c4b52e0123940f932a334e0be9ba375ff5a00c864a0", 0xfffffffffffffdc3, 0x40880, 0x0, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480))
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) (async)
syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async)
open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)

5.154402696s ago: executing program 34 (id=1599):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1504000065ffff0010000008003950323030302e75bc7c333f0888232dbadb3a8e44911831f023f0f63e2e2a1c68fbe883c068094f71a9540a07c8feff2d109a6b25709c12d9e2977307ac8fd8bbe9c4fdeb493d2a942d5a577fccd3260ee5b5f50fdecc39891be8f6f3ee2649b3730d137b03d4931b714b6bdd4365a77ee269613f1cf1e14342697bd3c993b97e3ecc22"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) (async)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0xa8)
r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async)
r5 = socket(0x11, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
bind$packet(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) (async)
r7 = socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
sendto$packet(r8, &(0x7f00000004c0)="9f0da3c5e85d96bf5ce3c80994c10767ea23d41e16dedfe2161bed8b9a88f780e90d1985b929283b47a598951c4b52e0123940f932a334e0be9ba375ff5a00c864a0", 0xfffffffffffffdc3, 0x40880, 0x0, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480))
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) (async)
syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async)
open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)

1.250614839s ago: executing program 5 (id=1828):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) (rerun: 32)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000002c0), 0x20, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@access_uid={'access', 0x3d, r4}}], [{@smackfshat={'smackfshat', 0x3d, '9P2000.u'}}]}}) (async)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async)
r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000000)=""/96) (async)
sendfile(r6, r5, 0x0, 0xffffffff)

1.186271983s ago: executing program 5 (id=1829):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = userfaultfd(0x80801)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r6, 0x80084524, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000300)=@x86={0x10, 0x1, 0x0, 0x0, 0xc, 0x5, 0x8, 0x4, 0x8, 0xc, 0xd, 0x8, 0x0, 0x2e2, 0x9, 0x9, 0x0, 0x4, 0xf, '\x00', 0x2, 0x9})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0})

1.185533533s ago: executing program 0 (id=1830):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x578, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x550, 0x111, 0x0, 0x1, {0x54c, 0x5, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x494, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x23}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a95}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x372}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x386}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc00}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x97}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffffd}]}, 0x578}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0)

1.166121265s ago: executing program 0 (id=1831):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', <r1=>0x0, 0x7800, 0x40, 0x0, 0x1, {{0x31, 0x4, 0x1, 0x1, 0xc4, 0x65, 0x0, 0xa7, 0x2f, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x54, 0x39, 0x3, 0x9, [{@remote, 0x7}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@rand_addr=0x64010101, 0x7c1ecc06}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x9b7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x40}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffffc}]}, @cipso={0x86, 0x3c, 0x3, [{0x5, 0x6, "5f10153e"}, {0x7, 0x2}, {0x7, 0xf, "8483793971ed20009c15c31d4e"}, {0x0, 0xf, "b6c6de27d894432181c850eebd"}, {0x6, 0x10, "87e1d22c71cfee66fdbd98bc353a"}]}, @lsrr={0x83, 0x1f, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @private=0xa010101, @local, @multicast1]}, @noop]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@mcast1, 0x3, r1})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(r3, &(0x7f0000020240), 0x10010)
splice(r2, 0x0, r4, 0x0, 0x100000004, 0x0)
r5 = socket(0x10, 0x3, 0x8fc)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000080000000b0"], 0x20}}, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

1.035385083s ago: executing program 5 (id=1832):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e29, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffc01}, 0x1c)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

876.023573ms ago: executing program 5 (id=1834):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0)
ftruncate(r2, 0x3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'gretap0\x00', 0x100})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = syz_open_pts(r0, 0x8000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
linkat(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
setuid(r8)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r9=>0x0)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000903, r9, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$addseals(r3, 0x409, 0x9)
ioctl$sock_SIOCGIFBR(r10, 0x8940, &(0x7f0000000100)=@generic={0x0, 0x101, 0x8})
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}})

846.579095ms ago: executing program 5 (id=1837):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0)

766.882631ms ago: executing program 4 (id=1840):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x18, r1)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='fdinfo\x00')
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

766.374641ms ago: executing program 4 (id=1841):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
r4 = socket(0x2a, 0x2, 0xfffffffd)
recvfrom$unix(r4, 0x0, 0x0, 0x101, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0xa4, 0x0, &(0x7f0000000640)=[@increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/165, 0xa5, 0x1, 0x21}, @fda={0x66646185, 0x1, 0x1, 0x14}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x400}, @exit_looper, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@fda={0x66646185, 0x4, 0x2, 0x25}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000600)={0x0, 0x20, 0x38}}}], 0xe5, 0x0, &(0x7f0000000700)="7066e3a182aa71467e245cca0a509f6d4154e0770b4b28e1a049583c60b2213c1bafca5b1c5ed95af0771f03aaeeb03f54af424ff332ddc7fca1a10de89353c2f3cd1d6dd3b9efe2daff626cd08c4d8fca425a9083528c07b377f8370ab593b5ecb7702a5a46b54617b8ea4f769df33fa7ddbef89f6a4dbf08b1fd13e2f4554c12c449d62dbf792ec1e7d30ad2d08ffc08f5a9526003b258ed1d9a346c702cb01a33a09dc105d2e973e0cdf20a329f42794b387b371596676df9ee074c3a4d72f1ef948e0dca469a97b9279a051a8b300bd127b185b1e422051c71ce67fee9d7dd92b37235"}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_handle={0x77682a85, 0x100a}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x2, 0x0, &(0x7f0000000440)="f784"})

755.518031ms ago: executing program 4 (id=1842):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) (rerun: 32)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x40, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000), 0x1)
r3 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd2, 0x150, 0x8, [{{0x9, 0x4, 0x0, 0x3a, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0x89, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xe1, 0xa}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xf8, 0x1, 0x59, 0x8, 0x2}, 0x60, &(0x7f0000000300)={0x5, 0xf, 0x60, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x0, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fa69448df6985a1c659af5ad82c10de7"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "f09ec65e7ec76d9bbe16dbbad1e923b4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x7, 0x5, 0x1000, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1ad2c7fd25ea00d0cbcf695a33fa448e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x6, 0x9}]}, 0x1, [{0x5e, &(0x7f0000000440)=@string={0x5e, 0x3, "12b1b100dd3b942562e591245a06e53b532a6561ab301ecd00fbd99746134af3ab303b89a6325038c4841b07b03d259e86f250f3f1af4fd684c7486522a0f124e2b7be9faf206d328fe81b52c34d9060aaca48aa4e1249ea68dd8104"}}]})
syz_usb_control_io$printer(r3, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x0, 0xa, 0x94, {0x94, 0x21, "a71cb5f03c70017a94f99ca71c8ac9d0f31ab303eba8c0ca74916c861a904dcbb0b37d8c2898fd9bfc44547a24a9b445cb69a0d5d4f2fcce892beee8eb4f5a7a7d6b80588204713cddf150be723496b6b75efebbfe3041a6e55acd1ee54a5cece2465ece1e7c3b356b52d9d85e912b6742b8e5955d1fcd688a65c8d6570c748b08ff9402a654bf49a04d70c865c4c84e4a51"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000880)={0x34, &(0x7f00000005c0)={0x40, 0x18, 0xbd, "a797d3503f8a4c6e6922a50e635f4e6ea2a106e88e62aeb1031289688525773d941ab73b272e190ab40043538c33314e182d5f7f72fe5fefc5e8e332562b228b07a161846325548bdab40fe7203c2e894b1cf4cdc98c3bcc044591d3ee764531e57687d9ba25bcc59c5ac40de1ea49b49fa5086664dca353ca21d5e0e3eccd1bfae95a7abf5b799454eb66449c1e145f6ed446cddca09f2bd3561d78d0c35f1622d141597310c3bc65ae8028095ee8638238bff3f2a198ee3720704698"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0xb7, {0xb5, "8aecc5b6d6589b0648865b209f13116668fcba620632747b038f35d6d4e127c6166fbc773de2fd92f44c508eaf3e39c73a13f76b581351973264c6b1d949585180c09f05f0d399d249635e52e07177146e7921359fc6f1e85e2d7d1a5d4683ad14a911de2acf1a776c5e5f5c171a24a07b3217ad533049362a03d4b473c5854508dc2368433687e748b678e6e09a4b3b4ba28f347b3ac1cec466d3121890857e1eb1cfd817c7c09d3f40c376da806394d43a3da64e"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x5}})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (rerun: 32)
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') (async, rerun: 64)
r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'erspan0\x00', {0xdebf}, 0xfd0a})

302.013451ms ago: executing program 6 (id=1854):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xd6, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x8a, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/202, 0xca, 0x2, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/154, 0x9a, 0x2, 0x3a}, @flat=@weak_binder={0x77622a85, 0x10a}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @acquire_done, @exit_looper], 0x0, 0x0, 0x0})

295.140361ms ago: executing program 6 (id=1855):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000c328d1dd610eccc255b5328d971da54df4cd9f6d02253ea8dbba8d8af0314881478415addf4627f282ee6965b69669a375ead91ec60bbc0b5020685174c529c52d7539efd3dc59d1553cffd156ec7c14fdffc131a09c757e4449953a8ab5c34b3431315a565e20aaa00d92d5f1061e83641b087968460273043ed5326f04f80b3d187b2dd69e32cd7c31943240715c26bd29f6dcc07d0e2af79ae4d767c21e8c5cc74295d29f284302c487d4e4a16d825bcaad21917b72c0db81e4ffb797daf6a4b2610f0782df9b80798318377760d18142c72d4180c03f790e189121eb7d21e798f9d96e6760ddc9e208d1181337699b4f4285c669aeb537764f1656a9cce907b7dfb1bb5c4f07500e77bfd059cac83c0da803fd9888b6", @ANYRES16=r3, @ANYBLOB="010001000000fedbdf25140000000c00990008000000580000000600b5008c070000"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x40000080) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x5})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0x0) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0xfffc, 0x6, 0x6, 0x1], 0x80a0000, 0x8340}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x7, 0x0, 0x2, 0x0, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0xa, 0x1, 0x84, 0x3, 0x4, '\x00', 0x4, 0x9}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r9 = userfaultfd(0x801) (async)
write$tun(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="010375000c000a000d000002ff5f2a4f2142f1634742ee8b505f0b59ab9123b99d2f71caccf9c270a513fe2549ae5166b1e444b2775b4c988baded1dee4d3b23e37add73cdc12d347008f991d69e726989be24b80037e261b08770d5a9c18ea104db6c1de2e5ea94283b8e47aef747b739969b7e5bdd2fbb41df3e81fac81c67eb0af29da30dd5b5432ebc047fc89894bb34eb09365a8f903dd06bf3b28b0dd4f7c4d83e390544c9fe112c5b880f3de36a9b9e"], 0xb3)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
fstat(r8, &(0x7f0000000440)) (async)
ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000000))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x100a}, @fda={0x66646185, 0x7, 0x2, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/166, 0xa6, 0x2, 0x34}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) (async)
write$P9_RGETLOCK(r8, &(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYBLOB="aab60ece2ffb6db5d8a6b88fcb0fe1c3675c86d4a4e6d6449ca2279e2d8a94eb55804ca72aaab4", @ANYRES8=0x0], 0x20)

283.718302ms ago: executing program 0 (id=1856):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
eventfd2(0x3, 0x1)

194.334988ms ago: executing program 6 (id=1857):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast1, 0xa, r1}) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async)
link(&(0x7f0000000400)='./cgroup\x00', 0x0)
preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

191.823938ms ago: executing program 0 (id=1858):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0})
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x8002, 0x80)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00793500001f754327478290aaaaaaaaaabb0004aaf495ff730d"], 0x18)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140))
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x12b8a000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
signalfd4(r5, &(0x7f0000000000), 0x8, 0x800)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41a0411}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf250c000000080006000000fff1ad8bbf8173c7d9fcda00800800a42b7df11e616ee3038008000500ffffffff060007004e21000014000600fe8000000000000000000000000000bb580003800500080002000000060007004e220000080001000200000008000100000000001400020064766d7270300000000000000000000008000300010000000500b1c6a67d97621808000200000005000800010000000500080007000000080004000d0000000c00018008000b00736970001400018008000b007369700008"], 0xcc}, 0x1, 0x0, 0x0, 0x4008800}, 0x8083)

190.738758ms ago: executing program 4 (id=1859):
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='fd', @ANYRESDEC]) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x2}, {0x100003, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f0000000300)={0x77359400}, 0x1)
r1 = dup(r0)
ioctl$KVM_SET_CPUID2(r1, 0xc008ae09, &(0x7f0000000240)=ANY=[]) (async, rerun: 32)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async, rerun: 32)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) (async)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) (async)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) (async, rerun: 64)
timer_create(0x0, 0x0, 0x0) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8b569cd5bf2d2526}, 0x20000804) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x4, 0x0, 0x0, 0x6, 0x0, 0x10000000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x34ff, 0xa, 0x4}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "217d66d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x4000004)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r7 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x544}) (async)
timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040))

190.307108ms ago: executing program 6 (id=1860):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x4208, r1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

185.610408ms ago: executing program 4 (id=1861):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000003c0)=0x40)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x2000)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r1, 0xd3c59000)
syz_io_uring_complete(0x0)

160.4412ms ago: executing program 4 (id=1862):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
syz_clone3(&(0x7f0000001280)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f00000011c0), 0x0, 0x0, 0x0}, 0x58)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'})
shutdown(r2, 0x0)
recvfrom(r2, 0x0, 0x0, 0x10715, 0x0, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000440)=""/187, &(0x7f0000000000)=0xbb)

157.37023ms ago: executing program 6 (id=1863):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc})
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x34808521, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000000200)=<r9=>0x0)
io_submit(r9, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r8, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}])
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000001c0)={r5, 0x9, 0x0, r3})
dup3(r8, r6, 0x0)
sendfile(r4, r3, 0x0, 0xffffffff)

90.279654ms ago: executing program 0 (id=1864):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0)
lstat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100))

88.822125ms ago: executing program 0 (id=1865):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
syz_usb_connect(0x6, 0xe49, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf2, 0x5f, 0x4b, 0xff, 0x260d, 0x1545, 0x3ce0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe37, 0x3, 0x6b, 0x7, 0x88, 0xf8, [{{0x9, 0x4, 0x3b, 0x77, 0xf, 0xff, 0x5d, 0x1, 0x5a, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1ac984e333"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x626, 0xf001, 0xa1}, [@mdlm={0x15, 0x24, 0x12, 0x7f}]}, @generic={0xfc, 0x21, "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"}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0xfc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x8, 0xa, 0x2, [@generic={0x56, 0x5, "75f650ea28daf023496fdebe92cc7ec29ae3e118b98e8d0ebd89478243a3b196c72728cb2e68dfd9b8b2f514403344529004db89d522b9597775cdb215d618ae5429d77c854d9093402e35817612bfa910290895"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0x0, 0xf1}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x81, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x50, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0x81, 0xb, [@generic={0xb7, 0x24, "d13494809bcc9d43d63c24685a49a3f861e88e37edd76f8962bb83ff5e962801c4403f278623be6876bbe078ee4876b36fbbe3f77cd310c43fe7716115b02fcdc1740b47d6ef6ccf3a9087aa9d00d8bd942f9f05e20425fab8e505c614951f9e20e56d89c66f63c396df62af0a0bd63062191a52c5342c2035409371743e7dd1a4a20195e514a02b6bc24eda7c869e490076a9b18738773f0f972494cbd8c6f8edb0485fced4178df2f142ff321ff4b6c9cb3f95c7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x5, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x8, 0x1, 0x7, [@generic={0x73, 0x24, "8b20d60ba4519279b599032e3ec2986352dfcc6f3c55bacd4302da0b683b77f704ca9d0236cbba572152aa1fa49f3e2c1ec029140ac5700005c79c4cb17841f2f4e9fe1f6bb3ed94acddf32fba81ab48497846f5491795b1df8e7eb2cf043b2bf864837bb45b4f21db0348ff1f5445deda"}, @generic={0x102, 0xc, "de59061ecbebd744a4c0c68f9abd1a6aca0273d62ddb8ccd221ae2653ce302e4caa44e3e8ff2944ff1ccf4e7f67e0eb5c52ce6d26d52fa2aa26b71d0e1f581a1e0341d6f3c674087fe56649b99ae395cdb620312e2dd3f71e3e137a032009dd3213eb86117f86e915fb221de6929833fdf1f6e6d4edc3cd6b8f8743f47e7bd61fa4d9a6c90b44570cc5351c5e6a7c7d20b07e5d77a2fa1e6126dcfddd72d7c0693f81a219fd4094a417d2ce69ebbc28abc044a2db1b3a0b16c1fe86c74bb754ef42feff8bb6c932688432ab33e96a595866369e9f44e7e165d4347c36315d623e4cbcb9f43e367cb48d7dd1e4adbd6f10615a170377af60b7052ccf168ca0b05"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x68, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xda, 0x9}]}}, {{0x9, 0x5, 0xa, 0x15, 0x200, 0x3, 0x0, 0x40, [@generic={0x67, 0x11, "b6c3ed7cb26b5b402bbed823d3caab2ad9e79248f5c84bb280f1149c0e69e50f57173a1153db11651cf30ddcc890ebc4e55856a50d6805e277b2706d017f1050418cb61148e602c481c0cad99eec68e89856ddca6f27120a8d37a6364698b81332d8171ed8"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3cbb}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x0, 0x6, 0x3}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x1, 0x4}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x7, 0xd7, 0xf, [@generic={0xe4, 0x4, "56debf977ee915f6e19b047c8b812fa3c28358db7d8679c994a3e8b9efbb795fdac41bbdd982ebd0c9e02ebd336d51f22c58aecb54a6c28a65fd4958156f6e2308fe4907b4014b5dd984656a3481adc97960a6fbc18bc379809b7af172497eb3f830e395c0042b0ccd15b89f5b0371732bf8e13955d0d537e854891c4fccda3fb162b1ec0cbc46bfc6d2e45d684133a96141f177c4c59eb1ed9aa1dbdc163f2f9188e0ebe092dffd53210ee08d9eebe027e2363930a3039863fa07fe5dcbfb5b0e32f657a9a4d2118a6304bf95783faa6cace57710b6a7cba26da7436d90909893e4"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0x0, 0xd}}]}}, {{0x9, 0x4, 0xd, 0x9, 0x10, 0xd1, 0x93, 0x8c, 0xe, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "7153ce2eea1a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x6, 0x12}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0x8, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0xf6, 0x5, 0x0, 0xe}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x6, 0x9, 0x8, 0x2, 0x3}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa9, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0x10, 0x24, 0x7, 0xb, 0x1, [0x5fe9, 0x7, 0x74, 0xd, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0xf0, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x5, 0xfff}, @obex={0x5, 0x24, 0x15, 0x3ff}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x4, [0x0, 0x7, 0x8, 0x9, 0x9, 0x0]}]}], [{{0x9, 0x5, 0x4, 0x8, 0x10, 0x6, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x4, 0x20, 0x3ff, 0x6, 0x4, 0xd}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xd9, 0x7, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x24, 0x6, 0x7, [@generic={0x33, 0x24, "4967b7421ab744cdd6d61b859d2389951bfe01a8fd8675e2103137e7cb108de4207048d434a03d0c0f1c84a544344fd5ed"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0xdf, 0x29, 0x10, [@generic={0x76, 0x10, "3758243dbbadf90d2103635338adf82f633647ffa74e16609e16b2f50126570f29e30f24e6b88b8cf516954cbdb4a79a8416e40f998061c685739fd87dc6186077a5fbe82ad703ce2debc5a1c19f49ca5a097c74cbf47877c679cc4ea6ca7dfab292587dc813fb1d50d3437ff2b79e979a87a587"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xff, 0x0, 0xf}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x0, 0x81, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x6, 0xf2, 0x6b, [@generic={0x77, 0x24, "7a7316f9572113741b4719f640cfddc859f3d092fb9548b7eac3815c4ef5cd52dfce8ec7b21a27562703a959063304a6b6498e8687864d6d1d9c728f559e6e7b64d828047c63a4fdba4553987f34da051531da0dd052577620266e01935925de721df23da06f458f459f92dbeb5ebd5e4996031369"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x7f, 0x3, 0x2, [@generic={0x22, 0x22, "d721534ffb504af00531efd7b10cdbb03dd14fa8a5e75a8ac0aeb03a6ab16a5f"}, @generic={0xe9, 0x7, "69c8f65be62a786f648fd6dd326771c2f0d80864e518a3d365119dd9ef7f3622594d20b89bafecb0432c341413e49316c4d618f64e81439eb9ce505cbf2083f75974bf77f79e785b31f15c764b8c623f27863c4284bcef7bb9334cdefa4cfe3804e2d0833b4d9330b42e0cc6dd081c0e9ba706c9096432560b5a8b4f9d962e1dff11ab8e9872b614c7ca9340f70d6f360ace8be0f2a6177dabbdbdef88fe2353de71238b056e4f89a449920073f5d2bb09f095716ce754c976eb104575ead58b1aa9b61be33aad68f409672884203b15b59d9819515a22d2b474747a1bf4c43f456d2cb03f7e8f"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1, 0x8, 0x1, [@generic={0x79, 0xc, "12d41184de502f5faaf5242b8d2326de622723c886dd8c19eae31fa4fa03e52057b6226a032b7dfe94326f033f1c566269b725a813701b0643fdb388e016452fd41f95298582be3086d064f0922f5dde76da75f2c0f0a82abeb389e97af9db55e83c8b14917d5b7f629717b4205e773df4874291862048"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x8, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x7, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x81, 0x5, [@generic={0xbf, 0xe, "829eecb9a26d5034a4197369cf593a7c7111cc2c4eaeac1d7c1b56341ca8001270341a54afa00d2041116cff075012b068c1205571f56813a164af1f2da8485c924e781916b148d45522063a11dd4c37e399f90d0fd6575d4f8c97b4456872ad6dde9d141b1283c7f74d928c50d81a58565c383fdc520e2c1f8a2aee02b0d1ee258e06d302e5d7524e24eaa32f731da94befca6f67bcebb579410b5995d247b4d49720f7f5280af9a4dae461f4eefd511f4275ee2151cac59b085bf98d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x448, 0x2, 0x3, 0xf, [@generic={0x68, 0x4, "ef91da4961ed6a631e6ff6464b83f72f0b36cd89e6c89637ddbec2cad815fa623edb77c59f47e9c27a092037050bfc8f23e8188eee84c31e79c1df3e7c6bcd3ecf24d0b174789071127c42b4aff6dda79b63d75f84baa856bd0e6cefc3487a3e6dfa5f70c2f4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0xfb, 0x4, [@generic={0x1b, 0xf, "71637c3c8fdbef4364bafe0e98d95671e4bf8da466d66981ab"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x5, 0xcc, 0x8, 0xff, 0x68, 0xaa, 0x1d, [@generic={0x23, 0x4, "4230eefd8c940e33e3f287dedbe0bd40e2871094f05fb9ee1095a79efc6eefa82c"}], [{{0x9, 0x5, 0x9, 0x4, 0x200, 0x7f, 0x81, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x16, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x7}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0x0, 0x16, 0x7}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7, 0x4, 0xa2, [@generic={0x78, 0xc, "df247439de2ea86768081b010f19f238a48da7a7ac8ce71d3f820e4002822f84aeb823e636d94a8d0d648802af8e4984ff291ba54d425e992937860f2b1b9709c3b705c485aa3f8032723f34bd7d70f26cc04baacfe7389068f8666e0aa1dcbbb943d5579eebf3a21dea0a329ca3b3a9da5d3c249010"}, @generic={0x21, 0x31, "874d208358997d596a93e11573f7225d07cfd06b70c81e2ce15a087df6855f"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x59, 0x6, 0x79, [@generic={0x95, 0x21, "f0474ae59df2b92a77f157dbcbaf2a9f367344307ea53f94008abdaad7b82227e6eddf313158474327e43c75b61d3bccc82ae6766ee42392b74be1c3ce5aac4a6cc4c0128b1d54707412488145d3c9d1d2c4c84d413a4b1891a8ff15cee5c4bf85751e9dc3f476104a3bde3b355751322220cfa751885c7bb51bcf37224bbd9186d138af9059070049100604bc8adad71acb94"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xd3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x1, 0x0, 0x2, [@generic={0xca, 0xb, "6bf82a0185d73b25d29fcd9c03a9d889a0f1f6134431bc5080404ddf232d6f08040513583fbc15ab12e500f38e242eaf5ddd0ffdfdfed1b983453caba49d6d829cb29c8c5bb3e3fcfd81d3562c098da4d338679369cddebe7328987f21d3de6801ab0970de3343051a22410f179989dff20910bfb46f81dbe213ce2169f5381bef59e1925faa8f9d5b03b15499d48c9776381ad1ad2fcc96a1f9088f4b26bcd3ea46cf6d283678ad73a39f1dbde402b91247216d81bf3742e625b204f6a280a839685603ac317dbb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x22, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x3, 0x71, 0x7, [@generic={0x7c, 0x9, "0fb4726c1ea7ee73d36744dc1c0cd9cbd43de2fd2f7dd541050aad65075d4a0df51699d54ac0de4bd599b5b7ef4aeebcdfe6b3de5ba3ff4be2daffb64581a3a738ff8bec816e1f662109a4555343dc33f1bdf0db362ff5f6ef94f970f5a3305dfcdaf9149b569375c3d65cb5f9873ab68b4ece762fdfdf793ed6"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x81}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x57, 0x1, 0x40, 0xf7}, 0x3a, &(0x7f0000000040)={0x5, 0xf, 0x3a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x1a, 0x1, 0x1298}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x8, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x7fffffd, 0xff0f, 0x81, [0xff0000, 0x8, 0xc000, 0xff0030, 0x3fc0, 0xc0c0]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1407}}, {0x87, &(0x7f0000000300)=@string={0x87, 0x3, "c43214569c02d8ab67269453d38a881f9b8ee9e93b3a6290134d16a7798ccdcbc40894c745babd0b789bfeaeade9234185bda58dae626b5a32d395828faf34411e23b0d273d460afddf770d23f957d4ce89d0c82cc47cafe608bd94cc2e80dc85a194318b9f52b215f89f254a8e478116e56099f0b8ab9f08d95391c6e181474699adf706f"}}, {0x21, &(0x7f00000003c0)=@string={0x21, 0x3, "f705d145cec8f1f14f2bd17e2173b6bb4510b101263237e870fa53199c25e2"}}, {0x16, &(0x7f00000012c0)=@string={0x16, 0x3, "2d5c603c6692dde2da757ad9fc52efd5e1871ad5"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2809}}]})
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={0x0})
socket$inet(0xa, 0x801, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000041031d2e5c50bac30000"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
fcntl$setlease(r2, 0x400, 0x1)

35.117738ms ago: executing program 6 (id=1866):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4000, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r2}], {0x4, 0x6}, [{0x8, 0x3, r3}, {0x8, 0x1, 0xee01}, {0x8, 0x4, r4}], {}, {0x20, 0x3}}, 0x44, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00')
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f804c00248045002c802cd00b29a0cf37843c11703c85210bfb54a5f579eeab7aa5c2a99f7fde2a0900000040000000220ffd5cd1d1a8c126e6aae344fb97b01addfd0e96fcc2c5078f2c"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
ftruncate(r5, 0x7fffffffffffffff)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000000))

0s ago: executing program 5 (id=1867):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xffff0000, @private2, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)}, {0x0}], 0x2, &(0x7f0000002640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x4b}}}], 0x18}}], 0x1, 0x4001c00)
pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0xffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80)
sendfile(r5, r5, 0x0, 0x7a680000)
read$FUSE(r5, 0x0, 0xeffd)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

ystem_u:object_r:crond_var_run_t:s0"
[   54.177575][ T2504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'.
[   54.202531][   T36] audit: type=1400 audit(1761666726.228:405): avc:  denied  { mounton } for  pid=2498 comm="syz.2.712" path="/78/file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.241638][ T2508] /dev/md0: Can't lookup blockdev
[   54.290719][ T2522] x_tables: unsorted underflow at hook 4
[   54.317401][ T2526] cannot load conntrack support for proto=3
[   54.503666][  T699] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   54.604219][  T331] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   54.656150][  T699] usb 3-1: config 1 interface 0 has no altsetting 0
[   54.664241][  T699] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40
[   54.673442][  T699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.681542][  T699] usb 3-1: Product: Ⰹ
[   54.685814][  T699] usb 3-1: Manufacturer: ᯊ哉䍻拉侻这준矁㇑২∸䔥㘲䖉浻ൄ疬葃죂漣飥檘壌Ḁ賰䆠䐏趷䆈᢯鷘仃ഹ綎ၺ웢♛
[   54.700595][  T699] usb 3-1: SerialNumber: 㰊
[   54.765118][  T331] usb 4-1: Using ep0 maxpacket: 8
[   54.771512][  T331] usb 4-1: unable to get BOS descriptor or descriptor too short
[   54.780433][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[   54.788682][  T331] usb 4-1: config 6 has no interface number 0
[   54.794760][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[   54.802882][  T331] usb 4-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00
[   54.812008][  T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.820025][  T331] usb 4-1: Product: syz
[   54.824188][  T331] usb 4-1: Manufacturer: syz
[   54.828809][  T331] usb 4-1: SerialNumber: syz
[   55.063208][  T331] ftdi_sio 4-1:6.194: FTDI USB Serial Device converter detected
[   55.073727][  T331] usb 4-1: Detected FT233HP
[   55.082752][  T331] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   55.096328][  T331] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   55.104400][  T331] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   55.115170][  T331] usb 4-1: USB disconnect, device number 15
[   55.122058][  T331] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   55.132989][  T331] ftdi_sio 4-1:6.194: device disconnected
[   55.314952][ T2514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.333369][ T2514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.476272][ T2551] cgroup: fork rejected by pids controller in /syz0
[   55.652752][ T2514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.670516][ T2514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.680389][  T699] usbhid 3-1:1.0: can't add hid device: -71
[   55.687485][  T699] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   55.697324][  T699] usb 3-1: USB disconnect, device number 12
[   55.853798][ T2615] syz.3.737 (2615) used obsolete PPPIOCDETACH ioctl
[   56.694676][ T2663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.759'.
[   56.704235][ T2663] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.705801][ T2663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=2663 comm=syz.3.759
[   56.975744][   T36] kauditd_printk_skb: 75 callbacks suppressed
[   56.975760][   T36] audit: type=1400 audit(1761666729.013:481): avc:  denied  { connect } for  pid=2698 comm="syz.0.770" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.010547][   T36] audit: type=1400 audit(1761666729.053:482): avc:  denied  { write } for  pid=2698 comm="syz.0.770" path="socket:[11821]" dev="sockfs" ino=11821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.064426][ T2705] 9pnet_fd: Insufficient options for proto=fd
[   57.080597][   T36] audit: type=1400 audit(1761666729.123:483): avc:  denied  { shutdown } for  pid=2703 comm="syz.1.771" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.127915][   T36] audit: type=1400 audit(1761666729.143:484): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   57.174216][   T36] audit: type=1400 audit(1761666729.163:485): avc:  denied  { connect } for  pid=2709 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.219455][   T36] audit: type=1400 audit(1761666729.163:486): avc:  denied  { write } for  pid=2709 comm="syz.2.774" path="socket:[12636]" dev="sockfs" ino=12636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.254875][   T36] audit: type=1400 audit(1761666729.222:487): avc:  denied  { read } for  pid=2709 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.276422][   T36] audit: type=1400 audit(1761666729.292:488): avc:  denied  { read write } for  pid=2715 comm="syz.2.776" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   57.300428][   T36] audit: type=1400 audit(1761666729.292:489): avc:  denied  { ioctl open } for  pid=2715 comm="syz.2.776" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   57.300754][ T2716] random: crng reseeded on system resumption
[   57.324430][   T36] audit: type=1400 audit(1761666729.352:490): avc:  denied  { write } for  pid=2715 comm="syz.2.776" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.649183][  T486] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   57.809898][  T486] usb 3-1: Using ep0 maxpacket: 16
[   57.818598][  T486] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[   57.828907][  T486] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   57.837970][  T486] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[   57.847299][  T486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.856458][  T486] usb 3-1: config 0 descriptor??
[   57.955577][ T2756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=2756 comm=syz.1.791
[   57.969406][ T2756] 9pnet_fd: Insufficient options for proto=fd
[   58.060538][ T2779] erofs: dax options not supported
[   58.068540][   T31] usb 3-1: USB disconnect, device number 13
[   58.271907][  T699] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   58.443782][  T699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.453973][  T699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.466174][  T699] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   58.475370][  T699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.483386][  T699] usb 4-1: Product: syz
[   58.487548][  T699] usb 4-1: Manufacturer: syz
[   58.492120][  T699] usb 4-1: SerialNumber: syz
[   58.498238][  T699] cdc_mbim 4-1:1.0: skipping garbage
[   58.503598][  T699] usb 4-1: selecting invalid altsetting 1
[   58.699496][ T2771] overlay: Unknown parameter 'subj_user'
[   58.707600][  T699] cdc_mbim 4-1:1.0: bind() failure
[   58.714427][  T699] usb 4-1: USB disconnect, device number 16
[   58.960653][ T2816] 9pnet_fd: Insufficient options for proto=fd
[   59.224878][ T2821] binder: Unknown parameter 'de'
[   59.260883][ T2832] netlink: 'syz.0.820': attribute type 5 has an invalid length.
[   59.268626][ T2832] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.820'.
[   59.396853][ T2837] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.397671][ T2837] rust_binder: Error while translating object.
[   59.404348][ T2837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   59.410789][ T2837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:369
[   59.410952][ T2841] 9pnet_fd: Insufficient options for proto=fd
[   59.496691][ T2859] rust_binder: Write failure EFAULT in pid:284
[   59.511259][ T2864] overlayfs: failed to clone upperpath
[   59.525699][ T2864] netlink: 200 bytes leftover after parsing attributes in process `syz.0.831'.
[   59.534765][ T2864] tc_dump_action: action bad kind
[   59.614033][ T2879] serio: Serial port ttyS3
[   59.666642][ T2878] rust_binder: Write failure EFAULT in pid:293
[   59.682670][ T2892] rust_binder: Got transaction with invalid offset.
[   59.689106][ T2892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.695785][ T2892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297
[   59.738379][ T2904] netlink: 88 bytes leftover after parsing attributes in process `syz.2.845'.
[   59.757980][ T2904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304
[   59.801293][ T2913] netlink: 596 bytes leftover after parsing attributes in process `syz.0.848'.
[   59.820807][ T2913] netlink: 596 bytes leftover after parsing attributes in process `syz.0.848'.
[   59.966512][ T2938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.966543][ T2938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314
[   59.997520][ T2940] random: crng reseeded on system resumption
[   60.064355][ T2959] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   60.072558][ T2959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[   60.073978][ T2964] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   60.090747][ T2964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[   60.119374][ T2974] rust_binder: Write failure EINVAL in pid:389
[   60.127824][ T2970] rust_binder: 322: no such ref 3
[   60.140076][ T2970] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   60.155255][ T2970] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   60.162454][ T2970] rust_binder: Write failure EFAULT in pid:322
[   60.179456][ T2985] 9pnet_fd: Insufficient options for proto=fd
[   60.192284][ T2985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[   60.262148][ T2995] netlink: 17 bytes leftover after parsing attributes in process `syz.3.870'.
[   60.284352][ T2997] rust_binder: Error while translating object.
[   60.284390][ T2997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   60.290678][ T2997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332
[   60.345380][ T3007] rust_binder: Write failure EFAULT in pid:342
[   60.380857][ T3011] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   60.394317][ T3011] rust_binder: Write failure EINVAL in pid:346
[   60.575395][ T3030] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 216, limit: 304, size: 193)
[   60.581775][ T3030] rust_binder: Error while translating object.
[   60.592463][ T3030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.598682][ T3030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357
[   60.773383][ T3059] fuse: Unknown parameter '��0x0000000000000000'
[   61.280248][ T3065] rust_binder: Write failure EFAULT in pid:401
[   61.300957][ T3069] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.307374][ T3069] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.309537][ T3071] 9pnet_fd: Insufficient options for proto=fd
[   61.532922][ T3104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[   61.549341][ T3103] cgroup2: Unknown parameter 'pids_localeventsl'
[   61.594705][  T486] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   61.747766][  T486] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping
[   61.756766][  T486] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   61.767005][  T486] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   61.777542][  T486] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   61.786660][  T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.794672][  T486] usb 4-1: Product: syz
[   61.798888][  T667] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   61.806475][  T486] usb 4-1: Manufacturer: syz
[   61.811051][  T486] usb 4-1: SerialNumber: syz
[   61.966951][  T667] usb 3-1: config 0 has an invalid interface number: 121 but max is 0
[   61.975207][  T667] usb 3-1: config 0 has no interface number 0
[   61.981319][  T667] usb 3-1: too many endpoints for config 0 interface 121 altsetting 208: 72, using maximum allowed: 30
[   61.992398][  T667] usb 3-1: config 0 interface 121 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[   62.005722][  T667] usb 3-1: config 0 interface 121 has no altsetting 0
[   62.013941][  T667] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   62.023046][  T667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.031157][  T667] usb 3-1: Product: syz
[   62.037617][  T667] usb 3-1: Manufacturer: syz
[   62.042964][  T486] usb 4-1: USB disconnect, device number 17
[   62.049125][  T667] usb 3-1: SerialNumber: syz
[   62.054828][  T667] usb 3-1: config 0 descriptor??
[   62.464756][  T667] asix 3-1:0.121 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   62.481608][  T667] asix 3-1:0.121: probe with driver asix failed with error -71
[   62.490426][  T667] usb 3-1: USB disconnect, device number 14
[   62.588119][   T36] kauditd_printk_skb: 66 callbacks suppressed
[   62.588140][   T36] audit: type=1400 audit(1761666734.591:557): avc:  denied  { map } for  pid=3135 comm="syz.3.926" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   62.669388][   T36] audit: type=1400 audit(1761666734.591:558): avc:  denied  { execute } for  pid=3135 comm="syz.3.926" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   62.755786][ T3153] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.755828][ T3156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   62.762845][   T36] audit: type=1400 audit(1761666734.791:559): avc:  denied  { mount } for  pid=3145 comm="syz.1.928" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   62.783720][ T3156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:414
[   62.799958][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'.
[   62.862956][ T3169] 9pnet_fd: Insufficient options for proto=fd
[   62.874089][ T3170] overlayfs: failed to clone upperpath
[   63.083554][   T36] audit: type=1400 audit(1761666735.110:560): avc:  denied  { create } for  pid=3179 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   63.084345][ T3180] binder: Unknown parameter 'defcontext01777777777777777777777'
[   63.235181][ T3187] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   63.498637][ T3196] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.782003][ T3204] rust_binder: Write failure EFAULT in pid:394
[   63.861296][ T3214] /dev/rnullb0: Can't open blockdev
[   63.909390][   T36] audit: type=1400 audit(1761666735.927:561): avc:  denied  { ioctl } for  pid=3221 comm="syz.1.952" path="socket:[13833]" dev="sockfs" ino=13833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.943442][ T3223] incfs: ino conflict with backing FS 1
[   63.953289][   T36] audit: type=1400 audit(1761666735.967:562): avc:  denied  { mount } for  pid=3206 comm="syz.3.948" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   63.974443][ T3207] incfs: Unexpected inode type
[   63.993200][   T36] audit: type=1400 audit(1761666735.967:563): avc:  denied  { mounton } for  pid=3206 comm="syz.3.948" path="/136/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   64.025983][   T36] audit: type=1400 audit(1761666735.977:564): avc:  denied  { getattr } for  pid=3206 comm="syz.3.948" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   64.102374][   T36] audit: type=1400 audit(1761666735.977:565): avc:  denied  { mount } for  pid=3206 comm="syz.3.948" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.157172][   T36] audit: type=1400 audit(1761666736.047:566): avc:  denied  { accept } for  pid=3224 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   64.221734][ T3249] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.301229][ T3255] rust_binder: 417: no such ref 1
[   64.403593][ T3255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417
[   64.678600][ T3299] devpts: called with bogus options
[   64.824807][  T486] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   64.939377][ T3310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   64.939398][ T3310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:430
[   64.975237][  T486] usb 4-1: Using ep0 maxpacket: 32
[   64.990917][  T486] usb 4-1: unable to get BOS descriptor or descriptor too short
[   64.999383][  T486] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[   65.007836][  T486] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   65.021038][  T486] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[   65.030275][  T486] usb 4-1: config 128 has no interface number 0
[   65.036595][  T486] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   65.048115][  T486] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[   65.058257][  T486] usb 4-1: config 128 interface 127 has no altsetting 0
[   65.066758][  T486] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   65.075960][  T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.088756][  T486] usb 4-1: Product: syz
[   65.092977][  T486] usb 4-1: Manufacturer: syz
[   65.097820][  T486] usb 4-1: SerialNumber: syz
[   65.144109][ T3332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[   65.326537][ T3286] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.332094][  T486] usb 4-1: USB disconnect, device number 18
[   65.339109][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   65.456571][   T45] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[   65.586924][   T45] usb 3-1: device descriptor read/64, error -71
[   65.676280][ T3341] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   65.676280][ T3340] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   65.827534][   T45] usb 3-1: device descriptor read/64, error -71
[   66.078198][   T45] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[   66.188537][  T486] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   66.208511][   T45] usb 3-1: device descriptor read/64, error -71
[   66.338864][  T486] usb 4-1: Using ep0 maxpacket: 16
[   66.345270][  T486] usb 4-1: config 1 interface 0 altsetting 252 endpoint 0x2 has invalid maxpacket 2047, setting to 1024
[   66.356490][  T486] usb 4-1: config 1 interface 0 has no altsetting 0
[   66.364573][  T486] usb 4-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 0.40
[   66.374132][  T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.382166][  T486] usb 4-1: Product: 痌ﾎ꽊ṵ⾷畕ລ潜賈◾পᔀ깸怭僻英쉫㍙ꅜ೗㴳싊視돜웷輋믱ઋ愷⒉↽䝻ꨊ䂡龁ປ緘䷻㖒厝ꡬꀳ쥂ᜏ൏憳ㄊ⼷ޙ膋䮳ꫨ걔괱䋦嚨ಡ듆う冷䮒濊肜蕈碕㜣⛓핰
[   66.411598][  T486] usb 4-1: Manufacturer: ₧胚汵䃾峕虦첝擏亡忤歆ﲘꝣ꠹쉏ᜑ瞪앢폷쭜뛸͹ႲӾ윻䲤昮旰뵠섓捲뛬ѽ笥㷶涹轷臘圳஻┓旄꽢줒㫢䬼ᜑྥ
[   66.430076][  T486] usb 4-1: SerialNumber: ꏷ㇑굕ꮩ摻鋛㉂疴谐홁⦗硙⡺㲗鹮ㅾ̌쪳贖딮⑓጖༓㾔꺚䣁涓ឩ魠뻹䚠簣秗ྑ욷贃ๅ翇倩䭡ꢺ向펚⨊꾀㛈供ﻈ臤렯覙궄杯佀᧥酦୭湳褁פֿ㝦ᣎ颩ȟ疣墜⇔㆐ஆ䔩封䟀ㅾ爅ᦷ↕礹컹ᾛ
[   66.461053][ T3347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   66.469181][   T45] usb 3-1: device descriptor read/64, error -71
[   66.579578][   T45] usb usb3-port1: attempt power cycle
[   66.672343][  T486] usbhid 4-1:1.0: can't add hid device: -71
[   66.678369][  T486] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[   66.688520][  T486] usb 4-1: USB disconnect, device number 19
[   66.920347][   T45] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[   66.941500][   T45] usb 3-1: device descriptor read/8, error -71
[   67.071783][   T45] usb 3-1: device descriptor read/8, error -71
[   67.195052][ T3399] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.195227][ T3399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   67.201845][ T3399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445
[   67.204680][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[   67.311261][   T45] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[   67.332368][   T45] usb 3-1: device descriptor read/8, error -71
[   67.462630][   T45] usb 3-1: device descriptor read/8, error -71
[   67.571962][   T45] usb usb3-port1: unable to enumerate USB device
[   67.754970][ T3417] 9pnet_fd: Insufficient options for proto=fd
[   67.811781][ T3429] overlayfs: failed to resolve './file0': -2
[   67.832341][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   67.832358][   T36] audit: type=1400 audit(1761666739.837:589): avc:  denied  { mount } for  pid=3436 comm="syz.0.1022" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   68.043796][   T36] audit: type=1400 audit(1761666740.056:590): avc:  denied  { nlmsg_read } for  pid=3442 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.046428][ T3443] rust_binder: Error while translating object.
[   68.064422][ T3443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   68.070619][ T3443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439
[   68.080447][ T3443] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   68.089707][   T36] audit: type=1400 audit(1761666740.086:591): avc:  denied  { create } for  pid=3440 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   68.118423][ T3443] rust_binder: Read failure Err(EFAULT) in pid:439
[   68.433857][  T486] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   68.594247][  T486] usb 3-1: Using ep0 maxpacket: 16
[   68.597300][   T36] audit: type=1400 audit(1761666740.605:592): avc:  denied  { create } for  pid=3473 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   68.600479][  T486] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.629153][  T486] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.639607][  T486] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.648672][  T486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.656709][  T486] usb 3-1: Product: syz
[   68.660860][  T486] usb 3-1: Manufacturer: syz
[   68.665607][  T486] usb 3-1: SerialNumber: syz
[   68.863563][   T36] audit: type=1400 audit(1761666740.865:593): avc:  denied  { create } for  pid=3486 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[   68.885173][ T3458] rust_binder: 441: no such ref 0
[   68.890369][ T3458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   68.898099][ T3458] rust_binder: 441: no such ref 2
[   68.903219][ T3458] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   68.906684][  T486] usb 3-1: 0:2 : does not exist
[   68.907152][   T36] audit: type=1400 audit(1761666740.914:594): avc:  denied  { execute_no_trans } for  pid=3495 comm="syz.0.1041" path="/430/file0" dev="tmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   68.917637][ T3496] veth0_to_bond: mtu less than device minimum
[   68.949575][  T486] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   68.961318][  T486] usb 3-1: USB disconnect, device number 19
[   68.969081][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.438679][ T3498] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   69.446294][ T3498] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   69.706554][  T699] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[   69.857983][  T699] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   69.866329][  T699] usb 3-1: config 179 has no interface number 0
[   69.872665][  T699] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[   69.883810][  T699] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[   69.894870][  T699] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   69.906113][  T699] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   69.916111][  T699] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   69.929970][  T699] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   69.939028][  T699] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   69.947125][  T699] usb 3-1: Product: syz
[   69.953008][ T3508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.960890][  T699] xpad 3-1:179.65: probe with driver xpad failed with error -5
[   70.102341][   T36] audit: type=1400 audit(1761666742.102:595): avc:  denied  { getopt } for  pid=3539 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.165478][ T3508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.165515][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445
[   70.175825][  T486] usb 3-1: USB disconnect, device number 20
[   70.532337][ T3568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'.
[   70.746112][  T329] bridge_slave_1: left allmulticast mode
[   70.752168][  T329] bridge_slave_1: left promiscuous mode
[   70.757879][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.766264][  T329] bridge_slave_0: left allmulticast mode
[   70.772019][  T329] bridge_slave_0: left promiscuous mode
[   70.777697][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.884320][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.891436][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.898529][ T3593] bridge_slave_0: entered allmulticast mode
[   70.904956][ T3593] bridge_slave_0: entered promiscuous mode
[   70.911447][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.918813][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.925936][ T3593] bridge_slave_1: entered allmulticast mode
[   70.932859][ T3593] bridge_slave_1: entered promiscuous mode
[   70.974360][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.981435][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.988692][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.995742][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.014391][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.021836][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.031741][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.038823][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.048947][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.056123][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.087437][ T3593] veth0_vlan: entered promiscuous mode
[   71.101046][ T3611] netlink: 'syz.1.1078': attribute type 11 has an invalid length.
[   71.108903][ T3611] netlink: 'syz.1.1078': attribute type 2 has an invalid length.
[   71.118518][ T3593] veth1_macvtap: entered promiscuous mode
[   71.139330][   T36] audit: type=1400 audit(1761666743.140:596): avc:  denied  { mounton } for  pid=3593 comm="syz-executor" path="/root/syzkaller.MJOrX9/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   71.176396][   T36] audit: type=1400 audit(1761666743.150:597): avc:  denied  { mounton } for  pid=3593 comm="syz-executor" path="/root/syzkaller.MJOrX9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   71.206103][   T36] audit: type=1400 audit(1761666743.150:598): avc:  denied  { mounton } for  pid=3593 comm="syz-executor" path="/root/syzkaller.MJOrX9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   71.307151][ T3627] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1074'.
[   71.317127][ T3627] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.317243][ T3627] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   71.620301][  T486] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.780600][  T486] usb 5-1: Using ep0 maxpacket: 16
[   71.786813][  T486] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.796992][  T486] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.808058][  T486] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.817392][  T486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.825601][  T486] usb 5-1: Product: syz
[   71.829777][  T486] usb 5-1: Manufacturer: syz
[   71.834631][  T486] usb 5-1: SerialNumber: syz
[   72.041676][ T3642] rust_binder: 12: no such ref 0
[   72.046703][ T3642] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   72.053937][ T3642] rust_binder: 12: no such ref 2
[   72.058921][ T3642] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   72.060118][  T486] usb 5-1: 0:2 : does not exist
[   72.079200][  T486] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   72.090323][  T486] usb 5-1: USB disconnect, device number 2
[   72.100673][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.494547][ T3681] veth1_macvtap: left promiscuous mode
[   72.500065][ T3681] macsec0: entered allmulticast mode
[   72.506599][ T3681] veth1_macvtap: entered promiscuous mode
[   72.512515][ T3681] veth1_macvtap: entered allmulticast mode
[   72.518441][ T3681] macsec0: left allmulticast mode
[   72.523546][ T3681] veth1_macvtap: left allmulticast mode
[   72.598171][ T3697] binder: Unknown parameter '0x0000000000000003'
[   72.852459][  T699] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   73.002692][  T699] usb 5-1: Using ep0 maxpacket: 32
[   73.008210][  T699] usb 5-1: too many configurations: 17, using maximum allowed: 8
[   73.016674][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.024742][  T699] usb 5-1: config 0 has no interface number 0
[   73.031684][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.039728][  T699] usb 5-1: config 0 has no interface number 0
[   73.046589][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.054623][  T699] usb 5-1: config 0 has no interface number 0
[   73.061447][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.069504][  T699] usb 5-1: config 0 has no interface number 0
[   73.076276][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.084357][  T699] usb 5-1: config 0 has no interface number 0
[   73.091211][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.099275][  T699] usb 5-1: config 0 has no interface number 0
[   73.106450][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.114534][  T699] usb 5-1: config 0 has no interface number 0
[   73.121376][  T699] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   73.129432][  T699] usb 5-1: config 0 has no interface number 0
[   73.137123][  T699] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[   73.146340][  T699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.155041][  T699] usb 5-1: Product: syz
[   73.159442][  T699] usb 5-1: Manufacturer: syz
[   73.164230][  T699] usb 5-1: SerialNumber: syz
[   73.170153][  T699] usb 5-1: config 0 descriptor??
[   73.196251][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   73.196268][   T36] audit: type=1400 audit(1761666745.196:606): avc:  denied  { ioctl } for  pid=3716 comm="syz.0.1115" path="socket:[16432]" dev="sockfs" ino=16432 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   73.805016][   T36] audit: type=1400 audit(1761666745.805:607): avc:  denied  { bind } for  pid=3731 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   73.824533][   T36] audit: type=1400 audit(1761666745.825:608): avc:  denied  { read } for  pid=3731 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   73.930963][ T3723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.939540][ T3723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.069972][ T3760] IPv6: NLM_F_CREATE should be specified when creating new route
[   74.077923][ T3760] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.082432][ T3762] 9pnet_fd: Insufficient options for proto=fd
[   74.120900][   T36] audit: type=1400 audit(1761666746.115:609): avc:  denied  { block_suspend } for  pid=3770 comm="syz.1.1134" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   74.308899][   T36] audit: type=1400 audit(1761666746.305:610): avc:  denied  { getopt } for  pid=3798 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.354006][ T3805] overlayfs: failed to resolve './file1/file0': -2
[   74.363175][ T3805] overlayfs: failed to clone upperpath
[   74.371056][ T3805] overlayfs: failed to clone upperpath
[   74.376956][ T3805] overlayfs: failed to clone upperpath
[   74.382884][ T3805] overlayfs: failed to clone upperpath
[   74.388936][ T3805] overlayfs: failed to clone upperpath
[   74.394928][ T3805] overlayfs: failed to clone upperpath
[   74.400843][ T3805] overlayfs: failed to clone upperpath
[   74.407223][ T3805] overlayfs: failed to clone upperpath
[   74.413080][ T3805] overlayfs: failed to clone upperpath
[   74.419097][ T3805] overlayfs: failed to clone upperpath
[   74.425050][ T3805] overlayfs: failed to clone upperpath
[   74.430959][ T3805] overlayfs: failed to clone upperpath
[   74.436975][ T3805] overlayfs: failed to clone upperpath
[   74.442862][ T3805] overlayfs: failed to clone upperpath
[   74.448864][ T3805] overlayfs: failed to clone upperpath
[   74.454721][ T3805] overlayfs: failed to clone upperpath
[   74.460732][ T3805] overlayfs: failed to clone upperpath
[   74.466732][ T3805] overlayfs: failed to clone upperpath
[   74.472630][ T3805] overlayfs: failed to clone upperpath
[   74.478656][ T3805] overlayfs: failed to clone upperpath
[   74.484511][ T3805] overlayfs: failed to clone upperpath
[   74.490511][ T3805] overlayfs: failed to clone upperpath
[   74.496455][ T3805] overlayfs: failed to clone upperpath
[   74.502388][ T3805] overlayfs: failed to clone upperpath
[   74.508374][ T3805] overlayfs: failed to clone upperpath
[   74.514245][ T3805] overlayfs: failed to clone upperpath
[   74.520349][ T3805] overlayfs: failed to clone upperpath
[   74.526340][ T3805] overlayfs: failed to clone upperpath
[   74.532223][ T3805] overlayfs: failed to clone upperpath
[   74.538363][ T3805] overlayfs: failed to clone upperpath
[   74.544226][ T3805] overlayfs: failed to clone upperpath
[   74.550586][ T3805] overlayfs: failed to clone upperpath
[   74.556688][ T3805] overlayfs: failed to clone upperpath
[   74.562605][ T3805] overlayfs: failed to clone upperpath
[   74.569361][ T3805] overlayfs: failed to clone upperpath
[   74.575384][ T3805] overlayfs: failed to clone upperpath
[   74.581419][ T3805] overlayfs: failed to clone upperpath
[   74.587543][ T3805] overlayfs: failed to clone upperpath
[   74.593394][ T3805] overlayfs: failed to clone upperpath
[   74.599523][ T3805] overlayfs: failed to clone upperpath
[   74.605546][ T3805] overlayfs: failed to clone upperpath
[   74.611427][ T3805] overlayfs: failed to clone upperpath
[   74.617508][ T3805] overlayfs: failed to clone upperpath
[   74.623365][ T3805] overlayfs: failed to clone upperpath
[   74.629452][ T3805] overlayfs: failed to clone upperpath
[   74.635493][ T3805] overlayfs: failed to clone upperpath
[   74.641375][ T3805] overlayfs: failed to clone upperpath
[   74.647469][ T3805] overlayfs: failed to clone upperpath
[   74.654940][ T3805] overlayfs: failed to clone upperpath
[   74.661110][ T3805] overlayfs: failed to clone upperpath
[   74.667120][ T3805] overlayfs: failed to clone upperpath
[   74.673007][ T3805] overlayfs: failed to clone upperpath
[   74.687752][ T3805] overlayfs: failed to clone upperpath
[   74.693815][ T3805] overlayfs: failed to clone upperpath
[   74.700225][   T36] audit: type=1400 audit(1761666746.694:611): avc:  denied  { setattr } for  pid=3808 comm="syz.1.1146" name="RAWv6" dev="sockfs" ino=16597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   74.716832][ T3805] overlayfs: failed to clone upperpath
[   74.729155][ T3805] overlayfs: failed to clone upperpath
[   74.735004][ T3805] overlayfs: failed to clone upperpath
[   74.741138][ T3805] overlayfs: failed to clone upperpath
[   74.747441][ T3805] overlayfs: failed to clone upperpath
[   74.753196][ T3805] overlayfs: failed to clone upperpath
[   74.759267][ T3805] overlayfs: failed to clone upperpath
[   74.765015][ T3805] overlayfs: failed to clone upperpath
[   74.770924][ T3805] overlayfs: failed to clone upperpath
[   74.776703][ T3805] overlayfs: failed to clone upperpath
[   75.268568][   T36] audit: type=1400 audit(1761666747.263:612): avc:  denied  { mount } for  pid=3818 comm="syz.1.1149" name="/" dev="ramfs" ino=16608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   75.315297][ T3824] 9pnet_fd: Insufficient options for proto=fd
[   75.352560][   T36] audit: type=1400 audit(1761666747.343:613): avc:  denied  { mounton } for  pid=3827 comm="syz.1.1153" path="/file0" dev="ramfs" ino=15970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   75.354868][ T3828] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   75.398153][ T3833] netlink: 'syz.1.1154': attribute type 12 has an invalid length.
[   75.645688][   T36] audit: type=1400 audit(1761666747.633:614): avc:  denied  { accept } for  pid=3852 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.686716][   T36] audit: type=1400 audit(1761666747.663:615): avc:  denied  { read } for  pid=3852 comm="syz.1.1160" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.697082][ T3863] netlink: 'syz.0.1164': attribute type 16 has an invalid length.
[   75.715335][ T3864] netlink: 'syz.0.1164': attribute type 16 has an invalid length.
[   75.727504][ T3864] netlink: 'syz.0.1164': attribute type 2 has an invalid length.
[   75.737801][ T3863] netlink: 'syz.0.1164': attribute type 2 has an invalid length.
[   75.750003][ T3864] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.1164'.
[   75.759966][ T3863] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.1164'.
[   75.843142][ T3883] 9pnet_fd: Insufficient options for proto=fd
[   76.230158][  T699] usb 5-1: USB disconnect, device number 3
[   76.244254][ T3902] /dev/rnullb0: Can't open blockdev
[   76.567953][  T699] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   76.719214][  T699] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[   76.728362][  T699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.736961][  T699] usb 5-1: config 0 descriptor??
[   76.944747][  T699] usb 5-1: string descriptor 0 read error: -71
[   76.952671][  T699] usbhid 5-1:0.0: can't add hid device: -71
[   76.958668][  T699] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   76.967296][  T699] usb 5-1: USB disconnect, device number 4
[   77.110260][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'.
[   77.996896][ T3956] overlayfs: failed to clone lowerpath
[   78.266838][ T3995] netlink: 'syz.0.1206': attribute type 14 has an invalid length.
[   78.421310][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   78.421327][   T36] audit: type=1400 audit(1761666750.419:623): avc:  denied  { read write } for  pid=3996 comm="syz.4.1207" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   78.452373][   T36] audit: type=1400 audit(1761666750.419:624): avc:  denied  { open } for  pid=3996 comm="syz.4.1207" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   78.666405][ T4003] tipc: Can't bind to reserved service type 0
[   78.674766][   T36] audit: type=1400 audit(1761666750.669:625): avc:  denied  { watch } for  pid=4002 comm="syz.1.1209" path="/397" dev="tmpfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   78.690550][  T699] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   78.850751][  T699] usb 5-1: Using ep0 maxpacket: 16
[   78.856933][  T699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.867876][  T699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.877639][  T699] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[   78.886683][  T699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.895180][  T699] usb 5-1: config 0 descriptor??
[   79.304160][  T699] holtek_mouse 0003:04D9:A081.0003: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.4-1/input0
[   79.505380][ T4001] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   79.515483][  T699] usb 5-1: USB disconnect, device number 5
[   79.650422][ T4024] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+����J�x�@�P���Q[v�5o����
[   80.036154][ T4047] rust_binder: Write failure EINVAL in pid:65
[   80.040177][ T4047] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.052384][ T4047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65
[   80.058942][ T4047] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   80.068033][ T4047] rust_binder: Read failure Err(EFAULT) in pid:65
[   80.087137][   T36] audit: type=1400 audit(1761666752.077:626): avc:  denied  { map } for  pid=4049 comm="syz.4.1227" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.087190][ T4050] __vm_enough_memory: pid: 4050, comm: syz.4.1227, bytes: 18014402804453376 not enough memory for the allocation
[   80.137972][ T4053] fuse: Bad value for 'fd'
[   80.142791][ T4053] fuseblk: Unknown parameter 'f'20x0000000000000003'
[   80.541943][ T4063] netlink: 'syz.0.1232': attribute type 1 has an invalid length.
[   80.712039][   T36] audit: type=1400 audit(1761666752.697:627): avc:  denied  { create } for  pid=4100 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   80.731620][   T36] audit: type=1400 audit(1761666752.707:628): avc:  denied  { setattr } for  pid=4100 comm="syz.1.1244" name="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   82.738772][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.754664][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.774696][ T4162] bridge_slave_0: entered allmulticast mode
[   82.785276][ T4162] bridge_slave_0: entered promiscuous mode
[   82.795561][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.812813][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.824762][ T4162] bridge_slave_1: entered allmulticast mode
[   82.831146][ T4162] bridge_slave_1: entered promiscuous mode
[   82.946108][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.953225][ T4162] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.960544][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.967596][ T4162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.995046][ T4181] 9pnet_fd: Insufficient options for proto=fd
[   83.020189][ T4183] overlayfs: failed to clone upperpath
[   83.042582][ T4162] veth0_vlan: entered promiscuous mode
[   83.074916][ T4162] veth1_macvtap: entered promiscuous mode
[   83.111937][ T4194] rust_binder: Write failure EINVAL in pid:2
[   83.218594][ T4206] rust_binder: Error in use_page_slow: ESRCH
[   83.218625][ T4206] rust_binder: use_range failure ESRCH
[   83.224649][ T4206] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   83.236102][ T4206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   83.244250][ T4206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:7
[   83.313156][   T36] audit: type=1326 audit(1761666755.294:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.1.1279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe76298efc9 code=0x0
[   83.385724][ T4218] fuse: Unknown parameter ''
[   83.708730][   T36] audit: type=1400 audit(1761666755.694:630): avc:  denied  { watch_reads } for  pid=4228 comm="syz.0.1285" path="/528/file0" dev="tmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   83.813581][ T4235] rust_binder: Error while translating object.
[   83.813630][ T4235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   83.820533][ T4235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25
[   83.913481][ T4244] fuse: Unknown parameter '0x0000000000000005'
[   84.033002][   T36] audit: type=1400 audit(1761666756.014:631): avc:  denied  { getopt } for  pid=4249 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.096066][ T4256] input: syz1 as /devices/virtual/input/input8
[   84.105907][   T36] audit: type=1400 audit(1761666756.084:632): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   84.129448][   T36] audit: type=1400 audit(1761666756.084:633): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   84.153087][   T36] audit: type=1400 audit(1761666756.084:634): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=527 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   84.637689][ T4285] /dev/rnullb0: Can't open blockdev
[   84.660064][ T4287] netlink: 'syz.5.1305': attribute type 2 has an invalid length.
[   84.679573][ T4289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43
[   84.791397][   T36] audit: type=1400 audit(1761666756.773:635): avc:  denied  { load_policy } for  pid=4292 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   84.800331][ T4293] SELinux: failed to load policy
[   84.826895][   T36] audit: type=1400 audit(1761666756.813:636): avc:  denied  { read write } for  pid=4292 comm="syz.5.1308" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.852250][   T36] audit: type=1400 audit(1761666756.813:637): avc:  denied  { open } for  pid=4292 comm="syz.5.1308" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   84.999224][ T4303] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true
[   84.999254][ T4303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   85.015975][ T4303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:52
[   85.080118][ T4311] rust_binder: Failed copying remainder into alloc: EFAULT
[   85.093376][ T4311] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   85.103129][ T4311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   85.111886][ T4311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:58
[   85.142589][ T4324] /dev/rnullb0: Can't open blockdev
[   85.194885][ T4331] rust_binder: Read failure Err(EAGAIN) in pid:67
[   85.536176][ T4341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=4341 comm=syz.1.1325
[   85.652059][   T36] audit: type=1400 audit(1761666757.632:638): avc:  denied  { create } for  pid=4344 comm="syz.4.1327" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   85.652077][ T4347] rust_binder: Write failure EINVAL in pid:90
[   85.676985][   T36] audit: type=1400 audit(1761666757.652:639): avc:  denied  { unlink } for  pid=3593 comm="syz-executor" name="file5" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   85.709039][ T4352] binder: Bad value for 'stats'
[   86.128076][ T4370] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   86.135840][ T4370] SELinux: failed to load policy
[   86.264913][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'.
[   86.837839][   T66] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   86.881588][ T4403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1347'.
[   86.937298][ T4414] 9pnet_fd: Insufficient options for proto=fd
[   86.990690][ T4417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'.
[   86.999730][   T66] usb 5-1: Using ep0 maxpacket: 8
[   87.006140][   T66] usb 5-1: unable to get BOS descriptor or descriptor too short
[   87.014960][   T66] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[   87.025286][   T66] usb 5-1: config 0 has no interface number 0
[   87.033201][ T4418] incfs: Error accessing: ./cgroup.
[   87.043798][   T66] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   87.054870][ T4418] incfs: mount failed -20
[   87.064703][   T66] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   87.076761][   T66] usb 5-1: config 0 interface 88 has no altsetting 0
[   87.084011][   T66] usb 5-1: language id specifier not provided by device, defaulting to English
[   87.105050][   T66] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   87.114550][   T66] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   87.122998][   T66] usb 5-1: Product: syz
[   87.127278][   T66] usb 5-1: SerialNumber: syz
[   87.133839][   T66] usb 5-1: config 0 descriptor??
[   87.354439][   T66] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input9
[   87.369895][   T66] usb 5-1: USB disconnect, device number 6
[   87.741805][ T4442] SELinux: security_context_str_to_sid (��) failed with errno=-22
[   87.893517][ T4447] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   87.904356][ T4447] rust_binder: Write failure EINVAL in pid:112
[   87.928748][ T4450] __vm_enough_memory: pid: 4450, comm: syz.5.1366, bytes: 18014402804453376 not enough memory for the allocation
[   87.957128][ T4454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'.
[   87.966119][ T4454] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1367'.
[   88.048380][ T4462] devpts: called with bogus options
[   88.101835][ T4470] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   88.118367][ T4472] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1375'.
[   88.137360][ T4473] __vm_enough_memory: pid: 4473, comm: syz.5.1375, bytes: 18014402804453376 not enough memory for the allocation
[   88.249166][ T4485] rust_binder: Failed copying remainder into alloc: EFAULT
[   88.249188][ T4485] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   88.256471][ T4485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   88.270681][ T4485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105
[   88.538937][   T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   88.699025][   T66] usb 6-1: Using ep0 maxpacket: 16
[   88.705394][   T66] usb 6-1: config 0 interface 0 has no altsetting 0
[   88.712119][   T66] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   88.721363][   T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.729903][   T66] usb 6-1: config 0 descriptor??
[   88.829585][ T4512] /dev/rnullb0: Can't lookup blockdev
[   88.835807][ T4512] /dev/rnullb0: Can't lookup blockdev
[   88.936990][ T4502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.945542][ T4502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.356735][   T66] usbhid 6-1:0.0: can't add hid device: -71
[   89.362794][   T66] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   89.371406][   T66] usb 6-1: USB disconnect, device number 2
[   89.423644][ T4527] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1394'.
[   89.440661][   T36] kauditd_printk_skb: 79 callbacks suppressed
[   89.440676][   T36] audit: type=1326 audit(1761666761.430:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.0.1395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e718efc9 code=0x0
[   89.915174][ T4567] rust_binder: Error while translating object.
[   89.915202][ T4567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   89.921435][ T4567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112
[   90.169340][ T4583] fuse: Bad value for 'fd'
[   90.195445][ T4585] overlayfs: failed to clone upperpath
[   90.283025][ T4588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1415'.
[   90.302215][ T4590] bpf: Bad value for 'gid'
[   90.759608][ T4603] /dev/rnullb0: Can't lookup blockdev
[   90.779488][ T4605] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1049 sclass=netlink_xfrm_socket pid=4605 comm=syz.1.1420
[   90.802144][ T4605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1420'.
[   90.857690][ T4654] fuse: Unknown parameter 'fd'
[   90.875956][   T36] audit: type=1326 audit(1761666762.859:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   90.900582][   T36] audit: type=1326 audit(1761666762.859:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   90.924056][   T36] audit: type=1326 audit(1761666762.869:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe76298d810 code=0x7ffc0000
[   90.948132][   T36] audit: type=1326 audit(1761666762.869:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe76298d810 code=0x7ffc0000
[   90.971796][   T36] audit: type=1326 audit(1761666762.869:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   90.995258][   T36] audit: type=1326 audit(1761666762.869:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   91.018627][   T36] audit: type=1326 audit(1761666762.869:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   91.041995][   T36] audit: type=1326 audit(1761666762.869:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   91.065349][   T36] audit: type=1326 audit(1761666762.869:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76298efc9 code=0x7ffc0000
[   91.562817][ T4700] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1440'.
[   91.572110][   T66] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   91.719401][ T4710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   91.719435][ T4710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:137
[   91.730696][   T66] usb 5-1: Using ep0 maxpacket: 16
[   91.750308][ T4712] /dev/rnullb0: Can't open blockdev
[   91.751463][   T66] usb 5-1: unable to get BOS descriptor or descriptor too short
[   91.769460][   T66] usb 5-1: config 157 has an invalid interface number: 116 but max is 0
[   91.777861][   T66] usb 5-1: config 157 has no interface number 0
[   91.784174][   T66] usb 5-1: config 157 interface 116 altsetting 241 endpoint 0xE has invalid maxpacket 510, setting to 64
[   91.795455][   T66] usb 5-1: config 157 interface 116 has no altsetting 0
[   91.803867][   T66] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=9c.e8
[   91.812942][   T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.821043][   T66] usb 5-1: Product: syz
[   91.825222][   T66] usb 5-1: Manufacturer: syz
[   91.830603][   T66] usb 5-1: SerialNumber: syz
[   92.042467][   T66] zaurus 5-1:157.116: skipping garbage
[   92.053131][   T66] usb 5-1: bad CDC descriptors
[   92.060832][  T331] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   92.065715][   T66] usb 5-1: USB disconnect, device number 7
[   92.211092][  T331] usb 6-1: Using ep0 maxpacket: 32
[   92.217987][  T331] usb 6-1: unable to get BOS descriptor or descriptor too short
[   92.226176][  T331] usb 6-1: unable to read config index 0 descriptor/start: -71
[   92.233862][  T331] usb 6-1: can't read configurations, error -71
[   92.285285][ T4748] 9pnet_fd: Insufficient options for proto=fd
[   92.371044][   T66] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   92.521077][   T66] usb 5-1: Using ep0 maxpacket: 32
[   92.527356][   T66] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[   92.536591][   T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.545376][   T66] usb 5-1: config 0 descriptor??
[   92.888652][ T4784] netlink: 'syz.0.1470': attribute type 27 has an invalid length.
[   92.906180][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.913379][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.954501][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.963575][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.977153][   T66] belkin 0003:050D:3201.0004: unknown main item tag 0x0
[   92.984201][   T66] belkin 0003:050D:3201.0004: unknown main item tag 0x1
[   92.991174][   T66] belkin 0003:050D:3201.0004: item fetching failed at offset 2/3
[   92.999155][   T66] belkin 0003:050D:3201.0004: parse failed
[   93.005759][   T66] belkin 0003:050D:3201.0004: probe with driver belkin failed with error -22
[   93.141586][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'.
[   93.182576][  T331] usb 5-1: USB disconnect, device number 8
[   93.266412][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.273509][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.281113][ T4803] bridge_slave_0: entered allmulticast mode
[   93.287638][ T4803] bridge_slave_0: entered promiscuous mode
[   93.294165][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.301283][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.308392][ T4803] bridge_slave_1: entered allmulticast mode
[   93.314763][ T4803] bridge_slave_1: entered promiscuous mode
[   93.354647][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.361731][ T4803] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.369099][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.376256][ T4803] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.434931][ T4803] veth0_vlan: entered promiscuous mode
[   93.449270][ T4803] veth1_macvtap: entered promiscuous mode
[   93.741661][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.776480][ T4847] rust_binder: Write failure EFAULT in pid:138
[   93.903526][    T9] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.920873][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[   93.929060][    T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.40
[   93.942292][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.950336][    T9] usb 1-1: Product: 啛誙므犉柡耉卓ꐖＩ傌㦆톮蕶᫕논㭀っ疺঄謽亥ᒥ蝦߳궸둨镤௑∉팢ী旿䐆䄚垺ʏ钙尿潠ԖⲖ靈轰ⱓ䫌뉥儘䟻蕢㔤੻岕ẽ⦌묣珩戫ᗣ⵭祝찉컯䎞䬠鹞못
[   93.972641][    T9] usb 1-1: Manufacturer: ᰉ
[   93.977246][    T9] usb 1-1: SerialNumber: ㏟믛李엧䀳鍌₦䪍鞗⮮⣌깸爮卸ⴔट讠ꚨ䬌廲쁳⹻걿㏃櫦寇攴盡⟄࡯퓯ꥆ儐䚞稞㦤㟼饑觢睯띉쉤꯶둡禰莒露恱襃봚㽶瑩䘰ᠾ啭煹뾽䥌癸煪鼊쳮欂䍑缫䁎㰶㮊⃱궿ㅞ뗐蛙
[   94.205723][ T4826] fuse: Unknown parameter 'fd	'
[   94.262674][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.271232][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.282530][    T9] usbhid 1-1:1.0: can't add hid device: -71
[   94.288472][    T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   94.298008][    T9] usb 1-1: USB disconnect, device number 3
[   94.345639][ T4869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4869 comm=syz.1.1493
[   94.367302][ T4871] /dev/rnullb0: Can't lookup blockdev
[   94.554043][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   94.554061][   T36] audit: type=1400 audit(1761666766.537:739): avc:  denied  { setopt } for  pid=4888 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.445230][   T36] audit: type=1400 audit(1761666767.427:740): avc:  denied  { map } for  pid=4921 comm="syz.4.1508" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   95.789496][ T4931] overlayfs: failed to clone upperpath
[   95.811869][ T4935] /dev/rnullb0: Can't lookup blockdev
[   95.911996][ T4951] 9pnet: Could not find request transport: f

[   95.911996][ T4950] 9pnet: Could not find request transport: f

[   96.511212][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'.
[   96.612508][   T36] audit: type=1400 audit(1761666768.587:741): avc:  denied  { create } for  pid=4960 comm="syz.5.1521" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   96.643262][   T36] audit: type=1400 audit(1761666768.617:742): avc:  denied  { mounton } for  pid=4960 comm="syz.5.1521" path="/53/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   96.661075][ T4963] __vm_enough_memory: pid: 4963, comm: syz.5.1522, bytes: 18014402804453376 not enough memory for the allocation
[   96.766055][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'.
[   96.838808][ T4980] 9pnet_fd: Insufficient options for proto=fd
[   97.264397][ T5012] /dev/rnullb0: Can't lookup blockdev
[   97.296301][ T5017] netlink: 'syz.1.1543': attribute type 5 has an invalid length.
[   97.304255][ T5017] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1543'.
[   97.383019][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'.
[   97.403103][   T36] audit: type=1400 audit(1761666769.386:743): avc:  denied  { setattr } for  pid=5020 comm="syz.0.1545" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   97.483445][ T5024] binder: Bad value for 'stats'
[   97.488819][ T5024] binder: Bad value for 'stats'
[   97.783170][   T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   97.866049][   T36] audit: type=1400 audit(1761666769.846:744): avc:  denied  { execmod } for  pid=5036 comm="syz.1.1552" path="/542/blkio.bfq.io_merged" dev="tmpfs" ino=2954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   97.933273][   T66] usb 6-1: Using ep0 maxpacket: 16
[   97.939701][   T66] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[   97.948001][   T66] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.958205][   T66] usb 6-1: config 0 has no interface number 0
[   97.965634][   T66] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   97.975088][   T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.983074][   T66] usb 6-1: Product: syz
[   97.987246][   T66] usb 6-1: Manufacturer: syz
[   97.991832][   T66] usb 6-1: SerialNumber: syz
[   97.997000][   T66] usb 6-1: config 0 descriptor??
[   98.121659][ T5048] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1556'.
[   98.146520][ T5053] fuse: Unknown parameter '[9n�S#t�\G;��j�d.|!�񮚈'�ɠ���-3�S�D��s�ũ��Vǣ5����:
[   98.146520][ T5053] ����AM�4X�c���vZL����ɴou��@?�;��4��]Y9���oi�0x0000000000000003'
[   98.207163][   T66] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[   98.209316][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'.
[   98.213912][   T66] usb 6-1: No valid video chain found.
[   98.404481][   T36] audit: type=1400 audit(1761666770.386:745): avc:  denied  { execute } for  pid=5078 comm="syz.0.1564" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   98.409986][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1547'.
[   98.445120][ T5027] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1547'.
[   98.517858][   T36] audit: type=1400 audit(1761666770.496:746): avc:  denied  { setopt } for  pid=5086 comm="syz.0.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   98.667665][ T5096] /dev/rnullb0: Can't open blockdev
[   98.684723][ T5099] rust_binder: Write failure EINVAL in pid:171
[   98.823560][  T331] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   98.891726][ T5132] /dev/loop1: Can't lookup blockdev
[   98.923540][   T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   98.959625][  T699] usb 6-1: USB disconnect, device number 5
[   98.984751][  T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.997905][  T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.007133][  T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.015589][  T331] usb 1-1: Product: syz
[   99.019767][  T331] usb 1-1: Manufacturer: syz
[   99.024400][  T331] usb 1-1: SerialNumber: syz
[   99.073576][   T31] usb 5-1: Using ep0 maxpacket: 16
[   99.080224][   T31] usb 5-1: config 0 has an invalid interface number: 236 but max is 1
[   99.088547][   T31] usb 5-1: config 0 has an invalid interface number: 129 but max is 1
[   99.097151][   T31] usb 5-1: config 0 has no interface number 0
[   99.103250][   T31] usb 5-1: config 0 has no interface number 1
[   99.109406][   T31] usb 5-1: config 0 interface 236 has no altsetting 0
[   99.116213][   T31] usb 5-1: config 0 interface 129 has no altsetting 0
[   99.124406][   T31] usb 5-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d
[   99.133682][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.141781][   T31] usb 5-1: Product: syz
[   99.145963][   T31] usb 5-1: Manufacturer: syz
[   99.150589][   T31] usb 5-1: SerialNumber: syz
[   99.155823][   T31] usb 5-1: config 0 descriptor??
[   99.252905][ T5145] netlink: 'syz.1.1586': attribute type 5 has an invalid length.
[   99.293727][  T699] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   99.309421][   T36] audit: type=1400 audit(1761666771.286:747): avc:  denied  { bind } for  pid=5147 comm="syz.1.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   99.341055][ T5150] 9pnet: Could not find request transport: xen
[   99.418629][   T31] usb 5-1: selecting invalid altsetting 0
[   99.424801][   T31] usb 5-1: Found UVC 2.26 device syz (1ace:e9b2)
[   99.431159][   T31] usb 5-1: No valid video chain found.
[   99.437650][   T31] usb 5-1: USB disconnect, device number 9
[   99.443745][  T699] usb 6-1: Using ep0 maxpacket: 16
[   99.450185][  T699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.460514][  T699] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.474290][  T699] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.483448][  T699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.491482][  T699] usb 6-1: Product: syz
[   99.495730][  T699] usb 6-1: Manufacturer: syz
[   99.500506][  T699] usb 6-1: SerialNumber: syz
[   99.708930][  T699] usb 6-1: 0:2 : does not exist
[   99.715579][  T699] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   99.726692][  T699] usb 6-1: USB disconnect, device number 6
[  100.000709][ T5159] /dev/rnullb0: Can't open blockdev
[  100.038116][  T331] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  100.044699][  T331] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  100.052097][  T331] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  100.221144][ T5162] rust_binder: Write failure EINVAL in pid:166
[  100.239144][  T331] cdc_ncm 1-1:1.0: setting tx_max = 184
[  100.256322][  T331] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  100.270104][  T331] usb 1-1: USB disconnect, device number 4
[  100.277224][  T331] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  100.327281][   T36] audit: type=1400 audit(1761666772.305:748): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  100.419542][ T5180] incfs: Error accessing: ./file0.
[  100.424720][ T5180] incfs: mount failed -20
[  100.504051][  T699] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  100.656575][  T699] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  100.665746][  T699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.673718][  T699] usb 6-1: Product: syz
[  100.677894][  T699] usb 6-1: Manufacturer: syz
[  100.682480][  T699] usb 6-1: SerialNumber: syz
[  100.779479][ T5184] /dev/rnullb0: Can't open blockdev
[  100.836813][ T5194] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  100.845547][ T5194] rust_binder: Write failure EINVAL in pid:183
[  100.877597][   T36] audit: type=1400 audit(1761666772.855:749): avc:  denied  { append } for  pid=5198 comm="syz.4.1606" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  100.895146][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.924318][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.933443][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.942208][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.960930][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.970920][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.987190][   T31] usb 6-1: USB disconnect, device number 7
[  101.016362][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.027581][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.044247][  T699] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  101.205300][  T699] usb 1-1: Using ep0 maxpacket: 16
[  101.211577][  T699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.225396][  T699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.237585][  T699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.250600][  T699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.263140][  T699] usb 1-1: Product: syz
[  101.267547][  T699] usb 1-1: Manufacturer: syz
[  101.272161][  T699] usb 1-1: SerialNumber: syz
[  101.334211][   T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  101.352159][   T36] audit: type=1400 audit(1761666773.325:750): avc:  denied  { read append } for  pid=5213 comm="syz.4.1609" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  101.389090][   T36] audit: type=1400 audit(1761666773.325:751): avc:  denied  { open } for  pid=5213 comm="syz.4.1609" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  101.474261][   T31] usb 6-1: device descriptor read/64, error -71
[  101.484180][  T699] usb 1-1: 0:2 : does not exist
[  101.491158][  T699] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  101.502725][  T699] usb 1-1: USB disconnect, device number 5
[  101.517799][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  101.714360][   T31] usb 6-1: device descriptor read/64, error -71
[  101.974565][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  102.017324][ T5227] 9pnet_fd: Insufficient options for proto=fd
[  102.033081][ T5229] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  102.033104][ T5229] rust_binder: Error while translating object.
[  102.034434][  T330] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  102.043881][ T5229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  102.057531][ T5229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[  102.067464][ T5230] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.083260][ T5231] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  102.083281][ T5231] rust_binder: Error while translating object.
[  102.093862][ T5231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  102.100093][ T5231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[  102.104426][   T31] usb 6-1: device descriptor read/64, error -71
[  102.182356][ T5249] rust_binder: Error in use_page_slow: ESRCH
[  102.182369][ T5249] rust_binder: use_range failure ESRCH
[  102.188419][ T5249] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[  102.193951][ T5249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  102.201725][ T5249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99
[  102.221128][  T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  102.241786][  T330] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  102.250973][  T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.264075][  T330] usb 5-1: config 0 descriptor??
[  102.274543][ T5219] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  102.287516][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'.
[  102.312192][ T5261] TCP: TCP_TX_DELAY enabled
[  102.384534][   T31] usb 6-1: device descriptor read/64, error -71
[  102.504617][   T31] usb usb6-port1: attempt power cycle
[  102.555072][  T486] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.685868][  T330] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0
[  102.692688][  T330] kone 0003:1E7D:2CED.0005: item fetching failed at offset 4/5
[  102.700548][  T330] kone 0003:1E7D:2CED.0005: parse failed
[  102.704563][  T486] usb 1-1: Using ep0 maxpacket: 32
[  102.706366][  T330] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22
[  102.712498][  T486] usb 1-1: config 1 has an invalid interface number: 232 but max is 0
[  102.728013][  T486] usb 1-1: config 1 has no interface number 0
[  102.734088][  T486] usb 1-1: config 1 interface 232 has no altsetting 0
[  102.742324][  T486] usb 1-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5
[  102.751413][  T486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.759429][  T486] usb 1-1: Product: syz
[  102.763592][  T486] usb 1-1: Manufacturer: syz
[  102.768200][  T486] usb 1-1: SerialNumber: syz
[  102.844643][   T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  102.865829][   T31] usb 6-1: device descriptor read/8, error -71
[  102.890492][ T5219] 9pnet_fd: Insufficient options for proto=fd
[  102.897471][  T330] usb 5-1: USB disconnect, device number 10
[  102.975322][  T486] usb 1-1: Found UVC 0.00 device syz (174f:8a34)
[  102.981734][  T486] usb 1-1: No valid video chain found.
[  102.995802][   T31] usb 6-1: device descriptor read/8, error -71
[  103.179479][  T330] usb 1-1: USB disconnect, device number 6
[  103.234757][   T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  103.255750][   T31] usb 6-1: device descriptor read/8, error -71
[  103.385812][   T31] usb 6-1: device descriptor read/8, error -71
[  103.434591][   T36] audit: type=1400 audit(1761666775.405:752): avc:  denied  { ioctl } for  pid=5264 comm="syz.4.1626" path="socket:[22055]" dev="sockfs" ino=22055 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  103.494930][   T31] usb usb6-port1: unable to enumerate USB device
[  103.964294][   T36] audit: type=1400 audit(1761666775.934:754): avc:  denied  { accept } for  pid=5271 comm="syz.4.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  103.983649][   T36] audit: type=1400 audit(1761666775.934:753): avc:  denied  { remount } for  pid=5274 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  103.983839][ T5279] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  104.015819][ T5281] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.036929][   T36] audit: type=1400 audit(1761666776.014:755): avc:  denied  { ioctl } for  pid=5285 comm="syz.4.1634" path="socket:[22151]" dev="sockfs" ino=22151 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  104.063827][ T5281] overlayfs: failed to resolve '�q�Y�3aK': -2
[  104.091109][ T5290] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1635'.
[  104.145474][   T36] audit: type=1400 audit(1761666776.124:756): avc:  denied  { setopt } for  pid=5297 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  104.150358][ T5298] /dev/rnullb0: Can't open blockdev
[  104.185064][   T36] audit: type=1400 audit(1761666776.154:757): avc:  denied  { ioctl } for  pid=5297 comm="syz.0.1638" path="socket:[21360]" dev="sockfs" ino=21360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  104.228703][ T5302] rust_binder: Got transaction with invalid offset.
[  104.228742][ T5302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  104.235524][ T5302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[  104.281670][ T5316] binder: Bad value for 'max'
[  104.335636][ T5327] rust_binder: Write failure EFAULT in pid:150
[  104.425019][   T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  104.598509][   T31] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  104.603083][ T5351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  104.609768][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.637791][   T31] usb 6-1: Product: syz
[  104.638772][ T5363] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  104.641982][   T31] usb 6-1: Manufacturer: syz
[  104.642000][   T31] usb 6-1: SerialNumber: syz
[  104.817697][ T5368] 9p: Unknown Cache mode or invalid value mbinderfs/binder1
[  105.038083][ T5378] rust_binder: Failed copying remainder into alloc: EFAULT
[  105.038101][ T5378] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  105.045524][ T5378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  105.053784][ T5378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:189
[  105.697166][ T5387] /dev/rnullb0: Can't open blockdev
[  105.869496][ T5393] x_tables: duplicate entry at hook 1
[  105.886045][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  105.886062][   T36] audit: type=1400 audit(1761666777.864:761): avc:  denied  { read } for  pid=5394 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  105.969390][ T5401] rust_binder: 255: no such ref 3
[  105.974623][ T5401] rust_binder: 255: no such ref 1
[  105.979960][ T5401] rust_binder: Write failure EFAULT in pid:255
[  105.991413][ T5403] rust_binder: Error while translating object.
[  105.997674][ T5403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.003857][ T5403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257
[  106.375409][    T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  106.536561][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  106.547502][    T9] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  106.556546][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.565155][    T9] usb 5-1: config 0 descriptor??
[  106.570405][ T5410] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  106.783441][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  106.789470][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  106.798227][    T9] usb 5-1: USB disconnect, device number 11
[  106.853369][ T5420] rust_binder: Failed copying remainder into alloc: EFAULT
[  106.853394][ T5420] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  106.860866][ T5420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  106.869500][ T5420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:269
[  107.026022][   T31] usb 6-1: USB disconnect, device number 12
[  107.039240][ T5424] rust_binder: Write failure EFAULT in pid:187
[  107.053418][   T36] audit: type=1400 audit(1761666779.024:762): avc:  denied  { ioctl } for  pid=5425 comm="syz.5.1682" path="/dev/ttynull" dev="devtmpfs" ino=29 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  107.061941][ T5426] 9pnet_fd: Insufficient options for proto=fd
[  107.088356][  T667] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  107.099594][ T5426] binder: Unknown parameter '0xffffffffffffffff'
[  107.102072][   T36] audit: type=1400 audit(1761666779.044:763): avc:  denied  { ioctl } for  pid=5425 comm="syz.5.1682" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  107.174768][ T5428] netlink: 'syz.5.1683': attribute type 12 has an invalid length.
[  107.193655][   T36] audit: type=1400 audit(1761666779.164:764): avc:  denied  { create } for  pid=5429 comm="syz.5.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[  107.223184][   T36] audit: type=1400 audit(1761666779.194:765): avc:  denied  { append } for  pid=5433 comm="syz.5.1686" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  107.265582][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  107.286671][  T667] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  107.299055][  T667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.309576][  T667] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  107.324244][  T667] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  107.333320][  T667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.341472][  T667] usb 1-1: Product: syz
[  107.345652][  T667] usb 1-1: Manufacturer: syz
[  107.350336][  T667] usb 1-1: SerialNumber: syz
[  107.356087][  T667] usb 1-1: config 0 descriptor??
[  107.362560][  T667] usb-storage 1-1:0.0: USB Mass Storage device detected
[  107.371173][  T667] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  107.416260][   T36] audit: type=1400 audit(1761666779.394:766): avc:  denied  { write } for  pid=5443 comm="syz.5.1688" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  107.440451][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.451974][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.461769][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  107.470838][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.478991][    T9] usb 5-1: SerialNumber: syz
[  107.564718][ T5418] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  107.571963][ T5418] rust_binder: Write failure EINVAL in pid:198
[  107.572321][  T330] usb 1-1: USB disconnect, device number 7
[  107.731946][    T9] usb 5-1: 0:2 : does not exist
[  107.740211][    T9] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  107.751285][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  107.761793][    T9] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5)
[  107.771099][    T9] usb 5-1: USB disconnect, device number 12
[  107.792264][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  107.835656][   T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  107.985701][   T31] usb 6-1: Using ep0 maxpacket: 16
[  107.991902][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.002812][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.012569][   T31] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  108.021616][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.030153][   T31] usb 6-1: config 0 descriptor??
[  108.280856][ T5463] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.340961][ T5464] rust_binder: Error in use_page_slow: ESRCH
[  108.340985][ T5464] rust_binder: use_range failure ESRCH
[  108.347075][ T5464] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  108.352639][ T5464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  108.360705][ T5464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:273
[  108.443660][   T31] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0
[  108.463242][   T31] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0
[  108.471308][   T31] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0
[  108.484790][   T31] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  108.509605][ T5472] netlink: 'syz.4.1696': attribute type 4 has an invalid length.
[  108.519727][ T5472] 9pnet_fd: Insufficient options for proto=fd
[  108.551759][ T5476] rust_binder: Error while translating object.
[  108.551803][ T5476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  108.558218][ T5476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283
[  108.663876][   T36] audit: type=1400 audit(1761666780.634:767): avc:  denied  { mount } for  pid=5446 comm="syz.5.1689" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  108.696973][   T31] usb 6-1: USB disconnect, device number 13
[  108.845191][   T36] audit: type=1400 audit(1761666780.814:768): avc:  denied  { mount } for  pid=5487 comm="syz.4.1700" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  108.866873][   T36] audit: type=1400 audit(1761666780.824:769): avc:  denied  { watch watch_reads } for  pid=5487 comm="syz.4.1700" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  108.889776][ T5488] rust_binder: Write failure EINVAL in pid:295
[  108.998175][ T5492] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1702'.
[  109.117529][ T5493] /dev/rnullb0: Can't open blockdev
[  109.201659][   T36] audit: type=1400 audit(1761666781.173:770): avc:  denied  { unmount } for  pid=4162 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  109.445929][  T667] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  109.595957][  T667] usb 6-1: Using ep0 maxpacket: 16
[  109.602125][  T667] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  109.610332][  T667] usb 6-1: config 0 has no interface number 0
[  109.616440][  T667] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  109.626358][  T667] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  109.637941][  T667] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  109.647014][  T667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.654999][  T667] usb 6-1: Product: syz
[  109.659175][  T667] usb 6-1: Manufacturer: syz
[  109.663760][  T667] usb 6-1: SerialNumber: syz
[  109.668919][  T667] usb 6-1: config 0 descriptor??
[  109.674102][ T5496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  109.681344][ T5496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  109.847030][ T5500] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[  109.847051][ T5500] rust_binder: Error while translating object.
[  109.859330][ T5500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  109.865502][ T5500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303
[  109.890231][ T5496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  109.906637][ T5496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  110.166782][  T667] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  110.176989][  T667] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[  110.186818][  T667] asix 6-1:0.251: probe with driver asix failed with error -5
[  110.226090][    T9] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  110.371273][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1703'.
[  110.380285][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  110.506135][    T9] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  110.656088][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  110.661519][    T9] usb usb5-port1: attempt power cycle
[  111.006170][    T9] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  111.026638][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  111.156223][    T9] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  111.176546][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  111.181981][    T9] usb usb5-port1: unable to enumerate USB device
[  111.804928][   T36] audit: type=1400 audit(1761666783.773:771): avc:  denied  { attach_queue } for  pid=5516 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  111.825122][ T5517] netlink: 'syz.0.1710': attribute type 4 has an invalid length.
[  111.833416][ T5517] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  111.833490][ T5517] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false
[  111.867060][   T36] audit: type=1400 audit(1761666783.843:772): avc:  granted  { setsecparam } for  pid=5519 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  112.222549][  T330] usb 6-1: USB disconnect, device number 14
[  112.237099][ T5523] rust_binder: Error while translating object.
[  112.237118][ T5523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  112.243346][ T5523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:213
[  112.397402][ T5536] netlink: 'syz.5.1717': attribute type 1 has an invalid length.
[  112.517271][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1719'.
[  112.526584][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1719'.
[  112.536002][ T5544] 9pnet: Unknown protocol version 9ݠ51IS��10.u
[  112.724991][   T36] audit: type=1400 audit(1761666784.693:773): avc:  denied  { execute } for  pid=5547 comm="syz.0.1720" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  113.010699][ T5564] netlink: 'syz.4.1724': attribute type 4 has an invalid length.
[  113.019631][ T5564] netlink: 'syz.4.1724': attribute type 4 has an invalid length.
[  113.031191][   T36] audit: type=1400 audit(1761666785.003:774): avc:  denied  { accept } for  pid=5563 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.062406][ T5566] rust_binder: Error while translating object.
[  113.062456][ T5566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  113.068741][ T5566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:244
[  113.146444][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  113.189465][   T36] audit: type=1400 audit(1761666785.163:775): avc:  denied  { listen } for  pid=5578 comm="syz.4.1729" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  113.229344][ T5579] rust_binder: Error while translating object.
[  113.229401][ T5579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  113.235580][ T5579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:325
[  113.313218][ T5594] .N: renamed from veth0_to_bond (while UP)
[  113.328421][    T9] usb 1-1: Using ep0 maxpacket: 32
[  113.335636][    T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  113.345356][    T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  113.355799][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.366449][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.375520][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.383770][    T9] usb 1-1: Product: ॆ䩶⅝悟퓊퍌嵒촶ፗ諡禮ꢇ뜑뗼꣇픟꼍狳槬儛⮾
[  113.393828][    T9] usb 1-1: Manufacturer: ࠠ
[  113.398671][    T9] usb 1-1: SerialNumber: ࠧ
[  113.406637][   T36] audit: type=1400 audit(1761666785.383:776): avc:  denied  { mounton } for  pid=5587 comm="syz.5.1732" path="/86/file0/file2" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1
[  113.811756][    T9] usb 1-1: 0:2 : does not exist
[  113.818422][    T9] usb 1-1: USB disconnect, device number 8
[  114.220932][ T5668] sock: sock_set_timeout: `syz.5.1759' (pid 5668) tries to set negative timeout
[  114.399753][   T36] audit: type=1400 audit(1761666786.373:777): avc:  denied  { create } for  pid=5675 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  114.420162][   T36] audit: type=1400 audit(1761666786.373:778): avc:  denied  { create } for  pid=5675 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  114.476616][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  114.647439][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.665427][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.677753][    T9] usb 6-1: config 1 interface 1 has no altsetting 0
[  114.687155][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.696298][    T9] usb 6-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3
[  114.708712][    T9] usb 6-1: Product: syz
[  114.713106][    T9] usb 6-1: Manufacturer: syz
[  114.717959][    T9] usb 6-1: SerialNumber: syz
[  114.723193][ T5690] overlayfs: conflicting options: userxattr,metacopy=on
[  114.732084][    T9] cdc_ncm 6-1:1.0: skipping garbage
[  114.737524][    T9] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing
[  114.745190][    T9] cdc_ncm 6-1:1.0: bind() failure
[  114.931877][ T5668] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  114.939108][ T5668] rust_binder: Write failure EINVAL in pid:261
[  115.333157][ T5702] tipc: Failed to remove unknown binding: 66,1,1/0:2584036876/2584036878
[  115.348621][ T5702] tipc: Failed to remove unknown binding: 66,1,1/0:2584036876/2584036878
[  115.357129][ T5702] tipc: Failed to remove unknown binding: 66,1,1/0:2584036876/2584036878
[  115.391215][ T5709] netlink: 'syz.4.1773': attribute type 46 has an invalid length.
[  115.409141][   T36] audit: type=1400 audit(1761667043.387:779): avc:  denied  { bind } for  pid=5710 comm="syz.4.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.429772][   T36] audit: type=1400 audit(1761667043.387:780): avc:  denied  { setopt } for  pid=5710 comm="syz.4.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.258193][ T5715] fuse: Bad value for 'group_id'
[  116.267601][ T5715] fuse: Bad value for 'group_id'
[  116.329528][ T5723] netlink: 'syz.4.1780': attribute type 1 has an invalid length.
[  116.341228][ T5723] tipc: Started in network mode
[  116.346194][ T5723] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  116.355791][ T5723] tipc: Enabled bearer <udp:syz1>, priority 10
[  116.366423][ T5723] syz.4.1780 (5723): attempted to duplicate a private mapping with mremap.  This is not supported.
[  116.408238][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.415287][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.422533][ T5724] bridge_slave_0: entered allmulticast mode
[  116.428967][ T5724] bridge_slave_0: entered promiscuous mode
[  116.435498][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.442594][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.450154][ T5724] bridge_slave_1: entered allmulticast mode
[  116.456462][ T5724] bridge_slave_1: entered promiscuous mode
[  116.517785][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.524900][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.532265][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.539329][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.546831][ T5682] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  116.568075][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.575631][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.586917][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.594000][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.604344][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.611456][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.644368][ T5768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5768 comm=syz.0.1793
[  116.651808][ T5724] veth0_vlan: entered promiscuous mode
[  116.673311][ T5724] veth1_macvtap: entered promiscuous mode
[  116.741254][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.741274][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.747775][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.754221][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.760908][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.767555][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.774045][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.780683][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.787843][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.794535][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.801131][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.807644][ T5781] rust_binder: Failed to allocate buffer. len:72, is_oneway:true
[  116.807959][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.822136][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.828611][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.835033][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.841544][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.847999][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.854418][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.860903][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.867372][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.873800][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.880399][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.886964][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.893579][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.900495][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.907012][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.913503][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.920086][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.926607][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.933313][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.939921][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.946566][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.946729][  T486] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  116.953118][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.966969][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.973398][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.979904][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.986327][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.992925][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.999461][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.005930][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.012622][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.019270][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.025688][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.032286][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.038773][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.045233][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.051820][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.058292][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.064710][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.071206][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.077668][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.084228][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.090708][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.097169][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.103577][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.110033][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.116666][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.117960][  T486] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  117.123309][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.131203][  T486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.138968][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.146816][  T486] usb 1-1: config 0 descriptor??
[  117.153513][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.164775][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.171247][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.177735][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.184238][ T5780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.204518][ T5785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.208553][    T9] usb 6-1: USB disconnect, device number 15
[  117.211123][ T5786] rust_binder: 8: no such ref 0
[  117.228727][ T5786] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  117.235784][ T5786] rust_binder: 8: no such ref 2
[  117.240840][ T5786] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  117.258283][ T5788] SELinux: failed to load policy
[  117.272504][ T5788] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  117.280055][ T5788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11
[  117.299036][ T5790] netlink: 'syz.5.1800': attribute type 27 has an invalid length.
[  117.299391][ T5792] loop5: detected capacity change from 0 to 7
[  117.327622][ T5790] rust_binder: Write failure EFAULT in pid:264
[  117.366772][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  117.366789][   T36] audit: type=1400 audit(1761667045.337:786): avc:  denied  { module_load } for  pid=5782 comm="syz.4.1797" path="/bus" dev="ramfs" ino=25345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1
[  117.367094][ T5783] Invalid ELF header magic: != ELF
[  117.436992][ T5796] Invalid logical block size (1)
[  117.466912][   T45] tipc: Node number set to 4269801494
[  117.534767][ T5803] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526
[  117.541389][ T4642] Bluetooth: hci0: Frame reassembly failed (-84)
[  117.583124][   T36] audit: type=1400 audit(1761667045.557:787): avc:  denied  { bind } for  pid=5806 comm="syz.6.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  117.603013][   T36] audit: type=1400 audit(1761667045.567:788): avc:  denied  { append } for  pid=5800 comm="syz.5.1803" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.708714][ T5820] random: crng reseeded on system resumption
[  119.569979][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  119.580159][ T5683] Bluetooth: hci0: command 0x1003 tx timeout
[  119.586269][ T5682] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  119.586490][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0
[  119.626529][ T5775] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.627061][ T5775] rust_binder: Error while translating object.
[  119.633586][ T5775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  119.640143][ T5775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253
[  119.652674][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.671952][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9
[  119.684786][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.694840][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.708596][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.718871][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.729155][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.740973][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.751346][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.761423][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.774122][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.784329][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.794382][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.805959][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.816146][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.826409][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.839318][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.850418][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.860813][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.872303][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.882634][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.892833][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.904227][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.915087][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.925197][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.936467][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.946727][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.956901][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.968253][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.978435][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  119.988510][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  119.999830][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.009991][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.020037][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.031462][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.041631][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.051650][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.062955][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.073202][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.083320][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.094614][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.105036][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.115113][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.126367][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.136530][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.146552][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.157852][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.168068][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.183947][   T36] audit: type=1400 audit(1761667048.157:789): avc:  denied  { unmount } for  pid=4803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  120.191955][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.226345][ T5886] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  120.226367][ T5886] rust_binder: Error while translating object.
[  120.233666][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.238364][ T5886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.241593][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.251327][ T5886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290
[  120.260632][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.291372][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.302275][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.312335][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.324721][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.334932][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.345025][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.358407][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.371322][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.381630][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.384508][ T5894] rust_binder: 293: no such ref 3
[  120.393168][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.396808][ T5894] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  120.406796][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.413975][ T5894] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  120.423663][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.431625][ T5894] rust_binder: Write failure EFAULT in pid:293
[  120.445296][ T5894] rust_binder: 293: no such ref 1
[  120.448529][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.471549][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.484761][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.497575][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.507893][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.518005][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.533628][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.544583][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.554953][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.566610][ T5908] /dev/rnullb0: Can't open blockdev
[  120.569719][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.582084][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.592166][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.603463][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.613701][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.623924][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.635341][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.645650][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.655791][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.667040][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.677210][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.687275][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.698574][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.708831][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.718879][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.730148][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.740271][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  120.750303][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access
[  120.761546][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  120.772288][  T486] asix 1-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5)
[  120.782286][  T486] asix 1-1:0.0: probe with driver asix failed with error -5
[  120.792012][  T486] usb 1-1: USB disconnect, device number 9
[  120.824077][ T5928] incfs: Options parsing error. -22
[  120.829414][ T5928] incfs: mount failed -22
[  120.923382][ T5935] /dev/rnullb0: Can't open blockdev
[  120.949790][ T5939] rust_binder: validate_parent_fixup: fixup_min_offset=68, parent_offset=37
[  120.949808][ T5939] rust_binder: Error while translating object.
[  120.958555][ T5939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.964790][ T5939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[  121.000046][   T36] audit: type=1400 audit(1761667048.977:790): avc:  denied  { create } for  pid=5942 comm="syz.6.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  121.014535][ T5945] /dev/rnullb0: Can't open blockdev
[  121.050159][ T5947] rust_binder: Write failure EINVAL in pid:57
[  121.059063][ T5949] /dev/rnullb0: Can't open blockdev
[  121.092498][ T5951] rust_binder: 61: no such ref 3
[  121.097564][ T5951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61
[  121.127951][ T5958] rust_binder: Failed copying remainder into alloc: EFAULT
[  121.137165][ T5958] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  121.144439][ T5958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  121.153005][ T5958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:260
[  121.200333][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1860'.
[  121.218771][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1860'.
[  121.258667][   T36] audit: type=1400 audit(1761667049.237:791): avc:  denied  { mounton } for  pid=5976 comm="syz.6.1863" path="/24/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[  121.283281][ T5979] /dev/rnullb0: Can't open blockdev
[  121.288784][ T5980] /dev/rnullb0: Can't open blockdev
[  121.328444][ T5982] rust_binder: Error while translating object.
[  121.328473][ T5982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  121.334717][ T5982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267
[  121.410075][   T36] audit: type=1400 audit(1761667049.387:792): avc:  denied  { write } for  pid=5986 comm="syz.5.1867" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  121.418304][ T5987] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  121.419375][   T36] audit: type=1400 audit(1761667049.387:793): avc:  denied  { open } for  pid=5986 comm="syz.5.1867" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  121.439772][ T5987] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  121.439802][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.5.1867 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  121.439826][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  121.439838][ T5987] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  121.453839][   T36] audit: type=1400 audit(1761667049.387:794): avc:  denied  { read } for  pid=5986 comm="syz.5.1867" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  121.473657][ T5987] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24
[  121.473680][ T5987] RSP: 0018:ffffc9000ef37820 EFLAGS: 00010202
[  121.473698][ T5987] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88813d531300
[  121.473712][ T5987] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000
[  121.473724][ T5987] RBP: ffffc9000ef37a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448
[  121.473736][ T5987] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000
[  121.473748][ T5987] R13: 7fffffffffff0000 R14: ffff88811eb75010 R15: ffff88811eb75000
[  121.473761][ T5987] FS:  00007f57e824a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  121.473776][ T5987] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.473786][ T5987] CR2: 0000200000001900 CR3: 000000014ca9c000 CR4: 00000000003526b0
[  121.473802][ T5987] Call Trace:
[  121.473808][ T5987]  <TASK>
[  121.473820][ T5987]  ? __cfi_iter_file_splice_write+0x10/0x10
[  121.483481][   T36] audit: type=1400 audit(1761667049.437:795): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  121.493823][ T5987]  ? __kmalloc_noprof+0x271/0x530
[  121.493848][ T5987]  ? futex_wait_setup+0x1bc/0x260
[  121.493872][ T5987]  ? __kasan_check_write+0x18/0x20
[  121.668824][ T5987]  ? __cfi_iter_file_splice_write+0x10/0x10
[  121.674714][ T5987]  direct_splice_actor+0x279/0x4b0
[  121.679912][ T5987]  splice_direct_to_actor+0x4fb/0xbc0
[  121.685291][ T5987]  ? __cfi_direct_splice_actor+0x10/0x10
[  121.690918][ T5987]  ? __cfi_splice_direct_to_actor+0x10/0x10
[  121.696802][ T5987]  do_splice_direct+0x182/0x270
[  121.701643][ T5987]  ? __cfi_do_splice_direct+0x10/0x10
[  121.707005][ T5987]  ? __cfi_direct_file_splice_eof+0x10/0x10
[  121.712886][ T5987]  ? security_file_permission+0x2e/0xc0
[  121.718424][ T5987]  ? rw_verify_area+0xac/0x230
[  121.723184][ T5987]  do_sendfile+0x5c8/0xfb0
[  121.727584][ T5987]  ? vfs_writev+0xcf0/0xcf0
[  121.732072][ T5987]  ? __se_sys_futex+0x28f/0x300
[  121.736914][ T5987]  __x64_sys_sendfile64+0x193/0x1f0
[  121.742117][ T5987]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[  121.747842][ T5987]  ? switch_fpu_return+0x12/0x20
[  121.752775][ T5987]  x64_sys_call+0xa26/0x2ee0
[  121.757354][ T5987]  do_syscall_64+0x58/0xf0
[  121.761768][ T5987]  ? clear_bhb_loop+0x50/0xa0
[  121.766428][ T5987]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.772309][ T5987] RIP: 0033:0x7f57e738efc9
[  121.776718][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.796314][ T5987] RSP: 002b:00007f57e824a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  121.804980][ T5987] RAX: ffffffffffffffda RBX: 00007f57e75e5fa0 RCX: 00007f57e738efc9
[  121.812943][ T5987] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009
[  121.820911][ T5987] RBP: 00007f57e7411f91 R08: 0000000000000000 R09: 0000000000000000
[  121.828892][ T5987] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000
[  121.836938][ T5987] R13: 00007f57e75e6038 R14: 00007f57e75e5fa0 R15: 00007ffdcbf77d48
[  121.844920][ T5987]  </TASK>
[  121.847937][ T5987] Modules linked in:
[  121.852527][ T5987] ---[ end trace 0000000000000000 ]---
[  121.859573][ T5987] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  121.860187][ T5988] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  121.865866][ T5988] rust_binder: Error while translating object.
[  121.867572][ T5987] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24
[  121.874646][ T5988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  121.881089][ T5987] RSP: 0018:ffffc9000ef37820 EFLAGS: 00010202
[  121.900833][ T5988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300
[  121.911212][ T5987] 
[  121.927930][ T5987] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88813d531300
[  121.935924][ T5987] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000
[  121.948539][ T5987] RBP: ffffc9000ef37a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448
[  121.956562][ T5987] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000
[  121.964717][ T5987] R13: 7fffffffffff0000 R14: ffff88811eb75010 R15: ffff88811eb75000
[  121.972822][ T5987] FS:  00007f57e824a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  121.980727][ T5990] rust_binder: Error while translating object.
[  121.981959][ T5990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  121.987275][ T5987] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.988510][ T5990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:77
[  121.997554][ T5987] CR2: 0000200000290000 CR3: 000000014ca9c000 CR4: 00000000003526b0
[  122.025503][ T5987] Kernel panic - not syncing: Fatal exception
[  122.031845][ T5987] Kernel Offset: disabled
[  122.036258][ T5987] Rebooting in 86400 seconds..