last executing test programs:

3m31.812025155s ago: executing program 2 (id=865):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x4})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"])
r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

3m31.640034678s ago: executing program 2 (id=868):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

3m31.50482901s ago: executing program 2 (id=872):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x2}, @exit_looper], 0xa0, 0x0, &(0x7f0000000180)="2c69987ec96f2eb48d52bea6989ec2b177f92d34ba396ec547383d69848ad54125af6322058894b88695ca7a33203f4395f763e17b5482f04a60c332a8c5244710eeb052ce6b91d767d57031512306d046b5b0813dbd6d858fe6585405fcc884469f1b381dc735b1b9aa33248e5ecc53efbbfc8f9c5efa003f8a253a262491e9a8d52bd8ee62ad66e7502d0ff49f3f526f12fd5875ed288639d31fa57ebe36a5"})
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x2, 0xf, 0x15c9, 0x1, @private1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x20, 0x7800, 0xac, 0x2}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b8, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

3m30.655266577s ago: executing program 2 (id=879):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x9, @none, 0xf800}, 0xe)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xd, 0x100010, r0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xd, 0x100010, r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3) (async)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tcp_mem(r4, &(0x7f0000000080)={0x7, 0x20, 0x103, 0x20, 0x4}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10a) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10a)
sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000003b00000829bd7000fddbdf25130000000800ab005f68f0263a26637f60d42b851e843c876af8f9c2ef226ca25b59682c928d3ad9eb55cf2ba285eeccf812049821655d775e3bee62a79d53ac32d73bf9f559d6a4ef55dfc7e260a6b1ddd0bbbcae15d92550a443896518822188862867efc86fd76a63de0140ecb382da2d4503ea41d278cfd792555fa40a123cdb12500e6a78a292da901756db491dfdb5f7a08fd9b200817419693e4045db321a1de8c42b37b122f27ec5c5e18f3ad037752c15036c97cebb39a80070f13f6936258f2f0cc444fd9d54dc0eb5861fbf92fc8dd3df56c6bdfcd36e86616c", @ANYRES32=r4, @ANYBLOB="260016800400568063ef4e1a45ed09a9a7dd5a2758674e1ae0047f1ef664158dc93fc65f54ed000075003c80bb273dc4dc0ce6d255461aec78e500eaef3c46c64dd6321232e6b6f89b4a003000857fc7a89e56f5671dfd8698fb03d6c317b61199de3f76c5f68fb3a8f1309bc24ddb91be7f0a27143409e8f6011ba02f5335c9165daa433d874c4801b1f1b3b03ef0153489df000004003a800400e580000000"], 0xbc}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000003b00000829bd7000fddbdf25130000000800ab005f68f0263a26637f60d42b851e843c876af8f9c2ef226ca25b59682c928d3ad9eb55cf2ba285eeccf812049821655d775e3bee62a79d53ac32d73bf9f559d6a4ef55dfc7e260a6b1ddd0bbbcae15d92550a443896518822188862867efc86fd76a63de0140ecb382da2d4503ea41d278cfd792555fa40a123cdb12500e6a78a292da901756db491dfdb5f7a08fd9b200817419693e4045db321a1de8c42b37b122f27ec5c5e18f3ad037752c15036c97cebb39a80070f13f6936258f2f0cc444fd9d54dc0eb5861fbf92fc8dd3df56c6bdfcd36e86616c", @ANYRES32=r4, @ANYBLOB="260016800400568063ef4e1a45ed09a9a7dd5a2758674e1ae0047f1ef664158dc93fc65f54ed000075003c80bb273dc4dc0ce6d255461aec78e500eaef3c46c64dd6321232e6b6f89b4a003000857fc7a89e56f5671dfd8698fb03d6c317b61199de3f76c5f68fb3a8f1309bc24ddb91be7f0a27143409e8f6011ba02f5335c9165daa433d874c4801b1f1b3b03ef0153489df000004003a800400e580000000"], 0xbc}}, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x24)
mkdir(0x0, 0x100)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file1\x00')
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x36)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

3m30.653831887s ago: executing program 2 (id=880):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1})
r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xa, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0xfc, 0xfe}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x7, 0x1, 0xff, 0x65}, 0x79, &(0x7f0000000180)={0x5, 0xf, 0x79, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x1, 0xe, 0x4, 0x5b}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4, 0x0, 0x2, [0x3f30, 0xff30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x9, 0xfc62}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x1, 0x0, 0x8}, @generic={0x32, 0x10, 0xa, "e64f6fb859a8f6ebd5c2b9f87438b541ee3744114bf1fef76858b21ddb37343af8ed53264b94f37a9c9d23317d4a87"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x4, 0xb, 0x1, 0x5}]}, 0x4, [{0xa1, &(0x7f0000000200)=@string={0xa1, 0x3, "a95da39f3dc15d8cba9d3e07fe6d51ff69086436faef31060f5d944463f63cec14a7f8251d7d8c539aa8cbd8e6acbbf76a6c233745257bfbb97ff7d7e60917ff75f87fe49c538294998527143e282dc1ceb39528b30642500f8a57ff77efe4394eb30294e5f666c57a182bd3dec172779f727d2efcf9fab3b07ee73569026da1f94d96bf551a97b145c19f016204c3fd19afcb869a909cb863ba48ef92571f"}}, {0xd6, &(0x7f0000000880)=ANY=[@ANYBLOB="d603cdcdab1b9b11588c5b4f85fa79f56c917ec8127b6e83bfa56c7c088ad9ca997feba02032ed7ebd78df59cc0e2ad510036a0eae084dc19e554a9f18a23cf4a532b61d925f007d933b0add9abce3a0f6c5e51296f10132664cf79096e55c0dfeec12b34321a0b5a55120f5045c28083c36a1d0580f86c8e793456808aaa9f1a62a7e6d45691c1d4aae24f4b42b22b4ce48742baba583ea0323c7510535fa229c3199a3468c23936d81bfc0cd0c4445379e9de1f76b4ea9bad5adc86545f8f85aca644482ac9e130ab926c316f69025c32e5a6ef806"]}, {0xf9, &(0x7f0000000980)=@string={0xf9, 0x3, "72ccf78b274c6df2bdd93d65d2e290a50101199cbf8335ea83fad0852dd70dcdc84c4097cf232b089edc2c97f9426db6b1d4831ed5a1d614b7bc5c3913f4f956b0eb5ede72526c31ac7750447c1964a627d5d4ea68f355d0a1f497bd50b498bed9398e7d952ac58e48fb49f49c097812bfd6aa16f29418189b707c53065086f0b86f8a554a41781eeb1b2e991bad36cadde0069eb6b6f4d7e875fc1914ee5a930f2d496e74fa3b2d0a290a2c62ff1bce3e565cd1f4869aa41b0b699b9a68d2d9ae5e998953890d35b88e6288633cc8348b1773dc61ad1ac61eb87daf89182c965644eea2da3edba354f70946f9ddab35b7446200bf015f"}}, {0xd5, &(0x7f0000000a80)=ANY=[@ANYBLOB="d5039ffd89b952e2a4cdbb5377eb845aaa57facb4801d16a3763c5d32622a47a561485e03e8132ae5f92936db893bd5daac89abd0077111ca31f896c179455ad421535fa8a1af42cf8d6324aefebb6eff8b95d9bea2337216987cc7b7c367565e6d3bac9288bd15ba04f662c5f27ce2bb1826613c8cf228027486f68523a595c52169c81d6523e491cc5552a015f043c8dac93abd676b3e87fc2dbc040316689b159c119b2d268b9d03736a295f71b637bf78ccdb45f1e571f7e776449db1277cccab849bbe6e0"]}]}) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0)
pidfd_getfd(r5, r3, 0x0) (async)
bind$bt_sco(r4, &(0x7f0000000000), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) (async)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x10000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0xff, 0xca}, {0xeeee0000, 0xe6e50002, 0x4, 0x0, 0x2, 0x8, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0x2a, 0x1, 0xff, 0x4, 0x80, 0x6, 0xf8}, {0x0, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8000000, 0x6}, {0x100000, 0x5}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xffff1000, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendto$packet(r3, &(0x7f0000000600)="05031600d30e15000180478803d5f5102c28", 0x12, 0x24008004, &(0x7f0000000140)={0x11, 0x6, r6, 0x1, 0x3}, 0x14)
pipe(&(0x7f0000001180)) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x60)
sendmmsg$inet6(r7, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @remote, 0xa}, 0x1c, 0x0}}], 0xd, 0x200c80c0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="4b354cd535e8c35ca810acd4025107f16b2646", 0x13}], 0x1}}], 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0}, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) (async)
recvmsg(r2, &(0x7f0000001100)={&(0x7f0000000b80)=@qipcrtr, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c00)=""/144, 0x90}, {&(0x7f0000000cc0)=""/163, 0xa3}, {&(0x7f0000000d80)=""/222, 0xde}, {&(0x7f0000000640)=""/24, 0x18}, {&(0x7f0000000700)=""/6, 0x6}, {&(0x7f0000000e80)=""/89, 0x59}, {&(0x7f0000000f00)=""/249, 0xf9}, {&(0x7f0000001000)=""/1, 0x1}], 0x8, &(0x7f00000010c0)=""/29, 0x1d}, 0x40000000) (async)
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}})

3m30.437410071s ago: executing program 2 (id=884):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={<r2=>0x0, 0x7, 0xfffffffeffffffff, 0x1})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={r2, 0x101, 0x8, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000)
sendfile(r3, r3, 0x0, 0x7e78a6f1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
fcntl$addseals(r3, 0x409, 0xc)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
fadvise64(r4, 0x3, 0x0, 0x4)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x7, 0xfffffffeffffffff, 0x1}) (async)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={r2, 0x101, 0x8, 0x1}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async)
ftruncate(r3, 0x80079a0) (async)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000) (async)
sendfile(r3, r3, 0x0, 0x7e78a6f1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
fcntl$addseals(r3, 0x409, 0xc) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async)
fadvise64(r4, 0x3, 0x0, 0x4) (async)

3m30.401784822s ago: executing program 32 (id=884):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={<r2=>0x0, 0x7, 0xfffffffeffffffff, 0x1})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={r2, 0x101, 0x8, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000)
sendfile(r3, r3, 0x0, 0x7e78a6f1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
fcntl$addseals(r3, 0x409, 0xc)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
fadvise64(r4, 0x3, 0x0, 0x4)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x7, 0xfffffffeffffffff, 0x1}) (async)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={r2, 0x101, 0x8, 0x1}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async)
ftruncate(r3, 0x80079a0) (async)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000) (async)
sendfile(r3, r3, 0x0, 0x7e78a6f1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
fcntl$addseals(r3, 0x409, 0xc) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async)
fadvise64(r4, 0x3, 0x0, 0x4) (async)

3m29.402767841s ago: executing program 1 (id=898):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0156000000000000014d0f000900082303"])
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m29.262177354s ago: executing program 1 (id=899):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r4 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="f5eff7972545b7e24d1f2db96a7a88878c1f0c1a0222bb1af4715d6c04bd2f211a6a3fe4197266dd27e23989c8"])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m29.040026528s ago: executing program 1 (id=903):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00')
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200400c1)
socket$key(0xf, 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)={0x66666666666689b})

3m28.978311519s ago: executing program 1 (id=905):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd303, 0xff, 0xda})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r4, &(0x7f0000002c00)=""/4113, 0x1011, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$KDMKTONE(r5, 0x4b30, 0x7)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x204)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000080)=0x2)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000040)={0x11, 0x9, 0x100, 0x9, 0x102, 0x10004, 0x6, 0x66, 0x1})
close_range(r1, 0xffffffffffffffff, 0x0)

3m27.691023524s ago: executing program 1 (id=912):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r3, 0xffff) (async)
fcntl$addseals(r3, 0x409, 0x7) (async)
r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000440)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x7, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa5, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc9, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
unshare(0x22020600) (async)
r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.events\x00', 0x5000000, 0x0)
readv(r7, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

3m27.552056587s ago: executing program 1 (id=913):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0xffff0001)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
close_range(r0, 0xffffffffffffffff, 0x0)

3m27.551523907s ago: executing program 33 (id=913):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0xffff0001)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
close_range(r0, 0xffffffffffffffff, 0x0)

3m21.239997719s ago: executing program 4 (id=1024):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/127, 0x7f, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}, @increfs={0x40046304, 0x2}, @acquire], 0x0, 0x0, 0x0})

3m21.23948396s ago: executing program 4 (id=1025):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00')
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000440)={@fda={0x66646185, 0x6, 0x0, 0x40}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
chdir(&(0x7f0000001100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffff9, 0x10000, 0xfffffffd})

3m21.235611559s ago: executing program 4 (id=1026):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x9000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x10010, r0, 0xe5445000)
mlock(&(0x7f000002f000/0x2000)=nil, 0x2000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000339000/0x3000)=nil, 0x3000)
clock_gettime(0x6, &(0x7f0000000040))

3m21.21299756s ago: executing program 4 (id=1027):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x5, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x31, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000003, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x10000, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0xe, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x15, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x1, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x6]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[])
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020)

3m21.135870711s ago: executing program 4 (id=1028):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
getgroups(0x2, &(0x7f0000000000)=[0xee01, <r4=>0xffffffffffffffff])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(0x0, r6)
setregid(0xffffffffffffffff, r4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r10, 0xae9a) (async)
ioctl$KVM_NMI(r10, 0xae9a)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
dup3(r7, r3, 0x0) (async)
dup3(r7, r3, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x3}], 0xfffffffffffffe49, 0x1000000, 0x0}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x3}], 0xfffffffffffffe49, 0x1000000, 0x0})

3m21.135112052s ago: executing program 4 (id=1029):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', <r7=>0x0, 0x700, 0x40, 0x3, 0xfffffffb, {{0x23, 0x4, 0x1, 0x15, 0x8c, 0x2, 0x0, 0x2, 0x4, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x4c, 0xb9, 0x3, 0x7, [{@multicast2, 0x3}, {@private=0xa010101, 0x7}, {@local, 0x3}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x7fff}, {@private=0xa010101, 0x9}, {@private=0xa010100, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0x401}]}, @cipso={0x86, 0x2c, 0x3, [{0x0, 0xa, "368c6cfd6d2d7c0b"}, {0x0, 0x12, "8504a37afea041f15ce2f9b352e915f5"}, {0x0, 0xa, "d5b62c8fc25599f1"}]}]}}}}})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'gre0\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r8, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003120000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r12=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x4, r12}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x138, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@clear_death={0x400c6314, 0x3}], 0x0, 0x0, 0x0})

3m21.063425123s ago: executing program 34 (id=1029):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', <r7=>0x0, 0x700, 0x40, 0x3, 0xfffffffb, {{0x23, 0x4, 0x1, 0x15, 0x8c, 0x2, 0x0, 0x2, 0x4, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x4c, 0xb9, 0x3, 0x7, [{@multicast2, 0x3}, {@private=0xa010101, 0x7}, {@local, 0x3}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x7fff}, {@private=0xa010101, 0x9}, {@private=0xa010100, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0x401}]}, @cipso={0x86, 0x2c, 0x3, [{0x0, 0xa, "368c6cfd6d2d7c0b"}, {0x0, 0x12, "8504a37afea041f15ce2f9b352e915f5"}, {0x0, 0xa, "d5b62c8fc25599f1"}]}]}}}}})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'gre0\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r8, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003120000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r12=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x4, r12}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x138, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@clear_death={0x400c6314, 0x3}], 0x0, 0x0, 0x0})

3m2.878577525s ago: executing program 3 (id=1248):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r1)
setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "98d57be3ed16545bdb5c49382bd7ba5dee27b97a"}, 0x15, 0x2)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00')
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000140))
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r1}, 0x3ff, 0xffffffffffffffff, 0x2})
mount$fuseblk(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

3m2.807758697s ago: executing program 3 (id=1249):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getpgrp(0xffffffffffffffff)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0xb869b95f5f1e311b)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0x200, 0x5, 0x590f})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0x8)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

3m2.304168756s ago: executing program 3 (id=1264):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x26}) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
write(r1, &(0x7f0000000400)="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", 0x1f000)

3m2.295538747s ago: executing program 3 (id=1267):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r2, &(0x7f00000000c0)={0x38c0000000, 0x2, 0x9, 0x49, 0x100000001, 0x1ff, 0x0, 0x3, 0x101})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x81000)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0xb, 0x6})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"})

3m2.242805748s ago: executing program 3 (id=1269):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$binder(&(0x7f00009d8000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
mmap(&(0x7f00009db000/0x1000)=nil, 0x1000, 0x200000a, 0x30, r0, 0xcd1c2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'dummy0\x00', 0x1000})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001c40)=0x1)
ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)=0xa33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9d952f1b12e98902ed007907001175f37500000000"], 0xffffff04)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000303010100000000000000007d0071ac90201368918a9903a41962b8032606ffffff000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xfe254f5e08293205)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_INIT(r6, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d65, 0x6c2, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000b80), 0x40, &(0x7f0000000580)=ANY=[])
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000480)={'ip6erspan0\x00'})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x66)

3m2.239223288s ago: executing program 3 (id=1271):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x8c, 0xbd, 0x7f, 0x20, 0x499, 0xcdf4, 0x78ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x10, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xff, 0x6, 0xd2, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x839a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x91, 0x81}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x9, 0x9, 0x5}}]}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000206a05ba00400005020301090224000101082009090400840103010006092181000701224e07090581034000fe0003"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xb, 0x1, 0x1, 0xff, 0x6}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x8, 0x8, 0xb}]}, 0x3, [{0xab, &(0x7f0000000140)=@string={0xab, 0x3, "84e2d9f09d625759b80a3d75caec7c60b43d4e42bee095610584f3c73c6e151119ca62ebfa3a7a59c33d803f1eb71a33ce2df466b9d0215164c794351ddc455ee7b56a8f21882955e52e323992bd57fb7a34e8ff35fefba58d9bebca503eb96b015dae8a40a4c4e5985f5f3043b28f32b7956febc97f62699024ae3591c0336dee97664e3ef4b001012a8880503b480cba7fdb0a95dfc54efeda017fb8a398577855953489e24f3280"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}]})
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x2b, 0x0, 0x101}})
close_range(r0, 0xffffffffffffffff, 0x0)

2m46.887156405s ago: executing program 35 (id=1271):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x8c, 0xbd, 0x7f, 0x20, 0x499, 0xcdf4, 0x78ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x10, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xff, 0x6, 0xd2, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x839a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x91, 0x81}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x9, 0x9, 0x5}}]}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000206a05ba00400005020301090224000101082009090400840103010006092181000701224e07090581034000fe0003"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xb, 0x1, 0x1, 0xff, 0x6}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x8, 0x8, 0xb}]}, 0x3, [{0xab, &(0x7f0000000140)=@string={0xab, 0x3, "84e2d9f09d625759b80a3d75caec7c60b43d4e42bee095610584f3c73c6e151119ca62ebfa3a7a59c33d803f1eb71a33ce2df466b9d0215164c794351ddc455ee7b56a8f21882955e52e323992bd57fb7a34e8ff35fefba58d9bebca503eb96b015dae8a40a4c4e5985f5f3043b28f32b7956febc97f62699024ae3591c0336dee97664e3ef4b001012a8880503b480cba7fdb0a95dfc54efeda017fb8a398577855953489e24f3280"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}]})
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x2b, 0x0, 0x101}})
close_range(r0, 0xffffffffffffffff, 0x0)

1m44.332463507s ago: executing program 7 (id=1839):
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xffffffffffffffff)
setuid(0xee01)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m44.235866999s ago: executing program 7 (id=1840):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x5000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x5000, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x0, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x1, 0x4000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0x4c, 0xfc, 0x0, 0xf8, 0xe5}, {0x3000, 0x8092000, 0xe, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x8000000, 0x8000000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x8, 0x0, 0x2, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x7, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0x2, 0x10, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x4, 0x4000000000000009, 0x7]})
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000040)}, 0x3ff}], 0x1, 0x10003, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="eba4615827b62ea2c5d5195bf58388dff1f0525693e30e6d3ef3065e72cd0e4e3b6064792c826da46a83fc099073eeacfa57fd97eab95bea32f78698e2dc6ed1b9e2644fc8bb", 0x46}], 0x1}}], 0x1, 0x20e8086)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000007c0)={0x7, 0x8, 0x0, [{0x5, 0xfa8c, 0x8000, 0x4, 0x2, 0x6, 0xc3, '\x00', 0x4}, {0x0, 0xffffffffffffffff, 0xa, 0x0, 0x91, 0x5, 0x1, '\x00', 0x9}, {0x1, 0x80000001, 0x2, 0x2, 0x3, 0x5, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x1000, 0xc2, 0x1, 0xc, 0x0, '\x00', 0x5e03}, {0x9, 0x6, 0x1, 0x4, 0x7f, 0x1, 0x3, '\x00', 0x81}, {0xf86a, 0x5, 0x10, 0x40, 0xbd, 0x40, 0x3, '\x00', 0x101}, {0x9, 0xfffffffffffffffb, 0xffffffffffffff7f, 0xff, 0x3, 0x7, 0x4, '\x00', 0x851}, {0x10, 0x0, 0x8, 0xb, 0x2, 0xea, 0x18, '\x00', 0x6}]})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
setresuid(r5, r5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x2, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffff7, 0x5, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc], 0x1, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m43.963093015s ago: executing program 7 (id=1841):
r0 = syz_io_uring_setup(0x793b, &(0x7f0000000080)={0x0, 0x4dc2, 0x8000, 0x3, 0x18d}, &(0x7f0000000100), &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"5c9b67fb617500102a5aa0c229d8a480", 0x0, <r3=>0x0, {0x3, 0xff}, {0x4, 0xe2}, 0xdb, [0x300, 0x0, 0x2, 0x200, 0xc0, 0x3, 0x2, 0x0, 0x5, 0x1, 0xf, 0xffc0, 0x2, 0x2, 0x7, 0x3a0f]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000980)={{r2}, r3, 0x2, @inherit={0x90, &(0x7f0000000400)={0x0, 0x9, 0x9, 0xff, {0x0, 0x8, 0x400, 0x5, 0xa0}, [0x6, 0x7, 0x8000, 0x1, 0x200, 0x1000, 0x5, 0x5b, 0x1]}}, @name="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"})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, &(0x7f0000000240))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1m43.805538958s ago: executing program 7 (id=1842):
r0 = socket(0x5, 0x803, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$nfc_llcp(r1, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = socket(0xa, 0x3, 0xff)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x47df, @local, 0xb3e}, 0x1c)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x40040, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008000900ffffffff0800be"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unlinkat(r5, &(0x7f0000000400)='.\x00', 0x200)
ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000340)={0xfffe})
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
flock(0xffffffffffffffff, 0x7)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
sendto(r0, &(0x7f0000000740)="120000003200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
lsetxattr$security_selinux(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:crack_exec_t:s0\x00', 0x22, 0x2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000980)=ANY=[@ANYBLOB="ac1e0001ac14140d010000000200000000000000ac1e010114a3a7619d5a5a3f3e76619f37688aedb15ad368394d7f2364a13c0ae2d7dd717b87f811c21cd9f62141ff00c5e3c883ca9fca6863775b594993ed7e26afe87671ae468674dcff54e5810d71d0f1d9fc35157c3651c23874536155eeb0029e8fc99ef6d22716804cb7c4ac257c1c18b7676474d8ba1687ee89a34484e3983bb8614ee58de4136a75ce8f", @ANYRES32=r0, @ANYBLOB="292d31f8f7abf4047767aafbc9c9588d30686ae4dc16b6a4b898ea25b59cbcc23ec9bbc50ade997f159fa747572ce0d55d56e1a676485d2e720c", @ANYRES16=r5], 0x18)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x5, 0x16, 0x9, 0x4002}, 0x8, 0x8, 0x8, 0x0, 0xfffffffc, 0x4, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0xb99a4000)

1m43.660012871s ago: executing program 7 (id=1843):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @fda={0x66646185, 0xa, 0x2, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

1m43.516060743s ago: executing program 7 (id=1847):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) (async)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
bind$can_raw(r2, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0)

1m43.459430405s ago: executing program 36 (id=1847):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) (async)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
bind$can_raw(r2, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0)

22.004219443s ago: executing program 6 (id=2829):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x180)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0xf3c0, 0xa4})

21.873027596s ago: executing program 6 (id=2830):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeef0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x8, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0xd, 0x0, 0x8, 0x5, 0x7d, 0x7, 0x5, 0x3}, {0x4, 0x100000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x5, 0x81}, {0x6000, 0xffef2000, 0xa, 0x6, 0x4, 0x42, 0xe0, 0x6, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0x0, 0x3, 0x1, 0x7, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0002, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0xf, 0x85, 0x7, 0x5, 0x3d, 0x1, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0x0, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8000000, 0x1}, {0x10000, 0x7}, 0x80000031, 0x0, 0xdddd1000, 0x2010, 0x4, 0xa001, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

21.747656158s ago: executing program 6 (id=2832):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}]}, 0x18}}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/203}, {&(0x7f0000000240)=""/94}], 0x14a, 0xd, 0xd, 0x11)

21.666253719s ago: executing program 6 (id=2834):
r0 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, 0x0, 0x0)

21.539990362s ago: executing program 6 (id=2835):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6, 0xc8}]}, 0x10)
r2 = fcntl$dupfd(r0, 0x0, r1)
sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0201060323"], 0x118}}, 0x20000000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x90e, 0x352, 0x8, 0x9, 0x6, 0xd, 0x20, 0x10001, 0x6, 0x3, 0x2, 0x7fe6, 0xba7, 0x762c, 0x4], 0x80a0000, 0x80002})
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockname(r4, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80)
read(r3, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='rw-\x00'])

21.452344974s ago: executing program 6 (id=2837):
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

9.270079239s ago: executing program 0 (id=2873):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
epoll_create1(0x0)
setresuid(0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000008010800000000000000000a0000090900010073797a31000000000900010073797a300000000037ee593d61ca0db7f45e"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x9, 0x8000}, 0x100, './file1\x00'})

9.26908479s ago: executing program 5 (id=2874):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write(r0, 0x0, 0x0) (fail_nth: 4)

9.2679567s ago: executing program 8 (id=2875):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = dup2(r0, r0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0)

7.600000562s ago: executing program 0 (id=2876):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000025c0)="8ee8c9b8ee080f07660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc73866de00200019000022e0", 0x31}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0xdddd0000, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa973f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc51e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085155ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc2b586ad5eb67c7add5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55b7ebc08c4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e6558ca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b96142e0995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x1, 0x11, r0, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0})

7.599476482s ago: executing program 5 (id=2877):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e63000/0x1000)=nil, 0x1000}, 0x5}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000e63000/0x1000)=nil, 0x1000}, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r1, 0x1e67b000)
mmap$binder(&(0x7f00007d5000/0xc000)=nil, 0xc000, 0x1, 0x11, r0, 0xd) (async)
r3 = mmap$binder(&(0x7f00007d5000/0xc000)=nil, 0xc000, 0x1, 0x11, r0, 0xd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x2}, @enter_looper, @free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}, @register_looper], 0x31, 0x0, &(0x7f0000000140)="fa6380ae14652ea0c01315d2f68ea002bfb4eaf6e4f9858d189200f9f81488b73e31a9b0684382b3ac0f6ec170f4418f5a"})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f00000001c0)=[@exit_looper, @increfs, @release={0x40046306, 0x2}, @register_looper, @register_looper, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x2}, @enter_looper], 0x6d, 0x0, &(0x7f0000000480)="ddfebe30c28e7451001b4ac5390751869e263671fc8b495ea2f22179427c9e9e18767c09227d2efa5ed5799b9ce26cdb37f30d995b2324c58bb0b9be18481bea7b26bd0812c6575f698011b465145191814b6f39c74050fac939e5162639916f733b64df9e824a030d9e7c2cd1"})
modify_ldt$write(0x1, &(0x7f0000000340)={0x1, 0x20000000}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x1}, 0x18) (async)
r5 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x1}, 0x18)
sendmsg$unix(r5, &(0x7f0000000800)={&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000600)="bdec077690978764c78bc1faf584b19e8a947f8ca1d4966193de7c4eef4dce3ab95663e39d062105fc05798eff054ae78af4bc2ab004dbf2c2faaf9b4b95fab48f5f064ce4ba75bcb61ea3e9483fb3c342567cf66bf69ecb33e0", 0x5a}, {&(0x7f0000000240)="c94a84ca4a7d8ff3c5f2d0cd627114c63248c64d8105039c61542d0b2c", 0x1d}, {&(0x7f0000000680)="fbf43c67c649a625fff82fdd2a3a47b9b3b9ef8a42d4828dbd5c5c4b4e921e8caa65bccbabc4dd1b76b8b7a961a3eb4a59cdb0e7beccb9c64e956fe7ad8e4d3ce14b04121e34391b50e0116f45bb781c15f7efae02a01c5c08810a7b603b113f2103f3f8e13cc0eac93d1e3d5beb68a70e57b244865addcaff6436440dbb938dfd719ef8fc8476991a2495f91539af9398", 0x91}, {&(0x7f0000000580)="265488001858f11768e6807e52a6bc33b56ea87ac37b5b8d219126da350e32820df92168aa7795da1b", 0x29}, {&(0x7f0000000740)="57e1f9b0c5c34d56cae746df77760f6c05c035324679137d0c405ddfc0927447ffc7dfbc0c3c3eac0cf765e6ed52b8", 0x2f}], 0x5, 0x0, 0x0, 0x40004}, 0x240044c1) (async)
sendmsg$unix(r5, &(0x7f0000000800)={&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000600)="bdec077690978764c78bc1faf584b19e8a947f8ca1d4966193de7c4eef4dce3ab95663e39d062105fc05798eff054ae78af4bc2ab004dbf2c2faaf9b4b95fab48f5f064ce4ba75bcb61ea3e9483fb3c342567cf66bf69ecb33e0", 0x5a}, {&(0x7f0000000240)="c94a84ca4a7d8ff3c5f2d0cd627114c63248c64d8105039c61542d0b2c", 0x1d}, {&(0x7f0000000680)="fbf43c67c649a625fff82fdd2a3a47b9b3b9ef8a42d4828dbd5c5c4b4e921e8caa65bccbabc4dd1b76b8b7a961a3eb4a59cdb0e7beccb9c64e956fe7ad8e4d3ce14b04121e34391b50e0116f45bb781c15f7efae02a01c5c08810a7b603b113f2103f3f8e13cc0eac93d1e3d5beb68a70e57b244865addcaff6436440dbb938dfd719ef8fc8476991a2495f91539af9398", 0x91}, {&(0x7f0000000580)="265488001858f11768e6807e52a6bc33b56ea87ac37b5b8d219126da350e32820df92168aa7795da1b", 0x29}, {&(0x7f0000000740)="57e1f9b0c5c34d56cae746df77760f6c05c035324679137d0c405ddfc0927447ffc7dfbc0c3c3eac0cf765e6ed52b8", 0x2f}], 0x5, 0x0, 0x0, 0x40004}, 0x240044c1)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x2, 0x6, 0x3, 0x3}, 0x2, 0x1ba2}) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x2, 0x6, 0x3, 0x3}, 0x2, 0x1ba2})

7.599244082s ago: executing program 8 (id=2878):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00))
fchmod(r1, 0x154)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0xd, 0x4e24, 0x8, 0xa, 0x20, 0x0, 0x73}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, 0x0, 0x4000000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r4], 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x10000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r6 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
fchown(r6, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.904108125s ago: executing program 0 (id=2879):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="330c000000000000000001000000e00008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040009004e22ac1e01010000000000000000a000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b0600050009000000200004000a004e200000000520010000000010000000000000000001db0000001400040002004e22ac1414230000000000000000060005000d000000080003000500000024000100000000000000000000000000000000000000000000000000000000000000000008000a000100000014000200776732"], 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001b40))
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x2, &(0x7f0000000e00)=[{0x80, 0x80, 0x4, 0x1}, {0x6, 0xfb}]})
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x64, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x118a, 0x2}, @flat=@handle={0x73682a85, 0x110a, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x3}, @request_death], 0x0, 0x0, 0x0})
pipe2$9p(&(0x7f00000000c0), 0x80000)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e)

5.903061365s ago: executing program 5 (id=2880):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xa, 0x8, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6a, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="050f142e2a"]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

5.890473115s ago: executing program 8 (id=2881):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="494f1a4940950949508d735fe792f990b64344b03c8a93e8a58cae895b1b87b105af93d766ddd3761e33e89156ac7b776a814d7cdd74ed154e1ea1a4e6c5406a9a07bb3aa236855d224d23c7d2976d9a1aaeb0bb9e487bccbfd4c4b15b444d29cb5b4e66e4493b81b9e0e153", 0x6c}, {&(0x7f00000006c0)="29757ebc186e6fa3b174aa2b8d5bb85e8279726509cbb73c320975b377f14b7e332ccd1491b964510c89bb58623d4878cd1e430689d842dd39dc0913bf6761b9eeb5143c269d3d06e0ef09773e692809b4fe8342a33427ebf0942670131a122ccf58d73c43788b61667814e3395ab09b76f4f089fac71bf39a4458cbaea5e3c49610720b5e5516a62c6f5126b334556e2d7f64cc8e07d83ea890beac9bd7", 0x9e}, {&(0x7f0000000440)="c1eff98e42567f0c46d7861b39ad59887c94b0fcd5f654afa79845bad4648a911e6c005d0a397283667c3cb5887a8c1e9d035ada10d4c06397b41970538874bf5fc813b138b1431589db806215cc7c79ee9701ee9d1172a41b260d527d47dcd3fa980cd779fc1f66f346b67b692021a1d4bd3937295a97a253eb6122d303a2ee1467d1cdb2b0e1c9aa9995e771808016ce316763b4c4e83d4c14919fad7d33a1f6191843772378e7580542a609918efbc1ce2c1236718059169b3eec7b2c9f0d9e01832bebf9d592a6a8e8bfc20d362c6fb0b9f30d1f96", 0xd7}], 0x3, 0xfffffffa, 0x3)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x7, 0x0, 0x5, 0xc, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac12b8753d7bdb22d0000b520a1a93c060000000000027a8f3d45cdd499a861ac000000000318e341e15ec20e000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x1fffffffbfffd]}})
ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521)
userfaultfd(0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, 0x0)
ptrace$getregset(0x4205, r2, 0x200, 0x0)
ptrace$getsig(0x4202, 0xffffffffffffffff, 0x0, &(0x7f0000000640))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000002c0)=0x4)
tee(r0, 0xffffffffffffffff, 0x3e2e, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x2, 0x1)
bind$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
r5 = openat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x2, 0x100, 0x1}, 0x18)
write$hidraw(r5, &(0x7f00000005c0)="7f5d99802e656491ece34e2e0118efc6821b583f148a44fa77bf292b1f9bb6f0874603b2d75c749976b4ca064c4a0f5ff4f082136bf38595917470465c08177c73f51c8110b05ed9f5caa3abd5c5c97b0a60d5300a025b5f6bbe8e08", 0x5c)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x37000000, @empty, 0x3}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6a00, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000100)=0x8)
mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100000, &(0x7f0000000200)={[{}, {}, {@nofavordynmods}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/full\x00'}}, {@permit_directio}]})

4.024059761s ago: executing program 0 (id=2882):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x200000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
unshare(0x62040200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x48)
r4 = accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0x401, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

4.023642671s ago: executing program 5 (id=2883):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xfe, 0x0, 0x5}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xfe, 0x0, 0x5}]}, 0x10)
listen(r0, 0x2) (async)
listen(r0, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

4.023135181s ago: executing program 8 (id=2884):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write(r0, 0x0, 0x0) (fail_nth: 5)

2.124104478s ago: executing program 0 (id=2885):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x4a, 0x201, 0x0, 0x25dfdbfe, {0x4, 0x0, 0x300}}, 0x14}}, 0x20004814)
r4 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
listen(r4, 0x1027)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x240000d0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
close_range(r0, 0xffffffffffffffff, 0x0)

2.119733428s ago: executing program 5 (id=2886):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x804, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0})
socket(0x2a, 0x80000, 0x8)
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, 0x0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8})
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup(r5)
fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r7, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername(r8, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000080)={0x1, 0x2, 0x1000, 0x9f, &(0x7f0000000140)="e0ebaea9209bf4a5a98665f300309078b5f8cf0b708bc8293d742e3c495054f9da607a0e19bfa3a0588ab26cec1fab18cb38398123b6a37f3bad8b0bdd7ccf577350c09427b1f7c99c730612124f7b849053f5372e6598aef7e06d134d5cc922c65327ab587823660646668f9ed3c71f62ad364035387455ea35963b46b17e445e735736db6c57f90ed048ce7c6bf2c4d217960b02b16bf47b917b1db4ce75", 0xd7, 0x0, &(0x7f00000003c0)="26b505acd65bdf84827dcb32fae836b07e7d2c306bcfbbf13bb678fa6fa7003fad58bb3da0fd3c9274829b949d4e7f7da57e8854369d405a1e882e8a50eab7d28c635018b043d52b2a0eaabb4829d472015eb27ea83725d7060eacebfb238b57cfa2adf81eb7297be8567741bf41f5bb9fbe0af132fe67c83c3b122893440a06db88807311430a70f7a5ebacbe73cb19760efdebe578f9aa4b271baf3dcf2ffa490c062bc436119da1663493ca6a1b399e5887c41baa3ec98067ca8bd34ac577f2407ede432de45d7152a783992569aadbe01e08fc9821"})

2.072868799s ago: executing program 8 (id=2887):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140015"], 0x40}], 0x1}, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup(r2)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x239)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000009c0)={"73cce1a2b9fbcb97694043ebfb82442d7f428290538e75ff029908cebee95ac2b1febd018ae4703d3263c5b30d4db3243275dd57287ef3c41695e828a0e03b5098370515dc8c9b278addefde0e6ea6ef65a74a3e66e51ee0a646e634cd9cf3ceb03dcf88a235bd6d7a5e64ea39db4636dc9b79c3fc4b6c82b54a6bea17ebf522d474b39c4f6fee3ae29caeec81652b33e49426ec6481fe2262eebd869b7a14a8646751f0b15e94a6bb853e3b3443d254af5852a59766fd5aa457c444e713dbbd7699a8d887ab77e97cf1fd6dd2fe80662726aa9efd1d9c535c161a6b413a473c37876cf8be6867395fe6513e10f14d5c677d301612987f4b25a719961e7bc1d10de8eb93960e40c99b502d401556250d52c53d05eb471d675802ccbbc3de9366ccb6e096b235ae2b81c4f9168f4ce4e741d7e8b381daae4674eacd719870f1f113568e647f04109efd349cb74234c3a469d48e857b3e33ac6a7d7d332a72854c980b550af5a90d997c3c40fbc5fb22492f83675786435181dc40777c05c77ddf9432d2fd86cb3d56393e08f2d9b94b1cb579be8d4110c6a34689fa5972e6879e5c3a7ef48caf8cf42ca467d135665ce259b1dc5ea6c4b07a47260fd8661c29367a99f26a415bea9b5ed5e69d42b8f58ee3f245d4475b05def5960100ef1658d586e1066e24baa59543545c2cca981c6e100a966b52314a8d00863eb35faff0418b5285534298b7d677641b4a5aba2958e1ca74639cd17cf72972aaf8235354157b65f3f06e4e6036c81c33b0464bc6b2d3b9a76323930b1c4c7bf88aad05e2e5332719685c2968ebef1e26f2652bc37b5e4f53617e0bdf41059d7ccf00468537714b77478147d69decae6979b56fa0048f1a9ca8986ba81033850bffe420bed347ec85f23cf78084e5a2f384c9b8ebaf547289fa7b798f53ec2266a9d2150ae353bb8f9a1adc385081366708c819d6ed45a778e5d9ab90333b12d9346d28340d20293a7e9364312bd9ac1048b3ad5306d2f35defb6addea0e6cac0fd8937dbca03968f94433696e77aa48282661b4a3c6aacce6bf023dc078401daf8a7df4081d561fb48c9e6d706123fc273f63203a09addf81dba40f25c2e3ba9035d3678a0f289a3fb0f13baf9e827df7cf7a3b97c3b2504f00e0aa2bc4de28874eb8d88fe393fb165cb8acc6b029eba087bfb614962633e2b00db758e9309b5446e26fcd0634ae2ea70bfd47b9132dd91262554d8fcae51638e9faf2f9fb86a2d5749d56dbb6fb04fde46962ad52d9b9a4bc907ffaa30a007cdeb3df46fb2138bf5baa9ff06e3d708ff8b188d8889d9a8dd95ba74b8e2410bd94e88a3cdfe69927b4d656ff89ab16e8fe7440c707b0e9f308f7164908780c0c1e5e60e6b51281510318de838a4f1e3baf40418deefbc9ab7d4549044c124d0a509d9dc7175fdf469edb9a6"})
close_range(r0, r7, 0x0)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080))

81.129668ms ago: executing program 0 (id=2888):
r0 = socket$tipc(0x1e, 0x9e43f3ccf5da864c, 0x0)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="1561fadc524051f45fbd7878c91867f1e9977543cbf5fedfb010e05049e7bf358316b71f67ee26087f2887993f6a064c2c89067de7116763ab63db115b7c9aa229607a37997824b0d59746b3ecd17106e868ac7e3623a74ddcc9e08d2362d7bffe40a3e4151981cf774913b43a5353715ce8081d7b8040cfa5f507c79ab9f7e301ff7394021ba7087097b5b06c17b63b18f11120583cc6d11f82d66297d31fac714b626b8ea2fda1220b30d3920df5408adc", 0xb2}, {&(0x7f0000000200)="b84711116a48aabfa132f4c1c7bc0043a184f14b3edb63016c852cf4e517ce3393cb92a4ae9b25fe1be1b7f31f5f17de79c585917d6163a9f86c0d9e12be17311cc148fc71e27979bdcefac897196a87e6ac528b0d6cb30a9c11c0746d1ab00ec042437400487b29d12ce5c96b08a220a78e0df84bba6567bf1619f5abcc394a2ead543b2fe307d909c097308d33925e115884978f9f1841500eaea696607c2cfff444194085ff16493a5d38eafe8a090e0bc3d03d1add2b60e4f5bebf0de609e5163f6d94f27ae60016639e5d32cacc41b335df0c238990620913acccfdb6f928aef8593ea9a8fe40ab7d40116de33cc627b33f89", 0xf5}, {&(0x7f0000000300)="2bf15fbcbf32335532ab4bd1bc2f69dd1de1145f34a0e2f63e5d2ea8e3d1b37bb90f489e1ca51c491dd20c24f6a23ff14f0022a51c38b345da9377a5332d908b92096d1fc6344c1df8a32cadaf35797ed1750e625e6fc69beba904a2f6d5b172fb1295679468a8ae58053d0bbf56929a174e62d0d3e15d", 0x77}, {&(0x7f0000000380)="15dcc691a8012f0662554327f7091007201b6500945f1049776cd678a70babe88c795aeda0d0cd4731dbb1f1f8067dadc3204209d2ad5503240fa172b2bd7df4530192b84f187d3a24f5ad2dc98008edbcd4b18d63c4ea96670b75df74d52fee9567f42e31e5ed4c43eca4da1adc33a55f98ba1e7e062a0432742604972e1ed98390a0f2967a6f4794e5ed90a406", 0x8e}, {&(0x7f0000000440)}], 0x5, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf", @ANYBLOB="05a155bf5c0884ba8c435af963cef88254c76dcbd18f43d11e91b8334826e70db1500f5e73421d"])
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast2, @private=0xa010102}, 0xc)
ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000440))
mount$binderfs(&(0x7f0000000440), &(0x7f0000000580)='./binderfs2\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@stats}], [{@measure}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]})

80.146758ms ago: executing program 5 (id=2889):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x3)
eventfd(0x80000000)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r5})
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0xc}, 0x7, 0x105, 0x0, 0x0, 0x6, 0x9, 0x0, 0xc110, 0xe, &(0x7f0000000100)})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xfff, 0x2000, 0x0, r5, 0x4})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast1, @private0, @remote, 0xff, 0x5, 0x9, 0x500, 0x5, 0x2200064})
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=2890):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x22020600) (async)
unshare(0x80)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000000)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x11) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x48041, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x3d8ada62908d34f0, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x440d1)

kernel console output (not intermixed with test programs):

ystem permissive=1
[   82.077714][   T65] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   82.190728][ T2496] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   82.203656][ T2496] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   82.217741][   T65] usb 1-1: device descriptor read/64, error -71
[   82.433584][ T2558] !@˙: renamed from xfrm0 (while UP)
[   82.450097][ T2555] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   82.465250][   T65] usb 1-1: device descriptor read/64, error -71
[   82.493907][ T2562] fuse: Unknown parameter '�ř˙'
[   82.500739][ T2562] sit0: entered promiscuous mode
[   82.507142][ T2562] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[   82.514918][ T2562] netlink: 9 bytes leftover after parsing attributes in process `syz.2.689'.
[   82.532366][ T2560] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.554999][ T2566] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.555110][ T2566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   82.561841][ T2566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:376
[   82.642296][   T36] audit: type=1400 audit(1758267391.900:405): avc:  denied  { create } for  pid=2582 comm="syz.3.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   82.673865][   T36] audit: type=1400 audit(1758267391.900:406): avc:  denied  { read } for  pid=2582 comm="syz.3.697" name="file0" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   82.707708][   T65] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   82.828132][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   82.856067][   T65] usb 1-1: device descriptor read/64, error -71
[   82.907071][ T2496] rust_binder: Error in use_page_slow: ESRCH
[   82.907093][ T2496] rust_binder: use_range failure ESRCH
[   82.913333][ T2496] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   82.919099][ T2496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   82.927037][ T2496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:374
[   82.937442][   T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[   82.959042][   T31] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   82.968955][   T31] usb 2-1: USB disconnect, device number 25
[   82.989001][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.999971][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.009807][   T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   83.018899][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.027486][   T10] usb 3-1: config 0 descriptor??
[   83.097720][   T65] usb 1-1: device descriptor read/64, error -71
[   83.207812][   T65] usb usb1-port1: attempt power cycle
[   83.236112][   T10] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   83.317989][   T10] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected
[   83.329821][   T10] hid-steam 0003:28DE:1142.0008: No HID_FEATURE_REPORT submitted -  nothing to read
[   83.347118][ T2624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'.
[   83.347285][   T10] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   83.389183][   T10] usb 3-1: USB disconnect, device number 27
[   83.398342][   T10] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected
[   83.407532][ T2627] fido_id[2627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[   83.502521][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   83.502540][   T36] audit: type=1400 audit(1758267392.760:408): avc:  denied  { ioctl } for  pid=2639 comm="syz.1.714" path="socket:[19007]" dev="sockfs" ino=19007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   83.542202][ T2643] binder: Unknown parameter 'fscontext?}'
[   83.557773][   T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   83.577752][ T2647] raw_sendmsg: syz.2.717 forgot to set AF_INET. Fix it!
[   83.590149][   T65] usb 1-1: device descriptor read/8, error -71
[   83.596571][ T2647] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive
[   83.639938][ T2654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.661492][ T2654] syzkaller0: entered promiscuous mode
[   83.666991][ T2654] syzkaller0: entered allmulticast mode
[   83.672893][ T2654] tipc: Resetting bearer <eth:syzkaller0>
[   83.681518][ T2647] tipc: Resetting bearer <eth:syzkaller0>
[   83.694255][ T2647] tipc: Disabling bearer <eth:syzkaller0>
[   83.739135][   T65] usb 1-1: device descriptor read/8, error -71
[   83.778037][ T2664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'.
[   83.996996][ T2682] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.997746][   T65] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   84.033230][   T65] usb 1-1: device descriptor read/8, error -71
[   84.125891][ T2686] kvm: pic: non byte write
[   84.135926][ T2686] kvm: pic: non byte write
[   84.168720][   T65] usb 1-1: device descriptor read/8, error -71
[   84.277841][   T65] usb usb1-port1: unable to enumerate USB device
[   84.297720][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   84.375937][ T2705] rust_binder: 402: no such ref 3
[   84.381182][ T2705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402
[   84.381881][ T2705] rust_binder: Error while translating object.
[   84.391137][ T2705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   84.397360][ T2705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402
[   84.449282][ T2707] rust_binder: Write failure EFAULT in pid:404
[   84.458617][   T10] usb 3-1: Using ep0 maxpacket: 8
[   84.470900][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   84.479254][   T10] usb 3-1: config 179 has no interface number 0
[   84.485525][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   84.496614][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   84.508194][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   84.519405][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   84.529599][   T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   84.542970][   T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   84.545919][ T2711] binder: Unknown parameter 'contextĚđÔđ[7’'
[   84.552261][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.568061][ T2685] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.580912][   T36] audit: type=1400 audit(1758267393.840:409): avc:  denied  { mounton } for  pid=2712 comm="syz.1.737" path="/134/file0" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   84.585364][   T10] xpad 3-1:179.65: probe with driver xpad failed with error -5
[   84.743119][   T36] audit: type=1400 audit(1758267394.000:410): avc:  denied  { create } for  pid=2725 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   84.765963][   T36] audit: type=1400 audit(1758267394.000:411): avc:  denied  { setopt } for  pid=2715 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   84.790603][ T2685] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.839339][ T2685] rust_binder: Error in use_page_slow: ESRCH
[   84.845912][ T2685] rust_binder: use_range failure ESRCH
[   84.857695][ T2685] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   84.863216][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   84.872743][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:410
[   84.884883][   T36] audit: type=1400 audit(1758267394.150:412): avc:  denied  { write } for  pid=2727 comm="syz.1.742" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   84.894006][ T2685] rust_binder: Error in use_page_slow: ESRCH
[   84.922616][ T2685] rust_binder: use_range failure ESRCH
[   84.935444][ T2732] batadv_slave_0: entered promiscuous mode
[   84.941468][ T2685] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[   84.947366][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   84.952841][   T36] audit: type=1400 audit(1758267394.150:413): avc:  denied  { open } for  pid=2727 comm="syz.1.742" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   84.973812][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:410
[   84.989590][   T36] audit: type=1400 audit(1758267394.180:414): avc:  denied  { mounton } for  pid=2727 comm="syz.1.742" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   84.990395][ T2732] batadv_slave_0: left promiscuous mode
[   84.998721][   T36] audit: type=1400 audit(1758267394.230:415): avc:  denied  { mounton } for  pid=2734 comm="syz.1.745" path="/137/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1
[   85.065073][ T2738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442
[   85.447714][   T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[   85.609067][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   85.620223][   T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   85.629517][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.642772][   T10] usb 1-1: config 0 descriptor??
[   85.648370][ T2748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.060209][   T10] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[   86.259010][  T943] usb 1-1: USB disconnect, device number 27
[   86.267819][   T36] audit: type=1400 audit(1758267395.520:416): avc:  denied  { lock } for  pid=2747 comm="syz.0.748" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   86.467731][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   86.618815][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.630039][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.640164][   T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   86.649440][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.658854][   T10] usb 2-1: config 0 descriptor??
[   86.867141][ T2772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.877109][ T2772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.025540][  T354] usb 3-1: USB disconnect, device number 28
[   87.047778][   T65] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[   87.057216][ T2776] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   87.065635][ T2776] rust_binder: Write failure EINVAL in pid:414
[   87.066982][ T2776] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   87.082063][ T2776] rust_binder: Write failure EINVAL in pid:414
[   87.100807][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.128382][   T36] audit: type=1400 audit(1758267396.380:417): avc:  denied  { create } for  pid=2782 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   87.217837][   T65] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   87.236429][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.255021][   T65] usb 1-1: config 0 descriptor??
[   87.490586][   T10] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0
[   87.531758][   T10] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized
[   87.587731][  T943] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[   87.691281][   T31] usb 2-1: USB disconnect, device number 26
[   87.748899][  T943] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   87.758081][  T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.768273][  T943] usb 3-1: config 0 descriptor??
[   88.178099][  T943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   88.188457][  T943] asix 3-1:0.0: probe with driver asix failed with error -61
[   88.226584][ T2796] fuse: Unknown parameter '0x0000000000000005'
[   88.431896][ T2823] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   88.446892][ T2825] rust_binder: Read failure Err(EAGAIN) in pid:451
[   88.463884][ T2826] rust_binder: Read failure Err(EAGAIN) in pid:451
[   88.527855][   T36] audit: type=1400 audit(1758267397.790:418): avc:  denied  { setopt } for  pid=2830 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   88.566993][   T10] usb 3-1: USB disconnect, device number 29
[   88.576521][ T2835] rust_binder: Write failure EFAULT in pid:434
[   88.576838][ T2834] rust_binder: Write failure EFAULT in pid:434
[   88.614927][   T36] audit: type=1400 audit(1758267397.870:419): avc:  denied  { read append } for  pid=2836 comm="syz.1.776" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   88.647595][   T36] audit: type=1400 audit(1758267397.870:420): avc:  denied  { open } for  pid=2836 comm="syz.1.776" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   88.848946][   T36] audit: type=1400 audit(1758267398.110:421): avc:  denied  { read } for  pid=2848 comm="syz.1.779" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.907714][   T36] audit: type=1400 audit(1758267398.110:422): avc:  denied  { open } for  pid=2848 comm="syz.1.779" path="/153/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.972281][ T2855] syz.1.780 (2855): /proc/2851/oom_adj is deprecated, please use /proc/2851/oom_score_adj instead.
[   89.089381][   T65] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[   89.109990][   T65] asix 1-1:0.0: probe with driver asix failed with error -71
[   89.138487][   T65] usb 1-1: USB disconnect, device number 28
[   89.540958][ T2880] binder: Binderfs stats mode cannot be changed during a remount
[   89.648694][   T36] audit: type=1400 audit(1758267398.910:423): avc:  denied  { create } for  pid=2885 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.769571][ T2895] binder: Bad value for 'stats'
[   89.817806][   T36] audit: type=1400 audit(1758267399.080:424): avc:  denied  { mount } for  pid=2900 comm="syz.1.796" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   90.007753][   T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   90.097761][  T331] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   90.158809][   T65] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   90.168181][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.177412][   T65] usb 1-1: config 0 descriptor??
[   90.184813][   T36] audit: type=1400 audit(1758267399.450:425): avc:  denied  { mounton } for  pid=2904 comm="syz.3.798" path="/346/file0" dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   90.247713][  T331] usb 2-1: Using ep0 maxpacket: 8
[   90.254301][  T331] usb 2-1: unable to get BOS descriptor or descriptor too short
[   90.264303][  T331] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01
[   90.273453][  T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.281537][  T331] usb 2-1: Product: syz
[   90.285721][  T331] usb 2-1: Manufacturer: syz
[   90.290373][  T331] usb 2-1: SerialNumber: syz
[   90.380100][ T2914] kvm: emulating exchange as write
[   90.387025][   T36] audit: type=1400 audit(1758267399.640:426): avc:  denied  { map } for  pid=2913 comm="syz.2.801" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   90.498567][ T2903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.507318][ T2903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.543275][  T331] usb 2-1: USB disconnect, device number 27
[   91.090046][ T2930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2930 comm=syz.1.807
[   91.365697][ T2938] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   91.374067][ T2938] rust_binder: Write failure EINVAL in pid:462
[   91.495160][ T2941] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614)
[   91.501445][ T2941] rust_binder: Error while translating object.
[   91.513627][ T2941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   91.520037][ T2941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464
[   91.615165][   T36] audit: type=1400 audit(1758267400.870:427): avc:  denied  { accept } for  pid=2943 comm="syz.3.812" path="socket:[21544]" dev="sockfs" ino=21544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   92.014678][ T2895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.023352][ T2895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.032399][ T2895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.041000][ T2895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.049682][ T2895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.054748][ T2952] netlink: 96 bytes leftover after parsing attributes in process `syz.1.822'.
[   92.058275][ T2895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.076162][   T65] usb 1-1: Cannot set autoneg
[   92.081618][   T65] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   92.094020][   T65] usb 1-1: USB disconnect, device number 29
[   92.599035][ T2965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   92.599066][ T2965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470
[   92.647749][   T65] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   92.716374][ T2969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2969 comm=syz.3.821
[   92.817709][   T65] usb 3-1: Using ep0 maxpacket: 32
[   92.828858][   T65] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   92.847839][   T65] usb 3-1: config 0 has no interface number 0
[   92.855862][   T65] usb 3-1: config 0 interface 184 has no altsetting 0
[   92.879140][   T65] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   92.897683][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.917764][   T65] usb 3-1: Product: syz
[   92.922249][   T65] usb 3-1: Manufacturer: syz
[   92.928328][   T65] usb 3-1: SerialNumber: syz
[   92.934535][   T65] usb 3-1: config 0 descriptor??
[   92.948206][   T65] smsc75xx v1.0.0
[   93.056851][ T2978] SELinux: ebitmap: truncated map
[   93.062471][ T2978] SELinux: failed to load policy
[   93.211786][ T2985] batadv_slave_0: entered promiscuous mode
[   93.276078][ T2985] batadv_slave_0: left promiscuous mode
[   93.547766][   T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   93.548899][   T65] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   93.568261][   T65] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   93.579352][   T65] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   93.589660][   T65] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32
[   93.697722][   T31] usb 1-1: Using ep0 maxpacket: 8
[   93.705794][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   93.718396][   T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01
[   93.728610][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.738276][   T31] usb 1-1: Product: syz
[   93.742733][   T31] usb 1-1: Manufacturer: syz
[   93.747924][   T31] usb 1-1: SerialNumber: syz
[   93.958376][ T2996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.970546][ T2996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.025400][   T31] usb 1-1: USB disconnect, device number 30
[   94.297017][ T3017] fuseblk: Unknown parameter '.qPÎ37É{VÝđ�ÄűÂ4	'
[   94.638452][ T3062] sit0: entered promiscuous mode
[   94.669374][ T3062] netlink: 'syz.3.856': attribute type 1 has an invalid length.
[   94.697713][ T3062] netlink: 1 bytes leftover after parsing attributes in process `syz.3.856'.
[   94.776225][ T3081] netlink: 'syz.3.859': attribute type 4 has an invalid length.
[   94.797691][ T3081] netlink: 'syz.3.859': attribute type 5 has an invalid length.
[   94.807134][ T3081] netlink: 'syz.3.859': attribute type 1 has an invalid length.
[   94.836881][ T3070] cgroup: fork rejected by pids controller in /syz3
[   94.861799][ T3099] overlay: Unknown parameter 'smackfsroot'
[   94.987853][   T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   95.147744][   T31] usb 2-1: Using ep0 maxpacket: 16
[   95.154420][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.164588][   T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   95.175926][   T31] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[   95.185287][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.193376][   T31] usb 2-1: Product: syz
[   95.197773][   T31] usb 2-1: Manufacturer: syz
[   95.202403][   T31] usb 2-1: SerialNumber: syz
[   95.207828][   T31] usb 2-1: config 0 descriptor??
[   95.427915][   T65] usb 3-1: USB disconnect, device number 30
[   95.455348][ T3105] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.484916][ T3112] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.519391][ T3112] rust_binder: Error in use_page_slow: ESRCH
[   95.526183][ T3112] rust_binder: use_range failure ESRCH
[   95.532597][ T3112] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   95.538150][ T3112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   95.546192][ T3112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:486
[   95.601512][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   95.601534][   T36] audit: type=1400 audit(1758267404.860:429): avc:  denied  { create } for  pid=3114 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.734755][ T3127] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[   95.734783][ T3127] rust_binder: Error while translating object.
[   95.745481][ T3127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   95.752523][ T3127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509
[   95.784605][   T36] audit: type=1400 audit(1758267405.040:430): avc:  denied  { accept } for  pid=3128 comm="syz.0.871" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   95.804387][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.833636][ T3129] batadv_slave_0: entered promiscuous mode
[   95.846187][   T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   95.848064][ T3129] batadv_slave_0: left promiscuous mode
[   95.856482][   T31] asix 2-1:0.0: probe with driver asix failed with error -71
[   95.872055][   T31] usb 2-1: USB disconnect, device number 28
[   95.987002][ T3139] rust_binder: Error in use_page_slow: ESRCH
[   95.987023][ T3139] rust_binder: use_range failure ESRCH
[   95.993199][ T3139] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   95.998795][ T3139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   96.006859][ T3139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:492
[   96.212094][ T3146] overlayfs: failed to clone upperpath
[   96.734648][   T36] audit: type=1400 audit(1758267405.990:431): avc:  denied  { execute } for  pid=3161 comm="syz.1.881" name="file1" dev="tmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   96.758047][   T36] audit: type=1400 audit(1758267405.990:432): avc:  denied  { execute_no_trans } for  pid=3161 comm="syz.1.881" path="/167/file1" dev="tmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   96.781800][   T36] audit: type=1326 audit(1758267405.990:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3161 comm="syz.1.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f504398eba9 code=0x0
[   96.804732][   T36] audit: type=1400 audit(1758267406.020:434): avc:  denied  { read } for  pid=3163 comm="syz.0.882" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   97.018325][   T36] audit: type=1400 audit(1758267406.280:435): avc:  denied  { mounton } for  pid=3174 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   97.064386][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.071596][ T3174] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.078853][ T3174] bridge_slave_0: entered allmulticast mode
[   97.085163][ T3174] bridge_slave_0: entered promiscuous mode
[   97.091817][  T329] bridge_slave_1: left allmulticast mode
[   97.097877][  T329] bridge_slave_1: left promiscuous mode
[   97.103702][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.111551][  T329] bridge_slave_0: left allmulticast mode
[   97.117309][  T329] bridge_slave_0: left promiscuous mode
[   97.123091][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.170540][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.177706][ T3174] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.184887][ T3174] bridge_slave_1: entered allmulticast mode
[   97.191338][ T3174] bridge_slave_1: entered promiscuous mode
[   97.210880][  T329] tipc: Left network mode
[   97.216684][  T329] veth1_macvtap: left promiscuous mode
[   97.222297][  T329] veth0_vlan: left promiscuous mode
[   97.303189][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.310273][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.317631][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.324731][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.346793][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.354289][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.364743][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.371876][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.380977][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.388086][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.416002][ T3174] veth0_vlan: entered promiscuous mode
[   97.427500][ T3174] veth1_macvtap: entered promiscuous mode
[   97.463711][ T3185] rust_binder: 2: no such ref 3
[   97.469158][ T3185] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   97.476214][ T3185] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   97.483401][ T3185] rust_binder: Write failure EFAULT in pid:2
[   97.483910][ T3185] rust_binder: 2: no such ref 3
[   97.495719][ T3185] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   97.503043][ T3185] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   97.510777][ T3185] rust_binder: Write failure EFAULT in pid:2
[   97.576480][ T3200] /dev/sg0: Can't lookup blockdev
[   97.642006][ T3211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2626 sclass=netlink_route_socket pid=3211 comm=syz.1.894
[   97.660597][ T3211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.730523][ T3214] rust_binder: inc_ref_done called when no active inc_refs
[   97.833917][   T36] audit: type=1400 audit(1758267407.090:436): avc:  denied  { connect } for  pid=3218 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   97.834568][ T3219] /dev/sr0: Can't lookup blockdev
[   98.143431][ T3225] 9pnet_fd: Insufficient options for proto=fd
[   98.182127][ T3227] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[   98.404503][ T3242] can0: slcan on ttyS3.
[   98.487736][   T36] audit: type=1400 audit(1758267407.740:437): avc:  denied  { shutdown } for  pid=3243 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.523479][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   98.657724][   T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   98.777892][  T943] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   98.807788][   T31] usb 2-1: Using ep0 maxpacket: 16
[   98.814107][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.824388][   T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[   98.835289][   T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.844453][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.852554][   T31] usb 2-1: Product: syz
[   98.856997][   T31] usb 2-1: Manufacturer: syz
[   98.861801][   T31] usb 2-1: SerialNumber: syz
[   98.867083][   T31] usb 2-1: config 0 descriptor??
[   98.939139][  T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.950202][  T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.960043][  T943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.972993][  T943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.982074][  T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.992105][  T943] usb 1-1: config 0 descriptor??
[   99.065572][   T36] audit: type=1400 audit(1758267408.320:438): avc:  denied  { nlmsg_read } for  pid=3270 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   99.090622][   T31] usb 2-1: USB disconnect, device number 29
[   99.131484][ T3242] can0 (unregistered): slcan off ttyS3.
[   99.400485][  T943] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[   99.411857][  T943] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   99.933553][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.941199][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.949601][ T3302] bridge_slave_0: entered allmulticast mode
[   99.956147][ T3302] bridge_slave_0: entered promiscuous mode
[   99.963392][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.971530][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.978953][ T3302] bridge_slave_1: entered allmulticast mode
[   99.985494][ T3302] bridge_slave_1: entered promiscuous mode
[  100.050420][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.057509][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.064842][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.071935][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.096251][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.103779][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.114285][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.121487][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.130944][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.138075][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.169370][ T3302] veth0_vlan: entered promiscuous mode
[  100.182331][ T3302] veth1_macvtap: entered promiscuous mode
[  100.398023][ T3321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.916'.
[  100.407496][ T3321] rust_binder: Write failure EFAULT in pid:7
[  100.409757][ T3321] overlayfs: unescaped trailing colons in lowerdir mount option.
[  100.443107][ T3323] __vm_enough_memory: pid: 3323, comm: syz.5.917, bytes: 18014402804453376 not enough memory for the allocation
[  100.582243][ T3336] rust_binder: Error while translating object.
[  100.582292][ T3336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  100.587734][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  100.588675][  T361] Bluetooth: hci0: command 0x1003 tx timeout
[  100.598673][ T3336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[  100.764237][   T65] rust_binder: 3341: removing orphan mapping 0:4208
[  100.790778][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  100.790795][   T36] audit: type=1400 audit(1758267410.050:442): avc:  denied  { setattr } for  pid=3355 comm="syz.5.929" name="secretmem" dev="secretmem" ino=23969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  100.957778][   T10] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  101.108808][   T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  101.117963][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.126606][   T10] usb 5-1: config 0 descriptor??
[  101.333163][   T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  101.410503][ T3400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3400 comm=syz.3.945
[  101.557745][  T587] usb 1-1: reset high-speed USB device number 31 using dummy_hcd
[  101.632325][ T3406] loop7: detected capacity change from 0 to 37552
[  101.699020][ T3405] IPv6: Can't replace route, no match found
[  101.993249][ T3409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3409 comm=syz.3.948
[  102.011859][ T3409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=3409 comm=syz.3.948
[  102.047852][ T3405] loop7: detected capacity change from 37552 to 0
[  102.105315][ T3420] rust_binder: 31: no such ref 3
[  102.134812][ T3422] fuse: Unknown parameter 'group_‹d'
[  102.141923][ T3422] 9pnet_fd: Insufficient options for proto=fd
[  102.527825][  T587] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  102.698801][  T587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.710466][  T587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.720576][  T587] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  102.729899][  T587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.739093][  T587] usb 6-1: config 0 descriptor??
[  102.892145][   T31] usb 1-1: USB disconnect, device number 31
[  103.147992][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.167692][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.174766][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.187704][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.194775][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.201942][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.208986][  T587] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  103.218088][  T587] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  103.346928][  T587] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00
[  103.431106][   T36] audit: type=1400 audit(1758267412.690:443): avc:  denied  { read } for  pid=3472 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  103.433047][ T3473] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  103.450353][ T3473] rust_binder: Read failure Err(EFAULT) in pid:559
[  103.529897][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.536603][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.543145][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.549916][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.556406][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.562990][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.569586][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.576081][ T3475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.628344][ T3484] binder: Bad value for 'stats'
[  103.751385][ T3447] rust_binder: Write failure EFAULT in pid:37
[  103.845575][ T3496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  103.859618][ T3495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:581
[  103.873920][ T3498] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  103.895077][ T3498] tipc: Started in network mode
[  103.900041][ T3498] tipc: Node identity a223aba3e8e9, cluster identity 4711
[  103.907235][ T3498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.978754][   T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  103.999639][   T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  104.013278][   T10] asix 5-1:0.0: probe with driver asix failed with error -71
[  104.022572][   T10] usb 5-1: USB disconnect, device number 2
[  104.259216][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33
[  104.259613][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'.
[  104.279638][ T3508] incfs: ino conflict with backing FS 1
[  104.286630][ T3508] rust_binder: Read failure Err(EAGAIN) in pid:33
[  104.640192][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.982'.
[  104.791102][ T3528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587
[  104.791745][ T3526] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive
[  104.794201][ T3527] rust_binder: Write failure EINVAL in pid:587
[  104.881339][ T3533] input: syz0 as /devices/virtual/input/input21
[  104.884042][ T3537] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  104.890230][ T3533] rust_binder: Write failure EFAULT in pid:593
[  104.972702][ T3550] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.011767][ T3553] rust_binder: Got transaction with invalid offset.
[  105.011820][ T3553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  105.017703][   T31] tipc: Node number set to 1254796195
[  105.018895][ T3553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599
[  105.029992][ T3555] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.154792][ T3565] rust_binder: Error while translating object.
[  105.154852][ T3565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  105.161638][ T3565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  105.203342][  T587] cp2112 0003:10C4:EA90.000D: error setting SMBus config
[  105.225801][  T587] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71
[  105.246001][  T587] usb 6-1: USB disconnect, device number 2
[  105.339481][   T36] audit: type=1400 audit(1758267414.600:444): avc:  denied  { remount } for  pid=3589 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  105.362856][ T3590] option changes via remount are deprecated (pid=3589 comm=syz.4.1008)
[  105.377832][ T3590] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 ""
[  105.617101][ T3605] SELinux: security_context_str_to_sid (sytem_uÝGĐą‰:˙ß) failed with errno=-22
[  105.768002][   T36] audit: type=1400 audit(1758267415.030:445): avc:  denied  { ioctl } for  pid=3618 comm="syz.4.1016" path="socket:[25081]" dev="sockfs" ino=25081 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.794074][ T3615] rust_binder: 3615 RLIMIT_NICE not set
[  105.795122][ T3615] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  105.801674][ T3615] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  105.814325][ T3615] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  105.838619][  T587] rust_binder: 3614: removing orphan mapping 0:1048
[  105.872083][ T3629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54
[  105.901021][ T3625] IPv6: NLM_F_CREATE should be specified when creating new route
[  106.062288][ T3642] rust_binder: Error while translating object.
[  106.062324][ T3642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.068593][ T3642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73
[  106.132348][ T3648] tmpfs: Unknown parameter '/dev/vhost-vsock'
[  106.200298][ T1808] bridge_slave_1: left allmulticast mode
[  106.206317][ T1808] bridge_slave_1: left promiscuous mode
[  106.212408][ T1808] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.220342][ T1808] bridge_slave_0: left allmulticast mode
[  106.227886][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  106.228875][ T1808] bridge_slave_0: left promiscuous mode
[  106.247711][ T1808] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.360567][ T1808] veth1_macvtap: left promiscuous mode
[  106.366164][ T1808] veth0_vlan: left promiscuous mode
[  106.407726][   T10] usb 6-1: Using ep0 maxpacket: 32
[  106.413996][   T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  106.425365][   T10] usb 6-1: config 0 has no interface number 0
[  106.431621][   T10] usb 6-1: config 0 interface 184 has no altsetting 0
[  106.443841][   T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  106.453068][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.461338][   T10] usb 6-1: Product: syz
[  106.465602][   T10] usb 6-1: Manufacturer: syz
[  106.470326][   T10] usb 6-1: SerialNumber: syz
[  106.480390][   T10] usb 6-1: config 0 descriptor??
[  106.486272][   T10] smsc75xx v1.0.0
[  106.496069][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.503220][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.510700][ T3654] bridge_slave_0: entered allmulticast mode
[  106.517055][ T3654] bridge_slave_0: entered promiscuous mode
[  106.523756][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.530900][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.538054][ T3654] bridge_slave_1: entered allmulticast mode
[  106.544598][ T3654] bridge_slave_1: entered promiscuous mode
[  106.603975][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.611130][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.618582][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.625712][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.652272][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.662150][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.673623][  T335] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.680761][  T335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.691615][  T335] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.698738][  T335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.733510][ T3654] veth0_vlan: entered promiscuous mode
[  106.746254][ T3654] veth1_macvtap: entered promiscuous mode
[  106.794269][ T3665] binder: Unknown parameter 'sfĺ†übeM'
[  106.892582][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  106.910778][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  106.922799][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  106.933607][   T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32
[  107.076163][ T3694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  107.076194][ T3694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615
[  107.175375][ T3698] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  107.192840][ T3698] rust_binder: Write failure EINVAL in pid:13
[  107.242445][ T3699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.257296][ T3699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.577704][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  107.727716][   T10] usb 7-1: Using ep0 maxpacket: 32
[  107.734053][   T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  107.742383][   T10] usb 7-1: config 0 has no interface number 0
[  107.748659][   T10] usb 7-1: config 0 interface 184 has no altsetting 0
[  107.756912][   T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  107.766143][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.774279][   T10] usb 7-1: Product: syz
[  107.778492][   T10] usb 7-1: Manufacturer: syz
[  107.783164][   T10] usb 7-1: SerialNumber: syz
[  107.789018][   T10] usb 7-1: config 0 descriptor??
[  107.794800][   T10] smsc75xx v1.0.0
[  107.915358][ T3719] fuseblk: Bad value for 'fd'
[  107.974493][   T36] audit: type=1400 audit(1758267417.230:446): avc:  denied  { connect } for  pid=3730 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  107.977112][ T3731] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  108.001815][ T3731] rust_binder: Write failure EINVAL in pid:634
[  108.005955][ T3731] fuse: Bad value for 'rootmode'
[  108.069217][ T3732] rust_binder: Error while translating object.
[  108.069249][ T3732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  108.075585][ T3732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:634
[  108.205788][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  108.225772][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  108.435670][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  108.446968][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.456823][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.464969][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  108.477607][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  108.488423][   T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  108.498316][   T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32
[  108.509323][   T10] usb 7-1: USB disconnect, device number 2
[  108.995609][  T587] usb 6-1: USB disconnect, device number 3
[  109.085997][   T36] audit: type=1400 audit(1758267418.340:447): avc:  denied  { mounton } for  pid=3755 comm="syz.5.1061" path="/21/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  109.625688][   T36] audit: type=1400 audit(1758267418.880:448): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  109.660744][   T31] rust_binder: 3817: removing orphan mapping 0:4208
[  109.670312][ T3820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  109.937724][  T587] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  110.047700][   T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  110.067716][  T587] usb 1-1: device descriptor read/64, error -71
[  110.198892][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.209895][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.219687][   T31] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  110.228785][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.237490][   T31] usb 6-1: config 0 descriptor??
[  110.317761][  T587] usb 1-1: device descriptor read/64, error -71
[  110.557711][  T587] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  110.687723][  T587] usb 1-1: device descriptor read/64, error -71
[  110.927707][  T587] usb 1-1: device descriptor read/64, error -71
[  111.037846][  T587] usb usb1-port1: attempt power cycle
[  111.045732][   T31] hid-led 0003:27B8:01ED.000E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0
[  111.059908][   T31] hid-led 0003:27B8:01ED.000E: ThingM blink(1) initialized
[  111.377721][  T587] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  111.398783][  T587] usb 1-1: device descriptor read/8, error -71
[  111.528794][  T587] usb 1-1: device descriptor read/8, error -71
[  111.767719][  T587] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  111.789132][  T587] usb 1-1: device descriptor read/8, error -71
[  111.918941][  T587] usb 1-1: device descriptor read/8, error -71
[  112.027788][  T587] usb usb1-port1: unable to enumerate USB device
[  112.143163][ T3872] cgroup: Unknown subsys name 'euid<18446744073709551615'
[  112.818546][   T31] usb 6-1: USB disconnect, device number 4
[  113.034757][ T3884] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  113.115733][ T3899] SELinux: failed to load policy
[  113.127839][  T331] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[  113.173297][ T3912] rust_binder: Error while translating object.
[  113.173355][ T3912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  113.179660][ T3912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:41
[  113.209652][ T3916] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1118'.
[  113.250857][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'.
[  113.271106][   T36] audit: type=1400 audit(1758267422.530:449): avc:  denied  { mount } for  pid=3925 comm="syz.3.1121" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  113.288843][  T331] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  113.301733][  T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.310490][  T331] usb 1-1: config 0 descriptor??
[  113.717822][  T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  113.719326][ T3878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.728264][  T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  113.738709][ T3878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.747215][  T331] asix 1-1:0.0: probe with driver asix failed with error -32
[  113.827858][ T3934] fuse: Unknown parameter ''
[  113.951336][ T1808] Bluetooth: hci0: Frame reassembly failed (-84)
[  115.014115][   T36] audit: type=1400 audit(1758267424.270:450): avc:  denied  { create } for  pid=3948 comm="syz.3.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  116.027723][  T361] Bluetooth: hci0: command 0x1003 tx timeout
[  116.027721][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  116.081091][   T36] audit: type=1326 audit(1758267425.340:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.104474][   T36] audit: type=1326 audit(1758267425.340:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.128843][   T36] audit: type=1326 audit(1758267425.340:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.152698][   T36] audit: type=1326 audit(1758267425.340:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.176574][   T36] audit: type=1326 audit(1758267425.340:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.200128][   T36] audit: type=1326 audit(1758267425.340:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.200686][   T10] usb 1-1: USB disconnect, device number 36
[  116.238090][   T36] audit: type=1326 audit(1758267425.340:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.286100][   T36] audit: type=1326 audit(1758267425.340:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3963 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b07b8eba9 code=0x7ffc0000
[  116.396042][ T3976] rust_binder: Error in use_page_slow: ESRCH
[  116.396070][ T3976] rust_binder: use_range failure ESRCH
[  116.402974][ T3976] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[  116.408769][ T3976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  116.416866][ T3976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:52
[  116.500048][ T3985] fuse: Bad value for 'rootmode'
[  116.535408][ T3989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1142'.
[  116.544911][ T3989] netlink: 'syz.5.1142': attribute type 46 has an invalid length.
[  116.637904][ T4002] 9pnet: Could not find request transport: �G
[  116.649963][   T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  116.807683][   T10] usb 1-1: Using ep0 maxpacket: 16
[  116.817343][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.832091][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.847854][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  116.856944][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.875976][   T10] usb 1-1: config 0 descriptor??
[  117.496290][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  117.507869][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  117.529412][   T10] usb 1-1: USB disconnect, device number 37
[  117.566244][ T4027] rust_binder: Write failure EINVAL in pid:110
[  117.579802][ T4027] SELinux: failed to load policy
[  118.031534][ T4048] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.031648][ T4048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663
[  118.048108][ T4048] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.117992][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  118.287669][   T10] usb 6-1: Using ep0 maxpacket: 8
[  118.299120][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  118.318792][   T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.40
[  118.337681][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.345710][   T10] usb 6-1: Product: ĐĄ
[  118.357683][   T10] usb 6-1: Manufacturer: �⎜鯅є⾴휲ꖊ�斂�扰쓮艰垴ᕏနᥟ֩漮冼㋉艳⇳猝��Ἵ�వㄫ翄觗ᢵ╸�₾륨㪫脍�뮍럇꬚蝾닕ߖȡĞ�ﲬ�쮴��ࣙ�娛햗ތ衏뽬璉쌤௤㦰㊲潒脨꩏�쮌�䯮몄趸煫憑�寶対�杮シ⿡�鰙횷첶ླ禯欺㿇֞ᴶળퟜ⢤艽
[  118.389669][   T10] usb 6-1: SerialNumber: 䴇뻰菠壢쾶ⓕ犎짓�풟異�᳣롮຅�
[  118.407708][  T331] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  118.558872][  T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.569981][  T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.580114][  T331] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  118.589433][  T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.606204][  T331] usb 1-1: config 0 descriptor??
[  118.609934][   T10] usbhid 6-1:1.0: can't add hid device: -71
[  118.617149][   T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  118.638997][   T10] usb 6-1: USB disconnect, device number 6
[  119.228265][  T331] hid-led 0003:27B8:01ED.000F: probe with driver hid-led failed with error -71
[  119.241113][  T331] usb 1-1: USB disconnect, device number 38
[  119.331018][ T4065] rust_binder: Error while translating object.
[  119.331053][ T4065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  119.337263][ T4065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:123
[  119.386106][   T65] hid-generic 007F:6E8D:0005.0010: item fetching failed at offset 1/5
[  119.403695][   T65] hid-generic 007F:6E8D:0005.0010: probe with driver hid-generic failed with error -22
[  119.773785][ T4086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  119.778473][ T4088] overlayfs: failed to clone upperpath
[  119.893050][   T36] kauditd_printk_skb: 28 callbacks suppressed
[  119.893070][   T36] audit: type=1400 audit(1758267429.150:487): avc:  granted  { setsecparam } for  pid=4099 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  120.145632][ T4104] netlink: 679 bytes leftover after parsing attributes in process `syz.0.1184'.
[  120.155372][ T4104] netlink: 679 bytes leftover after parsing attributes in process `syz.0.1184'.
[  120.273739][ T4108] bridge0: port 3(veth1_vlan) entered blocking state
[  120.280547][ T4108] bridge0: port 3(veth1_vlan) entered disabled state
[  120.287558][ T4108] veth1_vlan: entered allmulticast mode
[  120.293776][ T4108] veth1_vlan: entered promiscuous mode
[  120.299437][ T4108] bridge0: port 3(veth1_vlan) entered blocking state
[  120.306567][ T4108] bridge0: port 3(veth1_vlan) entered forwarding state
[  120.314471][ T4108] rust_binder: 689: no such ref 16777219
[  120.320258][ T4108] rust_binder: Write failure EINVAL in pid:689
[  120.322820][ T4108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689
[  120.330006][ T4108] netlink: 'syz.0.1185': attribute type 63 has an invalid length.
[  120.348889][ T4108] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1185'.
[  120.588192][  T330] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  120.697702][   T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  120.737750][  T330] usb 6-1: Using ep0 maxpacket: 32
[  120.743978][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.754903][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.764679][  T330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  120.777600][  T330] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  120.786694][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.795576][  T330] usb 6-1: config 0 descriptor??
[  120.801718][  T330] usbhid 6-1:0.0: can't add hid device: -22
[  120.807753][  T330] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  120.844163][ T4135] tc_dump_action: action bad kind
[  120.868695][   T31] usb 1-1: Using ep0 maxpacket: 32
[  120.877217][   T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  120.885892][   T31] usb 1-1: config 0 has no interface number 0
[  120.892796][   T31] usb 1-1: config 0 interface 184 has no altsetting 0
[  120.901384][   T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  120.911110][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.919433][   T31] usb 1-1: Product: syz
[  120.923794][   T31] usb 1-1: Manufacturer: syz
[  120.928596][   T31] usb 1-1: SerialNumber: syz
[  120.934198][   T31] usb 1-1: config 0 descriptor??
[  120.942602][   T31] smsc75xx v1.0.0
[  121.008564][ T4141] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.015077][ T4112] overlayfs: disabling nfs_export due to verity=require
[  121.038552][ T4112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  121.040219][   T36] audit: type=1400 audit(1758267430.300:488): avc:  denied  { getattr } for  pid=4111 comm="syz.5.1187" name="/" dev="incremental-fs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  121.097087][ T4156] netlink: 'syz.6.1201': attribute type 4 has an invalid length.
[  121.105003][ T4156] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1201'.
[  121.139179][ T4166] overlayfs: failed to resolve './file1': -2
[  121.177182][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  121.187553][   T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  121.198160][   T31] usb 1-1: USB disconnect, device number 39
[  121.248432][  T330] usb 6-1: USB disconnect, device number 7
[  121.697842][ T4178] 9pnet_fd: Insufficient options for proto=fd
[  121.714127][ T4181] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1209'.
[  121.780473][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  122.007720][   T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  122.157758][   T31] usb 1-1: Using ep0 maxpacket: 8
[  122.164039][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  122.173274][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.185579][   T31] usb 1-1: config 0 descriptor??
[  122.194105][   T36] audit: type=1326 audit(1758267431.450:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.6.1216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x0
[  122.304289][ T4199] veth0_virt_wifi: entered allmulticast mode
[  122.310677][ T4198] veth0_virt_wifi: left allmulticast mode
[  122.595776][   T31] magicmouse 0003:05AC:0324.0011: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0
[  122.798343][ T4192] sock: sock_timestamping_bind_phc: sock not bind to device
[  122.807246][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.816342][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.951841][  T330] usb 1-1: USB disconnect, device number 40
[  123.082780][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4210 comm=syz.6.1222
[  123.481527][ T4228] netlink: 'syz.3.1228': attribute type 1 has an invalid length.
[  123.489366][ T4228] netlink: 'syz.3.1228': attribute type 2 has an invalid length.
[  123.670753][ T4250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.701608][   T36] audit: type=1400 audit(1758267432.960:490): avc:  denied  { search } for  pid=4255 comm="syz.0.1238" name="/" dev="configfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  123.702338][ T4256] netlink: 'syz.0.1238': attribute type 4 has an invalid length.
[  123.708284][   T36] audit: type=1400 audit(1758267432.960:491): avc:  denied  { write } for  pid=4255 comm="syz.0.1238" name="/" dev="configfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  123.730708][ T4256] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1238'.
[  123.787873][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  123.794071][  T361] Bluetooth: hci0: command 0x1003 tx timeout
[  123.850041][ T4265] rust_binder: Write failure EINVAL in pid:149
[  124.382540][ T4285] batadv_slave_0: entered promiscuous mode
[  124.395277][ T4285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=4285 comm=syz.3.1245
[  124.408487][ T4284] batadv_slave_0: left promiscuous mode
[  124.465815][ T4291] /dev/loop0: Can't lookup blockdev
[  124.571645][ T4297] binder: Unknown parameter 'fsname'
[  124.577682][ T4297] netlink: 'syz.0.1251': attribute type 3 has an invalid length.
[  124.599966][   T36] audit: type=1326 audit(1758267433.860:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8498eba9 code=0x7ffc0000
[  124.623940][   T36] audit: type=1326 audit(1758267433.860:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8498eba9 code=0x7ffc0000
[  124.647500][   T36] audit: type=1326 audit(1758267433.860:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e8498eba9 code=0x7ffc0000
[  124.670982][   T36] audit: type=1326 audit(1758267433.860:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8498eba9 code=0x7ffc0000
[  124.694416][   T36] audit: type=1326 audit(1758267433.860:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.0.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8498eba9 code=0x7ffc0000
[  124.820000][ T4320] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1258'.
[  124.829159][ T4320] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1258'.
[  124.838200][ T4320] netlink: 'syz.6.1258': attribute type 6 has an invalid length.
[  124.845995][ T4320] netlink: 'syz.6.1258': attribute type 5 has an invalid length.
[  124.853774][ T4320] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1258'.
[  124.922681][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1263'.
[  124.931914][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1263'.
[  125.017708][   T65] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  125.062176][   T36] kauditd_printk_skb: 12 callbacks suppressed
[  125.062198][   T36] audit: type=1400 audit(1758267434.320:509): avc:  denied  { map } for  pid=4351 comm="syz.3.1269" path="/556" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  125.168909][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  125.194953][   T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  125.228861][   T65] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  125.246964][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.263643][   T65] usb 6-1: config 0 descriptor??
[  125.269044][ T4315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  125.617648][ T4377] overlayfs: failed to clone lowerpath
[  125.687498][   T65] microsoft 0003:045E:009D.0012: bogus close delimiter
[  125.696970][   T65] microsoft 0003:045E:009D.0012: item 0 4 2 10 parsing failed
[  125.704842][   T65] microsoft 0003:045E:009D.0012: parse failed
[  125.711390][   T65] microsoft 0003:045E:009D.0012: probe with driver microsoft failed with error -22
[  126.053692][   T36] audit: type=1400 audit(1758267435.310:510): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  126.213292][ T4421] overlayfs: failed to clone lowerpath
[  126.234945][   T36] audit: type=1400 audit(1758267435.490:511): avc:  denied  { read } for  pid=4424 comm="syz.6.1292" name="/" dev="configfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  126.272624][   T36] audit: type=1400 audit(1758267435.510:512): avc:  denied  { open } for  pid=4424 comm="syz.6.1292" path="/" dev="configfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  126.295353][   T36] audit: type=1400 audit(1758267435.520:513): avc:  denied  { bind } for  pid=4314 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  126.892605][   T36] audit: type=1326 audit(1758267436.150:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.6.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x7ffc0000
[  126.943586][   T36] audit: type=1326 audit(1758267436.150:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.6.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x7ffc0000
[  127.017783][   T36] audit: type=1326 audit(1758267436.150:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.6.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x7ffc0000
[  127.067678][   T36] audit: type=1326 audit(1758267436.150:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.6.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1456b8eba9 code=0x7ffc0000
[  127.107678][   T36] audit: type=1326 audit(1758267436.150:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.6.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x7ffc0000
[  127.115173][ T4443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  127.166111][ T4444] rust_binder: got new transaction with bad transaction stack
[  127.166140][ T4444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:760
[  127.478785][ T4448] tipc: Started in network mode
[  127.493181][ T4448] tipc: Node identity 5f2d0000000000000000000000000001, cluster identity 4711
[  127.502695][ T4448] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  127.791807][   T31] usb 6-1: USB disconnect, device number 8
[  127.888850][ T4454] rust_binder: 168: no such ref 3
[  127.894016][ T4454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[  127.894232][ T4454] rust_binder: Write failure EINVAL in pid:168
[  128.207706][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  128.367687][   T31] usb 6-1: Using ep0 maxpacket: 32
[  128.374160][   T31] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  128.382733][   T31] usb 6-1: config 0 has no interface number 0
[  128.389184][   T31] usb 6-1: config 0 interface 184 has no altsetting 0
[  128.397810][   T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  128.407242][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.415558][   T31] usb 6-1: Product: syz
[  128.420082][   T31] usb 6-1: Manufacturer: syz
[  128.424791][   T31] usb 6-1: SerialNumber: syz
[  128.430694][   T31] usb 6-1: config 0 descriptor??
[  128.437249][   T31] smsc75xx v1.0.0
[  128.841158][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  128.853324][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  128.863306][   T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  128.873788][   T31] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  128.883611][   T31] usb 6-1: USB disconnect, device number 9
[  129.057690][  T354] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  129.082204][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1318'.
[  129.208892][  T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.220082][  T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.230412][  T354] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  129.239706][  T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.249072][  T354] usb 1-1: config 0 descriptor??
[  129.399561][ T4513] cgroup: No subsys list or none specified
[  130.061619][  T354] hid-led 0003:27B8:01ED.0013: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  130.099927][  T354] hid-led 0003:27B8:01ED.0013: ThingM blink(1) initialized
[  130.258848][  T354] usb 1-1: USB disconnect, device number 41
[  130.827112][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1338'.
[  131.155365][   T36] kauditd_printk_skb: 50 callbacks suppressed
[  131.155397][   T36] audit: type=1400 audit(1758267440.410:569): avc:  denied  { mounton } for  pid=4585 comm="syz.0.1344" path="/248/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  131.184483][ T4588] overlayfs: workdir and upperdir must reside under the same mount
[  131.193665][   T36] audit: type=1400 audit(1758267440.450:570): avc:  denied  { setattr } for  pid=4585 comm="syz.0.1344" path="socket:[29856]" dev="sockfs" ino=29856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.390123][   T36] audit: type=1400 audit(1758267440.650:571): avc:  denied  { watch_reads } for  pid=4591 comm="syz.6.1346" path="/102" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  131.415893][   T36] audit: type=1400 audit(1758267440.650:572): avc:  denied  { watch } for  pid=4591 comm="syz.6.1346" path="/102/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  131.537696][   T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  131.667694][   T31] usb 1-1: device descriptor read/64, error -71
[  131.908061][   T31] usb 1-1: device descriptor read/64, error -71
[  132.157699][   T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  132.287725][   T31] usb 1-1: device descriptor read/64, error -71
[  132.342626][ T4599] netlink: 'syz.5.1348': attribute type 29 has an invalid length.
[  132.463540][ T4601] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  132.463574][ T4601] rust_binder: Error while translating object.
[  132.474412][ T4601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  132.480708][ T4601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210
[  132.513678][ T4604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1350'.
[  132.527752][   T31] usb 1-1: device descriptor read/64, error -71
[  132.647935][   T31] usb usb1-port1: attempt power cycle
[  132.777690][  T330] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  132.958945][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.974341][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.985411][  T330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  133.000478][   T31] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  133.008431][  T330] usb 6-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00
[  133.018539][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.027504][  T330] usb 6-1: config 0 descriptor??
[  133.038905][   T31] usb 1-1: device descriptor read/8, error -71
[  133.188618][   T31] usb 1-1: device descriptor read/8, error -71
[  133.438131][   T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  133.478884][   T31] usb 1-1: device descriptor read/8, error -71
[  133.630027][   T31] usb 1-1: device descriptor read/8, error -71
[  133.758326][  T330] usbhid 6-1:0.0: can't add hid device: -71
[  133.766106][  T330] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  133.778331][   T31] usb usb1-port1: unable to enumerate USB device
[  133.795323][  T330] usb 6-1: USB disconnect, device number 10
[  133.836783][ T4612] binder: Bad value for 'stats'
[  134.158218][ T4623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230
[  134.339644][   T36] audit: type=1400 audit(1758267443.600:573): avc:  denied  { setopt } for  pid=4624 comm="syz.0.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.411699][ T4627] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  134.604129][ T4641] syz.6.1362 uses obsolete (PF_INET,SOCK_PACKET)
[  134.684228][ T4650] overlayfs: failed to clone upperpath
[  134.791419][  T587] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  134.970732][  T587] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  134.997695][  T587] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  135.019990][  T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  135.035701][  T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  135.053243][  T587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  135.075816][  T587] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.091391][  T587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.113508][  T587] usb 1-1: config 0 descriptor??
[  135.120826][ T4637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.545311][   T36] audit: type=1400 audit(1758267444.800:574): avc:  denied  { write } for  pid=4636 comm="syz.0.1360" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  135.575016][  T587] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd
[  135.589527][  T587] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  135.611016][  T587] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  135.778906][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.796724][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.037713][   T45] usb 1-1: reset high-speed USB device number 46 using dummy_hcd
[  137.056653][  T331] rust_binder: 4620: removing orphan mapping 0:24
[  137.602566][ T4691] binder: Bad value for 'stats'
[  137.681484][ T4696] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  137.681518][ T4696] rust_binder: Read failure Err(EFAULT) in pid:809
[  137.700869][ T4685] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  137.723316][ T4685] hid-generic 0000:0000:0000.0015: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  137.820153][ T4705] fuse: Bad value for 'user_id'
[  137.826325][ T4705] fuse: Bad value for 'user_id'
[  138.000113][ T4724] netlink: 'syz.6.1391': attribute type 15 has an invalid length.
[  138.197710][   T45] usb 1-1: device descriptor read/64, error -71
[  138.308124][   T45] usb 1-1: device reset changed ep0 maxpacket size!
[  138.315223][  T330] usb 1-1: USB disconnect, device number 46
[  138.458586][  T330] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  138.624067][  T330] usb 1-1: Using ep0 maxpacket: 8
[  138.639448][  T330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  138.677678][  T330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  138.726299][  T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  138.747689][  T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.765995][  T330] usb 1-1: Product: 苊􉱷흚浼࿳��૨旞鸗鉑ۡ팦ꀲ謹⭮ỡ臉誝肝ᇧٞ촪⯆冋얭Ց誰薽拞賜᯿侾㱍뾡㻙⼠赿磄걲ﳅ�‍�₇鳭賧Ს䑖靚㮯貫ᚖ궹䙳�㊲뵦��⓳嫏᧰얊뇏픅ȶ℧�唋�魳迌▏챱勞ឦ"⤦邧ꊠ⧉
[  138.817704][  T330] usb 1-1: Manufacturer: â°‰
[  138.822381][  T330] usb 1-1: SerialNumber: syz
[  139.051456][ T4708] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  139.071510][  T330] cdc_ncm 1-1:1.0: bind() failure
[  139.079899][  T330] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  139.086750][  T330] cdc_ncm 1-1:1.1: bind() failure
[  139.118937][  T330] usb 1-1: USB disconnect, device number 47
[  139.267694][  T354] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  139.427751][  T354] usb 6-1: Using ep0 maxpacket: 32
[  139.436551][  T354] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  139.455365][  T354] usb 6-1: config 0 has no interface number 0
[  139.463916][  T354] usb 6-1: config 0 interface 184 has no altsetting 0
[  139.479171][  T354] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  139.497685][  T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.516013][  T354] usb 6-1: Product: syz
[  139.520449][  T354] usb 6-1: Manufacturer: syz
[  139.525089][  T354] usb 6-1: SerialNumber: syz
[  139.538920][  T354] usb 6-1: config 0 descriptor??
[  139.548261][  T354] smsc75xx v1.0.0
[  139.672005][   T36] audit: type=1400 audit(1758267448.930:575): avc:  denied  { map } for  pid=4752 comm="syz.0.1399" path="socket:[30295]" dev="sockfs" ino=30295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.869651][ T4767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1405'.
[  139.879052][ T4767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=4767 comm=syz.6.1405
[  140.077714][ T4685] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  140.146744][  T354] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  140.157733][  T354] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  140.227714][ T4685] usb 1-1: device descriptor read/64, error -71
[  140.478484][ T4685] usb 1-1: device descriptor read/64, error -71
[  140.479988][ T4773] overlayfs: failed to clone upperpath
[  140.588549][ T4780] overlayfs: failed to clone upperpath
[  140.667140][ T2259] bridge0: port 4(syz_tun) entered disabled state
[  140.675070][ T2259] syz_tun (unregistering): left allmulticast mode
[  140.681630][ T2259] syz_tun (unregistering): left promiscuous mode
[  140.688160][ T2259] bridge0: port 4(syz_tun) entered disabled state
[  140.708046][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.715644][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.717746][ T4685] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  140.722888][ T4779] bridge_slave_0: entered allmulticast mode
[  140.737462][ T4779] bridge_slave_0: entered promiscuous mode
[  140.744241][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.751582][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.758728][ T4779] bridge_slave_1: entered allmulticast mode
[  140.765113][ T4779] bridge_slave_1: entered promiscuous mode
[  140.783164][  T335] veth0_to_team: left allmulticast mode
[  140.789355][  T335] veth0_to_team: left promiscuous mode
[  140.794905][  T335] bridge0: port 3(veth0_to_team) entered disabled state
[  140.808073][  T335] bridge_slave_1: left allmulticast mode
[  140.813821][  T335] bridge_slave_1: left promiscuous mode
[  140.820424][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.828871][  T335] bridge_slave_0: left allmulticast mode
[  140.834684][  T335] bridge_slave_0: left promiscuous mode
[  140.840697][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.857765][ T4685] usb 1-1: device descriptor read/64, error -71
[  140.869359][  T335] bridge0 (unregistering): left allmulticast mode
[  140.898495][   T36] audit: type=1326 audit(1758267450.160:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.6.1418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1456b8eba9 code=0x0
[  140.949599][ T4805] 9pnet_fd: Insufficient options for proto=fd
[  140.972011][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1398'.
[  140.981978][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.992206][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.003134][  T354] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  141.014158][  T354] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  141.026258][  T354] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  141.035865][  T354] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  141.044176][  T335] tipc: Disabling bearer <udp:syz1>
[  141.049495][  T335] tipc: Left network mode
[  141.059309][  T335] veth1_macvtap: left promiscuous mode
[  141.064957][  T335] veth0_vlan: left promiscuous mode
[  141.072133][  T354] usb 6-1: USB disconnect, device number 11
[  141.097796][ T4685] usb 1-1: device descriptor read/64, error -71
[  141.135648][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.142760][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.150116][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.157151][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.182255][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.193404][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.207067][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.214332][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.223491][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.227929][ T4685] usb usb1-port1: attempt power cycle
[  141.230605][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.268416][ T4779] veth0_vlan: entered promiscuous mode
[  141.281707][ T4779] veth1_macvtap: entered promiscuous mode
[  141.568073][ T4685] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  141.588837][ T4685] usb 1-1: device descriptor read/8, error -71
[  141.598740][ T4824] rust_binder: 4823 RLIMIT_NICE not set
[  141.604504][ T4824] rust_binder: got new transaction with bad transaction stack
[  141.617714][ T4824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[  141.630281][ T4823] tipc: Started in network mode
[  141.649799][ T4823] tipc: Node identity 4294d6a3fc4b, cluster identity 4711
[  141.660037][ T4823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.674053][ T4823] tipc: Disabling bearer <eth:syzkaller0>
[  141.728745][ T4685] usb 1-1: device descriptor read/8, error -71
[  141.761026][  T330] rust_binder: 4822: removing orphan mapping 0:4224
[  141.832008][ T4833] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1424'.
[  141.977747][ T4685] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  142.008838][ T4685] usb 1-1: device descriptor read/8, error -71
[  142.149384][ T4685] usb 1-1: device descriptor read/8, error -71
[  142.268291][  T330] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  142.277009][ T4685] usb usb1-port1: unable to enumerate USB device
[  142.407749][  T330] usb 6-1: device descriptor read/64, error -71
[  142.647749][  T330] usb 6-1: device descriptor read/64, error -71
[  142.897810][  T330] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  143.024751][ T4881] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1437'.
[  143.037780][  T330] usb 6-1: device descriptor read/64, error -71
[  143.049987][ T4881] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1437'.
[  143.103743][   T36] audit: type=1400 audit(1758267452.360:577): avc:  denied  { ioctl } for  pid=4884 comm="syz.0.1438" path="socket:[31519]" dev="sockfs" ino=31519 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  143.288443][  T330] usb 6-1: device descriptor read/64, error -71
[  143.409422][  T330] usb usb6-port1: attempt power cycle
[  143.698669][   T36] audit: type=1326 audit(1758267452.960:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.6.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1456b8eba9 code=0x0
[  143.757758][  T330] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  143.779218][  T330] usb 6-1: device descriptor read/8, error -71
[  143.798120][  T354] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  143.918680][  T330] usb 6-1: device descriptor read/8, error -71
[  143.949627][  T354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.960886][  T354] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.973585][  T354] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  143.984453][  T354] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.000848][  T354] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.011433][  T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.020446][  T354] usb 1-1: Product: syz
[  144.024864][  T354] usb 1-1: Manufacturer: syz
[  144.030563][  T354] usb 1-1: SerialNumber: syz
[  144.039091][  T354] cdc_mbim 1-1:1.0: skipping garbage
[  144.167742][  T330] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  144.189294][  T330] usb 6-1: device descriptor read/8, error -71
[  144.239258][ T4901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.318957][  T330] usb 6-1: device descriptor read/8, error -71
[  144.428211][  T330] usb usb6-port1: unable to enumerate USB device
[  144.559619][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  144.798012][   T36] audit: type=1400 audit(1758267454.060:579): avc:  denied  { listen } for  pid=4929 comm="syz.6.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.825427][   T36] audit: type=1400 audit(1758267454.060:580): avc:  denied  { create } for  pid=4929 comm="syz.6.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  144.847862][ T4935] random: crng reseeded on system resumption
[  144.849426][ T4938] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1456'.
[  144.863004][ T4901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.870455][   T36] audit: type=1400 audit(1758267454.110:581): avc:  denied  { write } for  pid=4934 comm="syz.7.1455" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  144.880175][ T4935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.894804][ T4938] gretap0: entered promiscuous mode
[  144.934288][ T4942] rust_binder: Write failure EFAULT in pid:19
[  144.948973][ T4944] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  144.994148][ T4948] netlink: 'syz.7.1459': attribute type 1 has an invalid length.
[  145.511049][ T4968] overlayfs: failed to clone upperpath
[  145.712292][ T4978] /dev/rnullb0: Can't open blockdev
[  145.731235][ T4980] binder: Unknown parameter 'fscontext?}'
[  145.752960][   T36] audit: type=1400 audit(1758267455.010:582): avc:  denied  { setopt } for  pid=4981 comm="syz.5.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.047729][   T65] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  146.066397][ T4985] 9pnet_fd: Insufficient options for proto=fd
[  146.208827][   T65] usb 6-1: Using ep0 maxpacket: 16
[  146.215226][   T65] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  146.225613][   T65] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.236589][   T65] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.246397][   T65] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  146.259224][   T65] usb 6-1: config 7 interface 0 has no altsetting 0
[  146.265913][   T65] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  146.275586][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.558753][  T354] cdc_mbim 1-1:1.0: bind() failure
[  146.567155][  T354] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  146.575515][  T354] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  146.588727][  T354] usb 1-1: USB disconnect, device number 52
[  146.688168][   T36] audit: type=1400 audit(1758267455.950:583): avc:  denied  { map } for  pid=4994 comm="syz.0.1476" path="socket:[32820]" dev="sockfs" ino=32820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  146.704469][   T65] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0016/input/input24
[  146.730942][   T65] kye 0003:0458:5010.0016: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  146.794458][ T5000] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  146.794490][ T5000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  146.794554][ T4999] rust_binder: Fixups oob 165 172 361 173
[  146.804767][   T36] audit: type=1400 audit(1758267456.050:584): avc:  denied  { ioctl } for  pid=4998 comm="syz.0.1477" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  146.812713][ T4999] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  146.818141][ T5000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:851
[  146.845310][ T4999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  146.860444][ T4999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:851
[  146.889649][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1472'.
[  146.908688][   T36] audit: type=1400 audit(1758267456.170:585): avc:  denied  { write } for  pid=5001 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  146.931429][ T4685] usb 6-1: USB disconnect, device number 16
[  147.566302][ T5006] rust_binder: 5006 RLIMIT_NICE not set
[  147.572841][   T65] rust_binder: 5005: removing orphan mapping 0:1048
[  147.592625][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.592670][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.599601][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.606434][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.612941][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.625963][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.626001][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.632678][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.639274][ T5008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.659761][ T5013] rust_binder: Failed copying remainder into alloc: EFAULT
[  147.666318][ T5013] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  147.673664][ T5013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  147.681999][ T5013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295
[  148.007765][  T330] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  148.127676][   T65] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  148.192785][ T5023] veth0_vlan: entered allmulticast mode
[  148.729391][   T65] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.742660][   T65] usb 1-1: not running at top speed; connect to a high speed hub
[  148.753371][   T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.768139][   T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.783365][   T65] usb 1-1: string descriptor 0 read error: -22
[  148.795017][   T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.807707][  T330] usb 6-1: Using ep0 maxpacket: 16
[  148.809438][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.819256][  T330] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  148.837805][   T65] usb 1-1: 0:2 : does not exist
[  148.839271][  T330] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.856041][  T330] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.867752][  T330] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  148.882845][  T330] usb 6-1: config 7 interface 0 has no altsetting 0
[  148.891274][  T330] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  148.903754][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.159638][   T65] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  149.174026][   T65] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  149.184585][   T65] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  149.195961][   T65] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  149.214851][   T65] usb 1-1: USB disconnect, device number 53
[  149.217212][ T5028] __vm_enough_memory: pid: 5028, comm: syz.7.1486, bytes: 18014402804453376 not enough memory for the allocation
[  149.224724][   T36] audit: type=1400 audit(1758267458.470:586): avc:  denied  { relabelto } for  pid=5027 comm="syz.7.1486" name="file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  149.267708][   T36] audit: type=1400 audit(1758267458.500:587): avc:  denied  { unlink } for  pid=4779 comm="syz-executor" name="file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  149.324393][   T36] audit: type=1400 audit(1758267458.580:588): avc:  denied  { setattr } for  pid=5014 comm="syz.5.1482" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  149.349265][  T330] usbhid 6-1:7.0: can't add hid device: -71
[  149.355933][  T330] usbhid 6-1:7.0: probe with driver usbhid failed with error -71
[  149.365819][  T330] usb 6-1: USB disconnect, device number 17
[  149.401070][ T5038] kvm: MWAIT instruction emulated as NOP!
[  149.550573][ T5042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[  149.713089][ T5050] overlayfs: missing 'lowerdir'
[  149.739178][ T5050] /dev/rnullb0: Can't open blockdev
[  149.849580][ T5056] fuse: Bad value for 'fd'
[  149.897831][ T5068] rust_binder: Error while translating object.
[  149.897882][ T5068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  149.910936][ T5068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:299
[  150.201081][ T5082] rust_binder: Error while translating object.
[  150.201125][ T5082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  150.207421][ T5082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:884
[  150.232822][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  150.232843][   T36] audit: type=1326 audit(1758267459.490:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.0.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e8498eba9 code=0x0
[  150.776133][ T5091] netlink: 'syz.5.1507': attribute type 2 has an invalid length.
[  150.797795][ T5092] netlink: 'syz.5.1507': attribute type 2 has an invalid length.
[  150.820493][ T5094] syz.5.1508: attempt to access beyond end of device
[  150.820493][ T5094] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  150.833440][ T5094] exFAT-fs (loop5): unable to read boot sector
[  150.839657][ T5094] exFAT-fs (loop5): failed to read boot sector
[  150.845884][ T5094] exFAT-fs (loop5): failed to recognize exfat type
[  150.871607][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  152.273931][   T36] audit: type=1400 audit(1758267461.530:591): avc:  denied  { module_load } for  pid=5099 comm="syz.0.1511" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  152.327397][ T5102] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1511'.
[  152.383157][ T5102] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  152.524728][ T5111] rust_binder: Write failure EFAULT in pid:902
[  152.591641][ T5117] virtio-fs: tag </dev/rnullb0> not found
[  152.917676][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.923875][  T361] Bluetooth: hci0: command 0x1003 tx timeout
[  152.961711][  T335] Bluetooth: hci0: Frame reassembly failed (-84)
[  152.974817][ T5122] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  153.112330][ T5122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:911
[  153.113533][ T5128] rust_binder: 311: no such ref 0
[  153.133529][ T5128] rust_binder: 311: no such ref 0
[  153.138895][ T5128] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  153.146021][ T5128] rust_binder: 311: no such ref 64
[  153.151328][ T5128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311
[  153.266199][   T36] audit: type=1400 audit(1758267462.520:592): avc:  denied  { getopt } for  pid=5153 comm="syz.6.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  153.364029][ T5163] batadv_slave_0: entered promiscuous mode
[  153.379206][ T5162] batadv_slave_0: left promiscuous mode
[  154.068967][ T5182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325
[  154.097233][ T5189] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.107366][ T5189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332
[  154.130079][ T5191] random: crng reseeded on system resumption
[  154.164902][   T36] audit: type=1400 audit(1758267463.420:593): avc:  denied  { ioctl } for  pid=5190 comm="syz.5.1542" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  154.229350][ T5193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  154.987667][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  154.987862][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  155.122605][ T5221] rust_binder: Error while translating object.
[  155.122651][ T5221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  155.129037][ T5221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:928
[  155.149222][ T5221] rust_binder: Error while translating object.
[  155.158595][ T5221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  155.164816][ T5221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:928
[  155.243220][ T5223] can0: slcan on ttyS3.
[  155.336030][ T5223] can0 (unregistered): slcan off ttyS3.
[  155.365251][   T36] audit: type=1400 audit(1758267464.620:594): avc:  denied  { compute_member } for  pid=5244 comm="syz.5.1557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  155.418030][   T36] audit: type=1400 audit(1758267464.680:595): avc:  denied  { accept } for  pid=5256 comm="syz.6.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.637695][ T4685] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  155.787838][ T4685] usb 6-1: Using ep0 maxpacket: 32
[  155.794314][ T4685] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  155.803436][ T4685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.812543][ T4685] usb 6-1: config 0 descriptor??
[  156.177714][  T354] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  156.221312][ T4685] wacom 0003:056A:00F0.0017: hidraw0: USB HID v0.04 Device [HID 056a:00f0] on usb-dummy_hcd.5-1/input0
[  156.327677][  T354] usb 1-1: Using ep0 maxpacket: 32
[  156.334134][  T354] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  156.342420][  T354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.352615][  T354] usb 1-1: config 0 has no interface number 0
[  156.358784][  T354] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  156.371933][  T354] usb 1-1: config 0 interface 196 has no altsetting 0
[  156.380297][  T354] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  156.398963][  T354] usb 1-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3
[  156.408646][  T354] usb 1-1: Product: syz
[  156.412858][  T354] usb 1-1: Manufacturer: syz
[  156.417549][  T354] usb 1-1: SerialNumber: syz
[  156.429328][  T354] usb 1-1: config 0 descriptor??
[  156.435247][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5303 comm=syz.6.1569
[  156.435687][  T943] usb 6-1: USB disconnect, device number 18
[  156.452010][  T354] ipheth 1-1:0.196: Unable to find endpoints
[  156.475377][ T5308] rust_binder: Error while translating object.
[  156.475423][ T5308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  156.481869][   T36] audit: type=1400 audit(1758267465.730:596): avc:  granted  { setsecparam } for  pid=5307 comm="syz.7.1570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  156.495982][ T5308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52
[  156.511656][ T5308] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  156.514022][   T36] audit: type=1400 audit(1758267465.770:597): avc:  granted  { setsecparam } for  pid=5307 comm="syz.7.1570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  156.547544][ T5312] rust_binder: Error while translating object.
[  156.547586][ T5312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  156.553284][   T36] audit: type=1400 audit(1758267465.780:598): avc:  denied  { map } for  pid=5310 comm="syz.6.1571" path="pipe:[33516]" dev="pipefs" ino=33516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  156.559373][ T5312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52
[  156.617728][   T36] audit: type=1400 audit(1758267465.870:599): avc:  denied  { read write } for  pid=4779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  156.651059][   T36] audit: type=1400 audit(1758267465.870:600): avc:  denied  { open } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  156.680482][  T587] usb 1-1: USB disconnect, device number 54
[  156.687097][   T36] audit: type=1400 audit(1758267465.870:601): avc:  denied  { ioctl } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  156.720244][   T36] audit: type=1400 audit(1758267465.910:602): avc:  denied  { read } for  pid=5322 comm="syz.7.1575" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  156.743802][   T36] audit: type=1400 audit(1758267465.910:603): avc:  denied  { open } for  pid=5322 comm="syz.7.1575" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  157.113681][ T5326] cgroup: fork rejected by pids controller in /syz5
[  157.487892][  T587] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  157.597004][ T5469] rust_binder: 5468 RLIMIT_NICE not set
[  157.597592][ T5468] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  157.610324][ T5468] rust_binder: 65: no such ref 1
[  157.622480][  T943] rust_binder: 5467: removing orphan mapping 0:4248
[  157.678369][  T587] usb 1-1: not running at top speed; connect to a high speed hub
[  157.698602][  T587] usb 1-1: config 3 has an invalid interface number: 87 but max is 0
[  157.717007][  T587] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[  157.752921][  T587] usb 1-1: config 3 has no interface number 0
[  157.777736][  T587] usb 1-1: config 3 interface 87 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  157.797673][  T587] usb 1-1: config 3 interface 87 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.819598][  T587] usb 1-1: config 3 interface 87 altsetting 10 endpoint 0xE has invalid maxpacket 503, setting to 64
[  157.838549][  T587] usb 1-1: config 3 interface 87 altsetting 10 has a duplicate endpoint with address 0x9, skipping
[  157.855832][  T587] usb 1-1: config 3 interface 87 altsetting 10 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  157.891250][ T5483] batadv_slave_0: entered promiscuous mode
[  157.897474][  T587] usb 1-1: config 3 interface 87 altsetting 10 has a duplicate endpoint with address 0x2, skipping
[  157.915390][  T587] usb 1-1: config 3 interface 87 has no altsetting 0
[  157.918583][ T5483] batadv_slave_0: left promiscuous mode
[  157.928627][  T587] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01a2, bcdDevice=43.b7
[  157.938334][  T587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.947174][  T587] usb 1-1: Product: syz
[  157.961588][  T587] usb 1-1: Manufacturer: syz
[  157.966272][  T587] usb 1-1: SerialNumber: syz
[  157.986155][ T5364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  157.998062][ T5364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  158.144772][ T5488] can0: slcan on ttyS3.
[  158.248797][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.269919][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.300050][  T587] ftdi_sio 1-1:3.87: FTDI USB Serial Device converter detected
[  158.314266][  T587] ftdi_sio ttyUSB0: unknown device type: 0x43b7
[  158.335735][  T587] usb 1-1: USB disconnect, device number 55
[  158.351367][  T587] ftdi_sio 1-1:3.87: device disconnected
[  158.387689][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  158.548836][   T10] usb 6-1: Using ep0 maxpacket: 16
[  158.574624][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.596426][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  158.616238][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  158.625832][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.634098][   T10] usb 6-1: Product: syz
[  158.638326][   T10] usb 6-1: Manufacturer: syz
[  158.644188][   T10] usb 6-1: SerialNumber: syz
[  158.652041][   T10] usb 6-1: config 0 descriptor??
[  159.121941][  T943] usb 6-1: USB disconnect, device number 19
[  159.161379][ T5487] can0 (unregistered): slcan off ttyS3.
[  159.177795][ T5530] rust_binder: Error while translating object.
[  159.177842][ T5530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  159.192608][ T5530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:946
[  159.229327][ T5530] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  159.665714][  T943] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  159.714739][ T5552] fuse: Bad value for 'fd'
[  159.817845][  T943] usb 1-1: device descriptor read/64, error -71
[  160.087695][  T943] usb 1-1: device descriptor read/64, error -71
[  160.118024][ T5571] fuse: Unknown parameter '¨'
[  160.146596][ T5571] fuseblk: Bad value for 'user_id'
[  160.171668][ T5571] fuseblk: Bad value for 'user_id'
[  160.327730][  T943] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  160.377397][   T36] kauditd_printk_skb: 936 callbacks suppressed
[  160.377416][   T36] audit: type=1400 audit(1758267469.630:1540): avc:  denied  { search } for  pid=5583 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.409896][   T36] audit: type=1400 audit(1758267469.640:1541): avc:  denied  { read } for  pid=5583 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  160.433811][   T36] audit: type=1400 audit(1758267469.640:1542): avc:  denied  { read open } for  pid=5583 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  160.459909][   T36] audit: type=1400 audit(1758267469.640:1543): avc:  denied  { getattr } for  pid=5583 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  160.487669][  T943] usb 1-1: device descriptor read/64, error -71
[  160.518162][   T36] audit: type=1400 audit(1758267469.660:1544): avc:  denied  { name_bind } for  pid=5584 comm="syz.6.1605" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  160.541645][   T36] audit: type=1400 audit(1758267469.660:1545): avc:  denied  { node_bind } for  pid=5584 comm="syz.6.1605" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  160.565654][   T36] audit: type=1400 audit(1758267469.670:1546): avc:  denied  { ioctl } for  pid=5539 comm="syz.0.1596" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  160.580415][ T5590] audit: audit_backlog=65 > audit_backlog_limit=64
[  160.591943][   T36] audit: type=1400 audit(1758267469.700:1547): avc:  denied  { search } for  pid=5559 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.597729][ T5590] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  160.747720][  T943] usb 1-1: device descriptor read/64, error -71
[  160.867682][  T943] usb usb1-port1: attempt power cycle
[  161.207743][  T943] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  161.231204][  T943] usb 1-1: device descriptor read/8, error -71
[  161.360122][  T943] usb 1-1: device descriptor read/8, error -71
[  161.597702][  T943] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  161.620046][  T943] usb 1-1: device descriptor read/8, error -71
[  161.750336][  T943] usb 1-1: device descriptor read/8, error -71
[  161.801525][ T5615] binder: Bad value for 'max'
[  161.866055][  T943] usb usb1-port1: unable to enumerate USB device
[  162.067027][ T5624] SELinux:  policydb version 2134819135 does not match my version range 15-33
[  162.089440][ T5624] SELinux: failed to load policy
[  162.372435][ T5637] tc_dump_action: action bad kind
[  162.434641][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.434965][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.454205][ T5638] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  162.460582][ T5643] rust_binder: Write failure EINVAL in pid:953
[  162.494143][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.505814][ T5646] rust_binder: inc_ref_done called when no active inc_refs
[  162.516958][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.542391][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.560212][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.567075][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.573962][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.580820][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.587837][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.594676][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.604809][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.625556][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.643244][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.658038][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.675204][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.690016][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.735914][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.762412][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.777863][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.790916][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.801445][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.818366][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.825146][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.840054][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.847059][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.854087][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.861470][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.868382][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.875373][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.882247][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.898008][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.904852][ T5637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.920337][ T5659] rust_binder: Write failure EFAULT in pid:529
[  162.927638][ T5660] rust_binder: Write failure EINVAL in pid:958
[  162.950755][ T5659] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false
[  162.957059][ T5659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  162.969201][ T5659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:529
[  163.024302][ T5662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  163.033646][ T5662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:531
[  163.517714][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  163.570987][ T5680] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  163.680101][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11
[  163.691406][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024
[  163.702671][   T10] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  163.711764][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.721733][   T10] usb 6-1: config 0 descriptor??
[  164.335327][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  164.345233][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  164.354438][   T10] usb 6-1: USB disconnect, device number 20
[  164.939778][ T5684] input: syz0 as /devices/virtual/input/input29
[  164.961620][ T5684] random: crng reseeded on system resumption
[  165.509222][   T36] kauditd_printk_skb: 654 callbacks suppressed
[  165.509243][   T36] audit: type=1400 audit(1758267474.770:2198): avc:  denied  { create } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.532337][ T5697] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.537586][   T36] audit: type=1400 audit(1758267474.790:2199): avc:  denied  { create } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.566464][   T36] audit: type=1400 audit(1758267474.790:2200): avc:  denied  { write } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.588050][   T36] audit: type=1400 audit(1758267474.790:2201): avc:  denied  { read } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.610176][   T36] audit: type=1400 audit(1758267474.790:2202): avc:  denied  { read } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.633495][   T36] audit: type=1400 audit(1758267474.790:2203): avc:  denied  { write } for  pid=5696 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.653957][   T36] audit: type=1400 audit(1758267474.900:2204): avc:  denied  { sys_module } for  pid=5700 comm="syz.6.1642" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  165.689158][   T36] audit: type=1400 audit(1758267474.950:2205): avc:  denied  { create } for  pid=5702 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.709781][   T36] audit: type=1400 audit(1758267474.950:2206): avc:  denied  { write } for  pid=5702 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.732836][   T36] audit: type=1400 audit(1758267474.950:2207): avc:  denied  { read } for  pid=5702 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.848881][ T5707] rust_binder: Write failure EINVAL in pid:961
[  166.072181][ T5724] rust_binder: Write failure EFAULT in pid:970
[  166.094643][ T5723] +$<¶: renamed from bridge0 (while UP)
[  166.178109][ T5729] fuse: Bad value for 'fd'
[  166.178107][ T5728] fuse: Bad value for 'fd'
[  166.705004][ T5736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5736 comm=syz.6.1656
[  167.616366][ T5763] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  167.729790][ T5766] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1667'.
[  167.742600][ T5766] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1667'.
[  167.783565][ T5766] netlink: 'syz.7.1667': attribute type 6 has an invalid length.
[  167.811775][ T5766] netlink: 'syz.7.1667': attribute type 5 has an invalid length.
[  167.832257][ T5766] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1667'.
[  167.953456][ T5774] overlayfs: missing 'workdir'
[  168.071170][ T5774] SELinux: security_context_str_to_sid (sytem_uÝGĐą‰:˙ß) failed with errno=-22
[  168.098927][ T5779] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1670'.
[  168.524681][ T5800] rust_binder: 5794 RLIMIT_NICE not set
[  168.603776][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  169.202507][  T587] rust_binder: 5789: removing orphan mapping 0:24
[  169.250455][ T5816] tipc: Started in network mode
[  169.255593][ T5816] tipc: Node identity 3a07db408e63, cluster identity 4711
[  169.262944][ T5816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.296121][ T5816] syzkaller0: entered promiscuous mode
[  169.301978][ T5816] syzkaller0: entered allmulticast mode
[  169.314802][ T5816] tipc: Resetting bearer <eth:syzkaller0>
[  169.330224][ T5817] tipc: Resetting bearer <eth:syzkaller0>
[  169.356415][ T5817] tipc: Disabling bearer <eth:syzkaller0>
[  169.557015][ T5826] can0: slcan on ttyS3.
[  169.704924][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'.
[  169.817668][  T587] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  170.007678][  T587] usb 1-1: Using ep0 maxpacket: 16
[  170.021645][  T587] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.043247][  T587] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  170.082439][  T587] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  170.094047][  T587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.108420][  T587] usb 1-1: Product: syz
[  170.112722][  T587] usb 1-1: Manufacturer: syz
[  170.117332][  T587] usb 1-1: SerialNumber: syz
[  170.124621][  T587] usb 1-1: config 0 descriptor??
[  170.348590][  T354] usb 1-1: USB disconnect, device number 60
[  170.390200][ T5867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3210065785 (6420131570 ns) > initial count (5547860984 ns). Using initial count to start timer.
[  170.414408][ T5826] can0 (unregistered): slcan off ttyS3.
[  170.424770][ T5867] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  170.517871][   T36] kauditd_printk_skb: 828 callbacks suppressed
[  170.517892][   T36] audit: type=1400 audit(1758267479.780:3036): avc:  denied  { search } for  pid=5871 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.540681][ T5873] overlayfs: failed to clone upperpath
[  170.577654][   T36] audit: type=1400 audit(1758267479.800:3037): avc:  denied  { mounton } for  pid=5872 comm="syz.6.1696" path="/260/bus" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  170.588474][ T5871] audit: audit_backlog=65 > audit_backlog_limit=64
[  170.603598][ T5873] audit: audit_backlog=65 > audit_backlog_limit=64
[  170.608698][ T5871] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  170.622271][ T5871] audit: backlog limit exceeded
[  170.629833][ T5871] audit: audit_backlog=65 > audit_backlog_limit=64
[  170.636526][ T5871] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  170.638695][ T5873] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  170.653400][ T5874] audit: audit_backlog=65 > audit_backlog_limit=64
[  170.667690][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  170.668106][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  170.692984][ T5876] /dev/rnullb0: Can't open blockdev
[  170.768399][ T5879] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  170.782063][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1698'.
[  170.793088][ T5879] /dev/sr0: Can't lookup blockdev
[  171.124566][ T5899] /dev/rnullb0: Can't open blockdev
[  171.316766][ T5906] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  171.316796][ T5906] rust_binder: Error while translating object.
[  171.319708][ T5908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.352089][ T5906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.362295][ T5908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581
[  171.397653][ T5906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162
[  171.551284][ T5916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.588929][ T5916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.595835][ T5916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.622935][ T5918] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  171.645228][ T5918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  171.656157][ T5918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:165
[  171.806911][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1711'.
[  172.037691][ T4685] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  172.187683][ T4685] usb 1-1: device descriptor read/64, error -71
[  172.437704][ T4685] usb 1-1: device descriptor read/64, error -71
[  172.671657][ T5942] overlayfs: failed to clone upperpath
[  172.672417][ T5943] overlayfs: failed to clone upperpath
[  172.682993][ T4685] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  172.691975][ T5942] cgroup: Unknown subsys name 'measure'
[  172.770816][ T5948] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1719'.
[  172.790603][ T5948] incfs: Error accessing: ./file0.
[  172.795808][ T5948] incfs: mount failed -20
[  172.827679][ T4685] usb 1-1: device descriptor read/64, error -71
[  173.077850][ T4685] usb 1-1: device descriptor read/64, error -71
[  173.168719][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1723'.
[  173.187775][ T4685] usb usb1-port1: attempt power cycle
[  173.527685][ T4685] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  173.550819][ T4685] usb 1-1: device descriptor read/8, error -71
[  173.690411][ T4685] usb 1-1: device descriptor read/8, error -71
[  173.927717][ T4685] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  173.950764][ T4685] usb 1-1: device descriptor read/8, error -71
[  174.079942][ T4685] usb 1-1: device descriptor read/8, error -71
[  174.188184][ T4685] usb usb1-port1: unable to enumerate USB device
[  174.936034][ T6004] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  174.945661][ T6004] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  174.996727][ T6004] rust_binder: Error in use_page_slow: ESRCH
[  174.996750][ T6004] rust_binder: use_range failure ESRCH
[  175.003509][ T6004] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  175.010225][ T6004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  175.029294][ T6004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:175
[  175.459792][ T6018] binder: Bad value for 'max'
[  175.534371][   T36] kauditd_printk_skb: 870 callbacks suppressed
[  175.534385][   T36] audit: type=1400 audit(1758267484.790:3904): avc:  denied  { read write } for  pid=4779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.567680][   T36] audit: type=1400 audit(1758267484.800:3905): avc:  denied  { read write open } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.601905][   T36] audit: type=1400 audit(1758267484.800:3906): avc:  denied  { ioctl } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.618606][ T6025] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  175.629816][   T36] audit: type=1400 audit(1758267484.830:3907): avc:  denied  { create } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  175.658539][ T6025] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.661810][ T6025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1025
[  175.676554][   T36] audit: type=1400 audit(1758267484.830:3908): avc:  denied  { setopt } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  175.723509][   T36] audit: type=1400 audit(1758267484.830:3909): avc:  denied  { ioctl } for  pid=6015 comm="syz.6.1739" path="socket:[36803]" dev="sockfs" ino=36803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  175.757163][   T36] audit: type=1400 audit(1758267484.830:3910): avc:  denied  { setopt } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  175.777286][   T36] audit: type=1400 audit(1758267484.830:3911): avc:  denied  { bind } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  175.797246][   T36] audit: type=1400 audit(1758267484.860:3912): avc:  denied  { read } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  175.816866][   T36] audit: type=1400 audit(1758267484.860:3913): avc:  denied  { create } for  pid=6015 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  175.839728][ T6030] rust_binder: Write failure EINVAL in pid:188
[  175.945965][ T6032] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch
[  175.962340][ T6032] rust_binder: Write failure EINVAL in pid:598
[  176.020946][ T6038] netlink: 'syz.5.1746': attribute type 4 has an invalid length.
[  176.047230][ T6038] netlink: 'syz.5.1746': attribute type 4 has an invalid length.
[  176.080771][ T6038] rust_binder: Error while translating object.
[  176.080831][ T6038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  176.094667][ T6038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600
[  176.191316][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1748'.
[  176.262968][ T6050] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.263882][ T6050] rust_binder: Error in use_page_slow: ESRCH
[  176.272657][ T6050] rust_binder: use_range failure ESRCH
[  176.281600][ T6050] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false
[  176.288792][ T6050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  176.296821][ T6050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:602
[  176.311902][ T6047] rust_binder: Read failure Err(EAGAIN) in pid:602
[  176.347726][ T6046] rust_binder: Read failure Err(EAGAIN) in pid:602
[  176.413065][ T6047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602
[  176.547842][ T6068] Invalid ELF header type: 2 != 1
[  176.826189][ T6072] tc_dump_action: action bad kind
[  177.167657][  T943] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  177.225365][ T6093] __vm_enough_memory: pid: 6093, comm: syz.0.1764, bytes: 18014402804453376 not enough memory for the allocation
[  177.358386][  T943] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  177.370503][  T943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  177.382301][  T943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  177.394899][  T943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.414222][  T943] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.428672][  T943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.449020][  T943] usb 6-1: config 0 descriptor??
[  177.456511][ T6081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  177.879492][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.886944][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.907950][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.916432][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.945315][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.956908][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.965801][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.974188][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.982497][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  177.990858][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.000185][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.008414][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.015916][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.024631][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.037712][  T943] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  178.055448][  T943] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  178.066925][ T6131] x_tables: unsorted underflow at hook 2
[  178.084332][  T943] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  178.331086][ T6142] sock: sock_timestamping_bind_phc: sock not bind to device
[  178.484284][ T6149] rust_binder: Write failure EINVAL in pid:1066
[  178.536037][ T6150] rust_binder: 1066: no such ref 3
[  179.264587][ T6155] netlink: 'syz.7.1783': attribute type 28 has an invalid length.
[  179.317722][  T587] usb 6-1: reset high-speed USB device number 21 using dummy_hcd
[  179.345041][ T6157] tipc: Failed to remove unknown binding: 66,1,1/0:3696396017/3696396019
[  179.376586][ T6157] rust_binder: Write failure EFAULT in pid:197
[  179.627714][   T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  179.800323][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.811262][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.821041][   T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  179.830192][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.839999][   T10] usb 1-1: config 0 descriptor??
[  180.252765][   T10] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  180.317673][   T10] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected
[  180.325714][   T10] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted -  nothing to read
[  180.339150][   T10] hid-steam 0003:28DE:1142.001A: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  180.500174][  T943] usb 1-1: USB disconnect, device number 65
[  180.500650][  T354] usb 6-1: USB disconnect, device number 21
[  180.510278][  T943] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected
[  181.019075][   T36] kauditd_printk_skb: 653 callbacks suppressed
[  181.019095][   T36] audit: type=1400 audit(1758267746.277:4567): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.049358][   T36] audit: type=1400 audit(1758267746.277:4568): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.074626][   T36] audit: type=1400 audit(1758267746.277:4569): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  182.333825][   T36] audit: type=1400 audit(1758267747.587:4570): avc:  denied  { read write } for  pid=4779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  182.358020][   T36] audit: type=1400 audit(1758267747.587:4571): avc:  denied  { read write open } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  182.383546][   T36] audit: type=1400 audit(1758267747.587:4572): avc:  denied  { ioctl } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  197.131487][   T36] audit: type=1400 audit(1758267762.377:4573): avc:  denied  { read write } for  pid=6168 comm="syz.0.1788" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.191000][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1790'.
[  197.201469][   T36] audit: type=1400 audit(1758267762.377:4574): avc:  denied  { read write open } for  pid=6168 comm="syz.0.1788" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.274538][   T36] audit: type=1400 audit(1758267762.387:4575): avc:  denied  { read write } for  pid=6168 comm="syz.0.1788" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.314314][ T6180] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  197.326946][   T36] audit: type=1400 audit(1758267762.387:4576): avc:  denied  { read write open } for  pid=6168 comm="syz.0.1788" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.367651][  T943] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  197.377641][   T36] audit: type=1400 audit(1758267762.387:4577): avc:  denied  { read write } for  pid=6168 comm="syz.0.1788" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  197.424107][   T36] audit: type=1400 audit(1758267762.387:4578): avc:  denied  { read write open } for  pid=6168 comm="syz.0.1788" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  197.450321][   T36] audit: type=1400 audit(1758267762.387:4579): avc:  denied  { ioctl } for  pid=6168 comm="syz.0.1788" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  197.476305][   T36] audit: type=1400 audit(1758267762.387:4580): avc:  denied  { ioctl } for  pid=6168 comm="syz.0.1788" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  197.502204][   T36] audit: type=1400 audit(1758267762.387:4581): avc:  denied  { read } for  pid=6171 comm="syz.7.1791" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.526629][   T36] audit: type=1400 audit(1758267762.387:4582): avc:  denied  { read open } for  pid=6171 comm="syz.7.1791" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  197.537903][  T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  197.562070][  T943] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  197.573186][  T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.587664][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  197.602225][  T943] usb 1-1: config 0 descriptor??
[  197.621151][ T6170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  197.750605][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  197.772262][   T10] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  197.781945][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.797666][   T10] usb 6-1: Product: syz
[  197.802015][   T10] usb 6-1: Manufacturer: syz
[  197.806646][   T10] usb 6-1: SerialNumber: syz
[  198.053263][ T6187] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[  198.056664][ T6187] rust_binder: Error in use_page_slow: EFAULT
[  198.090048][ T6187] rust_binder: use_range failure EFAULT
[  198.092035][ T6176] rust_binder: Write failure EFAULT in pid:619
[  198.096420][  T943] hid-generic 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  198.108382][ T6191] /dev/loop0: Can't lookup blockdev
[  198.120351][ T6187] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[  198.130204][   T10] usb 6-1: USB disconnect, device number 22
[  198.147709][ T6187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  198.147749][ T6187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:202
[  198.295851][  T330] usb 1-1: USB disconnect, device number 66
[  198.299092][   T65] rust_binder: 6195: removing orphan mapping 0:24
[  198.348213][ T6197] fido_id[6197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  198.388002][ T6200] rust_binder: Write failure EFAULT in pid:207
[  198.856696][ T6223] loop7: detected capacity change from 0 to 16384
[  198.986758][ T6228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  199.006140][ T4685] rust_binder: 6222: removing orphan mapping 0:24
[  199.070713][ T6227] loop7: detected capacity change from 16384 to 0
[  199.307829][   T65] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  199.323777][ T6239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:627
[  199.457700][   T65] usb 1-1: Using ep0 maxpacket: 32
[  199.474401][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.486092][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.495922][   T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  199.505034][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.514778][   T65] usb 1-1: config 0 descriptor??
[  199.522581][   T65] hub 1-1:0.0: USB hub found
[  199.752102][   T65] hub 1-1:0.0: 1 port detected
[  199.759410][   T65] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  199.777750][   T65] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  199.788393][   T65] usbhid 1-1:0.0: can't add hid device: -71
[  199.798790][   T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  199.830494][   T65] usb 1-1: USB disconnect, device number 67
[  200.188130][ T6254] cgroup: Name too long
[  200.267750][   T65] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  200.424194][   T65] usb 1-1: config 1 interface 0 has no altsetting 0
[  200.441645][   T65] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  200.451853][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.463067][   T65] usb 1-1: Product: syz
[  200.467286][   T65] usb 1-1: Manufacturer: syz
[  200.473715][   T65] usb 1-1: SerialNumber: syz
[  200.582667][ T6264] overlayfs: failed to clone upperpath
[  200.705758][ T6247] rust_binder: Write failure EFAULT in pid:1084
[  200.706320][ T4685] usb 1-1: USB disconnect, device number 68
[  202.149410][   T36] kauditd_printk_skb: 578 callbacks suppressed
[  202.149429][   T36] audit: type=1400 audit(1758267767.407:5161): avc:  denied  { read write } for  pid=4779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.204834][   T36] audit: type=1400 audit(1758267767.447:5162): avc:  denied  { read write open } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.231934][   T36] audit: type=1400 audit(1758267767.447:5163): avc:  denied  { ioctl } for  pid=4779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.259201][   T36] audit: type=1400 audit(1758267767.457:5164): avc:  denied  { ioctl } for  pid=6288 comm="syz.0.1829" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  202.273343][ T6293] batadv_slave_0: entered promiscuous mode
[  202.284976][   T36] audit: type=1400 audit(1758267767.497:5165): avc:  denied  { read } for  pid=6292 comm="syz.7.1830" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  202.295758][ T6292] batadv_slave_0: left promiscuous mode
[  202.313092][   T36] audit: type=1400 audit(1758267767.497:5166): avc:  denied  { read open } for  pid=6292 comm="syz.7.1830" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  202.342635][ T4685] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  202.353784][   T36] audit: type=1400 audit(1758267767.517:5167): avc:  denied  { read write } for  pid=6292 comm="syz.7.1830" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.377873][   T36] audit: type=1400 audit(1758267767.517:5168): avc:  denied  { read write open } for  pid=6292 comm="syz.7.1830" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.402744][   T36] audit: type=1400 audit(1758267767.517:5169): avc:  denied  { ioctl } for  pid=6292 comm="syz.7.1830" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.447642][   T36] audit: type=1400 audit(1758267767.517:5170): avc:  denied  { ioctl } for  pid=6292 comm="syz.7.1830" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.507666][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  202.517362][ T4685] usb 1-1: unable to get BOS descriptor or descriptor too short
[  202.538253][ T4685] usb 1-1: not running at top speed; connect to a high speed hub
[  202.559423][ T4685] usb 1-1: unable to read config index 0 descriptor/start: -61
[  202.567046][ T4685] usb 1-1: can't read configurations, error -61
[  202.596416][ T6299] usb usb8: usbfs: process 6299 (syz.7.1834) did not claim interface 0 before use
[  202.717690][ T4685] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  202.881579][ T4685] usb 1-1: unable to get BOS descriptor or descriptor too short
[  202.895478][ T4685] usb 1-1: not running at top speed; connect to a high speed hub
[  202.909498][ T4685] usb 1-1: unable to read config index 0 descriptor/start: -61
[  202.917580][ T4685] usb 1-1: can't read configurations, error -61
[  202.938173][ T4685] usb usb1-port1: attempt power cycle
[  202.965020][ T6319] rust_binder: 242: no such ref 3
[  202.970202][ T6319] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  202.977295][ T6319] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  202.985637][ T6319] rust_binder: Write failure EFAULT in pid:242
[  203.251203][ T6323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  203.277667][ T4685] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  203.312515][ T4685] usb 1-1: unable to get BOS descriptor or descriptor too short
[  203.327677][ T4685] usb 1-1: not running at top speed; connect to a high speed hub
[  203.340240][ T4685] usb 1-1: unable to read config index 0 descriptor/start: -61
[  203.357851][ T4685] usb 1-1: can't read configurations, error -61
[  203.420455][ T6327] rust_binder: Failed copying into alloc: EFAULT
[  203.420481][ T6327] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  203.426898][ T6327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  203.438847][ T6327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:250
[  203.497665][ T4685] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  203.533050][ T4685] usb 1-1: unable to get BOS descriptor or descriptor too short
[  203.542055][ T4685] usb 1-1: not running at top speed; connect to a high speed hub
[  203.554272][ T4685] usb 1-1: unable to read config index 0 descriptor/start: -61
[  203.563212][ T4685] usb 1-1: can't read configurations, error -61
[  203.573324][ T4685] usb usb1-port1: unable to enumerate USB device
[  203.605643][ T6329] SELinux:  Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped).
[  203.684209][ T6331] tmpfs: Unknown parameter '˙'
[  203.773229][  T335] bridge_slave_1: left allmulticast mode
[  203.797914][  T335] bridge_slave_1: left promiscuous mode
[  203.825387][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.842315][  T335] bridge_slave_0: left allmulticast mode
[  203.848292][  T335] bridge_slave_0: left promiscuous mode
[  203.853980][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.963709][  T335] tipc: Left network mode
[  203.974924][  T335] veth1_macvtap: left promiscuous mode
[  204.140741][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.147954][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.155124][ T6342] bridge_slave_0: entered allmulticast mode
[  204.161802][ T6342] bridge_slave_0: entered promiscuous mode
[  204.169136][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.176193][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.183365][ T6342] bridge_slave_1: entered allmulticast mode
[  204.189645][ T6342] bridge_slave_1: entered promiscuous mode
[  204.277532][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.284642][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.291963][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.299025][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.354143][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.361737][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.388624][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.395735][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.417419][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.424584][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.452778][ T6358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:652
[  204.560350][ T6342] veth0_vlan: entered promiscuous mode
[  204.606679][ T6342] veth1_macvtap: entered promiscuous mode
[  204.706190][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1855'.
[  204.778981][   T65] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  204.919156][ T6381] can0: slcan on ttyS3.
[  204.950730][   T65] usb 6-1: Using ep0 maxpacket: 8
[  204.967059][   T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  204.979020][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.987123][   T65] usb 6-1: Product: syz
[  204.992970][   T65] usb 6-1: Manufacturer: syz
[  204.999098][   T65] usb 6-1: SerialNumber: syz
[  205.200279][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  205.230297][   T65] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  205.367636][   T10] usb 9-1: Using ep0 maxpacket: 16
[  205.385882][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.410617][   T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  205.437397][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.456721][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.460579][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.470299][   T10] usb 9-1: Product: syz
[  205.488471][   T10] usb 9-1: Manufacturer: syz
[  205.496571][   T10] usb 9-1: SerialNumber: syz
[  205.503762][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.523521][   T10] usb 9-1: config 0 descriptor??
[  205.566376][ T4685] usb 6-1: USB disconnect, device number 23
[  205.598933][ T4685] usblp0: removed
[  205.746738][  T376] usb 9-1: USB disconnect, device number 2
[  205.791696][   T65] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  205.802079][ T6381] can0 (unregistered): slcan off ttyS3.
[  205.967639][   T65] usb 1-1: Using ep0 maxpacket: 8
[  206.004792][   T65] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.022425][   T65] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.036032][   T65] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.045748][   T65] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  206.056492][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.096961][   T65] usb 1-1: config 0 descriptor??
[  206.368507][   T65] usbhid 1-1:0.0: can't add hid device: -71
[  206.378122][   T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  206.404151][   T65] usb 1-1: USB disconnect, device number 73
[  223.315659][   T36] kauditd_printk_skb: 951 callbacks suppressed
[  223.315681][   T36] audit: type=1400 audit(1758267788.567:6122): avc:  denied  { read } for  pid=6465 comm="syz.0.1873" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[  223.364342][   T36] audit: type=1400 audit(1758267788.587:6123): avc:  denied  { create } for  pid=6464 comm="syz.6.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  223.394230][   T36] audit: type=1400 audit(1758267788.587:6124): avc:  denied  { execmem } for  pid=6462 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  223.427174][   T36] audit: type=1400 audit(1758267788.617:6125): avc:  denied  { read write } for  pid=6463 comm="syz.8.1876" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  223.458432][   T36] audit: type=1400 audit(1758267788.617:6126): avc:  denied  { read write } for  pid=6463 comm="syz.8.1876" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  223.487818][   T36] audit: type=1400 audit(1758267788.647:6127): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  223.512798][   T36] audit: type=1400 audit(1758267788.677:6128): avc:  denied  { read } for  pid=6474 comm="syz.0.1878" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[  223.535604][   T36] audit: type=1400 audit(1758267788.717:6129): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  223.559916][   T36] audit: type=1400 audit(1758267788.747:6130): avc:  denied  { read } for  pid=6478 comm="syz.0.1879" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[  223.583820][   T36] audit: type=1400 audit(1758267788.777:6131): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  224.727146][  T335] Bluetooth: hci0: Frame reassembly failed (-84)
[  225.599857][ T6609] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1927'.
[  226.747626][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  226.747627][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  227.146469][ T6689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  227.472523][ T6702] can0: slcan on ttyS3.
[  227.542692][ T6701] can0 (unregistered): slcan off ttyS3.
[  228.317694][   T36] kauditd_printk_skb: 1852 callbacks suppressed
[  228.317714][   T36] audit: type=1400 audit(1758267793.577:7984): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  228.345172][   T36] audit: type=1400 audit(1758267793.577:7985): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  228.359067][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  228.366355][   T36] audit: type=1400 audit(1758267793.577:7986): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  228.373880][  T149] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  228.393715][   T36] audit: type=1400 audit(1758267793.577:7987): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  228.402919][  T149] audit: backlog limit exceeded
[  228.440155][ T6734] audit: audit_backlog=65 > audit_backlog_limit=64
[  228.442801][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  228.447625][ T6734] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64
[  228.611466][ T6746] netlink: 'syz.6.1975': attribute type 27 has an invalid length.
[  230.167210][ T6819] sit0: entered promiscuous mode
[  230.174011][ T6819] netlink: 'syz.8.2000': attribute type 1 has an invalid length.
[  230.183161][ T6819] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2000'.
[  230.300573][ T6826] binfmt_misc: register: failed to install interpreter file ./file0
[  233.328400][   T36] kauditd_printk_skb: 8602 callbacks suppressed
[  233.328421][   T36] audit: type=1400 audit(1758267798.593:16215): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  233.384067][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  233.390918][   T36] audit: type=1400 audit(1758267798.603:16216): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  233.421174][  T149] audit: audit_lost=134 audit_rate_limit=0 audit_backlog_limit=64
[  233.429146][  T149] audit: backlog limit exceeded
[  233.434434][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  233.434884][ T6917] audit: audit_backlog=65 > audit_backlog_limit=64
[  233.441109][   T36] audit: type=1400 audit(1758267798.613:16217): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  233.457698][ T6917] audit: audit_lost=135 audit_rate_limit=0 audit_backlog_limit=64
[  233.468631][  T149] audit: audit_lost=136 audit_rate_limit=0 audit_backlog_limit=64
[  236.350805][ T7019] netlink: 'syz.8.2072': attribute type 5 has an invalid length.
[  236.368871][ T7019] netlink: 'syz.8.2072': attribute type 5 has an invalid length.
[  236.376651][ T7019] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2072'.
[  236.757970][ T7037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7037 comm=syz.0.2078
[  237.019969][ T7055] futex_wake_op: syz.0.2084 tries to shift op by -1; fix this program
[  238.337988][   T36] kauditd_printk_skb: 7592 callbacks suppressed
[  238.338009][   T36] audit: type=1400 audit(1758267803.603:23730): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  238.365689][   T36] audit: type=1400 audit(1758267803.603:23731): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  238.378013][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  238.387032][   T36] audit: type=1400 audit(1758267803.603:23732): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  238.393828][  T149] audit: audit_lost=163 audit_rate_limit=0 audit_backlog_limit=64
[  238.414471][   T36] audit: type=1400 audit(1758267803.603:23733): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  238.425127][  T149] audit: backlog limit exceeded
[  238.443681][   T36] audit: type=1400 audit(1758267803.603:23734): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  238.453122][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  238.469386][   T36] audit: type=1400 audit(1758267803.603:23735): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.348227][   T36] kauditd_printk_skb: 8633 callbacks suppressed
[  243.348257][   T36] audit: type=1400 audit(1758268064.611:32262): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.385759][   T36] audit: type=1400 audit(1758268064.611:32263): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.388772][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  243.408171][   T36] audit: type=1400 audit(1758268064.611:32264): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.428744][  T289] audit: audit_backlog=65 > audit_backlog_limit=64
[  243.436825][   T36] audit: type=1400 audit(1758268064.611:32265): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.441177][  T149] audit: audit_lost=200 audit_rate_limit=0 audit_backlog_limit=64
[  243.469963][  T289] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64
[  243.470567][   T36] audit: type=1400 audit(1758268064.611:32266): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  243.478208][  T289] audit: backlog limit exceeded
[  243.612856][ T7397] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2202'.
[  243.622389][ T7398] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2202'.
[  246.401184][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2238'.
[  248.349012][ T7583] netlink: 'syz.6.2257': attribute type 16 has an invalid length.
[  248.357953][   T36] kauditd_printk_skb: 6678 callbacks suppressed
[  248.357974][   T36] audit: type=1400 audit(1758268069.621:38944): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  248.363313][ T7583] netlink: 'syz.6.2257': attribute type 3 has an invalid length.
[  248.375769][   T36] audit: type=1400 audit(1758268069.621:38945): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  248.405229][ T7583] netlink: 'syz.6.2257': attribute type 1 has an invalid length.
[  248.442598][ T7583] netlink: 64030 bytes leftover after parsing attributes in process `syz.6.2257'.
[  248.456384][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  248.463402][  T149] audit: audit_lost=202 audit_rate_limit=0 audit_backlog_limit=64
[  248.474302][  T149] audit: backlog limit exceeded
[  248.477674][   T36] audit: type=1400 audit(1758268069.621:38946): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  248.481314][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  248.518780][   T36] audit: type=1400 audit(1758268069.621:38947): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  248.545972][  T149] audit: audit_lost=203 audit_rate_limit=0 audit_backlog_limit=64
[  248.559767][  T149] audit: backlog limit exceeded
[  251.091238][ T7701] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  251.108479][ T7701] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  251.437728][ T7724] can0: slcan on ptm1.
[  251.642464][ T7722] can0 (unregistered): slcan off ptm1.
[  252.047960][ T7758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7758 comm=syz.6.2319
[  253.367991][   T36] kauditd_printk_skb: 5961 callbacks suppressed
[  253.368011][   T36] audit: type=1400 audit(1758268074.631:44879): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  253.438951][   T36] audit: type=1400 audit(1758268074.661:44880): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  253.478707][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  253.495429][  T149] audit: audit_lost=214 audit_rate_limit=0 audit_backlog_limit=64
[  253.499774][ T3302] audit: audit_backlog=65 > audit_backlog_limit=64
[  253.504659][   T36] audit: type=1400 audit(1758268074.661:44881): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  253.531058][  T149] audit: backlog limit exceeded
[  253.532846][ T3302] audit: audit_lost=215 audit_rate_limit=0 audit_backlog_limit=64
[  253.536900][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  253.550353][  T149] audit: audit_lost=216 audit_rate_limit=0 audit_backlog_limit=64
[  254.154210][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  254.909707][ T7838] netlink: 'syz.5.2346': attribute type 58 has an invalid length.
[  256.187631][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  256.188174][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  257.142813][ T7921] can0: slcan on ttyS3.
[  257.213571][ T7920] can0 (unregistered): slcan off ttyS3.
[  257.839996][ T7937] netlink: 'syz.8.2380': attribute type 1 has an invalid length.
[  257.854945][ T7937] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2380'.
[  258.238175][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2390'.
[  258.381899][   T36] kauditd_printk_skb: 6182 callbacks suppressed
[  258.381921][   T36] audit: type=1400 audit(1758268335.641:51062): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  258.463666][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  258.469773][  T289] audit: audit_backlog=65 > audit_backlog_limit=64
[  258.470306][   T36] audit: type=1400 audit(1758268335.671:51063): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  258.486987][  T289] audit: audit_lost=217 audit_rate_limit=0 audit_backlog_limit=64
[  258.505168][  T149] audit: audit_lost=218 audit_rate_limit=0 audit_backlog_limit=64
[  258.513623][  T149] audit: backlog limit exceeded
[  258.519043][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  258.525582][  T149] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64
[  258.533455][   T36] audit: type=1400 audit(1758268335.671:51064): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  258.930703][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  258.974791][ T8034] netlink: 'syz.0.2411': attribute type 6 has an invalid length.
[  258.983023][ T8034] IPv6: NLM_F_CREATE should be specified when creating new route
[  260.280015][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2425'.
[  260.987615][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  260.987621][  T361] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  261.993447][ T8123] can0: slcan on ttyS3.
[  262.055115][ T8121] can0 (unregistered): slcan off ttyS3.
[  263.392125][   T36] kauditd_printk_skb: 9408 callbacks suppressed
[  263.392146][   T36] audit: type=1400 audit(1758268340.651:60171): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  263.442464][   T36] audit: type=1400 audit(1758268340.661:60172): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  263.464946][   T36] audit: type=1400 audit(1758268340.661:60173): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  263.487373][   T36] audit: type=1400 audit(1758268340.661:60174): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  263.508741][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  263.511236][   T36] audit: type=1400 audit(1758268340.661:60175): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  263.519481][  T149] audit: audit_lost=320 audit_rate_limit=0 audit_backlog_limit=64
[  263.551592][ T6342] audit: audit_backlog=65 > audit_backlog_limit=64
[  263.555801][ T8160] audit: audit_backlog=65 > audit_backlog_limit=64
[  263.558402][ T6342] audit: audit_lost=321 audit_rate_limit=0 audit_backlog_limit=64
[  265.778994][ T8279] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2503'.
[  266.204961][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2510'.
[  266.258472][ T8305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8305 comm=syz.6.2510
[  267.415202][ T8346] netlink: 'syz.8.2526': attribute type 10 has an invalid length.
[  267.426118][ T8346] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2526'.
[  268.397908][   T36] kauditd_printk_skb: 7416 callbacks suppressed
[  268.397928][   T36] audit: type=1400 audit(1758268345.662:67582): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  268.451680][   T36] audit: type=1400 audit(1758268345.682:67583): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  268.477334][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  268.484350][  T149] audit: audit_lost=325 audit_rate_limit=0 audit_backlog_limit=64
[  268.488287][ T8429] audit: audit_backlog=65 > audit_backlog_limit=64
[  268.492231][  T149] audit: backlog limit exceeded
[  268.505014][   T36] audit: type=1400 audit(1758268345.682:67584): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  268.511875][ T8429] audit: audit_lost=326 audit_rate_limit=0 audit_backlog_limit=64
[  268.527681][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  268.534620][ T6342] audit: audit_backlog=65 > audit_backlog_limit=64
[  268.560674][ T8430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8430 comm=syz.5.2552
[  271.497707][ T8583] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2607'.
[  272.591739][ T8621] netlink: 'syz.5.2621': attribute type 19 has an invalid length.
[  272.615621][ T8621] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2621'.
[  272.640403][ T8624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8624 comm=syz.6.2623
[  272.895464][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'.
[  273.409474][   T36] kauditd_printk_skb: 7273 callbacks suppressed
[  273.409526][   T36] audit: type=1400 audit(1758268350.672:74853): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  273.480893][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  273.487640][   T36] audit: type=1400 audit(1758268350.672:74854): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  273.505093][ T8662] audit: audit_backlog=65 > audit_backlog_limit=64
[  273.516861][ T8662] audit: audit_lost=329 audit_rate_limit=0 audit_backlog_limit=64
[  273.517676][  T149] audit: audit_lost=330 audit_rate_limit=0 audit_backlog_limit=64
[  273.525996][ T8662] audit: backlog limit exceeded
[  273.537633][   T36] audit: type=1400 audit(1758268350.682:74855): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  273.547072][ T8662] audit: audit_backlog=65 > audit_backlog_limit=64
[  273.562395][  T149] audit: backlog limit exceeded
[  275.599470][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'.
[  276.650581][ T8812] netlink: 'syz.8.2692': attribute type 4 has an invalid length.
[  276.661040][ T8812] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2692'.
[  277.708148][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2710'.
[  278.418056][   T36] kauditd_printk_skb: 7460 callbacks suppressed
[  278.418075][   T36] audit: type=1400 audit(1758268355.682:82314): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.456879][   T36] audit: type=1400 audit(1758268355.682:82315): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.479876][   T36] audit: type=1400 audit(1758268355.682:82316): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.531077][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  278.533095][   T36] audit: type=1400 audit(1758268355.682:82317): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.555148][  T149] audit: audit_lost=332 audit_rate_limit=0 audit_backlog_limit=64
[  278.561305][   T36] audit: type=1400 audit(1758268355.682:82318): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.575807][  T149] audit: backlog limit exceeded
[  278.591622][   T36] audit: type=1400 audit(1758268355.682:82319): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  278.614123][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  279.086690][ T8937] netlink: 'syz.6.2738': attribute type 16 has an invalid length.
[  279.111546][ T8937] netlink: 'syz.6.2738': attribute type 4 has an invalid length.
[  279.135017][ T8937] netlink: 64094 bytes leftover after parsing attributes in process `syz.6.2738'.
[  279.847810][ T8974] netlink: 'syz.5.2752': attribute type 13 has an invalid length.
[  281.577897][ T9041] can0: slcan on ttyS3.
[  281.689415][ T9038] can0 (unregistered): slcan off ttyS3.
[  283.436922][   T36] kauditd_printk_skb: 7982 callbacks suppressed
[  283.436943][   T36] audit: type=1400 audit(1758268360.692:90230): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  283.477423][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  283.484107][  T149] audit: audit_lost=358 audit_rate_limit=0 audit_backlog_limit=64
[  283.497438][  T149] audit: backlog limit exceeded
[  283.505932][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  283.518694][   T36] audit: type=1400 audit(1758268360.692:90231): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  283.539064][ T9111] audit: audit_backlog=65 > audit_backlog_limit=64
[  283.543214][  T149] audit: audit_lost=359 audit_rate_limit=0 audit_backlog_limit=64
[  283.547307][ T9111] audit: audit_lost=360 audit_rate_limit=0 audit_backlog_limit=64
[  283.554250][  T149] audit: backlog limit exceeded
[  284.535303][ T9127] veth0_to_team: entered promiscuous mode
[  284.546576][ T9127] veth0_to_team: entered allmulticast mode
[  286.624598][ T9217] FAULT_INJECTION: forcing a failure.
[  286.624598][ T9217] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  286.647606][ T9217] CPU: 1 UID: 0 PID: 9217 Comm: syz.0.2843 Not tainted syzkaller #0 1113c6f757b896aae05d8aba828d71ec34ef4a9d
[  286.647645][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  286.647662][ T9217] Call Trace:
[  286.647671][ T9217]  <TASK>
[  286.647682][ T9217]  __dump_stack+0x21/0x30
[  286.647724][ T9217]  dump_stack_lvl+0x10c/0x190
[  286.647757][ T9217]  ? __cfi_dump_stack_lvl+0x10/0x10
[  286.647792][ T9217]  ? _parse_integer_limit+0x195/0x1e0
[  286.647817][ T9217]  dump_stack+0x19/0x20
[  286.647847][ T9217]  should_fail_ex+0x3d9/0x530
[  286.647873][ T9217]  should_fail_alloc_page+0xeb/0x110
[  286.647902][ T9217]  __alloc_pages_noprof+0x19b/0x7b0
[  286.647934][ T9217]  ? kstrtouint+0x78/0xf0
[  286.647964][ T9217]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  286.647997][ T9217]  ? kstrtouint_from_user+0xfb/0x150
[  286.648021][ T9217]  ? x64_sys_call+0xe69/0x2ee0
[  286.648057][ T9217]  ? avc_policy_seqno+0xd/0x30
[  286.648090][ T9217]  ? selinux_file_permission+0x309/0xb30
[  286.648122][ T9217]  ? __cfi_selinux_file_permission+0x10/0x10
[  286.648153][ T9217]  get_zeroed_page_noprof+0x1f/0x50
[  286.648186][ T9217]  simple_transaction_get+0x5e/0x1e0
[  286.648219][ T9217]  selinux_transaction_write+0xd6/0x180
[  286.648253][ T9217]  ? __cfi_selinux_transaction_write+0x10/0x10
[  286.648287][ T9217]  vfs_write+0x3c0/0xe80
[  286.648312][ T9217]  ? __cfi_vfs_write+0x10/0x10
[  286.648334][ T9217]  ? __kasan_check_write+0x18/0x20
[  286.648368][ T9217]  ? mutex_lock+0x92/0x1c0
[  286.648400][ T9217]  ? __cfi_mutex_lock+0x10/0x10
[  286.648430][ T9217]  ? __fget_files+0x2c5/0x340
[  286.648459][ T9217]  ksys_write+0x141/0x250
[  286.648484][ T9217]  ? __cfi_ksys_write+0x10/0x10
[  286.648508][ T9217]  ? __kasan_check_read+0x15/0x20
[  286.648544][ T9217]  __x64_sys_write+0x7f/0x90
[  286.648568][ T9217]  x64_sys_call+0x271c/0x2ee0
[  286.648604][ T9217]  do_syscall_64+0x58/0xf0
[  286.648629][ T9217]  ? clear_bhb_loop+0x50/0xa0
[  286.648664][ T9217]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  286.648698][ T9217] RIP: 0033:0x7f8e8498eba9
[  286.648731][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.648753][ T9217] RSP: 002b:00007f8e85891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  286.648784][ T9217] RAX: ffffffffffffffda RBX: 00007f8e84bd5fa0 RCX: 00007f8e8498eba9
[  286.648803][ T9217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  286.648819][ T9217] RBP: 00007f8e85891090 R08: 0000000000000000 R09: 0000000000000000
[  286.648836][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.648853][ T9217] R13: 00007f8e84bd6038 R14: 00007f8e84bd5fa0 R15: 00007fff1d5834e8
[  286.648875][ T9217]  </TASK>
[  287.221040][ T9226] netlink: 'syz.5.2846': attribute type 4 has an invalid length.
[  287.228998][ T9226] netlink: 'syz.5.2846': attribute type 2 has an invalid length.
[  288.437738][   T36] kauditd_printk_skb: 9088 callbacks suppressed
[  288.437759][   T36] audit: type=1400 audit(1758268365.702:98806): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  288.472962][   T36] audit: type=1400 audit(1758268365.702:98807): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  288.477289][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  288.494750][   T36] audit: type=1400 audit(1758268365.702:98808): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  288.502315][  T149] audit: audit_lost=532 audit_rate_limit=0 audit_backlog_limit=64
[  288.527743][   T36] audit: type=1400 audit(1758268365.702:98809): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  288.530845][  T149] audit: backlog limit exceeded
[  288.564430][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  288.564833][ T9235] audit: audit_backlog=65 > audit_backlog_limit=64
[  288.574060][ T9237] audit: audit_backlog=65 > audit_backlog_limit=64
[  288.609708][ T9241] FAULT_INJECTION: forcing a failure.
[  288.609708][ T9241] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  288.656820][ T9241] CPU: 1 UID: 0 PID: 9241 Comm: syz.5.2852 Not tainted syzkaller #0 1113c6f757b896aae05d8aba828d71ec34ef4a9d
[  288.656857][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  288.656873][ T9241] Call Trace:
[  288.656881][ T9241]  <TASK>
[  288.656891][ T9241]  __dump_stack+0x21/0x30
[  288.656930][ T9241]  dump_stack_lvl+0x10c/0x190
[  288.656962][ T9241]  ? __cfi_dump_stack_lvl+0x10/0x10
[  288.656995][ T9241]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  288.657028][ T9241]  ? kstrtouint_from_user+0xfb/0x150
[  288.657053][ T9241]  ? x64_sys_call+0xe69/0x2ee0
[  288.657090][ T9241]  dump_stack+0x19/0x20
[  288.657120][ T9241]  should_fail_ex+0x3d9/0x530
[  288.657146][ T9241]  should_fail+0xf/0x20
[  288.657174][ T9241]  should_fail_usercopy+0x1e/0x30
[  288.657201][ T9241]  _copy_from_user+0x22/0xb0
[  288.657231][ T9241]  simple_transaction_get+0x126/0x1e0
[  288.657265][ T9241]  selinux_transaction_write+0xd6/0x180
[  288.657298][ T9241]  ? __cfi_selinux_transaction_write+0x10/0x10
[  288.657331][ T9241]  vfs_write+0x3c0/0xe80
[  288.657355][ T9241]  ? __cfi_vfs_write+0x10/0x10
[  288.657378][ T9241]  ? __kasan_check_write+0x18/0x20
[  288.657413][ T9241]  ? mutex_lock+0x92/0x1c0
[  288.657444][ T9241]  ? __cfi_mutex_lock+0x10/0x10
[  288.657473][ T9241]  ? __fget_files+0x2c5/0x340
[  288.657502][ T9241]  ksys_write+0x141/0x250
[  288.657524][ T9241]  ? xfd_validate_state+0x68/0x150
[  288.657556][ T9241]  ? __cfi_ksys_write+0x10/0x10
[  288.657577][ T9241]  ? __kasan_check_read+0x15/0x20
[  288.657614][ T9241]  __x64_sys_write+0x7f/0x90
[  288.657638][ T9241]  x64_sys_call+0x271c/0x2ee0
[  288.657673][ T9241]  do_syscall_64+0x58/0xf0
[  288.657697][ T9241]  ? clear_bhb_loop+0x50/0xa0
[  288.657742][ T9241]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  288.657774][ T9241] RIP: 0033:0x7f0d3c58eba9
[  288.657795][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.657816][ T9241] RSP: 002b:00007f0d3d3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  288.657843][ T9241] RAX: ffffffffffffffda RBX: 00007f0d3c7d5fa0 RCX: 00007f0d3c58eba9
[  288.657862][ T9241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  288.657878][ T9241] RBP: 00007f0d3d3b9090 R08: 0000000000000000 R09: 0000000000000000
[  288.657894][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.657910][ T9241] R13: 00007f0d3c7d6038 R14: 00007f0d3c7d5fa0 R15: 00007ffd277006b8
[  288.657931][ T9241]  </TASK>
[  293.447723][   T36] kauditd_printk_skb: 11521 callbacks suppressed
[  293.447743][   T36] audit: type=1400 audit(1758268370.712:110268): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.475992][   T36] audit: type=1400 audit(1758268370.712:110269): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.497181][   T36] audit: type=1400 audit(1758268370.712:110270): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.509187][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  293.519599][   T36] audit: type=1400 audit(1758268370.712:110271): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.525138][  T149] audit: audit_lost=555 audit_rate_limit=0 audit_backlog_limit=64
[  293.547030][   T36] audit: type=1400 audit(1758268370.712:110272): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.555102][  T149] audit: backlog limit exceeded
[  293.576116][   T36] audit: type=1400 audit(1758268370.712:110273): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  293.582704][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  298.458142][   T36] kauditd_printk_skb: 12020 callbacks suppressed
[  298.458163][   T36] audit: type=1400 audit(1758268375.722:122290): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.486627][   T36] audit: type=1400 audit(1758268375.722:122291): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.509212][   T36] audit: type=1400 audit(1758268375.722:122292): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.517438][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  298.531429][   T36] audit: type=1400 audit(1758268375.722:122293): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.537096][  T149] audit: audit_lost=558 audit_rate_limit=0 audit_backlog_limit=64
[  298.559054][   T36] audit: type=1400 audit(1758268375.722:122294): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.566186][  T149] audit: backlog limit exceeded
[  298.588000][   T36] audit: type=1400 audit(1758268375.722:122295): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  298.594868][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  303.468052][   T36] kauditd_printk_skb: 11899 callbacks suppressed
[  303.468074][   T36] audit: type=1400 audit(1758268380.732:134191): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.496193][   T36] audit: type=1400 audit(1758268380.732:134192): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.517412][   T36] audit: type=1400 audit(1758268380.732:134193): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.533358][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  303.538565][   T36] audit: type=1400 audit(1758268380.732:134194): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.545439][  T149] audit: audit_lost=561 audit_rate_limit=0 audit_backlog_limit=64
[  303.566396][   T36] audit: type=1400 audit(1758268380.732:134195): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.576358][  T149] audit: backlog limit exceeded
[  303.595112][   T36] audit: type=1400 audit(1758268380.732:134196): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  303.603684][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  305.238121][ T9347] IPv6: NLM_F_CREATE should be specified when creating new route
[  307.648700][  T335] bridge_slave_1: left allmulticast mode
[  307.654417][  T335] bridge_slave_1: left promiscuous mode
[  307.677751][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.694709][  T335] bridge_slave_0: left allmulticast mode
[  307.707593][  T335] bridge_slave_0: left promiscuous mode
[  307.713867][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.817803][ T1521] tipc: Resetting bearer <eth:syzkaller0>
[  307.851236][ T1521] tipc: Disabling bearer <eth:syzkaller0>
[  307.867672][  T335] veth1_macvtap: left promiscuous mode
[  307.873254][  T335] veth0_vlan: left promiscuous mode
[  308.477909][   T36] kauditd_printk_skb: 11056 callbacks suppressed
[  308.477931][   T36] audit: type=1400 audit(1758268385.742:145251): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.506006][   T36] audit: type=1400 audit(1758268385.742:145252): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.514972][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  308.528772][   T36] audit: type=1400 audit(1758268385.742:145253): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.534082][  T149] audit: audit_lost=563 audit_rate_limit=0 audit_backlog_limit=64
[  308.555875][   T36] audit: type=1400 audit(1758268385.742:145254): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.562834][  T149] audit: backlog limit exceeded
[  308.584737][   T36] audit: type=1400 audit(1758268385.742:145255): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.610460][   T36] audit: type=1400 audit(1758268385.742:145256): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  308.613345][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  313.487761][   T36] kauditd_printk_skb: 12418 callbacks suppressed
[  313.487791][   T36] audit: type=1400 audit(1758268390.752:157673): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  313.515933][   T36] audit: type=1400 audit(1758268390.752:157674): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  313.524538][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  313.537172][   T36] audit: type=1400 audit(1758268390.752:157675): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  313.545929][  T149] audit: audit_lost=565 audit_rate_limit=0 audit_backlog_limit=64
[  313.564850][   T36] audit: type=1400 audit(1758268390.752:157676): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  313.573876][  T149] audit: backlog limit exceeded
[  313.593946][   T36] audit: type=1400 audit(1758268390.752:157677): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  313.602358][  T149] audit: audit_backlog=65 > audit_backlog_limit=64
[  313.619869][   T36] audit: type=1400 audit(1758268390.752:157678): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0