last executing test programs:

1m8.925622025s ago: executing program 0 (id=621):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000040), 0xfffffffffffffffc, 0x0, 0x0)

1m8.910781955s ago: executing program 0 (id=622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x3}, 0x3ff})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xdc, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/59, 0x3b, 0x0, 0xa}, @fda={0x66646185, 0xa, 0x2, 0x22}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0xa, 0x2, 0x13}, @flat=@binder={0x73622a85, 0x100a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/249, 0xf9, 0x1, 0x24}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}, 0x1000}], 0xb2, 0x0, &(0x7f0000000380)="1f4e02ad1b921a9125085a50b0d5aed3b50818caf0670f4144d0ac596d240f2ba5413bac514bad1bb078b0cf9158028b8c67ba8a40c19e8c51a8b14603f9bbae81df02109737dd5402f8d82d2d463e77bc8d482a5a48cafbf127adf6faf00df17ea1f300565bf007314ce9f398310d3df92bc3bad1b6025d378fc857b7ea185b59bbb8bab415a8f19c40f05c63fe878d138dde940492be3b5e50637b44b5b644cd4490b3c6df612b2ab5d5a39cc92fecd38a"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r4 = getpgid(0x0)
ptrace$setregs(0xf, r4, 0x200, &(0x7f0000000440)="a24bfbde354160534cbff7ab2de91c7960809a59ccb9eda5a1")
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x8000000000000, 0xe, 0x10003, 0x80000000000041, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x2, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000001c0)={0x20080522, r7}, 0x0)
syz_open_procfs(r7, &(0x7f0000000300)='task\x00')
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x214c83, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000240))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0)

1m8.847797356s ago: executing program 0 (id=623):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x507802, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f0000000140)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
r3 = dup(r2) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32)
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001400e04600000a60c6eec00be004433fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (async, rerun: 32)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) (async, rerun: 64)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22) (rerun: 64)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

1m8.847540865s ago: executing program 0 (id=624):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xee01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"})

1m8.847338025s ago: executing program 0 (id=625):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e5, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x1c4, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@broadcast}, {@in=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {0x0, 0x0, 0x0, 0x1000000000000}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'hmac(sha1)\x00'}, 0x208, "fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b4b8a3542"}}]}, 0x1c4}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
write$evdev(r3, &(0x7f0000000000)=[{{}, 0x12, 0x100, 0x9}], 0x18)

1m8.827383396s ago: executing program 0 (id=626):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000001200)='\x00\x00\x01\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x9f\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00o\b\xbdd\xcb\xa0\xc4P-E_Q\xa2\x98\xf5\xdb\x17\xe2-\x890\xf7\xaf\x1eL\x0f\xe3\xb2\xb8X\xdb\x849\xc6\xaaG#\x1bg\x05F\x85\x9e\x18 \x11\xbeG\x85\xb2\xf5\xa1S\xfd\x82\xfe\x94\x02\xd6\xd4\x1a4zbn\x17\\\xfc\xb4\x02\xfbN\xe8\x10>\xa2\x87\xa0\xb3\x90E\x94\xb7B\xffl\xca\xc62\x1ar\x92#kz\xa6fP\xc5\xe8\xcd\xf1\x18l\xa0\xbf\xdb\x18b\vRo\x1f^\x18\bR\xf7O\b\xb4\xd3;0\xc1h/\xaf\x0e\x88\xcc\xea\x94Ur\'!q\x03\xb0\xcf\t\xbe\xc4\x197Q]H?\v\xe0\xd3/\xa6\xf7j&\xd5\xdf\x90\x1e\xd3_H\'\xd1\xa2Z\xf4B1\x1f\xfc\xb7\x9bJ\xf5\x81\tT6zS-\x8c2%\xc1|\x9e\xfaj>\xfa\x01x\xc3\xd1;\xd5\xeb\xfcM\xb7\x938\xcb\x90We\xc8\xd6\x83\xad\xeb`c\x93\x15\x82F\n*\xbe\xe1\xe2\x82\xd6\xa6\x96\xee\x83\x164K\xe2\xc0\x174\xeeT)?\x00:S\xac\x13\x86\xcc6\x16\x06\x00q\xdc\x14\xb5c\xeb\xca4j\x8f\xb2|\x05\x92%{z\xfc\x00\x00\x00\x00\x00')

53.792890765s ago: executing program 32 (id=626):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000001200)='\x00\x00\x01\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x9f\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00o\b\xbdd\xcb\xa0\xc4P-E_Q\xa2\x98\xf5\xdb\x17\xe2-\x890\xf7\xaf\x1eL\x0f\xe3\xb2\xb8X\xdb\x849\xc6\xaaG#\x1bg\x05F\x85\x9e\x18 \x11\xbeG\x85\xb2\xf5\xa1S\xfd\x82\xfe\x94\x02\xd6\xd4\x1a4zbn\x17\\\xfc\xb4\x02\xfbN\xe8\x10>\xa2\x87\xa0\xb3\x90E\x94\xb7B\xffl\xca\xc62\x1ar\x92#kz\xa6fP\xc5\xe8\xcd\xf1\x18l\xa0\xbf\xdb\x18b\vRo\x1f^\x18\bR\xf7O\b\xb4\xd3;0\xc1h/\xaf\x0e\x88\xcc\xea\x94Ur\'!q\x03\xb0\xcf\t\xbe\xc4\x197Q]H?\v\xe0\xd3/\xa6\xf7j&\xd5\xdf\x90\x1e\xd3_H\'\xd1\xa2Z\xf4B1\x1f\xfc\xb7\x9bJ\xf5\x81\tT6zS-\x8c2%\xc1|\x9e\xfaj>\xfa\x01x\xc3\xd1;\xd5\xeb\xfcM\xb7\x938\xcb\x90We\xc8\xd6\x83\xad\xeb`c\x93\x15\x82F\n*\xbe\xe1\xe2\x82\xd6\xa6\x96\xee\x83\x164K\xe2\xc0\x174\xeeT)?\x00:S\xac\x13\x86\xcc6\x16\x06\x00q\xdc\x14\xb5c\xeb\xca4j\x8f\xb2|\x05\x92%{z\xfc\x00\x00\x00\x00\x00')

2.747104402s ago: executing program 4 (id=1418):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x16d}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xe)
tee(r2, r1, 0x0, 0x0)
r3 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000580)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="402365000000650dd382f42eac5b691e66ad3acee2c55c6d9626ba52b0e1ce293dc1b706156acbed3b2725ff9502815bbd9341574f87a2bcf5b98ffe193bccd373b9887233d4a1447c04ef8564cc6b133b88f1256ee75f1f9ef840edac18c01558147d7229a0b9217568dc"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f0000000b40)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x3, 0x6, 0xfd, "d3a309c7", "5b040038"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x0, 0x7, 0x81, 0x5, 0xf801}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0xd, 0xfa, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="200000241a8d080040012000"], &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xd164}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0xb, 0x2, "b61a"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "461a"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x6093}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0x21, 0x1}})
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800200001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x4c000)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@loopback, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805)
recvfrom(r5, 0x0, 0x0, 0x40010061, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x1}}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="04010000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="89e500b7c41aabb8ed654beb761299ad042e4684184fce8a002d1cd25902ee13147cb44b5caf62df66cfa6272f4fca373aee8c74392c7cd19c2d02e38e12196ab4af562f1a6777dfee613fe79e27e7879f"], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f2f0808cbd2d2600005bb9800000c00f3235000800000f30b9bf0a0000b83c85e116bafebab4650f3066b823018ed8c7442400b5000000c744240271000000c7442406000000000f011c2465650f38075d1a66420fc777ba44f442ddea0f01c5", 0x60}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x8001)
r13 = getpgid(0x0)
fcntl$setownex(r12, 0xf, &(0x7f0000000140)={0x2, r13})
sendmmsg$unix(r11, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1.805404448s ago: executing program 4 (id=1425):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

1.750774679s ago: executing program 4 (id=1426):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x5, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x18c, r0, 0x310, 0x7, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @remote, 0xe}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14f749ee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="120100008cbd7f209904f4acee780102030109023c00011000767e6b47469c895e1b63d2000904130001ff06d20005240600010524009a830d240f01e9000000060091008106241a000008042402000905050348000909057f60ba87bd5e718038edc773b80f1635d51ed27df45e4ed2468c278cb62c4297e5c87fcbf5247c02cf3822bdcd4a50c78229e1067b2154f98a85f1b0fcab287d39e150e40f81"], 0x0)
socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)
shutdown(r2, 0x1)
getgroups(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x7d4)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x526d630517582f28, 0x4})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0600"])
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000004080)={[{@workdir={'workdir', 0x3d, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]})
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)
write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r6, {0x7, 0x2b, 0x60000000, 0xffffffff80000000, 0xf9e, 0x7, 0x10001, 0x7, 0x0, 0x0, 0x8, 0xb}}, 0x50)

706.834495ms ago: executing program 3 (id=1450):
unshare(0x64000600) (async)
syz_clone(0x8222000, 0x0, 0x35, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000080)="2009ba4d", 0x4}], 0x2) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
execve(0x0, &(0x7f0000000300)={[&(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00']}, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x2) (async)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xba28)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x2000)
modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x8})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002a80)={0x0, <r9=>0x0, "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", "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"}) (async)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r7, 0x0, 0x4004)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000000c0)={{r9, 0x7000000, 0x10, 0x7fff, 0x0, 0x7, 0x6, 0x6, 0x0, 0x7, 0x8000, 0x5, 0x7, 0x401, 0xb}, 0x18, [0x0, 0x0, 0x0]})

687.055665ms ago: executing program 3 (id=1451):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x50101, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

635.039146ms ago: executing program 3 (id=1452):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6)
fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x75, 0x5, 0x0, "dc5cf4ca7caec51f8df9a3d187e713a0", "71e2b0fdd00a3d89793cf774befb64614a1b2ff1a6238cf68bd99c7f52ac5931495ce7151dfe4b8fc436964921ea40f27670e21a203a482a5c448729e209ee976ef2028dc05db2b786daae06b29b973f4ba13ea6a303f1cc9cab284724c3a5fc"}, 0x75, 0x1)
syz_io_uring_setup(0x1645, &(0x7f0000000000)={0x0, 0x2d41, 0x20, 0x0, 0x1c6, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

634.793686ms ago: executing program 3 (id=1453):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup(r0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

629.981326ms ago: executing program 3 (id=1455):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00'])

615.657506ms ago: executing program 3 (id=1457):
r0 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_write(r0, 0x7f, 0x49, &(0x7f0000000040)="b55e32b304e3e946ac3fc9498776825d752be685689fa534fb3a86e5aef33640073fb278b01b2234889bf68a9a50b496fec480f71c167f03279db4a7a785366bf11e586618fe5e66db")
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x10, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001100)={0x2, 0x1000, &(0x7f0000000100)="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"})
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001140)={0x3b, 0x1, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}, 0x18)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000012c0)={0x2, 0x0, [{0x808b000, 0x3, &(0x7f00000011c0)=""/3}, {0x1, 0xb3, &(0x7f0000001200)=""/179}]})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001380)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_OPEN(r4, &(0x7f00000033c0)={0x20, 0x0, r5, {0x0, 0x12}}, 0x20)
r7 = fcntl$getown(r1, 0x9)
r8 = socket$pptp(0x18, 0x1, 0x2)
r9 = epoll_create(0x1)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003400), 0x2c0000, 0x0)
kcmp$KCMP_EPOLL_TFD(r7, r6, 0x7, r8, &(0x7f0000003440)={r9, r10, 0x4})
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000003480)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1, 0x136778cd, 0x41c35515, 0x1e, 0xfffffffffffffffa, 0x6}, {0x272, 0xb, 0x1, 0x2, 0x6, 0x81}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000003740)={{0xa, 0x4e23, 0x8, @remote, 0x8}, {0xa, 0x4e23, 0xb, @loopback, 0xa04b}, 0xffffffffffffffff, {[0x1, 0xfa8, 0x5, 0xb659, 0x8, 0x1000, 0x8, 0x31c0000]}}, 0x5c)
accept(r2, &(0x7f00000037c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000003840)=0x80)
close_range(r8, r9, 0x2)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000003880))
r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000038c0)='cgroup.threads\x00', 0x2, 0x0)
r12 = dup2(r11, r4)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x38)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r12, 0x40045402, &(0x7f0000003900))
ioctl$KVM_GET_IRQCHIP(r12, 0xc208ae62, &(0x7f0000003940)={0x2, 0x0, @pic={0x7f, 0x40, 0x6, 0x7, 0x7, 0x9, 0x0, 0x3c, 0x7f, 0x3, 0x5, 0x5b, 0x0, 0x4, 0x85, 0x5}})
lseek(r14, 0x1000, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r3, &(0x7f0000003b80)={0x20000000})

555.763746ms ago: executing program 2 (id=1458):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
write(r2, &(0x7f0000000580)="0102", 0x2)
close(r2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00'])
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket(0x2c, 0x80000, 0xffff)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f0000000080)={0x0, r2, 0x804, 0x2, 0x8, 0xfffffffffffffff7})
sendmmsg$unix(r8, &(0x7f0000000000)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048840}}], 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @remote})
socket$tipc(0x1e, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
readv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r9, 0x125f, 0x0)

386.686347ms ago: executing program 4 (id=1459):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x1002, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x10f, 0x15, 0x0, 0x0) (async)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@loopback, @rand_addr=0x64010100, 0x0, "3342fe77d5369e8ba05ae130e9a2a4e5ac4aa6a21b9560a52bc6ff5a4cf208ad", 0x9, 0x4, 0x8, 0xb}, 0x3c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
write$tun(r1, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x46, 0x19, 0x4}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x21, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010102, @local}, "8b04ba06175fe851a81e3308c2"}}, 0x2b)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async, rerun: 32)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) (async)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="c91ae6c584ca5e986fea32ef1f1aa40b5a057a45dda2dbf0b36ec762fd48aa3cfc524fdf731340d8c2715dc5830fec4ef605cc267027c170a2af47ee0c736bec"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)

359.633568ms ago: executing program 4 (id=1460):
r0 = syz_open_dev$loop(&(0x7f00000015c0), 0x6, 0x42682)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000098a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x9248994dc613af0a, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"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"})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) (async, rerun: 64)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (rerun: 64)

239.362169ms ago: executing program 4 (id=1461):
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB='d\\rsync,\x00'])
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="5801000000000000f9ffffffffffffff02000000000000000200000000000000ffff0000000000002f12000000000000000001000000000006000000000000002e6f000000000000cc050000000000000d000000000000000700000000000000001000000000000008000000a40500000600000000a0000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000000001000000000001000000000000005e0000000000000007"], 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f00000006c0)={[{@xino_off}, {@verity_on}], [{@hash}, {@obj_type={'obj_type', 0x3d, 'max_read'}}, {@smackfshat={'smackfshat', 0x3d, '\xf8T`B\x0eN2y\x89\xf91N\xad\x1f\x96Y\r\x878RTn\n\x0e\xe8Un$\xfei6Y\xfc\xa2\x99\x18%\xa1\x1a\xdf\xa4\x9bp\xab%gC\xb5\xf4`\x94\xc8L\xe0\x8cm>t1\xf9+\x9e\xe3\xd3\xcdK\x83\'\x89%M\x99f\xb2\xaf\fWaK\x9d{z\xa7\xca\x91\xd9rW\xda\x00'/99}}, {@euid_lt={'euid<', r4}}]})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='huge=always,size=g'])
read$eventfd(r6, &(0x7f0000000080), 0x8)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x42, 0x5, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x59, 0x3, 0x8000, 0x3ff, r9, r10, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xd9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0})
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0xb}}, {@allow_other}, {@allow_other}]}})

224.272849ms ago: executing program 1 (id=1465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
timer_create(0x2, 0x0, &(0x7f0000000180)=<r1=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000480)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r2, r3+60000000}}, &(0x7f0000000200))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080000000316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa0c001c"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_dev$loop(0x0, 0xd5d1, 0x0)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x41, &(0x7f0000000400))
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000440), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x8000002) (async, rerun: 64)
ioprio_set$pid(0x2, 0x0, 0x0) (rerun: 64)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1)

167.723179ms ago: executing program 1 (id=1466):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
lseek(r0, 0x4, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0})

167.067499ms ago: executing program 1 (id=1467):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0)

166.889969ms ago: executing program 1 (id=1468):
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1, 0x4b2, 0x1)
setsockopt$inet6_udp_int(r1, 0x11, 0xab0e51604d3d6374, &(0x7f0000000040)=0x800, 0x4)

165.556489ms ago: executing program 1 (id=1469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000009c}, 0x24000000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", ""]}, 0x14}}, 0x40000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, {0x6, 0xa, 0x5, 0x5, {0x4e21, 0x4e22, [0x5, 0x10000, 0x1, 0x9], [0x8, 0x40800000, 0x5, 0x2], r6, [0x2, 0x94d]}, 0x0, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "030874a58b468732d0f9d8105ba050004ea12d2ce24574ff73523a05ccdda3d91aec8fd91c380f68842d697b05359fd34d0d65d3d3439020a6df0c5e7d2542cfb5fd768e5749aa5e9fe8ec414d76d4af76f1c68ca7bdd68fd5bd635e65335a4696766a6db95c21f268d5d78c85390d9a3216ee5fa835484a7fa2483b8e032bf89093f3bdd226ac7cfde76327bf6b1bab612de1b3eaceb03c6ba48a57341549f4417efa625b565812d6856b6d3a02e5fe32589a22496ada2c02538327"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x4000091)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000680)="4c25d4c63625b5f36e660b5e27d7b37b9de64a10b573704109bd7111ad18a55fb47d862679ed193f415f2b6f59723004e0d85cce249c5c1524a2645ea6949f9602e1cfde347ba5cfc2714eb0f913de77985d6662d8388a5f2649c0bcc54b3bf352bf10cbf73720e40222a576b80ef56e11fe340a5318cae3ccf5b7594587d626d9a822a137faff563fc07b4dfc", 0x8d, 0x4044801, &(0x7f0000000740)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r7)
mkdir(&(0x7f00000007c0)='./file0\x00', 0x1) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x124d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x34}}, 0x8080) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8)
sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000001880)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f00000009c0)={0xe70, r10, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7389, 0x6d}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@supported_rates={0x1, 0x2, [{0xf}, {0x9, 0x1}]}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1db, 0x80, [@tim={0x5, 0x11, {0xac, 0xe4, 0x5, "df1ba69165badfcb3d408130d78a"}}, @random_vendor={0xdd, 0xfd, "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"}, @challenge={0x10, 0x1, 0x25}, @measure_req={0x26, 0x5f, {0x3, 0xf7, 0xf8, "5404cb072c8ac91d893b5b79bc42ed8bd2137c53b3acc4cee669d7915e5417db82e2d58de6025eeb537564100467227d8ecd18a73b9e4eec21c2ec0be95c723b498c2d5437f7d018ae6bc93f91ab4618b242ba68035bc0c4acbf8041"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x9, 0x5, "f6b9c7717a"}, @perr={0x84, 0x55, {0x5, 0x5, [{{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x40}, {{}, @device_a, 0x1, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x1d}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2f}, {{}, @device_a, 0x0, @void, 0x5}]}}]}, @NL80211_ATTR_IE={0x19, 0x2a, [@chsw_timing={0x68, 0x4, {0x7fff, 0x10}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x20}}, @dsss={0x3, 0x1, 0x88}, @dsss={0x3, 0x1, 0xb8}]}, @NL80211_ATTR_PROBE_RESP={0x830, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x156, 0xf, [@ht={0x2d, 0x1a, {0x4000, 0x0, 0x2, 0x0, {0x7, 0xa9, 0x0, 0xa, 0x0, 0x1}, 0x1, 0xc2aa, 0x8}}, @challenge={0x10, 0x1, 0x27}, @peer_mgmt={0x75, 0x14, {0x1, 0x6, @void, @void, @val="b10d6b71505c4bcf2192e4bd3478c24c"}}, @link_id={0x65, 0x12, {@random="443b9764a36d", @broadcast, @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0xb, 0x5, 0x5, 0xc}}, @chsw_timing={0x68, 0x4, {0x1000, 0x2}}, @ssid={0x0, 0x1f, @random="deac020b986d3de62185ee98a1b3124a6ad9f70c39a519e311a826ac463897"}, @chsw_timing={0x68, 0x4, {0x9, 0x5}}, @tim={0x5, 0xcf, {0x7, 0xa4, 0x5, "84635a24f90b28fd3c5cc7327d6c90981296855585747d464b7836205227a003f1aa13d63c8031b59284b69bb70e654d1a097c383e9d26608fe72365f6894b4f5339ab39ddf70554f29f223a01bf7fe40e5a5684ac5dd640dbf12fb20f0d774dceb77e0ee2d54088fbb27a45899088443091f3e49fec459bb04cd13c421c87d8c39d2c3feca333fec670e52d1b94308cce171fec08f21c3c69649f14b6a14213010accbd2223dea88040084f93a1ef7c4e15132d2fc7643d51895b203ab303bb98f6a0ef908fb79fe10bb359"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2ae, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd6}, @device_b, @device_b, @initial, {0x6, 0x5}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0xfffffffffffffffb, @random=0x6, 0x4e60, @val={0x0, 0xf, @random="8b63a88c4852df868b4e37aa0093ed"}, @void, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x9, 0xe0, 0x5, 0x7fff}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xc2, {0x7, 0x45, 0x2, "0439ee8e15a21db71780357be7ab23b723cf341c2d42fce1805b82eda582f178c03c22a38aad03a26de0454a5c0a1bd6e1f34bfb0f92015e18f0774c4beba14264c57f26c84eb17dca3925e8c04169cebe37514b2cd7b4164bbdfbab7d8682244d7db3d46853db261e74ec0d9e55b6676117339b94a45b2e83bc77066f5edae46abb67865ef61b26b11f7a5108f35c59a30d695c059ed57d2031cbdcd73b139004e23414e7af0db1776757d537bdae9465338757cd05dbdabb128715b06720"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x2, 0x39, 0xfff8}}, [{0xdd, 0xb0, "629ba19eb7206a21e5ed414874246e561f41f805b6817acdc5b20307595f7ffc92de8e180f2b0e4758af3bcd1bed894df93dc0a00772ba53a28cc9a4c07976f1d144b26b76ff9a8f02f542901a460adcef2a303778f859e6d2dc5047a3865ac33970fae2d461fb08d6ac30457eae7949869960b21cf038717264621cfa3dc8045f45c17abca0789c52a29604a208a2cfe2847f80033b8db0e0c59222d12ea8b171dbee377889a93d9e9c66ba6f0ef3f8"}, {0xdd, 0x47, "b63a99236adb27077b51068fdaf6ac87a4d2c5a49e4eefbd2bc072f43a7a58539f8ad28467100395ff3f614f69e9ea417d73faa5092345a6b5cabc99e9a32a3b3b18347a91f073"}, {0xdd, 0x52, "171373c8e947b377534a2512d2874d761d939826b775f660248d07f6d6f068613a90a9fcdefce16f6a0cde7652fb55e6dfeace343cdf2105c378fe88a79ba93dccb1c513dfdd1f48ccc2b5413cb38cd967d0"}, {0xdd, 0x3d, "d7d9ca6fe84c748437e992e0ce393d6f8b2c3ec876c070a3165c9fff1447a63da9e871e90419c0ee2c65c0665a9c01aa6894cf49333553f2bfe5099fbf"}]}}]}, 0xe70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090) (async)
close(r0)
syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001940)=[@textreal={0x8, &(0x7f00000018c0)="bad004b8ad00efba4300b00dee66b9280900000f323e660ff679ca660f28333e0fc7acf6ffbad104b075ee0f182a66b9310a00000f3266b9e508000066b80000010066ba000000000f30", 0x4a}], 0x1, 0x40, &(0x7f0000001980)=[@cr0={0x0, 0x80050000}, @cstype3={0x5, 0x6}], 0x2)
sendmsg$nl_xfrm(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@getsadinfo={0x58, 0x23, 0x10, 0x70bd25, 0x25dfdbfe, 0x0, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d4, 0xff}, 0xa, @in=@multicast1, 0x0, 0x4, 0x3, 0x4, 0x81, 0x6, 0xc76}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r10, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x89}, 0x14000001) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000001c00)={0x1, 0x1, 0x10, 0x3, @vifc_lcl_addr=@private=0xa010101, @empty}, 0x10) (async)
ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000001c40)=<r12=>0x0)
ptrace(0x4207, r12) (async)
kcmp(r12, r12, 0x2, r5, r5) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x8000, 0x0, 0x8}, 0x18)

165.365899ms ago: executing program 1 (id=1470):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x10010, r2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

146.365689ms ago: executing program 2 (id=1471):
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x42800}, 0x4040020)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats='])

133.235249ms ago: executing program 2 (id=1472):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0xfffffffffffffffd, 0x1b})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="a2d557", 0x3}], 0x1, 0x0, 0x0, 0x20000851}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x1}, 0x10)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>0x0, 0x29, 0x9, 0x7e, 0xd, 0x0, @local, @private2, 0x20, 0x10, 0xffff50ab, 0x800}})
sendto(r1, &(0x7f0000000380)="24533246e7e12d5ab6566ed35a79d9743f34765e29770bbe8f1651d848827111ebeaa75c1e29b9f89533b48a6b8896befc12a66dd0593ca3eb75f1cbddbbb00627887df5070718af41029ef9d36c2039573d459990e807ece4a19e721aab25dd444d7bd8c92ff0fb3052a6d64bec27ec1b0600db6ce49d43468ee105310cca7b2aeecdd4", 0x84, 0x20000000, &(0x7f0000000280)=@can={0x1d, r4}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x7, 0x7800, 0x9b, 0x1, {{0x2c, 0x4, 0x3, 0x8, 0xb0, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@rr={0x7, 0xf, 0x18, [@broadcast, @local, @local]}, @lsrr={0x83, 0x17, 0x3d, [@dev={0xac, 0x14, 0x14, 0x2b}, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0x7, [{@rand_addr=0x64010102}, {@multicast2, 0x40}, {@local, 0x4}, {@local, 0x5}, {@rand_addr=0x64010102, 0x57}]}, @timestamp_addr={0x44, 0x1c, 0x37, 0x1, 0x7, [{@local, 0x28}, {@local, 0x7e4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}]}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0xbf, [@remote, @rand_addr=0x64010100, @broadcast, @empty, @empty, @loopback]}, @timestamp_addr={0x44, 0xc, 0x8a, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @end]}}}}})
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

71.88011ms ago: executing program 2 (id=1473):
socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x58cb23c0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680fd000000fd"], 0x44}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB="b577c33c99418f8c22acbbd7e5fefd525634a4346d5036e1f3a44dd9a2b0de3d8615131a9fdb019d02d4a67596f78a26b04c210f2d176a4ad4435dc4ae95fda077e77365e1bb0b10ab519f01542b368238559e83", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRES32, @ANYRES8, @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000600,allow_other,blksize=0x0000000000000000,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC, @ANYBLOB=',obj_type=!/]3,smackfshat=upperdir,\x00'])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

34.8584ms ago: executing program 2 (id=1474):
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]})
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x76, 0x101301)
rename(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='./file0\x00')
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0x0, 0x0, "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"})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000a84000429bd7000ffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='&'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r4=>0xffffffffffffffff, 0x43, 0x5, 0xaf})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x800000, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @broadcast}}}, 0x108)
read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020)

0s ago: executing program 2 (id=1475):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1d})

kernel console output (not intermixed with test programs):

ig 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   69.494725][  T638] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[   69.503782][  T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.512464][  T638] usb 4-1: config 0 descriptor??
[   69.670886][   T36] kauditd_printk_skb: 53 callbacks suppressed
[   69.670917][   T36] audit: type=1326 audit(1762803226.280:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2214 comm="syz.0.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5afa98f6c9 code=0x0
[   69.723447][ T2216] overlayfs: failed to resolve './file1': -2
[   69.813968][  T371] usb 3-1: USB disconnect, device number 24
[   69.888614][ T2221] netlink: 'syz.1.604': attribute type 13 has an invalid length.
[   69.918523][ T2213] mmap: syz.3.601 (2213): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[   70.000355][  T638] usbhid 4-1:0.0: can't add hid device: -71
[   70.008014][  T638] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   70.016874][  T638] usb 4-1: USB disconnect, device number 23
[   70.418989][   T36] audit: type=1400 audit(1762803227.020:454): avc:  denied  { map } for  pid=2224 comm="syz.1.606" path="socket:[14818]" dev="sockfs" ino=14818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   70.447785][ T2227] netlink: 'syz.1.607': attribute type 11 has an invalid length.
[   70.455748][ T2227] netlink: 'syz.1.607': attribute type 2 has an invalid length.
[   70.473132][   T36] audit: type=1400 audit(1762803227.080:455): avc:  denied  { listen } for  pid=2229 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.584422][ T2250] netlink: 'syz.3.616': attribute type 13 has an invalid length.
[   70.708340][ T2253] tipc: Failed to remove unknown binding: 66,1,1/0:4230086120/4230086122
[   70.727974][ T2253] tipc: Failed to remove unknown binding: 66,1,1/0:4230086120/4230086122
[   70.738133][ T2253] tipc: Failed to remove unknown binding: 66,1,1/0:4230086120/4230086122
[   70.816167][   T36] audit: type=1326 audit(1762803227.420:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.3.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe079b8f6c9 code=0x0
[   70.989115][   T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   71.139107][   T45] usb 3-1: Using ep0 maxpacket: 16
[   71.156294][   T45] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.179110][   T45] usb 3-1: config 0 interface 0 has no altsetting 0
[   71.185752][   T45] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   71.206278][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.217627][   T45] usb 3-1: config 0 descriptor??
[   71.449678][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   71.455655][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   71.480025][   T45] usb 3-1: USB disconnect, device number 25
[   71.568968][ T2285] 9pnet_fd: Insufficient options for proto=fd
[   71.722516][ T2301] x_tables: duplicate underflow at hook 1
[   71.839119][   T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[   71.969189][   T10] usb 4-1: device descriptor read/64, error -71
[   72.219119][   T10] usb 4-1: device descriptor read/64, error -71
[   72.239617][   T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   72.309961][ T2314] tipc: Started in network mode
[   72.314955][ T2314] tipc: Node identity 4, cluster identity 4711
[   72.321397][ T2314] tipc: Node number set to 4
[   72.400178][   T45] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   72.413968][   T45] usb 3-1: config 1 interface 0 has no altsetting 0
[   72.430208][   T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40
[   72.439318][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.447342][   T45] usb 3-1: Product: п
[   72.451470][   T45] usb 3-1: Manufacturer: 庳魽凞ꖺ楢ǚĔ膋⟩ﲬ鵘廜礩긟읃兺ꧢ╼輿㗗དྷ컋㷫⋄ᴈᡒܕ扎֤멦퓥乧懄쬙쯊嵺頫⊢駥䪜ꖱ㕗⢸獮蹻Ӿ嗢汯农耾졗麍琎▔䘉薚ܛ웭䂨穀໔﷌膏爐渋۸䩭闀䵏衂蟧兴െ䦳⡔䷖댲樴尿鿤牠
[   72.459121][   T10] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[   72.479489][   T45] usb 3-1: SerialNumber: 䀊
[   72.639124][   T10] usb 4-1: device descriptor read/64, error -71
[   72.879235][   T10] usb 4-1: device descriptor read/64, error -71
[   72.904356][   T45] usbhid 3-1:1.0: can't add hid device: -71
[   72.910359][   T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   72.921870][   T45] usb 3-1: USB disconnect, device number 26
[   72.989217][   T10] usb usb4-port1: attempt power cycle
[   73.200739][   T36] audit: type=1400 audit(1762803229.810:457): avc:  denied  { bind } for  pid=2325 comm="syz.1.644" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   73.221155][   T36] audit: type=1400 audit(1762803229.810:458): avc:  denied  { node_bind } for  pid=2325 comm="syz.1.644" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   73.244520][   T36] audit: type=1400 audit(1762803229.810:459): avc:  denied  { name_bind } for  pid=2325 comm="syz.1.644" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   73.267496][   T36] audit: type=1400 audit(1762803229.870:460): avc:  denied  { map } for  pid=2327 comm="syz.1.645" path="socket:[15167]" dev="sockfs" ino=15167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   73.349126][   T10] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[   73.375110][   T10] usb 4-1: device descriptor read/8, error -71
[   73.510204][   T10] usb 4-1: device descriptor read/8, error -71
[   73.659111][   T31] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[   73.759112][   T10] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[   73.780174][   T10] usb 4-1: device descriptor read/8, error -71
[   73.820178][   T31] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[   73.828306][   T31] usb 3-1: config 0 has no interface number 0
[   73.834474][   T31] usb 3-1: config 0 interface 41 has no altsetting 0
[   73.842731][   T31] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   73.856629][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.870119][   T31] usb 3-1: Product: syz
[   73.874629][   T31] usb 3-1: Manufacturer: syz
[   73.879304][   T31] usb 3-1: SerialNumber: syz
[   73.886907][   T31] usb 3-1: config 0 descriptor??
[   73.910151][   T10] usb 4-1: device descriptor read/8, error -71
[   74.019251][   T10] usb usb4-port1: unable to enumerate USB device
[   74.457652][   T36] audit: type=1326 audit(1762803231.060:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2351 comm="syz.1.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x0
[   74.621138][   T36] audit: type=1326 audit(1762803231.230:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2362 comm="syz.3.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe079b8f6c9 code=0x0
[   74.694569][   T31] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   74.969174][   T65] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[   75.099114][   T65] usb 4-1: device descriptor read/64, error -71
[   75.339108][   T65] usb 4-1: device descriptor read/64, error -71
[   75.589180][   T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[   75.728564][   T65] usb 4-1: device descriptor read/64, error -71
[   75.969118][   T65] usb 4-1: device descriptor read/64, error -71
[   76.079228][   T65] usb usb4-port1: attempt power cycle
[   76.151433][ T2337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[   76.152074][   T31] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[   76.172918][   T31] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[   76.184791][   T31] usb 3-1: USB disconnect, device number 27
[   76.429157][   T65] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[   76.450113][   T65] usb 4-1: device descriptor read/8, error -71
[   76.590098][   T65] usb 4-1: device descriptor read/8, error -71
[   76.675313][ T2386] netlink: 'syz.2.665': attribute type 4 has an invalid length.
[   76.753019][ T2386] netlink: 'syz.2.665': attribute type 4 has an invalid length.
[   76.761584][ T2386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   76.761612][ T2386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:321
[   76.829117][   T65] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[   76.860170][   T65] usb 4-1: device descriptor read/8, error -71
[   76.999874][   T65] usb 4-1: device descriptor read/8, error -71
[   77.039111][   T31] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[   77.109195][   T65] usb usb4-port1: unable to enumerate USB device
[   77.169104][   T31] usb 3-1: device descriptor read/64, error -71
[   77.419125][   T31] usb 3-1: device descriptor read/64, error -71
[   77.661087][   T31] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[   77.763182][ T2395] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.799138][   T31] usb 3-1: device descriptor read/64, error -71
[   78.049149][   T31] usb 3-1: device descriptor read/64, error -71
[   78.169242][   T31] usb usb3-port1: attempt power cycle
[   78.349175][   T36] audit: type=1400 audit(1762803234.950:463): avc:  denied  { accept } for  pid=2401 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   78.371027][   T36] audit: type=1400 audit(1762803234.980:464): avc:  denied  { nlmsg_read } for  pid=2401 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   78.519132][   T31] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[   78.540209][   T31] usb 3-1: device descriptor read/8, error -71
[   78.608192][ T2404] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   78.670107][   T31] usb 3-1: device descriptor read/8, error -71
[   78.939125][   T31] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[   78.980085][   T31] usb 3-1: device descriptor read/8, error -71
[   79.110100][   T31] usb 3-1: device descriptor read/8, error -71
[   79.219212][   T31] usb usb3-port1: unable to enumerate USB device
[   79.541870][ T2416] 9pnet_fd: Insufficient options for proto=fd
[   79.864589][ T2430] rust_binder: Write failure EFAULT in pid:327
[   80.201573][ T2450] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.230743][ T2456] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.237434][ T2457] rust_binder: Error while translating object.
[   80.243947][ T2457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   80.254108][ T2457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:343
[   80.354070][   T36] audit: type=1400 audit(1762803236.960:465): avc:  denied  { ioctl } for  pid=2460 comm="syz.2.688" path="socket:[15937]" dev="sockfs" ino=15937 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   80.631256][  T475] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   80.778376][ T2489] binder: Unknown parameter 'max0xffffffffffffffff'
[   80.799134][  T475] usb 3-1: Using ep0 maxpacket: 32
[   80.805448][  T475] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   80.819278][  T475] usb 3-1: config 0 has no interface number 0
[   80.826907][  T475] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   80.846269][  T475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.859102][  T475] usb 3-1: Product: syz
[   80.863466][  T475] usb 3-1: Manufacturer: syz
[   80.871433][  T475] usb 3-1: SerialNumber: syz
[   80.879971][  T475] usb 3-1: config 0 descriptor??
[   80.888394][  T475] smsc95xx v2.0.0
[   80.950691][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'.
[   81.092934][  T475] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   81.103951][  T475] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   81.115656][  T475] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   81.131934][  T475] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   81.141336][  T475] usb 3-1: USB disconnect, device number 32
[   81.172297][ T2499] overlayfs: missing 'lowerdir'
[   81.226873][ T2502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22304 sclass=netlink_route_socket pid=2502 comm=syz.1.701
[   81.361179][   T36] audit: type=1326 audit(1762803237.970:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2520 comm="syz.1.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x0
[   81.579125][  T627] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[   81.729123][  T627] usb 3-1: Invalid ep0 maxpacket: 64
[   81.782512][ T2524] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   81.861014][  T627] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[   81.872786][ T2526] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   81.902473][ T2528] binder: Unknown parameter 's
'
[   81.926727][   T36] audit: type=1400 audit(1762803238.530:467): avc:  denied  { setattr } for  pid=2530 comm="syz.3.712" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   82.039196][  T627] usb 3-1: Invalid ep0 maxpacket: 64
[   82.044620][  T627] usb usb3-port1: attempt power cycle
[   82.186797][ T2543] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.187613][   T36] audit: type=1400 audit(1762803238.790:468): avc:  denied  { execute_no_trans } for  pid=2542 comm="syz.3.716" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   82.399148][  T627] usb 3-1: new low-speed USB device number 35 using dummy_hcd
[   82.419493][  T627] usb 3-1: Invalid ep0 maxpacket: 64
[   82.549161][  T627] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[   82.578571][  T627] usb 3-1: Invalid ep0 maxpacket: 64
[   82.584048][  T627] usb usb3-port1: unable to enumerate USB device
[   82.773565][ T2558] binder: Unknown parameter '0000000000000000000000401777777777777777777777'
[   82.784293][ T2559] binder: Unknown parameter '0000000000000000000000401777777777777777777777'
[   82.810697][ T2562] bridge0: port 3(veth0_to_team) entered blocking state
[   82.817826][ T2562] bridge0: port 3(veth0_to_team) entered disabled state
[   82.824889][ T2562] veth0_to_team: entered allmulticast mode
[   82.831245][ T2562] veth0_to_team: entered promiscuous mode
[   82.837819][ T2562] binder: Bad value for 'defcontext'
[   82.860542][ T2564] /dev/rnullb0: Can't open blockdev
[   83.266174][ T2572] netlink: 'syz.1.727': attribute type 4 has an invalid length.
[   83.364935][   T36] audit: type=1400 audit(1762803239.970:469): avc:  denied  { getopt } for  pid=2583 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   84.311812][ T2594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'.
[   84.343740][   T36] audit: type=1400 audit(1762803240.950:470): avc:  denied  { getopt } for  pid=2598 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.572300][   T36] audit: type=1400 audit(1762803241.180:471): avc:  denied  { read } for  pid=2614 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   84.592908][ T2616] rust_binder: 375: no such ref 2
[   84.800507][ T2621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.039133][  T475] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   85.199116][  T475] usb 3-1: Using ep0 maxpacket: 32
[   85.205441][  T475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.216644][  T475] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[   85.225879][  T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.236251][  T475] usb 3-1: config 0 descriptor??
[   85.647222][  T475] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0
[   85.654440][  T475] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0
[   85.664610][  T475] sunplus 0003:04FC:05D8.000B: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0
[   85.846195][ T2621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.847437][  T475] usb 3-1: USB disconnect, device number 37
[   86.196858][   T36] audit: type=1400 audit(1762803242.800:472): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   86.232903][ T2655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   86.232937][ T2655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496
[   86.322970][   T36] audit: type=1400 audit(1762803242.930:473): avc:  denied  { mounton } for  pid=2661 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   86.389456][ T2666] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   86.391573][   T36] audit: type=1400 audit(1762803243.000:474): avc:  denied  { load_policy } for  pid=2665 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   86.407313][ T2666] SELinux: failed to load policy
[   86.425016][ T2667] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   86.434864][ T2667] SELinux: failed to load policy
[   86.452684][ T2661] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.469110][ T2661] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.476430][ T2661] bridge_slave_0: entered allmulticast mode
[   86.482895][ T2661] bridge_slave_0: entered promiscuous mode
[   86.494114][ T2661] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.510428][ T2661] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.517549][ T2661] bridge_slave_1: entered allmulticast mode
[   86.523897][ T2661] bridge_slave_1: entered promiscuous mode
[   86.626042][ T2661] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.633138][ T2661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.640452][ T2661] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.647581][ T2661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.660182][   T36] audit: type=1400 audit(1762803243.270:475): avc:  denied  { getopt } for  pid=2691 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.695528][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.703413][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.711135][ T2695] binder: Unknown parameter '00000000000000000000003'
[   86.722854][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.729922][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.742782][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.749873][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.753571][ T2699] /dev/rnullb0: Can't open blockdev
[   86.763222][   T36] audit: type=1400 audit(1762803243.360:476): avc:  denied  { mounton } for  pid=2698 comm="syz.2.762" path="/syzcgroup/unified/syz2" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[   86.816565][ T2661] veth0_vlan: entered promiscuous mode
[   86.836935][ T2661] veth1_macvtap: entered promiscuous mode
[   86.843230][   T36] audit: type=1400 audit(1762803243.450:477): avc:  denied  { dac_override } for  pid=2643 comm="syz.3.748" capability=1  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   86.878359][   T36] audit: type=1400 audit(1762803243.480:478): avc:  denied  { mounton } for  pid=2661 comm="syz-executor" path="/root/syzkaller.M1NIKR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   86.942527][ T2708] netlink: 140 bytes leftover after parsing attributes in process `syz.4.750'.
[   86.951787][ T2708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.750'.
[   86.961791][ T2708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   86.961822][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2
[   87.014899][ T2717] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.024935][ T2718] rust_binder: Error while translating object.
[   87.031891][ T2718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   87.039908][ T2718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:520
[   87.092524][ T2725] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.146143][ T2734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404
[   87.146276][ T2735] rust_binder: Error in use_page_slow: ESRCH
[   87.155555][ T2735] rust_binder: use_range failure ESRCH
[   87.161673][ T2735] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   87.167288][ T2735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   87.175215][ T2735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:404
[   87.329168][   T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.499126][   T45] usb 5-1: Using ep0 maxpacket: 32
[   87.505338][   T45] usb 5-1: config 0 has an invalid interface number: 217 but max is 0
[   87.514000][   T45] usb 5-1: config 0 has no interface number 0
[   87.520199][   T45] usb 5-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   87.532799][   T45] usb 5-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed
[   87.541870][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.549873][   T45] usb 5-1: Product: syz
[   87.554011][   T45] usb 5-1: Manufacturer: syz
[   87.558574][   T45] usb 5-1: SerialNumber: syz
[   87.563820][   T45] usb 5-1: config 0 descriptor??
[   87.772559][   T45] usb 5-1: USB disconnect, device number 2
[  100.220871][ T2747] /dev/rnullb0: Can't open blockdev
[  100.272030][ T2764] tmpfs: Unknown parameter 'mm��
[  100.272030][ T2764] �y�H饣l}OfL���aD.T������`��#+�'
[  100.333988][ T2772] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  100.579258][   T65] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  100.649448][  T627] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  100.740188][   T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  100.751141][   T65] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  100.760195][   T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.768687][   T65] usb 4-1: config 0 descriptor??
[  100.773957][ T2775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  100.800438][  T627] usb 5-1: unable to get BOS descriptor or descriptor too short
[  100.808555][  T627] usb 5-1: not running at top speed; connect to a high speed hub
[  100.816981][  T627] usb 5-1: config 129 has an invalid interface number: 135 but max is 0
[  100.825392][  T627] usb 5-1: config 129 has an invalid interface number: 5 but max is 0
[  100.833604][  T627] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  100.842748][  T627] usb 5-1: config 129 has no interface number 0
[  100.848984][  T627] usb 5-1: config 129 has no interface number 1
[  100.855262][  T627] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  100.868497][  T627] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  100.879390][  T627] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  100.892527][  T627] usb 5-1: config 129 interface 135 has no altsetting 0
[  100.899486][  T627] usb 5-1: config 129 interface 5 has no altsetting 0
[  100.907567][  T627] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  100.916664][  T627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.924671][  T627] usb 5-1: Product: syz
[  100.929117][  T627] usb 5-1: Manufacturer: syz
[  100.933725][  T627] usb 5-1: SerialNumber: syz
[  100.982715][ T2787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.993268][   T65] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  101.014378][ T2787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.030507][   T65] usb 4-1: USB disconnect, device number 33
[  101.047217][ T2793] rust_binder: Write failure EINVAL in pid:424
[  101.047494][ T2793] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[  101.076399][ T2793] rust_binder: Write failure EINVAL in pid:424
[  101.119974][ T2804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.126182][ T2804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.133199][ T2804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.149343][  T627] usb 5-1: MIDIStreaming interface descriptor not found
[  101.170275][  T627] usb 5-1: USB disconnect, device number 3
[  101.336356][ T2834] fuse: Unknown parameter ''
[  101.339134][   T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  101.345384][ T2834] fuse: Unknown parameter ''
[  101.353437][ T2834] fuse: Unknown parameter ''
[  101.358191][ T2834] fuse: Unknown parameter ''
[  101.362949][ T2834] fuse: Unknown parameter ''
[  101.367681][ T2834] fuse: Unknown parameter ''
[  101.372618][ T2834] fuse: Unknown parameter ''
[  101.377418][ T2834] fuse: Unknown parameter ''
[  101.382195][ T2834] fuse: Unknown parameter ''
[  101.386976][ T2834] fuse: Unknown parameter ''
[  101.391710][ T2834] fuse: Unknown parameter ''
[  101.396433][ T2834] fuse: Unknown parameter ''
[  101.401185][ T2834] fuse: Unknown parameter ''
[  101.405888][ T2834] fuse: Unknown parameter ''
[  101.410618][ T2834] fuse: Unknown parameter ''
[  101.415340][ T2834] fuse: Unknown parameter ''
[  101.420243][ T2834] fuse: Unknown parameter ''
[  101.424979][ T2834] fuse: Unknown parameter ''
[  101.429813][ T2834] fuse: Unknown parameter ''
[  101.434554][ T2834] fuse: Unknown parameter ''
[  101.439292][ T2834] fuse: Unknown parameter ''
[  101.444040][ T2834] fuse: Unknown parameter ''
[  101.448727][ T2834] fuse: Unknown parameter ''
[  101.453459][ T2834] fuse: Unknown parameter ''
[  101.458157][ T2834] fuse: Unknown parameter ''
[  101.462983][ T2834] fuse: Unknown parameter ''
[  101.467691][ T2834] fuse: Unknown parameter ''
[  101.472436][ T2834] fuse: Unknown parameter ''
[  101.477143][ T2834] fuse: Unknown parameter ''
[  101.481954][ T2834] fuse: Unknown parameter ''
[  101.486700][ T2834] fuse: Unknown parameter ''
[  101.491432][ T2834] fuse: Unknown parameter ''
[  101.496132][ T2834] fuse: Unknown parameter ''
[  101.501836][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  101.512595][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  101.526919][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  101.537257][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  101.551916][   T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  101.561115][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.569264][   T10] usb 3-1: Product: syz
[  101.573422][   T10] usb 3-1: Manufacturer: syz
[  101.578007][   T10] usb 3-1: SerialNumber: syz
[  101.589700][   T10] usb 3-1: config 0 descriptor??
[  101.606691][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  101.606707][   T36] audit: type=1326 audit(1762803258.210:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2839 comm="syz.3.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe079b8f6c9 code=0x0
[  101.705050][   T36] audit: type=1400 audit(1762803258.310:481): avc:  denied  { mount } for  pid=2844 comm="syz.4.808" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  101.738035][ T2850] SELinux: security_context_str_to_sid () failed with errno=-22
[  101.784762][ T2854] tipc: Started in network mode
[  101.789693][ T2854] tipc: Node identity 4, cluster identity 4711
[  101.795886][ T2854] tipc: Node number set to 4
[  101.798280][  T627] usb 3-1: USB disconnect, device number 38
[  101.843454][   T36] audit: type=1400 audit(1762803258.450:482): avc:  denied  { watch_reads } for  pid=2857 comm="syz.1.812" path="/269" dev="tmpfs" ino=1455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  101.885703][ T2864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=2864 comm=syz.4.814
[  101.907446][   T36] audit: type=1326 audit(1762803258.510:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2867 comm="syz.1.816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd34b8f6c9 code=0x0
[  101.951435][ T2869] rust_binder: 35: no such ref 2
[  102.384601][   T36] audit: type=1400 audit(1762803258.990:484): avc:  denied  { remount } for  pid=2876 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  102.393729][ T2877] debugfs: Bad value for 'uid'
[  102.409165][ T2877] debugfs: Bad value for 'uid'
[  102.659111][   T45] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  102.679113][  T475] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  102.810307][   T45] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.820298][   T45] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x2 has an invalid bInterval 253, changing to 11
[  102.831683][   T45] usb 4-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  102.844760][   T45] usb 4-1: config 0 interface 0 has no altsetting 0
[  102.851487][   T45] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  102.860561][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.868937][  T475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.879859][  T475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.889792][   T45] usb 4-1: config 0 descriptor??
[  102.894779][  T475] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.907679][  T475] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.917366][  T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.926116][  T475] usb 3-1: config 0 descriptor??
[  102.959122][  T627] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.109119][  T627] usb 5-1: Using ep0 maxpacket: 16
[  103.115381][  T627] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  103.123824][  T627] usb 5-1: config 0 has no interface number 0
[  103.125940][ T2877] netlink: 64 bytes leftover after parsing attributes in process `syz.3.818'.
[  103.131612][  T627] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  103.147989][  T627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.156022][  T627] usb 5-1: Product: syz
[  103.160235][  T627] usb 5-1: Manufacturer: syz
[  103.164830][  T627] usb 5-1: SerialNumber: syz
[  103.170089][  T627] usb 5-1: config 0 descriptor??
[  103.340684][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.348287][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.356810][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.364487][   T45] nintendo 0003:057E:2009.000E: unknown main item tag 0x0
[  103.371674][   T45] nintendo 0003:057E:2009.000E: unknown main item tag 0x0
[  103.378823][   T45] nintendo 0003:057E:2009.000E: unknown main item tag 0x0
[  103.381041][  T627] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  103.386076][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.394188][  T627] usb 5-1: No valid video chain found.
[  103.401158][   T45] nintendo 0003:057E:2009.000E: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  103.407272][  T627] usb 5-1: USB disconnect, device number 4
[  103.424155][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.434129][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.441786][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.449328][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.456758][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.464186][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.471602][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.478980][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.486374][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.493846][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.501270][  T475] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  103.508773][  T475] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  103.517548][  T475] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  103.558171][   T45] nintendo 0003:057E:2009.000E: Failed to get joycon info; ret=-71
[  103.566133][   T45] nintendo 0003:057E:2009.000E: Failed to retrieve controller info; ret=-71
[  103.574849][   T45] nintendo 0003:057E:2009.000E: Failed to initialize controller; ret=-71
[  103.583988][   T45] nintendo 0003:057E:2009.000E: probe - fail = -71
[  103.590601][   T45] nintendo 0003:057E:2009.000E: probe with driver nintendo failed with error -71
[  103.603621][  T627] usb 3-1: USB disconnect, device number 39
[  103.604268][   T45] usb 4-1: USB disconnect, device number 34
[  103.912650][ T2892] rust_binder: Write failure EFAULT in pid:41
[  103.921415][ T2894] binder: Unknown parameter 'defcontext01777777777777777777777'
[  103.946992][ T2897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'.
[  103.956195][ T2897] netlink: 10 bytes leftover after parsing attributes in process `syz.4.825'.
[  104.199874][   T36] audit: type=1400 audit(1762803260.810:485): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  104.909127][ T2924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.832'.
[  104.935812][ T2924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2924 comm=syz.4.832
[  104.987068][ T2928] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.987720][   T36] audit: type=1400 audit(1762803261.590:486): avc:  denied  { lock } for  pid=2927 comm="syz.2.834" path="socket:[19158]" dev="sockfs" ino=19158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  105.022971][   T36] audit: type=1326 audit(1762803261.620:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.2.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628ff8f6c9 code=0x0
[  105.390703][ T2946] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  105.469117][  T475] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  105.471315][   T36] audit: type=1400 audit(1762803262.080:488): avc:  denied  { read } for  pid=2954 comm="syz.4.844" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  105.508530][   T36] audit: type=1400 audit(1762803262.090:489): avc:  denied  { write } for  pid=2956 comm="syz.1.845" name="/" dev="configfs" ino=2504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  105.619106][  T475] usb 4-1: Using ep0 maxpacket: 16
[  105.625236][  T475] usb 4-1: config 8 has an invalid interface number: 113 but max is 1
[  105.633537][  T475] usb 4-1: config 8 has an invalid interface number: 111 but max is 1
[  105.641785][  T475] usb 4-1: config 8 has no interface number 0
[  105.647845][  T475] usb 4-1: config 8 has no interface number 1
[  105.653933][  T475] usb 4-1: config 8 interface 111 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  105.664796][  T475] usb 4-1: config 8 interface 111 altsetting 6 bulk endpoint 0xF has invalid maxpacket 1024
[  105.674869][  T475] usb 4-1: config 8 interface 111 altsetting 6 has a duplicate endpoint with address 0xF, skipping
[  105.685577][  T475] usb 4-1: config 8 interface 111 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  105.696488][  T475] usb 4-1: config 8 interface 111 has no altsetting 0
[  105.705062][  T475] usb 4-1: New USB device found, idVendor=12d1, idProduct=68eb, bcdDevice=25.61
[  105.714117][  T475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.722141][  T475] usb 4-1: Product: syz
[  105.726285][  T475] usb 4-1: Manufacturer: syz
[  105.730880][  T475] usb 4-1: SerialNumber: syz
[  105.939292][ T2937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.948873][ T2937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.957690][ T2937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.966840][ T2937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.979809][  T475] usb 4-1: bad CDC descriptors
[  105.988258][  T475] usb 4-1: USB disconnect, device number 35
[  106.109331][  T627] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  106.110730][ T3020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.866'.
[  106.126174][ T3020] tipc: Invalid UDP bearer configuration
[  106.126205][ T3020] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.269303][  T627] usb 3-1: not running at top speed; connect to a high speed hub
[  106.277914][  T627] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.290907][  T627] usb 3-1: config 1 interface 0 has no altsetting 0
[  106.298905][  T627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  106.308223][  T627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.316732][  T627] usb 3-1: Product: ఇ
[  106.321140][  T627] usb 3-1: Manufacturer: О
[  106.325854][  T627] usb 3-1: SerialNumber: syz
[  106.361244][ T3043] rust_binder: 87: no such ref 3
[  106.366400][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.366429][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.372901][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.379340][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.385481][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.391817][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.397954][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.404269][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.410598][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.416720][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.423068][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.429313][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.435478][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.441807][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.447972][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.454293][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.460595][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.466685][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.473047][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.479305][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.485424][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.491862][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.497985][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.504304][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.510546][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.516662][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.522950][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.529056][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.535394][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.541726][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.547614][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.561311][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.563908][  T627] usb 3-1: USB disconnect, device number 40
[  106.573597][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.579453][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.585540][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.607910][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.614462][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.628889][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.635338][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.642291][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  106.642308][   T36] audit: type=1400 audit(1762803263.250:493): avc:  denied  { accept } for  pid=3050 comm="syz.3.875" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.642601][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.674911][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.682651][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.689631][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.695782][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.702275][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.708502][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.715038][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.721449][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.727673][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.734770][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.743737][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.750011][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.756125][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.762604][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.768742][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.779180][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.785327][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.791703][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.797825][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.807278][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.813661][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.823489][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.830110][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.836502][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.842807][ T3043] rust_binder: Write failure EINVAL in pid:87
[  106.971936][  T333] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.984499][  T333] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.160986][ T3086] syz.2.884 uses obsolete (PF_INET,SOCK_PACKET)
[  107.238285][ T3084] /dev/rnullb0: Can't open blockdev
[  107.267570][ T3090] veth1_macvtap: left promiscuous mode
[  107.273080][ T3090] macsec0: entered promiscuous mode
[  107.278283][ T3090] macsec0: entered allmulticast mode
[  107.284425][ T3090] veth1_macvtap: entered promiscuous mode
[  107.290222][ T3090] veth1_macvtap: entered allmulticast mode
[  107.296134][ T3090] macsec0: left promiscuous mode
[  107.301195][ T3090] macsec0: left allmulticast mode
[  107.306332][ T3090] veth1_macvtap: left allmulticast mode
[  107.345589][ T3104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.890'.
[  107.355126][ T3104] netlink: 51 bytes leftover after parsing attributes in process `syz.1.890'.
[  107.364005][ T3104] netlink: 'syz.1.890': attribute type 4 has an invalid length.
[  107.429115][   T31] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  107.580241][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  107.591252][   T31] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  107.600305][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.608928][   T31] usb 3-1: config 0 descriptor??
[  107.614188][ T3088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.924067][   T36] audit: type=1400 audit(1762803264.530:494): avc:  denied  { create } for  pid=3109 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  108.024900][   T31] wacom 0003:056A:005B.000F: hidraw0: USB HID v1.01 Device [HID 056a:005b] on usb-dummy_hcd.2-1/input0
[  108.139128][  T475] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  108.224112][ T3088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.224408][ T3088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3088 comm=syz.2.885
[  108.243671][ T3088] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  108.243689][ T3088] rust_binder: Error while translating object.
[  108.255706][ T3088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  108.261888][ T3088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454
[  108.272125][   T31] usb 3-1: USB disconnect, device number 41
[  108.300123][  T475] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  108.310494][  T475] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  108.323486][  T475] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  108.332682][  T475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.341228][  T475] usb 4-1: config 0 descriptor??
[  108.347080][  T475] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  109.017742][ T3152] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.059124][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  109.065225][  T780] Bluetooth: hci0: command 0x1003 tx timeout
[  109.270011][ T3155] /dev/rnullb0: Can't open blockdev
[  109.587872][   T36] audit: type=1326 audit(1762803266.190:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.611487][   T36] audit: type=1326 audit(1762803266.190:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.635308][   T36] audit: type=1326 audit(1762803266.200:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.658558][   T36] audit: type=1326 audit(1762803266.200:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.681805][   T36] audit: type=1326 audit(1762803266.200:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.705039][   T36] audit: type=1326 audit(1762803266.200:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.728257][   T36] audit: type=1326 audit(1762803266.200:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.751481][   T36] audit: type=1326 audit(1762803266.200:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3156 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  109.834698][ T3164] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.834852][ T3164] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  109.841362][ T3164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  109.850035][ T3164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:462
[  109.883078][ T3168] input: syz1 as /devices/virtual/input/input23
[  109.902771][ T2776] udevd[2776]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  110.082469][ T3178] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.082604][ T3178] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0
[  110.089210][ T3178] rust_binder: Error while translating object.
[  110.098118][ T3178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  110.104481][ T3178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476
[  110.108801][ T3180] rust_binder: Error while translating object.
[  110.123360][ T3180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  110.131707][ T3180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[  110.399122][  T475] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  110.429240][ T3191] netlink: 'syz.1.921': attribute type 11 has an invalid length.
[  110.449132][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  110.467305][ T3200] netlink: 104 bytes leftover after parsing attributes in process `syz.1.924'.
[  110.560145][  T475] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  110.568401][  T475] usb 3-1: config 1 has no interface number 0
[  110.574573][  T475] usb 3-1: config 1 interface 105 has no altsetting 0
[  110.582890][  T475] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  110.591966][  T475] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  110.600526][  T475] usb 3-1: Product: syz
[  110.604694][  T475] usb 3-1: Manufacturer: syz
[  110.609402][  T475] usb 3-1: SerialNumber: syz
[  110.614512][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.625702][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.636450][   T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  110.645518][   T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  110.653653][   T31] usb 5-1: Manufacturer: syz
[  110.658841][   T31] usb 5-1: config 0 descriptor??
[  110.908463][  T638] usb 4-1: USB disconnect, device number 36
[  111.065792][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.072639][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.079453][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.086237][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.093066][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.099871][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.106648][   T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0
[  111.114073][   T31] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  111.209133][  T638] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  111.308737][ T3209] overlayfs: failed to clone upperpath
[  111.315149][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'.
[  111.359112][  T638] usb 4-1: Using ep0 maxpacket: 16
[  111.365667][  T638] usb 4-1: unable to get BOS descriptor or descriptor too short
[  111.374032][  T638] usb 4-1: config 7 has an invalid interface number: 72 but max is 0
[  111.382135][  T638] usb 4-1: config 7 has no interface number 0
[  111.388211][  T638] usb 4-1: config 7 interface 72 has no altsetting 0
[  111.395507][  T475] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  111.397456][  T638] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=f9.87
[  111.406984][  T475] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71
[  111.415522][  T638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.431689][  T638] usb 4-1: Product: syz
[  111.433737][  T475] usb 3-1: USB disconnect, device number 42
[  111.435912][  T638] usb 4-1: Manufacturer: syz
[  111.446578][  T638] usb 4-1: SerialNumber: syz
[  111.654180][  T638] cdc_acm 4-1:7.72: Zero length descriptor references
[  111.661020][  T638] cdc_acm 4-1:7.72: probe with driver cdc_acm failed with error -22
[  111.669364][   T31] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device
[  111.671507][  T638] usb 4-1: USB disconnect, device number 37
[  111.681839][   T31] pyra 0003:1E7D:2CF6.0010: couldn't install mouse
[  111.691075][   T31] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -32
[  112.180176][   T36] kauditd_printk_skb: 550 callbacks suppressed
[  112.180192][   T36] audit: type=1400 audit(1762803268.790:1053): avc:  denied  { execute } for  pid=3230 comm="syz.1.933" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  112.409116][  T638] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  112.462713][ T3256] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  112.471718][ T3256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'.
[  112.481503][ T3256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.943'.
[  112.569138][  T638] usb 4-1: Using ep0 maxpacket: 16
[  112.575460][  T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.586402][  T638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.596183][  T638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  112.609135][  T638] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  112.618164][  T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.626923][  T638] usb 4-1: config 0 descriptor??
[  112.989127][   T31] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  113.043253][  T638] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0011/input/input25
[  113.064179][  T638] appleir 0003:05AC:8241.0011: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  113.140247][   T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  113.148551][   T31] usb 3-1: config 1 has no interface number 0
[  113.154687][   T31] usb 3-1: config 1 interface 105 has no altsetting 0
[  113.168091][   T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  113.177268][   T31] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  113.185843][   T31] usb 3-1: Product: syz
[  113.191310][   T31] usb 3-1: Manufacturer: syz
[  113.197011][   T31] usb 3-1: SerialNumber: syz
[  113.246220][  T334] usb 4-1: USB disconnect, device number 38
[  113.398884][   T10] usb 5-1: USB disconnect, device number 5
[  113.424976][ T3301] rust_binder: Error while translating object.
[  113.425050][ T3301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  113.431276][ T3301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  113.468601][ T3306] futex_wake_op: syz.4.964 tries to shift op by -1; fix this program
[  113.774138][ T3334] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  113.794852][ T3334] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  113.814275][   T31] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  113.845738][   T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32
[  113.860908][ T3346] can: request_module (can-proto-4) failed.
[  113.861438][ T3344] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  113.930845][ T3364] binder: Bad value for 'defcontext'
[  114.057269][ T3385] rust_binder: Error while translating object.
[  114.057297][ T3385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  114.063509][ T3385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624
[  114.087495][ T3387] rust_binder: Write failure EINVAL in pid:626
[  114.152453][ T3398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  114.176880][ T3398] /dev/rnullb0: Can't open blockdev
[  114.499140][   T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  114.518016][ T3404] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  114.534888][ T3406] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  114.586862][ T3407] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  114.649211][   T31] usb 4-1: Using ep0 maxpacket: 16
[  114.664525][   T31] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00
[  114.673589][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.681590][   T31] usb 4-1: Product: syz
[  114.685731][   T31] usb 4-1: Manufacturer: syz
[  114.690323][   T31] usb 4-1: SerialNumber: syz
[  114.695400][   T31] usb 4-1: config 0 descriptor??
[  114.701304][   T31] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  114.709008][   T31] usb 4-1: Detected FT2232H
[  114.902096][   T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  114.939492][   T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  114.947034][   T31] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  114.956336][   T31] usb 4-1: USB disconnect, device number 39
[  114.962951][   T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  114.972631][   T31] ftdi_sio 4-1:0.0: device disconnected
[  115.391646][   T36] audit: type=1400 audit(1762803272.000:1054): avc:  denied  { create } for  pid=3425 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  115.557289][ T3434] /dev/rnullb0: Can't open blockdev
[  115.580221][   T36] audit: type=1326 audit(1762803272.190:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28bd8f6c9 code=0x7ffc0000
[  115.604515][   T36] audit: type=1326 audit(1762803272.200:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28bd8f6c9 code=0x7ffc0000
[  115.628010][   T36] audit: type=1326 audit(1762803272.200:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe28bd8df10 code=0x7ffc0000
[  115.651454][   T36] audit: type=1326 audit(1762803272.200:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28bd8f2cb code=0x7ffc0000
[  115.674833][   T36] audit: type=1326 audit(1762803272.200:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28bd8f2cb code=0x7ffc0000
[  115.688678][ T3448] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.698629][   T36] audit: type=1326 audit(1762803272.200:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28bd8f2cb code=0x7ffc0000
[  115.728693][   T36] audit: type=1326 audit(1762803272.200:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28bd8f2cb code=0x7ffc0000
[  115.752380][   T36] audit: type=1326 audit(1762803272.310:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3441 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28bd8f2cb code=0x7ffc0000
[  115.779494][  T475] usb 3-1: USB disconnect, device number 43
[  115.788069][ T3456] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.788367][ T3456] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  115.796958][ T3456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  115.805143][ T3456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:511
[  115.839130][  T334] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  115.932695][ T3461] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.999128][   T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  116.029147][  T334] usb 5-1: Using ep0 maxpacket: 16
[  116.035945][  T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.047166][  T334] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  116.056366][  T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.065455][  T334] usb 5-1: config 0 descriptor??
[  116.072184][  T334] usbhid 5-1:0.0: can't add hid device: -22
[  116.078278][  T334] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  116.159108][   T31] usb 4-1: Using ep0 maxpacket: 16
[  116.166929][   T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  116.176311][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.184442][   T31] usb 4-1: Product: syz
[  116.188717][   T31] usb 4-1: Manufacturer: syz
[  116.193496][   T31] usb 4-1: SerialNumber: syz
[  116.201390][   T31] r8152-cfgselector 4-1: Unknown version 0x0000
[  116.207913][   T31] r8152-cfgselector 4-1: config 0 descriptor??
[  116.417282][ T3454] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.417545][ T3453] rust_binder: Error while translating object.
[  116.424244][ T3453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  116.432792][ T3453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:659
[  116.444128][   T31] r8152-cfgselector 4-1: Unknown version 0x0000
[  116.461384][   T31] r8152-cfgselector 4-1: bad CDC descriptors
[  116.474190][   T31] r8152-cfgselector 4-1: USB disconnect, device number 40
[  116.636316][ T3474] 
: renamed from bond_slave_0
[  116.721061][ T3490] syz.1.1023: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0
[  116.736168][ T3490] CPU: 0 UID: 0 PID: 3490 Comm: syz.1.1023 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  116.736196][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.736215][ T3490] Call Trace:
[  116.736221][ T3490]  <TASK>
[  116.736229][ T3490]  __dump_stack+0x21/0x30
[  116.736265][ T3490]  dump_stack_lvl+0x10c/0x190
[  116.736288][ T3490]  ? __cfi_dump_stack_lvl+0x10/0x10
[  116.736312][ T3490]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  116.736337][ T3490]  dump_stack+0x19/0x20
[  116.736358][ T3490]  warn_alloc+0x1bc/0x2a0
[  116.736382][ T3490]  ? __cfi_warn_alloc+0x10/0x10
[  116.736404][ T3490]  ? kasan_save_track+0x4f/0x80
[  116.736424][ T3490]  ? __kasan_kmalloc+0x96/0xb0
[  116.736442][ T3490]  ? __kmalloc_cache_noprof+0x24c/0x490
[  116.736460][ T3490]  ? do_sock_setsockopt+0x26d/0x400
[  116.736486][ T3490]  ? __x64_sys_setsockopt+0x1b8/0x250
[  116.736509][ T3490]  ? x64_sys_call+0x2adc/0x2ee0
[  116.736533][ T3490]  ? do_syscall_64+0x58/0xf0
[  116.736554][ T3490]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.736575][ T3490]  __vmalloc_node_range_noprof+0x135/0x1420
[  116.736613][ T3490]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  116.736638][ T3490]  ? kasan_save_alloc_info+0x40/0x50
[  116.736662][ T3490]  ? __kasan_kmalloc+0x96/0xb0
[  116.736682][ T3490]  ? __kmalloc_cache_noprof+0x24c/0x490
[  116.736699][ T3490]  ? pte_offset_map_rw_nolock+0xba/0x110
[  116.736724][ T3490]  vmalloc_user_noprof+0x77/0x90
[  116.736754][ T3490]  ? xskq_create+0xdb/0x2a0
[  116.736783][ T3490]  xskq_create+0xdb/0x2a0
[  116.736807][ T3490]  xsk_init_queue+0xb6/0x120
[  116.736832][ T3490]  xsk_setsockopt+0x43f/0x6f0
[  116.736854][ T3490]  ? __cfi_xsk_setsockopt+0x10/0x10
[  116.736877][ T3490]  ? lock_vma_under_rcu+0x49d/0x540
[  116.736898][ T3490]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  116.736921][ T3490]  ? security_socket_setsockopt+0x33/0xd0
[  116.736939][ T3490]  ? __cfi_xsk_setsockopt+0x10/0x10
[  116.736962][ T3490]  do_sock_setsockopt+0x26d/0x400
[  116.736986][ T3490]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  116.737012][ T3490]  __x64_sys_setsockopt+0x1b8/0x250
[  116.737037][ T3490]  x64_sys_call+0x2adc/0x2ee0
[  116.737061][ T3490]  do_syscall_64+0x58/0xf0
[  116.737083][ T3490]  ? clear_bhb_loop+0x50/0xa0
[  116.737102][ T3490]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.737120][ T3490] RIP: 0033:0x7fcd34b8f6c9
[  116.737142][ T3490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.737158][ T3490] RSP: 002b:00007fcd35a4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.737178][ T3490] RAX: ffffffffffffffda RBX: 00007fcd34de6180 RCX: 00007fcd34b8f6c9
[  116.737192][ T3490] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  116.737204][ T3490] RBP: 00007fcd34c11f91 R08: 0000000000000004 R09: 0000000000000000
[  116.737215][ T3490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.737228][ T3490] R13: 00007fcd34de6218 R14: 00007fcd34de6180 R15: 00007ffcf00db088
[  116.737243][ T3490]  </TASK>
[  116.737697][ T3490] Mem-Info:
[  116.984708][ T3494] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[  116.993540][ T3490] active_anon:42485 inactive_anon:2 isolated_anon:0
[  116.993540][ T3490]  active_file:10618 inactive_file:17666 isolated_file:0
[  116.993540][ T3490]  unevictable:0 dirty:49 writeback:0
[  116.993540][ T3490]  slab_reclaimable:6324 slab_unreclaimable:75181
[  116.993540][ T3490]  mapped:24399 shmem:34826 pagetables:1099
[  116.993540][ T3490]  sec_pagetables:0 bounce:0
[  116.993540][ T3490]  kernel_misc_reclaimable:0
[  116.993540][ T3490]  free:1468010 free_pcp:12795 free_cma:0
[  117.007615][ T3494] rust_binder: Write failure EINVAL in pid:663
[  117.090020][ T3490] Node 0 active_anon:169884kB inactive_anon:8kB active_file:42472kB inactive_file:70664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97596kB dirty:196kB writeback:0kB shmem:139384kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6152kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no
[  117.133562][ T3490] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB
[  117.135251][ T3502] Unsupported ieee802154 address type: 0
[  117.163646][ T3490] lowmem_reserve[]: 0 3921 3921
[  117.179831][ T3490] Normal free:2955844kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:169848kB inactive_anon:8kB active_file:42472kB inactive_file:70664kB unevictable:0kB writepending:196kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2380kB local_pcp:2152kB free_cma:0kB
[  117.211312][ T3502] rust_binder: Write failure EFAULT in pid:523
[  117.213979][ T3490] lowmem_reserve[]: 0 0 0
[  117.224662][ T3490] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  117.240191][ T3490] Normal: 2*4kB (E) 35*8kB (UME) 216*16kB (UME) 914*32kB (UME) 702*64kB (UE) 84*128kB (UE) 14*256kB (UME) 3*512kB (UME) 11*1024kB (UME) 9*2048kB (UME) 686*4096kB (UM) = 2933344kB
[  117.258944][ T3490] 63159 total pagecache pages
[  117.263168][ T3510] overlay: ./file0 is not a directory
[  117.263759][ T3490] 3 pages in swap cache
[  117.273255][ T3490] Free swap  = 124480kB
[  117.277418][ T3490] Total swap = 124996kB
[  117.281836][ T3490] 2097051 pages RAM
[  117.287818][ T3490] 0 pages HighMem/MovableOnly
[  117.292939][ T3490] 351537 pages reserved
[  117.297090][ T3490] 0 pages cma reserved
[  117.302438][ T3490] Memory allocations:
[  117.306405][ T3490]          0 B        0 init/main.c:1370 func:do_initcalls
[  117.313640][ T3490]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  117.321766][ T3490]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  117.329446][ T3490]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  117.337329][ T3490]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  117.345231][ T3490]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  117.353850][ T3490]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  117.361783][ T3490]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  117.369681][ T3490]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  117.377552][ T3490]          0 B        0 init/initramfs.c:101 func:find_link
[  117.432672][ T3526] rust_binder: Write failure EFAULT in pid:533
[  117.490923][ T3546] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.497745][ T3546] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  117.504197][ T3546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  117.512203][ T3546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:552
[  117.624951][ T3550] rust_binder: Error while translating object.
[  117.634196][ T3550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  117.640383][ T3550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556
[  117.822210][ T3563] netlink: 'syz.3.1047': attribute type 27 has an invalid length.
[  117.831014][ T3564] binder: Bad value for 'max'
[  117.831562][ T3563] lo: entered promiscuous mode
[  117.848919][ T3563] lo: entered allmulticast mode
[  117.854562][ T3563] tunl0: entered promiscuous mode
[  117.861489][ T3563] tunl0: entered allmulticast mode
[  117.866986][ T3563] gre0: entered promiscuous mode
[  117.872176][ T3563] gre0: entered allmulticast mode
[  117.877862][ T3563] gretap0: entered promiscuous mode
[  117.883575][ T3563] gretap0: entered allmulticast mode
[  117.883595][ T3569] rust_binder: Write failure EFAULT in pid:672
[  117.890872][ T3563] erspan0: entered promiscuous mode
[  117.902502][ T3563] erspan0: entered allmulticast mode
[  117.903561][ T3571] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.908533][ T3563] ip_vti0: entered promiscuous mode
[  117.915279][ T3571] rust_binder: Error while translating object.
[  117.920530][ T3563] ip_vti0: entered allmulticast mode
[  117.929794][ T3571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  117.932975][ T3563] ip6_vti0: entered promiscuous mode
[  117.942568][ T3571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:572
[  117.947908][ T3563] ip6_vti0: entered allmulticast mode
[  117.962986][ T3563] sit0: entered promiscuous mode
[  117.968001][ T3563] sit0: entered allmulticast mode
[  117.973541][ T3563] ip6tnl0: entered promiscuous mode
[  117.989135][ T3563] ip6tnl0: entered allmulticast mode
[  117.994882][ T3563] ip6gre0: entered promiscuous mode
[  118.001144][ T3563] ip6gre0: entered allmulticast mode
[  118.006997][ T3563] syz_tun: entered promiscuous mode
[  118.012726][ T3563] syz_tun: entered allmulticast mode
[  118.018493][ T3563] ip6gretap0: entered promiscuous mode
[  118.024209][ T3563] ip6gretap0: entered allmulticast mode
[  118.030554][ T3563] bridge0: entered promiscuous mode
[  118.035824][ T3563] bridge0: entered allmulticast mode
[  118.042680][ T3563] vcan0: entered promiscuous mode
[  118.047775][ T3563] vcan0: entered allmulticast mode
[  118.053224][ T3563] dummy0: entered promiscuous mode
[  118.058384][ T3563] dummy0: entered allmulticast mode
[  118.064344][ T3563] veth0: entered promiscuous mode
[  118.069836][ T3563] veth0: entered allmulticast mode
[  118.075396][ T3563] veth1: entered promiscuous mode
[  118.080687][ T3563] veth1: entered allmulticast mode
[  118.087304][ T3563] wg0: entered promiscuous mode
[  118.094376][ T3563] wg0: entered allmulticast mode
[  118.102136][ T3563] wg1: entered promiscuous mode
[  118.115123][ T3563] wg1: entered allmulticast mode
[  118.120584][ T3563] wg2: entered promiscuous mode
[  118.125512][ T3563] wg2: entered allmulticast mode
[  118.130973][ T3563] veth0_to_bridge: entered promiscuous mode
[  118.136939][ T3563] veth0_to_bridge: entered allmulticast mode
[  118.143834][ T3563] veth1_to_bridge: entered promiscuous mode
[  118.149912][ T3563] veth1_to_bridge: entered allmulticast mode
[  118.156660][ T3563] veth0_to_bond: entered promiscuous mode
[  118.162633][ T3563] veth0_to_bond: entered allmulticast mode
[  118.169003][ T3563] bond_slave_0: entered promiscuous mode
[  118.177086][ T3563] bond_slave_0: entered allmulticast mode
[  118.185054][ T3563] veth1_to_bond: entered promiscuous mode
[  118.191571][ T3578] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.191594][ T3563] veth1_to_bond: entered allmulticast mode
[  118.204553][ T3563] bond_slave_1: entered promiscuous mode
[  118.210262][ T3563] bond_slave_1: entered allmulticast mode
[  118.216928][ T3563] team_slave_0: entered promiscuous mode
[  118.222629][ T3563] team_slave_0: entered allmulticast mode
[  118.228774][ T3563] veth1_to_team: entered promiscuous mode
[  118.234561][ T3563] veth1_to_team: entered allmulticast mode
[  118.240967][ T3563] team_slave_1: entered promiscuous mode
[  118.246645][ T3563] team_slave_1: entered allmulticast mode
[  118.252789][ T3563] veth0_to_batadv: entered promiscuous mode
[  118.258696][ T3563] veth0_to_batadv: entered allmulticast mode
[  118.265037][ T3563] batadv_slave_0: entered promiscuous mode
[  118.270864][ T3563] batadv_slave_0: entered allmulticast mode
[  118.277009][ T3563] veth1_to_batadv: entered promiscuous mode
[  118.282917][ T3563] veth1_to_batadv: entered allmulticast mode
[  118.289443][ T3563] batadv_slave_1: entered promiscuous mode
[  118.295246][ T3563] batadv_slave_1: entered allmulticast mode
[  118.301668][ T3563] !@�: entered promiscuous mode
[  118.306594][ T3563] !@�: entered allmulticast mode
[  118.312045][ T3563] veth0_to_hsr: entered promiscuous mode
[  118.317664][ T3563] veth0_to_hsr: entered allmulticast mode
[  118.324017][ T3563] hsr_slave_0: entered promiscuous mode
[  118.329786][ T3563] hsr_slave_0: entered allmulticast mode
[  118.335647][ T3563] veth1_to_hsr: entered promiscuous mode
[  118.341291][ T3563] veth1_to_hsr: entered allmulticast mode
[  118.347254][ T3563] hsr_slave_1: entered promiscuous mode
[  118.352995][ T3563] hsr_slave_1: entered allmulticast mode
[  118.358863][ T3563] veth1_virt_wifi: entered promiscuous mode
[  118.364989][ T3563] veth1_virt_wifi: entered allmulticast mode
[  118.371439][ T3563] veth0_virt_wifi: entered promiscuous mode
[  118.377324][ T3563] veth0_virt_wifi: entered allmulticast mode
[  118.383877][ T3563] veth1_vlan: entered promiscuous mode
[  118.389506][ T3563] veth1_vlan: entered allmulticast mode
[  118.395282][ T3563] veth0_vlan: entered allmulticast mode
[  118.401528][ T3563] vlan0: entered promiscuous mode
[  118.406577][ T3563] vlan0: entered allmulticast mode
[  118.412201][ T3563] vlan1: entered promiscuous mode
[  118.417266][ T3563] vlan1: entered allmulticast mode
[  118.423093][ T3563] veth1_macvtap: entered allmulticast mode
[  118.429301][ T3563] veth0_macvtap: entered promiscuous mode
[  118.435007][ T3563] veth0_macvtap: entered allmulticast mode
[  118.441310][ T3563] macsec0: entered promiscuous mode
[  118.446544][ T3563] macsec0: entered allmulticast mode
[  118.452359][ T3563] vlan1.4094: entered promiscuous mode
[  118.457846][ T3563] vlan1.4094: entered allmulticast mode
[  118.465243][   T46] bridge0: port 3(veth0_to_team) entered blocking state
[  118.472204][   T46] bridge0: port 3(veth0_to_team) entered forwarding state
[  118.588989][   T10] usb 5-1: USB disconnect, device number 6
[  118.648246][ T3604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176
[  118.706590][   T36] kauditd_printk_skb: 19 callbacks suppressed
[  118.706607][   T36] audit: type=1400 audit(1762803275.310:1082): avc:  denied  { read } for  pid=3605 comm="syz.3.1060" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  118.779988][ T3606] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  118.785006][   T36] audit: type=1400 audit(1762803275.390:1083): avc:  denied  { append } for  pid=3607 comm="syz.4.1061" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  118.816474][   T36] audit: type=1400 audit(1762803275.400:1084): avc:  denied  { connect } for  pid=3612 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  118.859889][ T3613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.859912][ T3613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:688
[  118.884072][   T36] audit: type=1400 audit(1762803275.490:1085): avc:  denied  { map } for  pid=3614 comm="syz.4.1063" path="socket:[23560]" dev="sockfs" ino=23560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  118.916592][   T36] audit: type=1400 audit(1762803275.490:1086): avc:  denied  { accept } for  pid=3614 comm="syz.4.1063" path="socket:[23560]" dev="sockfs" ino=23560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  119.031538][ T3623] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.032123][   T46] tipc: Subscription rejected, illegal request
[  119.063278][ T3630] fuse: Unknown parameter '4{+'
[  119.083823][ T3640] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.084518][ T3640] rust_binder: Got transaction with invalid offset.
[  119.091065][ T3640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  119.097677][ T3640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589
[  119.114489][ T3642] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.124820][ T3642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:591
[  119.138790][ T3644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.148236][ T3644] rust_binder: Error while translating object.
[  119.154710][ T3644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  119.160897][ T3644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:593
[  119.187254][ T3648] __vm_enough_memory: pid: 3648, comm: syz.2.1076, bytes: 18014402804453376 not enough memory for the allocation
[  119.285989][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.576997][ T3675] fuse: Bad value for 'fd'
[  119.583163][ T3674] 9pnet: Could not find request transport: yd
[  119.859127][  T627] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.989143][  T627] usb 5-1: device descriptor read/64, error -71
[  120.200318][ T3692] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1091'.
[  120.239151][  T627] usb 5-1: device descriptor read/64, error -71
[  120.323085][ T3710] 9pnet_fd: Insufficient options for proto=fd
[  120.479141][  T627] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  120.609145][  T627] usb 5-1: device descriptor read/64, error -71
[  120.849209][  T627] usb 5-1: device descriptor read/64, error -71
[  120.959233][  T627] usb usb5-port1: attempt power cycle
[  121.036157][   T36] audit: type=1400 audit(1762803277.640:1087): avc:  denied  { create } for  pid=3740 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  121.289146][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  121.289164][  T780] Bluetooth: hci0: command 0x1003 tx timeout
[  121.299159][  T627] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  121.330092][  T627] usb 5-1: device descriptor read/8, error -71
[  121.372447][ T3765] overlayfs: failed to clone lowerpath
[  121.401580][   T36] audit: type=1400 audit(1762803278.010:1088): avc:  denied  { map } for  pid=3764 comm="syz.1.1115" path="socket:[23387]" dev="sockfs" ino=23387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  121.476932][  T627] usb 5-1: device descriptor read/8, error -71
[  121.585962][   T36] audit: type=1400 audit(1762803278.190:1089): avc:  denied  { ioctl } for  pid=3793 comm="syz.1.1125" path="socket:[23426]" dev="sockfs" ino=23426 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  121.720172][  T627] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  121.733962][ T3816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.741191][ T3816] IPv6: NLM_F_CREATE should be set when creating new route
[  121.748406][ T3816] IPv6: NLM_F_CREATE should be set when creating new route
[  121.755845][  T638] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  121.764595][  T627] usb 5-1: device descriptor read/8, error -71
[  121.772022][   T36] audit: type=1400 audit(1762803278.380:1090): avc:  denied  { listen } for  pid=3817 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  121.792382][   T36] audit: type=1400 audit(1762803278.380:1091): avc:  denied  { create } for  pid=3817 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  121.900188][  T627] usb 5-1: device descriptor read/8, error -71
[  121.910158][  T638] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  121.919231][  T638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.928829][  T638] usb 3-1: config 0 descriptor??
[  122.009204][  T627] usb usb5-port1: unable to enumerate USB device
[  122.141509][  T638] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  122.254806][  T638] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  122.266434][  T638] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  122.284602][  T638] asix 3-1:0.0: probe with driver asix failed with error -71
[  122.296396][  T638] usb 3-1: USB disconnect, device number 44
[  122.299120][ T3829] fuse: Bad value for 'group_id'
[  122.307267][ T3829] fuse: Bad value for 'group_id'
[  122.636353][ T3832] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.679151][  T638] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  122.693598][ T3833] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[  122.819185][  T638] usb 3-1: device descriptor read/64, error -71
[  123.079118][  T638] usb 3-1: device descriptor read/64, error -71
[  123.319136][  T638] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  123.449126][  T638] usb 3-1: device descriptor read/64, error -71
[  123.488320][ T3865] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  123.507225][ T3870] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  123.514847][ T3870] SELinux: failed to load policy
[  123.689220][  T638] usb 3-1: device descriptor read/64, error -71
[  123.712364][ T3879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1154'.
[  123.734109][ T3883] rust_binder: Error while translating object.
[  123.734138][ T3883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  123.740393][ T3883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:708
[  123.799237][  T638] usb usb3-port1: attempt power cycle
[  123.812958][ T3887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1156'.
[  123.840653][ T3892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1157'.
[  123.872355][ T3896] overlayfs: failed to clone upperpath
[  124.149145][  T638] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  124.170198][  T638] usb 3-1: device descriptor read/8, error -71
[  124.250964][ T3916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.251065][ T3916] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  124.271486][ T3922] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.279620][ T3922] rust_binder: Failed to allocate buffer. len:96, is_oneway:true
[  124.301003][  T638] usb 3-1: device descriptor read/8, error -71
[  124.376181][ T3939] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.376923][ T3939] rust_binder: Failed to allocate buffer. len:1224, is_oneway:true
[  124.400351][ T3941] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.412574][ T3941] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  124.549121][  T638] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  124.580122][  T638] usb 3-1: device descriptor read/8, error -71
[  124.710115][  T638] usb 3-1: device descriptor read/8, error -71
[  124.777826][ T3949] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  124.792311][ T3949] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  124.819480][  T638] usb usb3-port1: unable to enumerate USB device
[  124.920039][ T3958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3958 comm=syz.3.1182
[  124.933737][ T3958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  124.933764][ T3958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:730
[  124.990347][ T3965] binder: Bad value for 'max'
[  125.041206][   T36] audit: type=1400 audit(1762803281.650:1092): avc:  denied  { setopt } for  pid=3975 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  125.045997][ T3976] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1187'.
[  125.070848][ T3976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1187'.
[  125.083517][ T3976] rust_binder: Write failure EFAULT in pid:748
[  125.359124][  T638] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  125.406610][ T3998] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  125.407038][ T3998] rust_binder: Failed to allocate buffer. len:128, is_oneway:true
[  125.476381][ T4005] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  125.530085][  T638] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  125.535518][ T4006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:626
[  125.536511][  T638] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  125.564679][  T638] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  125.578987][  T638] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.588048][  T638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.596041][  T638] usb 4-1: Product: syz
[  125.600215][  T638] usb 4-1: Manufacturer: syz
[  125.604782][  T638] usb 4-1: SerialNumber: syz
[  125.679127][   T31] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  125.812256][  T638] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  125.819802][  T638] cdc_ncm 4-1:1.0: bind() failure
[  125.826691][  T638] usb 4-1: USB disconnect, device number 41
[  125.840409][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  125.848398][   T31] usb 5-1: not running at top speed; connect to a high speed hub
[  125.856874][   T31] usb 5-1: config 1 has an invalid interface number: 121 but max is 0
[  125.865082][   T31] usb 5-1: config 1 has no interface number 0
[  125.871238][   T31] usb 5-1: config 1 interface 121 has no altsetting 0
[  125.879343][   T31] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51
[  125.888418][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.896443][   T31] usb 5-1: Product: syz
[  125.900625][   T31] usb 5-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩൂ熤ꬻᣍ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑
[  125.921587][   T31] usb 5-1: SerialNumber: syz
[  126.130212][   T31] usb_ehset_test 5-1:1.121: probe with driver usb_ehset_test failed with error -32
[  126.140417][   T31] usb 5-1: USB disconnect, device number 11
[  126.317964][ T4016] binder: Bad value for 'max'
[  126.337431][ T4018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:752
[  126.337455][ T4020] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.347308][ T4020] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  126.354328][ T4020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  126.362405][ T4020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:631
[  126.402776][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  126.481379][ T4049] rust_binder: 771: no such ref 0
[  126.486423][ T4049] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  126.493548][ T4049] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  126.500610][ T4049] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  126.507636][ T4049] rust_binder: 771: no such ref 0
[  126.513340][ T4051] rust_binder: 771: no such ref 0
[  126.518355][ T4051] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  126.525454][ T4051] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  126.532521][ T4051] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  126.539543][ T4051] rust_binder: 771: no such ref 0
[  126.615285][ T4057] veth0_to_team: mtu greater than device maximum
[  126.640893][ T4060] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1214'.
[  126.650023][ T4061] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1214'.
[  126.660501][ T4060] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.660523][ T4061] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.674089][   T36] audit: type=1400 audit(1762803283.280:1093): avc:  denied  { accept } for  pid=4059 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  126.722958][ T4070] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[  126.730948][ T4070] rust_binder: Write failure EINVAL in pid:268
[  126.740026][ T4072] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  126.765306][ T4074] PM: Enabling pm_trace changes system date and time during resume.
[  126.765306][ T4074] PM: Correct system time has to be restored manually after resume.
[  126.792847][ T4077] rust_binder: Write failure EFAULT in pid:275
[  126.837773][ T4079] /dev/rnullb0: Can't open blockdev
[  126.867180][ T4081] rust_binder: Error while translating object.
[  126.867216][ T4081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  126.873519][ T4081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279
[  126.979204][ T4088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.989349][ T4088] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  127.236267][   T36] audit: type=1326 audit(1762803283.840:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4038 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628ff8f6c9 code=0x7fc00000
[  127.251651][ T4101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[  127.267649][   T36] audit: type=1326 audit(1762803283.840:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4038 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f628ff8f6c9 code=0x7fc00000
[  127.347523][ T4106] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  127.355339][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  127.364286][ T4106] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.371392][  T638] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  127.383646][ T4111] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.426967][ T4118] fuse: Bad value for 'fd'
[  127.427409][ T4115] /dev/rnullb0: Can't open blockdev
[  127.509114][  T638] usb 5-1: device descriptor read/64, error -71
[  127.541615][ T4139] /dev/rnullb0: Can't open blockdev
[  127.705714][ T4150] 9pnet_fd: Insufficient options for proto=fd
[  127.711861][   T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  127.759124][  T638] usb 5-1: device descriptor read/64, error -71
[  127.869117][   T31] usb 3-1: Using ep0 maxpacket: 32
[  127.875310][   T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  127.883693][   T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  127.892308][   T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  127.901271][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.910917][   T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.920563][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  127.933534][   T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  127.942567][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.951102][   T31] usb 3-1: config 0 descriptor??
[  127.999117][  T638] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  128.129122][  T638] usb 5-1: device descriptor read/64, error -71
[  128.158366][   T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  128.170970][   T31] usb 3-1: USB disconnect, device number 49
[  128.177517][   T31] usblp0: removed
[  128.315815][ T4161] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1247'.
[  128.325139][ T4161] gretap0: entered promiscuous mode
[  128.338474][ T4163] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.338585][ T4163] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  128.363136][   T36] audit: type=1400 audit(1762803284.970:1096): avc:  denied  { read } for  pid=4167 comm="syz.3.1250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  128.390353][  T638] usb 5-1: device descriptor read/64, error -71
[  128.433162][ T4175] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1253'.
[  128.442258][ T4175] z00�X��: renamed from gretap0
[  128.447645][ T4175] z00�X��: left promiscuous mode
[  128.452600][ T4175] z00�X��: entered allmulticast mode
[  128.499201][  T638] usb usb5-port1: attempt power cycle
[  128.599115][   T31] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  128.609192][  T334] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  128.729110][   T31] usb 3-1: device descriptor read/64, error -71
[  128.760064][  T334] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  128.768334][  T334] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  128.778606][  T334] usb 4-1: config 220 has no interface number 2
[  128.784878][  T334] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  128.797998][  T334] usb 4-1: config 220 interface 0 has no altsetting 0
[  128.804797][  T334] usb 4-1: config 220 interface 76 has no altsetting 0
[  128.811651][  T334] usb 4-1: config 220 interface 1 has no altsetting 0
[  128.819789][  T334] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  128.828812][  T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.836807][  T334] usb 4-1: Product: syz
[  128.841011][  T334] usb 4-1: Manufacturer: syz
[  128.845614][  T334] usb 4-1: SerialNumber: syz
[  128.849098][  T638] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  128.870142][  T638] usb 5-1: device descriptor read/8, error -71
[  128.989100][   T31] usb 3-1: device descriptor read/64, error -71
[  129.000077][  T638] usb 5-1: device descriptor read/8, error -71
[  129.102177][  T334] usb 4-1: selecting invalid altsetting 0
[  129.107987][  T334] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  129.114346][  T334] usb 4-1: No valid video chain found.
[  129.121683][  T334] usb 4-1: USB disconnect, device number 42
[  129.229124][   T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  129.239115][  T638] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  129.260077][  T638] usb 5-1: device descriptor read/8, error -71
[  129.273482][ T4179] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1254'.
[  129.310898][ T4187] raw_sendmsg: syz.1.1258 forgot to set AF_INET. Fix it!
[  129.333046][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  129.342417][   T36] audit: type=1400 audit(1762803285.947:1097): avc:  denied  { execute } for  pid=4188 comm="syz.1.1259" path="/476/cpuacct.usage_percpu" dev="tmpfs" ino=2548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  129.342904][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  129.375333][   T31] usb 3-1: device descriptor read/64, error -71
[  129.400178][  T638] usb 5-1: device descriptor read/8, error -71
[  129.509168][  T638] usb usb5-port1: unable to enumerate USB device
[  129.619113][   T31] usb 3-1: device descriptor read/64, error -71
[  129.729231][   T31] usb usb3-port1: attempt power cycle
[  129.750482][ T4200] rust_binder: 4199 RLIMIT_NICE not set
[  129.750508][ T4200] rust_binder: 805: no such ref 0
[  129.896941][ T4219] rust_binder: Error while translating object.
[  129.896972][ T4219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  129.903211][ T4219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825
[  129.950938][ T4223] x_tables: duplicate underflow at hook 1
[  129.982628][ T4225] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[  129.982655][ T4225] rust_binder: Error while translating object.
[  129.994946][ T4225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  130.001148][ T4225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831
[  130.012532][   T36] audit: type=1400 audit(1762803286.617:1098): avc:  denied  { lock } for  pid=4226 comm="syz.1.1273" path="socket:[26002]" dev="sockfs" ino=26002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  130.046329][   T36] audit: type=1400 audit(1762803286.627:1099): avc:  denied  { setattr } for  pid=4228 comm="syz.3.1274" name="/" dev="configfs" ino=2504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.069130][   T31] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  130.090955][   T31] usb 3-1: device descriptor read/8, error -71
[  130.180506][   T36] audit: type=1400 audit(1762803286.787:1100): avc:  denied  { mounton } for  pid=4233 comm="syz.3.1276" path="/267/file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  130.221121][   T31] usb 3-1: device descriptor read/8, error -71
[  130.229499][ T4238] binder: Unknown parameter ''
[  130.254848][ T4240] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0
[  130.254863][ T4240] rust_binder: Error while translating object.
[  130.263526][ T4240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  130.269722][ T4240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:838
[  130.459116][   T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  130.477333][  T334] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  130.584312][ T4265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4265 comm=syz.1.1288
[  130.591124][ T4268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.596799][ T4265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4265 comm=syz.1.1288
[  130.598807][ T4268] rust_binder: Got transaction with invalid offset.
[  130.603278][ T4265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=4265 comm=syz.1.1288
[  130.617341][ T4268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  130.622752][ T4265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4265 comm=syz.1.1288
[  130.635474][ T4268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668
[  130.659121][  T334] usb 5-1: Using ep0 maxpacket: 32
[  130.683254][  T334] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  130.691741][ T4272] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  130.694470][  T334] usb 5-1: config 0 has no interface number 0
[  130.699609][ T4272] rust_binder: Write failure EINVAL in pid:670
[  130.709875][  T334] usb 5-1: config 0 interface 184 has no altsetting 0
[  130.724826][  T334] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  130.734662][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.742304][   T36] audit: type=1326 audit(1762803287.337:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.1.1294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x0
[  130.742876][  T334] usb 5-1: Product: syz
[  130.769715][  T334] usb 5-1: Manufacturer: syz
[  130.774288][  T334] usb 5-1: SerialNumber: syz
[  130.779450][  T334] usb 5-1: config 0 descriptor??
[  130.785041][  T334] smsc75xx v1.0.0
[  130.858722][ T4297] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.858941][ T4297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:672
[  130.865008][ T4298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:672
[  130.882886][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.899136][   T31] usb 3-1: device not accepting address 53, error -71
[  130.922674][   T31] usb usb3-port1: unable to enumerate USB device
[  130.970366][ T4313] rust_binder: 865: no such ref 0
[  131.035311][   T36] audit: type=1400 audit(1762803287.637:1102): avc:  denied  { write } for  pid=4321 comm="syz.2.1306" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  131.054787][ T4326] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  131.089361][ T4326] overlayfs: failed to resolve './file0': -2
[  131.183643][ T4339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:876
[  131.228243][ T4342] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  131.237795][ T4342] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  131.244306][ T4342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  131.252330][ T4342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:696
[  131.388102][  T334] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  131.408126][  T334] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  131.539131][  T638] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  131.549108][   T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  131.619179][  T334] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  131.630213][  T334] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  131.640002][  T334] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  131.649518][  T334] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  131.668624][ T4352] veth1: entered allmulticast mode
[  131.683957][ T4353] veth1: left allmulticast mode
[  131.690157][  T638] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  131.698470][  T638] usb 4-1: config 0 has no interface number 1
[  131.704637][  T638] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  131.713727][  T638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.719131][   T31] usb 3-1: Using ep0 maxpacket: 8
[  131.722480][  T638] usb 4-1: config 0 descriptor??
[  131.731233][   T31] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[  131.739981][   T31] usb 3-1: config 0 has no interface number 0
[  131.746497][   T31] usb 3-1: config 0 interface 66 has no altsetting 0
[  131.753859][   T31] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87
[  131.763053][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.771607][   T31] usb 3-1: config 0 descriptor??
[  131.948344][ T4348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  131.948378][ T4348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:879
[  131.958724][  T638] usb 4-1: USB disconnect, device number 43
[  131.980952][ T4350] rust_binder: Write failure EFAULT in pid:702
[  132.042092][   T31] usb 3-1: string descriptor 0 read error: -71
[  132.054807][   T31] usb 3-1: MBOX3: Invalid descriptor size=18.
[  132.061877][   T31] usb 3-1: USB disconnect, device number 54
[  132.292404][ T4360] fuse: Unknown parameter 'fH'
[  132.320300][ T4369] netlink: 'syz.1.1321': attribute type 4 has an invalid length.
[  132.344263][ T4372] __nla_validate_parse: 2 callbacks suppressed
[  132.344283][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'.
[  132.570516][ T4386] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  132.577956][ T4386] rust_binder: Write failure EINVAL in pid:881
[  132.667211][ T4393] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.674041][ T4393] rust_binder: Error while translating object.
[  132.680492][ T4393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  132.686647][ T4393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:708
[  132.854300][ T4401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'.
[  132.907497][   T36] audit: type=1400 audit(1762803289.507:1103): avc:  denied  { associate } for  pid=4407 comm="syz.1.1333" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  133.208065][ T4450] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.236286][  T638] usb 5-1: USB disconnect, device number 16
[  133.250177][ T4452] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.277656][ T4455] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  133.308077][ T4457] __vm_enough_memory: pid: 4457, comm: syz.4.1347, bytes: 18014402804453376 not enough memory for the allocation
[  133.333889][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.339885][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.345840][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.355924][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.361879][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.367893][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.374162][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.380081][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.385936][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.391887][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.397800][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.403742][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.410269][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.416307][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.422246][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.428161][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.434256][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.440966][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.446916][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.453262][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.459247][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.465161][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.471119][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.477014][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.482966][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.488844][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.494764][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.500678][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.506530][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.512433][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.518308][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.524227][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.530137][ T4460] 9pnet: Unknown protocol version 9p"000.L
[  133.555508][ T4472] veth0_virt_wifi: mtu less than device minimum
[  133.572491][   T36] audit: type=1326 audit(1762803290.177:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4473 comm="syz.3.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe079b8f6c9 code=0x0
[  134.416395][ T4502] rust_binder: 895: no such ref 6
[  134.421514][ T4502] rust_binder: 895: no such ref 3
[  134.426592][ T4502] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  134.454675][ T4506] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.455660][ T4506] rust_binder: Got transaction with invalid offset.
[  134.462346][ T4506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.468935][ T4506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322
[  134.670101][ T4520] __vm_enough_memory: pid: 4520, comm: syz.3.1372, bytes: 18014402804453376 not enough memory for the allocation
[  134.712022][   T36] audit: type=1400 audit(1762803291.317:1105): avc:  denied  { execute_no_trans } for  pid=4523 comm="syz.3.1374" path="/292/file1" dev="tmpfs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  134.735631][  T638] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  134.741503][ T4524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.743226][ T4524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:911
[  134.824239][   T36] audit: type=1326 audit(1762803291.427:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.3.1376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe079b8f6c9 code=0x0
[  134.883174][ T4539] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.884155][ T4539] batadv_slave_1: entered promiscuous mode
[  134.897030][   T36] audit: type=1326 audit(1762803291.497:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4538 comm="syz.2.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628ff8f6c9 code=0x0
[  134.898189][  T638] usb 5-1: config 1 interface 0 has no altsetting 0
[  134.928006][  T638] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40
[  134.937306][  T638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.945332][  T638] usb 5-1: Product: Ⰺ
[  134.949515][  T638] usb 5-1: Manufacturer: ࠠ
[  134.954134][  T638] usb 5-1: SerialNumber: Ѓ
[  135.001350][ T4540] batadv_slave_1: left promiscuous mode
[  135.007473][ T4540] rust_binder: Error while translating object.
[  135.007489][ T4540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  135.013677][ T4540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:748
[  135.097288][   T36] audit: type=1326 audit(1762803291.697:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.1.1382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd34b8f6c9 code=0x0
[  135.163619][  T638] usbhid 5-1:1.0: can't add hid device: -71
[  135.169604][  T638] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  135.179426][  T638] usb 5-1: USB disconnect, device number 17
[  135.675417][ T4551] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.675647][ T4551] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.690701][ T4555] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.726631][   T36] audit: type=1400 audit(1762803292.327:1109): avc:  denied  { mounton } for  pid=4564 comm="syz.2.1387" path="/proc/751/cgroup" dev="proc" ino=28269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  135.772985][ T4567] rust_binder: 4563 RLIMIT_NICE not set
[  135.773026][ T4567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:921
[  135.789788][ T4570] fuse: Bad value for 'fd'
[  135.815090][ T4576] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.817985][   T36] audit: type=1400 audit(1762803292.417:1110): avc:  denied  { relabelfrom } for  pid=4575 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  135.818225][ T4576] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  135.824639][   T36] audit: type=1400 audit(1762803292.417:1111): avc:  denied  { relabelto } for  pid=4575 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  135.879869][   T36] audit: type=1400 audit(1762803292.487:1112): avc:  denied  { watch } for  pid=4575 comm="syz.2.1390" path="/254/file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  135.965244][ T4592] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  135.981296][ T4592] rust_binder: Write failure EINVAL in pid:761
[  136.007384][   T36] audit: type=1400 audit(1762803292.607:1113): avc:  denied  { ioctl } for  pid=4593 comm="syz.3.1397" path="socket:[27439]" dev="sockfs" ino=27439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  136.056825][ T4609] netlink: 'syz.4.1402': attribute type 11 has an invalid length.
[  136.068897][   T36] audit: type=1400 audit(1762803292.667:1114): avc:  denied  { map } for  pid=4610 comm="syz.1.1403" path="socket:[27482]" dev="sockfs" ino=27482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  136.166825][ T4616] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.167335][ T4616] rust_binder: 765: no such ref 3
[  136.271687][ T4618] __vm_enough_memory: pid: 4618, comm: syz.2.1399, bytes: 18014402804453376 not enough memory for the allocation
[  136.299106][  T638] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  136.449109][  T638] usb 5-1: Using ep0 maxpacket: 32
[  136.455306][  T638] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  136.463523][  T638] usb 5-1: config 0 has no interface number 0
[  136.469609][  T638] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  136.479597][  T638] usb 5-1: config 0 interface 196 has no altsetting 0
[  136.487689][  T638] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  136.496778][  T638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.504771][  T638] usb 5-1: Product: syz
[  136.508905][  T638] usb 5-1: Manufacturer: syz
[  136.513489][  T638] usb 5-1: SerialNumber: syz
[  136.518553][  T638] usb 5-1: config 0 descriptor??
[  136.523779][ T4609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  136.655752][ T4624] overlay: ./file0 is not a directory
[  136.733227][  T638] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  136.740702][  T638] ipheth 5-1:0.196: probe with driver ipheth failed with error -71
[  136.749963][  T638] usb 5-1: USB disconnect, device number 18
[  136.860050][ T4633] /dev/rnullb0: Can't open blockdev
[  137.239136][  T475] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  137.399099][  T475] usb 3-1: Using ep0 maxpacket: 16
[  137.405323][  T475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.416214][  T475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.425955][  T475] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  137.435065][  T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.443678][  T475] usb 3-1: config 0 descriptor??
[  137.499105][  T334] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  137.782502][   T36] audit: type=1400 audit(1762803294.387:1115): avc:  denied  { setattr } for  pid=4660 comm="syz.3.1421" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  137.786287][ T4661] pim6reg1: entered promiscuous mode
[  137.811514][ T4661] pim6reg1: entered allmulticast mode
[  137.814348][  T334] usb 5-1: unable to read config index 0 descriptor/start: -71
[  137.824529][  T334] usb 5-1: can't read configurations, error -71
[  137.851340][  T475] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  137.896427][ T4665] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[  137.904398][ T4665] rust_binder: Write failure EINVAL in pid:947
[  137.904431][ T4666] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[  137.918540][ T4666] rust_binder: Write failure EINVAL in pid:947
[  137.936539][ T4670] 9pnet_fd: Insufficient options for proto=fd
[  137.949533][   T36] audit: type=1400 audit(1762803294.557:1116): avc:  denied  { create } for  pid=4669 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  138.189470][  T475] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 18: -71
[  138.194818][ T4695] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  138.199029][  T475] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 pairing info: -71
[  138.199228][ T4696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  138.205711][  T475] playstation 0003:054C:05C4.0012: Failed to get MAC address from DualShock4
[  138.215142][ T4696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351
[  138.224183][  T475] playstation 0003:054C:05C4.0012: Failed to create dualshock4.
[  138.250381][  T475] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -71
[  138.260192][   T36] audit: type=1400 audit(1762803294.857:1117): avc:  denied  { lock } for  pid=4698 comm="syz.4.1426" path="socket:[28420]" dev="sockfs" ino=28420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  138.287124][  T475] usb 3-1: USB disconnect, device number 55
[  138.622185][ T4721] netlink: 'syz.1.1435': attribute type 3 has an invalid length.
[  138.630406][   T36] audit: type=1326 audit(1762803295.237:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd34b8f6c9 code=0x7ffc0000
[  138.650396][ T4722] rust_binder: 780: no such ref 2
[  138.669116][  T334] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  138.821079][  T334] usb 5-1: config 16 has an invalid descriptor of length 107, skipping remainder of the config
[  138.831477][  T334] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  138.842002][  T334] usb 5-1: New USB device found, idVendor=0499, idProduct=acf4, bcdDevice=78.ee
[  138.851115][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.864195][  T334] usb 5-1: Product: syz
[  138.868365][  T334] usb 5-1: Manufacturer: syz
[  138.873142][  T334] usb 5-1: SerialNumber: syz
[  138.952823][ T4735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  138.952847][ T4735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:963
[  138.963192][ T4735] tipc: Started in network mode
[  138.977861][ T4735] tipc: Node identity ac14142f, cluster identity 4711
[  138.984736][ T4735] tipc: New replicast peer: 0.0.0.0
[  138.990177][ T4735] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.997042][ T4735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1439'.
[  139.084039][ T4747] fuse: Unknown parameter 'Rޑzx�vi�a�Q�7��'����(�]���3�x��'
[  139.087378][ T4699] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  139.093987][  T334] usb 5-1: USB disconnect, device number 20
[  139.223067][ T4761] rust_binder: inc_ref_done called when no active inc_refs
[  139.323001][ T4779] rust_binder: Write failure EFAULT in pid:984
[  139.341982][ T4782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4782 comm=syz.2.1454
[  139.343167][ T4783] 9pnet_fd: Insufficient options for proto=fd
[  139.406713][ T4793] incfs: Error accessing: ./file0.
[  139.411878][ T4793] incfs: mount failed -20
[  139.619264][  T638] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  139.716166][ T4808] binder: Unknown parameter 'd\rsync'
[  139.848825][ T4839] binder: Bad value for 'stats'
[  139.862990][ T4842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  139.863017][ T4842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:820
[  139.963165][ T4847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33802 sclass=netlink_audit_socket pid=4847 comm=syz.2.1474
[  139.990787][  T295] ------------[ cut here ]------------
[  139.996293][  T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  140.005693][  T295] Modules linked in:
[  140.009621][  T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  140.021277][  T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  140.029132][  T334] tipc: Node number set to 2886997039
[  140.031502][  T295] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  140.042345][  T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  140.061976][  T295] RSP: 0018:ffffc9000b697b68 EFLAGS: 00010293
[  140.068046][  T295] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812bf7df00
[  140.076034][  T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  140.084034][  T295] RBP: ffffc9000b697b90 R08: ffff8881162947ff R09: 1ffff11022c528ff
[  140.092050][  T295] R10: dffffc0000000000 R11: ffffed1022c52900 R12: 0000000000000000
[  140.100063][  T295] R13: dffffc0000000000 R14: ffff888116294760 R15: ffff888131a56000
[  140.108031][  T295] FS:  000055558bf6f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  140.116969][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.123571][  T295] CR2: 00007fffd9c3cd18 CR3: 000000012a1ae000 CR4: 00000000003526b0
[  140.131571][  T295] Call Trace:
[  140.134853][  T295]  <TASK>
[  140.137780][  T295]  ovl_do_remove+0x7b8/0xcf0
[  140.142387][  T295]  ? ovl_set_redirect+0x780/0x780
[  140.147424][  T295]  ? down_write+0xe9/0x2a0
[  140.151851][  T295]  ? __cfi_down_write+0x10/0x10
[  140.156708][  T295]  ovl_rmdir+0x1e/0x30
[  140.160797][  T295]  vfs_rmdir+0x3dd/0x560
[  140.165047][  T295]  incfs_kill_sb+0x109/0x230
[  140.169656][  T295]  deactivate_locked_super+0xd5/0x2a0
[  140.175049][  T295]  deactivate_super+0xb8/0xe0
[  140.179743][  T295]  cleanup_mnt+0x3f1/0x480
[  140.184166][  T295]  __cleanup_mnt+0x1d/0x40
[  140.188572][  T295]  task_work_run+0x1e0/0x250
[  140.193170][  T295]  ? __cfi_task_work_run+0x10/0x10
[  140.198296][  T295]  ? __x64_sys_umount+0x126/0x170
[  140.203362][  T295]  ? __cfi___x64_sys_umount+0x10/0x10
[  140.208752][  T295]  ? __kasan_check_read+0x15/0x20
[  140.213793][  T295]  resume_user_mode_work+0x36/0x50
[  140.218912][  T295]  syscall_exit_to_user_mode+0x64/0xb0
[  140.224391][  T295]  do_syscall_64+0x64/0xf0
[  140.228814][  T295]  ? clear_bhb_loop+0x50/0xa0
[  140.233501][  T295]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  140.239416][  T295] RIP: 0033:0x7f628ff909f7
[  140.243826][  T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  140.263457][  T295] RSP: 002b:00007fffd9c3d4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.271899][  T295] RAX: 0000000000000000 RBX: 00007f6290011d7d RCX: 00007f628ff909f7
[  140.279901][  T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd9c3d580
[  140.287885][  T295] RBP: 00007fffd9c3d580 R08: 0000000000000000 R09: 0000000000000000
[  140.295886][  T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd9c3e610
[  140.303880][  T295] R13: 00007f6290011d7d R14: 00000000000222be R15: 00007fffd9c3e650
[  140.311873][  T295]  </TASK>
[  140.314893][  T295] ---[ end trace 0000000000000000 ]---
[  140.321039][  T295] ------------[ cut here ]------------
[  140.321847][  T638] usb 4-1: unable to read config index 0 descriptor/start: -71
[  140.326483][  T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  140.334103][  T638] usb 4-1: can't read configurations, error -71
[  140.349719][  T295] Modules linked in:
[  140.353610][  T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  140.366719][  T295] Tainted: [W]=WARN
[  140.370532][  T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  140.380602][  T295] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  140.386241][  T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  140.405861][  T295] RSP: 0018:ffffc9000b697b68 EFLAGS: 00010293
[  140.411939][  T295] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812bf7df00
[  140.419930][  T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  140.427893][  T295] RBP: ffffc9000b697b90 R08: ffff8881162947ff R09: 1ffff11022c528ff
[  140.435926][  T295] R10: dffffc0000000000 R11: ffffed1022c52900 R12: 0000000000000000
[  140.444013][  T295] R13: dffffc0000000000 R14: ffff888116294760 R15: ffff888131a56000
[  140.451998][  T295] FS:  000055558bf6f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  140.460952][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.467524][  T295] CR2: 0000200000001000 CR3: 000000012a1ae000 CR4: 00000000003526b0
[  140.475513][  T295] Call Trace:
[  140.478782][  T295]  <TASK>
[  140.481722][  T295]  ovl_do_remove+0x7b8/0xcf0
[  140.486314][  T295]  ? ovl_set_redirect+0x780/0x780
[  140.491351][  T295]  ? down_write+0xe9/0x2a0
[  140.495758][  T295]  ? __cfi_down_write+0x10/0x10
[  140.500610][  T295]  ovl_rmdir+0x1e/0x30
[  140.504676][  T295]  vfs_rmdir+0x3dd/0x560
[  140.508899][  T295]  incfs_kill_sb+0x1a0/0x230
[  140.513499][  T295]  deactivate_locked_super+0xd5/0x2a0
[  140.518883][  T295]  deactivate_super+0xb8/0xe0
[  140.523580][  T295]  cleanup_mnt+0x3f1/0x480
[  140.527996][  T295]  __cleanup_mnt+0x1d/0x40
[  140.532430][  T295]  task_work_run+0x1e0/0x250
[  140.537027][  T295]  ? __cfi_task_work_run+0x10/0x10
[  140.542146][  T295]  ? __x64_sys_umount+0x126/0x170
[  140.547257][  T295]  ? __cfi___x64_sys_umount+0x10/0x10
[  140.552644][  T295]  ? __kasan_check_read+0x15/0x20
[  140.557676][  T295]  resume_user_mode_work+0x36/0x50
[  140.562794][  T295]  syscall_exit_to_user_mode+0x64/0xb0
[  140.568246][  T295]  do_syscall_64+0x64/0xf0
[  140.572671][  T295]  ? clear_bhb_loop+0x50/0xa0
[  140.577341][  T295]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  140.583247][  T295] RIP: 0033:0x7f628ff909f7
[  140.587657][  T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  140.607305][  T295] RSP: 002b:00007fffd9c3d4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.615751][  T295] RAX: 0000000000000000 RBX: 00007f6290011d7d RCX: 00007f628ff909f7
[  140.623746][  T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd9c3d580
[  140.631735][  T295] RBP: 00007fffd9c3d580 R08: 0000000000000000 R09: 0000000000000000
[  140.639730][  T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd9c3e610
[  140.647690][  T295] R13: 00007f6290011d7d R14: 00000000000222be R15: 00007fffd9c3e650
[  140.655672][  T295]  </TASK>
[  140.658682][  T295] ---[ end trace 0000000000000000 ]---