last executing test programs:

40.036573993s ago: executing program 3 (id=141):
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785", 0xba}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)

40.035675843s ago: executing program 3 (id=142):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe306e000)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
creat(&(0x7f0000000180)='./file0\x00', 0xf0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004)
sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}}], 0x1, 0x4000844)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

38.468227199s ago: executing program 3 (id=161):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x60, 0x26, 0xc4, {0xc4, 0x22, "62b76101aeaf1ab90fe3cd770a84cbb2d1d00ec61fc5a3df95e88a2cb8d19663e8588ce7a3b18c9c35fbce8ed9c473d3d1e126258c53541d76130cea9096ec2c6792b0b18244490512128b870dca0ecd0a853df115acdcf33052f72c90da6bd62b604c496df02e6c05105f2d1e8094f2389826c0f33f97c4b9ddff76edd517a04def468e8d0cab7be7d2fdc4296da7fc575f5ca2de745c98635a1595a321b0e291f8eb36f3a0bb7d747d8007d53033e3853f69a5f9799c226b09c0b1ceb16c711f95"}}, &(0x7f0000000180)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "f7b1c4f0dfca2afe103db9444da7afdc9f31ed3cf1736e4b246c120480b7db1047e4cec6b625592abb3c48705cae77cc869463c23e0c4e1d26812208c955de0c8a62d9fe204c55001570f371749e86b9c80c3c92443a5c689d84d50be2d4381785d5e871478ad67f4e8fb41dec451ea682afde4ffe087d8225f4778ee1cbe3f00b952d56519ea6daf8cbdaadc177c40475fc08478b23b602d30743c7bfbf3c1e189f9f5b261719f219d77da703608d75de16cee2414afac6b1c896142bd0d1df77b14006ece61d50a26d775c684d53f30e5fc34ab86e347d42673b5b7f676b"}}, &(0x7f0000000380)={0x0, 0xf, 0x174, {0x5, 0xf, 0x174, 0x6, [@generic={0xf9, 0x10, 0xa, "727a8fc7b359215db764ff0eb72f7e9238634b7c7b515ab70117ac732886446d47329b0941d3c6089c0ff2c9fb13360c52e35b7a3788fd779a08a064ad7709b1d6d5c6dccbe9bd4b5b70e9db1e140e1ff41ae7a202f514ceec1b7187090a630f3e80189888afcd0a11b07e8351aab2f8a78fd8086af6d9355da06bd28d17cf32eca50b87f0792cec0c3b5d5aaf6b06a2ff4746e7ac11a469a56ca9c9b8577065f8650df92b189ec2871f45f8c16ff03db02ddb5b71927e1359ca7f5110ee68d4a31509e785621cb40129cc13f7ad7dda7164654bb5ed29aad9e55dbb06bece9792eebca07f24ef558abe2a9783d349b7341d28deac96"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x9, 0xfff8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x4}, @generic={0x56, 0x10, 0x1, "27915c8dc12816ec4faddb99d41b37a20f8e6bae8539ee942161d1af9e44855d5a9ba9c20bb97d866731c9db77be0c52f8935e5dc0e11c9e1780d8accd3f38757c83a45f72096b55a67fcf019048ad4fbbefb2"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x401, 0xff00, 0x1}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x1, 0x1, "002f63d7", "9b854091"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x10, 0xd3, 0xd4, 0x35, 0x1, 0xfe62}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0x1, 0xb8, "83e110c93e5ecc1591e1dfa0a3b00c550e68776d0f854f08cb9065ecae4a5dfe982c787af7d08cb902b9c3248a2cc1dbf55059dc1855fdea4d3f8af4109b89c7539bee74b799e29408b9f60e7c09fbaf7126524250b4e577cac72deca5b6127c971fb2a64fdf0fcc153889bf129ee41f96c9e92fed8ae530f7aada3b33765619978420f5c67de3c3b63f68b3dd325e428ec1cb8b5ce45b0dd20e661409b5be3013c3fd3f564a8a13110bcef1ad204c1c81a4ae1097c2f91b"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="97a3a5d50f1c9abb7fd6bf523cad1cf73859"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "89f4"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "291c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xf1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xb9}})
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
io_setup(0x6, &(0x7f0000000680)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r5, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x7, 0x3, r5, 0x0, 0x0, 0x1}])
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x800) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x3, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x5, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
readv(r10, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) (rerun: 32)

35.380822397s ago: executing program 3 (id=198):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001580)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xceb1, 0x8, 0x4, 0x0, 0x3, 0xffffffffffffff6e}, {0x6, 0x7, 0x200, 0x31302f30, 0x698, 0x2}], ['\x00', '\x00', '\x00', '\x00']})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x4)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
setresuid(0xee01, 0xee01, 0x0)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0))
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22300, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = fsopen(&(0x7f0000000040)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000080)=@arm64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

35.280081645s ago: executing program 3 (id=199):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x9, 0x810, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f00000000c0)=0x800, 0x0, 0x4)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x3, 0x0, [{0x40000104, 0x0, 0x6}, {0xb35, 0x0, 0x1}, {0x40001ff1, 0x0, 0x9}]})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
fadvise64(0xffffffffffffffff, 0x6b, 0x4000000000f7c, 0x4)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r7, &(0x7f00000046c0)=""/4096, 0x1000)
sendfile(r0, r0, 0x0, 0x2897)

35.115402138s ago: executing program 3 (id=203):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000019c0)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
close$binfmt(r2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1100, 0x2}, @flat=@binder={0x73622a85, 0x1015, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x228}}, 0x0}, 0x40}], 0x0, 0x0, 0x0})

35.115111728s ago: executing program 32 (id=203):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000019c0)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
close$binfmt(r2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1100, 0x2}, @flat=@binder={0x73622a85, 0x1015, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x228}}, 0x0}, 0x40}], 0x0, 0x0, 0x0})

27.558643936s ago: executing program 0 (id=292):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031400e0ff020002004788aa", 0xd, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0xa0000000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, {0x37}, &(0x7f00000002c0)=""/25, 0x19, &(0x7f0000000300)=""/192, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58)
fcntl$lock(r1, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x4, 0x8, r2}) (async)
fcntl$lock(r1, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x4, 0x8, r2})
r3 = fsmount(r1, 0x0, 0xf)
setreuid(0x0, 0xee00)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x175c, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x3, 0x1ff}, 0x7, 0x3, 0x4, 0x6, 0x1f, 'syz0\x00', "c8ec9e4cbcea166b703a401fd5cf0d3accc937557d56d372d499b92c690ad287", "a3f05c21cfe4edcc4dac13ca18447ed263c976757c6a8bbeb5cdf06085f9eabf", [{0x6, 0xa5, {0x2, 0xfffffffe}}, {0x2d46, 0x6e, {0x1, 0x913}}, {0x1, 0xb97f, {0x1, 0x4}}, {0x5, 0x9, {0x0, 0x9}}, {0x5, 0x1, {0x3, 0xab}}, {0x7fff, 0x7ff, {0x1}}, {0x3ff, 0x2, {0x1, 0x3ff}}, {0x100, 0x6, {0x0, 0x539}}, {0x81, 0xa, {0x1, 0x9}}, {0x8001, 0x6}, {0x2, 0x3b1, {0x1, 0x16d}}, {0x5, 0x0, {0x1, 0x80000000}}, {0x9, 0xfffa, {0x1, 0x82c}}, {0x0, 0x6, {0x3, 0x1901800}}, {0x81, 0x9, {0x1, 0x7}}, {0x4, 0x5, {0x1, 0x10001}}, {0x0, 0x5, {0x2, 0x8}}, {0x1, 0x5, {0x3, 0x6}}, {0xe2, 0x1, {0x1, 0x4}}, {0x6, 0xb7c, {0x2, 0x7fff}}, {0x9, 0x5, {0x3}}, {0x4, 0x6a, {0x3, 0x2}}, {0x8000, 0x2, {0x3, 0x60a0}}, {0x8, 0x9, {0x1, 0x2}}, {0x3, 0x2, {0x1, 0x111}}, {0x0, 0x5, {0x1, 0x2}}, {0x401, 0x555, {0x2, 0x7}}, {0x800, 0xe6, {0x0, 0x6}}, {0x3, 0x8, {0x0, 0x6}}, {0x3, 0x5, {0x3, 0x57d}}, {0xa, 0x7, {0xcfb808c373d05e5, 0xf6}}, {0x4, 0x1, {0x1}}, {0x6, 0x6, {0x0, 0x1000}}, {0x9, 0x9, {0x2, 0x1}}, {0x5, 0x2, {0x3, 0x8}}, {0x2, 0x3, {0x3}}, {0x8, 0x400, {0x0, 0x4d}}, {0x6, 0x4, {0x2, 0x8}}, {0x5, 0x6, {0x2, 0x4}}, {0x5, 0x2, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x5d2d}, 0x3, 0x2, 0x101, 0x8, 0x1, 'syz0\x00', "3a156f23ca8403c9d2a682710195027fb8af55b52cb11c813f917d0cc877e24e", "63587a0cbb1575bbe61ef4ca2bd91626f935b61103961c839f961c79ba08d506", [{0x2, 0x3d7c, {0x5, 0x3}}, {0x107b, 0x1c61, {0x2, 0x2}}, {0xa3d, 0x4, {0x1, 0xe8e}}, {0x1ff, 0xeafe, {0x0, 0xffff}}, {0x6, 0x401, {0x1, 0x6}}, {0x387d, 0x0, {0x1, 0x7}}, {0x5, 0x10, {0x0, 0x6}}, {0xf9e, 0xfbe2, {0x1, 0x9}}, {0x4, 0x1ff, {0x2, 0x9}}, {0x1d, 0x6, {0x3, 0x523}}, {0x47f, 0x1, {0x1, 0x9}}, {0xb, 0x5, {0x3, 0x100}}, {0x2, 0xfffc, {0x3, 0x80000000}}, {0x2, 0x7, {0x3, 0x4}}, {0x401, 0xfffe, {0x3, 0x7ff}}, {0xa, 0xfff7, {0x3, 0x4}}, {0x9, 0x7, {0x1}}, {0x7, 0x2, {0x2, 0x7ff}}, {0x3, 0x7ff, {0x3, 0x3}}, {0x6, 0x1, {0x1, 0x800}}, {0xf75, 0x0, {0x1, 0x44}}, {0x80, 0x7, {0x2, 0x3}}, {0x9ee, 0x63ca, {0x3, 0x795c}}, {0x200, 0x7ff, {0xa91fe84fbf65d0be, 0x1ff}}, {0x1, 0x200, {0x1, 0x5}}, {0x1, 0x1000, {0x1, 0x1}}, {0x8, 0x4, {0x2, 0x1}}, {0xc000, 0xcedd, {0x2, 0x800}}, {0x5, 0x7ff, {0x1, 0x5}}, {0x2, 0x7, {0x1, 0x9}}, {0x8, 0xff, {0x1, 0x3}}, {0x2, 0xf0, {0x2, 0x1}}, {0x5, 0x200, {0x0, 0x5}}, {0x0, 0xfffe, {0x3, 0x6a2d}}, {0x8000, 0xea, {0x0, 0x3}}, {0x6, 0x2, {0x3, 0x8}}, {0x7, 0x2, {0x1, 0x5}}, {0x0, 0x5, {0x1, 0x5}}, {0x8, 0x8, {0x1, 0x7}}, {0x0, 0xff, {0x2, 0xe749}}]}}}, {{0x254, 0x1, {{0x2}, 0x9, 0x5, 0x401, 0x8, 0xa, 'syz1\x00', "b05570291f615059054de5987086de6aa54ea860ffa58ed7f576c6924ff8bb12", "2a884ca96a1cae3bb13c1cbb55360a429b3ec0211c684b5ff7a5b308e14b54e5", [{0x5, 0x1, {0x0, 0x7}}, {0x7, 0x1, {0x1, 0x9}}, {0x77b, 0x2, {0x2, 0xe61}}, {0x0, 0x7f, {0x3, 0xb9}}, {0x9, 0xf, {0x3, 0x7}}, {0x4, 0x0, {0x1, 0x7}}, {0x8, 0xfffb, {0x0, 0x9}}, {0x4, 0x2, {0x2, 0x1}}, {0x7, 0x5, {0x0, 0x8}}, {0x5, 0x7ff, {0x3, 0x3}}, {0x87b, 0x5, {0x0, 0x4}}, {0xc, 0x2, {0x3, 0x9}}, {0x2, 0x2, {0x3, 0xf}}, {0x0, 0x967, {0x1, 0x6}}, {0x9, 0x91, {0x2, 0xffff0000}}, {0x7, 0x8, {0x3, 0x8}}, {0x200, 0x5, {0x1, 0x7eac}}, {0xfff9, 0x3, {0x0, 0xfffffffc}}, {0x0, 0x7, {0x1, 0xa213}}, {0xc226, 0x7ff, {0x2, 0x5}}, {0x3, 0x5, {0x1, 0xf021}}, {0x2, 0x3, {0x1, 0x14}}, {0x9, 0x0, {0x1, 0x800}}, {0x4, 0x0, {0x0, 0x1ff}}, {0x5, 0x7, {0x3, 0x50}}, {0x9, 0xd4, {0x1, 0x7}}, {0x2, 0x24, {0x0, 0xe2}}, {0x1ff, 0x1be8, {0x3, 0x7ce}}, {0x800, 0xecf, {0x1, 0x401}}, {0x9, 0x6, {0x0, 0x5}}, {0x4, 0x7, {0x1, 0x12}}, {0xfff8, 0x81, {0x1, 0xff}}, {0x0, 0xeb, {0x2, 0xc}}, {0x81, 0xe, {0x2, 0x24d9}}, {0xf840, 0x77d}, {0xddda, 0xdb52, {0x2, 0x6c7ba3f3}}, {0xa, 0x2, {0x1, 0x81}}, {0x8, 0x4, {0x3}}, {0x7, 0xd539, {0x5b070768f20f172a, 0x6}}, {0x9, 0x5, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x80000001}, 0x80, 0x40, 0x0, 0x4, 0x3, 'syz1\x00', "b4c5f9586241b74358c698c1cee962b449a7462fc2249df2fb6de8af6e60b9d0", "183a5f67eb3fecb855f2efdb44488f64257d75818d957370b8502672313b0d85", [{0x5945, 0x1, {0x1, 0x2}}, {0x1000, 0x5, {0x1, 0x7}}, {0x8638, 0x80, {0x3, 0x2}}, {0x5, 0xc, {0x1, 0xfffffff6}}, {0x3, 0x100, {0x3, 0x6}}, {0xa73, 0x6, {0x0, 0x3}}, {0x4, 0x3, {0x2, 0x6}}, {0x0, 0x1, {0x3}}, {0x3c0f, 0x3, {0x1, 0x6}}, {0x4, 0xff4c, {0x2, 0x3}}, {0x8, 0x267b, {0x2, 0x401}}, {0x2, 0x5, {0x3, 0x3}}, {0x1992, 0x3, {0x0, 0x2}}, {0x1, 0x2, {0x1, 0x2}}, {0x8, 0x5, {0x1, 0x8}}, {0x7f, 0x4, {0xd2b77ce1bce97ba9, 0x7fff}}, {0x8, 0x0, {0x0, 0x6}}, {0x6, 0xf, {0x2, 0x6}}, {0x2b, 0x7, {0x0, 0x8}}, {0x0, 0x9, {0x0, 0x8}}, {0x4, 0x1, {0x0, 0x101}}, {0x8, 0x758e, {0x1, 0x9}}, {0x7f, 0x2, {0x0, 0x1000}}, {0x3a, 0x8000, {0x0, 0x1}}, {0x1, 0x3, {0x3, 0x31}}, {0x0, 0xa234, {0x3, 0x50415662}}, {0x1, 0x7, {0x0, 0x9}}, {0x61c, 0xfff8, {0x2, 0x10000}}, {0x8000, 0x7, {0x0, 0x31}}, {0x1, 0xfff8, {0x2, 0x3d}}, {0x1, 0x4, {0x3, 0x6}}, {0x9, 0x5, {0x2, 0x6}}, {0x3, 0x2014, {0x3, 0x6}}, {0xc2ef}, {0xc72, 0x2, {0x3, 0x8}}, {0x4, 0xffff, {0x2, 0x6}}, {0x4, 0x967d, {0x0, 0x3ff}}, {0x42c7, 0x6, {0x1, 0x7}}, {0x7, 0x4fb6, {0x1, 0xb99d}}, {0x56ca, 0x6, {0x3, 0x7ff}}]}}}, {{0x254, 0x1, {{0x0, 0x29d}, 0x4, 0x8f, 0x40, 0xc000, 0x2, 'syz0\x00', "18a5dd49fdd60ef75e9f7b6cac236564790293a374f594cec96d69e6c3834a47", "5994516fb903fbacc6c754770e48b598a12ec83a37eaa6295e694f1c722d1b28", [{0x0, 0x8f6, {0x0, 0x7}}, {0xf, 0xffff, {0x2, 0x8}}, {0x1, 0xffff, {0x0, 0x1df}}, {0x7818, 0x101, {0x0, 0x8}}, {0xcd, 0xff, {0x2, 0xfc8}}, {0x800, 0x1, {0x2, 0x8}}, {0x9, 0x3, {0x2}}, {0x9a8, 0xc2c6, {0x2, 0xcf9}}, {0x1, 0xfff, {0x0, 0xd}}, {0x1, 0x8, {0x2, 0x9}}, {0xfffe, 0x80, {0x1, 0x9}}, {0x1, 0x5, {0x0, 0x4}}, {0x1ff, 0x5, {0x1, 0x9}}, {0xf, 0x1000, {0x2, 0x7}}, {0x0, 0x7, {0x1, 0x9}}, {0x8, 0x8c, {0x1, 0x5}}, {0x9, 0xc91a, {0x1, 0x752}}, {0x200, 0x2d, {0x2, 0x3ff}}, {0x2, 0x0, {0x0, 0xff}}, {0x2, 0x7, {0x2, 0x5}}, {0x101, 0x5, {0x0, 0xe30b}}, {0x8, 0x1000, {0x1, 0x4}}, {0x5, 0x4000, {0x1, 0x301}}, {0x22ff, 0xfff, {0x1, 0xfff}}, {0x6, 0x3, {0x3, 0xc9}}, {0x0, 0x7, {0x0, 0x10000}}, {0x7f, 0x9, {0x0, 0xfff}}, {0x1, 0x50c, {0x3, 0x436}}, {0x6, 0x8000, {0x0, 0x9}}, {0xfff1, 0xe, {0x1, 0xa}}, {0x5, 0x8000, {0xcff885fdaa1acf02, 0x7f}}, {0x6, 0x3c85, {0x0, 0x7}}, {0x3, 0x5, {0x1, 0x5}}, {0x7fff, 0x8, {0x0, 0x1}}, {0xfff8, 0x9, {0x0, 0x2}}, {0xfc, 0x3, {0x0, 0xfffffffa}}, {0x3, 0x20, {0x0, 0x4}}, {0x8001, 0x0, {0x0, 0x8}}, {0x4, 0x0, {0x1, 0x4}}, {0xaeb3, 0x7ff, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x10, 0x3, 0xd0ff, 0xfff9, 0x1f, 'syz0\x00', "60c67c0a1a45142b6ea002c603854e8ac74b413bebefe32c13747bdc909e72e7", "e33810c44f780acda0c667d176cbf7b75f72856a6d3351c8599916c2ca2118a5", [{0x6, 0x71, {0x3, 0x3}}, {0xa9c, 0x3, {0x1, 0xc}}, {0x1, 0x7fff, {0x0, 0x200}}, {0xe, 0xf, {0x2, 0x1ff}}, {0x81, 0x0, {0x3, 0x4}}, {0x6, 0x8, {0x0, 0x400}}, {0x1000, 0x3, {0x3, 0xd}}, {0x0, 0x2, {0x2, 0x5}}, {0xb, 0x843, {0x0, 0x101}}, {0xfbff, 0x0, {0x0, 0x8000}}, {0x5, 0x7, {0x1, 0x5}}, {0x8001, 0x2, {0x2, 0x6}}, {0x2, 0x7, {0x3, 0x3}}, {0xfff7, 0x1000, {0x0, 0xbf63}}, {0x3, 0x7f, {0x0, 0x1}}, {0x0, 0x7, {0x3, 0xffff6b1e}}, {0x3ff, 0x5, {0x3}}, {0xc, 0x7fff, {0x2, 0xfffffffc}}, {0x8, 0x1, {0x3, 0x101}}, {0x9093, 0x77f2, {0x3, 0x5}}, {0x1aad, 0x0, {0x3, 0x8}}, {0x7, 0x6, {0x0, 0x7}}, {0x8, 0x7, {0x3, 0x5}}, {0x6dd, 0x400, {0x0, 0x2}}, {0x9, 0x6b9, {0x1, 0x6}}, {0x1, 0x200, {0x2, 0x6}}, {0x7, 0x8, {0x1, 0x2}}, {0x7, 0x6, {0x2, 0x7}}, {0x5, 0x6, {0x3, 0x2}}, {0x3299, 0xfffa, {0x1, 0x7}}, {0x400, 0x8, {0x197aa696ef61fc76, 0x7}}, {0xffff, 0xf4a5, {0x0, 0xc0000000}}, {0x5, 0x1, {0x2}}, {0x7, 0x4, {0x1, 0x7f}}, {0x2, 0x4, {0x0, 0xc75}}, {0x712, 0xe5, {0x3, 0x7}}, {0x200, 0x3, {0x1, 0x2}}, {0x3, 0x3, {0x0, 0x1ff}}, {0x7, 0x70, {0x3, 0x3}}, {0x3, 0x2, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x7fff}, 0x7, 0x5, 0x6, 0x2, 0xb, 'syz1\x00', "e6ecc8f15151ae9fa0c33edf6669ec21ada2b4e2a88420d04285c8b58c2e1f6d", "3207e4898bb9d479a5276ab71c13244dd9309a1fab5b2fec4adea69f7b32cbe5", [{0x400, 0xe2, {0x1, 0x6}}, {0x5, 0x8000, {0x2, 0x1}}, {0x80, 0x5, {0x2, 0x2}}, {0x2, 0x2, {0x1, 0x5}}, {0x4, 0x5, {0x2, 0x3}}, {0x3, 0x1, {0x2, 0xa7}}, {0x6, 0x8, {0x2, 0xc54c}}, {0x10, 0x5, {0x1, 0x3ff}}, {0x7, 0xfff, {0x1, 0x90}}, {0x81, 0x6, {0x2, 0x9}}, {0xf3b, 0xfa4e, {0x3, 0x200}}, {0x7fff, 0x88, {0x1, 0x10000}}, {0x1, 0xe, {0x0, 0xffffa003}}, {0x1, 0x1ca, {0x3, 0xe}}, {0x3, 0x8, {0x3, 0xffffffc0}}, {0x1, 0x1fea, {0x3, 0x7d}}, {0x28, 0x75ac, {0x2, 0x33d}}, {0x2, 0x8, {0x2, 0x1}}, {0x8, 0x1ff, {0x1, 0x3}}, {0x2a, 0x16e, {0x2, 0xad73}}, {0x1, 0xfff7, {0x3, 0xffffe75f}}, {0x0, 0x6, {0x0, 0x81}}, {0x9, 0x200, {0x0, 0x7f}}, {0x9, 0xfffb, {0x0, 0xb}}, {0x7f, 0xff, {0x0, 0x21}}, {0x97, 0x1, {0x1, 0xa8d}}, {0x9, 0x9, {0xcc7fe21a245d47ae, 0xd0a}}, {0x1, 0x4, {0x2, 0x7}}, {0x80, 0x5, {0x0, 0x7}}, {0x7, 0x9, {0x0, 0x4}}, {0x6, 0xff3b, {0x3, 0x2}}, {0x4, 0x2, {0x3, 0x1}}, {0x87a5, 0x2, {0x2, 0x100}}, {0x1ff, 0x5, {0x0, 0x7b}}, {0x9, 0x0, {0x1, 0x6}}, {0x8, 0x9, {0x2, 0x7}}, {0xcae, 0x4, {0x2, 0x5}}, {0x179a, 0x400, {0x1, 0x1}}, {0x8001, 0xff, {0x2, 0x243}}, {0x10, 0x3ff, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0xc, 0x3, 0xc3, 0x24, 'syz0\x00', "053823396791ce91373aaf9d4151afc7f7770186d6451557b006eb9ad78c23e4", "df51e51f23fb35ecb6706b97de3eb3b64450e96190c354b4224d9c001b550809", [{0x9, 0x3ff, {0x2, 0x10001}}, {0x80, 0x0, {0x2, 0xfffffffc}}, {0xff, 0x9, {0x3, 0x60}}, {0x5, 0x7, {0x1, 0x2}}, {0x87, 0x74, {0x1, 0xb}}, {0x401, 0x4, {0x1, 0x7fffffff}}, {0xc, 0x0, {0x3}}, {0x4, 0x7fff, {0x3, 0x7}}, {0xffff, 0xa311, {0x2, 0x2}}, {0x6, 0xf, {0x2, 0x9}}, {0x200, 0x1, {0x1, 0xa}}, {0x2, 0x8000, {0x0, 0x4}}, {0x1, 0xff80}, {0x0, 0x3, {0x3, 0x6}}, {0x287, 0x7, {0x3, 0x1}}, {0x0, 0x2, {0x1, 0x91}}, {0xffff, 0x6, {0x2, 0x236}}, {0x8, 0x7, {0x2, 0x7}}, {0xb, 0x4, {0x0, 0x7}}, {0x767, 0x7c7, {0x2}}, {0x4, 0x4, {0x3, 0xff}}, {0x0, 0x6, {0x2, 0x7}}, {0xfd, 0x6, {0x3, 0x3ff}}, {0x1164, 0x2, {0x1, 0x400}}, {0x8, 0x4, {0x3, 0x5}}, {0xff81, 0x6, {0x0, 0x7}}, {0x4, 0x7ff, {0x3}}, {0x1ff, 0x6, {0x1, 0x1}}, {0x2, 0x3, {0x3, 0x3}}, {0x1, 0x101, {0x7, 0x9}}, {0x3, 0x3ff, {0x2, 0x4}}, {0x5, 0x5, {0x2, 0x6}}, {0x0, 0x0, {0x1, 0x10}}, {0x7, 0x0, {0x1}}, {0x9, 0x4, {0x0, 0x3}}, {0x6, 0x9, {0x2, 0xcc}}, {0x80, 0x401, {0x1, 0x2}}, {0xfffe, 0x0, {0x1, 0x7}}, {0x4000, 0x2, {0x3, 0x41}}, {0xfff9, 0x3, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x6, 0x0, 0x40, 0x6, 0x8, 'syz1\x00', "67b6837bbb2508e894fc5e58dd8a94020195de068ca61e3da4577701a955e434", "47adb330949e8919b0ce6d5923c0f37980a604db6b14360445c3649e617c9b18", [{0x8, 0x8, {0x2, 0x40}}, {0x3, 0x6000, {0x3, 0x1}}, {0x0, 0x7, {0x2}}, {0x7, 0x7, {0x3, 0x87}}, {0xb0a, 0x1, {0x1, 0x4}}, {0x719a, 0x1, {0x2, 0x43cb}}, {0x40, 0x4, {0x1, 0xffff}}, {0x3f9f, 0x1, {0x0, 0x6}}, {0x6e7, 0x5, {0x1, 0x7}}, {0x7, 0x2, {0x0, 0xd33}}, {0x9, 0x2, {0x1}}, {0x8, 0x3, {0x3, 0x5}}, {0x969, 0x9, {0x2, 0xe0000000}}, {0x937d, 0x8, {0x1, 0x400}}, {0x4, 0xff, {0x3, 0xf130}}, {0xed9, 0xff, {0x4, 0x6}}, {0xa4, 0x2, {0x1, 0x1}}, {0x5, 0x59, {0x3, 0x101}}, {0x0, 0xfffe, {0x0, 0x1}}, {0x8, 0x4f, {0x3, 0x1}}, {0x7, 0x8001, {0x3, 0xc0000}}, {0xffff, 0x81, {0x3, 0xc}}, {0x9821, 0xffb4, {0x2, 0x1}}, {0x100, 0x7, {0x2, 0x50cc}}, {0x7fff, 0x9, {0x1, 0x7}}, {0x3, 0x5, {0x1, 0x8}}, {0x6, 0x4, {0x0, 0x10000}}, {0xfff, 0x6, {0x1, 0x4}}, {0x1, 0x4, {0x0, 0x6}}, {0x9, 0x0, {0x0, 0xe0000000}}, {0xc, 0xfe1c, {0x2, 0x3ff}}, {0xd, 0x0, {0x0, 0x1}}, {0x9, 0x3, {0x2, 0xfff}}, {0xb, 0x2, {0x1, 0x5}}, {0x40, 0x5, {0x2, 0xa}}, {0x6, 0x4, {0x2, 0xfff}}, {0x200, 0x3, {0x1, 0x5}}, {0x200, 0xa, {0x3, 0x4}}, {0x8, 0xffc7, {0x2, 0x6}}, {0xb, 0x8000, {0x2, 0x81}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0xfa, 0x2, 0x5, 0x8001, 0x12, 'syz1\x00', "ae038ad310123a71d21a087b80912ddf0acc22e476b68ac0f2c5cf7191dfd301", "d0ff91f908bfebd425a7074ff3c5b93d5e91b3c69aa71a3f714e3c231bee2105", [{0x6, 0xaa48, {0x2, 0x3ff}}, {0x101, 0x8, {0x2, 0x6}}, {0x8000, 0x401, {0x0, 0x2}}, {0x7fff, 0x1000}, {0x4, 0x1, {0x3, 0x5}}, {0x6, 0x3, {0x2, 0x8}}, {0x3, 0xf, {0x0, 0x4}}, {0x3, 0xd, {0x0, 0x51}}, {0xc, 0xfffc, {0x3, 0x7fff}}, {0x8, 0x6800, {0x2}}, {0xffff, 0xffff, {0x2, 0x7}}, {0x4, 0x3, {0x3}}, {0x1, 0x3, {0x3, 0x6}}, {0x2, 0xa0b, {0x2, 0x6}}, {0x3, 0xa, {0x3, 0x7ff}}, {0x8, 0x3, {0x2, 0x5}}, {0x9, 0x6, {0x1}}, {0x5277, 0x8, {0x0, 0x80}}, {0x8, 0x0, {0x2, 0x4}}, {0x295, 0x100, {0x3, 0x7}}, {0x101, 0x1000, {0x3, 0x6}}, {0x0, 0x5, {0x2, 0x30}}, {0x1, 0xa8f, {0x1, 0x1ff}}, {0x1, 0x25, {0x3, 0x12}}, {0x32fb, 0x0, {0x2, 0x5}}, {0x9, 0x6, {0x0, 0x10001}}, {0x1ff, 0x6, {0x1}}, {0x2, 0x6, {0x3, 0xffffffd8}}, {0x16d, 0x80, {0x3, 0x9}}, {0x0, 0x40, {0x3, 0xffff}}, {0xfff5, 0x2, {0x1, 0x3}}, {0x0, 0x9, {0x1, 0x4}}, {0x6, 0x9, {0x3, 0xd3a}}, {0x25, 0x81, {0x0, 0x1000}}, {0x0, 0x6, {0x2, 0x800}}, {0x949f, 0x9, {0x3, 0x3}}, {0x8, 0x1ff, {0x1, 0x3}}, {0x401, 0x8, {0x0, 0x9d76}}, {0x9, 0x71, {0x2, 0x39}}, {0x9, 0x80, {0x0, 0x8}}]}}}]}, 0x175c}}, 0x8090)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180))

27.552881786s ago: executing program 0 (id=293):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3})
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
lseek(r1, 0x80000000000008bb, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x189a02, 0xb8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x3, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001200010a28bd7000000000000a000003f26f647c8500000026983bebfcd6c4e5e358c6051d0a8ff9d80cf625c5a60a9870fe87a20c27f4a7a126c1548109ed53c0cc681084c159ef1f900f5ca63fbf2a4cdccadb71"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0xa, 0x2f7c343a1feef19c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

27.440736415s ago: executing program 0 (id=294):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
socket$inet6_icmp(0xa, 0x2, 0x3a)
mprotect(&(0x7f00000e7000/0x2000)=nil, 0x2000, 0x5000008)
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$lock(r1, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x214400, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = gettid()
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(r2, 0xd, 0x0, &(0x7f0000000140))
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BLKRRPART(r4, 0x125f, 0x0)
socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0))

26.598095392s ago: executing program 0 (id=297):
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000380)={0x6, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
pipe2(&(0x7f0000001040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
tee(r3, r2, 0x547, 0x8)
socket$key(0xf, 0x3, 0x2)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8513592c1818c17da6db285c518da2c4e82fb57889b85704f8ebaa"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x3, @lang_id={0x4, 0x3, 0x1f}}, 0x0, 0x0, 0x0}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)

26.015339889s ago: executing program 0 (id=301):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x149880, 0x40)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000000)=""/57, &(0x7f0000000080)=0x39)
read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020)
geteuid()
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth1_to_team\x00'})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000dc0)={0x5})
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000040))
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="67f30f06b9dd090000b800000000ba000000800f3064400f01cb0f234dd9b5030000006465410f2192c4419915409eb805000000b9008000000f01d9c46179f7ebb8010000000f01c1", 0x49}], 0x1, 0x2, &(0x7f00000001c0)=[@cstype0={0x4, 0x1}], 0x1)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000300)={0x1, 0x0, 0x98, &(0x7f0000000240)={0x1, 0x30000000, 0x13}})
r5 = syz_usb_connect$uac1(0x2, 0xa8, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xa8, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa87f, 0x40}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x5, 0x4, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x9, 0x60, '-'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3ff, 0x8e, 0x10, "c849b3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x8, 0x49, 0x50, "99"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x1, 0xf, {0x7, 0x25, 0x1, 0x82, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x14, 0x10, {0x7, 0x25, 0x1, 0x83, 0x0, 0xfff7}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x350, 0x8, 0xf1, 0x1, 0x8, 0x5}, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x27, 0x0, 0x9, 0x1}]}, 0x4, [{0x11, &(0x7f00000004c0)=@string={0x11, 0x3, "ac47397ebd58f3a0679f48ab4805bb"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "d80b8c6f182e2af271cad9f43a5f1715d2920c1915af1f8236ab6d51da733689bc840c18c676a43901d9f2d9d53c413cca8f01c7fa50a74f0cb80136d566c4365c8c45c544f45d8900b341d0f43787661aa2620991d90bc17d407e7b7189450c1d316055f018a48c66498e7a3e81fa88b9497cc1246253cb2d850c13f5df754ab2b20f8ae84f51b953f082868532d4511f1474eb64250acc2cc7d727f80cfd22093bac06ae250dc4909f785aab6f437f0d6df7ae4f7e39761271f59eebb9bf80fffcec0be23393497452be178ddeef8f21b955cfac"}}, {0x5e, &(0x7f0000000680)=@string={0x5e, 0x3, "4b6d8578b07f1d5473ad96c409fb488d3a91a25b4262f2fd2705a9bf2e1a88afbfb580eee3f298dd6cce7cd6db0f08aa5e52013d45c2db9b4ce6275d9e44be1121cf4c132e8919df894cb89beabab1900a6f9a9c9d4d50202da575fa"}}, {0xf8, &(0x7f0000000700)=@string={0xf8, 0x3, "18542566a9e1408c65e213b6742c96b7e5e2eb49c46b6ff46450b88e4ea2c64e86d60e993deaea38caef3ad833ed83176170fbfcb6c88dbc98132408b62ec8a58c6c4ab1041a6a37059735e412de95bebe4650677309631edb494450e12fee1f753c3922ab7d043bde88108bf3c39f19134b057cfe8736629f5fa21f039aba83656c19153d454189d1804068ce4fb2a9be25006033c08adde9e8fdb3af826ecdae9150d87ad1e594e4adde154f1ae60bc02615ea50fe1e8510c0065ee5a0751eac80f44a70b38da36c9e7a8a43ae26a5f4a03eaeaa05c90cff688ebfd858e0b9a694def61ce3d1ac9f5a714c8bb994092c8bcff25115"}}]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x37a, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x24000080)
syz_usb_control_io$uac1(r5, &(0x7f0000000940)={0x14, &(0x7f0000000880)={0x0, 0x31, 0xb7, {0xb7, 0x9, "c4521561117810d2e2b67ed2ade25ffde459827a56bcd7debda0ce92a01d447b80d369e7b8401391287b106eb053bc7d44e405e9f7b5242e84b34b6e33408412c9b1da9aacef30a297654287f241e5fa39cd92868b61eb4ec0f41bb62ca965f063a08d39ad6b2fa261463070aa1197a69ee819ea96b540df978ebd8ec20ba567c2f450bac48f000312dfab9a0fc5fe8a0592a4a3bb9a7c37b5d21adfd57d723dec73d04d0568d55f4f341783acccf1fa08cf11031f"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x464}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x20, 0x11, 0xf, "f80a4bc15322cd3377be22bde6ac05"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "9a1a32"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, '2'}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "8f6e"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "28cf88"}})

25.341842644s ago: executing program 0 (id=306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
close(0x4)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10.317979241s ago: executing program 33 (id=306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
close(0x4)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.535232765s ago: executing program 4 (id=496):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), &(0x7f0000000180)=@ng={0x4, 0xb, "84cb03508d"}, 0x7, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}, 0x10)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC], 0x31)
ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)

6.681901043s ago: executing program 4 (id=509):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0xa2709d5cbec4c557, r2, {0x3f}}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) (async)
write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0xa2709d5cbec4c557, r2, {0x3f}}, 0x18) (async)

6.669595254s ago: executing program 4 (id=510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'])
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x808024)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r7, 0xa, 0x13)
fcntl$setlease(r7, 0x400, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 32)
truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffffec, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f0000000380)=0xe1, 0x0) (rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000b00)={<r8=>0x0, 0x40, 0xfffffffffffffc00, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000f00)={r8, "e8bea1d37b68f4319bcf9ec4b9515588"}) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000880)={0xc0, 0x0, 0x1000}) (async)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 32)
setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10)
sendmmsg$inet(r9, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d", 0x43}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f00000008c0)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb42575f483fe523c9abe644830816977ccba1f493bdfa33d63b1dbfd5dde8b03dfa6162f0849ad9823f4e302f12d77cefff93dae1d25662ce8cfe9cdf57a066565ea4a78f8b0e0379110f8d424740bb27839ccc87e687adf0d23ac64ce9c971e0d3eec711e7d49d051cb97526f79fe31b00421399b4101c763b33224a71d2e0b64c02374fc4f0ebc5fdb156e3b8716cba396ad951a983a24404dddcc37b8b5d32e138185df4c6326f8e9c5e4e5c2088c513b2", 0xeb}, {&(0x7f00000009c0)="d650774632b71a34a88292fcf26ad63f611e11baa9b64a99773dd6fbfe12178987d7b005129705e9d23da9376d714ea8cadc0d1b4f2d7fc2e73242b432015e5e298fd6e2161beacaa75ecb41f6aa8cca9a50239a518873cc1eef5ffcc67226fd8e2386d070a8fadf0e4573f3141917bf0fed3e6d0ba5e600840121a0df8deb37ca310ee1d23869f142d3ac1eda8027bd68f94969e492b24718ba715958516ef3b07f7d52465d66f705e80f816ac9a0a3ab08e8a6f1fa6fae5c12fe1526de3f51f545d49892b6fa2042a163e76a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f00)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)="1a51b7", 0x3}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}}], 0x4, 0x40)

5.775300246s ago: executing program 1 (id=521):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt(r2, 0x90, 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
close_range(r1, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

5.714080741s ago: executing program 1 (id=522):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0xce})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.205282052s ago: executing program 1 (id=530):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
r3 = fsopen(&(0x7f0000000240)='erofs\x00', 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf29c739b200eb831698615610d5"], 0x1c}}, 0x2800)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x82, 0x5, 0xc0, 0x7}, {0x1, 0x8, 0x7, 0x1}, {0x4, 0x40, 0x0, 0x7fff}, {0x6905, 0x39, 0x2}, {0x4, 0x76, 0xfe, 0x9b5}]})
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000100)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r7, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f00000003c0)=""/186, 0xba, 0x120, 0x0, 0x0)
r8 = fsmount(r3, 0x0, 0x62)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00')

4.35401788s ago: executing program 1 (id=540):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000b00)=""/146, 0x92}, {&(0x7f0000000140)=""/60, 0x3c}], 0x4, 0x2, 0x290)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x2})
syz_usb_connect(0x5, 0x5ae, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x35, 0x7f, 0x79, 0x78, 0x5d1, 0x2003, 0x696d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59c, 0x3, 0x6, 0x9, 0x60, 0x3, [{{0x9, 0x4, 0x3e, 0x3, 0x0, 0x10, 0x41, 0x85, 0xf9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x40, 0x91}, {0x6, 0x24, 0x1a, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xc9cc, 0x0, 0xf, 0xfffc, 0x99}]}, @hid_hid={0x9, 0x21, 0xb0a3, 0x6, 0x1, {0x22, 0x69a}}]}}, {{0x9, 0x4, 0x2f, 0x4, 0xa, 0x2c, 0xfe, 0x8b, 0x3c, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x2, 0x10}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x81, 0x3, 0xfd}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0x9e, 0x3, [@generic={0x42, 0xe, "e27d1fde939311931c619190e878e6bb0a8983270b8739e3a1e5ce255f222d01c16c50b80166a72705d461bf7dfd3b841db87157eff0a91897c5adf6a336d2df"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0xb0, 0x4, 0x25, [@generic={0xb0, 0x21, "45af049ca53111080c969734830b8709f9479fa552572c5cff6171741b9235f7316b82262a1f6d843e2941a3acda3b75a54de0a06dce50647e4692d8f3621359ed5fd6dafde7e50972bf46d5981e68bc541bf317e89aa2d7c38c765ea02ba7595f29a5f2a97e8c31499afbab9918d1a1050d3bd096f9d55a997c475f9c712013510395e15da6ed748d1da4a504ae566b83c370defef4a44a8ae8e577c1a056aebfe28a1059917bd2c699dbdbf35f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x1, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x92, 0x4}]}}, {{0x9, 0x5, 0xb, 0x7a6699e1f01bf6fb, 0x40, 0x9, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x71, 0xfffb}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0xe, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x3, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xf0, 0xff, 0xc, [@generic={0x4c, 0x4, "02fef63367837ba59fec27ac9812a9e342315c91f2d6b6d4366c41a986f5177f1c0726a2a196fa7af1515ac139efe2ce77b5bbbe9ba4b168bc7b834f1d9466f909302d9cd32ec4d817a2"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x7, 0x5, 0x7, [@generic={0x37, 0x9, "42b60de410320dabd40b5b3fde01f2fb2ad2e86342e757578d6378fd5379366c6b74c5da75d1ab5ea7edc853d05a581405774902d7"}]}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xa, 0x2, 0x2, 0xff, 0x8, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x4f, 0x5, 0x1, [@generic={0x85, 0x24, "9748fb58476f82cc26d02349b478069cd19fb54fbc81908ffbcd3d161ca126a2a57abc1ba802595896b99c8dacbac3707587bc482cb1c10d78ea487bc58a6c9107ae23ffff15cd9e419135158bcc583d8cef87763b797c7a1defedd9b5846d023e071a8e4255efa39796cf4205d360649f5307d4403ff42e1b880a449418131395cf1a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7f, 0x1, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfe}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x6, 0x31, 0x4, [@generic={0x3c, 0x3b15ff9981830a6a, "e91c757bd061cdd548cfa9615f0f4fec9bbdc91107ebcbe7a3b75cb2118035a51b968dc092c4d9168a2cb35023dc12fee1a86af2c84149bfba42"}, @generic={0x60, 0x9, "257a11775ce0e6d157c1f80edccb1058ff7913384f3a0fd635f9367dda9190211606215768c428ffa5127e54060785da84f01db66506bc262a077a67d08d476e7f3686abffc2bc10c1eec15b1ad0cabea0afc8b82b2b9da236ce44d4bf8a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x410, 0xf, 0x7, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xf, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x6, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xd, 0x4, 0xc9af389ac4d98cd5, 0x9, 0x2, 0x1, [@generic={0x64, 0x8, "94031a98383a3adc9d6953c00c988272394e774fbcfde121c1bc6cb4c23eb6ba0248a4e7a9e89522db00671a6bbe6a1a847af7a77d848111254f7473584e6444462e1d3b5093a7598745b33a6e1c7c225ff1796cb2e76ade51401ac51ce7031b9746"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0xd, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4dd}]}}, {{0x9, 0x5, 0x9, 0xc, 0x1df, 0xe, 0x1, 0x0, [@generic={0x71, 0xd, "d228231469ee398f4a86cb6e984bf6050314c5ae8419d38015e984f61b062dc4687b2ec629a531e6ae8f7bc21b387b897bc10b7a6f34d63622ecb175b571e7b42cc17187552ce9435d1664c9a9352fc6facda0767fddedc0e8a54e4b4c59f727f0a9630b7b27f71252bcc95786348e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x5, 0x8, [@generic={0xd3, 0xc, "d30635a6d5b75221457fc59a46f447d7671b20aad5ba986965ac351c418c8a3ddcab9e7542fe31844cc205fdaa215d5897d5a5f07cbe5f04615407ac66838d862d24838ff7ea7a0ce3de0d03f0b7a9a43ad765492abb4f9664fa638c6d41c4bf76e8ccb5d7e1caf2b57061b81cd758aaad7d3ee640d8f8ffc37ee4d4ac7ddfa8dfeb8f52fe12a50ffa074bb81a55797ad4a3cc6b0a52d04b483778d0b16daf03acf96433e0b6c6afcc733c0c14d5035ad0fbae6d4083b336aaee7d20eb82ca0267e9dd2ccde127a6f8e63c819f365d19b6"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x0, 0x0, 0x1, 0x40, 0x9}, 0x44, &(0x7f0000000840)={0x5, 0xf, 0x44, 0x1, [@generic={0x3f, 0x10, 0x85227899c0d11f2c, "15a201f2c6274e7defcbc8b1b7b93cb13e2fb4cb6f3e7fe4a0a2bcfa0a0dddbdfb996188baa8782c3f45ceca44e4bebade82200913d6c549bc0fcfce"}]}, 0x3, [{0x69, &(0x7f00000008c0)=@string={0x69, 0x3, "c7feca4c4d53c3b436196d3dc1bc3641efad4efb0644fd562969f45f294a6dab41ea93662324ac345720be86492ffd21d21d48123dfd34acb3f559de7fce6b108f4539e969c9fffe24e56081d9b4d201df9e8aff4ea22fa2b3e211985b4d43f1fd52c9ee7cd31d"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xf0ff}}]})
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r0, 0xffffffffffffffff, 0x0)

3.656445137s ago: executing program 4 (id=559):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x2000000, 0x397240)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$RTC_ALM_SET(r4, 0x40187014, 0x0)
pipe(&(0x7f0000000340))
r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r3, 0x0, r6, 0x0, 0xffffffe1, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000103010800000000000000000a0000054058e9c64b3d98e31ac2f276c09435de8bc87b751f2dad2bc709e46f0ce5684199dce31bddc067728b99228a030000005e273388acff0700000000000064720447331994a8fd571ca8729afa986e"], 0x14}}, 0x8000)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, 'lowerdir'}}, {@none}]})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x69, 0x9, 0x0, 0x77de}, {0x3ff, 0x9, 0x60, 0x9832}]})

3.620850809s ago: executing program 4 (id=560):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
write(r1, &(0x7f0000000980)="a9", 0x1)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))

1.459410483s ago: executing program 5 (id=570):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000001000000000000000141000000030017"], 0x34}}, 0x0)
getdents(r1, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa)
getdents64(r4, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.325171494s ago: executing program 1 (id=571):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @multicast2}}}, 0x88)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x4000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffc)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x74886000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x40, 0x0, {0x0, 0x8, 0x0, 0x2, 0x3, 0x2, 0x0, 0x43969, 0xb57, 0xc000, 0x0, r7, r8, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x88101, 0x0)
write$tcp_congestion(r9, 0x0, 0x0)
write$FUSE_POLL(r9, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80000)
ppoll(&(0x7f0000000100)=[{r2, 0x410}, {r10, 0x4}, {r11}], 0x3, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x4]}, 0x8)

1.1253552s ago: executing program 1 (id=572):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f00008ce000/0x1000)=nil, 0x1000, 0x3000004, 0x12, r0, 0xf4482000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009003610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000001880)=ANY=[@ANYBLOB="202713"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'V'}, 0x0})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

592.527953ms ago: executing program 4 (id=578):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
accept$inet6(r1, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1068, &(0x7f0000002140)=ANY=[@ANYRESHEX])
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, &(0x7f0000000180))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0})
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x172052, &(0x7f0000000200)=ANY=[])

279.338488ms ago: executing program 5 (id=579):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

183.386466ms ago: executing program 5 (id=580):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0)
r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/25, 0x19}, 0xfffffffc}], 0x1, 0xb, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

153.104238ms ago: executing program 5 (id=581):
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000440))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1385, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setregid(0xee00, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
geteuid()
write$UHID_INPUT(r3, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x500a8, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0000000000000000000001400'])
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})

138.695959ms ago: executing program 5 (id=582):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d2125d4262d5c292a2c64656275673d3078303030303030503030303030303030342c0040f0c5b5ee4e84311525d1980ec35fc384960d2e2e76b172e57d121bf41c4e139c125c453ac93d00846b502bbd9e8b79c9d64397ee13fa5199b1a60eeb04e09c72f280d4f9a79b2c512959e62833ae0aa9f8994328ac7789eebf4340ead82bccecd21951c065400b26139d0894a71ce2"])
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020)

83.349674ms ago: executing program 5 (id=583):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socket(0x10, 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_getattr(r2, &(0x7f0000000080)={0x38}, 0x38, 0x0)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r5 = open$dir(&(0x7f0000000b40)='./file0\x00', 0x2000, 0x10)
fcntl$setownex(r5, 0xf, &(0x7f0000000900))
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r6)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r6, 0x5509, &(0x7f0000000080))
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x603f)
sendfile(r1, r1, 0x0, 0x40000f63c)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x408)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x1000003})
r8 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000040)={&(0x7f0000000580)=""/4096, 0x1000})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000"/62, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200"], 0x114}}, 0x0)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000000180)={0x0, r1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

66.975675ms ago: executing program 2 (id=585):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x1, 0x3}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0x10000000, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async)
close(r0)

58.976766ms ago: executing program 2 (id=586):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x19)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r3 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x408080, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000080))

7.47053ms ago: executing program 2 (id=587):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = userfaultfd(0x80800)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000001c0), 0x4)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180))

6.73251ms ago: executing program 2 (id=588):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x60a00, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fallocate(r1, 0x20, 0x18dc, 0x30)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5778c000)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.76378ms ago: executing program 2 (id=589):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed16831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
ftruncate(0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a"], 0x34}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=590):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b8004158c560a067fbc45ff810500000000000058a2e0a973e1700f8300947e570028925a010000000000000080030000feffe809000000fff5dd000064eb7b23037af05600418e00000004fcff", 0x81}], 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff)
write(r3, &(0x7f0000000100), 0xfffffe5d)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts.
[   21.484919][   T36] audit: type=1400 audit(1756171070.059:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.486296][  T281] cgroup: Unknown subsys name 'net'
[   21.507544][   T36] audit: type=1400 audit(1756171070.059:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.534817][   T36] audit: type=1400 audit(1756171070.099:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.534958][  T281] cgroup: Unknown subsys name 'devices'
[   21.721551][  T281] cgroup: Unknown subsys name 'hugetlb'
[   21.727147][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.899899][   T36] audit: type=1400 audit(1756171070.469:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.923069][   T36] audit: type=1400 audit(1756171070.479:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.947781][   T36] audit: type=1400 audit(1756171070.479:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.976516][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.985300][   T36] audit: type=1400 audit(1756171070.559:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.010840][   T36] audit: type=1400 audit(1756171070.559:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.047714][   T36] audit: type=1400 audit(1756171070.619:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.073243][   T36] audit: type=1400 audit(1756171070.619:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.073288][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.853585][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.860759][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.867851][  T290] bridge_slave_0: entered allmulticast mode
[   22.874269][  T290] bridge_slave_0: entered promiscuous mode
[   22.881853][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.888972][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.896064][  T290] bridge_slave_1: entered allmulticast mode
[   22.902351][  T290] bridge_slave_1: entered promiscuous mode
[   22.947504][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.954562][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.961627][  T288] bridge_slave_0: entered allmulticast mode
[   22.967753][  T288] bridge_slave_0: entered promiscuous mode
[   22.977946][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.985071][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.992133][  T288] bridge_slave_1: entered allmulticast mode
[   22.998242][  T288] bridge_slave_1: entered promiscuous mode
[   23.020218][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.027253][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.034342][  T291] bridge_slave_0: entered allmulticast mode
[   23.040491][  T291] bridge_slave_0: entered promiscuous mode
[   23.046504][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.053800][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.060978][  T289] bridge_slave_0: entered allmulticast mode
[   23.067076][  T289] bridge_slave_0: entered promiscuous mode
[   23.079359][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.086414][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.093511][  T291] bridge_slave_1: entered allmulticast mode
[   23.099635][  T291] bridge_slave_1: entered promiscuous mode
[   23.105687][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.112723][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.119753][  T289] bridge_slave_1: entered allmulticast mode
[   23.126069][  T289] bridge_slave_1: entered promiscuous mode
[   23.276230][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.283301][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.290576][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.297583][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.305728][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.312780][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.320049][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.327070][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.338141][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.345225][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.352514][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.359528][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.371397][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.378435][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.385720][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.392753][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.441810][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.449107][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.456537][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.464760][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.471992][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.479263][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.486743][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.493945][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.508711][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.515761][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.523356][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.530379][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.542592][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.549626][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.557327][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.564353][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.572918][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.579959][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.591788][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.598816][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.619006][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.626057][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.638127][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.645199][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.674440][  T291] veth0_vlan: entered promiscuous mode
[   23.684406][  T290] veth0_vlan: entered promiscuous mode
[   23.708162][  T291] veth1_macvtap: entered promiscuous mode
[   23.721461][  T290] veth1_macvtap: entered promiscuous mode
[   23.745033][  T288] veth0_vlan: entered promiscuous mode
[   23.754438][  T289] veth0_vlan: entered promiscuous mode
[   23.774223][  T288] veth1_macvtap: entered promiscuous mode
[   23.781384][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.798019][  T289] veth1_macvtap: entered promiscuous mode
[   23.824529][  T331] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   23.889397][  T339] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   23.898121][  T339] rust_binder: Write failure EINVAL in pid:2
[   24.022747][  T357] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.095620][  T363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   24.110149][   T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.194151][  T366] loop2: detected capacity change from 0 to 7
[   24.200666][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.209852][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.217854][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.227015][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.234924][  T366]  loop2: unable to read partition table
[   24.240691][  T366] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   24.241882][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.263286][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.263554][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[   24.271767][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.289509][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.289759][   T64] usb 3-1: Using ep0 maxpacket: 32
[   24.297664][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.309847][  T333] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   24.311561][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.327052][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.330204][   T64] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   24.336194][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.344511][   T64] usb 3-1: config 0 has no interface number 0
[   24.354142][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   24.362417][  T369] =======================================================
[   24.362417][  T369] WARNING: The mand mount option has been deprecated and
[   24.362417][  T369]          and is ignored by this kernel. Remove the mand
[   24.362417][  T369]          option from the mount to silence this warning.
[   24.362417][  T369] =======================================================
[   24.367250][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   24.403969][  T369] binder: Unknown parameter 'context��'
[   24.417450][   T64] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   24.426823][   T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.435211][   T64] usb 3-1: Product: syz
[   24.439550][   T64] usb 3-1: Manufacturer: syz
[   24.444434][   T64] usb 3-1: SerialNumber: syz
[   24.449992][   T64] usb 3-1: config 0 descriptor??
[   24.455628][   T64] smsc95xx v2.0.0
[   24.484800][  T333] usb 2-1: unable to get BOS descriptor or descriptor too short
[   24.496660][  T333] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[   24.505831][  T333] usb 2-1: config 0 has no interface number 0
[   24.512334][  T333] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   24.523611][  T333] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 8
[   24.534706][  T333] usb 2-1: config 0 interface 88 has no altsetting 0
[   24.543458][  T333] usb 2-1: string descriptor 0 read error: -22
[   24.549954][  T333] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   24.559194][  T333] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   24.568126][  T333] usb 2-1: config 0 descriptor??
[   24.574140][  T357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   24.582374][  T333] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input4
[   24.787446][  T333] usb 2-1: USB disconnect, device number 2
[   24.869896][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   24.880725][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   24.961630][  T388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   25.401925][  T401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=401 comm=syz.1.24
[   25.495971][  T334] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.650080][  T334] usb 1-1: Using ep0 maxpacket: 32
[   25.656500][  T334] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   25.664927][  T334] usb 1-1: config 0 has no interface number 0
[   25.680659][  T334] usb 1-1: config 0 interface 184 has no altsetting 0
[   25.690559][  T334] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   25.699759][  T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.709173][  T334] usb 1-1: Product: syz
[   25.713575][  T334] usb 1-1: Manufacturer: syz
[   25.718213][  T334] usb 1-1: SerialNumber: syz
[   25.725241][  T334] usb 1-1: config 0 descriptor??
[   25.731629][  T334] smsc75xx v1.0.0
[   26.019906][   T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   26.171140][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   26.180996][   T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   26.191073][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   26.205766][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   26.215147][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.223348][   T45] usb 2-1: Product: syz
[   26.227634][   T45] usb 2-1: Manufacturer: syz
[   26.232482][   T45] usb 2-1: SerialNumber: syz
[   26.240528][   T45] hub 2-1:1.0: bad descriptor, ignoring hub
[   26.246924][   T45] hub 2-1:1.0: probe with driver hub failed with error -5
[   26.331768][   T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[   26.339863][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   26.348271][   T64] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   26.362503][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   26.378535][   T64] usb 3-1: USB disconnect, device number 2
[   26.389011][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   26.399904][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   26.409644][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   26.420146][  T334] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[   26.429580][  T334] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[   26.449643][   T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   26.480254][  T421] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.481745][  T421] rust_binder: Error in use_page_slow: ESRCH
[   26.488173][  T421] rust_binder: use_range failure ESRCH
[   26.494301][  T421] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[   26.499771][  T421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   26.508051][  T421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23
[   26.551160][   T36] kauditd_printk_skb: 102 callbacks suppressed
[   26.551177][   T36] audit: type=1400 audit(1756171075.129:176): avc:  denied  { bind } for  pid=423 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   26.585718][   T36] audit: type=1400 audit(1756171075.129:177): avc:  denied  { read } for  pid=423 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   26.651486][   T36] audit: type=1400 audit(1756171075.229:178): avc:  denied  { read write } for  pid=412 comm="syz.1.28" name="lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   26.674880][   T36] audit: type=1400 audit(1756171075.229:179): avc:  denied  { open } for  pid=412 comm="syz.1.28" path="/dev/usb/lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   26.699310][   T36] audit: type=1400 audit(1756171075.249:180): avc:  denied  { checkpoint_restore } for  pid=426 comm="syz.3.32" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   26.721804][   T64] usb 2-1: USB disconnect, device number 3
[   26.730346][   T36] audit: type=1400 audit(1756171075.269:181): avc:  denied  { mounton } for  pid=426 comm="syz.3.32" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   26.802955][   T36] audit: type=1400 audit(1756171075.369:182): avc:  denied  { setopt } for  pid=431 comm="syz.3.33" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.814033][  T435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=435 comm=syz.3.34
[   26.975885][  T441] mmap: syz.2.36 (441): VmData 29134848 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[   27.096437][  T334] usb 1-1: USB disconnect, device number 2
[   27.111037][   T36] audit: type=1400 audit(1756171075.689:183): avc:  denied  { write } for  pid=456 comm="syz.0.42" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.134354][   T36] audit: type=1400 audit(1756171075.689:184): avc:  denied  { ioctl } for  pid=456 comm="syz.0.42" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x552d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.169866][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.249167][   T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   27.280421][  T469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=469 comm=syz.0.45
[   27.282910][   T36] audit: type=1400 audit(1756171075.859:185): avc:  denied  { write } for  pid=470 comm="syz.2.46" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.322749][  T473] process 'syz.2.47' launched '/dev/fd/6/
[   27.322749][  T473] ' with NULL argv: empty string added
[   27.334869][  T473] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   27.342094][  T473] rust_binder: Write failure EINVAL in pid:24
[   27.343081][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.359111][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   27.372171][   T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   27.381341][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.390411][   T45] usb 4-1: config 0 descriptor??
[   27.413781][   T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   27.429834][   T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   27.439496][   T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.454223][   T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   27.470914][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.479039][   T64] usb 2-1: Product: syz
[   27.483439][   T64] usb 2-1: Manufacturer: syz
[   27.488033][   T64] usb 2-1: SerialNumber: syz
[   27.500813][   T64] hub 2-1:1.0: bad descriptor, ignoring hub
[   27.508050][   T64] hub 2-1:1.0: probe with driver hub failed with error -5
[   27.599869][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   27.700884][  T412] usblp0: removed
[   27.706080][   T64] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   27.740241][   T64] usb 2-1: USB disconnect, device number 4
[   27.746623][   T64] usblp0: removed
[   27.750335][    T9] usb 3-1: Using ep0 maxpacket: 16
[   27.757490][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.768454][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.779677][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   27.788933][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.797872][    T9] usb 3-1: Product: syz
[   27.802182][    T9] usb 3-1: Manufacturer: syz
[   27.803647][   T45] usbhid 4-1:0.0: can't add hid device: -71
[   27.808567][    T9] usb 3-1: SerialNumber: syz
[   27.820625][   T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   27.832126][   T45] usb 4-1: USB disconnect, device number 2
[   28.149516][  T508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=508 comm=syz.0.57
[   28.282278][    T9] usb 3-1: 0:2 : does not exist
[   28.375339][  T535] binder: Unknown parameter ''
[   28.386890][  T535] binder: Unknown parameter ''
[   28.406310][  T541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=541 comm=syz.1.67
[   28.629851][  T484] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.654223][  T557] Zero length message leads to an empty skb
[   28.684356][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   28.697300][    T9] usb 3-1: USB disconnect, device number 3
[   28.707373][  T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.763501][   T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   28.779858][  T484] usb 4-1: Using ep0 maxpacket: 32
[   28.786048][  T484] usb 4-1: config 0 has an invalid interface number: 71 but max is 0
[   28.799838][  T484] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[   28.810338][  T484] usb 4-1: config 0 has no interface number 0
[   28.816426][  T484] usb 4-1: too many endpoints for config 0 interface 71 altsetting 11: 110, using maximum allowed: 30
[   28.827926][  T484] usb 4-1: config 0 interface 71 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[   28.845496][  T484] usb 4-1: config 0 interface 71 has no altsetting 0
[   28.853778][  T484] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   28.863129][  T484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.872548][  T484] usb 4-1: Product: syz
[   28.876822][  T484] usb 4-1: Manufacturer: syz
[   28.881646][  T484] usb 4-1: SerialNumber: syz
[   28.886676][  T484] usb 4-1: config 0 descriptor??
[   28.920880][   T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   28.931758][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.942711][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.952463][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   28.966158][   T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   28.975833][   T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   28.984015][   T45] usb 2-1: Manufacturer: syz
[   28.994152][   T45] usb 2-1: config 0 descriptor??
[   29.102746][  T484] smsc95xx v2.0.0
[   29.109863][  T484] smsc95xx 4-1:0.71 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   29.124839][  T484] smsc95xx 4-1:0.71: probe with driver smsc95xx failed with error -22
[   29.133977][  T568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=568 comm=syz.3.76
[   29.135026][  T484] usb 4-1: USB disconnect, device number 3
[   29.217797][   T45] usbhid 2-1:0.0: can't add hid device: -71
[   29.236813][   T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   29.250304][  T334] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   29.261668][   T45] usb 2-1: USB disconnect, device number 5
[   29.311521][  T581] mmap: syz.1.81 (581) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   29.371222][  T585] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   29.371243][  T585] rust_binder: Read failure Err(EFAULT) in pid:69
[   29.379582][  T585] rust_binder: Write failure EFAULT in pid:69
[   29.389850][  T334] usb 1-1: device descriptor read/64, error -71
[   29.420661][  T585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[   29.530082][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   29.589128][  T596] binder: Unknown parameter 'context�ut/event#'
[   29.639899][  T334] usb 1-1: device descriptor read/64, error -71
[   29.700902][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   29.712563][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   29.723927][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   29.735205][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   29.748130][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   29.757167][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.765891][    T9] usb 3-1: config 0 descriptor??
[   29.771312][  T575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   29.849885][  T484] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   29.879885][  T334] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   29.999851][  T484] usb 2-1: Using ep0 maxpacket: 32
[   30.005986][  T484] usb 2-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config
[   30.017660][  T484] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a
[   30.020409][  T334] usb 1-1: device descriptor read/64, error -71
[   30.026888][  T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.041337][  T484] usb 2-1: Product: syz
[   30.045510][  T484] usb 2-1: Manufacturer: syz
[   30.050128][  T484] usb 2-1: SerialNumber: syz
[   30.180837][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   30.188322][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   30.195842][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   30.203347][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   30.211017][    T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   30.219687][    T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   30.293011][  T334] usb 1-1: device descriptor read/64, error -71
[   30.399932][  T334] usb usb1-port1: attempt power cycle
[   30.649916][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   30.810027][    T9] usb 4-1: Using ep0 maxpacket: 16
[   30.816392][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.827032][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.837616][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   30.846882][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.855140][    T9] usb 4-1: Product: syz
[   30.859356][    T9] usb 4-1: Manufacturer: syz
[   30.864157][    T9] usb 4-1: SerialNumber: syz
[   31.273093][    T9] usb 4-1: 0:2 : does not exist
[   31.639860][  T484] usb 3-1: reset high-speed USB device number 4 using dummy_hcd
[   31.677709][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   31.690798][    T9] usb 4-1: USB disconnect, device number 4
[   31.710010][  T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.062900][  T607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=607 comm=syz.0.88
[   32.206429][   T36] kauditd_printk_skb: 49 callbacks suppressed
[   32.206447][   T36] audit: type=1400 audit(1756171080.779:235): avc:  denied  { write } for  pid=608 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   32.642977][    T9] usb 2-1: USB disconnect, device number 6
[   32.695223][   T36] audit: type=1400 audit(1756171081.269:236): avc:  denied  { lock } for  pid=617 comm="syz.1.92" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   32.770131][  T623] netlink: 'syz.2.93': attribute type 1 has an invalid length.
[   32.799898][  T623] netlink: 'syz.2.93': attribute type 2 has an invalid length.
[   32.800770][  T633] rust_binder: 101: no such ref 0
[   32.807862][   T36] audit: type=1400 audit(1756171081.339:237): avc:  denied  { mounton } for  pid=626 comm="syz.1.95" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.824939][  T632] rust_binder: 101: no such ref 0
[   32.894849][   T36] audit: type=1400 audit(1756171081.399:238): avc:  denied  { mounton } for  pid=629 comm="syz.1.97" path="/proc/89/task" dev="proc" ino=6333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   32.898679][  T640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=640 comm=syz.0.99
[   32.946670][  T642] batadv_slave_1: entered promiscuous mode
[   32.964995][  T642] batadv_slave_1: left promiscuous mode
[   33.010160][  T647] 9pnet_fd: Insufficient options for proto=fd
[   33.083985][  T652] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   33.088558][   T36] audit: type=1400 audit(1756171081.659:239): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.126100][  T652] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   33.140259][  T481] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   33.165644][  T660] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   33.237039][  T664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'.
[   33.250640][   T36] audit: type=1400 audit(1756171081.829:240): avc:  denied  { setattr } for  pid=663 comm="syz.0.108" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.260469][  T665] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   33.272332][   T36] audit: type=1400 audit(1756171081.839:241): avc:  denied  { accept } for  pid=661 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   33.299937][   T36] audit: type=1400 audit(1756171081.869:242): avc:  denied  { ioctl } for  pid=663 comm="syz.0.108" path="socket:[5580]" dev="sockfs" ino=5580 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.309837][  T481] usb 2-1: Using ep0 maxpacket: 16
[   33.325949][   T36] audit: type=1400 audit(1756171081.869:243): avc:  denied  { execute } for  pid=663 comm="syz.0.108" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.350281][   T10] usb 3-1: USB disconnect, device number 4
[   33.351567][   T36] audit: type=1400 audit(1756171081.869:244): avc:  denied  { execute_no_trans } for  pid=663 comm="syz.0.108" path="/35/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.360709][  T481] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.409850][  T481] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   33.420170][  T481] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.429265][  T481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.437424][  T481] usb 2-1: Product: syz
[   33.443649][  T667] netlink: 84 bytes leftover after parsing attributes in process `syz.0.109'.
[   33.452623][  T481] usb 2-1: Manufacturer: syz
[   33.457209][  T481] usb 2-1: SerialNumber: syz
[   33.462153][  T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   33.462180][  T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112
[   33.611097][  T484] rust_binder: 670: removing orphan mapping 0:24
[   33.849896][  T415] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   33.877042][  T481] usb 2-1: 0:2 : does not exist
[   33.915608][  T679] binder: Unknown parameter 'defcontext01777777777777777777777'
[   34.009864][  T415] usb 1-1: Using ep0 maxpacket: 16
[   34.016154][  T415] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   34.026387][  T415] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.037267][  T415] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.041608][  T484] rust_binder: 661: removing orphan mapping 0:112
[   34.047027][  T415] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   34.066378][  T415] usb 1-1: config 7 interface 0 has no altsetting 0
[   34.073035][  T415] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   34.082220][  T415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.095930][  T686] fuse: Unknown parameter '�'
[   34.292411][  T481] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   34.304833][  T481] usb 2-1: USB disconnect, device number 7
[   34.313309][  T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.399840][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   34.509223][  T415] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0002/input/input7
[   34.525109][  T415] kye 0003:0458:5010.0002: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[   34.549872][   T45] usb 4-1: Using ep0 maxpacket: 32
[   34.556049][   T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   34.564457][   T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   34.573076][   T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   34.582067][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   34.591749][   T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   34.601436][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   34.614433][   T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   34.623497][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.632064][   T45] usb 4-1: config 0 descriptor??
[   34.760835][  T415] usb 1-1: USB disconnect, device number 6
[   34.824007][  T699] input: syz0 as /devices/virtual/input/input8
[   34.837672][  T702] exFAT-fs (rnullb0): invalid boot record signature
[   34.844758][  T702] exFAT-fs (rnullb0): failed to read boot sector
[   34.851384][   T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   34.863471][  T702] exFAT-fs (rnullb0): failed to recognize exfat type
[   34.871629][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.871651][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.878225][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.891985][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.893976][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.910958][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.910982][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.911577][  T706] rust_binder: Error in use_page_slow: ESRCH
[   34.917539][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.930385][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.936255][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.936428][  T706] rust_binder: use_range failure ESRCH
[   34.942819][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.954669][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.961076][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.961248][  T706] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[   34.968432][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.982044][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.988292][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.988591][  T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   34.995492][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.010535][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.016841][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.016920][  T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62
[   35.023423][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.038739][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.045074][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.051856][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.057958][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.064606][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.070906][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.077414][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.083950][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.090536][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.096819][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.103428][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.109678][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.116328][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.122569][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.129053][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.135812][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.142219][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.155409][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.155482][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.162301][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.168497][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.175154][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.181481][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.187976][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.194485][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.200916][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.207382][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.213956][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.220331][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.226837][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.233370][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.239716][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.256906][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.256927][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.263497][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.270164][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.276654][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.283257][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.289720][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.296269][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.302747][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.309239][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.315728][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.322176][  T704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.338244][  T713] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   35.487370][  T717] rust_binder: Failed to allocate buffer. len:8392, is_oneway:false
[   35.487396][  T717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   35.495557][  T717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:121
[   35.600425][  T481] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   35.759843][  T481] usb 3-1: Using ep0 maxpacket: 32
[   35.765991][  T481] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.779849][  T481] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.800504][  T481] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   35.809554][  T481] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   35.829845][  T481] usb 3-1: Product: syz
[   35.834043][  T481] usb 3-1: Manufacturer: syz
[   35.850308][  T481] hub 3-1:4.0: USB hub found
[   36.040574][  T481] hub 3-1:4.0: 2 ports detected
[   36.481212][  T744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.135'.
[   36.490384][  T744] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[   36.497679][  T744] rust_binder: Write failure EINVAL in pid:135
[   36.511972][  T747] rust_binder: Error while translating object.
[   36.518197][  T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   36.524455][  T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138
[   36.534229][  T748] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   36.563398][  T752] rust_binder: Fixups oob 164 166 363 196
[   36.569919][  T752] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[   36.575740][  T752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.584057][  T752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143
[   36.679922][   T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   36.839848][   T45] usb 2-1: Using ep0 maxpacket: 16
[   36.846090][   T45] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   36.856250][   T45] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.867155][   T45] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.876930][   T45] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   36.889720][   T45] usb 2-1: config 7 interface 0 has no altsetting 0
[   36.896355][   T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   36.899869][  T484] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   36.905412][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.059865][  T484] usb 1-1: Using ep0 maxpacket: 32
[   37.066082][  T484] usb 1-1: config 0 has an invalid interface number: 71 but max is 0
[   37.074238][  T484] usb 1-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[   37.084442][  T484] usb 1-1: config 0 has no interface number 0
[   37.090541][  T484] usb 1-1: too many endpoints for config 0 interface 71 altsetting 11: 110, using maximum allowed: 30
[   37.101509][  T484] usb 1-1: config 0 interface 71 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[   37.114744][  T484] usb 1-1: config 0 interface 71 has no altsetting 0
[   37.122869][  T484] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   37.131998][  T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.140000][  T484] usb 1-1: Product: syz
[   37.144163][  T484] usb 1-1: Manufacturer: syz
[   37.148753][  T484] usb 1-1: SerialNumber: syz
[   37.154098][  T484] usb 1-1: config 0 descriptor??
[   37.223674][   T64] usb 4-1: USB disconnect, device number 5
[   37.240037][   T64] usblp0: removed
[   37.291692][  T481] hub 3-1:4.0: hub_hub_status failed (err = -32)
[   37.298058][  T481] hub 3-1:4.0: config failed, can't get hub status (err -32)
[   37.380433][  T484] smsc95xx v2.0.0
[   37.384097][  T484] smsc95xx 1-1:0.71 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   37.409995][  T484] smsc95xx 1-1:0.71: probe with driver smsc95xx failed with error -22
[   37.423738][  T484] usb 1-1: USB disconnect, device number 7
[   37.449509][   T45] usbhid 2-1:7.0: can't add hid device: -71
[   37.459102][   T45] usbhid 2-1:7.0: probe with driver usbhid failed with error -71
[   37.471024][   T45] usb 2-1: USB disconnect, device number 8
[   37.579850][   T64] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   37.730892][   T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.741016][   T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   37.750603][   T64] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   37.759640][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   37.767643][   T64] usb 4-1: SerialNumber: syz
[   37.821406][  T771] netlink: 'syz.2.143': attribute type 14 has an invalid length.
[   37.836878][   T36] kauditd_printk_skb: 6141 callbacks suppressed
[   37.836896][   T36] audit: type=1400 audit(1756171086.409:6386): avc:  denied  { setopt } for  pid=770 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.945032][  T783] rust_binder: 777 RLIMIT_NICE not set
[   37.964597][  T785] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   37.970200][  T785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   37.978295][  T785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:152
[   38.015622][   T36] audit: type=1400 audit(1756171086.589:6387): avc:  denied  { write } for  pid=784 comm="syz.0.149" path="socket:[6894]" dev="sockfs" ino=6894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   38.219858][  T791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154
[   38.261057][   T64] usb 4-1: 0:2 : does not exist
[   38.276082][  T797] rust_binder: Write failure EINVAL in pid:120
[   38.285311][   T64] usb 4-1: USB disconnect, device number 6
[   38.324484][   T36] audit: type=1400 audit(1756171086.899:6388): avc:  denied  { mounton } for  pid=798 comm="syz.1.153" path="/39/file0/file0" dev="incremental-fs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.348547][  T799] incfs: Options parsing error. -22
[   38.353943][  T799] incfs: mount failed -22
[   38.359006][  T799] rust_binder: Error while translating object.
[   38.359040][  T799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   38.367195][  T799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122
[   38.401109][   T36] audit: type=1400 audit(1756171086.979:6389): avc:  denied  { mount } for  pid=800 comm="syz.1.154" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   38.433075][   T36] audit: type=1400 audit(1756171087.009:6390): avc:  denied  { mounton } for  pid=800 comm="syz.1.154" path="/40/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   38.463288][   T36] audit: type=1400 audit(1756171087.039:6391): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   38.550362][   T36] audit: type=1400 audit(1756171087.129:6392): avc:  denied  { map } for  pid=807 comm="syz.1.156" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   38.579178][   T36] audit: type=1400 audit(1756171087.129:6393): avc:  denied  { execute } for  pid=807 comm="syz.1.156" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   38.719914][  T811] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[   38.743032][   T36] audit: type=1400 audit(1756171087.319:6394): avc:  denied  { map } for  pid=814 comm="syz.2.159" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.776234][   T36] audit: type=1400 audit(1756171087.319:6395): avc:  denied  { read } for  pid=814 comm="syz.2.159" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.777966][  T820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.820401][  T820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.836394][  T820] netlink: 'syz.2.160': attribute type 16 has an invalid length.
[   38.844211][  T820] netlink: 'syz.2.160': attribute type 2 has an invalid length.
[   38.851920][  T820] netlink: 'syz.2.160': attribute type 2 has an invalid length.
[   38.859590][  T820] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.160'.
[   39.069858][   T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   39.219885][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   39.228294][   T45] usb 4-1: config 0 interface 0 has no altsetting 0
[   39.234966][   T45] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[   39.244064][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.252621][   T45] usb 4-1: config 0 descriptor??
[   39.369837][   T31] usb 1-1: Using ep0 maxpacket: 32
[   39.376294][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[   39.384723][   T31] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.395622][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   39.403644][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[   39.412699][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.420726][   T31] usb 1-1: Product: syz
[   39.424893][   T31] usb 1-1: Manufacturer: syz
[   39.429475][   T31] usb 1-1: SerialNumber: syz
[   39.646848][  T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.657186][  T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.679039][  T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.681338][   T45] wacom 0003:056A:00D0.0003: unknown main item tag 0x0
[   39.688128][  T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.696460][   T45] wacom 0003:056A:00D0.0003: unknown main item tag 0x0
[   39.704547][  T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.710185][   T45] wacom 0003:056A:00D0.0003: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[   39.718010][  T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.728142][   T45] wacom 0003:056A:00D0.0003: hidraw0: USB HID v1.01 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0
[   39.750880][  T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.763836][  T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.765539][   T45] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0003/input/input9
[   39.778849][  T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.797785][  T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.866272][   T31] usb 1-1: USB disconnect, device number 8
[   40.010551][  T868] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.014221][  T867] rust_binder: 866 RLIMIT_NICE not set
[   40.029161][  T871] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.037829][  T871] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.038256][  T874] /dev/rnullb0: Can't open blockdev
[   40.044395][  T872] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   40.063099][  T872] rust_binder: Write failure EINVAL in pid:175
[   40.081946][  T877] syz.0.176 (877): attempted to duplicate a private mapping with mremap.  This is not supported.
[   40.100473][  T879] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.100773][  T879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179
[   40.107356][  T877] rust_binder: Error while translating object.
[   40.116626][  T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   40.124520][  T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179
[   40.179554][  T887] syz.1.179 uses obsolete (PF_INET,SOCK_PACKET)
[   40.230608][  T887] rust_binder: 168: no such ref 3
[   40.235709][  T887] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   40.281102][  T894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[   40.310789][  T893] kvm: pic: non byte read
[   40.383510][   T45] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   40.393926][   T45] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   41.280135][  T925] overlayfs: workdir and upperdir must be separate subtrees
[   41.820159][  T484] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   41.847330][  T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.856848][  T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.906382][   T45] usb 4-1: USB disconnect, device number 7
[   41.949994][  T949] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.951001][  T949] rust_binder: Error in use_page_slow: ESRCH
[   41.957432][  T949] rust_binder: use_range failure ESRCH
[   41.979896][  T949] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   41.985382][  T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   41.999896][  T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:102
[   42.010618][  T484] usb 1-1: config 0 has an invalid interface number: 40 but max is 0
[   42.028266][  T484] usb 1-1: config 0 has no interface number 0
[   42.034449][  T484] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.fa
[   42.043518][  T484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.057186][  T484] usb 1-1: config 0 descriptor??
[   42.123000][   T46] bridge_slave_1: left allmulticast mode
[   42.128656][   T46] bridge_slave_1: left promiscuous mode
[   42.140008][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.147949][   T46] bridge_slave_0: left allmulticast mode
[   42.153826][   T46] bridge_slave_0: left promiscuous mode
[   42.159676][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.174046][   T45] rust_binder: 954: removing orphan mapping 0:4120
[   42.290841][   T46] veth1_macvtap: left promiscuous mode
[   42.296417][   T46] veth0_vlan: left promiscuous mode
[   42.335522][  T484] usb 1-1: string descriptor 0 read error: -71
[   42.345584][  T484] ftdi_sio 1-1:0.40: FTDI USB Serial Device converter detected
[   42.367733][  T484] ftdi_sio ttyUSB0: unknown device type: 0x3fa
[   42.375507][  T484] usb 1-1: USB disconnect, device number 9
[   42.386945][  T484] ftdi_sio 1-1:0.40: device disconnected
[   42.409533][  T960] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.424167][  T960] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.433331][  T960] bridge_slave_0: entered allmulticast mode
[   42.440792][  T960] bridge_slave_0: entered promiscuous mode
[   42.448831][  T960] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.456135][  T960] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.463334][  T960] bridge_slave_1: entered allmulticast mode
[   42.471364][  T960] bridge_slave_1: entered promiscuous mode
[   42.532695][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.539767][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.551608][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.558656][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.587065][  T960] veth0_vlan: entered promiscuous mode
[   42.600649][  T960] veth1_macvtap: entered promiscuous mode
[   42.691245][  T998] 9pnet_fd: Insufficient options for proto=fd
[   42.720308][  T995] binder: Binderfs stats mode cannot be changed during a remount
[   42.846741][   T36] kauditd_printk_skb: 26 callbacks suppressed
[   42.846758][   T36] audit: type=1400 audit(1756171091.419:6422): avc:  denied  { ioctl } for  pid=1007 comm="syz.4.215" path="mnt:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   42.900701][   T36] audit: type=1400 audit(1756171091.419:6423): avc:  denied  { getattr } for  pid=1007 comm="syz.4.215" path="mnt:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   42.971955][   T36] audit: type=1400 audit(1756171091.549:6424): avc:  denied  { ioctl } for  pid=1007 comm="syz.4.215" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   43.086840][   T36] audit: type=1400 audit(1756171091.659:6425): avc:  denied  { read } for  pid=1017 comm="syz.4.218" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   43.119877][   T36] audit: type=1400 audit(1756171091.659:6426): avc:  denied  { open } for  pid=1017 comm="syz.4.218" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   43.314621][   T36] audit: type=1400 audit(1756171091.889:6427): avc:  denied  { load_policy } for  pid=1043 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   43.314657][ T1048] SELinux:  policydb version 2134819135 does not match my version range 15-33
[   43.349920][ T1048] SELinux: failed to load policy
[   43.398390][   T36] audit: type=1400 audit(1756171091.969:6428): avc:  denied  { connect } for  pid=1057 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.406793][ T1060] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000fffffffd not found
[   43.424931][ T1062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.427175][ T1060] rust_binder: Write failure EINVAL in pid:235
[   43.435362][ T1062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.470950][   T36] audit: type=1400 audit(1756171092.049:6429): avc:  denied  { connect } for  pid=1063 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   43.529159][ T1062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.544520][ T1072] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.548237][ T1062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.564844][ T1062] /dev/rnullb0: Can't open blockdev
[   43.600669][ T1073] bridge0: entered allmulticast mode
[   43.606012][   T36] audit: type=1326 audit(1756171092.179:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1074 comm="syz.4.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd91db8ebe9 code=0x0
[   43.628942][ T1073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[   43.637942][ T1073] bridge_slave_1: left allmulticast mode
[   43.643638][ T1073] bridge_slave_1: left promiscuous mode
[   43.649688][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.657963][ T1073] bridge_slave_0: left allmulticast mode
[   43.663921][ T1073] bridge_slave_0: left promiscuous mode
[   43.669529][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.678226][ T1073] bridge0 (unregistering): left allmulticast mode
[   43.689262][ T1078] rust_binder: got new transaction with bad transaction stack
[   43.689281][ T1078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240
[   44.170348][   T36] audit: type=1400 audit(1756171092.749:6431): avc:  denied  { setopt } for  pid=1085 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   44.508245][ T1096] cgroup: Bad value for 'name'
[   44.533646][ T1098] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.571602][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.909886][  T484] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   45.009383][ T1109] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[   45.035570][ T1113] /dev/rnullb0: Can't open blockdev
[   45.069860][  T484] usb 1-1: Using ep0 maxpacket: 32
[   45.076288][  T484] usb 1-1: unable to get BOS descriptor or descriptor too short
[   45.084612][  T484] usb 1-1: config 14 has an invalid interface number: 32 but max is 0
[   45.092815][  T484] usb 1-1: config 14 has no interface number 0
[   45.098970][  T484] usb 1-1: config 14 interface 32 has no altsetting 0
[   45.107107][  T484] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   45.116280][  T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.124735][  T484] usb 1-1: Product: syz
[   45.128915][  T484] usb 1-1: Manufacturer: syz
[   45.136232][  T484] usb 1-1: SerialNumber: syz
[   45.182690][ T1124] netlink: 'syz.2.249': attribute type 13 has an invalid length.
[   45.381312][  T484] ums-usbat 1-1:14.32: USB Mass Storage device detected
[   45.394944][  T484] ums-usbat 1-1:14.32: Quirks match for vid 0781 pid 0005: 1
[   45.402404][  T484] ums-usbat 1-1:14.32: This device (0781,0005,0005 S 39 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[   45.402404][  T484]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   45.483734][  T484] usb 1-1: USB disconnect, device number 10
[   45.494334][ T1130] fuse: Unknown parameter 'useb_id'
[   45.500066][ T1130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.557743][ T1134] 9pnet_fd: Insufficient options for proto=fd
[   45.779610][ T1144] FAULT_INJECTION: forcing a failure.
[   45.779610][ T1144] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   45.792814][ T1144] CPU: 0 UID: 0 PID: 1144 Comm: syz.1.255 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786
[   45.792845][ T1144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.792865][ T1144] Call Trace:
[   45.792871][ T1144]  <TASK>
[   45.792879][ T1144]  __dump_stack+0x21/0x30
[   45.792899][ T1144]  dump_stack_lvl+0x10c/0x190
[   45.792913][ T1144]  ? __cfi_dump_stack_lvl+0x10/0x10
[   45.792927][ T1144]  ? dump_stack+0xd/0x20
[   45.792939][ T1144]  dump_stack+0x19/0x20
[   45.792952][ T1144]  should_fail_ex+0x3d9/0x530
[   45.792967][ T1144]  should_fail+0xf/0x20
[   45.792981][ T1144]  should_fail_usercopy+0x1e/0x30
[   45.792991][ T1144]  _copy_to_user+0x24/0xa0
[   45.793003][ T1144]  simple_read_from_buffer+0xed/0x160
[   45.793016][ T1144]  proc_fail_nth_read+0x19e/0x210
[   45.793029][ T1144]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   45.793042][ T1144]  ? bpf_lsm_file_permission+0xd/0x20
[   45.793056][ T1144]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   45.793069][ T1144]  vfs_read+0x278/0xb60
[   45.793087][ T1144]  ? __cfi_vfs_read+0x10/0x10
[   45.793101][ T1144]  ? __kasan_check_write+0x18/0x20
[   45.793116][ T1144]  ? mutex_lock+0x92/0x1c0
[   45.793131][ T1144]  ? __cfi_mutex_lock+0x10/0x10
[   45.793145][ T1144]  ? __fget_files+0x2c5/0x340
[   45.793157][ T1144]  ksys_read+0x141/0x250
[   45.793165][ T1144]  ? __cfi_ksys_read+0x10/0x10
[   45.793175][ T1144]  ? __kasan_check_read+0x15/0x20
[   45.793188][ T1144]  __x64_sys_read+0x7f/0x90
[   45.793197][ T1144]  x64_sys_call+0x2638/0x2ee0
[   45.793212][ T1144]  do_syscall_64+0x58/0xf0
[   45.793224][ T1144]  ? clear_bhb_loop+0x50/0xa0
[   45.793235][ T1144]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.793251][ T1144] RIP: 0033:0x7fa69af8d5fc
[   45.793264][ T1144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   45.793273][ T1144] RSP: 002b:00007fa69be67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.793289][ T1144] RAX: ffffffffffffffda RBX: 00007fa69b1b5fa0 RCX: 00007fa69af8d5fc
[   45.793298][ T1144] RDX: 000000000000000f RSI: 00007fa69be670a0 RDI: 0000000000000003
[   45.793305][ T1144] RBP: 00007fa69be67090 R08: 0000000000000000 R09: 0000000000000000
[   45.793311][ T1144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.793318][ T1144] R13: 00007fa69b1b6038 R14: 00007fa69b1b5fa0 R15: 00007fffa04993b8
[   45.793327][ T1144]  </TASK>
[   46.039885][  T415] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   46.055368][ T1150] fuseblk: Unknown parameter 'mser_'
[   46.155105][ T1158] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   46.155128][ T1158] rust_binder: Error while translating object.
[   46.179938][ T1158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.195127][ T1158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[   46.215832][  T415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.240579][ T1158] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.278547][  T415] usb 2-1: config 1 interface 0 has no altsetting 0
[   46.305788][  T415] usb 2-1: language id specifier not provided by device, defaulting to English
[   46.321869][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.332282][  T415] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[   46.340306][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.341560][  T415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.377440][  T415] usb 2-1: Product: syz
[   46.387463][  T415] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝乼屍ⱛ⏛仒ꢃ㺅盰
[   46.418633][  T415] usb 2-1: SerialNumber: syz
[   46.632661][ T1170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[   46.633098][ T1147] __vm_enough_memory: pid: 1147, comm: syz.1.256, bytes: 18014402804453376 not enough memory for the allocation
[   46.725375][  T415] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[   46.742951][  T415] usb 2-1: USB disconnect, device number 9
[   46.819864][ T1184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1184 comm=syz.0.268
[   46.839180][ T1186] binder: Bad value for 'defcontext'
[   46.860212][ T1186] tap0: tun_chr_ioctl cmd 1074025675
[   46.869739][ T1186] tap0: persist enabled
[   46.874348][ T1186] tap0: tun_chr_ioctl cmd 1074025675
[   46.879761][ T1186] tap0: persist enabled
[   47.099857][  T481] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   47.119874][  T484] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   47.183410][ T1188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.192042][ T1188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.249848][  T481] usb 1-1: Using ep0 maxpacket: 16
[   47.255942][  T481] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   47.264700][  T481] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[   47.274988][  T481] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.285220][  T481] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.294285][  T484] usb 5-1: Using ep0 maxpacket: 32
[   47.299412][  T481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.307422][  T481] usb 1-1: Product: syz
[   47.311679][  T481] usb 1-1: Manufacturer: syz
[   47.316283][  T481] usb 1-1: SerialNumber: syz
[   47.322083][  T484] usb 5-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config
[   47.332972][  T484] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.341871][  T484] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[   47.352828][  T484] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   47.367007][  T484] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.376059][  T484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.384052][  T484] usb 5-1: Product: И
[   47.388126][  T484] usb 5-1: Manufacturer: 輇腉듁켭鐃ヽ쉫櫤ﰢ‡꼢铩櫥笓碌｢᪭蔭᝷虢㺰כ灜ኝ
[   47.399073][  T484] usb 5-1: SerialNumber: 禭鶫枥催늶젍࣠⑰楊鰦㵾ኑऊ󛓵肮輕䌟騍쎎榲쵏飄ꉠ癱گ寣卭∻黫㿋嶳業垝挗둃번挽糣癗蚾﨟갭뢨੾◯햒ື㷝꧰ꇨ撪緰뀴ҙ퇖⌝蝹➥櫛↗暮亖臹褘领걉份¨뎐퟇홚産躐쀦쳺嗮帒緃퍫䛂䏎夫矮蓞媎뼏肕烈ꦴꐁகꥥ拓䔀ⴴ㌆㱂
[   47.499865][  T415] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   47.649856][  T415] usb 2-1: Using ep0 maxpacket: 16
[   47.656087][  T415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.666223][  T415] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.676512][  T415] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.685586][  T415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.693582][  T415] usb 2-1: Product: syz
[   47.697739][  T415] usb 2-1: Manufacturer: syz
[   47.702379][  T415] usb 2-1: SerialNumber: syz
[   47.735276][  T481] usb 1-1: 0:2 : does not exist
[   47.865333][ T1206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.874395][ T1206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.883593][ T1206] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   47.890758][ T1206] rust_binder: Write failure EINVAL in pid:182
[   48.454771][ T1215] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[   48.476499][ T1215] �����$: renamed from bridge_slave_0 (while UP)
[   48.763895][ T1227] capability: warning: `syz.0.282' uses 32-bit capabilities (legacy support in use)
[   48.784795][ T1230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.793335][ T1230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.901463][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   48.901479][   T36] audit: type=1400 audit(1756171097.479:6444): avc:  denied  { bind } for  pid=1237 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.979789][ T1239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.988464][ T1239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.997138][   T36] audit: type=1400 audit(1756171097.569:6445): avc:  denied  { create } for  pid=1237 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   49.389819][   T36] audit: type=1400 audit(1756171097.959:6446): avc:  denied  { getopt } for  pid=1240 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   49.543569][ T1246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   49.543604][ T1246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:302
[   49.553607][ T1246] netlink: 240 bytes leftover after parsing attributes in process `syz.0.288'.
[   49.557671][   T36] audit: type=1400 audit(1756171098.129:6447): avc:  denied  { nlmsg_read } for  pid=1243 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   49.574299][ T1246] netlink: 'syz.0.288': attribute type 28 has an invalid length.
[   49.633750][ T1250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.634478][ T1250] rust_binder: 305: no such ref 1
[   49.646462][ T1250] rust_binder: 305: no such ref 1
[   49.652268][ T1251] bpf: Bad value for 'uid'
[   49.671938][   T36] audit: type=1400 audit(1756171098.249:6448): avc:  denied  { mounton } for  pid=1252 comm="syz.0.290" path="/98/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   49.760234][ T1263] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.773879][ T1263] rust_binder: Write failure EFAULT in pid:317
[   49.865748][ T1266] veth1_macvtap: left promiscuous mode
[   49.877557][ T1266] macsec0: entered promiscuous mode
[   49.883054][ T1266] macsec0: entered allmulticast mode
[   49.890479][ T1266] veth1_macvtap: entered promiscuous mode
[   49.896294][ T1266] veth1_macvtap: entered allmulticast mode
[   49.902906][ T1266] macsec0: left promiscuous mode
[   49.907974][ T1266] macsec0: left allmulticast mode
[   49.913278][ T1266] veth1_macvtap: left allmulticast mode
[   49.921069][   T36] audit: type=1326 audit(1756171098.499:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98ebe9 code=0x50000
[   49.947608][   T36] audit: type=1326 audit(1756171098.499:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98ebe9 code=0x50000
[   49.971207][   T36] audit: type=1326 audit(1756171098.499:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98ebe9 code=0x50000
[   49.994619][   T36] audit: type=1326 audit(1756171098.499:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98ebe9 code=0x50000
[   50.018031][   T36] audit: type=1326 audit(1756171098.499:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ce98ebe9 code=0x50000
[   50.317557][ T1270] UHID_CREATE from different security context by process 227 (syz.1.295), this is not allowed.
[   50.444295][ T1275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'.
[   50.710305][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.718788][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.933808][ T1283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.942307][ T1283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.316918][ T1288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.340702][ T1288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.750907][    T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   51.780888][    T9] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.877444][ T1291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.877471][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77
[   53.209983][  T481] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1)
[   53.235768][  T484] usb 5-1: 0:2 : does not exist
[   53.250878][  T415] usb 2-1: 0:2 : does not exist
[   53.252351][  T484] usb 5-1: USB disconnect, device number 2
[   53.270241][  T415] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   53.293707][  T415] usb 2-1: USB disconnect, device number 10
[   53.322776][  T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory
[   53.351733][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.351761][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.358025][ T1343] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   53.371465][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.371493][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.377657][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.384094][ T1343] rust_binder: Error in use_page_slow: ESRCH
[   53.399727][ T1344] rust_binder: Write failure EINVAL in pid:237
[   53.405905][ T1343] rust_binder: use_range failure ESRCH
[   53.412836][ T1343] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   53.418399][ T1343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   53.426822][ T1343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:237
[   53.436767][ T1346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.454896][ T1346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.470694][ T1346] sit0: entered promiscuous mode
[   53.479160][ T1346] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   53.487272][ T1346] netlink: 9 bytes leftover after parsing attributes in process `syz.2.320'.
[   53.629887][  T484] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   53.759846][  T484] usb 5-1: device descriptor read/64, error -71
[   54.040765][  T484] usb 5-1: device descriptor read/64, error -71
[   54.085434][ T1355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.129604][ T1355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.279854][  T484] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   54.439848][  T484] usb 5-1: device descriptor read/64, error -71
[   54.593457][ T1362] netlink: 'syz.1.326': attribute type 4 has an invalid length.
[   54.699852][  T484] usb 5-1: device descriptor read/64, error -71
[   54.809953][  T484] usb usb5-port1: attempt power cycle
[   55.159848][  T484] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   55.181101][  T484] usb 5-1: device descriptor read/8, error -71
[   55.217609][   T36] kauditd_printk_skb: 72 callbacks suppressed
[   55.217626][   T36] audit: type=1400 audit(1756171103.789:6526): avc:  denied  { create } for  pid=1393 comm="syz.2.334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.270978][   T36] audit: type=1400 audit(1756171103.789:6527): avc:  denied  { mounton } for  pid=1393 comm="syz.2.334" path="/81/file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.316349][   T36] audit: type=1400 audit(1756171103.789:6528): avc:  denied  { read write } for  pid=1393 comm="syz.2.334" name="file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.340454][  T484] usb 5-1: device descriptor read/8, error -71
[   55.341803][   T36] audit: type=1400 audit(1756171103.789:6529): avc:  denied  { open } for  pid=1393 comm="syz.2.334" path="/81/file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.369485][   T36] audit: type=1400 audit(1756171103.889:6530): avc:  denied  { accept } for  pid=1407 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.389238][   T36] audit: type=1400 audit(1756171103.889:6531): avc:  denied  { ioctl } for  pid=1407 comm="syz.4.340" path="socket:[11239]" dev="sockfs" ino=11239 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.415800][   T36] audit: type=1400 audit(1756171103.889:6532): avc:  denied  { write } for  pid=1407 comm="syz.4.340" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   55.441207][   T36] audit: type=1400 audit(1756171103.889:6533): avc:  denied  { write } for  pid=1407 comm="syz.4.340" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   55.749852][  T415] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   55.895318][ T1426] overlayfs: failed to clone upperpath
[   55.909982][  T415] usb 2-1: Using ep0 maxpacket: 8
[   55.916423][  T415] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   55.929844][  T415] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[   55.939967][  T415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.952920][  T415] usb 2-1: config 0 descriptor??
[   55.958719][ T1428] bridge0: port 3(erspan0) entered blocking state
[   55.970092][ T1428] bridge0: port 3(erspan0) entered disabled state
[   55.976586][ T1428] erspan0: entered allmulticast mode
[   55.982666][ T1428] erspan0: entered promiscuous mode
[   55.987993][ T1428] bridge0: port 3(erspan0) entered blocking state
[   55.994459][ T1428] bridge0: port 3(erspan0) entered forwarding state
[   56.002411][ T1428] erspan0: left allmulticast mode
[   56.007459][ T1428] erspan0: left promiscuous mode
[   56.012747][ T1428] bridge0: port 3(erspan0) entered disabled state
[   56.161989][  T415] usb 2-1: USB disconnect, device number 11
[   56.178524][   T36] audit: type=1400 audit(1756171104.749:6534): avc:  denied  { map } for  pid=1440 comm="syz.4.351" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   56.208575][   T36] audit: type=1400 audit(1756171104.749:6535): avc:  denied  { execute } for  pid=1440 comm="syz.4.351" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   56.420957][ T1446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   56.420983][ T1446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:122
[   56.451135][ T1448] rust_binder: Failed copying into alloc: EFAULT
[   56.460356][ T1448] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   56.466728][ T1448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   56.475285][ T1448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:124
[   56.735090][ T1463] SELinux:  policydb magic number 0x37373130 does not match expected magic number 0xf97cff8c
[   56.763143][ T1463] SELinux: failed to load policy
[   57.109845][   T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   57.259855][   T31] usb 2-1: Using ep0 maxpacket: 32
[   57.266247][   T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.277379][   T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.287418][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   57.294207][   T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[   57.303480][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.315309][   T31] usb 2-1: config 0 descriptor??
[   58.038722][ T1483] IPv6: NLM_F_CREATE should be specified when creating new route
[   58.267745][ T1498] 9pnet_fd: p9_fd_create_tcp (1498): problem connecting socket to 127.0.0.1
[   58.734248][ T1508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   58.734283][ T1508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:141
[   59.309856][  T415] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   59.489842][  T415] usb 5-1: Using ep0 maxpacket: 16
[   59.496161][  T415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.507393][  T415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.517368][  T415] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   59.530397][  T415] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   59.539481][  T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.548831][  T415] usb 5-1: config 0 descriptor??
[   59.750264][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   59.763425][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   59.785808][   T31] usb 2-1: USB disconnect, device number 12
[   59.972808][  T415] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[   59.996402][  T415] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0
[   60.014762][  T415] microsoft 0003:045E:07DA.0006: implement() called with n (152) > 32! (kworker/1:4)
[   60.041461][ T1545] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   60.048730][ T1545] rust_binder: inc_ref_done called when no active inc_refs
[   60.132519][ T1562] new mount options do not match the existing superblock, will be ignored
[   60.183657][  T415] microsoft 0003:045E:07DA.0006: No inputs registered, leaving
[   60.200451][  T415] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   60.229843][  T415] microsoft 0003:045E:07DA.0006: no inputs found
[   60.236487][  T415] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway
[   60.250507][  T415] usb 5-1: USB disconnect, device number 8
[   60.359870][   T31] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   60.520960][   T31] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[   60.528988][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   60.539287][   T31] usb 2-1: config 0 has no interface number 0
[   60.545502][   T31] usb 2-1: config 0 interface 4 has no altsetting 0
[   60.553649][   T31] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[   60.562852][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.570974][   T31] usb 2-1: Product: syz
[   60.575137][   T31] usb 2-1: Manufacturer: syz
[   60.579735][   T31] usb 2-1: SerialNumber: syz
[   60.587810][   T31] usb 2-1: config 0 descriptor??
[   60.593818][   T31] hub 2-1:0.4: bad descriptor, ignoring hub
[   60.599725][   T31] hub 2-1:0.4: probe with driver hub failed with error -5
[   60.795426][ T1559] netlink: 44 bytes leftover after parsing attributes in process `syz.1.395'.
[   60.805279][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[   60.832900][ T1559] rust_binder: Error while translating object.
[   60.832935][ T1559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.850017][ T1559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273
[   60.989940][   T31] usb 2-1: USB disconnect, device number 13
[   61.073649][ T1585] netlink: 'syz.2.402': attribute type 4 has an invalid length.
[   61.129326][ T1592] overlayfs: failed to clone upperpath
[   61.339870][   T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   61.489855][   T31] usb 5-1: Using ep0 maxpacket: 32
[   61.502044][   T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   61.516742][   T31] usb 5-1: config 0 has no interface number 0
[   61.533431][   T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   61.547640][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.558127][   T31] usb 5-1: Product: syz
[   61.562850][   T31] usb 5-1: Manufacturer: syz
[   61.567526][   T31] usb 5-1: SerialNumber: syz
[   61.573028][   T31] usb 5-1: config 0 descriptor??
[   61.578839][   T31] smsc95xx v2.0.0
[   61.779852][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   61.930962][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.942630][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   61.953643][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   61.963434][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   61.976468][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   61.985585][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.994608][    T9] usb 2-1: config 0 descriptor??
[   62.218025][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[   62.238194][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   62.247530][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   62.259129][   T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   62.268495][   T31] usb 5-1: USB disconnect, device number 9
[   62.402186][    T9] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max
[   62.421175][    T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   62.440577][    T9] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   62.835796][ T1599] fuse: Bad value for 'fd'
[   62.865291][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   62.865309][   T36] audit: type=1326 audit(1756171111.439:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1601 comm="syz.4.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd91db8ebe9 code=0x0
[   63.761780][   T36] audit: type=1400 audit(1756171112.339:6548): avc:  denied  { accept } for  pid=1604 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   64.260600][ T1629] fuse: Unknown parameter 'f$'
[   64.490221][  T415] usb 2-1: USB disconnect, device number 14
[   65.171231][  T484] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   65.189271][  T484] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   65.250385][ T1649] netlink: 'syz.4.424': attribute type 1 has an invalid length.
[   65.268249][ T1649] netlink: 'syz.4.424': attribute type 2 has an invalid length.
[   65.276185][ T1648] netlink: 'syz.4.424': attribute type 1 has an invalid length.
[   65.293977][ T1648] netlink: 'syz.4.424': attribute type 2 has an invalid length.
[   65.353469][   T36] audit: type=1400 audit(1756171113.929:6549): avc:  denied  { name_bind } for  pid=1660 comm="syz.4.427" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   65.377925][   T36] audit: type=1400 audit(1756171113.949:6550): avc:  denied  { nlmsg_write } for  pid=1660 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   65.420392][ T1664] overlayfs: failed to clone upperpath
[   65.536932][ T1682] input: syz1 as /devices/virtual/input/input19
[   65.544432][ T1683] binder: Bad value for 'stats'
[   65.696493][   T36] audit: type=1400 audit(1756171114.269:6551): avc:  denied  { bind } for  pid=1689 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   65.955818][   T36] audit: type=1400 audit(1756171114.529:6552): avc:  denied  { setopt } for  pid=1701 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   66.921044][ T1724] overlayfs: failed to clone upperpath
[   66.941675][   T36] audit: type=1400 audit(1756171115.519:6553): avc:  denied  { remount } for  pid=1725 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   66.988805][  T484] usb 1-1: USB disconnect, device number 11
[   67.105828][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.112932][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.120109][ T1728] bridge_slave_0: entered allmulticast mode
[   67.126273][ T1728] bridge_slave_0: entered promiscuous mode
[   67.132596][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.139610][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.146698][ T1728] bridge_slave_1: entered allmulticast mode
[   67.153086][ T1728] bridge_slave_1: entered promiscuous mode
[   67.203325][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.210375][ T1728] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.217612][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.224638][ T1728] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.244641][   T46] veth1_macvtap: left promiscuous mode
[   67.250171][   T46] veth0_vlan: left promiscuous mode
[   67.285015][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.292323][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.305509][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.312568][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.335914][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.343004][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.358271][ T1728] veth0_vlan: entered promiscuous mode
[   67.369047][ T1728] veth1_macvtap: entered promiscuous mode
[   67.385661][   T36] audit: type=1400 audit(1756171115.959:6554): avc:  denied  { mount } for  pid=1728 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   67.481868][ T1746] tipc: Can't bind to reserved service type 0
[   67.545818][ T1754] rust_binder: 316: no such ref 3
[   67.557674][ T1757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   67.557695][ T1757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319
[   67.850015][   T31] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[   68.021099][   T31] usb 2-1: descriptor type invalid, skip
[   68.027105][   T31] usb 2-1: not running at top speed; connect to a high speed hub
[   68.035789][   T31] usb 2-1: config index 0 descriptor too short (expected 24929, got 36)
[   68.044202][   T31] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[   68.052905][   T31] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[   68.063205][   T31] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[   68.073631][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   68.085524][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.093711][   T31] usb 2-1: Product: syz
[   68.097875][   T31] usb 2-1: Manufacturer: syz
[   68.106034][   T31] usb 2-1: SerialNumber: syz
[   68.150030][ T1780] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   68.290269][ T1804] overlayfs: failed to clone upperpath
[   68.292809][ T1805] overlayfs: failed to clone upperpath
[   68.327129][   T36] audit: type=1400 audit(1756171116.899:6555): avc:  denied  { write } for  pid=1762 comm="syz.1.462" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   68.350811][ T1763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.359300][ T1763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.369109][   T36] audit: type=1400 audit(1756171116.899:6556): avc:  denied  { open } for  pid=1762 comm="syz.1.462" path="/104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   68.491629][ T1816] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   68.577045][ T1818] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[   68.805659][   T31] usb 2-1: USB disconnect, device number 15
[   68.907386][   T36] audit: type=1400 audit(1756171117.479:6557): avc:  denied  { read } for  pid=1831 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.161278][   T36] audit: type=1400 audit(1756171117.739:6558): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.305372][ T1860] fuse: Bad value for 'fd'
[   69.469866][  T484] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   69.619856][  T484] usb 2-1: Using ep0 maxpacket: 8
[   69.626465][  T484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11
[   69.637692][  T484] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   69.647664][  T484] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[   69.658952][  T484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   69.662641][ T1867] rust_binder: Error while translating object.
[   69.668064][  T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.668096][ T1867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   69.674251][  T484] usb 2-1: Product: syz
[   69.674268][  T484] usb 2-1: Manufacturer: 腎捹జ嶦곽簩ɤ脸䤿IJ啌ੜቖ骺孵옛䵡覒ꪤŭ砮ꉓ㦘棾䗍ﳓᖀ兤貇嘬﹞⎕檣팻ᣉ윏召ꃌ㺡晻힊螀㙏扑ጝ꒢筧늘㖟痹䈄轐凥
[   69.682786][ T1867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31
[   69.691691][  T484] usb 2-1: SerialNumber: syz
[   70.130788][ T1850] rust_binder: Error while translating object.
[   70.130836][ T1850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.137009][ T1850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337
[   70.147110][ T1850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.164807][ T1850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.175647][ T1850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.184129][ T1850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.230983][  T484] cdc_ncm 2-1:1.0: bind() failure
[   70.237454][  T484] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   70.244277][  T484] cdc_ncm 2-1:1.1: bind() failure
[   70.252080][  T484] usb 2-1: USB disconnect, device number 16
[   70.451368][ T1890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=1890 comm=syz.5.505
[   70.516898][   T36] audit: type=1326 audit(1756171119.089:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc3b8ebe9 code=0x7fc00000
[   70.540320][   T36] audit: type=1326 audit(1756171119.089:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc3b8ebe9 code=0x7fc00000
[   70.709856][  T484] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   70.754797][ T1912] netlink: 'syz.1.511': attribute type 16 has an invalid length.
[   70.762640][ T1912] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.511'.
[   70.772515][ T1912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.772546][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339
[   70.859867][  T484] usb 6-1: Using ep0 maxpacket: 16
[   70.875421][  T484] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   70.886059][  T484] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.897219][  T484] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.907246][  T484] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   70.920308][  T484] usb 6-1: config 7 interface 0 has no altsetting 0
[   70.926926][  T484] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   70.936281][  T484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.103611][   T36] audit: type=1400 audit(1756171119.679:6561): avc:  denied  { map } for  pid=1927 comm="syz.2.518" path="socket:[14098]" dev="sockfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   71.368566][ T1930] vlan0: entered promiscuous mode
[   71.373893][ T1930] vlan0: entered allmulticast mode
[   71.379014][ T1930] veth0_vlan: entered allmulticast mode
[   71.389611][   T36] audit: type=1400 audit(1756171119.959:6562): avc:  denied  { create } for  pid=1929 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   71.409563][ T1930] exFAT-fs (rnullb0): invalid boot record signature
[   71.416552][ T1930] exFAT-fs (rnullb0): failed to read boot sector
[   71.422947][ T1930] exFAT-fs (rnullb0): failed to recognize exfat type
[   71.438601][   T36] audit: type=1400 audit(1756171120.009:6563): avc:  denied  { load_policy } for  pid=1931 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   71.438639][ T1932] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   71.466315][ T1932] SELinux: failed to load policy
[   71.550350][  T484] usbhid 6-1:7.0: can't add hid device: -71
[   71.557986][  T484] usbhid 6-1:7.0: probe with driver usbhid failed with error -71
[   71.569007][  T484] usb 6-1: USB disconnect, device number 2
[   71.849623][ T1959] binder: Unknown parameter 'smackfshat'
[   72.157907][   T36] audit: type=1400 audit(1756171120.729:6564): avc:  denied  { add_name } for  pid=1963 comm="syz.1.530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   73.199851][  T481] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   73.339908][  T481] usb 2-1: device descriptor read/64, error -71
[   73.384382][ T2014] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   73.405104][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   73.405104][ T2016] SELinux: syz.5.550 (2016) set checkreqprot to 1. This is no longer supported.
[   73.405120][   T36] audit: type=1400 audit(1756171121.982:6567): avc:  denied  { setcheckreqprot } for  pid=2015 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   73.534874][ T2044] /dev/loop2: Can't lookup blockdev
[   73.579908][  T481] usb 2-1: device descriptor read/64, error -71
[   73.645122][ T2047] tipc: Started in network mode
[   73.650068][ T2047] tipc: Node identity ac14140f, cluster identity 4711
[   73.656890][ T2047] tipc: New replicast peer: 255.255.255.255
[   73.663095][ T2047] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.819888][  T481] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   73.949894][  T481] usb 2-1: device descriptor read/64, error -71
[   74.003294][ T2052] cgroup: Invalid name
[   74.007678][ T2052] binder: Unknown parameter 'defcontext01777777777777777777777'
[   74.016262][   T36] audit: type=1400 audit(1756171122.592:6568): avc:  denied  { nlmsg_read } for  pid=2051 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   74.189844][  T481] usb 2-1: device descriptor read/64, error -71
[   74.299957][  T481] usb usb2-port1: attempt power cycle
[   74.646257][  T481] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   74.670832][  T481] usb 2-1: device descriptor read/8, error -71
[   74.681324][ T2058] rust_binder: Write failure EFAULT in pid:99
[   74.764518][ T2069] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   74.771283][ T2069] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   74.779863][  T484] tipc: Node number set to 2886997007
[   74.799331][ T2071] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.800584][ T2071] rust_binder: Got transaction with invalid offset.
[   74.807125][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   74.813830][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113
[   74.824235][  T481] usb 2-1: device descriptor read/8, error -71
[   75.079849][  T481] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   75.100820][  T481] usb 2-1: device descriptor read/8, error -71
[   75.230869][  T481] usb 2-1: device descriptor read/8, error -71
[   75.339948][  T481] usb usb2-port1: unable to enumerate USB device
[   76.039850][  T481] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   76.189852][  T481] usb 6-1: Using ep0 maxpacket: 32
[   76.196300][  T481] usb 6-1: unable to get BOS descriptor or descriptor too short
[   76.204623][  T481] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[   76.213026][  T481] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   76.223271][  T481] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[   76.232860][  T481] usb 6-1: config 128 has no interface number 0
[   76.239105][  T481] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   76.250343][  T481] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[   76.260455][  T481] usb 6-1: config 128 interface 127 has no altsetting 0
[   76.268698][  T481] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   76.277760][  T481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.285753][  T481] usb 6-1: Product: syz
[   76.289923][  T481] usb 6-1: Manufacturer: syz
[   76.294505][  T481] usb 6-1: SerialNumber: syz
[   76.459861][  T334] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   76.508906][  T481] usb 6-1: USB disconnect, device number 3
[   76.518543][  T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   76.619859][  T334] usb 2-1: Using ep0 maxpacket: 16
[   76.630038][  T334] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   76.639132][  T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.647252][  T334] usb 2-1: Product: syz
[   76.651572][  T334] usb 2-1: Manufacturer: syz
[   76.656165][  T334] usb 2-1: SerialNumber: syz
[   76.666122][  T334] r8152-cfgselector 2-1: Unknown version 0x0000
[   76.672471][   T36] audit: type=1400 audit(1756171125.242:6569): avc:  denied  { shutdown } for  pid=2098 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.674704][  T334] r8152-cfgselector 2-1: config 0 descriptor??
[   76.701427][  T334] hub 2-1:0.0: bad descriptor, ignoring hub
[   76.708757][  T334] hub 2-1:0.0: probe with driver hub failed with error -5
[   76.709772][   T36] audit: type=1326 audit(1756171125.282:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2103 comm="syz.4.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd91db8ebe9 code=0x0
[   76.907278][  T334] r8152-cfgselector 2-1: Unknown version 0x0000
[   76.913698][  T334] r8152-cfgselector 2-1: bad CDC descriptors
[   77.077886][ T2109] netlink: 80 bytes leftover after parsing attributes in process `syz.5.580'.
[   77.219371][ T2119] overlayfs: failed to resolve './file1/file0': -2
[   77.256778][ T2131] netlink: 180 bytes leftover after parsing attributes in process `syz.2.588'.
[   77.360115][ T2116] ------------[ cut here ]------------
[   77.365658][ T2116] WARNING: CPU: 0 PID: 2116 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0
[   77.375124][ T2116] Modules linked in:
[   77.379002][ T2116] CPU: 0 UID: 0 PID: 2116 Comm: syz.5.583 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786
[   77.390460][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.400558][ T2116] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[   77.406466][ T2116] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 81 26 ee 05 00 0f 85 be 00 00 00 c6 05 74 26 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[   77.426190][ T2116] RSP: 0018:ffffc9000d777680 EFLAGS: 00010246
[   77.432325][ T2116] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[   77.440325][ T2116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d777738
[   77.448302][ T2116] RBP: ffffc9000d7777a8 R08: ffffc9000d777737 R09: 0000000000000000
[   77.456314][ T2116] R10: ffffc9000d777720 R11: fffff52001aeeee7 R12: ffffc9000d7776c0
[   77.464321][ T2116] R13: dffffc0000000000 R14: 1ffff92001aeeed4 R15: 0000000000000000
[   77.472409][ T2116] FS:  00007fb2191a36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   77.481457][ T2116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.488046][ T2116] CR2: 0000200000263000 CR3: 000000011de84000 CR4: 00000000003526b0
[   77.496056][ T2116] Call Trace:
[   77.499333][ T2116]  <TASK>
[   77.502305][ T2116]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   77.508041][ T2116]  ? kasan_save_alloc_info+0x40/0x50
[   77.513372][ T2116]  ? __kasan_slab_alloc+0x73/0x90
[   77.518400][ T2116]  ? hashtab_init+0xdb/0x1f0
[   77.523054][ T2116]  ___kmalloc_large_node+0x9c/0x1d0
[   77.528271][ T2116]  ? ebitmap_read+0x21d/0x990
[   77.532981][ T2116]  ? hashtab_init+0xdb/0x1f0
[   77.537229][ T2138] netlink: 36 bytes leftover after parsing attributes in process `syz.5.583'.
[   77.537567][ T2116]  __kmalloc_large_node_noprof+0x1e/0xe0
[   77.552064][ T2116]  ? hashtab_init+0xdb/0x1f0
[   77.556658][ T2116]  __kmalloc_noprof+0x26d/0x450
[   77.561553][ T2116]  hashtab_init+0xdb/0x1f0
[   77.565975][ T2116]  ? policydb_read+0x86f/0x28c0
[   77.570863][ T2116]  symtab_init+0x44/0x70
[   77.575106][ T2116]  policydb_read+0x8fe/0x28c0
[   77.579793][ T2116]  ? kasan_save_alloc_info+0x40/0x50
[   77.585124][ T2116]  ? __cfi_policydb_read+0x10/0x10
[   77.590281][ T2116]  ? security_load_policy+0x128/0x12f0
[   77.595745][ T2116]  security_load_policy+0x162/0x12f0
[   77.601068][ T2116]  ? irqentry_exit+0x4a/0x60
[   77.605658][ T2116]  ? exc_page_fault+0x66/0xc0
[   77.610394][ T2116]  ? asm_exc_page_fault+0x2b/0x30
[   77.615437][ T2116]  ? __cfi_security_load_policy+0x10/0x10
[   77.621200][ T2116]  ? rep_movs_alternative+0x4a/0xa0
[   77.626400][ T2116]  sel_write_load+0x298/0x5e0
[   77.631121][ T2116]  ? __cfi_sel_write_load+0x10/0x10
[   77.636327][ T2116]  ? __schedule+0x132a/0x1df0
[   77.641062][ T2116]  ? bpf_lsm_file_permission+0xd/0x20
[   77.646449][ T2116]  ? __cfi_sel_write_load+0x10/0x10
[   77.651688][ T2116]  vfs_write+0x3c3/0xe80
[   77.655934][ T2116]  ? __cfi_vfs_write+0x10/0x10
[   77.660727][ T2116]  ? __kasan_check_write+0x18/0x20
[   77.665852][ T2116]  ? mutex_lock+0x92/0x1c0
[   77.670327][ T2116]  ? __cfi_mutex_lock+0x10/0x10
[   77.675186][ T2116]  ? __fget_files+0x2c5/0x340
[   77.679899][ T2116]  ksys_write+0x141/0x250
[   77.684229][ T2116]  ? __cfi_ksys_write+0x10/0x10
[   77.689083][ T2116]  __x64_sys_write+0x7f/0x90
[   77.693713][ T2116]  x64_sys_call+0x271c/0x2ee0
[   77.698397][ T2116]  do_syscall_64+0x58/0xf0
[   77.702881][ T2116]  ? clear_bhb_loop+0x50/0xa0
[   77.707568][ T2116]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.713514][ T2116] RIP: 0033:0x7fb21838ebe9
[   77.717938][ T2116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.737594][ T2116] RSP: 002b:00007fb2191a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   77.746042][ T2116] RAX: ffffffffffffffda RBX: 00007fb2185b5fa0 RCX: 00007fb21838ebe9
[   77.754054][ T2116] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000006
[   77.762061][ T2116] RBP: 00007fb218411e19 R08: 0000000000000000 R09: 0000000000000000
[   77.770186][ T2116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.778168][ T2116] R13: 00007fb2185b6038 R14: 00007fb2185b5fa0 R15: 00007ffe533d9e28
[   77.786248][ T2116]  </TASK>
[   77.789282][ T2116] ---[ end trace 0000000000000000 ]---
[   77.795011][ T2116] SELinux: failed to load policy
[   79.289913][  T481] r8152-cfgselector 2-1: USB disconnect, device number 21