last executing test programs:

53.086928456s ago: executing program 3 (id=8):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040))
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]})

53.061830137s ago: executing program 3 (id=9):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x28002, &(0x7f00000002c0)={'trans=xen,', {[{@access_uid={'access', 0x3d, r2}}, {@cache_mmap}, {@ignoreqv}, {@cache_fscache}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x6}}, {@afid={'afid', 0x3d, 0x6}}], [{@audit}, {@subj_type={'subj_type', 0x3d, './binderfs/binder0\x00'}}]}})
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30)
lseek(r3, 0xa, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0002, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)

52.916132369s ago: executing program 3 (id=11):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400a00, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @empty, @multicast2}, 0xc)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x200002]})
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x4000)
ioctl$LOOP_SET_FD(r7, 0x4c00, r6)
ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendfile(r8, r0, 0x0, 0x1ff)

52.760480582s ago: executing program 3 (id=14):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

52.580684484s ago: executing program 3 (id=16):
iopl(0x3)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x141000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYRES64=r4])
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = syz_socket_connect_nvme_tcp()
r8 = dup3(r6, r7, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40)
quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r11 = gettid()
ptrace(0x10, r11)
ptrace$setregs(0x1a, r10, 0xba, &(0x7f0000000040))
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1})
setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
bind$inet6(r12, &(0x7f0000000240)={0xa, 0x4e21, 0x3891c50e, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0})

52.444225157s ago: executing program 3 (id=18):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0})
futex(&(0x7f0000000140)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000300), 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0})

37.364813619s ago: executing program 0 (id=180):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$usbfs(0x0, 0x1ff, 0xa001) (async)
getgroups(0x2, &(0x7f0000005e00)=[0x0, <r2=>0x0])
setregid(r2, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67720200000069dd40", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
ioctl$ASHMEM_GET_SIZE(r5, 0xc0046686, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x17, 0xd1, 0x2, 0x6, 0x0, 0x6, 0x4, 0x3d, 0x40, 0x7f, 0x3, 0x8, 0x4, 0x40, 0x6, 0x1}}) (async)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

37.364395879s ago: executing program 32 (id=18):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0})
futex(&(0x7f0000000140)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000300), 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0})

37.252682971s ago: executing program 0 (id=190):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000008006cf8fffff9fffffbff010000800140"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b"], 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
eventfd2(0x7fffffff, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r3], 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
shutdown(r2, 0x1)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="19be562cf984a7491c90e38080543c9e42421cd4552b6739d02bb342783b58ebef82e39d2cf61d123b7ad1d33adec2b60997f4ae3316cbde38be98d79bf0c665bbf7f66c5d7d3cce630000000001000000483acb0f75990d6a46e3312d6ebba79a0aa63e9c1ef92276cc248878a6a7c04a0853263c52057901000000bcc158d65b181acf71ffe8f976c38122ed9160fa802adb5707ac7fa83329f2eb835d13c2317b1d0ae980bc926db8fcb0026ac29ddec346d532843fa7bbbefb019b6bc3daf41636477b"])
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}}, 0xc048010)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

34.2302233s ago: executing program 0 (id=235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x4}, {0x4, 0x2}]}, 0x14, 0x1)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r1=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1})
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x91, 0x410800)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f00000001c0))
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f00000013c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="8eff821236c7c96f9cd7fe69f9e15a875940edde7001d0599a923188353402eb09fb3806b8965ad390a59d3cf08263aa3f74e475713cd1000faf106c61c19c816b8e225b7a66b559eef0d5e44378e9e9d67b3f0587b91e46574c409893b9dabed3c0baafeb9d7146ba346591847adac8f3cedd2356a4750ab01fd636ea510945e628de338ec547fef39ff01c2a8a2dd6dbb0d423e9c3248372dcbb749a5e588861f0e9b36c3e81dd9814b92d703199e148e47bc167b9e5789fc310324f81788aadc2bebe34e923aa6e67834da2265691ef", 0xd1}, {&(0x7f0000000380)="901244e3187caaf45a78ce6faf6438dd30fe79b88bcd10f0e7640c8a845594fcd68afaaa90066a1402bcae98ea64abe27c4add8c8e4cb68050d9f0ff1b41d067db99c0d92850cf90013a189ee62c397dfe40338310de5ed554723d5ca912bec03930d5d1176b0978ce5de85e3d53", 0x6e}], 0x3, &(0x7f0000000440)=[@hoplimit={{0x14}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x88, 0x20, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x0, 0xf1, "fbae4019f3214be3f6d13247df0e7e84e1de320f9bfdcbf14aa69cb8ba59f5c837cd64582b822a6109962266bbc0034b6abe09d9305cbcc7596367130413bc50a8df881d64095dfb255cd9a6ff9469b16d9d58007d4983555e4b46f16b4998f724ee41ed2b7c8dca1107d82993cde0519f5a2db842286d4637f8d5d258baeff21162edc8b5b9cea9454d58665b3d69953d4e8aba22923b3f4692f1d2e398e8b4e402da028f006b6a493f0709539c2311923475e5c9ffae701b06679ed7b025061dc2cacce2637a5b0e1d5ee31478afa7fd07efabcea7190bd7238767e669277b5884d205d58707823094e3c87aa278697b"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x0, 0x2, 0x0, [@mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @local, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x2, 0x40, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x0, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0x0, [0x80000000, 0x400, 0x4, 0x0]}}, @ra={0x5, 0x2, 0x3ff}]}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x29, 0x13, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x6, 0x14, "ac00938cbe6da4052a120d3f3473a944195bbc5e"}, @hao={0xc9, 0x10, @empty}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x5e, "5b32dff63bd69d40f3b4791862bc915c892a1b0358ba8e8d59800d8d6c38539f981a4b55a7cb2f2055e9e5a8de236096c17154308b7ccb4be04a25eef025f6a7af9f6d8d28942b259cbfcf155b2c533dc82c55f60bdab6d287b3696f0016"}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x88, 0x12, 0x1, 0xb3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @local, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local]}}}], 0x478}}, {{&(0x7f00000008c0)={0xa, 0x4e21, 0xfffffffb, @mcast1, 0x3}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000900)="0161b44e6baf717042ea667b889c245d9f68da3af2777e1803f076046603c737d83e8d34a92cb94d8a694caf8eccef2800d3f5657ad882cdfc3246d6970cce158b0773374487bd7f652660f38c30f9f0967226882da880d9db685e1a3cbf215df49565435fc4e22a7c91a0c1e21e1d9e478a675c0f6906d07af0036ba8f042f93ccd634dea60e0c490f223f6dfd1c44ec8aa44b0b0fc118ec33b28992e3128c4cfae858beea33075ff1de51407c5572fbf165b900888f54767c60e496b25fc629b934ece334217ec7f75d1c157", 0xcd}, {&(0x7f0000000a00)="a3691836d54008cb6e8389cdc19750a94b70d82eda4cfdd7ddd3209e27f08f94f4aa2fa8af6692a2744dab3a2fd010514f7475201dfd1237d124db75b517add51563e494c98badbe45452f8ef29f706261d1a9d6f67f231ec62c6c15cc70e4c191885f43b08c066cf2a0a53d13016b5a2fa2a8f2a44f9f7978084fe2665cb034a47d9a7ca92060f5784355fc9a9f4b0c6c851eac9cfc13782bf28e74b6f70995d921666869df6ef9d7d2f2b46ee2b1a95db42f6d8621764505ee9a478404ada12825b984af2c5b71e735f399cd3e2cf72ebfe61a4df1efc607db9de52b8bba53e0d30740197cfcb1838d8a1d68a65d71", 0xf0}, {&(0x7f0000000b00)="26bf28ddde2d10a432a902e66eb7cc1fcb9a7e2262126e66f6b8ff4c4c5d3092ac61fbddc79b83deb620ff5f7dff427bb3e5add4b1414cd43740b73c7a6e331ff101c8a6ca664f222b070ea2f3bc1235003db41e9a1db673b0af72abed99549799bb23b9298efc26a8c605b40f91afaa868b6d66c486ab234d0cc1fdef1df5d0a35fe830e46a0075ea09a6d2c78d8fa6e502e83823c1cbf4f59c5b29b19559cc052c1b91a2dfdfbedd99befcea7446c011231a151669a2f6f4787d2fe2d4", 0xbe}, {&(0x7f0000000bc0)="95222df963238280805d0bb27c521a", 0xf}, {&(0x7f0000000c00)="ee73784bc4315352", 0x8}, {&(0x7f0000000c40)="9b5cfe0c6cacc197482880c9c62fc369544713c3cecacb2f66f5d9a44ce8afe846176705fca67943234f6d3c8544a5fce271cd90c6f958ce307b4d23ecfc223b1a1a092b7a42b354356445c87c4d14f7a1e142a97389a002c31d0de749c42e2c84cd69561522d4cf2661dbfc97e6fc91c9c42779f6100e9075988e5104703d870be1684255a19d10ee78cb4e5c624e57b18b6ddac3ef28ac18c9e83f17aeff7f6ade85d389454498a7", 0xa9}], 0x6, &(0x7f0000000d80)=[@rthdr={{0x18, 0x29, 0x39, {0x33, 0x0, 0x0, 0x4}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x4, 0xa, 0x2, 0x20, 0x0, [@private0, @mcast1, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x73, 0x6, 0x1, 0x81, 0x0, [@loopback, @private0={0xfc, 0x0, '\x00', 0x2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x14, 0x6, 0x2, 0x4, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x128}}, {{&(0x7f0000000ec0)={0xa, 0x4e21, 0x6, @mcast1, 0xffffff81}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000f00)="2ae848cf3284f4737cd3ddbc2f339939917ba0a94898a29da40233c5e6e553c6a6615a44c9815a0961114ff0845057d53d1e35a8429038732809a6d67be765b8b30c76e430ca9aa9bf7fe95eed68b78b8aab8bceeae79e94ad41fb1dc332a73b86916dde8a027a16c425b93d9f48b0bcf1f4534143b35c0db5357003ee7801b03cc0bb4df01bb737c993ad12a8ba4a0268d40eb734b63119b20d67a4a924f70bbf876624c484634c5bb63ad709eecd80f9200ff26a3c55b345cafa0a47a73108443270bdc986b7b51c1783494421b10f4104c3cade811c0048e2099924fe25edb098b3b252290090b628265e", 0xec}, {&(0x7f0000001000)="6d59a1cdb6581b5a9fabf474d59500de79844a0b9acb526b0a38bfa5f3ab36e248837210c898f9b3b8ddd01bf17ffdfe6468f771794e95815185eb199acae38ccc0ac9b0c7804fc6ff0544821d804a49afa46e9a82cc2f8c5baf4223b001f52a180de971bcacad18afa060612c0760f2578e4ec9", 0x74}, {&(0x7f0000001080)="abcdc0320e6574d9557b0aadf249db22e977a88eeae1b79659bf4d678de19348239a95c016d94543199fc02b39869b4d7d068e7b", 0x34}, {&(0x7f00000010c0)="6ca972ae819ef6f64c6430981cebec7733693ba466d1b16260da55e6a854bae1fc7a72b10f5bb4ad843477ee487bbeec5dc63b4fe1731ac913b7f6cb950519da1dfb88f750737447e8a27abd6600c0296b370030864f7717ae68c1fbead22cfbdf3294076102633945d395f4d03933ce7a8345f54c773628cfd929c17cd8ab131798074c71b8d3e8aecc4f0165d1ff015644f42226d11d4bfc774322d4999ae13fd909183fa16e166e7e685931937a0c865748f60de59ad39dbeb0a4a4e1ede688e2540056b8a340a12094837e1d9060a09a83d32ef7113058d150d0f3f7f54bc7a0fbdc65f1bbca352b4b88", 0xec}, {&(0x7f00000011c0)="310f6c97de8210cf71cbbb4ba33b9791c0aafccdab36106a5136f73d8678d90c84a4f7331e395088de95e01272943aaf1f1e6ef0cc11455bb3dc779e7ba0e6f40392b96b6604519f670a92e9ac5f4b6937ed0d03fc0a2f6436814b818a79a8aed3251f635c0607a82a78015487240a", 0x6f}], 0x5, &(0x7f00000012c0)=[@rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0xfe, 0x0, [@private0={0xfc, 0x0, '\x00', 0x97}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x6, 0x0, [@remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfe}}, @rthdr={{0x38, 0x29, 0x39, {0x61, 0x4, 0x0, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0xd0}}], 0x3, 0x84)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000001480)={0x5, 0x800})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs2/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x3ca)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/188, 0xbc, 0x1, &(0x7f00000015c0)=""/249, 0xf9}, &(0x7f0000001700)=0x40)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001740), 0x4100, 0x0)
ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000001780)=""/229)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000001880)=@req={0x8, 0x200000, 0xb, 0x9}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001940)={'syztnl0\x00', &(0x7f00000018c0)={'syztnl1\x00', <r7=>0x0, 0x29, 0x9, 0x6, 0x7, 0x3c, @remote, @private1, 0x7, 0x8000, 0x48, 0xb7}})
sendmmsg(r3, &(0x7f00000053c0)=[{{&(0x7f0000001980)=@xdp={0x2c, 0x1, r7, 0x3a}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a00)="d221693fc35f6fbf335e38fe6916bb77048108facfb47af9025f8dd933953c774476286f76de8e7a2555a9e8dd16abd5b2adf7f43089e3c357b0a2d748634154fa3ba91e38043ea1e301a9f10e51d5b6183912b0b7073583db93d5a01c2eac22309f4b3f282da2b5fbe9eb754b8152c1f5369101a1158db0320c84bdb347ad44e5b5eca538ddd850b654a0f662ca34f431c65a2ca9253128adfc804c059085dcb048d72cb00a25f0496ace7386bed91b90f71c9da0", 0xb5}, {&(0x7f0000001ac0)="e9be377768f1d419dcd425c6a75c314bf5b105bdaaae3866c26f", 0x1a}, {&(0x7f0000001b00)="2c1316390bae7d7666612c9d9936c6e0fd0271a940d04c61155eb2c3c6aee48c93df6186b4edb2585d684c010c85ec55b7c59c001822b42014a6fdd99bf2cf06d47ec15c28b836640786580563860b76145dc0a0b509e4151d23fe501b0bd235040b0085b78bdb77e82baa8f2d6b07faa88fc0c256d70d65104fdadce5feb3d554f7fbb84de7418ff6f6b6238f3498339ed93b4065f776e59d275baaa439c5dce788c232983d0aa2b203f14c528898d494fb7197beb0ab6876803ef13542bad46e6ea3026adc7af30b5ec90fae5f2811a4232f1c3ca61bbd78a106", 0xdb}, {&(0x7f0000001c00)="f389095232651f3bb0df53b07df425322cd9b195ea0cbdc51fd9439f9bf87e0ff76f93dc04a16a895649f10cd9a18bbbebc05bb09795308a1af8a931898cd3c1aa42bd4bf245584e5864a08a8d6e34b1617839dd0fa0e4bcf0acef5f3def003c7c1460ef961cc7828b26690951a2966a0fa685b886c1c56c13999aa6f94bd7b6ad35c3775103beaad60feaa2930002fdb8bc9c014ee10eb21a3d9a6e4d2fa0f12024e5bb", 0xa4}, {&(0x7f0000001cc0)="05a21bd5c521fb4624c11344142a5af14c50584a6efa372b89044dad98dc9acd3f2a0b21146cd2d214afa36b61ae18dc801a214e87b69e4347b822b85852213a95f90ea9cb7b7a9b537abf130f52a5ac5bebccc8c27702215e16304727ffc3f2ddc2496a9bd2a5053ecd202bbe4e1b509487313215a5b48626d4416761c8f690", 0x80}, {&(0x7f0000001d40)="86888450e52348d447e493584261eb207de63e9ffbb86511f1835d94167c90aa7d86e2d164ff72b568ae945c13cbd5173ebb1a858ad2512c6054c6ced85b24e180093c1114c6e4d845abe54722842d3a5fcfccc06e2c463cba9cf1926f43e279fac64492829e", 0x66}], 0x6, &(0x7f0000001e40)=[{0xf8, 0x1, 0x61e, "894b9cfd8803cec00a78a6e6705ab58c47d8ea82bb815c3525b6c2d29ebdee152b96910671521227b058dea2735dbd37ff19aa6d3891a4b254482f206487dda54ab4af6ce765a3b7f8034df816e4094b4161b1781ba8f848fa095e83a760784e28cfb60ec89f8dedeae1c27fe50637ba91b50a826764ba68c26071c54577deca1ab4a9eef1e6595b3739352361f73d1ffb683dd8f986a73ce3eee7c57ab993a0f8b743ebe7fd35bd54f77f46f5ecff24ca093421a09a3a3139094c8440e17658897c089a13b498c3ab28c7bcb040b7b7ac02c24b608493f73468801c01ba210c3678b54a4d50"}, {0x70, 0x6, 0x0, "eca1ec5131211c893c8cab835317542ce055f72a7a79e02b6fab76fb0b990a105ec328ab9d6cbfbe6dfad7e3d6709631a1a7c7809e8203e85b8ec014743427fdbcb14e18c736bf25c14affd7ee4a146b6dc390fc70f73c7ac2"}, {0x60, 0x112, 0xb7, "f517bef592729b27b6d52a70271c1ab29bae9b64d0ce807fed8539616de4e169b9ebdd45354fbdb610903b073f4ee71d35a3e574e474dd98188c8e6e86165706ce67747d85c0ebc2a53ff641b3"}, {0x78, 0x101, 0x2, "3f150d0d5f0bc79691935920891db9f748174b1555113033e49277fd7ba4a41e29451f4479b53a56b664491ff5de3d6d7037678cf913648a42f1ff0b5ebbf1046ce7de69e17e5c48a28fb1bc9a4b0484d76c10e26ade244ae5489ead34ba128d55b8"}, {0xc0, 0x115, 0xb5, "679181966c5c3cbf17ef7a76c8e4a0ed0314f4eb377b0ae753acc8c1073022bb5e8dd5e3616e3a764d40aa377aa29fbb11436a70e9ac17a5f8b18d4402476630db4f1ccf4d0ee1fde33d001cb622369b79e2f5dd431c025aa9d79b0fd1d35226a36d3d6e03b0cff37455347be19c3624d8c31b74478f54b2ad8679c1e8f72da404d96575bdd6421df3fdbcaa855f77cb7dd6cfccf08057f32cdb38f37c16aaa91161c2b76336dd151a8f351e81"}], 0x300}}, {{&(0x7f0000002140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002780)=[{&(0x7f00000021c0)="989efb3a5ded69e99508103af822a32c3d0fbf80582a029f64ae5662f436ec5e11e92ee3fa45806bbeff87d62025694346d84c05b41a91fa71d791dbeb9fffc4e41f79d7b6803e526ecc10a042eae318411e51f0de0b6918d2394e185ffe0a78730d6efd4c200a05cf15f76df3c031a0fc993bd54f69f3cfe6523c4d0f26c87f62c7c1b62e4a3f655abe9dc9020fcf732a6e7072f3dd2ce6", 0x98}, {&(0x7f0000002280)="acd10aa981aac0db231d0e7f50528b0fe4c3cada485a9ff72d62133a18a2646cbf611e0b3b8cf3a0a2e735fcc60e30e0b453e5ae1e7eb53caa3617662440ea0c1ebcf81b40f3d4697bf2e966a58da4f760a7730ddf77e68ee0e77929904e47f1c4a4c1f6834921fbc779520a53af8ebcd81c1948b1ce3b846f1ed1ca010221977ec10e79aafaa5843d061916c444a3a49816b5c6e7922d8a7970b4a7bf80cc0de6e1e7bbfad79ff9d6226d11da12bcece6ec1cd2e3575c1df57c5b9f68988e108a557d41997c8a3e47cf1c78da4f39c5472bc3894c6a7319ccb93d2577edad", 0xdf}, {&(0x7f0000002380)="5009d430ae56d62054eecb3cf634a72c3470adc70074f57141d7941d72857f12079b55016f23b31f5b6fad7d55831c6be9f923f773a47b112022743b8a0619cb1777a30a61d01ae8c1a00ffb03d3a636af5fb5730695405ef8796737f7ddf8594b963c6281fda2db116783f48df9ed1c9f351b5da9f79f176ccc5b82d0c1faba514ba9ee48bae0078ae667ff52f8c1b818172afe2bbd32ec511625c8f71e108ac9a0c173b633b11322aa3077bff8d99cb40c36558004fc0883efe5903524fb8b4391ffda0f44352381156a77e402ebfcfb77f11959e3fb23bf0c0f5be399b84780b56a8252967ae2e64534", 0xeb}, {&(0x7f0000002480)="09acf9aa7ea93c0b9672d1bbdd88a69cba7e18229a36985614123aa9e4777484a0ff55944fac7db40af0b24f5fa2ced11f462bf955cd40d82b76af9346602e12c76af51fdd74535f02bf897341e6cb6ee21b76626d316570f09c1b26f28a32f7fadafcb7743c45362084db9186613851e2cdfe2ec27c34bdc38a9d5dd425d4c1df0828bec0aad2f3f08007f851aad339cbf8c520e0db39cd14ae96bc1fe791b485c49599a548e6751df341a389cc6b1259dfc353a31d9fcea467e9182456a8ac71f639e81f77af60", 0xc8}, {&(0x7f0000002580)="47ea1b83deb4d2b7f5ff0bbefbf7e66e297c8a8795cc6e992209e568ef2bae4d1264b268a9a6acf37fc11214205c4e2d12bc9d17bcb5d28f3283a606c1b44bade747560727891826a3a4232e7911af899600812c3eb36f44ffb4c8c111c6c8baf929b0845b6687ba506befa554d778018d611b8fb5be3c190e50", 0x7a}, {&(0x7f0000002600)="548615182bd471b86845ab8f9c67b39b2e1e3863c37aac1399a6a4c3cce04a322a2ec29313a0090ce34ae3d0e822931b577472a6ce7d", 0x36}, {&(0x7f0000002640)="173eacf5c3f12a2e0462317b46ab54d4e7a47ec02fce86134befb575a62ef0a5b4f2e818537fb5df35d00af7a9eeab809c3b38a30719015dde94519e8d9f1148083f79c7a9b3df2c9ce150501c33a105bd8c754aa074523b7b31fd3b781471fa5307d353a8035d1363b2c9ab4c4c82501dba421152a049f6b695b411b7", 0x7d}, {&(0x7f00000026c0)="bec41e7dedcf470cae6453dab3bc28477f7250a539dab8d5d7f6dd5f074fe1c33d245cf825282a82959f6e2735a627caf60143d9c40cf63447de24710eb3705862ffab69c4d3a177968511e844b447fc3ff18491a24864183bcb4a89d49c7a6561", 0x61}, {&(0x7f0000002740)}], 0x9, &(0x7f0000002840)=[{0x78, 0x6, 0x14c0, "365e4464d7a60a8824a90b38de337d65d69e0b09c3d1489c4fb626a8109379369c1ca0de98a992a95973bfca0781f3138fd0459cbf309c4015110b1c175f197dc47052fa5cc2942aa1e8857d54b075e83e398539701ab3d7de81df473602f5fb67766ac9"}, {0x58, 0x111, 0xbfc, "7482a80fb2df6abf74e8ae8c76170ba920d1b13d01d246e5b6608bf8c8be3c38591e807cc903092412673c1dbb74aff6c789a9835f2d1e806791c8559a44814f1ee1f8"}, {0x38, 0x103, 0x5, "2010f0be1cf9afcb729664190b2942b338a4825943d6d9b75a1c4be1c1be7ee52f"}, {0x40, 0x10b, 0x727, "9864fcb0c52212a191fb26928b05944e675285f99696da9717a8cad6d6b17d08bb76fc27fe5e01578ee4"}, {0x100, 0x29, 0x7ef6, "d7510df23fb76145646cf1a2b5f7c47d0362c1b86b59a3e9a7aebdef7eff82ab4853aeb7b0e0e34064b0ee9f148d70639e378433694d3dd2090495aef7df3e984ab65c991df32cc5e726967bccfb75fb217ab2fa4ead3c7deda3a7b1c1f8e929d6ff57945ca88c3b2e41554ddcb4187b9fe9816f821e5967a5f9269dd18af7ab208e120c499dd911effce711904617a5dd2565eaabf5b2323ca7d6c0b24d595a0d55df57bb4e86cc6b143484c2ba6a6946311c9050a72a5dca8caaee3a366bfa80031918e0695fae8ec5f2de54f883f46b2748ea8cdc17af055039d4a7a38219f073bf64b6e8feb97791d41a"}, {0x30, 0x111, 0x3, "8b4115b2ab440523cf0f0afe3ced3172f10ff6c431449c1f7f69"}, {0x1010, 0x102, 0x3, "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"}], 0x1288}}, {{&(0x7f0000003b00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000003b80)="d8042f85bc08f550195c49ba06a10c182b15e4877196f1990d0716c43cab04bc39113218e9de10c967253af837f9e7eee809061c4f1aafcc7452c4eaf1ab8375ee65dff64fd18efe6edfd43569776aa26f1d1b640bcb2918bf2e4f8136b2c9a53129a972bc49dbf06e681c5f18c332f6e700fca97139fdaaf44f1f3715aeda49387090ab6af488a072471188efa908ff5cb36f29809d557e435438bfbd0ca6f438fa4ea41d562b82d66d9036ec944efef3c8daa817acc817d7", 0xb9}, {&(0x7f0000003c40)="b96229dda7f60292b5468c2e120882f5a26c6036af41eddceec1664f8ca7d96d4966522927d5deaeb620f49c5b271c745d427ae2f1c2589e905d2e0f1e88c4583b546f3e2c541e34faa60495743f90ee05b298f89ecdacf030f6d9cdac869c783e16d9365ec3e129de543c3d08a49b9bd90aec83b09be4415d97ef66dc421397bbfe306ff214622ec516fae71b3c7edab813c15c887a3aa98dcdbe0810305f3122586272fd7658d783b123a8f627121e0775d668c21d4f38d81b6e28a197b8f18c884bb74a0c8b04b183", 0xca}, {&(0x7f0000003d40)="1a5c52e71f4ca39a0fc41861c3da3487a5573983ed02eb0e610fc65c03d907f4b5e547b85e20b8c3c0740fa10bd9c0dd678475343f0681cfdcaf7b022668c8c8e8c0ab348df6104cc5837247db9e3911d8943331d9d5548debe80f17435d353e3c5c6e8de2337017c3a4ac061ea3d554f4157976a195f6682788cb5a561633403a61f0004386a62ce3ca31756bb1e6f241f16ed36d02cfdb69b9690c98d8c1eabb2cacc244bcf1484609839cc2db8c747c1b36236f7e82b9b7b1d7f5cec9ea7bbfc7ab82ba2cfc546249d3a52fbbcf2dfa11ea6acdcd9a61b800f7b1821ed8645aea66d22e718d87e2fe", 0xea}, {&(0x7f0000003e40)="4b31b00cec4fc90c310f79f5353817e8e5d54edb90efea747634c15129db1f614fe663af044dfe6a943b09790614e9f0c149145bdac0b1ed8f71082ac61a92851b983543371bf9820351e26c3330587dfc4829f9c69c396635ee82cc8521b5ffd15d17e720d55a0fd72e81dc70ed67cf7c1181226083dc3ad93208fd1469ad6dc2a18976fc1a7a33d66b6a6667c10232a17943e42b010dc4a088be42d0a078236deecc4f051b532a202e9d2e768078019ac3ee753694da33a4b110c846a82b72e76468c4287612146de3c726f4c0a3905e37b390f079789e5170441255423423dde7723f180200f1f958517296447aa9c42f0fbee8169c02c56c680da831ed8b50cb5e01d2297cab65cf51690cdc1daab253d54ba8c559b58fe2ab5e3693d0074fc21862734cee1be36949237feef219496b23e189bc61bfc71db6432393e1a7f9d17a748dfc1914608ce8610249ccb62e12c048623e91d0eac56f31a50b4cc7a69ddfe1ea5324851d7ffa0ed037a5260fbb77733907f5a6b2713e46f4d2b1420403b6d85ce470df25e89317c4706c8674b6566fbdb5789aec9a2cdf7509cddcf27fe1c75a5f4114466f646ebed2c6e0eb36d68dfb39a8493a6df320a1bd5c163bab9b82a9676db088329cf9d85eeb88a725a1c532b558468485a76cd3fbdf4665b22bc909661b0e94ba97ccddb0984b571e22d42f18468698253b1ca40cb02b8fb770012cbc849ed2a0d62176b5c9c64d3b868bae956d389dad155aeda89ef93726cff182cb34d83849995d362b6299f1ca81df0ef5061a1837cc93f7241eade9766534ccf4892e5a28d5b63ad51600805e2b65da5f2b8aa1e76fe62a70be17e7de1fac982b4ac3e064bba46abcf4319cf5796fd0d5c79bb9dfd024e9ef98f40d736b7bc138728ae2bbeb455adec3728c195f91980ed2ff502e125a3257f6881eaafa8d8ab7377becce076010cd86c9241b78a86393c67602c83cea9073d1973e031df66255488078bc4a640e088cd828bccefb0686a147e2912fb16285cbae2a309c9edfade92fb2efeb0f2ed62d81c0a89756ca172bbb9653fc676c55d30639246d27ef824267b53553b19c1c0e4aef7e2da69507ef294fe3681cc9a127b02ab6ffae01c1a9db1c64d40a1a9038fd30ebb7c06bfa6a86487c5bee9f6a4f4081640999e20ee7ff726aaa63d771cde3dcf9354e4b68f64e9ac3357ee8286067cbde5ffe8e570b905af3517bc2471a706abd2ac772f2e1d9a58cc3f1383bc343f3b557ecbbbff0ab0402024f12db09e1603055f53822f839a798ff0ed83c86bc44068dec8eb122328c388f14a3fe0d259adff25ccc1c8822415b00ac6c5c942d6703fc62fb8819e4f5fdd60c21359ae153b57757fd58fcfbf1b7023f37bf4b91dbde952ae07665c72f75a8f422cf0b4064819f59535748d5c9dfcf6018fbb22000a270f2b50b2b722bfbc1bb393336bf3d0fb1696198cc7dd5a956f46ef83349f68a01d60d03b7785cebdc407ab52acfd6cc7b31645a082e60c3d0a706fad79eb05bb4c1278708fe40df49389e38b5a75ea33939b229958024ae864e6f889d5d9b4cfa610ad006c9ee70e4ac33b1eeada2516a0e93fc8fa83e704d3e23614152963aafac93a7ca19223ee9f91d9ad4b50e759565e2c1d908e2d096f9743189f358c56521e9c15152627c4f3ae3ef3c061a706b684bba3cc419fc1eba846115f404b98b8a8816e06987fc006b68608e3122e072cd37c323d2c3c621c0fcba29a854bf31389070e2deb7ddfc5c1dfa32d7aa3b702e39b276b5f641cfdb4b18572aea5f0f2a118bd334a4d040df2e9fc4d63b784ad4857b822e3a67e5512f0bcb74c25b0614bea91845391f0d64fdfbd15b06c486085daf4a99098b9c3fc646645500726a5ade4d89bb1d4cd2fe7e347b984747b27fd853439f523d47b68e723eefcccccb28bcf4914ab5785f236b7dd38cdcc8f28f68faf956ac578dae4e5b621963a2ff6ccf3dd7ab0d137a68ce5c5e723d4efb1ba7fd2d13967e2d88636dda5519180e7774c9c14c738d336d6b421465ec8d13b089df10eb1697fb3762445607e57a6efac0574b96b76a77e1019fd280b22e80fe7c69f085f54aed39a62ca482e67acd2e8c286e27d5c615339c069c89d8a9b4695b88aa8977b6ebd599a4b777de3827fedf5be403ee865673d9593ef109dcbbdb4799ae1490a47dac3cc3cc2bda38db455c9e60772b11740786caec1f2a3ab2046cbba50afc3c5e4524488dad3a9bef667fc276790fb280be0fd186c9d6a0ccbeb22722539aecadebf930547b3ab739678b04c56e9a13f880e9c5317bff7d352cc1887166f30c6dce1c9ec7c916de9f00922072554188980864792a38e6dfd463c6d76b386fddbb8162a6fa0ecef10f22a2affc6ef3dfb7cbc0191439f95351c0a10949e6faf9dba2f6089fafb1e6ef1d8190a9ff5cfa442fe951f1f8594f8902f64fff890604a99a4343f168bb61db13a5478313c4de430ad47be1b3f77bdfaff0663151f76bbf8a6525f9f54f3dca9d2aacdb0c06c6f0cfc4d5aad2e749a173b81c1ffeff0d40dbd5ef4e42aa946744f227023510910fe60dcbf5ef0c4d0513087f71233e4cd171c2b07241de5b7343744f995ce7f9997c40572037e8aac92818f6786dbbdf8dcbd766fb7028e5cadd49855bc624dbccdb8abe078ff4848bbfe30d32ffd68065288cb53af3d60592f4d6dacdab8601706acaedf9ce8d9de6fcb0ddb97ce1dec85e4ec9ce2baa5039b3b15092898441dc39b5de3f41568070e875e54e4eac3a95453dff09e005c57b0db53254ff5f5a1d4620c9947c78a47658177be65556eaa9938a4b6b559a59bc5840cefb0d9d816d77f7a1b52fb7b67d8211d25a1a91f267a777afd1fbcb06f35479b2b2a4de2ad92bcc7a8ae58363ee547d3b98f1a402fe53131add904d564461ca03b2d66977ee427ba77000712b92e3aee2adf880fecab612b24ddb69d97b913c76a747e954806d775e3a4aea92c4cecb1ed81113d3ce3220f7cefe7010a8a983fdf966f3115267241658044de4c01177f79aec6ba188099f57eae1c8d0cae85e44845e114a87ecf278d4642e890afeaf7be4c9e7e54695b3579b346a7c0465bf2756c82f629dd72fd592a5cb770eecdad4a42d76312cd66a0a5a79f990e8fbec3a54e962a5bb7f0b6e7b085e3bf23d962799470bcc293ae4e892ab5b18a509788ad128deeef20e0cb58351346ebd8230ac066aea5802d01ef1b08420c6d91f310d414df949bd28c18ce8ca4e1dc6945ec298ad9eb9cdcf336c293ccc72806fe4263af5ece831e7a4041336e0d6593ab1ca8db8db121231856d102b624c3f382a31f671d7c4099e31f466445749896cf76dc79eb2a9dee59370538a88b530ef7ba62bdfd703a29207cbcab647118361c5a3fbf97333ed285772590399b428b3397a2dab7d7b8796d49446f62ecde4d268cf67c3aae2bc499c64bab3bfa1cc7f4e49d8ccc3806187ecd38e83de33a51d5c379411a8bc2d753e2b45bb8a96555871359bc809430db794719a4ffe8550cb081f3a2a69c7cd47354562520ef02fc91763d21f497c37f327deb61f49421455e63107b207a64c41d7dbe02ea16e216ed3c3368aacc792b8ae5d33070491ae4f05805cee888f8efb28ca6dee90ca2b7bc7b2c1f808bb00ee99c8e8a2e142ca98ebcb7b90e0967bbc32105aad8f9c2e9a09add72a3a488a09d33b9cc7e2dfce510b854b87633e6b814d02ef314a4b9d021eaa12a5c98cd4aa5f1d56d6ed7709ad2b1498cfe1d557b5ade55b170d8c724e64787a6570627668cfc773ca2f2c98d695e672ada947319a482170b0d0aa5f21490f1751172a5033a8d7afa4458470989d265aeb9f91b2827fbbd2fe9386dd291a559d8823fa24528b962f92a04ba8cc4f0c22066a914cac0e7f536220c86dae0f8d7d4b74f0b3c0c009a991dc18efdf45fc2db9049012eb4ac312209c4da8d37c3dfa3615a47e7c166a80aca6b05afb4277f1adbcd99dfcc309d72d98ec8c9b8a5969be93430e9a6aa3d3cb298308c2a260facdc531f5e5d62b7344ba864c4223bcf3597fd3a48871b6618f1c4c1f5f460f18c2833c18a8fb84c0bc8dbcff005e4cd345d121672d0d35cd3e4f11e0fbc5b758b05f965c0816895a23496ee7eed4650a84b712bdfcbac01b3ced66c72319f13155778394fcd5dff3d5176e64c2088b584971b2e6628eae66c7f95a16568f10adcafaf510e3a4fb61375a7574ec3fc90632ef4124ba4e4972191017e7a3cc164f11bc10227bc5e59ac947c8fee1477db79f81f22720415576822f049bd57e7750282e303a50247abd6932a9973d291dc8f13a6617febfd946f154416a040b114fa2f3431abca75c250a42fb08cc31dd40faf0c990326e5d58d6b3e8b895bbc483d285618a43dfcdf6e1bc594d1f2575804349fc251dc38d4bbc86cfdc32742a6ffa00cc147c6352e402fd3ebaf2227c9ac48915f5c7062e8cc44d3c0b0480bb3a5bd4601d8ff77a245d097b8da7ad87af606c5f85f5d0ff2b3b651306d2b94ff6ea1a33ceef0c156eabd81c00d0d0f11c6b9e018c683771a6d6b4e5bf6f485413bc88dd3433647ee0b012965d3501a1b67756cf9f6f01fbd24eae64239f00d798e70846f6d1a0aa607fa682664c1b467bc0743279f24338afc9f6df9f94c7b92a60e7b28c7042b105472d8e26e4e595c867527f64e227d41f02eda241356484096782ece996ba91d8da77326a8459a899729d1795a653d7efc556eac758d854e4ab8b3d769fb1c2bf789e2097c8233810f8c339214b4d885ed2f9ab38921c532e84d35be86fe0d6aee7092ea358706e60849f7f482be7e4fe8ab3583afd6a142a569d2712b8d0de5c24b1dad7955eea79ce9ee3fa8733ca464de1113d3008a754749261445c214343e6c1b2562a8eaca976bdbfbb40a56da48af8f77b47dfe8b49fa7b7aa87edf72e3492b4e61ebc1b99e4ddef0a416931bc30c2f29222ec5951150eb2d7b6f95b1e1bbc9652f7040b5b4ffac542b192bbe64de56da67f3e4c9cf343092e4fd2360ec7375ba1a81f1f039c13cd151a1ea879ffa144e5b5f5935fc35d636209de880b7978618e81fe6ab6f8a9a7a737df2cabe8f15fd5369ba9ba5583c0935b8beda1368e54cb0ed58ff3659db25db7f42744ef7d39f6164074603f29fd8946c50af1917c90e962b0e44468ebea5aa74927c702297432ae6abf1153c7ba3cf0870cee4086bb256cdaab0e1a202d59801629b40f0d6970925ae1bdff2f2927d95529ac02a62e3063a588eb9e71b77f08e96c00cab69de5ca55fda7aa42d23c1f928a70a2c9b3ea9ec47aad3eb59d7eb1b67abc7c709eb866d9f7766e44fb7f02bc8d8fc5ab509a40a99cbabe7493a8a7b62596842ec3680b47faf67683c9b54ec60067be69e63d77715bb73af4cf7166c0790cc3acf7cbeafc33dc8c7947017999ff598c95fe79e656ab0ab692fdd36404b0d7badd9c008f589652bf3f9f7947e23fab516b58acf17d17692f88fdb2d6933bb697152ee893c8fff0db182922a069fa6e727ea31edcac08dcb3be8de0b11ae40ddf33bec64ee6b94cc755d481153821013f3593f98c570331ae6b5c608fc776d2452a4d13fec0bf569a5796cd0b43d5a15330a53293cb6bda803950747562b3fca5aedfc04db6d40dbefa5a2660de97540af859f65539b68146298bfd2303911523fa04b055b2eed04b65c7564f90129f6d564834165153c615513f82b2cd03db70d6e880a2e8fe114c20b9efc9ebf90c58", 0x1000}, {&(0x7f0000004e40)="f6b8f170b3363f095abc6a8b5fb6e52d1d6025fa5ff19f575f5eefad9f77931587059618ba7c83896bab552f1b7f27216640a8c018696ab3ccbf23cc94503094059bb4e64c8481510b03c88d91be11d8ea3e190aad38b64c840ca202eef2b7d608b2cc9b04a92d444148e2f910b66358136f0ccc39162197be3a255e8641c23fc4b89cb2f56ffc0c6041e40af39f0aca94351259b56ffeb8ec7d69ad6199f65ce98eb424f34db54ec13288c51f8d27bb72072caa037ec3973a805444783698417132fb3df8a955017087a69a7d7e2a0860144a0a4801657b8530f2d29bdf20708b00c109f179bf486c784521acd7", 0xee}, {&(0x7f0000004f40)}, {&(0x7f0000004f80)="f53f7918d8db7906819f074b262bd39c82039fc1d936ebc3c2f61b4f43f3609bb386735e9ce52c0c5512a084f2970d64b0fd6f510dd91a6b1e3d30faef7f7c045db5fb8646f83a1bda6b1968cb03fa6635ac12", 0x53}, {&(0x7f0000005000)="56a7fb57b83bdc00912b691639d0170c6a87f778fc894946f654ff7daa1d0dfd1965afe5bda1d23c8f58144caaa7dd41a16f8f0f304aafbe79c25f36ea859c6f11e03b234252975b0b5cf195e844eea0ed35754b4cfc48ac9f41e1b222d44b283400c28f828925e87f8f3d1d6f55b7bca1fa43c3ab03677be3df69915e74b11f8d337836fce6282b7fc393cc2a6a3a9189e6cf1078b6606446f975a561f543fc0337fde9f31f314a575b618846ca8b421a985252095aa5fad28f8c46b4ee7b8bd71eb561605502fb389197dc2a00a0708af6bc1ced7088f975a7c53e8496622dfb500759c3f536e06858c97753bfe12078", 0xf1}], 0x8, &(0x7f0000005180)=[{0xc0, 0x101, 0x5, "5349d3abf2c3ecbc50c9144686ee9bdbfc63fdafdd8045aff4cd714561a81f948d8297ca3edca619e96f4056459ed4097bfcabb8dc42fb45a6695549d498d615533370bdeeb730978a577f912cc9e9b644bf3ba6316bb747ed4b4158e073e6f447b72d7ff48723373b61b64d7a98ffa7e1ee2b22f379658b3cf18483386b61b19e9ab5b1b1a71cbf7273471cf68a281dafd77d14753b75c19fc5dd743290d88aac1e9b7c85dadb0cec73befc69"}, {0x58, 0x109, 0x8, "dcade56f4aa816d707fc13073926790d7c61d1a5d60d4fddee6ecfd050554da3d187fe39303aecde9a88460b0775e6254e85d303bda82bba09c75500972f28c94ef6f8e959d1"}, {0x50, 0x10f, 0x5, "5a963bd0cfb51089cc50554bfa0e13e72366974926b07511e827c0a5f9cf88a2546924cbd407bc7ab98fecdcdf6198b0f7d3f053b5efe2e39668c9f60c3deb"}, {0xa0, 0x109, 0x9, "4e4b29081ffb9a85beb53e3edb53a89b6636fdeaa793477f77aa6e1a44fe00b23e25f7f0106d7d31b6b5ca24b50ca4fb53da08b01a38c7cb4a99d0e3123ef33f0945c0e1f1cb7eeb36a753e010c58cc0b7b837b78d0d1cab21cf0a1bd4c62b9a5411c8d1d723b88bb4a0af8b48a976a7ad6bf3547c6cc52c75ac68186c8ec49e0e4bfcd27c75f745b10f676cc38f"}, {0x18, 0x108, 0x9, "c1ccfd645719"}, {0x18, 0x1a, 0x0, "ca8dfd802247"}], 0x238}}], 0x3, 0x810)
ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000005480)=""/155)
r8 = syz_open_dev$hidraw(&(0x7f0000005540), 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000005580)={0x0, 0x8c5, 0x8})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000055c0), 0x20000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000005600)={'vlan0\x00', 0x1})
ftruncate(r6, 0x6)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005640), 0x40200, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r10, 0x80503d01, &(0x7f0000005680))
r11 = syz_open_dev$mouse(&(0x7f0000005700), 0x9419, 0x10101)
ioctl$KDFONTOP_COPY(r11, 0x4b72, &(0x7f0000005b40)={0x3, 0x1, 0x1e, 0xd, 0x14e, &(0x7f0000005740)})

34.16153463s ago: executing program 0 (id=236):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0)
write(r2, &(0x7f0000000340)="41000000010001", 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0x4a, 0x0, &(0x7f0000003080))
syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000)

34.096276342s ago: executing program 0 (id=237):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x4)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x80001, 0x0) (async)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108)
timer_create(0x4, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f00000000c0))
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) (async)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13)
timer_gettime(0x0, 0x0) (async)
timer_gettime(0x0, 0x0)
r6 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r7)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000033c0), 0x2602, 0x0) (async)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000033c0), 0x2602, 0x0)
write$FUSE_BMAP(r7, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

34.064624162s ago: executing program 0 (id=238):
clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x10000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x101000, 0x40)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x1, @private=0xa010102, 0x4e23, 0x0, 'wrr\x00', 0x5, 0x4, 0x36}, {@rand_addr=0x64010100, 0x4e23, 0x2000, 0x6, 0xfff, 0x5}}, 0x44)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x844, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x52)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
getdents64(r5, &(0x7f0000004340)=""/159, 0x9f)
close_range(r1, r1, 0x0)
sendmsg$tipc(r3, &(0x7f0000000680)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004010}, 0x20000005)

33.998555083s ago: executing program 33 (id=238):
clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x10000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x101000, 0x40)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x1, @private=0xa010102, 0x4e23, 0x0, 'wrr\x00', 0x5, 0x4, 0x36}, {@rand_addr=0x64010100, 0x4e23, 0x2000, 0x6, 0xfff, 0x5}}, 0x44)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x844, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x52)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
getdents64(r5, &(0x7f0000004340)=""/159, 0x9f)
close_range(r1, r1, 0x0)
sendmsg$tipc(r3, &(0x7f0000000680)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004010}, 0x20000005)

4.066973644s ago: executing program 5 (id=820):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r0=>0x0}, &(0x7f0000000340)=0xc)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000380)=@v3={0x3000000, [{0x6, 0x9e5}, {0x401, 0xc5f2}], r0}, 0x18, 0x3)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000930a0000000000000800000000000000be0f703f487c8560a7d888d969b5cbf18d54431a1de980cb66607067152ca4987af50bbba741d3bfe009baac3f69b9aae593e603cf09b1909731d66808ce92dad24a5cee"])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1000, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
syz_usb_connect(0x2, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724030205050009050c02100005000107250102570000970767dd6950cc3bf43f1e4f6ea7fae1dd450a244f7d6bc7b7dc90c85f628f2bdc779fc34b0e0f120434571af681e7557bcb8bc27bd4894c83053a85b2b00ed3"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
close(r5)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040044)

2.46124025s ago: executing program 5 (id=846):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.407140591s ago: executing program 5 (id=848):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.977353368s ago: executing program 5 (id=851):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async, rerun: 64)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x1507, 0x4) (async, rerun: 64)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xff2d, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0})

1.957469458s ago: executing program 5 (id=852):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000801}, 0xd0)
dup2(r2, r1) (async)
recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x400c620e, 0xfffffffffffffffe)

1.898705039s ago: executing program 5 (id=853):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x686601, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c05e07a0a8901d0b7b0102030109021b0082020002000203"], 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x200000a, 0x11, r0, 0x3cacf000)

1.897655129s ago: executing program 4 (id=854):
r0 = memfd_create(&(0x7f0000000000)=']\x00', 0x3)
io_setup(0x2adf, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, 0x0}])
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000aad8cd"], 0xfc}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = epoll_create(0x20000000)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="b2ce1b34c9e547af69", @ANYRES16=r6, @ANYBLOB="000828bd7000fcdbdf25040000000400040008000200070000001000040007000000850500006b5a00000800020008000000180004000100000005000000020000000b000000ff030000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x28040854)
modify_ldt$write(0x1, &(0x7f0000000900)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000800, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x1f, 0x0, &(0x7f0000000140))
recvmmsg(r5, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000008c0)={0x30000000})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x3}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=""/116, 0x74)

1.754095971s ago: executing program 4 (id=856):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='netpci0\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000040)=[@clear_death, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r3}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

1.753806851s ago: executing program 4 (id=857):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0})

1.753593922s ago: executing program 4 (id=858):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x3cd6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$unix(0x1, 0x5, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d0020", @ANYRES8=r3, @ANYRES16=r4], 0x48}}, 0x4014) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r6 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r6, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)

907.928495ms ago: executing program 4 (id=870):
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x220200, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

843.522026ms ago: executing program 4 (id=871):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002240)=ANY=[@ANYBLOB="12010000000000406c25b66d000000000000010902240001228b54160904000042c25469da297c9e4e11172ebb12010300000000000000801c2455da9bf84a2a796e79e6d4a62ea3381acfa09159d74e692de1051f03de031808874fa0593adb438fae6f3d6e"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="40220500000057173d1493"], 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x3, 0x0, 0x0, 0x0) (async)
r1 = syz_clone(0x0, 0x0, 0x3, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x143042, 0x100) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x143042, 0x100)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1b, &(0x7f0000000040)=0x1, 0x4)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x7c, r7}) (async)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x7c, r7})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbd)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x2) (async)
r10 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x2)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r10}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0})

568.3302ms ago: executing program 1 (id=875):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

512.200072ms ago: executing program 1 (id=876):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000180)={0x3})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')

510.940301ms ago: executing program 1 (id=877):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x1, 0x4000, 0x1})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)

423.361442ms ago: executing program 2 (id=878):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async)
syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0xfb, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7f}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x4], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x4, 0x4, "92f1b4b9"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x1002}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x2, 0x1, 0xfa, '<U', '%'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0x3, 0xe, {0x7, 0x25, 0x1, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x60, 0x1, 0xde, {0x7, 0x25, 0x1, 0x81, 0xaf, 0x6}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0xf9, 0xf7, 0xff}, 0xa6, &(0x7f0000000300)={0x5, 0xf, 0xa6, 0x5, [@generic={0x82, 0x10, 0x3, "9fdfd40a5ba165f9af18d1c8311b8f525241c46186d867e8a5896b5ef322490aed4152001e7792978b61fc806f9f6066c8e4161f9730e8a047997aaefee40b703bb13663351806e320a08be3d5e7875f8b265885785eb60e44235b69f448ba01c0547cb9ecaa7665a991d99b7dd0ac5be525d99f4bda7bd30bf9e3346ce309"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x6, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x46, 0x9, 0xca, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x27, 0x65}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40e}}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000002c0)={@my=0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x802, 0x0) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
write$cgroup_int(r5, 0x0, 0x0) (async)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async, rerun: 64)
ioctl$RTC_AIE_OFF(r0, 0x7002) (rerun: 64)

352.758254ms ago: executing program 2 (id=879):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
write$vga_arbiter(r9, &(0x7f00000000c0)=@target={'target ', {'PCI:', 'c', ':', '4', ':', 'c', '.', '13'}}, 0x14)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000118, 0x0, 0x9}]})
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000000000000000040"])
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x401, 0x9, 0x7fffffff, 0x3, 0x5, 0x7f, 0x7, 0x9, 0xa80, 0x10000, 0x7, 0x6, 0x5, 0x4, 0x3, 0x4], 0xdddd0000, 0x20c084})
r10 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"])
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"])
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r13, &(0x7f0000000040)=0x40000, 0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

300.329055ms ago: executing program 1 (id=880):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
fstat(r0, &(0x7f0000000180))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000080)=""/130, &(0x7f0000000140)=0x82)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x1, 0x0, {0x2}}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
cachestat(r0, &(0x7f0000000200)={0xffffffffffffffff, 0x80000000}, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0x7709, 0x2)

299.912504ms ago: executing program 1 (id=881):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

297.971185ms ago: executing program 1 (id=882):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r0=>0x0}, &(0x7f0000000340)=0xc)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000380)=@v3={0x3000000, [{0x6, 0x9e5}, {0x401, 0xc5f2}], r0}, 0x18, 0x3)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000930a0000000000000800000000000000be0f703f487c8560a7d888d969b5cbf18d54431a1de980cb66607067152ca4987af50bbba741d3bfe009baac3f69b9aae593e603cf09b1909731d66808ce92dad24a5cee"])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x1000, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11)
close_range(r2, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
syz_usb_connect(0x2, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724030205050009050c02100005000107250102570000970767dd6950cc3bf43f1e4f6ea7fae1dd450a244f7d6bc7b7dc90c85f628f2bdc779fc34b0e0f120434571af681e7557bcb8bc27bd4894c83053a85b2b00ed3"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
close(r4)

157.304607ms ago: executing program 2 (id=883):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r4=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
close(0x4)
personality(0x400000b)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async)
close(0x4) (async)
personality(0x400000b) (async)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)

106.502248ms ago: executing program 2 (id=884):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
r1 = eventfd2(0x0, 0x800)
readv(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/236, 0xec}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r2, &(0x7f000000ddc0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020) (async)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async)
syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x4, 0xb, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x5, 0xfffffffd, 0x1, 0x4000, 0x7, r4, r5, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})

369.82µs ago: executing program 2 (id=885):
r0 = socket$inet6(0xa, 0x1, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x560, 0x0, 0xffff}]})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r4, 0x400, 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) (async)
fcntl$getflags(r4, 0x401) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r5, &(0x7f00000023c0)=[{0x0}], 0x1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x107f, 0x0, 0x0}, &(0x7f0000000180)=0x8d)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRES64=r0])

0s ago: executing program 2 (id=886):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(0x3)
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000580)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts.
[   22.643305][   T36] audit: type=1400 audit(1750776402.700:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.644768][  T281] cgroup: Unknown subsys name 'net'
[   22.666059][   T36] audit: type=1400 audit(1750776402.700:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.693397][   T36] audit: type=1400 audit(1750776402.730:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.693650][  T281] cgroup: Unknown subsys name 'devices'
[   22.855085][  T281] cgroup: Unknown subsys name 'hugetlb'
[   22.860760][  T281] cgroup: Unknown subsys name 'rlimit'
[   23.036753][   T36] audit: type=1400 audit(1750776403.090:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.060079][   T36] audit: type=1400 audit(1750776403.090:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.076320][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.085318][   T36] audit: type=1400 audit(1750776403.090:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.116880][   T36] audit: type=1400 audit(1750776403.150:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.142488][   T36] audit: type=1400 audit(1750776403.150:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.171781][   T36] audit: type=1400 audit(1750776403.230:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.172383][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.197413][   T36] audit: type=1400 audit(1750776403.230:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.439945][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.447116][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.454313][  T288] bridge_slave_0: entered allmulticast mode
[   24.460763][  T288] bridge_slave_0: entered promiscuous mode
[   24.467453][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.474569][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.481679][  T288] bridge_slave_1: entered allmulticast mode
[   24.488264][  T288] bridge_slave_1: entered promiscuous mode
[   24.614131][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.621189][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.628585][  T293] bridge_slave_0: entered allmulticast mode
[   24.635039][  T293] bridge_slave_0: entered promiscuous mode
[   24.649834][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.656970][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.664192][  T293] bridge_slave_1: entered allmulticast mode
[   24.670481][  T293] bridge_slave_1: entered promiscuous mode
[   24.704504][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.711588][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.719021][  T290] bridge_slave_0: entered allmulticast mode
[   24.725754][  T290] bridge_slave_0: entered promiscuous mode
[   24.741226][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.748575][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.755778][  T290] bridge_slave_1: entered allmulticast mode
[   24.762064][  T290] bridge_slave_1: entered promiscuous mode
[   24.836867][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.844038][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.851125][  T294] bridge_slave_0: entered allmulticast mode
[   24.857713][  T294] bridge_slave_0: entered promiscuous mode
[   24.864185][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.871323][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.878437][  T294] bridge_slave_1: entered allmulticast mode
[   24.884880][  T294] bridge_slave_1: entered promiscuous mode
[   24.935717][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.942812][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.950106][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.957172][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.011745][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.018845][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.026187][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.033241][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.055875][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.063012][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.070316][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.077415][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.111125][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.118423][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.125744][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.132809][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.149544][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.157592][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.165011][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.172247][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.180973][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.188352][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.195861][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.203447][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.223825][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.230887][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.238745][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.245845][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.258898][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.265989][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.276022][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.283108][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.306806][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.313890][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.321750][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.329033][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.365422][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.372529][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.380593][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.387668][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.396575][  T290] veth0_vlan: entered promiscuous mode
[   25.417751][  T293] veth0_vlan: entered promiscuous mode
[   25.440248][  T290] veth1_macvtap: entered promiscuous mode
[   25.451623][  T293] veth1_macvtap: entered promiscuous mode
[   25.466672][  T288] veth0_vlan: entered promiscuous mode
[   25.507125][  T288] veth1_macvtap: entered promiscuous mode
[   25.520406][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   25.526352][  T294] veth0_vlan: entered promiscuous mode
[   25.567676][  T294] veth1_macvtap: entered promiscuous mode
[   25.653297][  T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.843787][   T61] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   25.848043][  T325] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[   25.913317][  T329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'.
[   25.950665][  T333] binder: Bad value for 'max'
[   25.970048][  T335] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   25.970082][  T335] rust_binder: Error while translating object.
[   25.979315][  T335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.986438][  T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11
[   26.004380][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.044743][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.087956][   T61] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[   26.095881][  T345] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock
[   26.117975][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.144955][   T61] usb 3-1: config 0 descriptor??
[   26.151529][  T347] loop0: detected capacity change from 0 to 8388608
[   26.162975][  T349] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   26.162997][  T349] rust_binder: Read failure Err(EFAULT) in pid:16
[   26.213184][  T349] rust_binder: Write failure EINVAL in pid:16
[   26.237083][  T349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=349 comm=syz.0.13
[   26.849764][  T367] binder: Unknown parameter 'fscontext?}'
[   26.880667][  T314] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   26.898270][  T314] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   26.963144][   T61] uclogic 0003:5543:0781.0002: unknown main item tag 0xd
[   26.977126][   T61] uclogic 0003:5543:0781.0002: No inputs registered, leaving
[   26.993555][   T61] uclogic 0003:5543:0781.0002: hidraw1: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0
[   27.102753][  T372] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   27.110260][  T372] rust_binder: Write failure EINVAL in pid:25
[   27.173621][   T61] usb 3-1: USB disconnect, device number 2
[   27.330183][  T374] __vm_enough_memory: pid: 374, comm: syz.0.22, bytes: 12884901888 not enough memory for the allocation
[   27.612994][  T376] FAT-fs (rnullb0): bogus number of reserved sectors
[   27.619735][  T376] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   27.627827][  T378] FAT-fs (rnullb0): bogus number of reserved sectors
[   27.634717][  T378] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   27.675840][   T36] kauditd_printk_skb: 83 callbacks suppressed
[   27.675860][   T36] audit: type=1400 audit(1750776407.730:157): avc:  denied  { setopt } for  pid=379 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.702743][   T36] audit: type=1400 audit(1750776407.750:158): avc:  denied  { write } for  pid=379 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.722654][   T36] audit: type=1400 audit(1750776407.750:159): avc:  denied  { bind } for  pid=379 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.794245][   T36] audit: type=1400 audit(1750776407.850:160): avc:  denied  { create } for  pid=387 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.818626][  T388] Zero length message leads to an empty skb
[   27.826971][   T36] audit: type=1400 audit(1750776407.870:161): avc:  denied  { bind } for  pid=387 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.866781][   T36] audit: type=1400 audit(1750776407.870:162): avc:  denied  { setopt } for  pid=387 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.918039][   T36] audit: type=1400 audit(1750776407.870:163): avc:  denied  { write } for  pid=387 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.946508][  T404] binder: Unknown parameter 'defcontext00000000000000000000000'
[   27.962657][   T36] audit: type=1400 audit(1750776408.000:164): avc:  denied  { remount } for  pid=403 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.992556][  T407] rust_binder: Error while translating object.
[   27.992603][  T407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.999046][  T407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[   28.022553][  T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.024883][   T36] audit: type=1400 audit(1750776408.080:165): avc:  denied  { create } for  pid=408 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.069183][   T36] audit: type=1400 audit(1750776408.120:166): avc:  denied  { write } for  pid=408 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.151884][  T414] =======================================================
[   28.151884][  T414] WARNING: The mand mount option has been deprecated and
[   28.151884][  T414]          and is ignored by this kernel. Remove the mand
[   28.151884][  T414]          option from the mount to silence this warning.
[   28.151884][  T414] =======================================================
[   28.192603][  T414] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   28.241408][  T314] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   28.252585][  T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.260626][  T314] usb 2-1: Product: syz
[   28.276762][  T314] usb 2-1: Manufacturer: syz
[   28.281450][  T314] usb 2-1: SerialNumber: syz
[   28.293374][  T314] usb 2-1: config 0 descriptor??
[   28.312605][  T416] kvm: pic: non byte write
[   28.318422][  T416] random: crng reseeded on system resumption
[   28.662543][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   28.793722][   T45] usb 3-1: device descriptor read/64, error -71
[   28.813298][  T423] syz.0.37: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   28.839425][  T424] rust_binder: Write failure EFAULT in pid:38
[   28.839521][  T423] CPU: 1 UID: 0 PID: 423 Comm: syz.0.37 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[   28.839556][  T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   28.839575][  T423] Call Trace:
[   28.839582][  T423]  <TASK>
[   28.839592][  T423]  __dump_stack+0x21/0x30
[   28.839630][  T423]  dump_stack_lvl+0x10c/0x190
[   28.839657][  T423]  ? __cfi_dump_stack_lvl+0x10/0x10
[   28.839684][  T423]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   28.839721][  T423]  dump_stack+0x19/0x20
[   28.839746][  T423]  warn_alloc+0x1bc/0x2a0
[   28.839768][  T423]  ? stack_depot_save_flags+0x399/0x800
[   28.839797][  T423]  ? __cfi_warn_alloc+0x10/0x10
[   28.839821][  T423]  ? kasan_save_track+0x4f/0x80
[   28.839851][  T423]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   28.839888][  T423]  ? xskq_create+0x68/0x2a0
[   28.839911][  T423]  ? xsk_init_queue+0xb6/0x120
[   28.839934][  T423]  ? xsk_setsockopt+0x43f/0x6f0
[   28.839955][  T423]  ? do_sock_setsockopt+0x26a/0x400
[   28.839978][  T423]  ? __x64_sys_setsockopt+0x1b8/0x250
[   28.840000][  T423]  ? x64_sys_call+0x2adc/0x2ee0
[   28.840029][  T423]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.840055][  T423]  __vmalloc_node_range_noprof+0x135/0x1420
[   28.840087][  T423]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   28.840114][  T423]  ? avc_has_perm+0x144/0x220
[   28.840138][  T423]  ? kasan_save_alloc_info+0x40/0x50
[   28.840162][  T423]  ? __kasan_kmalloc+0x96/0xb0
[   28.840195][  T423]  vmalloc_user_noprof+0x77/0x90
[   28.840220][  T423]  ? xskq_create+0xdb/0x2a0
[   28.840243][  T423]  xskq_create+0xdb/0x2a0
[   28.840268][  T423]  xsk_init_queue+0xb6/0x120
[   28.840290][  T423]  xsk_setsockopt+0x43f/0x6f0
[   28.840312][  T423]  ? __cfi_xsk_setsockopt+0x10/0x10
[   28.840334][  T423]  ? do_futex+0x309/0x500
[   28.840367][  T423]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   28.840390][  T423]  ? security_socket_setsockopt+0x33/0xd0
[   28.840419][  T423]  ? __cfi_xsk_setsockopt+0x10/0x10
[   28.840442][  T423]  do_sock_setsockopt+0x26a/0x400
[   28.840466][  T423]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   28.840493][  T423]  __x64_sys_setsockopt+0x1b8/0x250
[   28.840517][  T423]  x64_sys_call+0x2adc/0x2ee0
[   28.840551][  T423]  do_syscall_64+0x58/0xf0
[   28.840571][  T423]  ? clear_bhb_loop+0x50/0xa0
[   28.840594][  T423]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.840618][  T423] RIP: 0033:0x7fabbad8e929
[   28.840644][  T423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.840663][  T423] RSP: 002b:00007fabbbc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   28.840687][  T423] RAX: ffffffffffffffda RBX: 00007fabbafb5fa0 RCX: 00007fabbad8e929
[   28.840704][  T423] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000045
[   28.840718][  T423] RBP: 00007fabbae10b39 R08: 0000000000000004 R09: 0000000000000000
[   28.840732][  T423] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   28.840747][  T423] R13: 0000000000000000 R14: 00007fabbafb5fa0 R15: 00007ffed0aabad8
[   28.840765][  T423]  </TASK>
[   28.840820][  T423] Mem-Info:
[   29.153801][  T423] active_anon:5359 inactive_anon:0 isolated_anon:0
[   29.153801][  T423]  active_file:6046 inactive_file:2428 isolated_file:0
[   29.153801][  T423]  unevictable:0 dirty:328 writeback:0
[   29.153801][  T423]  slab_reclaimable:4978 slab_unreclaimable:76039
[   29.153801][  T423]  mapped:23979 shmem:163 pagetables:698
[   29.153801][  T423]  sec_pagetables:0 bounce:0
[   29.153801][  T423]  kernel_misc_reclaimable:0
[   29.153801][  T423]  free:1541564 free_pcp:3613 free_cma:0
[   29.228334][  T423] Node 0 active_anon:24036kB inactive_anon:0kB active_file:24184kB inactive_file:12212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95916kB dirty:1312kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4188kB pagetables:2792kB sec_pagetables:0kB all_unreclaimable? no
[   29.260171][  T423] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:5740kB free_cma:0kB
[   29.290429][  T423] lowmem_reserve[]: 0 3921 3921
[   29.295799][  T423] Normal free:3200724kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26736kB inactive_anon:0kB active_file:24184kB inactive_file:15012kB unevictable:0kB writepending:1312kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4968kB local_pcp:2648kB free_cma:0kB
[   29.327615][  T423] lowmem_reserve[]: 0 0 0
[   29.332055][  T423] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   29.352572][   T45] usb 3-1: device descriptor read/64, error -71
[   29.360909][  T423] Normal: 1*4kB (E) 2*8kB (UE) 534*16kB (U) 6*32kB (U) 49*64kB (UME) 76*128kB (UME) 41*256kB (UM) 16*512kB (UM) 12*1024kB (UME) 6*2048kB (ME) 766*4096kB (ME) = 3202420kB
[   29.378312][  T423] 10058 total pagecache pages
[   29.386614][  T423] 0 pages in swap cache
[   29.390806][  T423] Free swap  = 124996kB
[   29.395116][  T423] Total swap = 124996kB
[   29.399358][  T423] 2097051 pages RAM
[   29.403255][  T423] 0 pages HighMem/MovableOnly
[   29.408003][  T423] 351516 pages reserved
[   29.412234][  T423] 0 pages cma reserved
[   29.425016][  T423] Memory allocations:
[   29.429136][  T423]          0 B        0 init/main.c:1370 func:do_initcalls
[   29.436451][  T423]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   29.444996][  T423]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   29.456088][  T423]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   29.464424][  T423]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   29.472421][  T423]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   29.481159][  T423]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   29.489162][  T423]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   29.497182][  T423]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   29.505468][  T423]          0 B        0 init/initramfs.c:101 func:find_link
[   29.592773][   T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   29.633194][  T314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   29.648165][  T314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[   29.659567][  T314] asix 2-1:0.0: probe with driver asix failed with error -71
[   29.669530][  T314] usb 2-1: USB disconnect, device number 2
[   29.722591][   T45] usb 3-1: device descriptor read/64, error -71
[   29.972585][   T45] usb 3-1: device descriptor read/64, error -71
[   30.022543][   T61] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   30.082716][   T45] usb usb3-port1: attempt power cycle
[   30.192531][   T61] usb 1-1: Using ep0 maxpacket: 16
[   30.210511][  T438] rust_binder: Error while translating object.
[   30.210554][  T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   30.217093][  T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:25
[   30.217138][   T61] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   30.247206][   T61] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16
[   30.257561][   T61] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64
[   30.267983][   T61] usb 1-1: config 1 interface 0 has no altsetting 0
[   30.283718][   T61] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   30.292954][   T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.301346][   T61] usb 1-1: Product: ף軰鷨烇୿ஃ蛈檮쫣ॉ抜쁵枅ȏ岊츪涠闾漛꺼푤㱳䛥刽䨅
[   30.312824][   T61] usb 1-1: Manufacturer: ࡡ
[   30.317626][   T61] usb 1-1: SerialNumber: syz
[   30.323901][  T436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   30.331134][  T436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   30.356150][  T440] rust_binder: Error while translating object.
[   30.356203][  T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   30.363047][  T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27
[   30.418039][  T445] proc: Unknown parameter 'tmpfs'
[   30.422568][   T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   30.453679][   T45] usb 3-1: device descriptor read/8, error -71
[   30.564565][   T61] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[   30.580319][   T61] usb 1-1: USB disconnect, device number 2
[   30.593634][   T45] usb 3-1: device descriptor read/8, error -71
[   30.611510][  T454] rust_binder: Write failure EINVAL in pid:41
[   30.611619][  T454] rust_binder: Read failure Err(EAGAIN) in pid:41
[   30.842737][   T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   30.893714][   T45] usb 3-1: device descriptor read/8, error -71
[   31.023697][   T45] usb 3-1: device descriptor read/8, error -71
[   31.134477][   T45] usb usb3-port1: unable to enumerate USB device
[   31.162525][   T61] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.227143][  T469] vcan0: entered allmulticast mode
[   31.317510][  T471] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   31.333571][   T61] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[   31.341776][   T61] usb 2-1: config 0 has no interface number 0
[   31.349595][   T61] usb 2-1: config 0 interface 235 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[   31.360797][   T61] usb 2-1: config 0 interface 235 has no altsetting 0
[   31.376478][   T61] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=d8.f5
[   31.402535][   T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.410588][   T61] usb 2-1: Product: syz
[   31.422853][   T61] usb 2-1: Manufacturer: syz
[   31.427525][   T61] usb 2-1: SerialNumber: syz
[   31.445898][   T61] usb 2-1: config 0 descriptor??
[   31.683089][  T493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   31.683129][  T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70
[   31.712057][  T493] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   31.721251][  T493] rust_binder: Read failure Err(EFAULT) in pid:70
[   31.753285][  T498] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   31.768940][  T498] rust_binder: Error while translating object.
[   31.782900][  T498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.789186][  T498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[   31.831746][  T502] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[   31.841141][  T502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   31.849312][  T502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:74
[   31.877717][  T504] rust_binder: Error while translating object.
[   31.894414][  T504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   31.913922][  T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40
[   31.997816][  T509] input: syz0 as /devices/virtual/input/input5
[   32.739559][   T36] kauditd_printk_skb: 41 callbacks suppressed
[   32.739580][   T36] audit: type=1400 audit(1750776412.790:208): avc:  denied  { mounton } for  pid=514 comm="syz.2.69" path="/15/file1" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.918650][  T519] rust_binder: Write failure EINVAL in pid:83
[   34.037558][   T61] usb 2-1: USB disconnect, device number 3
[   34.074460][   T36] audit: type=1400 audit(1750776414.120:209): avc:  denied  { setopt } for  pid=542 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   34.133711][   T36] audit: type=1400 audit(1750776414.130:210): avc:  denied  { connect } for  pid=542 comm="syz.1.78" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   34.176914][   T36] audit: type=1400 audit(1750776414.170:211): avc:  denied  { create } for  pid=542 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   34.218090][   T36] audit: type=1400 audit(1750776414.180:212): avc:  denied  { sys_admin } for  pid=542 comm="syz.1.78" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   34.448689][   T36] audit: type=1400 audit(1750776414.500:213): avc:  denied  { create } for  pid=557 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   34.472888][   T36] audit: type=1400 audit(1750776414.530:214): avc:  denied  { ioctl } for  pid=557 comm="syz.2.84" path="socket:[6676]" dev="sockfs" ino=6676 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   34.702528][   T36] audit: type=1400 audit(1750776414.750:215): avc:  denied  { ioctl } for  pid=575 comm="syz.0.89" path="socket:[5444]" dev="sockfs" ino=5444 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   34.763614][   T36] audit: type=1400 audit(1750776414.820:216): avc:  denied  { mount } for  pid=584 comm="syz.0.91" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   34.800640][   T36] audit: type=1400 audit(1750776414.850:217): avc:  denied  { checkpoint_restore } for  pid=578 comm="syz.2.90" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.831251][  T588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.642554][   T45] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   35.826002][   T45] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config
[   35.843099][   T45] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   35.854519][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=1315, bcdDevice=2d.e6
[   35.874010][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.892517][   T45] usb 3-1: Product: syz
[   35.898191][   T45] usb 3-1: Manufacturer: syz
[   35.907869][   T45] usb 3-1: SerialNumber: syz
[   35.988177][  T633] rust_binder: Write failure EINVAL in pid:112
[   36.117945][   T45] usb 3-1: USB disconnect, device number 7
[   36.448790][   T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   36.613575][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   36.632504][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   36.655240][   T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[   36.676905][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.699944][   T45] usb 3-1: config 0 descriptor??
[   36.711763][  T615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   37.052657][  T664] overlayfs: failed to clone upperpath
[   37.122629][  T670] tmpfs: Bad value for 'huge'
[   37.152965][  T672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.261442][  T676] fuse: Bad value for 'fd'
[   37.431528][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   37.458810][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   37.478405][   T45] usb 3-1: USB disconnect, device number 8
[   37.566956][  T701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.567038][  T701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124
[   37.584616][  T705] IPv6: NLM_F_CREATE should be specified when creating new route
[   37.604678][  T705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   37.612072][  T705] IPv6: NLM_F_CREATE should be set when creating new route
[   38.062510][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.364000][  T731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=731 comm=syz.1.144
[   38.407777][  T733] cgroup: Unknown subsys name '#'
[   38.504118][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   38.504138][   T36] audit: type=1400 audit(1750776418.560:233): avc:  denied  { mount } for  pid=737 comm="syz.1.148" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   38.732861][   T36] audit: type=1400 audit(1750776418.790:234): avc:  denied  { write } for  pid=751 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.942518][   T36] audit: type=1400 audit(1750776418.990:235): avc:  denied  { getopt } for  pid=765 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   39.035943][   T36] audit: type=1400 audit(1750776419.090:236): avc:  denied  { ioctl } for  pid=769 comm="syz.1.158" path="socket:[7498]" dev="sockfs" ino=7498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   39.088514][   T36] audit: type=1400 audit(1750776419.120:237): avc:  denied  { bind } for  pid=769 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   39.133250][   T36] audit: type=1400 audit(1750776419.120:238): avc:  denied  { getopt } for  pid=769 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   39.462518][   T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   39.602565][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   39.622512][   T45] usb 3-1: Using ep0 maxpacket: 32
[   39.628425][   T45] usb 3-1: too many configurations: 236, using maximum allowed: 8
[   39.637306][   T45] usb 3-1: config 0 has no interfaces?
[   39.643712][   T45] usb 3-1: config 0 has no interfaces?
[   39.649982][   T45] usb 3-1: config 0 has no interfaces?
[   39.656337][   T45] usb 3-1: config 0 has no interfaces?
[   39.663596][   T45] usb 3-1: config 0 has no interfaces?
[   39.669988][   T45] usb 3-1: config 0 has no interfaces?
[   39.678302][   T45] usb 3-1: config 0 has no interfaces?
[   39.684988][   T45] usb 3-1: config 0 has no interfaces?
[   39.697167][   T45] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   39.708008][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[   39.720185][   T45] usb 3-1: Product: syz
[   39.763702][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.788957][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[   39.802578][   T45] usb 3-1: Manufacturer: syz
[   39.807319][   T45] usb 3-1: SerialNumber: syz
[   39.822542][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.824100][   T45] usb 3-1: config 0 descriptor??
[   39.853283][   T10] usb 1-1: config 0 descriptor??
[   40.265339][   T10] hid (null): report_id 896 is invalid
[   40.276786][   T10] logitech-djreceiver 0003:046D:C51B.0003: report_id 896 is invalid
[   40.285192][   T10] logitech-djreceiver 0003:046D:C51B.0003: item 0 2 1 8 parsing failed
[   40.295085][   T10] logitech-djreceiver 0003:046D:C51B.0003: logi_dj_probe: parse failed
[   40.304098][   T10] logitech-djreceiver 0003:046D:C51B.0003: probe with driver logitech-djreceiver failed with error -22
[   40.475236][   T36] audit: type=1400 audit(1750776420.530:239): avc:  denied  { accept } for  pid=775 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   40.500439][   T10] usb 1-1: USB disconnect, device number 3
[   40.673747][   T36] audit: type=1400 audit(1750776420.730:240): avc:  denied  { read } for  pid=787 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   40.711378][  T792] tipc: Failed to remove unknown binding: 66,3,3/0:815585994/815585995
[   41.298671][   T36] audit: type=1400 audit(1750776421.350:241): avc:  denied  { map } for  pid=812 comm="syz.0.174" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   41.427463][  T823] rust_binder: Write failure EINVAL in pid:133
[   41.562848][  T833] fuse: Unknown parameter 'gr'
[   41.716870][   T36] audit: type=1400 audit(1750776421.770:242): avc:  denied  { mounton } for  pid=852 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   41.748214][  T305] bridge_slave_1: left allmulticast mode
[   41.754772][  T305] bridge_slave_1: left promiscuous mode
[   41.760698][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.769741][  T305] bridge_slave_0: left allmulticast mode
[   41.777754][  T305] bridge_slave_0: left promiscuous mode
[   41.783944][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.881985][  T852] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.889136][  T852] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.896744][  T852] bridge_slave_0: entered allmulticast mode
[   41.903576][  T852] bridge_slave_0: entered promiscuous mode
[   41.910258][  T852] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.918873][  T852] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.926649][  T852] bridge_slave_1: entered allmulticast mode
[   41.933342][  T852] bridge_slave_1: entered promiscuous mode
[   41.940709][  T305] veth1_macvtap: left promiscuous mode
[   41.946762][  T305] veth0_vlan: left promiscuous mode
[   42.023683][   T61] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   42.091899][  T852] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.099107][  T852] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.106478][  T852] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.113908][  T852] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.145834][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.153326][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.171232][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.178552][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.186113][   T61] usb 1-1: device descriptor read/64, error -71
[   42.193667][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.201070][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.227133][  T852] veth0_vlan: entered promiscuous mode
[   42.239987][  T421] usb 3-1: USB disconnect, device number 9
[   42.240563][  T852] veth1_macvtap: entered promiscuous mode
[   42.264490][  T882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.264522][  T882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.272041][  T882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.279208][  T882] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.293127][  T883] rust_binder: Error while translating object.
[   42.299609][  T883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   42.308847][  T883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151
[   42.452539][   T61] usb 1-1: device descriptor read/64, error -71
[   42.662759][  T421] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   42.785220][   T61] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   42.888202][  T904] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q��k�p
[   42.888202][  T904] �C<+�
[   42.912606][  T421] usb 3-1: device descriptor read/64, error -71
[   42.953388][  T908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=908 comm=syz.1.205
[   42.992651][   T61] usb 1-1: device descriptor read/64, error -71
[   43.152567][  T421] usb 3-1: device descriptor read/64, error -71
[   43.183098][  T314] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   43.232586][   T61] usb 1-1: device descriptor read/64, error -71
[   43.333763][  T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.344189][   T61] usb usb1-port1: attempt power cycle
[   43.349664][  T314] usb 5-1: config 0 interface 0 has no altsetting 0
[   43.356593][  T314] usb 5-1: New USB device found, idVendor=0463, idProduct=c227, bcdDevice= 0.00
[   43.366022][  T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.374701][  T314] usb 5-1: config 0 descriptor??
[   43.402602][  T421] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   43.532555][  T421] usb 3-1: device descriptor read/64, error -71
[   43.692639][   T61] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   43.713621][   T61] usb 1-1: device descriptor read/8, error -71
[   43.763747][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   43.763766][   T36] audit: type=1400 audit(1750776423.820:247): avc:  denied  { watch } for  pid=920 comm="syz.1.210" path="/98/control" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   43.792726][  T421] usb 3-1: device descriptor read/64, error -71
[   43.794394][  T314] hid-generic 0003:0463:C227.0004: unknown main item tag 0x1
[   43.810912][  T314] hid-generic 0003:0463:C227.0004: hidraw0: USB HID v1.01 Device [HID 0463:c227] on usb-dummy_hcd.4-1/input0
[   43.843944][   T61] usb 1-1: device descriptor read/8, error -71
[   43.902721][  T421] usb usb3-port1: attempt power cycle
[   43.969291][  T940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=940 comm=syz.1.215
[   43.969291][  T939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=939 comm=syz.1.215
[   44.020474][   T36] audit: type=1400 audit(1750776424.070:248): avc:  denied  { bind } for  pid=946 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   44.023237][  T948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   44.040887][   T36] audit: type=1400 audit(1750776424.070:249): avc:  denied  { ioctl } for  pid=946 comm="syz.1.217" path="socket:[8403]" dev="sockfs" ino=8403 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   44.082972][   T61] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   44.124330][   T61] usb 1-1: device descriptor read/8, error -71
[   44.138193][  T951] 9pnet_fd: Insufficient options for proto=fd
[   44.243040][  T421] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   44.254680][   T61] usb 1-1: device descriptor read/8, error -71
[   44.262200][   T36] audit: type=1400 audit(1750776424.310:250): avc:  denied  { mount } for  pid=967 comm="syz.1.226" name="/" dev="configfs" ino=2281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.285379][   T36] audit: type=1400 audit(1750776424.340:251): avc:  denied  { search } for  pid=967 comm="syz.1.226" name="/" dev="configfs" ino=2281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.293778][  T421] usb 3-1: device descriptor read/8, error -71
[   44.309211][   T36] audit: type=1400 audit(1750776424.370:252): avc:  denied  { setattr } for  pid=967 comm="syz.1.226" name="/" dev="configfs" ino=2281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.362700][   T61] usb usb1-port1: unable to enumerate USB device
[   44.395978][   T36] audit: type=1400 audit(1750776424.450:253): avc:  denied  { create } for  pid=975 comm="syz.1.230" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   44.417089][   T36] audit: type=1400 audit(1750776424.450:254): avc:  denied  { rename } for  pid=975 comm="syz.1.230" name="file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   44.439723][   T36] audit: type=1400 audit(1750776424.450:255): avc:  denied  { read write execute } for  pid=975 comm="syz.1.230" name="file7" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   44.493826][  T421] usb 3-1: device descriptor read/8, error -71
[   44.732629][  T421] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   44.753840][  T421] usb 3-1: device descriptor read/8, error -71
[   44.796200][   T36] audit: type=1400 audit(1750776424.850:256): avc:  denied  { setattr } for  pid=990 comm="syz.0.235" name="NETLINK" dev="sockfs" ino=7931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.891315][  T421] usb 3-1: device descriptor read/8, error -71
[   44.963439][   T46] bridge_slave_1: left allmulticast mode
[   44.969147][   T46] bridge_slave_1: left promiscuous mode
[   44.975113][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.992721][   T46] bridge_slave_0: left allmulticast mode
[   44.998429][   T46] bridge_slave_0: left promiscuous mode
[   45.004708][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.013615][  T421] usb usb3-port1: unable to enumerate USB device
[   45.130037][   T46] veth1_macvtap: left promiscuous mode
[   45.136744][   T46] veth0_vlan: left promiscuous mode
[   45.152571][ T1012] /dev/rnullb0: Can't lookup blockdev
[   45.250192][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.257453][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.266938][ T1008] bridge_slave_0: entered allmulticast mode
[   45.273478][ T1008] bridge_slave_0: entered promiscuous mode
[   45.280099][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.292529][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.299880][ T1008] bridge_slave_1: entered allmulticast mode
[   45.306370][ T1008] bridge_slave_1: entered promiscuous mode
[   45.327513][ T1045] 9pnet_fd: Insufficient options for proto=fd
[   45.386288][ T1049] rust_binder: Write failure EINVAL in pid:158
[   45.394462][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.408082][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.415466][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.422604][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.454609][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.462156][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.477443][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.484576][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.495606][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.502729][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.516545][ T1055] batadv_slave_1: entered promiscuous mode
[   45.541027][ T1008] veth0_vlan: entered promiscuous mode
[   45.555375][ T1008] veth1_macvtap: entered promiscuous mode
[   45.605844][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[   45.621531][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   45.631340][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   45.657949][ T1063] capability: warning: `syz.5.259' uses deprecated v2 capabilities in a way that may be insecure
[   45.749036][  T314] usb 5-1: USB disconnect, device number 2
[   45.813100][ T1059] rust_binder: Error while translating object.
[   45.813149][ T1059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.821661][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[   45.972511][  T306] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   46.122515][  T306] usb 6-1: device descriptor read/64, error -71
[   46.288157][ T1055] batadv_slave_1: left promiscuous mode
[   46.362545][  T306] usb 6-1: device descriptor read/64, error -71
[   46.403772][ T1072] rust_binder: Fixups oob 154 158 203 174
[   46.403797][ T1072] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[   46.409872][ T1072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.441445][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164
[   46.508983][ T1085] /dev/loop1: Can't lookup blockdev
[   46.611509][ T1094] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[   46.611753][ T1094] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   46.612546][  T306] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   46.802613][  T306] usb 6-1: device descriptor read/64, error -71
[   47.042547][  T306] usb 6-1: device descriptor read/64, error -71
[   47.162679][  T306] usb usb6-port1: attempt power cycle
[   47.502589][  T306] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   47.531989][  T306] usb 6-1: device descriptor read/8, error -71
[   47.557769][ T1126] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   47.663564][  T306] usb 6-1: device descriptor read/8, error -71
[   47.821276][ T1140] overlayfs: failed to clone upperpath
[   47.872509][   T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   47.912511][  T306] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   47.943633][  T306] usb 6-1: device descriptor read/8, error -71
[   48.032512][   T31] usb 3-1: Using ep0 maxpacket: 16
[   48.038956][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.050116][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   48.063144][   T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   48.072213][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.081792][   T31] usb 3-1: config 0 descriptor??
[   48.088199][  T306] usb 6-1: device descriptor read/8, error -71
[   48.202658][  T306] usb usb6-port1: unable to enumerate USB device
[   48.497418][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.506794][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.516872][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.532525][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.539882][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.549978][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.562527][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.572670][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.579954][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.602537][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.609854][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.617552][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.632646][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.640356][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.652513][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.659899][   T31] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   48.677678][   T31] microsoft 0003:045E:07DA.0005: No inputs registered, leaving
[   48.692737][   T31] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   48.724889][   T31] microsoft 0003:045E:07DA.0005: no inputs found
[   48.731297][   T31] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[   48.818214][ T1157] overlayfs: failed to resolve './file1': -2
[   48.865645][   T36] kauditd_printk_skb: 21471 callbacks suppressed
[   48.865666][   T36] audit: type=1400 audit(1750776428.920:21728): avc:  denied  { getopt } for  pid=1161 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.907607][ T1130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.923983][ T1130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.071736][   T36] audit: type=1400 audit(1750776429.120:21729): avc:  denied  { setopt } for  pid=1168 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   49.131043][   T36] audit: type=1400 audit(1750776429.180:21730): avc:  denied  { setopt } for  pid=1172 comm="syz.5.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.364774][   T36] audit: type=1400 audit(1750776429.420:21731): avc:  denied  { read } for  pid=1184 comm="syz.5.304" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   49.387638][   T36] audit: type=1400 audit(1750776429.420:21732): avc:  denied  { open } for  pid=1184 comm="syz.5.304" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   49.412497][   T36] audit: type=1400 audit(1750776429.460:21733): avc:  denied  { read } for  pid=1184 comm="syz.5.304" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   49.439502][   T36] audit: type=1400 audit(1750776429.470:21734): avc:  denied  { open } for  pid=1184 comm="syz.5.304" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   49.475602][   T36] audit: type=1400 audit(1750776429.470:21735): avc:  denied  { ioctl } for  pid=1184 comm="syz.5.304" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   49.502148][   T36] audit: type=1400 audit(1750776429.470:21736): avc:  denied  { getopt } for  pid=1184 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   49.555156][   T36] audit: type=1400 audit(1750776429.610:21737): avc:  denied  { ioctl } for  pid=1199 comm="syz.1.310" path="socket:[9429]" dev="sockfs" ino=9429 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   49.681172][ T1215] syzkaller0: entered promiscuous mode
[   49.688019][ T1215] syzkaller0: entered allmulticast mode
[   50.086907][ T1239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.087017][ T1239] capability: warning: `syz.4.325' uses 32-bit capabilities (legacy support in use)
[   50.108978][ T1239] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   50.492545][   T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.556417][ T1266] tmpfs: Unknown parameter 'no�3����6�ʀsw'
[   50.583056][ T1268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.338'.
[   50.594413][ T1268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   50.632758][   T31] usb 5-1: device descriptor read/64, error -71
[   50.645508][  T314] usb 3-1: USB disconnect, device number 14
[   50.872532][   T31] usb 5-1: device descriptor read/64, error -71
[   50.942605][ T1296] 9pnet_fd: Insufficient options for proto=fd
[   51.113254][   T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   51.132518][ T1318] overlayfs: failed to resolve './file1': -2
[   51.208509][ T1324] rust_binder: Error while translating object.
[   51.208557][ T1324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.222669][ T1324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193
[   51.260133][   T31] usb 5-1: device descriptor read/64, error -71
[   51.382531][  T421] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   51.565923][   T31] usb 5-1: device descriptor read/64, error -71
[   51.579918][  T421] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   51.601364][  T421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.612233][  T421] usb 6-1: Product: syz
[   51.618971][  T421] usb 6-1: Manufacturer: syz
[   51.625353][  T421] usb 6-1: SerialNumber: syz
[   51.643668][  T421] r8152-cfgselector 6-1: Unknown version 0x0000
[   51.653834][  T421] r8152-cfgselector 6-1: config 0 descriptor??
[   51.687536][   T31] usb usb5-port1: attempt power cycle
[   51.720173][ T1336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   51.720216][ T1336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:198
[   51.875393][  T421] r8152-cfgselector 6-1: USB disconnect, device number 6
[   52.032542][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   52.053792][   T31] usb 5-1: device descriptor read/8, error -71
[   52.183743][   T31] usb 5-1: device descriptor read/8, error -71
[   52.422646][   T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   52.444592][   T31] usb 5-1: device descriptor read/8, error -71
[   52.514695][ T1348] binder: Unknown parameter 'fscontext?}'
[   52.583607][   T31] usb 5-1: device descriptor read/8, error -71
[   52.599203][ T1358] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.655433][ T1366] process 'syz.1.373' launched '/dev/fd/6' with NULL argv: empty string added
[   52.692821][   T31] usb usb5-port1: unable to enumerate USB device
[   53.208267][ T1417] 9pnet_fd: Insufficient options for proto=fd
[   53.230167][ T1419] can: request_module (can-proto-6) failed.
[   53.348691][ T1426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[   53.432416][ T1434] rust_binder: Error while translating object.
[   53.441782][ T1434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.448248][ T1434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65
[   53.485888][  T305] tipc: Subscription rejected, illegal request
[   53.511803][ T1436] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   53.511833][ T1436] rust_binder: Read failure Err(EFAULT) in pid:67
[   53.535667][ T1440] bpf: Bad value for 'uid'
[   53.572942][ T1440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'.
[   53.573912][ T1445] syzkaller0: entered promiscuous mode
[   53.582225][ T1441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'.
[   53.610376][ T1445] syzkaller0: entered allmulticast mode
[   53.835546][ T1466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1466 comm=syz.5.412
[   53.942531][   T31] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[   53.957938][   T36] kauditd_printk_skb: 69 callbacks suppressed
[   53.957956][   T36] audit: type=1400 audit(1750776434.010:21807): avc:  denied  { watch watch_reads } for  pid=1465 comm="syz.5.412" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   54.036608][   T36] audit: type=1400 audit(1750776434.090:21808): avc:  denied  { bind } for  pid=1471 comm="syz.5.413" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.056929][   T36] audit: type=1400 audit(1750776434.090:21809): avc:  denied  { name_bind } for  pid=1471 comm="syz.5.413" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   54.078425][   T36] audit: type=1400 audit(1750776434.090:21810): avc:  denied  { node_bind } for  pid=1471 comm="syz.5.413" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   54.099857][   T31] usb 3-1: Invalid ep0 maxpacket: 64
[   54.176319][   T36] audit: type=1400 audit(1750776434.230:21811): avc:  denied  { append } for  pid=1482 comm="syz.5.417" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   54.176670][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.199584][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[   54.217511][ T1483] netlink: 60 bytes leftover after parsing attributes in process `syz.5.417'.
[   54.242526][   T31] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[   54.266263][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4
[   54.274324][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2
[   54.281987][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3
[   54.291887][   T10] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   54.316233][ T1489] fido_id[1489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   54.412579][   T31] usb 3-1: Invalid ep0 maxpacket: 64
[   54.418761][   T31] usb usb3-port1: attempt power cycle
[   54.507067][   T36] audit: type=1400 audit(1750776434.560:21812): avc:  denied  { map } for  pid=1498 comm="syz.5.423" path="socket:[11406]" dev="sockfs" ino=11406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.532177][   T36] audit: type=1400 audit(1750776434.590:21813): avc:  denied  { execute } for  pid=1498 comm="syz.5.423" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   54.639768][ T1507] binder: Unknown parameter 'fscontext?}'
[   54.762577][   T31] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[   54.783151][   T31] usb 3-1: Invalid ep0 maxpacket: 64
[   54.912595][   T31] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[   54.932614][ T1088] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   54.940520][   T31] usb 3-1: Invalid ep0 maxpacket: 64
[   54.946711][   T31] usb usb3-port1: unable to enumerate USB device
[   55.072583][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   55.092787][ T1088] usb 5-1: Using ep0 maxpacket: 32
[   55.100528][ T1088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.113573][ T1088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.124030][ T1088] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   55.133241][ T1088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.142197][ T1088] usb 5-1: config 0 descriptor??
[   55.148343][ T1088] hub 5-1:0.0: USB hub found
[   55.232563][   T10] usb 6-1: Using ep0 maxpacket: 16
[   55.239047][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[   55.247395][   T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[   55.256940][   T10] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[   55.266154][   T10] usb 6-1: Product: syz
[   55.270378][   T10] usb 6-1: Manufacturer: syz
[   55.275442][   T10] usb 6-1: SerialNumber: syz
[   55.281396][   T10] usb 6-1: config 0 descriptor??
[   55.348350][ T1088] hub 5-1:0.0: 1 port detected
[   55.490721][   T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[   55.514102][  T432] udevd[432]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   55.950590][ T1088] hub 5-1:0.0: activate --> -90
[   56.041696][ T1536] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   56.041728][ T1536] rust_binder: Error while translating object.
[   56.052947][ T1536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.059516][ T1536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116
[   56.061916][ T1538] fuse: Bad value for 'fd'
[   56.112070][ T1544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1544 comm=syz.1.440
[   56.152111][ T1088] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[   56.201492][ T1556] fuse: Bad value for 'fd'
[   56.207419][ T1556] fuse: Unknown parameter 'fdh8�!��&NJ'
[   56.216819][ T1556] syzkaller0: entered allmulticast mode
[   56.224203][ T1556] syzkaller0 (unregistering): left allmulticast mode
[   56.351284][ T1512] random: crng reseeded on system resumption
[   56.483099][ T1088] usb 5-1: USB disconnect, device number 7
[   56.913360][   T36] audit: type=1326 audit(1750776436.970:21814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1572 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220038e929 code=0x0
[   56.937673][ T1576] input: syz1 as /devices/virtual/input/input6
[   56.945772][ T1576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90
[   57.167168][   T36] audit: type=1400 audit(1750776437.220:21815): avc:  denied  { accept } for  pid=1581 comm="syz.2.456" path="socket:[11506]" dev="sockfs" ino=11506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.282020][ T1589] rust_binder: Write failure EFAULT in pid:96
[   57.381500][   T36] audit: type=1400 audit(1750776437.430:21816): avc:  denied  { write } for  pid=1594 comm="syz.4.459" name="/" dev="incremental-fs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.593422][ T1605] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   57.601129][ T1605] rust_binder: Write failure EINVAL in pid:109
[   57.601250][ T1605] rust_binder: Write failure EFAULT in pid:109
[   57.891434][  T314] usb 6-1: USB disconnect, device number 7
[   57.924348][ T1611] warn_alloc: 32 callbacks suppressed
[   57.924369][ T1611] syz.4.465: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0
[   57.945266][ T1611] CPU: 1 UID: 0 PID: 1611 Comm: syz.4.465 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[   57.945310][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   57.945338][ T1611] Call Trace:
[   57.945349][ T1611]  <TASK>
[   57.945362][ T1611]  __dump_stack+0x21/0x30
[   57.945390][ T1611]  dump_stack_lvl+0x10c/0x190
[   57.945411][ T1611]  ? __cfi_dump_stack_lvl+0x10/0x10
[   57.945432][ T1611]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   57.945464][ T1611]  dump_stack+0x19/0x20
[   57.945483][ T1611]  warn_alloc+0x1bc/0x2a0
[   57.945501][ T1611]  ? stack_depot_save_flags+0x38/0x800
[   57.945524][ T1611]  ? __cfi_warn_alloc+0x10/0x10
[   57.945542][ T1611]  ? kasan_save_track+0x4f/0x80
[   57.945567][ T1611]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   57.945590][ T1611]  ? xskq_create+0x68/0x2a0
[   57.945609][ T1611]  ? xsk_init_queue+0xb6/0x120
[   57.945627][ T1611]  ? xsk_setsockopt+0x43f/0x6f0
[   57.945644][ T1611]  ? do_sock_setsockopt+0x26a/0x400
[   57.945664][ T1611]  ? __x64_sys_setsockopt+0x1b8/0x250
[   57.945684][ T1611]  ? x64_sys_call+0x2adc/0x2ee0
[   57.945709][ T1611]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.945730][ T1611]  __vmalloc_node_range_noprof+0x135/0x1420
[   57.945755][ T1611]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   57.945776][ T1611]  ? avc_has_perm+0x144/0x220
[   57.945796][ T1611]  ? kasan_save_alloc_info+0x40/0x50
[   57.945815][ T1611]  ? __kasan_kmalloc+0x96/0xb0
[   57.945842][ T1611]  vmalloc_user_noprof+0x77/0x90
[   57.945862][ T1611]  ? xskq_create+0xdb/0x2a0
[   57.945880][ T1611]  xskq_create+0xdb/0x2a0
[   57.945899][ T1611]  xsk_init_queue+0xb6/0x120
[   57.945918][ T1611]  xsk_setsockopt+0x43f/0x6f0
[   57.945936][ T1611]  ? __cfi_xsk_setsockopt+0x10/0x10
[   57.945954][ T1611]  ? do_futex+0x309/0x500
[   57.945980][ T1611]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   57.945999][ T1611]  ? security_socket_setsockopt+0x33/0xd0
[   57.946022][ T1611]  ? __cfi_xsk_setsockopt+0x10/0x10
[   57.946065][ T1611]  do_sock_setsockopt+0x26a/0x400
[   57.946082][ T1611]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   57.946101][ T1611]  __x64_sys_setsockopt+0x1b8/0x250
[   57.946119][ T1611]  x64_sys_call+0x2adc/0x2ee0
[   57.946140][ T1611]  do_syscall_64+0x58/0xf0
[   57.946154][ T1611]  ? clear_bhb_loop+0x50/0xa0
[   57.946172][ T1611]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.946192][ T1611] RIP: 0033:0x7f4b4f58e929
[   57.946212][ T1611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.946233][ T1611] RSP: 002b:00007f4b50432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   57.946260][ T1611] RAX: ffffffffffffffda RBX: 00007f4b4f7b5fa0 RCX: 00007f4b4f58e929
[   57.946279][ T1611] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   57.946289][ T1611] RBP: 00007f4b4f610b39 R08: 0000000000000004 R09: 0000000000000000
[   57.946300][ T1611] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   57.946310][ T1611] R13: 0000000000000000 R14: 00007f4b4f7b5fa0 R15: 00007ffe3853e038
[   57.946325][ T1611]  </TASK>
[   57.946331][ T1611] Mem-Info:
[   58.270923][ T1611] active_anon:7825 inactive_anon:0 isolated_anon:0
[   58.270923][ T1611]  active_file:19173 inactive_file:6324 isolated_file:0
[   58.270923][ T1611]  unevictable:0 dirty:30 writeback:0
[   58.270923][ T1611]  slab_reclaimable:4634 slab_unreclaimable:69780
[   58.270923][ T1611]  mapped:24345 shmem:164 pagetables:881
[   58.270923][ T1611]  sec_pagetables:0 bounce:0
[   58.270923][ T1611]  kernel_misc_reclaimable:0
[   58.270923][ T1611]  free:1522906 free_pcp:4749 free_cma:0
[   58.317752][ T1611] Node 0 active_anon:31300kB inactive_anon:0kB active_file:76692kB inactive_file:25296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97380kB dirty:120kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:4528kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no
[   58.351030][ T1611] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:5740kB free_cma:0kB
[   58.381860][ T1611] lowmem_reserve[]: 0 3921 3921
[   58.386900][ T1611] Normal free:3131412kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31300kB inactive_anon:0kB active_file:76692kB inactive_file:25296kB unevictable:0kB writepending:120kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:13172kB local_pcp:1388kB free_cma:0kB
[   58.420053][ T1611] lowmem_reserve[]: 0 0 0
[   58.424985][ T1611] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   58.441590][ T1611] Normal: 3*4kB (UME) 5*8kB (UME) 7*16kB (UE) 394*32kB (ME) 326*64kB (UME) 119*128kB (UME) 35*256kB (UME) 15*512kB (UME) 10*1024kB (UME) 8*2048kB (ME) 742*4096kB (UM) = 3131364kB
[   58.459936][ T1611] 25657 total pagecache pages
[   58.464950][ T1611] 0 pages in swap cache
[   58.469142][ T1611] Free swap  = 124984kB
[   58.473432][ T1611] Total swap = 124996kB
[   58.477632][ T1611] 2097051 pages RAM
[   58.481473][ T1611] 0 pages HighMem/MovableOnly
[   58.486199][ T1611] 351516 pages reserved
[   58.490376][ T1611] 0 pages cma reserved
[   58.496615][ T1611] Memory allocations:
[   58.500622][ T1611]          0 B        0 init/main.c:1370 func:do_initcalls
[   58.507987][ T1611]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   58.516949][ T1611]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   58.525565][ T1611]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   58.534601][ T1611]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   58.545009][ T1611]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   58.554349][ T1611]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   58.562752][ T1611]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   58.572235][ T1611]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   58.580642][ T1611]          0 B        0 init/initramfs.c:101 func:find_link
[   59.022568][  T314] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   59.047999][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   59.048017][   T36] audit: type=1400 audit(1750776439.100:21821): avc:  denied  { create } for  pid=1637 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   59.086955][ T1644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.161768][ T1651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'.
[   59.172534][  T314] usb 6-1: Using ep0 maxpacket: 16
[   59.186007][  T314] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   59.202547][  T314] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   59.214780][  T314] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.224814][  T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   59.233717][  T314] usb 6-1: SerialNumber: syz
[   59.240044][ T1635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   59.248242][ T1635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   59.264189][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   59.271100][  T637] Bluetooth: hci0: command 0x1003 tx timeout
[   59.325501][ T1661] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   59.335218][ T1661] overlayfs: missing 'lowerdir'
[   59.340888][ T1661] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.341323][ T1661] rust_binder: Error while translating object.
[   59.348564][ T1661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   59.355602][ T1661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:234
[   59.458628][  T314] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[   59.475753][   T36] audit: type=1400 audit(1750776439.510:21822): avc:  denied  { lock } for  pid=1634 comm="syz.5.473" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   59.477560][  T314] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[   59.510818][  T314] usb 6-1: USB disconnect, device number 8
[   59.541908][ T1670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149
[   59.563855][   T36] audit: type=1400 audit(1750776439.620:21823): avc:  denied  { read } for  pid=1669 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   59.595646][ T1674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'.
[   59.624370][ T1670] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   59.630997][ T1678] /dev/rnullb0: Can't open blockdev
[   59.631822][ T1670] rust_binder: Write failure EINVAL in pid:149
[   59.652912][ T1680] can: request_module (can-proto-0) failed.
[   59.717109][ T1682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153
[   59.731151][ T1685] rust_binder: Error in use_page_slow: ESRCH
[   59.740370][ T1685] rust_binder: use_range failure ESRCH
[   59.746732][ T1685] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[   59.752221][ T1685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   59.760545][ T1685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:156
[   59.786199][ T1687] /dev/rnullb0: Can't open blockdev
[   59.943945][ T1699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.944350][ T1699] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   59.959624][ T1699] rust_binder: Write failure EINVAL in pid:258
[   60.047297][ T1707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163
[   60.057701][   T36] audit: type=1400 audit(1750776440.100:21824): avc:  denied  { map } for  pid=1700 comm="syz.2.498" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   60.103724][ T1705] binder: Unknown parameter 'fscontext?}'
[   60.126546][ T1712] overlayfs: failed to clone upperpath
[   60.159883][ T1709] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[   60.188395][ T1721] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.200841][ T1722] rust_binder: Error while translating object.
[   60.208567][ T1721] rust_binder: Write failure EINVAL in pid:262
[   60.217393][ T1726] SELinux: security_context_str_to_sid () failed with errno=-22
[   60.225283][ T1722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.233193][ T1721] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   60.236252][ T1722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[   60.248784][ T1721] rust_binder: Write failure EINVAL in pid:262
[   60.423463][ T1742] rust_binder: Write failure EINVAL in pid:173
[   60.476461][   T36] audit: type=1400 audit(1750776440.530:21825): avc:  denied  { ioctl } for  pid=1747 comm="syz.2.515" path="socket:[12079]" dev="sockfs" ino=12079 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.598614][   T36] audit: type=1400 audit(1750776440.650:21826): avc:  denied  { ioctl } for  pid=1755 comm="syz.1.519" path="socket:[13230]" dev="sockfs" ino=13230 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   60.625073][ T1756] overlay: Unknown parameter 'fsmagic'
[   60.712682][ T1088] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   60.762561][   T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   60.842570][ T1088] usb 5-1: device descriptor read/64, error -71
[   60.912604][   T31] usb 3-1: Using ep0 maxpacket: 8
[   60.919668][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[   60.928317][   T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   60.937635][   T31] usb 3-1: config 1 has no interface number 1
[   60.944734][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   60.958526][   T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   60.972272][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   60.982145][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.991313][   T31] usb 3-1: Product: syz
[   60.996324][   T31] usb 3-1: Manufacturer: syz
[   61.000953][   T31] usb 3-1: SerialNumber: syz
[   61.092697][ T1088] usb 5-1: device descriptor read/64, error -71
[   61.216694][   T31] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   61.225090][   T31] usb 3-1: 2:1 : invalid channels 0
[   61.234079][   T31] usb 3-1: USB disconnect, device number 19
[   61.332568][ T1088] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   61.462574][ T1088] usb 5-1: device descriptor read/64, error -71
[   61.481888][   T36] audit: type=1326 audit(1750776441.530:21827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3f78e929 code=0x7ffc0000
[   61.507874][   T36] audit: type=1326 audit(1750776441.530:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3f78e929 code=0x7ffc0000
[   61.682429][   T36] audit: type=1326 audit(1750776441.740:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a3f78d290 code=0x7ffc0000
[   61.712096][   T36] audit: type=1326 audit(1750776441.740:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.5.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a3f78e52b code=0x7ffc0000
[   61.745102][ T1088] usb 5-1: device descriptor read/64, error -71
[   61.762884][ T1791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171
[   61.776327][ T1792] incfs: Error accessing: ./file0.
[   61.796497][ T1792] incfs: mount failed -20
[   61.872721][ T1088] usb usb5-port1: attempt power cycle
[   62.212508][ T1088] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   62.233914][ T1088] usb 5-1: device descriptor read/8, error -71
[   62.363612][ T1088] usb 5-1: device descriptor read/8, error -71
[   62.522828][ T1846] 8021q: VLANs not supported on ip_vti0
[   62.602527][ T1088] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   62.633551][ T1088] usb 5-1: device descriptor read/8, error -71
[   62.718105][ T1857] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.718369][ T1857] netlink: 236 bytes leftover after parsing attributes in process `syz.5.553'.
[   62.735341][ T1857] overlayfs: failed to resolve './file1': -2
[   62.773923][ T1088] usb 5-1: device descriptor read/8, error -71
[   62.783858][ T1860] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.787205][ T1860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276
[   62.788572][ T1864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.892857][ T1088] usb usb5-port1: unable to enumerate USB device
[   63.188499][ T1885] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.262616][ T1892] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.274908][ T1894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   63.289790][ T1894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200
[   63.409358][ T1916] netlink: 'syz.2.572': attribute type 4 has an invalid length.
[   63.447569][ T1916] netlink: 'syz.2.572': attribute type 4 has an invalid length.
[   63.475410][ T1916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.477242][ T1916] rust_binder: Write failure EINVAL in pid:291
[   63.529353][ T1920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   63.605355][ T1925] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.639913][ T1931] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.739832][ T1934] kvm: kvm [1933]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[   64.149695][ T1963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190
[   64.150415][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   64.150445][   T36] audit: type=1326 audit(1750776444.200:21849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1962 comm="syz.4.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f58e929 code=0x0
[   64.472560][  T314] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   64.684027][  T314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.694936][  T314] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   64.709790][  T314] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.719209][  T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   64.728718][  T314] usb 6-1: SerialNumber: syz
[   64.744342][  T314] usb 6-1: bad CDC descriptors
[   64.810976][ T2001] UHID_CREATE from different security context by process 311 (syz.2.603), this is not allowed.
[   64.952096][ T1968] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   65.068895][ T2014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=2014 comm=syz.4.606
[   65.108123][   T10] usb 6-1: USB disconnect, device number 9
[   65.122530][  T314] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   65.166235][   T36] audit: type=1400 audit(1750776445.220:21850): avc:  denied  { setopt } for  pid=2028 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.245436][   T36] audit: type=1400 audit(1750776445.300:21851): avc:  denied  { create } for  pid=2043 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   65.282729][  T314] usb 3-1: Using ep0 maxpacket: 32
[   65.293234][  T314] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.312510][  T314] usb 3-1: config 0 interface 0 has no altsetting 0
[   65.322612][  T314] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   65.331919][  T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.353284][  T314] usb 3-1: config 0 descriptor??
[   65.488017][   T36] audit: type=1400 audit(1750776445.540:21852): avc:  denied  { create } for  pid=2055 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.822615][  T314] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found
[   65.830360][  T314] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found
[   65.966423][  T314] usb 3-1: USB disconnect, device number 20
[   65.966469][   T36] audit: type=1400 audit(1750776446.020:21853): avc:  denied  { map } for  pid=2005 comm="syz.2.604" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   66.204095][ T2093] rust_binder: Write failure EFAULT in pid:227
[   66.272432][   T36] audit: type=1326 audit(1750776446.320:21854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2102 comm="syz.1.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220038e929 code=0x0
[   66.406096][ T2117] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   66.628860][ T2131] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   66.637249][ T2131] rust_binder: Write failure EINVAL in pid:215
[   66.637662][ T2128] syz.5.645 uses obsolete (PF_INET,SOCK_PACKET)
[   66.651861][   T36] audit: type=1400 audit(1750776446.700:21855): avc:  denied  { read } for  pid=2127 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.693222][   T36] audit: type=1400 audit(1750776446.740:21856): avc:  denied  { remount } for  pid=2124 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   66.760177][ T2142] rust_binder: Error while translating object.
[   66.760230][ T2142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   66.770797][ T2142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:222
[   67.127600][ T2175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:234
[   67.152896][ T2177] can0: slcan on ttyS3.
[   67.171367][   T36] audit: type=1400 audit(1750776447.220:21857): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   67.210773][ T2180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.211328][   T36] audit: type=1400 audit(1750776447.220:21858): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   67.336780][ T2186] kvm: pic: non byte write
[   67.342066][ T2186] random: crng reseeded on system resumption
[   67.412589][  T314] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[   67.466469][ T2205] /dev/rnullb0: Can't open blockdev
[   67.485071][ T2207] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.573957][  T314] usb 5-1: unable to get BOS descriptor or descriptor too short
[   67.589248][  T314] usb 5-1: not running at top speed; connect to a high speed hub
[   67.598212][  T314] usb 5-1: config 1 has an invalid interface number: 138 but max is 0
[   67.606836][  T314] usb 5-1: config 1 has no interface number 0
[   67.613420][  T314] usb 5-1: config 1 interface 138 has no altsetting 0
[   67.622650][  T314] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[   67.632120][  T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.640311][  T314] usb 5-1: Product: syz
[   67.644581][  T314] usb 5-1: Manufacturer: syz
[   67.649205][  T314] usb 5-1: SerialNumber: syz
[   67.702851][ T2213] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.703409][ T2213] rust_binder: Error while translating object.
[   67.710646][ T2213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   67.717842][ T2213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:342
[   67.740830][ T2216] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.758732][ T2216] rust_binder: Failed to allocate buffer. len:18446744073709551248, is_oneway:false
[   67.766358][ T2216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   67.776846][ T2216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:345
[   67.844464][ T2230] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.854482][ T2230] rust_binder: Error while translating object.
[   67.861167][ T2230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   67.869041][ T2230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:353
[   67.881041][ T2230] loop7: detected capacity change from 0 to 16384
[   67.900632][ T2230] netlink: 'syz.2.673': attribute type 11 has an invalid length.
[   67.915733][ T2230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'.
[   67.933777][  T314] usb 5-1: MIDIStreaming interface descriptor not found
[   67.957378][  T314] usb 5-1: USB disconnect, device number 12
[   68.002494][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   68.065592][ T2217] can0 (unregistered): slcan off ttyS3.
[   68.117843][ T2262] rust_binder: Write failure EFAULT in pid:359
[   68.153618][ T2266] can0: slcan on ttyS3.
[   68.209172][ T2266] can0 (unregistered): slcan off ttyS3.
[   68.227737][ T2278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.683'.
[   68.281834][ T2291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'.
[   68.287077][ T2292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'.
[   68.325979][ T2291] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   68.489701][ T2308] rust_binder: Write failure EINVAL in pid:238
[   68.722610][  T314] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   68.822504][   T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   68.920498][  T314] usb 3-1: Using ep0 maxpacket: 32
[   68.936692][  T314] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   68.945958][  T314] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   68.958297][  T314] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   68.969445][  T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   68.969611][ T2320] tmpfs: Unknown parameter '�'
[   68.980068][  T314] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   68.997619][  T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   69.008911][  T314] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   69.012559][   T31] usb 6-1: Using ep0 maxpacket: 16
[   69.020662][  T314] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   69.041117][   T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   69.042949][  T314] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   69.052878][   T31] usb 6-1: config 0 has no interface number 0
[   69.072820][  T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.082532][   T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.096255][  T314] usb 3-1: config 0 descriptor??
[   69.112529][   T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.124484][   T31] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   69.142507][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.160581][   T31] usb 6-1: config 0 descriptor??
[   69.263495][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   69.263515][   T36] audit: type=1400 audit(1750776449.320:21878): avc:  denied  { unmount } for  pid=852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.307852][  T314] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   69.320864][  T314] usb 3-1: USB disconnect, device number 21
[   69.331456][  T314] usblp0: removed
[   69.351732][   T36] audit: type=1400 audit(1750776449.400:21879): avc:  denied  { audit_read } for  pid=2346 comm="syz.4.700" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.375122][ T2345] can0: slcan on ttyS3.
[   69.439861][ T2358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'.
[   69.645382][   T36] audit: type=1400 audit(1750776449.700:21880): avc:  denied  { accept } for  pid=2381 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   69.722525][  T314] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[   69.739576][   T36] audit: type=1400 audit(1750776449.790:21881): avc:  denied  { create } for  pid=2391 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   69.807794][   T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0008/input/input9
[   69.821170][   T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0008/input/input10
[   69.840595][   T31] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1
[   69.873899][  T314] usb 3-1: unable to get BOS descriptor or descriptor too short
[   69.879778][ T2396] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[   69.882045][  T314] usb 3-1: not running at top speed; connect to a high speed hub
[   69.898770][  T314] usb 3-1: config 1 has an invalid interface number: 138 but max is 0
[   69.910369][  T314] usb 3-1: config 1 has no interface number 0
[   69.916611][  T314] usb 3-1: config 1 interface 138 has no altsetting 0
[   69.925814][  T314] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[   69.936430][  T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.944636][  T314] usb 3-1: Product: syz
[   69.950276][  T314] usb 3-1: Manufacturer: syz
[   69.955204][  T314] usb 3-1: SerialNumber: syz
[   70.073333][   T61] usb 6-1: USB disconnect, device number 10
[   70.251639][  T314] usb 3-1: MIDIStreaming interface descriptor not found
[   70.268474][  T314] usb 3-1: USB disconnect, device number 22
[   70.286401][ T2344] can0 (unregistered): slcan off ttyS3.
[   70.749892][ T2468] can0: slcan on ttyS3.
[   70.804798][ T2478] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.813780][ T2476] bridge0: port 3(veth0_to_bridge) entered blocking state
[   70.832100][ T2476] bridge0: port 3(veth0_to_bridge) entered disabled state
[   70.846773][ T2476] veth0_to_bridge: entered allmulticast mode
[   70.856308][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.856757][ T2484] rust_binder: Error in use_page_slow: ESRCH
[   70.864193][ T2476] veth0_to_bridge: entered promiscuous mode
[   70.877007][ T2484] rust_binder: use_range failure ESRCH
[   70.877039][ T2484] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   70.884065][ T2484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   70.892140][ T2484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:277
[   70.906625][ T2476] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   70.937405][ T2476] bridge0: port 3(veth0_to_bridge) entered blocking state
[   70.944624][ T2476] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   71.033364][ T2427] can0 (unregistered): slcan off ttyS3.
[   71.107573][ T2517] input: syz0 as /devices/virtual/input/input11
[   71.193016][ T2528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.740'.
[   71.212895][ T2528] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.419642][ T2551] rust_binder: Write failure EINVAL in pid:304
[   71.421054][   T36] audit: type=1400 audit(1750776451.470:21882): avc:  denied  { create } for  pid=2548 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   71.541687][ T2563] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.589140][ T2563] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   71.595774][ T2563] rust_binder: Read failure Err(EFAULT) in pid:290
[   71.604348][ T2563] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.613489][ T2570] overlayfs: failed to clone upperpath
[   71.626458][ T2563] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   71.626476][ T2563] rust_binder: Read failure Err(EFAULT) in pid:290
[   71.642173][ T2570] overlay: Unknown parameter 'mounts'
[   71.654464][ T2570] overlay: Unknown parameter 'mounts'
[   71.670001][ T2570] overlay: Unknown parameter 'mounts'
[   71.676735][ T2570] overlay: Unknown parameter 'mounts'
[   71.682927][ T2570] overlay: Unknown parameter 'mounts'
[   71.689259][ T2570] overlay: Unknown parameter 'mounts'
[   71.696569][ T2570] overlay: Unknown parameter 'mounts'
[   71.702628][ T2570] overlay: Unknown parameter 'mounts'
[   71.710165][ T2570] overlay: Unknown parameter 'mounts'
[   71.717392][ T2570] overlay: Unknown parameter 'mounts'
[   71.725005][ T2570] overlay: Unknown parameter 'mounts'
[   71.731557][ T2570] overlay: Unknown parameter 'mounts'
[   71.741976][ T2575] binder: Bad value for 'max'
[   71.759113][ T2570] overlay: Unknown parameter 'mounts'
[   71.776382][ T2570] overlay: Unknown parameter 'mounts'
[   71.785633][ T2570] overlay: Unknown parameter 'mounts'
[   71.791910][ T2570] overlay: Unknown parameter 'mounts'
[   71.806550][ T2570] overlay: Unknown parameter 'mounts'
[   71.814546][ T2570] overlay: Unknown parameter 'mounts'
[   71.820584][ T2570] overlay: Unknown parameter 'mounts'
[   71.832759][ T2570] overlay: Unknown parameter 'mounts'
[   71.841980][ T2570] overlay: Unknown parameter 'mounts'
[   71.847866][ T2570] overlay: Unknown parameter 'mounts'
[   71.861345][ T2570] overlay: Unknown parameter 'mounts'
[   71.867038][ T2570] overlay: Unknown parameter 'mounts'
[   71.872764][ T2570] overlay: Unknown parameter 'mounts'
[   71.878376][ T2570] overlay: Unknown parameter 'mounts'
[   71.883998][ T2570] overlay: Unknown parameter 'mounts'
[   71.889499][ T2570] overlay: Unknown parameter 'mounts'
[   71.895058][ T2570] overlay: Unknown parameter 'mounts'
[   71.900643][ T2570] overlay: Unknown parameter 'mounts'
[   71.906238][ T2570] overlay: Unknown parameter 'mounts'
[   71.912101][ T2570] overlay: Unknown parameter 'mounts'
[   71.919698][ T2570] overlay: Unknown parameter 'mounts'
[   71.927950][ T2570] overlay: Unknown parameter 'mounts'
[   71.933603][ T2570] overlay: Unknown parameter 'mounts'
[   71.940624][ T2570] overlay: Unknown parameter 'mounts'
[   71.947165][ T2570] overlay: Unknown parameter 'mounts'
[   71.953140][ T2570] overlay: Unknown parameter 'mounts'
[   71.968855][ T2570] overlay: Unknown parameter 'mounts'
[   71.974370][   T36] audit: type=1400 audit(1750776452.020:21883): avc:  denied  { ioctl } for  pid=2581 comm="syz.4.759" path="net:[4026532718]" dev="nsfs" ino=4026532718 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   72.000071][ T2570] overlay: Unknown parameter 'mounts'
[   72.005900][ T2570] overlay: Unknown parameter 'mounts'
[   72.011467][ T2570] overlay: Unknown parameter 'mounts'
[   72.022682][ T2570] overlay: Unknown parameter 'mounts'
[   72.028355][ T2570] overlay: Unknown parameter 'mounts'
[   72.034479][ T2570] overlay: Unknown parameter 'mounts'
[   72.040128][ T2570] overlay: Unknown parameter 'mounts'
[   72.046035][ T2570] overlay: Unknown parameter 'mounts'
[   72.051645][ T2570] overlay: Unknown parameter 'mounts'
[   72.057535][ T2570] overlay: Unknown parameter 'mounts'
[   72.063358][ T2570] overlay: Unknown parameter 'mounts'
[   72.069043][ T2570] overlay: Unknown parameter 'mounts'
[   72.072534][  T314] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   72.082225][ T2570] overlay: Unknown parameter 'mounts'
[   72.088031][ T2570] overlay: Unknown parameter 'mounts'
[   72.093529][ T1342] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[   72.101898][ T2570] overlay: Unknown parameter 'mounts'
[   72.107731][ T2570] overlay: Unknown parameter 'mounts'
[   72.113735][ T2570] overlay: Unknown parameter 'mounts'
[   72.119449][ T2570] overlay: Unknown parameter 'mounts'
[   72.125369][ T2570] overlay: Unknown parameter 'mounts'
[   72.131042][ T2570] overlay: Unknown parameter 'mounts'
[   72.136961][ T2570] overlay: Unknown parameter 'mounts'
[   72.142644][ T2570] overlay: Unknown parameter 'mounts'
[   72.148586][ T2570] overlay: Unknown parameter 'mounts'
[   72.243626][ T1342] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt
[   72.256275][   T36] audit: type=1400 audit(1750776452.310:21884): avc:  denied  { create } for  pid=2604 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   72.257157][ T1342] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   72.289623][ T1342] usb 6-1: config 1 interface 0 has no altsetting 0
[   72.431879][ T2614] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   72.439172][ T2614] rust_binder: Write failure EINVAL in pid:393
[   72.729544][   T36] audit: type=1400 audit(1750776452.780:21885): avc:  denied  { read append } for  pid=2625 comm="syz.2.772" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.759378][   T36] audit: type=1400 audit(1750776452.780:21886): avc:  denied  { open } for  pid=2625 comm="syz.2.772" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.783883][   T36] audit: type=1400 audit(1750776452.790:21887): avc:  denied  { ioctl } for  pid=2625 comm="syz.2.772" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   73.813303][ T2667] binder: Unknown parameter 'seclabel�'
[   73.849315][ T2669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   73.859149][ T2669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   73.859201][ T2669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:421
[   74.044470][ T2679] fuse: Unknown parameter '0x0000000000000007'
[   74.091019][ T2682] 9pnet: p9_errstr2errno: server reported unknown error aaaaa
[   74.221802][ T2697] tipc: Started in network mode
[   74.226924][ T2697] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   74.236697][ T2697] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   74.245618][ T2697] tipc: Enabled bearer <udp:syz0>, priority 10
[   74.679106][ T2738] binder: Bad value for 'stats'
[   74.685010][ T2738] binder: Bad value for 'stats'
[   74.708300][ T2741] binder: Bad value for 'stats'
[   74.871678][ T1342] usb 6-1: string descriptor 0 read error: -71
[   74.895662][ T1342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   74.914085][ T1342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.929069][ T1342] usb 6-1: can't set config #1, error -71
[   74.936399][ T1342] usb 6-1: USB disconnect, device number 11
[   74.985948][ T2762] rust_binder: Write failure EFAULT in pid:447
[   75.000587][ T2760] can0: slcan on ttyS3.
[   75.163194][ T2783] SELinux: security_context_str_to_sid () failed with errno=-22
[   75.172955][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   75.172972][   T36] audit: type=1400 audit(1750776455.230:21891): avc:  denied  { map } for  pid=2773 comm="syz.2.823" path="socket:[19602]" dev="sockfs" ino=19602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   75.236078][ T2788] overlayfs: overlapping lowerdir path
[   75.242146][   T36] audit: type=1400 audit(1750776455.290:21892): avc:  denied  { mount } for  pid=2785 comm="syz.2.825" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   75.332548][ T1342] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[   75.341113][   T36] audit: type=1400 audit(1750776455.390:21893): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   75.372545][  T306] tipc: Node number set to 1
[   75.434979][ T2800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'.
[   75.524918][ T1342] usb 6-1: unable to get BOS descriptor or descriptor too short
[   75.539466][ T1342] usb 6-1: not running at top speed; connect to a high speed hub
[   75.554933][ T1342] usb 6-1: config 1 has an invalid interface number: 138 but max is 0
[   75.556340][ T2808] x_tables: duplicate underflow at hook 1
[   75.563954][ T1342] usb 6-1: config 1 has no interface number 0
[   75.576240][ T1342] usb 6-1: config 1 interface 138 has no altsetting 0
[   75.585279][ T1342] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[   75.600054][ T1342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.610605][ T1342] usb 6-1: Product: syz
[   75.623636][ T1342] usb 6-1: Manufacturer: syz
[   75.628400][ T1342] usb 6-1: SerialNumber: syz
[   75.653284][   T36] audit: type=1326 audit(1750776455.710:21894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2818 comm="syz.1.836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220038e929 code=0x0
[   75.992535][ T1342] usb 6-1: MIDIStreaming interface descriptor not found
[   76.008423][ T1342] usb 6-1: USB disconnect, device number 12
[   76.023256][ T2759] can0 (unregistered): slcan off ttyS3.
[   76.317775][ T2865] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   76.453981][ T2874] rust_binder: Write failure EFAULT in pid:470
[   76.467467][ T2877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472
[   76.475808][ T2878] rust_binder: Write failure EINVAL in pid:472
[   76.510055][ T2880] netlink: 'syz.1.844': attribute type 4 has an invalid length.
[   76.620731][ T2890] FAULT_INJECTION: forcing a failure.
[   76.620731][ T2890] name failslab, interval 1, probability 0, space 0, times 1
[   76.634743][ T2890] CPU: 1 UID: 0 PID: 2890 Comm: syz.4.847 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[   76.634784][ T2890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   76.634798][ T2890] Call Trace:
[   76.634806][ T2890]  <TASK>
[   76.634816][ T2890]  __dump_stack+0x21/0x30
[   76.634849][ T2890]  dump_stack_lvl+0x10c/0x190
[   76.634875][ T2890]  ? __cfi_dump_stack_lvl+0x10/0x10
[   76.634902][ T2890]  ? avc_has_perm+0x144/0x220
[   76.634927][ T2890]  ? __cfi_avc_has_perm+0x10/0x10
[   76.634951][ T2890]  dump_stack+0x19/0x20
[   76.634976][ T2890]  should_fail_ex+0x3d9/0x530
[   76.635003][ T2890]  should_failslab+0xac/0x100
[   76.635036][ T2890]  __kmalloc_cache_noprof+0x41/0x3c0
[   76.635065][ T2890]  ? vhost_task_create+0x101/0x350
[   76.635097][ T2890]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   76.635133][ T2890]  vhost_task_create+0x101/0x350
[   76.635164][ T2890]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   76.635199][ T2890]  ? __cfi_vhost_task_create+0x10/0x10
[   76.635229][ T2890]  ? __cfi_vhost_task_fn+0x10/0x10
[   76.635258][ T2890]  ? __kasan_check_write+0x18/0x20
[   76.635284][ T2890]  ? mutex_lock+0x92/0x1c0
[   76.635308][ T2890]  ? __cfi_mutex_lock+0x10/0x10
[   76.635338][ T2890]  ? kernel_text_address+0xa9/0xe0
[   76.635437][ T2890]  kvm_mmu_post_init_vm+0x1a6/0x310
[   76.635465][ T2890]  kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0
[   76.635492][ T2890]  ? _parse_integer_limit+0x195/0x1e0
[   76.635518][ T2890]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   76.635543][ T2890]  ? kstrtoull+0x13b/0x1e0
[   76.635566][ T2890]  ? kstrtouint+0x78/0xf0
[   76.635588][ T2890]  ? ioctl_has_perm+0x1aa/0x4d0
[   76.635621][ T2890]  ? __asan_memcpy+0x5a/0x80
[   76.635647][ T2890]  ? ioctl_has_perm+0x3e0/0x4d0
[   76.635680][ T2890]  ? has_cap_mac_admin+0xd0/0xd0
[   76.635712][ T2890]  ? __kasan_check_write+0x18/0x20
[   76.635738][ T2890]  ? mutex_lock_killable+0x92/0x1c0
[   76.635764][ T2890]  ? __cfi_mutex_lock_killable+0x10/0x10
[   76.635791][ T2890]  ? proc_fail_nth_write+0x17e/0x210
[   76.635816][ T2890]  kvm_vcpu_ioctl+0x96f/0xee0
[   76.635846][ T2890]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   76.635876][ T2890]  ? __cfi_vfs_write+0x10/0x10
[   76.635904][ T2890]  ? __kasan_check_write+0x18/0x20
[   76.635929][ T2890]  ? mutex_unlock+0x8b/0x240
[   76.635954][ T2890]  ? __cfi_mutex_unlock+0x10/0x10
[   76.635978][ T2890]  ? __fget_files+0x2c5/0x340
[   76.636011][ T2890]  ? __fget_files+0x2c5/0x340
[   76.636042][ T2890]  ? bpf_lsm_file_ioctl+0xd/0x20
[   76.636067][ T2890]  ? security_file_ioctl+0x34/0xd0
[   76.636098][ T2890]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   76.636127][ T2890]  __se_sys_ioctl+0x135/0x1b0
[   76.636158][ T2890]  __x64_sys_ioctl+0x7f/0xa0
[   76.636189][ T2890]  x64_sys_call+0x1878/0x2ee0
[   76.636219][ T2890]  do_syscall_64+0x58/0xf0
[   76.636238][ T2890]  ? clear_bhb_loop+0x50/0xa0
[   76.636263][ T2890]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   76.636286][ T2890] RIP: 0033:0x7f4b4f58e929
[   76.636305][ T2890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.636325][ T2890] RSP: 002b:00007f4b50432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   76.636350][ T2890] RAX: ffffffffffffffda RBX: 00007f4b4f7b5fa0 RCX: 00007f4b4f58e929
[   76.636372][ T2890] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   76.636386][ T2890] RBP: 00007f4b50432090 R08: 0000000000000000 R09: 0000000000000000
[   76.636400][ T2890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.636413][ T2890] R13: 0000000000000000 R14: 00007f4b4f7b5fa0 R15: 00007ffe3853e038
[   76.636432][ T2890]  </TASK>
[   77.106245][ T2914] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=2914 comm=syz.4.854
[   77.121147][   T36] audit: type=1400 audit(1750776457.170:21895): avc:  denied  { create } for  pid=2913 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.147025][   T36] audit: type=1400 audit(1750776457.170:21896): avc:  denied  { read } for  pid=2913 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   77.225085][ T2918] rust_binder: Write failure EINVAL in pid:345
[   77.248218][ T2922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'.
[   77.442520][ T1088] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   77.602514][ T1088] usb 6-1: device descriptor read/64, error -71
[   77.732866][ T2933] overlayfs: missing 'lowerdir'
[   77.852555][ T1088] usb 6-1: device descriptor read/64, error -71
[   78.102500][ T1088] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   78.211946][ T2959] 9pnet_fd: Insufficient options for proto=fd
[   78.215774][   T36] audit: type=1400 audit(1750776458.260:21897): avc:  denied  { ioctl } for  pid=2958 comm="syz.2.872" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   78.243534][ T1088] usb 6-1: device descriptor read/64, error -71
[   78.250068][ T2960] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   78.412541][  T314] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   78.512547][ T1088] usb 6-1: device descriptor read/64, error -71
[   78.582890][  T314] usb 5-1: no configurations
[   78.587549][  T314] usb 5-1: can't read configurations, error -22
[   78.623404][ T1088] usb usb6-port1: attempt power cycle
[   78.722537][  T314] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   78.868084][ T2990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'.
[   78.882572][  T314] usb 5-1: no configurations
[   78.887575][  T314] usb 5-1: can't read configurations, error -22
[   78.898371][  T314] usb usb5-port1: attempt power cycle
[   78.982813][ T1088] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   79.003615][ T1088] usb 6-1: device descriptor read/8, error -71
[   79.022278][ T3005] rust_kernel: panicked at drivers/android/binder/node.rs:877:13:
[   79.022278][ T3005] attempt to subtract with overflow
[   79.035688][ T3005] ------------[ cut here ]------------
[   79.041169][ T3005] kernel BUG at rust/helpers/bug.c:7!
[   79.047097][ T3005] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[   79.054267][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: syz.2.886 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270
[   79.062529][   T36] audit: type=1400 audit(1750776459.100:21898): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   79.067743][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   79.067761][ T3005] RIP: 0010:rust_helper_BUG+0x8/0x10
[   79.090631][   T36] audit: type=1400 audit(1750776459.100:21899): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.100607][ T3005] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 00 1d bd 7d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4a d9 f4 f1 90 90 90 90 90 90 90 90 90
[   79.100635][ T3005] RSP: 0018:ffffc9000e2bda90 EFLAGS: 00010246
[   79.100658][ T3005] RAX: 0000000000000061 RBX: 1ffff92001c57b54 RCX: 18f19e0e46fae600
[   79.100676][ T3005] RDX: ffffc90002675000 RSI: 0000000000002e9e RDI: 0000000000002e9f
[   79.106897][   T36] audit: type=1400 audit(1750776459.100:21900): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.127433][ T3005] RBP: ffffc9000e2bda90 R08: ffffc9000e2bd787 R09: 1ffff92001c57af0
[   79.127464][ T3005] R10: dffffc0000000000 R11: fffff52001c57af1 R12: 0000000000000000
[   79.127482][ T3005] R13: dffffc0000000000 R14: ffffc9000e2bdac0 R15: ffffc9000e2bdaf0
[   79.127500][ T3005] FS:  00007f00052036c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   79.127522][ T3005] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.127539][ T3005] CR2: 00002000000c1038 CR3: 000000012e9e6000 CR4: 00000000003526b0
[   79.173713][ T1088] usb 6-1: device descriptor read/8, error -71
[   79.191072][ T3005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   79.191098][ T3005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   79.191115][ T3005] Call Trace:
[   79.191124][ T3005]  <TASK>
[   79.191134][ T3005]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[   79.274812][ T3005]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[   79.282839][ T3005]  ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810
[   79.293448][ T3005]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[   79.307290][ T3005]  ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10
[   79.318641][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.323783][ T3005]  ? _raw_spin_lock+0x8c/0x120
[   79.328582][ T3005]  ? __cfi__raw_spin_lock+0x10/0x10
[   79.333904][ T3005]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[   79.341147][ T3005]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[   79.349107][ T3005]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[   79.359331][ T3005]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[   79.371442][ T3005]  ? __asan_memcpy+0x5a/0x80
[   79.376181][ T3005]  _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860
[   79.386395][ T3005]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10
[   79.397670][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.402999][ T3005]  ? _raw_spin_lock+0x8c/0x120
[   79.408088][ T3005]  ? __cfi__raw_spin_lock+0x10/0x10
[   79.413504][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.419439][ T3005]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20
[   79.429844][ T3005]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   79.439874][ T3005]  ? is_bpf_text_address+0x17b/0x1a0
[   79.445294][ T3005]  ? kernel_text_address+0xa9/0xe0
[   79.450466][ T3005]  ? is_bpf_text_address+0x17b/0x1a0
[   79.456060][ T3005]  ? kernel_text_address+0xa9/0xe0
[   79.461249][ T3005]  ? __kernel_text_address+0x11/0x40
[   79.466549][ T3005]  ? unwind_get_return_address+0x51/0x90
[   79.472255][ T3005]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   79.478440][ T3005]  ? arch_stack_walk+0x10b/0x170
[   79.483403][ T3005]  ? stack_trace_save+0x9d/0xe0
[   79.488298][ T3005]  ? stack_depot_save_flags+0x38/0x800
[   79.493804][ T3005]  ? kasan_save_stack+0x4d/0x60
[   79.498842][ T3005]  ? kasan_save_stack+0x3e/0x60
[   79.503900][ T3005]  ? __kasan_record_aux_stack+0xb2/0xd0
[   79.509462][ T3005]  ? kasan_record_aux_stack_noalloc+0xf/0x20
[   79.515565][ T3005]  ? __call_rcu_common+0xcc/0x6f0
[   79.520704][ T3005]  ? call_rcu+0x14/0x20
[   79.524876][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.530102][ T3005]  ? _raw_spin_trylock+0xaf/0x130
[   79.532581][ T1088] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   79.535145][ T3005]  ? __cfi__raw_spin_trylock+0x10/0x10
[   79.535189][ T3005]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   79.554546][ T3005]  ? _raw_spin_unlock+0x45/0x60
[   79.559446][ T3005]  ? call_rcu_nocb+0x6bd/0xc10
[   79.563691][ T1088] usb 6-1: device descriptor read/8, error -71
[   79.564242][ T3005]  ? swake_up_one_online_ipi+0x30/0x30
[   79.575889][ T3005]  ? is_bpf_text_address+0x17b/0x1a0
[   79.581203][ T3005]  ? kernel_text_address+0xa9/0xe0
[   79.586329][ T3005]  ? __kernel_text_address+0x11/0x40
[   79.591630][ T3005]  ? unwind_get_return_address+0x51/0x90
[   79.597372][ T3005]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   79.603573][ T3005]  ? arch_stack_walk+0x10b/0x170
[   79.608561][ T3005]  ? stack_depot_save_flags+0x38/0x800
[   79.614059][ T3005]  ? unwind_get_return_address+0x51/0x90
[   79.619749][ T3005]  ? kasan_save_track+0x4f/0x80
[   79.624631][ T3005]  ? kasan_save_track+0x3e/0x80
[   79.629510][ T3005]  ? kasan_save_alloc_info+0x40/0x50
[   79.634804][ T3005]  ? __kasan_kmalloc+0x96/0xb0
[   79.639590][ T3005]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   79.646218][ T3005]  ? krealloc_noprof+0x8d/0x130
[   79.651099][ T3005]  ? rust_helper_krealloc+0x33/0xd0
[   79.656335][ T3005]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100
[   79.666170][ T3005]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process8get_node+0x8b1/0x12e0
[   79.675848][ T3005]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process14set_as_manager+0x1c2/0xa60
[   79.686253][ T3005]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x135a/0x2c20
[   79.695986][ T3005]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   79.705711][ T3005]  ? __se_sys_ioctl+0x135/0x1b0
[   79.711190][ T3005]  ? __x64_sys_ioctl+0x7f/0xa0
[   79.716108][ T3005]  ? x64_sys_call+0x1878/0x2ee0
[   79.721130][ T3005]  ? do_syscall_64+0x58/0xf0
[   79.725945][ T3005]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   79.732042][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.737221][ T3005]  ? rust_helper_refcount_inc+0x55/0x80
[   79.742953][ T3005]  ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x55c/0xe30
[   79.754047][ T1088] usb 6-1: device descriptor read/8, error -71
[   79.754068][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.766055][ T3005]  ? _raw_spin_lock+0x8c/0x120
[   79.770848][ T3005]  ? cgroup_rstat_updated+0x132/0x7f0
[   79.776234][ T3005]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   79.782000][ T3005]  ? _raw_spin_unlock+0x45/0x60
[   79.787347][ T3005]  ? arch_scale_cpu_capacity+0x1c/0xb0
[   79.793135][ T3005]  ? update_cfs_group+0x260/0x260
[   79.798274][ T3005]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   79.804358][ T3005]  ? update_curr+0x949/0xc60
[   79.809078][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.814819][ T3005]  ? _raw_spin_lock+0x8c/0x120
[   79.819605][ T3005]  ? __cfi__raw_spin_lock+0x10/0x10
[   79.824823][ T3005]  ? _raw_spin_unlock+0x45/0x60
[   79.829693][ T3005]  ? rust_helper_spin_unlock+0x19/0x30
[   79.835191][ T3005]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   79.845706][ T3005]  ? tg_unthrottle_up+0x980/0x980
[   79.850844][ T3005]  ? __kasan_check_write+0x18/0x20
[   79.856094][ T3005]  ? rust_helper_refcount_dec_and_test+0x57/0x80
[   79.862651][ T3005]  ? _raw_spin_unlock+0x45/0x60
[   79.867539][ T3005]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   79.878404][ T3005]  ? kvm_sched_clock_read+0x15/0x30
[   79.883625][ T3005]  ? sched_clock_noinstr+0xd/0x30
[   79.888667][ T3005]  ? sched_clock+0x44/0x60
[   79.893098][ T3005]  ? sched_clock_cpu+0x75/0x400
[   79.897992][ T3005]  ? sched_balance_newidle+0x845/0xe00
[   79.903651][ T3005]  ? __cfi_sched_clock_cpu+0x10/0x10
[   79.909073][ T3005]  ? __cfi___switch_to+0x10/0x10
[   79.912757][ T1088] usb usb6-port1: unable to enumerate USB device
[   79.914299][ T3005]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20
[   79.929983][ T3005]  ? finish_task_switch+0x1de/0x780
[   79.935284][ T3005]  ? __switch_to_asm+0x3d/0x70
[   79.940139][ T3005]  ? avc_has_extended_perms+0x7c7/0xdd0
[   79.945807][ T3005]  ? __asan_memcpy+0x5a/0x80
[   79.950873][ T3005]  ? avc_has_extended_perms+0x921/0xdd0
[   79.956604][ T3005]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   79.966785][ T3005]  ? do_vfs_ioctl+0xeda/0x1e30
[   79.972271][ T3005]  ? __futex_queue+0x19a/0x340
[   79.977772][ T3005]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   79.983616][ T3005]  ? __cfi___futex_queue+0x10/0x10
[   79.988809][ T3005]  ? futex_wait_setup+0x1bc/0x260
[   79.993878][ T3005]  ? __futex_wait+0x218/0x2a0
[   79.998664][ T3005]  ? ioctl_has_perm+0x384/0x4d0
[   80.003544][ T3005]  ? has_cap_mac_admin+0xd0/0xd0
[   80.008507][ T3005]  ? futex_wake+0x63a/0x900
[   80.013467][ T3005]  ? futex_setup_timer+0xb4/0xd0
[   80.018519][ T3005]  ? futex_wait+0x288/0x540
[   80.023104][ T3005]  ? __cfi_futex_wait+0x10/0x10
[   80.027984][ T3005]  ? userfaultfd_unmap_complete+0x279/0x2d0
[   80.034100][ T3005]  ? selinux_file_ioctl+0x6e0/0x1360
[   80.039593][ T3005]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   80.045266][ T3005]  ? __cfi_do_mmap+0x10/0x10
[   80.049988][ T3005]  ? down_write_killable+0xe9/0x2d0
[   80.055300][ T3005]  ? do_futex+0x309/0x500
[   80.059744][ T3005]  ? __cfi_do_futex+0x10/0x10
[   80.064449][ T3005]  ? vm_mmap_pgoff+0x145/0x4e0
[   80.069387][ T3005]  ? __fget_files+0x2c5/0x340
[   80.074248][ T3005]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   80.083435][ T3005]  ? __se_sys_ioctl+0x114/0x1b0
[   80.088421][ T3005]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   80.097998][ T3005]  __se_sys_ioctl+0x135/0x1b0
[   80.102992][ T3005]  __x64_sys_ioctl+0x7f/0xa0
[   80.107887][ T3005]  x64_sys_call+0x1878/0x2ee0
[   80.112625][ T3005]  do_syscall_64+0x58/0xf0
[   80.117173][ T3005]  ? clear_bhb_loop+0x50/0xa0
[   80.122099][ T3005]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   80.128234][ T3005] RIP: 0033:0x7f000438e929
[   80.132876][ T3005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.152714][ T3005] RSP: 002b:00007f0005203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.161165][ T3005] RAX: ffffffffffffffda RBX: 00007f00045b5fa0 RCX: 00007f000438e929
[   80.169243][ T3005] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   80.177240][ T3005] RBP: 00007f0004410b39 R08: 0000000000000000 R09: 0000000000000000
[   80.185343][ T3005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.193331][ T3005] R13: 0000000000000000 R14: 00007f00045b5fa0 R15: 00007fff529a0ce8
[   80.201316][ T3005]  </TASK>
[   80.204343][ T3005] Modules linked in:
[   80.208749][ T3005] ---[ end trace 0000000000000000 ]---
[   80.214926][ T3005] RIP: 0010:rust_helper_BUG+0x8/0x10
[   80.220475][ T3005] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 00 1d bd 7d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4a d9 f4 f1 90 90 90 90 90 90 90 90 90
[   80.241326][ T3005] RSP: 0018:ffffc9000e2bda90 EFLAGS: 00010246
[   80.247578][ T3005] RAX: 0000000000000061 RBX: 1ffff92001c57b54 RCX: 18f19e0e46fae600
[   80.255678][ T3005] RDX: ffffc90002675000 RSI: 0000000000002e9e RDI: 0000000000002e9f
[   80.264747][ T3005] RBP: ffffc9000e2bda90 R08: ffffc9000e2bd787 R09: 1ffff92001c57af0
[   80.273803][  T314] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   80.281802][ T3005] R10: dffffc0000000000 R11: fffff52001c57af1 R12: 0000000000000000
[   80.289931][ T3005] R13: dffffc0000000000 R14: ffffc9000e2bdac0 R15: ffffc9000e2bdaf0
[   80.298069][ T3005] FS:  00007f00052036c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   80.307173][ T3005] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   80.314159][ T3005] CR2: 00002000000c1038 CR3: 000000012e9e6000 CR4: 00000000003526b0
[   80.322361][ T3005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   80.330605][  T314] usb 5-1: no configurations
[   80.335299][ T3005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   80.335312][  T314] usb 5-1: can't read configurations, error -22
[   80.350387][ T3005] Kernel panic - not syncing: Fatal exception
[   80.356944][ T3005] Kernel Offset: disabled
[   80.361547][ T3005] Rebooting in 86400 seconds..