last executing test programs:

58.944844154s ago: executing program 3 (id=140):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0)
read(r2, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r4)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
sendfile(r2, r2, 0x0, 0x7ffff000)

58.944614444s ago: executing program 3 (id=141):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x183180, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000440), 0x6)
mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x30)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(r0, 0xffffffffffffffff, 0x0)

58.888787818s ago: executing program 3 (id=142):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008eb8, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a7, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

58.810654715s ago: executing program 3 (id=145):
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='Y-{#\x00', 0xfffffffffffffffd)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x69af00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1000000004)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000002c1001c0"])
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000480)='./file0/file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x3, r1)
write(r8, &(0x7f0000000580)="bf890b7ab096a924b18678e2a7649895dbe5194aa895776a364b89dd4c4df6a8b5e4a4175e4e9f829e9135a3e36326b38033760cdfcb929e27d57493b69ede414cbdc0453a156fd6e9835384ec8175f0c6a60e43d08c341f9010c36f3c0a20e221768643c202a3df171aa72efb05d1de4804e13e962cc405c7d273e9d0561ddb6de0660cfd522b17300ba4c65d", 0x8d)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000005dc0), 0x0, 0x0, 0x1)

58.288742536s ago: executing program 3 (id=148):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4, 0x2, 0xf, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x3000, 0xd, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x5, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2, 0xe, 0xfc, 0x3, 0x52, 0x2, 0xd, 0x46, 0x3, 0xff, 0x1}, {0x100000, 0x0, 0x9, 0x3, 0x6, 0x1, 0x1, 0x5, 0x5, 0x1, 0xe, 0x4b}, {0x2, 0x1000, 0x0, 0x7, 0x3, 0x6c, 0x11, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x80a0000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x17, 0x1, 0x3, 0xff, 0x8, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x8080000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0x401]})
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x5, 0x3})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)="9676", 0x2}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x4400c800)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendfile(r5, r0, 0x0, 0x7ffff000)

58.24160272s ago: executing program 3 (id=149):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16a)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfcc0, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x5, 0x0, [{0x3d7}, {0x48f, 0x0, 0xffffffffffffffff}, {0x920, 0x0, 0xb85}, {0x402, 0x0, 0x5}, {0x64c, 0x0, 0x5}]})

58.199394283s ago: executing program 32 (id=149):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16a)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfcc0, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"])
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x5, 0x0, [{0x3d7}, {0x48f, 0x0, 0xffffffffffffffff}, {0x920, 0x0, 0xb85}, {0x402, 0x0, 0x5}, {0x64c, 0x0, 0x5}]})

41.920288374s ago: executing program 2 (id=367):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000140)="1c00000018000711ab092500090007000a0700000000000600003693", 0x1c)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0xc00)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cf5abb584aa6a67726f757001000d6d5831", @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,\x00'])
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000d80)={'syz1\x00', {0x9, 0x0, 0x6, 0x1}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0xffff, 0x2, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x7fc, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x800ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x6ed8ec1a, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x100, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x80000, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x2e270, 0xfffe, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x9, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x401, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0xe, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x7, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x2000003, 0x40, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x7, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c)
sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r2, r0, 0x0, 0x80000000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480201, 0x0)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000140))

41.85510097s ago: executing program 2 (id=368):
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='fuseblk\x00', 0x2200892, 0x0)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x9081}, 0x4004000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x104)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000500)={'filter\x00', 0xb001, 0x4, 0x4a0, 0x2d0, 0x0, 0x1e8, 0x3b8, 0x3b8, 0x3b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0xff, 0x2a, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@random="2cf13e95ae84", {[0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffc0, 'system_u:object_r:getty_exec_t:s0\x00'}}}, {{@arp={@remote, @empty, 0x0, 0xff, 0x3, 0x4, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff9, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x4f0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x1830808, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r7 = openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
fstat(r7, &(0x7f00000001c0))
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRES32=r0])
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"])
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12018000000000104c05f20d00000e00000109022400010000000c09eb86765bb81d408c092109007101220540090581030004ff000038e79642452fb1586a7648fb19f32b371caeb4e8e18ae445ffd5508ccd6d8af66e42c9e94af6d209"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="4000b0257e67fef7480000001d002000000000000000"], 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xff}})
r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r11 = dup(r10)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
cachestat(r12, &(0x7f00000002c0)={0x4, 0xda0}, &(0x7f0000000300), 0x0)
ioctl$PTP_EXTTS_REQUEST2(r11, 0x40603d10, 0x0)
ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r9, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r9, 0x22fb5000)
socket$igmp6(0xa, 0x3, 0x2)

38.683553732s ago: executing program 2 (id=396):
r0 = getpid() (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080))
r3 = syz_pidfd_open(r0, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64a00, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000180)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000480)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {r6, r7+60000000}}, 0x0)
timer_delete(r5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000004c0)=""/134, 0x86}], 0x2}, 0x9}], 0x1, 0x2, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r9, &(0x7f0000000280)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1, &(0x7f0000000400)=""/110, 0x6e}, 0xfb}], 0x1, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async)
sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0xe306e000) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x0, &(0x7f0000001200)}) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4c800)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) (async)
getsockopt$sock_buf(r10, 0x1, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xfe, 0xffffffffffffffff, 'id0\x00'}) (async)
madvise(&(0x7f000016c000/0x1000)=nil, 0x1000, 0xe)

38.596914308s ago: executing program 2 (id=400):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x31a1802, 0x0)
umount2(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x1c, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x1000)
r2 = socket(0x2, 0x2, 0x1)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5})
read(r2, &(0x7f00000000c0)=""/134, 0x86)
r7 = open(&(0x7f00000003c0)='./file0\x00', 0x8813507a7b2a8150, 0x1)
ioctl$BTRFS_IOC_DEFRAG(r7, 0x1274, 0x3)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

37.739613277s ago: executing program 2 (id=410):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7})
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x80106725, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0), 0x20402, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}], [{@context={'context', 0x3d, 'root'}}]}})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0)
r6 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
openat(r5, &(0x7f0000000280)='./file0\x00', 0x525140, 0x0)
sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e1}, 0x6e)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x109000, 0x10)
read$FUSE(r8, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

37.712664748s ago: executing program 2 (id=411):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
mknodat(0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x0) (rerun: 64)
pipe2$9p(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 32)
write$FUSE_BMAP(r4, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x9}}, 0x18) (async, rerun: 32)
write$FUSE_GETXATTR(r4, &(0x7f0000000480)={0x18}, 0x9) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 64)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x75e7f000) (async)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0xd, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='mountinfo\x00') (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000400)="8b0b4c404a81a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea901848d180490b7a70bc561639b136eca020000000000000016c1b24ba79c86ea"})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x2, 0x6, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @loopback, {[@end]}}}}})
r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r8, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x20, 0x20, 0x7, 0x800, {{0x3d, 0x4, 0x0, 0x3, 0xf4, 0x68, 0x0, 0x41, 0x0, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x7, 0x12, "3d34c2af6db870ca0c91fed3a81842fc"}, @timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0xe, [{@broadcast, 0x4}]}, @lsrr={0x83, 0x1b, 0x4d, [@multicast1, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010100]}, @cipso={0x86, 0x75, 0xffffffffffffffff, [{0x5, 0x8, "6c9574da0aab"}, {0x7, 0xf, "f9c61eecc1cb5fac450481239b"}, {0x7, 0x2}, {0x5, 0x12, "baab44fe5935d497ec4ce18a8c260b3e"}, {0xe7b49f7a66285798, 0x9, "f2688fd4839748"}, {0x1, 0xe, "f567d162027ed195d6e65116"}, {0x5, 0xf, "65d1b5fb77f56fbeaf2023011c"}, {0x7, 0xe, "bb5e3b42875d5428b73719f0"}, {0x0, 0x9, "2f910dcba91a17"}, {0x1, 0x7, "0eb627502f"}]}, @lsrr={0x83, 0x1b, 0xd4, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102]}, @rr={0x7, 0x3, 0x5e}, @rr={0x7, 0x13, 0xb5, [@empty, @empty, @empty, @empty]}, @noop]}}}}})
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @dev}, &(0x7f00000004c0)=0xfffffffffffffdd4)

37.688473251s ago: executing program 33 (id=411):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64)
mknodat(0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x0) (rerun: 64)
pipe2$9p(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 32)
write$FUSE_BMAP(r4, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x9}}, 0x18) (async, rerun: 32)
write$FUSE_GETXATTR(r4, &(0x7f0000000480)={0x18}, 0x9) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 64)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x75e7f000) (async)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0xd, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='mountinfo\x00') (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000400)="8b0b4c404a81a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea901848d180490b7a70bc561639b136eca020000000000000016c1b24ba79c86ea"})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x2, 0x6, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @loopback, {[@end]}}}}})
r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r8, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x20, 0x20, 0x7, 0x800, {{0x3d, 0x4, 0x0, 0x3, 0xf4, 0x68, 0x0, 0x41, 0x0, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x7, 0x12, "3d34c2af6db870ca0c91fed3a81842fc"}, @timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0xe, [{@broadcast, 0x4}]}, @lsrr={0x83, 0x1b, 0x4d, [@multicast1, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010100]}, @cipso={0x86, 0x75, 0xffffffffffffffff, [{0x5, 0x8, "6c9574da0aab"}, {0x7, 0xf, "f9c61eecc1cb5fac450481239b"}, {0x7, 0x2}, {0x5, 0x12, "baab44fe5935d497ec4ce18a8c260b3e"}, {0xe7b49f7a66285798, 0x9, "f2688fd4839748"}, {0x1, 0xe, "f567d162027ed195d6e65116"}, {0x5, 0xf, "65d1b5fb77f56fbeaf2023011c"}, {0x7, 0xe, "bb5e3b42875d5428b73719f0"}, {0x0, 0x9, "2f910dcba91a17"}, {0x1, 0x7, "0eb627502f"}]}, @lsrr={0x83, 0x1b, 0xd4, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102]}, @rr={0x7, 0x3, 0x5e}, @rr={0x7, 0x13, 0xb5, [@empty, @empty, @empty, @empty]}, @noop]}}}}})
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @dev}, &(0x7f00000004c0)=0xfffffffffffffdd4)

21.444617189s ago: executing program 0 (id=643):
r0 = eventfd(0x1ff) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x0, <r1=>0xffffffffffffffff, 'id0\x00'}) (rerun: 32)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r0, 0x6, 0x6, r1})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

21.444185469s ago: executing program 0 (id=644):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 32)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
close(r7) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x10000080)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) (async, rerun: 32)
write$binfmt_misc(r6, &(0x7f00000002c0), 0x15) (rerun: 32)
splice(r5, 0x0, r7, 0x0, 0x19404, 0x0) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xe, 0x80000001, 0x6, 0x2, 0x1041, 0xfffffffffffffff6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x2006a], 0x2, 0x1000d6})
r8 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00')
lseek(r8, 0xffffffffffff0000, 0x0)
read$FUSE(r8, 0x0, 0x0)
r9 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49841}, 0x2000c010)
r10 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
lseek(r10, 0x4, 0x4) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

21.384005914s ago: executing program 0 (id=645):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x41}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x1800}, 0x20)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000a40), 0x0, 0x8008800) (async)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (async)
prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ftruncate(r7, 0x398a0bdb) (async)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

21.351242007s ago: executing program 0 (id=646):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x0, 0x20000}}, 0x10, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r3, r2, 0x0, 0x80000000)
connect$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

20.780764902s ago: executing program 0 (id=653):
syz_open_dev$usbmon(&(0x7f0000002080), 0x8, 0x4082)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = fcntl$getown(r0, 0x9)
capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080))
ioprio_set$uid(0x3, 0x0, 0x2004)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000021c0)=ANY=[], 0x20}}, 0x0)
ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f00000002c0)="6eb5d972b2168c2fc3f779992edc3af84c4167b9d0e87bca594f00c7c38f268d6f442998ed72397f7a214c1fe5dd6b3d4eb997a85fb184f9ba343bfe2807736596ca9e9bfebb8d8e0d05ecccbf78df769f46cc133de911e9a4c13b5535ad7032fd25949f709a880db0b939d8cb836454b1edeb5ccea64ba59542c146b0fcf9642f83fcff6f4b389cbacfc705b12a22fbd4ec78630a6127ee8dea3b9617997840065648be044bcad0ee6e1ed1fb3ff954e2c5817d845fb2e888fe3b31f8abb16462b25a7f0fae7c3ab5a57402834afcd622e345f4f368c928c7621535aafd8e917e82a6605cf9")
keyctl$setperm(0x5, 0x0, 0x7613808)
socket(0x8000000010, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x175)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="3435046b569b9bbc4a190573e0bd950ebfa845e6f61f0e74ea89b3b490f277e4542a060a13422f6840be69c0ad5bb9a70a5abdb754009b5442e310146257bbc014bbccbf8df05686700f7522ee215ac78fc98caf86ba9ea4e9182b16b565e3e22df79498f507212cba1feaee9d6bd7e4ae89b266b737ae94aef529ce7484977507a93fefa7658aabbbc352d81bae4066c3e2710018a626acd9", 0x83}, {&(0x7f0000000100)="7628bdcda34c1473ec594cf6011fafce163348724d17b8519c29f15ef2a657b5a9901cffedf5c6ff5ceaf5257fb06f1f4ff39792fb6564ccfaf6da1063952566b7223ef54d4167ffabb62ffabbfe3137dedc42691b440a63fb", 0x59}, {&(0x7f0000001a40)="b4d0fcfd8dca3ae07cb099bcd84fb142099b257fc2197bc24b1cbe02a78894476dae7cb7ce60cc438afa5eeb5bf8a25871c1ac96f984e6e0ad7cf1", 0x3b}, {&(0x7f0000000540)="ed2cf7d23cec670eb7b2dc7f6d57cfa1dc71560d92700af387219d49a8a8af695bf2e589ed6130630aaa83cc71c6825ea465951060b9513dfbec99a3df8f528a78ab835ce276cfeebb", 0x49}, {&(0x7f0000000740)="5fe1cab8930e8b61169ac49fe5cb8868cec3bbff66add7799c71a1d0f11a19d192d9768a8758683a548e8b42ca859e44c882653cd87395ae5561d6126607cc63ce283ca2b059187df1425fac5e46c4bb500ca42b3a7c289e33750004328049c8420cca9f5c", 0x65}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="dce751bde18a1bc54d0c457b663d73f0dc64f18f2ef8e6ec05d44383285e83819f6946ec5f8b9275a9ffd7df1b6376b45e5e014e987dcca2cbc3098c9963deec0446357ba0e4c8557fc8c40b16454e13f95686f02e2e2b95c11de5b4e7b9fd3601ca7fc2b17c74edadefb0e55d2382f40d62e4b302e7bcdf", 0x78}, {&(0x7f0000001840)="68860e5a228170a633a29938c69690d8cefed59368e2d51eb7c23e728d8d2996a0a4ac031c1cc74c97a3348ac34cb5b7", 0x30}, {&(0x7f0000001880)="0c6721873e6ddfce59afffede19cdec2b48ec2f4502ca95a4c8280268e3f9b6a3b15279189ab6e1df0fcc2d2ccb4e0c54a11a6892e44eee896874815180e0adc58c89c9bc1848936534f776335a6cc90e766cff5c4dcc69368a850db7b6f66067de739cfaed3f815d0e3209bd783627481afe5", 0x73}, {&(0x7f0000001900)="a696c21e4cded63a62a6e605722fe83993be1212bccdee85a8a2efada5223465af8ab5cfbe714fa2672234771a2ea8d4b6f8c6d755e6733cc5cad5fac834c7c39dbe432d6eb0dd97a45eec2437baf6960f9770bf3bf1dcb86f5be8ba73eb0ae7b698cb6b780b", 0x66}], 0xa, &(0x7f0000001b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}, {{&(0x7f0000001b40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001e00)="4a87a4d434c03cd0657837bc71488ff81926dfe01b4154d02b5cb6e2b2bca9893a8edb7aa1881ceb71ca71181bc58b3f621f685d64a78aaa7c3ba0ec42c5d3d85d0872877751be265d1cfce737110d3dcfd4f2318f79e7b6027b941b10cb0689c5534ff7e4c2d5dbcd91d5d8b14ff1a75a2e357478b86cf950202b4213dc50fa81f442f27d06fcb998eaf09061d2b129b5d1fbd79881d3cca41c7672e76decd93c467567866d825dfe6a5924cad33806067e755fd6df9f5bf4bcbb40", 0xbc}, {&(0x7f0000001bc0)="ed5c5dbd22a2e897d63a6589cd467513062ede78f529ae474a20085e958bd485c49cbe5280ea047922610a9c046fbac25d743dff3e5c0cba281bf1e2b669e3341be7bf2264b20e0ac99f0bd3818a8e0aa21f4e8779f5289a115f6cec895fd1be14e39a62da7938bab25fb9c3f5bb84ab4802b23305f628e08c8e7ea65621a10d1abe12d0f71be60f4619743aa364823b962f8197239943ba399ef6d4ff07f6cc603c859056f24706232ef2a8078ceba4a85dd45329e3b2f0285dc48afb61c477110389", 0xc3}, {&(0x7f0000001cc0)="a269997710e428869c176a90ff2a6ac299c1b959d85651d96185f0f2261355a9dd6474fce3e52249148cff3b4cc8892487af1ab40a0b29ccfc79d049f43164cef0c9e76a736fa076f004c3da3ef99ce556765acb8a923227", 0x58}, {&(0x7f0000001d40)="2dbd1d146064c36fdbaab4cdb37cd1489669723346351620ab8f4f8bec05410a738c4b091bb5d456c4dd766bedbd32ac7f1d66eef59974d9be64e79a15f2365a7d9bbeed7f720fd4e00d3fe49f30b5deb0bb1dc44efae8a0d174206a8c7ea2f727d9ec95acdc2d52bb77b83a1433b4c9e7ac98799a0b94b5694edae92d1951f9087e24fe45cebbd56746cb8af8cdce2146afc1", 0x93}, {&(0x7f00000020c0)="42ce58f5b645c5cf1913583a6bf788d0d628e3535a9992d283b202e0422263415ddc8482f89ac151088f751a359038f8f08212b7fb84c8bbd4467532d30c48d3b6d02cd441a5312f547a9e7d767c444b1af4e2fdef5bb43010539df32951d95905f61890124ed825d0d386bef2383a1d3fa87d7acabbf181f547d984926810f28a899d3bb555cc258e87707ce2f6c64422d4943127c0416f997ed6bee72f6ce1970a5884850dbfb0aa8f093c4008d68d70af3f48312e0f28f96438f590e79bc7bc2fdc3fa3cbb924", 0xc8}], 0x5}}], 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x44, {0x2, 0xce20, @multicast2}})
socket$can_bcm(0x1d, 0x2, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "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"})
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x9, 0x7}}, 0x30)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)

20.764001114s ago: executing program 0 (id=654):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64)
socketpair(0x27, 0x4, 0x6, &(0x7f0000000000)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050b2bbd7000fcdbdf2552"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r4 = eventfd2(0xd, 0x1)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x2) (async)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r4})
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

20.721959546s ago: executing program 34 (id=654):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64)
socketpair(0x27, 0x4, 0x6, &(0x7f0000000000)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050b2bbd7000fcdbdf2552"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r4 = eventfd2(0xd, 0x1)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x2) (async)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r4})
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

9.08093523s ago: executing program 1 (id=687):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = fcntl$getown(r0, 0x9)
fcntl$setown(r0, 0x8, r1)
fcntl$setflags(r0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = accept4$bt_l2cap(r2, 0x0, &(0x7f0000000000), 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x82102)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = dup3(r5, r3, 0x0)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x88c6c)
sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x2})
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
poll(&(0x7f0000000180)=[{r4, 0x104}, {r7, 0xa070}, {r3, 0x243}, {r5, 0x20}, {0xffffffffffffffff, 0x4440}, {r2}], 0x6, 0x6f)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000001c0)=r1)
r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
fsetxattr$security_capability(r9, &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x63e, 0x7}, {0x9, 0xdfe}]}, 0x14, 0x1)
write$UHID_DESTROY(r5, &(0x7f0000000280), 0x4)
sendto$inet(r6, &(0x7f00000002c0)="4fdea439e22c765dcd72c75b0d2eb3f207def3a3fdcc8491f219386a2c6ee7196f1c9c7f537c049b8fad3cab359edb341058d8f2bda0405dce9ac1435dae275b4c20feaf22378a5572881eb0", 0x4c, 0x48014, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)
pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000380)="dc500d035b6d75533981a212e674df36ed72169eddd769205d269f64dc93eecaf5a2aac1fc3dfe0d2c5c80657ef6d6ff131163957c0f1992a2c0463048ca4a5a70efa4ddd190e9e6481329f443646e9e7bf5f1ac088c8df8a5d29717705ad4151ac0dcd3caf674388e5d806e8b51020de92581f43fd6ae78b06409974b8928138484638bf5546d4bf8dd32d431880311b4493ffa08c5c7a4245ef2eb6fc6231210552128a8f1222bde79ed56964e94732c9d0b08ec93252b27015f3a2cee", 0xbe}, {&(0x7f0000000440)="1a1da12442233ca8387c6f0ed547557e213fbad33d7421553049ff30a3454269e6b5df820b550a863f39ec19b4df4cf2de0637f0128732b05a03c1e6b2672edc2ebe633eeceb0ff8bfe0b5f0649749f436c56bbd9a35d592d7", 0x59}, {&(0x7f00000004c0)="43bd", 0x2}], 0x3, 0x8a, 0x40)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000540))
r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r10, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'security.capability\x00'}], 0xa, "8a5f8b5b73fef71bf752f46fad55281f7d3fd07e520ceeeb8fb575c5f277b65671d457707b399ed577d09ef623ca810a662c58ad37446fc6d2b638ba69c22662008853"}, 0x63)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r12, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x5)

9.08068402s ago: executing program 5 (id=688):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800)
r2 = socket(0x1e, 0xa, 0xfffffffc)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a)
recvmsg$can_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, &(0x7f0000000380)=""/243, 0xf3}, 0x2160)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_getfd(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x546})
r6 = accept(r2, &(0x7f0000000280)=@ax25={{0x3, @rose}, [@remote, @bcast, @default, @bcast, @remote, @default, @remote, @bcast]}, &(0x7f0000000300)=0x80)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
inotify_init1(0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x12b940)
openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

9.08024714s ago: executing program 4 (id=689):
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15)
r2 = dup(r0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe6683000) (async)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) (async)
sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r9, 0x0, 0x0, 0x2e, 0x0, 0x0) (async)
ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000000240))
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000000)={0x8, 'veth1\x00', {'veth1_macvtap\x00'}, 0x4})
bind$802154_raw(r6, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020)

7.507091865s ago: executing program 1 (id=690):
socket$packet(0x11, 0x3, 0x300)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r4, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r4, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r5, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0})

7.506752545s ago: executing program 5 (id=691):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x1}, {0x2c, 0x0, 0x1}, {0xb1, 0x0, 0x0, 0x1ff}, {0xb5, 0x2, 0x0, 0xfffffffd}]})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x1}, {0x2c, 0x0, 0x1}, {0xb1, 0x0, 0x0, 0x1ff}, {0xb5, 0x2, 0x0, 0xfffffffd}]}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)

7.503944155s ago: executing program 4 (id=692):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a02010a00000000000000006d59487c0e00030084067de50000000000000000"], 0x24}}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r7, 0x111, 0x1, 0x0, &(0x7f0000000080))
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
r9 = eventfd2(0x8001, 0x800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r9, 0x2})
close_range(r4, 0xffffffffffffffff, 0x0)

5.792015591s ago: executing program 1 (id=693):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x1000, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x1002, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffe10) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x28}, 0x44080)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000200)=0x13, 0x4) (async)
sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x30}], 0x1, 0x0, 0x0, 0x850}, 0x0)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, 0x0) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r7, 0x28, 0x0, 0xfffffffffffffffc, &(0x7f0000000000))
socket(0x1, 0x6, 0x7) (async)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r8, @ANYRES8=r8, @ANYBLOB="a819228da6fbba3d980adcacdc2a2011b300e0d396c0b31559f17c334edddaafe116e55dbecb82b6114a84287790d002fc0367f08580b24385e3f5d4a0bb8abf1edf3532e26e8b4c0fb634ac3f160e5d27baedf8dcc33edb6e7b2075acfbbe624502fa17428f0a7936df93133274b2c9c1d058aa03275ebf58e53c109e8b5dbfdd61102e79c78e92de012b183e72160b888daca38b41f4d8945765d7261f7b741eadd17da5668bbde4b72be3943a534882017fdf372d17c49a71a13bbb8fbf6a7f61ee35efd2548835f0391a21ec3f11b6fa22b591618237b5a6104c283487dc044cd9", @ANYRES8=r2, @ANYRES64=r8], 0x14}}, 0x20004004)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, 0x0, 0x0)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x110, r7, 0xbfffe000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8f) (async)
ioctl$BINDER_FREEZE(r12, 0x400c620e, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
close_range(r0, r8, 0x0)

5.741056205s ago: executing program 5 (id=694):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1c21c000)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

5.740651745s ago: executing program 4 (id=695):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x160e)
syz_open_procfs(r2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040))
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140)=0x1000, 0x4)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc50c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x69, 0x1, 0x3, 0x1, 0x2, 0x48, {0x9, 0x21, 0x8, 0xfd, 0x1, {0x22, 0xc3a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd7, 0x3, 0x65}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x5, &(0x7f0000000340)=@string={0x5, 0x3, "579722"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x82)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000040))
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbeuV\xf3\"\xc4\x04\xbb\xf0`\xf8F\xa6o\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbf\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b\x05\x00\x00\x00\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\a\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xd4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs\r\xcd\xd1\x83JT\x05\x00\x00\x00\x00\x00\x00\x00\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xe0\xddT&L<\x18\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C{\xb3\xd8\x82\x92\xba+\x99PX\xdfn\x1fz=3\xaa\xae\xf7B\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xce]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x02\x96/V\'\x11~\xbc\xca\"\x94\xb7\x9d\r\x91$\xb9\xfa,E\x1f\x8f\x925\x83\xca\xb3.R;\x02F\x1f\x00<\xdc\xeb\xb9\x81\xa1a\xf8\xb0AW\x88\xd5.\xaa^\xcb\x1f\x8a\xf9Y\xd4\xae5\xff&M\x03\xdc\x889cPfA3\xe8\xfb\a\xc8\x85\x86/\x17<\xde\x8c\xa59u\v\xe0\n\x04\xa8\xc5\xa4\xbfF\xe2\xe1\xe8')

3.982323374s ago: executing program 1 (id=696):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000ad8000/0x2000)=nil, 0x2000, 0x1000008, 0x11, r0, 0x45809000)
syz_io_uring_setup(0x644e, &(0x7f0000000c80)={0x0, 0xce80, 0xc040, 0x2, 0x25a}, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

3.981919524s ago: executing program 5 (id=697):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
time(&(0x7f0000000100))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
time(&(0x7f0000000100)) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async)

3.981209974s ago: executing program 4 (id=698):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
socket$inet(0x2, 0x4, 0x9)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x6, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x6, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe8a, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0xb}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
read$msr(r3, &(0x7f0000000280)=""/175, 0xaf)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r7 = accept(r5, 0x0, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r8, 0xd6baf000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
recvmsg$can_bcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0)
r10 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x10400, 0x143, 0x2}, 0x18)
userfaultfd(0x80000)
setsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000000340)=0x8, 0x4)

2.065878927s ago: executing program 1 (id=699):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0xfffff801, @private2, 0x2}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000001c0)="764209e7c94903046b58b947a558e11bc0790e3e9422c1968708aaf9b8dc78216307956fda315d248a21155080fcd416d04c607a33fcf15630ccf698cbc5fdaa6b0ff5756a7717f10339ab6780eb586da9968016374921a18bbe7314285c9f521cea9b335a58f83e19431ace330afed4b509c5a438f79c1aa820380fabf66c7d57e14819a2b6850d73450b5a23afeaba7eaf7da87c4e98326bdd2d5a6bf253b9bade", 0xa2}, {&(0x7f0000000280)}, {&(0x7f0000000380)="8ac802ffbf2a548420d24b94d1ed57f3ea922bbf80b8a8eaf949961f349b8220c66a7134036c7691d1f2ac84d2d4f51a82df310bb79ead3c445f65c93ec1074005788da30e617da8c3c99eb690dd0462e40a9be540f00a5fe86a3db769c37584ba2da790d38d2599a0fe47d908c68bc383623e68b83542f3aa591758643e873b16034868deac0dfcc9fae83e9eeda0a0137e7f11ab4bf8eceb057f658115e7b27df2001b44a92766f6969968316fc6a8be184af4f5a790aed5b7694b40913c6e7c95ab810298583a098494e581c2c1392a7a6f5cfa99f3", 0xd7}, {&(0x7f0000000480)="a7efb4326061c6015414dbef11abb4fbaec87bc8681a008c3f55f41995c10939fdccc1d15de93418630323452a48f9b78737fecb737d47fcb94c4d655cc7c816edfa90f02cfc8abba4eb260a0c", 0x4d}, {&(0x7f0000000500)="bf62a402fcb841060fd711a1492f8cf97258134cc0c1a1c9da379528b288d2daa117a502b9b1710d75b551e04f114fd98ef1d9073c283b8d4191c02dd9bed697a205bf8c50e57148be91fc857b02e94fa3cd8b8a866224b1768359e16d9b39ee26109b1315b79ce71521ac4afe7a54fcf6d83f07874b885999c93d682b8a93e3d8af67070dfda1d9ef0616a14b9da8ff7d63b235743201785fef4dd7c25027e3f5fe6d0127c477278e645d7ababb429ef36f17dee74b", 0xb6}, {&(0x7f0000002600)="f058ceafc44690c8daeba588912dbd9a20d9d89a7dbba970193f92ba6c53abf3c0414c863e57894f3515e372e9a7a82d8c5fc297463295ebe28ff7098dc162caed574b3a11d18eba25f12d0ad41cc3cb4fe192876459fbd06219290f70fe4c603287fc5bc8df09a2efa7ac7f2b9ece23452ae9e16c6647dba249cfda447a740d35e0a6646fe49b6e5fde31fa26ba674dc2496917d2086cb7d6a141ac1650e37dc2fe73164cf596d376a180a5084256bc2d22071db1fa9eb864d1a2531a2f2a8a248229f3c143f2b287b643", 0xcb}, {&(0x7f0000002700)="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", 0x1000}], 0x7, &(0x7f0000003780)=ANY=[@ANYBLOB="280000000000000029000000390000006202021000000000fc000000000000000000000000000000e00000000000000029000000040000006c18000000000000040114093fc5bfd7b2c7da4e1abc0e212eae0179036e9799a03bdda132fcb6ee3a75edb8e2f897067f5e2a5eafacb1408f29dbf4639083897f95a27c300a1152db935e180740000000000e3808000100008000000000570000000000000008000000000000000a000000000000000600000000000000010000000000000093000000000000000710000000030202f5ff08000000000000000728000000000806010004000000000000000f000000000000007efd000000000000000000000000000000010000000014000000000000002900000008000000050000000000000014000000000000002900000034000000dd0b000000000000140000000000000029000000430000000104ffffffff0000000000000000000029000000040000002f020000000000000e1203d2f9099625a1a087c4389198f7a5b0180a00000000300000000000000029000000360000002c02000000000000c20400000007c204000000ff04010204014d000000000000140000000000000029000000080000000200000000000000140000000000000029000000340000000000010000000000"], 0x1e0}, 0x2000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00')
pread64(r1, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@default_permissions}, {@uuid_null}]})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000003a40)={[0x7, 0xfffffffffffffff7, 0x5, 0x4da, 0x8, 0xd, 0x2, 0x2, 0x4, 0x0, 0x1, 0x4, 0x4, 0x1ff, 0x2b, 0x100000000], 0x100000})
openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x105200, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000003980)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000039c0)={0x7f, 0x5, 0x57b, 0x40, 0x8, 0x3ff, 0x1, 0x4})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00')
r5 = socket$unix(0x1, 0x1, 0x0)
sendfile(r5, r4, &(0x7f0000000000)=0x11, 0x7)
syz_io_uring_setup(0x44d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x2, 0x0, 0x295}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)

2.065067117s ago: executing program 5 (id=700):
r0 = syz_open_pts(0xffffffffffffffff, 0x800)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x6000)
read$usbmon(r1, &(0x7f0000000040)=""/38, 0x26)
ppoll(&(0x7f0000000080)=[{r1, 0x8000}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x10]}, 0x8)
mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0), 0x100094, &(0x7f0000000200)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}]})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=""/52, &(0x7f0000000280)=0x34)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf6, 0xc0, 0xf8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0xde, 0x2}}}}}]}}]}}, &(0x7f0000000840)={0x0, 0xfffffffffffffffd, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x90, &(0x7f0000000380)=@string={0x90, 0x3, "1d7367527d8a39e62e84232f776ffaa9403472c49714fe0b0fbd4095e20a4a6cc646ad042a7cd19bce3116f131f698a40cb900a7cf065181f4bd24c0506295ca04d49ec5b1419d17a5be9146a708f15ec26a1aba23079d789ccf2620af590c80857af75a3d9df42ce5061634aea401b59dffba3e4dc1d5dd6ce8254d02d8fe48b4d164e780461373792c1f225158"}}, {0xad, &(0x7f0000000440)=@string={0xad, 0x3, "619e6946304d7a777b691668b37bd43db4ef8d95f50f54112ab44c3bfffea71780ede1c3ebdd4854d66e63c802de570106d49289e6aa44216e1d523183b26c11688144e776d9717289a0a27e98f592283c642f69ef9d9168099095bbbcc25d8d5373d9a7f7c3c5aed95e946a10a7481f5f4877ffdadccc6b979b98a10d18dd2d4ffada2c5a91d295bdb847233edb7634dd9edb5b01508ce176f888f4d86776927db9174d4ebbddcf225929"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x459}}, {0xc8, &(0x7f0000000540)=@string={0xc8, 0x3, "d76ecee441d68a81d1d7ba22e7903f804fb9e56e2c0d3d003446e92b8c5e85586d99b09f567ffe09b5a45f9a827c2414b788235de9560bfd3c2bacc35f5e87ff83a50f47844e15a5e5d9dd6a0481396f6550b7e6bbb86d96b949cb0504dca58069e8d3bfba7996d69d34ef462ceb04261713205b2b928ce05f07d866ef6301e3664ee96a2c1cc9a063aa9782ca8bbdaea2b34d16549d28b2d09cb9487381ed13eb02a67ddc3f1e9c99f0e684250d96913a4ac571276ab4c99ed41b528f7729278a9f799a63e2"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0xf9, &(0x7f0000000740)=@string={0xf9, 0x3, "ecfc8c43347f35a1f4500f898516600324e5759eb04681b6688b68716f823c9da4e940f4244f0002717461f06eeddfc9c39031146a9652f3fee82454445bcdbec4a37e305469d54e7272f8defd29986e4299027bbae9c34645b7bacfdb6b1d4b562aa9b91af68e62c4fee4fbb215e053442344f672dc4f53e944aa8a1f081b26f701acf7c0d7197ad8b1736cd2a27d7974a78a982dcb3afe11cef8728c3b59d00a3d4cc1c45ce0308b9b9d559a3ccdd0ea08b451c26875d19b054b2add963d05eacec405a54bb0f5e654313a228fa4cf678a676cbde690bbf2da4ee074191a1deaa365ff11ac26685be01ec1fc157a55717b600ddc6365"}}]})
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0xe, 0x800)
r3 = fcntl$getown(r1, 0x9)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
recvmmsg(r4, &(0x7f0000003f80)=[{{&(0x7f00000009c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/195, 0xc3}], 0x4, &(0x7f0000001c40)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002c40)=""/150, 0x96}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/163, 0xa3}, {&(0x7f0000003dc0)=""/44, 0x2c}, {&(0x7f0000003e00)=""/46, 0x2e}, {&(0x7f0000003e40)=""/95, 0x5f}], 0x6, &(0x7f0000003f40)=""/54, 0x36}, 0x8}], 0x2, 0x0, &(0x7f0000004000)={0x0, 0x989680})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000004040)={0x9})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000004080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xaa, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0xed, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xe90}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x5, 0xf9}}}}}]}}]}}, &(0x7f00000041c0)={0xa, &(0x7f00000040c0)={0xa, 0x6, 0x110, 0x11, 0x3, 0x3, 0x20, 0xf1}, 0xb, &(0x7f0000004100)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4f, &(0x7f0000004140)=@string={0x4f, 0x3, "b985b060175ebbc065cb3af92d062481ab7f2a1b938f904ba140caaec85c08dccb8ba1fd45e5909f05030925d1b4c424031198c5859838df51612c9d20cce2e811316bc33fa08a02cc5d016b0e"}}]})
rt_sigprocmask(0x0, &(0x7f0000004200), &(0x7f0000004240), 0x8)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000004280))
r5 = socket$key(0xf, 0x3, 0x2)
cachestat(r0, &(0x7f00000042c0)={0xc0, 0x2}, &(0x7f0000004300), 0x0)
write$cgroup_subtree(r4, &(0x7f0000004340)={[{0x2b, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'net'}, {0x2d, 'cpuset'}, {0x2d, 'rdma'}]}, 0x25)
r6 = dup(r1)
connect$inet6(r6, &(0x7f0000004380)={0xa, 0x4e23, 0x1, @private1, 0x400}, 0x1c)
ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000043c0)={r3, 0x0, 0xf2})
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000004400)=0x5, 0x4)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000004440)={0x0, 0x4})
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000004480)={0xd, 0x1c00})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000044c0)={{{@in6=@mcast2, @in6=@initdev}}, {{@in=@private}}}, &(0x7f00000045c0)=0xe8)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000004600))
recvmmsg$unix(r4, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/33, 0x21}, {&(0x7f0000005680)=""/148, 0x94}], 0x3, &(0x7f0000005780)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000057c0)=@abs, 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005840)=""/206, 0xce}, {&(0x7f0000005940)=""/192, 0xc0}, {&(0x7f0000005a00)=""/14, 0xe}, {&(0x7f0000005a40)=""/128, 0x80}, {&(0x7f0000005ac0)=""/104, 0x68}, {&(0x7f0000005b40)=""/13, 0xd}, {&(0x7f0000005b80)=""/103, 0x67}], 0x7, &(0x7f0000005c80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005d40)=""/241, 0xf1}, {&(0x7f0000005e40)=""/154, 0x9a}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/214, 0xd6}, {&(0x7f0000007000)=""/232, 0xe8}], 0x5}}, {{&(0x7f0000007180)=@abs, 0x6e, &(0x7f0000007380)=[{&(0x7f0000007200)=""/230, 0xe6}, {&(0x7f0000007300)=""/127, 0x7f}], 0x2, &(0x7f00000073c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}], 0x4, 0x40000002, &(0x7f0000007600))

2.063479077s ago: executing program 4 (id=701):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
socket(0x11, 0x2, 0x0) (async)
r1 = socket(0x11, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r2, r0, 0x0, 0x80000000)

1.03923ms ago: executing program 1 (id=702):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x6e61, 0x0, @loopback, 0x7fff}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x3, 0x4)
sendto$inet6(r1, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, &(0x7f0000000100)=""/144, 0x90, 0x40002000, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

475.72µs ago: executing program 5 (id=703):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x2, r2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000576000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"])
ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x7cab6ced6415709, 0x3})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r11=>0x0})
connect$can_bcm(r9, &(0x7f0000000180)={0x1d, r11}, 0x10)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/237)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=[@decrefs, @dead_binder_done], 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=704):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x4e22, @empty}}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x88}, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
pipe(&(0x7f0000000e00)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6a0082, 0x0) (rerun: 64)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="470f78b9000000006766460f109100000100470f06652e0fc7699866ba200066edb8010000000f01c1660fc773f1420fc7708b66430f38802a66baf80cb8d57bb286ef66bafc0cb09dee", 0x4a}], 0x1, 0x53, 0x0, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r7, 0x0) (async)
splice(r7, 0x0, r3, 0x0, 0x400000107ffff000, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @remote, 0x7155}, 0x1c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts.
[   19.610186][   T36] audit: type=1400 audit(1756446313.710:64): avc:  denied  { mounton } for  pid=268 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   19.611256][  T268] cgroup: Unknown subsys name 'net'
[   19.614210][   T36] audit: type=1400 audit(1756446313.710:65): avc:  denied  { mount } for  pid=268 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.619248][   T36] audit: type=1400 audit(1756446313.710:66): avc:  denied  { unmount } for  pid=268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.619411][  T268] cgroup: Unknown subsys name 'devices'
[   19.701863][  T268] cgroup: Unknown subsys name 'hugetlb'
[   19.707479][  T268] cgroup: Unknown subsys name 'rlimit'
[   19.840543][   T36] audit: type=1400 audit(1756446313.940:67): avc:  denied  { setattr } for  pid=268 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   19.863930][   T36] audit: type=1400 audit(1756446313.940:68): avc:  denied  { mounton } for  pid=268 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   19.888667][   T36] audit: type=1400 audit(1756446313.940:69): avc:  denied  { mount } for  pid=268 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   19.899969][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   19.920964][   T36] audit: type=1400 audit(1756446314.020:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.946478][   T36] audit: type=1400 audit(1756446314.020:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.955255][  T268] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   19.972241][   T36] audit: type=1400 audit(1756446314.050:72): avc:  denied  { read } for  pid=268 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.006836][   T36] audit: type=1400 audit(1756446314.050:73): avc:  denied  { open } for  pid=268 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.809320][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.816505][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.823670][  T291] bridge_slave_0: entered allmulticast mode
[   20.829913][  T291] bridge_slave_0: entered promiscuous mode
[   20.837495][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.844601][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.851815][  T291] bridge_slave_1: entered allmulticast mode
[   20.858263][  T291] bridge_slave_1: entered promiscuous mode
[   20.900391][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.907459][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.914613][  T289] bridge_slave_0: entered allmulticast mode
[   20.921092][  T289] bridge_slave_0: entered promiscuous mode
[   20.935973][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.943282][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.950530][  T289] bridge_slave_1: entered allmulticast mode
[   20.956708][  T289] bridge_slave_1: entered promiscuous mode
[   21.005250][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.012348][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.019414][  T290] bridge_slave_0: entered allmulticast mode
[   21.025984][  T290] bridge_slave_0: entered promiscuous mode
[   21.040824][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.047888][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.055005][  T290] bridge_slave_1: entered allmulticast mode
[   21.061228][  T290] bridge_slave_1: entered promiscuous mode
[   21.094275][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.101373][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.108444][  T292] bridge_slave_0: entered allmulticast mode
[   21.114810][  T292] bridge_slave_0: entered promiscuous mode
[   21.127373][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.134489][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.141690][  T292] bridge_slave_1: entered allmulticast mode
[   21.147854][  T292] bridge_slave_1: entered promiscuous mode
[   21.283346][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.290421][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.297695][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.304739][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.314829][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.321904][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.329164][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.336227][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.353541][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.360622][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.367909][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.374989][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.386647][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.393737][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.401034][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.408073][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.459240][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.466590][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.475248][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.482819][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.490908][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.498190][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.505688][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.513015][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.521714][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.528846][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.548171][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.555426][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.563158][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.570224][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.578581][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.586258][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.601261][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.608388][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.616062][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.623099][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.631227][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.638284][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.645844][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.652885][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.711049][  T292] veth0_vlan: entered promiscuous mode
[   21.725317][  T291] veth0_vlan: entered promiscuous mode
[   21.738890][  T289] veth0_vlan: entered promiscuous mode
[   21.749333][  T292] veth1_macvtap: entered promiscuous mode
[   21.757497][  T290] veth0_vlan: entered promiscuous mode
[   21.773361][  T291] veth1_macvtap: entered promiscuous mode
[   21.799383][  T290] veth1_macvtap: entered promiscuous mode
[   21.808995][  T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   21.825005][  T289] veth1_macvtap: entered promiscuous mode
[   21.984540][  T347] rust_binder: Error while translating object.
[   21.984582][  T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   21.991174][  T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   22.149714][   T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   22.169869][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   22.169984][   T45] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   22.319750][   T66] usb 4-1: Using ep0 maxpacket: 16
[   22.326462][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   22.337635][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   22.340870][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   22.347977][   T66] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[   22.362588][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   22.370394][   T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   22.379472][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   22.388465][   T66] usb 4-1: config 0 descriptor??
[   22.398710][    T9] usb 2-1: SerialNumber: syz
[   22.581983][  T342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   22.591564][  T342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   22.606422][   T45] usb 3-1: unable to read config index 0 descriptor/start: -71
[   22.614895][   T66] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[   22.626638][   T45] usb 3-1: can't read configurations, error -71
[   22.774947][  T352] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438)
[   22.774977][  T352] rust_binder: Error while translating object.
[   22.787438][  T352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   22.793721][  T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[   22.802699][   T66] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 1
[   22.821988][   T66] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22
[   22.833430][   T66] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4
[   22.842385][   T66] playstation 0003:054C:05C4.0001: Failed to create dualshock4.
[   22.853354][   T66] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22
[   22.855155][  T358] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   23.003890][  T340] fuse: Unknown parameter 'gȉ�X�-�id'
[   23.010597][  T348] =======================================================
[   23.010597][  T348] WARNING: The mand mount option has been deprecated and
[   23.010597][  T348]          and is ignored by this kernel. Remove the mand
[   23.010597][  T348]          option from the mount to silence this warning.
[   23.010597][  T348] =======================================================
[   23.022444][    T9] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   23.046212][  T348] binder: Bad value for 'stats'
[   23.065713][    T9] usb 4-1: USB disconnect, device number 2
[   23.459770][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   23.479095][   T66] usb 2-1: USB disconnect, device number 2
[   23.485290][   T66] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   23.610882][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   23.614456][  T402] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.12'.
[   23.629627][   T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   23.640558][   T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   23.653303][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   23.671399][   T45] usb 3-1: SerialNumber: syz
[   23.796064][  T421] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.896568][   T45] usb 3-1: 0:2 : does not exist
[   23.910618][   T45] usb 3-1: USB disconnect, device number 3
[   23.936810][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   24.020098][  T431] kvm: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x1
[   24.031826][  T438] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   24.038787][  T431] kvm: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x1
[   24.050997][  T431] kvm: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x1
[   24.063257][  T431] kvm: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x1
[   24.073638][  T431] kvm: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x1
[   24.085288][  T431] kvm_intel: kvm [430]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x1
[   24.155900][  T452] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0
[   24.155927][  T452] rust_binder: Error while translating object.
[   24.164831][  T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.171112][  T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[   24.442796][  T457] devpts: called with bogus options
[   24.460237][  T460] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.468181][  T460] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   24.476788][  T460] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.484817][  T460] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   24.548230][  T466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   24.548265][  T466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:6
[   24.569667][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   24.649236][  T471] mmap: syz.1.34 (471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   24.730781][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   24.741807][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00
[   24.750987][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.759861][    T9] usb 1-1: config 0 descriptor??
[   24.765105][  T455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   24.973205][   T36] kauditd_printk_skb: 109 callbacks suppressed
[   24.973248][   T36] audit: type=1400 audit(1756446319.070:183): avc:  denied  { read write } for  pid=454 comm="syz.0.28" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   25.005243][   T36] audit: type=1400 audit(1756446319.070:184): avc:  denied  { open } for  pid=454 comm="syz.0.28" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   25.029375][   T36] audit: type=1400 audit(1756446319.070:185): avc:  denied  { ioctl } for  pid=454 comm="syz.0.28" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   25.062326][   T36] audit: type=1400 audit(1756446319.160:186): avc:  denied  { map } for  pid=473 comm="syz.3.35" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   25.086367][   T36] audit: type=1400 audit(1756446319.160:187): avc:  denied  { read write } for  pid=473 comm="syz.3.35" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   25.176485][    T9] logitech 0003:046D:C101.0002: hidraw0: USB HID v1.01 Device [HID 046d:c101] on usb-dummy_hcd.0-1/input0
[   25.314250][  T480] kvm: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x1
[   25.323058][  T480] kvm: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x1
[   25.333837][  T480] kvm: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x1
[   25.346587][  T480] kvm: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x1
[   25.355320][  T480] kvm: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x1
[   25.368181][  T483] rust_binder: Error while translating object.
[   25.368237][  T483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.372642][  T480] kvm_intel: kvm [479]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x1
[   25.374538][  T483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   25.394416][  T455] rust_binder: Error in use_page_slow: ESRCH
[   25.411605][   T36] audit: type=1400 audit(1756446319.510:188): avc:  denied  { lock } for  pid=484 comm="syz.2.38" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   25.428353][  T455] rust_binder: use_range failure ESRCH
[   25.452232][  T455] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   25.458039][  T455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   25.466450][  T455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32
[   25.476616][   T36] audit: type=1400 audit(1756446319.570:189): avc:  denied  { mounton } for  pid=486 comm="syz.1.39" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   25.515598][   T45] usb 1-1: USB disconnect, device number 2
[   25.604471][   T36] audit: type=1400 audit(1756446319.700:190): avc:  denied  { read write } for  pid=488 comm="syz.1.40" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   25.634139][   T36] audit: type=1400 audit(1756446319.700:191): avc:  denied  { open } for  pid=488 comm="syz.1.40" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   25.661609][   T36] audit: type=1400 audit(1756446319.720:192): avc:  denied  { ioctl } for  pid=488 comm="syz.1.40" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   25.758330][  T498] rust_binder: Write failure EFAULT in pid:19
[   25.779653][   T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   25.830668][  T502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   25.951115][   T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.962092][   T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.972829][   T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   25.985912][   T66] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   25.995147][   T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.004124][   T66] usb 3-1: config 0 descriptor??
[   26.165851][  T509] tipc: Enabling <eth:lo> not permitted
[   26.171543][  T509] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   26.412089][   T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe
[   26.419574][   T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   26.427166][   T66] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   26.437625][   T66] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   26.671598][  T491] netlink: 'syz.2.41': attribute type 6 has an invalid length.
[   26.680191][  T491] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 73)
[   26.680216][  T491] rust_binder: Error while translating object.
[   26.691725][  T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   26.697924][  T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19
[   26.707891][  T491] rust_binder: Write failure EINVAL in pid:19
[   26.723288][   T64] usb 3-1: USB disconnect, device number 4
[   26.794743][  T524] capability: warning: `syz.3.51' uses deprecated v2 capabilities in a way that may be insecure
[   26.841387][  T533] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.842937][  T533] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.857784][  T533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   26.864405][  T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67
[   26.925935][  T537] rust_binder: 67: no such ref 2
[   26.940258][   T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.055372][  T541] tipc: Started in network mode
[   27.060286][  T541] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   27.069241][  T541] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038
[   27.078731][  T541] tipc: Enabled bearer <udp:syz0>, priority 10
[   27.090762][   T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.101032][   T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.110987][   T66] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   27.120758][   T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   27.128856][   T66] usb 2-1: SerialNumber: syz
[   27.287536][  T556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.296127][  T556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.339575][   T66] usb 2-1: 0:2 : does not exist
[   27.344645][   T66] usb 2-1: unit 5: unexpected type 0x09
[   27.356438][   T66] usb 2-1: USB disconnect, device number 3
[   27.682503][  T355] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   27.839771][  T355] usb 1-1: Using ep0 maxpacket: 16
[   27.847614][  T355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.863635][  T355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.876496][  T355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   27.889117][  T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.898365][  T355] usb 1-1: Product: syz
[   27.903434][  T355] usb 1-1: Manufacturer: syz
[   27.925357][  T355] usb 1-1: SerialNumber: syz
[   27.964941][  T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.964974][  T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78
[   27.989808][  T573] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   28.012704][  T573] rust_binder: Read failure Err(EFAULT) in pid:78
[   28.189656][   T64] tipc: Node number set to 1
[   28.249699][  T573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   28.257002][  T573] rust_binder: Write failure EINVAL in pid:78
[   28.355778][  T355] usb 1-1: 0:2 : does not exist
[   28.381952][  T583] netlink: 72 bytes leftover after parsing attributes in process `syz.2.69'.
[   28.523141][  T600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.523196][  T600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89
[   28.669767][   T64] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   28.830888][   T64] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[   28.839133][   T64] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   28.849421][   T64] usb 3-1: config 8 has no interface number 0
[   28.855598][   T64] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   28.870511][   T64] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[   28.879571][   T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.887630][   T64] usb 3-1: Product: syz
[   28.892092][   T64] usb 3-1: Manufacturer: syz
[   28.896752][   T64] usb 3-1: SerialNumber: syz
[   28.929652][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.961733][  T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.970312][  T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.039792][   T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   29.079639][    T9] usb 4-1: Using ep0 maxpacket: 32
[   29.086479][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   29.095257][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   29.108134][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[   29.119090][   T64] usb 3-1: USB disconnect, device number 5
[   29.125683][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.134330][    T9] usb 4-1: Product: syz
[   29.136982][   T66] usb 1-1: USB disconnect, device number 3
[   29.139551][    T9] usb 4-1: Manufacturer: syz
[   29.149910][    T9] usb 4-1: SerialNumber: syz
[   29.156179][    T9] usb 4-1: config 0 descriptor??
[   29.193450][   T45] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   29.202851][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.210957][   T45] usb 2-1: Product: syz
[   29.215126][   T45] usb 2-1: Manufacturer: syz
[   29.219782][   T45] usb 2-1: SerialNumber: syz
[   29.363730][  T609] rust_binder: Error while translating object.
[   29.363757][  T609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.370041][  T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94
[   29.583441][  T627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43944 sclass=netlink_route_socket pid=627 comm=syz.0.82
[   29.605571][  T627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=627 comm=syz.0.82
[   29.618273][  T627] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   29.639525][  T631] netlink: 'syz.0.83': attribute type 27 has an invalid length.
[   29.648650][  T631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=631 comm=syz.0.83
[   29.764700][  T637] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   29.979647][   T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   30.119658][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   30.130798][   T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.140951][   T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.150613][   T64] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.159823][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   30.167802][   T64] usb 3-1: SerialNumber: syz
[   30.249656][    T9] usb 1-1: device descriptor read/64, error -71
[   30.382061][   T64] usb 3-1: 0:2 : does not exist
[   30.386979][   T64] usb 3-1: unit 5: unexpected type 0x09
[   30.394372][   T64] usb 3-1: USB disconnect, device number 6
[   30.402589][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.489727][    T9] usb 1-1: device descriptor read/64, error -71
[   30.729755][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   30.859693][    T9] usb 1-1: device descriptor read/64, error -71
[   30.908216][  T644] exFAT-fs (rnullb0): invalid boot record signature
[   30.915125][  T644] exFAT-fs (rnullb0): failed to read boot sector
[   30.921647][  T644] exFAT-fs (rnullb0): failed to recognize exfat type
[   31.072061][   T36] kauditd_printk_skb: 76 callbacks suppressed
[   31.072081][   T36] audit: type=1400 audit(1756446325.170:269): avc:  denied  { read append } for  pid=647 comm="syz.2.91" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   31.099691][    T9] usb 1-1: device descriptor read/64, error -71
[   31.101515][   T36] audit: type=1400 audit(1756446325.170:270): avc:  denied  { open } for  pid=647 comm="syz.2.91" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   31.131471][   T36] audit: type=1400 audit(1756446325.230:271): avc:  denied  { mount } for  pid=647 comm="syz.2.91" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   31.175535][   T36] audit: type=1400 audit(1756446325.270:272): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   31.209759][    T9] usb usb1-port1: attempt power cycle
[   31.549697][    T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   31.561725][  T355] usb 4-1: USB disconnect, device number 3
[   31.580665][    T9] usb 1-1: device descriptor read/8, error -71
[   31.615396][  T660] tipc: Started in network mode
[   31.620415][  T660] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   31.629387][  T660] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038
[   31.637485][  T660] tipc: Enabled bearer <udp:syz0>, priority 10
[   31.710761][    T9] usb 1-1: device descriptor read/8, error -71
[   31.749828][  T665] netlink: 'syz.2.97': attribute type 13 has an invalid length.
[   31.758193][  T665] erspan0: refused to change device tx_queue_len
[   31.811796][  T355] usb 2-1: USB disconnect, device number 4
[   31.905335][   T45] rust_binder: 677: removing orphan mapping 0:4120
[   31.918696][   T36] audit: type=1400 audit(1756446326.010:273): avc:  denied  { create } for  pid=686 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.949658][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   31.969675][   T36] audit: type=1400 audit(1756446326.050:274): avc:  denied  { write } for  pid=686 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.990852][    T9] usb 1-1: device descriptor read/8, error -71
[   32.006583][  T690] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.006858][  T690] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   32.023123][  T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61
[   32.049755][  T696] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.066525][  T694] rust_binder: Error in use_page_slow: ESRCH
[   32.066542][  T694] rust_binder: use_range failure ESRCH
[   32.079679][  T694] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   32.085360][  T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   32.093981][  T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63
[   32.104541][   T36] audit: type=1400 audit(1756446326.200:275): avc:  denied  { setopt } for  pid=691 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.138545][  T695] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.140676][    T9] usb 1-1: device descriptor read/8, error -71
[   32.145782][  T695] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.159626][  T695] bridge0: entered promiscuous mode
[   32.164895][  T695] bridge0: entered allmulticast mode
[   32.171820][  T694] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.178984][  T694] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.186328][  T694] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.193385][  T694] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.206586][   T36] audit: type=1326 audit(1756446326.300:276): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.1.106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4b78ebe9 code=0x0
[   32.259760][    T9] usb usb1-port1: unable to enumerate USB device
[   32.650560][   T36] audit: type=1400 audit(1756446326.750:277): avc:  denied  { append } for  pid=699 comm="syz.3.107" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.739694][  T710] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.751580][    T9] tipc: Node number set to 1
[   32.758894][  T710] netlink: 'syz.2.109': attribute type 5 has an invalid length.
[   32.764351][   T36] audit: type=1326 audit(1756446326.850:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=711 comm="syz.3.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc41b8ebe9 code=0x0
[   32.932829][  T724] process 'syz.3.112' launched '/dev/fd/4' with NULL argv: empty string added
[   32.959330][  T725] rust_binder: Failed copying remainder into alloc: EFAULT
[   32.959357][  T725] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   32.966974][  T725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   32.975553][  T725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:77
[   33.019662][  T355] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   33.190708][  T355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   33.200916][  T355] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   33.209952][  T355] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   33.224382][  T355] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[   33.233477][  T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.241497][  T355] usb 3-1: Product: syz
[   33.245679][  T355] usb 3-1: Manufacturer: syz
[   33.250299][  T355] usb 3-1: SerialNumber: syz
[   33.255788][  T355] usb 3-1: config 0 descriptor??
[   33.465474][  T355] usb 3-1: USB disconnect, device number 7
[   33.767941][  T732] capability: warning: `syz.0.117' uses 32-bit capabilities (legacy support in use)
[   33.780957][  T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.794269][  T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.820234][  T738] rust_binder: Write failure EFAULT in pid:136
[   33.820469][  T738] rust_binder: Write failure EFAULT in pid:136
[   34.009647][   T45] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   34.050247][  T757] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   34.057531][  T757] rust_binder: Write failure EINVAL in pid:68
[   34.080459][  T759] binder: Bad value for 'stats'
[   34.123512][  T763] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438)
[   34.123542][  T763] rust_binder: Error while translating object.
[   34.136017][  T763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.140417][  T766] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.142484][  T763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[   34.153550][  T766] overlayfs: upper fs does not support tmpfile.
[   34.177133][  T766] rust_binder: Got transaction with invalid offset.
[   34.177218][  T766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.181553][  T769] input: syz1 as /devices/virtual/input/input6
[   34.184371][  T766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[   34.201599][   T45] usb 1-1: unable to read config index 0 descriptor/start: -71
[   34.222604][   T45] usb 1-1: can't read configurations, error -71
[   34.266340][  T781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=781 comm=syz.3.134
[   34.282148][  T781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.134'.
[   34.403903][  T786] loop7: detected capacity change from 0 to 16384
[   34.404210][  T788] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   34.966331][  T825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   35.289665][   T45] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[   35.299639][  T344] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   35.347733][  T330] bridge_slave_1: left allmulticast mode
[   35.353924][  T330] bridge_slave_1: left promiscuous mode
[   35.359815][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.369813][  T330] bridge_slave_0: left allmulticast mode
[   35.375558][  T330] bridge_slave_0: left promiscuous mode
[   35.395913][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.419644][   T45] usb 1-1: device descriptor read/64, error -71
[   35.450961][  T344] usb 3-1: config 9 has an invalid interface number: 81 but max is 0
[   35.459283][  T344] usb 3-1: config 9 has no interface number 0
[   35.465681][  T344] usb 3-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   35.476762][  T344] usb 3-1: config 9 interface 81 has no altsetting 0
[   35.485119][  T344] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4
[   35.494375][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.502563][  T344] usb 3-1: Product: syz
[   35.506842][  T344] usb 3-1: Manufacturer: syz
[   35.511583][  T344] usb 3-1: SerialNumber: syz
[   35.514118][  T330] tipc: Disabling bearer <udp:syz0>
[   35.521621][  T330] tipc: Left network mode
[   35.522100][  T827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   35.536274][  T330] veth1_macvtap: left promiscuous mode
[   35.541813][  T330] veth0_vlan: left promiscuous mode
[   35.593939][  T831] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.601065][  T831] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.610764][  T831] bridge_slave_0: entered allmulticast mode
[   35.617099][  T831] bridge_slave_0: entered promiscuous mode
[   35.629425][  T831] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.636531][  T831] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.643701][  T831] bridge_slave_1: entered allmulticast mode
[   35.650349][  T831] bridge_slave_1: entered promiscuous mode
[   35.669654][   T45] usb 1-1: device descriptor read/64, error -71
[   35.710189][  T831] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.717287][  T831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.724620][  T831] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.731846][  T831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.742188][  T344] usbserial_generic 3-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   35.754126][  T344] usbserial_generic 3-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   35.765252][  T344] usbserial_generic 3-1:9.81: generic converter detected
[   35.772432][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.780148][  T344] usb 3-1: generic converter now attached to ttyUSB0
[   35.786972][   T45] usb usb1-port1: attempt power cycle
[   35.787008][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.797682][  T344] usb 3-1: generic converter now attached to ttyUSB1
[   35.809797][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.810123][  T344] usb 3-1: USB disconnect, device number 8
[   35.816912][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.837592][  T344] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   35.850258][  T344] generic ttyUSB1: generic converter now disconnected from ttyUSB1
[   35.859045][  T344] usbserial_generic 3-1:9.81: device disconnected
[   35.859517][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.872835][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.890313][  T831] veth0_vlan: entered promiscuous mode
[   35.901803][  T831] veth1_macvtap: entered promiscuous mode
[   36.129773][   T45] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[   36.150830][   T45] usb 1-1: device descriptor read/8, error -71
[   36.279678][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   36.300906][   T45] usb 1-1: device descriptor read/8, error -71
[   36.430102][    T9] usb 5-1: Using ep0 maxpacket: 16
[   36.436716][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[   36.445210][    T9] usb 5-1: config 9 has an invalid interface number: 63 but max is 1
[   36.453452][    T9] usb 5-1: config 9 has an invalid interface number: 159 but max is 1
[   36.461769][    T9] usb 5-1: config 9 has no interface number 0
[   36.468296][    T9] usb 5-1: config 9 has no interface number 1
[   36.474435][    T9] usb 5-1: config 9 interface 63 has no altsetting 0
[   36.485552][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87
[   36.494765][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.502914][    T9] usb 5-1: Product: syz
[   36.507377][    T9] usb 5-1: Manufacturer: syz
[   36.512191][    T9] usb 5-1: SerialNumber: syz
[   36.539726][   T45] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[   36.560897][   T45] usb 1-1: device descriptor read/8, error -71
[   36.712605][   T45] usb 1-1: device descriptor read/8, error -71
[   36.732089][    T9] usb 5-1: USB disconnect, device number 2
[   36.801628][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.819781][   T45] usb usb1-port1: unable to enumerate USB device
[   37.313543][  T869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.313581][  T869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16
[   37.325010][  T870] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.350211][  T874] overlayfs: missing 'lowerdir'
[   37.363409][   T36] kauditd_printk_skb: 41 callbacks suppressed
[   37.363427][   T36] audit: type=1400 audit(1756446331.460:320): avc:  denied  { read } for  pid=873 comm="syz.4.160" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   37.406464][   T36] audit: type=1400 audit(1756446331.460:321): avc:  denied  { open } for  pid=873 comm="syz.4.160" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   37.430614][   T36] audit: type=1400 audit(1756446331.490:322): avc:  denied  { write } for  pid=873 comm="syz.4.160" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.455434][   T36] audit: type=1400 audit(1756446331.490:323): avc:  denied  { ioctl } for  pid=873 comm="syz.4.160" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.542292][   T12] bridge_slave_1: left allmulticast mode
[   37.548075][   T12] bridge_slave_1: left promiscuous mode
[   37.553973][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.562415][   T12] bridge_slave_0: left allmulticast mode
[   37.574166][   T12] bridge_slave_0: left promiscuous mode
[   37.585814][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.702417][   T12] veth1_macvtap: left promiscuous mode
[   37.708013][   T12] veth0_vlan: left promiscuous mode
[   37.752351][  T884] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.759682][  T884] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.764898][  T889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[   37.767233][  T884] bridge_slave_0: entered allmulticast mode
[   37.777374][  T889] fuse: Unknown parameter '�;F5S0p���w����!�%�����w�4���'
[   37.782308][  T884] bridge_slave_0: entered promiscuous mode
[   37.800745][  T884] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.807897][  T884] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.815153][  T884] bridge_slave_1: entered allmulticast mode
[   37.821429][  T884] bridge_slave_1: entered promiscuous mode
[   37.901065][  T884] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.908124][  T884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.915158][   T36] audit: type=1400 audit(1756446332.000:324): avc:  denied  { write } for  pid=901 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   37.915569][  T884] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.934889][   T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   37.941506][  T884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.980588][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.996254][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.032313][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.039418][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.047548][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.054805][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.081872][  T884] veth0_vlan: entered promiscuous mode
[   38.092827][  T884] veth1_macvtap: entered promiscuous mode
[   38.102258][   T45] usb 5-1: Using ep0 maxpacket: 32
[   38.110344][   T45] usb 5-1: config 0 has an invalid interface number: 148 but max is 0
[   38.118628][   T45] usb 5-1: config 0 has no interface number 0
[   38.126686][   T45] usb 5-1: config 0 interface 148 has no altsetting 0
[   38.135608][   T45] usb 5-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8
[   38.144830][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.153874][   T45] usb 5-1: Product: syz
[   38.160115][   T45] usb 5-1: Manufacturer: syz
[   38.164814][   T45] usb 5-1: SerialNumber: syz
[   38.173162][   T45] usb 5-1: config 0 descriptor??
[   38.179776][   T45] pl2303 5-1:0.148: required interrupt-in endpoint missing
[   38.383182][   T36] audit: type=1400 audit(1756446332.480:325): avc:  denied  { ioctl } for  pid=882 comm="syz.4.166" path="socket:[8221]" dev="sockfs" ino=8221 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.561758][   T45] usb 5-1: USB disconnect, device number 3
[   38.578682][  T921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'.
[   38.588374][   T36] audit: type=1400 audit(1756446332.680:326): avc:  denied  { nlmsg_read } for  pid=920 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.600487][  T921] fuse: Bad value for 'user_id'
[   38.613600][  T921] fuse: Bad value for 'user_id'
[   38.621436][  T921] SELinux:  Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped).
[   38.631521][   T36] audit: type=1400 audit(1756446332.730:327): avc:  denied  { relabelto } for  pid=920 comm="syz.1.175" name="ptp0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[   38.658318][   T36] audit: type=1400 audit(1756446332.730:328): avc:  denied  { associate } for  pid=920 comm="syz.1.175" name="ptp0" dev="tmpfs" ino=247 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0"
[   38.856994][   T36] audit: type=1400 audit(1756446332.950:329): avc:  denied  { connect } for  pid=926 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   38.879249][  T927] Zero length message leads to an empty skb
[   38.885560][  T927] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   38.885575][  T927] rust_binder: Read failure Err(EFAULT) in pid:95
[   39.169706][   T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   39.188624][  T945] veth1_macvtap: left promiscuous mode
[   39.269755][  T355] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   39.309875][   T64] usb 5-1: device descriptor read/64, error -71
[   39.420968][  T355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   39.431219][  T355] usb 1-1: config 0 has no interfaces?
[   39.438327][  T355] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   39.447809][  T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   39.455964][  T355] usb 1-1: Product: syz
[   39.460178][  T355] usb 1-1: Manufacturer: syz
[   39.464781][  T355] usb 1-1: SerialNumber: syz
[   39.471214][  T355] usb 1-1: config 0 descriptor??
[   39.555926][  T949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.569025][   T64] usb 5-1: device descriptor read/64, error -71
[   39.679627][  T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.688343][  T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.698106][  T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.707735][  T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.768429][  T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[   39.774461][  T344] usb 1-1: USB disconnect, device number 12
[   39.809684][   T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   39.875801][  T968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.192'.
[   39.949660][   T64] usb 5-1: device descriptor read/64, error -71
[   40.199693][   T64] usb 5-1: device descriptor read/64, error -71
[   40.252338][ T1005] overlayfs: failed to resolve './file1': -2
[   40.297453][  T355] rust_binder: 942: removing orphan mapping 0:24
[   40.310075][   T64] usb usb5-port1: attempt power cycle
[   40.351802][ T1013] fuse: Bad value for 'fd'
[   40.498665][ T1026] rust_binder: Error while translating object.
[   40.498716][ T1026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   40.504990][ T1026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124
[   40.649634][   T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   40.700633][   T64] usb 5-1: device descriptor read/8, error -71
[   40.840676][   T64] usb 5-1: device descriptor read/8, error -71
[   41.079650][   T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   41.120624][   T64] usb 5-1: device descriptor read/8, error -71
[   41.252196][   T64] usb 5-1: device descriptor read/8, error -71
[   41.369662][   T64] usb usb5-port1: unable to enumerate USB device
[   41.487994][ T1037] fuse: Bad value for 'fd'
[   41.509672][   T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   41.649741][   T64] usb 5-1: device descriptor read/64, error -71
[   41.889755][   T64] usb 5-1: device descriptor read/64, error -71
[   42.140117][ T1085] tmpfs: Unknown parameter '�.��/�7���.W:#�'E1�?�.����'
[   42.458723][ T1102] Restarting kernel threads ... done.
[   42.466140][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   42.466158][   T36] audit: type=1400 audit(1756446336.550:352): avc:  denied  { ioctl } for  pid=1101 comm="syz.4.244" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.474953][ T1102] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   42.499154][   T36] audit: type=1400 audit(1756446336.570:353): avc:  denied  { ioctl } for  pid=1101 comm="syz.4.244" path="socket:[8603]" dev="sockfs" ino=8603 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.530611][   T36] audit: type=1400 audit(1756446336.570:354): avc:  denied  { relabelfrom } for  pid=1101 comm="syz.4.244" name="TIPC" dev="sockfs" ino=8597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.554308][   T36] audit: type=1400 audit(1756446336.600:355): avc:  denied  { relabelto } for  pid=1101 comm="syz.4.244" name="TIPC" dev="sockfs" ino=8597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tipc_socket permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[   42.581212][   T36] audit: type=1400 audit(1756446336.600:356): avc:  denied  { setopt } for  pid=1111 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   43.062484][   T64] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   43.077072][ T1129] devpts: called with bogus options
[   43.086535][ T1129] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   43.098891][   T36] audit: type=1400 audit(1756446337.190:357): avc:  denied  { create } for  pid=1134 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   43.115766][ T1139] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   43.163302][   T36] audit: type=1400 audit(1756446337.260:358): avc:  denied  { accept } for  pid=1151 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   43.222787][   T64] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   43.236559][   T64] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   43.245771][ T1156] overlayfs: failed to clone upperpath
[   43.257582][   T64] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   43.268975][   T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   43.278234][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.286319][   T64] usb 5-1: Product: syz
[   43.290615][   T64] usb 5-1: Manufacturer: syz
[   43.295272][   T64] usb 5-1: SerialNumber: syz
[   43.412004][ T1162] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.503635][ T1168] cgroup: Invalid name
[   43.518284][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.530247][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.538536][   T36] audit: type=1400 audit(1756446337.630:359): avc:  denied  { nlmsg_write } for  pid=1119 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   43.569233][   T64] usb 5-1: USB disconnect, device number 9
[   43.786291][   T36] audit: type=1326 audit(1756446337.880:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1180 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181138ebe9 code=0x7ffc0000
[   43.809822][   T36] audit: type=1326 audit(1756446337.880:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1180 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181138ebe9 code=0x7ffc0000
[   44.019742][  T344] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   44.149693][   T64] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   44.170841][  T344] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   44.181873][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.192804][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.202605][  T344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   44.216444][  T344] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   44.225775][  T344] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   44.233892][  T344] usb 1-1: Manufacturer: syz
[   44.239106][  T344] usb 1-1: config 0 descriptor??
[   44.300981][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   44.312085][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   44.323032][   T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   44.336059][   T64] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[   44.345160][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.354183][   T64] usb 3-1: config 0 descriptor??
[   44.359988][ T1200] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   44.646416][  T344] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[   44.653741][  T344] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[   44.662672][  T344] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   44.775727][   T64] aureal 0003:0755:2626.0005: unknown main item tag 0x6
[   44.782800][   T64] aureal 0003:0755:2626.0005: report_id 29495 is invalid
[   44.789900][   T64] aureal 0003:0755:2626.0005: item 0 2 1 8 parsing failed
[   44.797153][   T64] aureal 0003:0755:2626.0005: probe with driver aureal failed with error -22
[   44.901518][  T344] usb 1-1: USB disconnect, device number 13
[   44.975593][   T45] usb 3-1: USB disconnect, device number 9
[   45.446010][ T1223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   45.446045][ T1223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:191
[   45.467423][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.486591][ T1228] binder: Unknown parameter 'defcontext01777777777777777777777'
[   45.508824][ T1228] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   45.561824][ T1232] binder: Bad value for 'max'
[   45.575946][ T1232] binder: Unknown parameter 'smackfshat'
[   45.603039][ T1239] /dev/rnullb0: Can't open blockdev
[   45.622878][ T1241] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.623008][ T1241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   45.629473][ T1241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:204
[   45.689712][  T344] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   45.849682][  T344] usb 5-1: Using ep0 maxpacket: 32
[   45.855924][  T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.867032][  T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.877291][  T344] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   45.886670][  T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.897512][  T344] usb 5-1: config 0 descriptor??
[   45.949729][   T64] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   46.100804][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   46.111872][   T64] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   46.118960][  T344] usbhid 5-1:0.0: can't add hid device: -71
[   46.123050][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.127465][  T344] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   46.138985][   T64] usb 3-1: config 0 descriptor??
[   46.145131][   T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   46.151049][ T1230] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   46.158617][  T344] usb 5-1: USB disconnect, device number 10
[   46.176205][ T1263] netlink: 13860 bytes leftover after parsing attributes in process `syz.4.301'.
[   46.299672][   T45] usb 1-1: device descriptor read/64, error -71
[   46.371323][   T64] usbhid 3-1:0.0: can't add hid device: -71
[   46.377362][   T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   46.386712][   T64] usb 3-1: USB disconnect, device number 10
[   46.539705][   T45] usb 1-1: device descriptor read/64, error -71
[   46.779676][   T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   46.909669][   T45] usb 1-1: device descriptor read/64, error -71
[   47.149693][   T45] usb 1-1: device descriptor read/64, error -71
[   47.189695][  T344] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   47.259832][   T45] usb usb1-port1: attempt power cycle
[   47.319695][  T344] usb 3-1: device descriptor read/64, error -71
[   47.329646][  T829] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   47.339521][ T1308] netlink: 'syz.1.315': attribute type 4 has an invalid length.
[   47.480841][  T829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.491095][  T829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.500800][  T829] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   47.509920][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   47.517916][  T829] usb 5-1: SerialNumber: syz
[   47.559665][  T344] usb 3-1: device descriptor read/64, error -71
[   47.599684][   T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   47.620720][   T45] usb 1-1: device descriptor read/8, error -71
[   47.750739][   T45] usb 1-1: device descriptor read/8, error -71
[   47.799639][  T344] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   47.929661][  T344] usb 3-1: device descriptor read/64, error -71
[   47.989704][   T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   48.010710][   T45] usb 1-1: device descriptor read/8, error -71
[   48.140837][   T45] usb 1-1: device descriptor read/8, error -71
[   48.169652][  T344] usb 3-1: device descriptor read/64, error -71
[   48.249752][   T45] usb usb1-port1: unable to enumerate USB device
[   48.279916][  T344] usb usb3-port1: attempt power cycle
[   48.619663][  T344] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   48.640755][  T344] usb 3-1: device descriptor read/8, error -71
[   48.740904][ T1324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'.
[   48.770782][  T344] usb 3-1: device descriptor read/8, error -71
[   49.009740][  T344] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   49.030861][  T344] usb 3-1: device descriptor read/8, error -71
[   49.160652][  T344] usb 3-1: device descriptor read/8, error -71
[   49.280651][  T344] usb usb3-port1: unable to enumerate USB device
[   49.282766][ T1333] netlink: 'syz.1.323': attribute type 21 has an invalid length.
[   49.294835][ T1333] netlink: 388 bytes leftover after parsing attributes in process `syz.1.323'.
[   49.801808][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   49.801828][   T36] audit: type=1400 audit(1756446343.900:384): avc:  denied  { write } for  pid=1334 comm="syz.0.324" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   49.838244][   T36] audit: type=1400 audit(1756446343.930:385): avc:  denied  { ioctl } for  pid=1341 comm="syz.1.326" path="socket:[10441]" dev="sockfs" ino=10441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   49.896149][ T1353] rust_binder: Write failure EFAULT in pid:220
[   49.961323][ T1364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.973978][ T1364] rust_binder: Failed to allocate buffer. len:88, is_oneway:true
[   50.034280][ T1370] rust_binder: Write failure EFAULT in pid:71
[   50.042136][   T36] audit: type=1400 audit(1756446344.130:386): avc:  denied  { create } for  pid=1367 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   50.071450][ T1370] rust_binder: Error while translating object.
[   50.071489][ T1370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.077895][ T1370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71
[   50.092823][   T36] audit: type=1400 audit(1756446344.190:387): avc:  denied  { setopt } for  pid=1371 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.285865][  T829] usb 5-1: 0:2 : does not exist
[   50.302792][  T829] usb 5-1: USB disconnect, device number 11
[   50.322156][ T1379] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.334940][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   50.389299][ T1384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'.
[   50.400944][   T36] audit: type=1400 audit(1756446344.500:388): avc:  denied  { bind } for  pid=1383 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   50.421970][ T1384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.340'.
[   50.446630][   T36] audit: type=1400 audit(1756446344.520:389): avc:  denied  { setopt } for  pid=1383 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   50.555201][   T36] audit: type=1400 audit(1756446344.650:390): avc:  denied  { remount } for  pid=1394 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   50.578827][ T1397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'.
[   50.587088][ T1399] /dev/rnullb0: Can't open blockdev
[   50.592549][ T1397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'.
[   50.650907][ T1411] /dev/rnullb0: Can't open blockdev
[   50.662267][   T36] audit: type=1400 audit(1756446344.760:391): avc:  denied  { ioctl } for  pid=1412 comm="syz.2.350" path="socket:[10710]" dev="sockfs" ino=10710 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.719820][ T1424] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36
[   50.719845][ T1424] rust_binder: Error while translating object.
[   50.722401][   T36] audit: type=1400 audit(1756446344.810:392): avc:  denied  { write } for  pid=1423 comm="syz.4.354" name="mcfilter6" dev="proc" ino=4026532953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   50.734953][ T1424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.758701][ T1424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88
[   51.059641][  T829] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   51.239619][  T829] usb 5-1: Using ep0 maxpacket: 16
[   51.255255][  T829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   51.284166][  T829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   51.304102][  T829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   51.309618][   T36] audit: type=1400 audit(1756446345.400:393): avc:  denied  { watch } for  pid=1464 comm="syz.1.364" path="/117" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   51.325067][  T829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   51.370216][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   51.390593][  T829] usb 5-1: SerialNumber: syz
[   51.405822][ T1443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   51.648451][ T1475] IPv6: Can't replace route, no match found
[   51.668875][ T1475] fuseblk: Unknown parameter '�����jgroup
'
[   51.678486][ T1475] input: syz1 as /devices/virtual/input/input8
[   51.754332][ T1477] fuseblk: Bad value for 'source'
[   51.771519][ T1477] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   51.889645][  T344] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   52.019704][   T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   52.041359][  T344] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5
[   52.051889][  T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.062504][  T344] usb 1-1: config 0 descriptor??
[   52.190714][   T45] usb 3-1: Using ep0 maxpacket: 16
[   52.202918][   T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   52.220634][   T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[   52.230185][   T45] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
[   52.238377][   T45] usb 3-1: Manufacturer: syz
[   52.245784][   T45] usb 3-1: config 0 descriptor??
[   53.662528][ T1538] overlayfs: failed to clone upperpath
[   53.821802][  T829] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[   53.834185][  T829] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[   53.845097][  T829] usb 5-1: USB disconnect, device number 12
[   53.898650][  T330] tipc: Subscription rejected, illegal request
[   54.279665][  T829] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   54.440039][  T829] usb 5-1: too many configurations: 151, using maximum allowed: 8
[   54.455797][  T829] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   54.465007][  T829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   54.473331][  T829] usb 5-1: Product: syz
[   54.477554][  T829] usb 5-1: Manufacturer: syz
[   54.482193][  T829] usb 5-1: SerialNumber: syz
[   54.487536][  T829] usb 5-1: config 0 descriptor??
[   54.493454][  T829] cdc_acm 5-1:0.0: Zero length descriptor references
[   54.500231][  T829] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22
[   54.637618][  T344] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   54.648152][  T344] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   54.658477][  T344] asix 1-1:0.0: probe with driver asix failed with error -71
[   54.666686][  T344] usb 1-1: USB disconnect, device number 18
[   54.695077][ T1547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.703933][ T1547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.739106][   T64] usb 5-1: USB disconnect, device number 13
[   54.773946][  T829] usb 3-1: USB disconnect, device number 15
[   54.864028][ T1561] netlink: 'syz.2.396': attribute type 6 has an invalid length.
[   54.884920][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   54.884937][   T36] audit: type=1400 audit(1756446348.980:397): avc:  denied  { read } for  pid=1560 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   54.938391][ T1573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   54.947551][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'.
[   54.956618][ T1573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   54.979747][  T344] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   55.033835][ T1576] /dev/rnullb0: Can't open blockdev
[   55.049129][   T36] audit: type=1400 audit(1756446349.140:398): avc:  denied  { mount } for  pid=1581 comm="syz.1.402" name="/" dev="ramfs" ino=11437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   55.150788][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.162020][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.171797][  T344] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   55.181139][  T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.190405][  T344] usb 1-1: config 0 descriptor??
[   55.353090][ T1590] /dev/rnullb0: Can't open blockdev
[   55.360282][   T36] audit: type=1400 audit(1756446349.460:399): avc:  denied  { mounton } for  pid=1589 comm="syz.4.406" path="/31/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   55.598176][  T344] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7
[   55.606168][  T344] cp2112 0003:10C4:EA90.0006: parse failed
[   55.612054][  T344] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22
[   55.809557][ T1555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.818175][ T1555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.826921][ T1555] rust_binder: Write failure EFAULT in pid:264
[   55.827773][  T344] usb 1-1: USB disconnect, device number 19
[   55.981021][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.988176][ T1603] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.995421][ T1603] bridge_slave_0: entered allmulticast mode
[   56.001973][ T1603] bridge_slave_0: entered promiscuous mode
[   56.008302][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.015627][ T1603] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.022872][ T1603] bridge_slave_1: entered allmulticast mode
[   56.029131][ T1603] bridge_slave_1: entered promiscuous mode
[   56.073981][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.081077][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.088349][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.095413][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.115484][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.123015][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.133243][  T330] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.140367][  T330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.151346][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.158494][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.166658][ T1614] tipc: Started in network mode
[   56.171769][ T1614] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   56.180933][ T1614] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038
[   56.189012][ T1614] tipc: Enabled bearer <udp:sy>, priority 10
[   56.232485][ T1603] veth0_vlan: entered promiscuous mode
[   56.250886][   T36] audit: type=1400 audit(1756446350.350:400): avc:  denied  { name_bind } for  pid=1621 comm="syz.1.416" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   56.272597][ T1603] veth1_macvtap: entered promiscuous mode
[   56.296572][ T1624] overlayfs: failed to clone upperpath
[   56.379219][   T36] audit: type=1400 audit(1756446350.470:401): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   56.387631][ T1633] mmap: syz.0.419 (1633): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   56.404485][   T36] audit: type=1400 audit(1756446350.500:402): avc:  denied  { remount } for  pid=1633 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   56.433119][   T36] audit: type=1400 audit(1756446350.530:403): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   56.443754][ T1638] overlayfs: conflicting options: nfs_export=on,index=off
[   56.456303][   T36] audit: type=1400 audit(1756446350.540:404): avc:  denied  { append } for  pid=1637 comm="syz.0.420" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   56.568556][ T1642] /dev/rnullb0: Can't open blockdev
[   56.641722][ T1649] can: request_module (can-proto-0) failed.
[   56.647715][ T1650] can: request_module (can-proto-0) failed.
[   56.830872][ T1654] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   56.830915][ T1654] rust_binder: Read failure Err(EFAULT) in pid:104
[   56.840541][ T1654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104
[   56.859931][  T344] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   56.884089][   T36] audit: type=1400 audit(1756446350.980:405): avc:  denied  { mounton } for  pid=1659 comm="syz.4.429" path="/proc/108/task" dev="proc" ino=11927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   56.910936][  T829] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   56.981779][   T36] audit: type=1326 audit(1756446351.080:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.1.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b78ebe9 code=0x0
[   57.020794][  T344] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[   57.028949][  T344] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   57.040930][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[   57.052685][  T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   57.064189][  T344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.077943][  T344] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.088144][  T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.096489][  T829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.107137][  T829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.118373][  T829] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   57.128070][  T344] usb 1-1: config 0 descriptor??
[   57.133101][  T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   57.139645][   T64] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   57.141450][ T1644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   57.157472][  T829] usb 6-1: SerialNumber: syz
[   57.179638][   T66] tipc: Node number set to 1
[   57.299671][   T64] usb 5-1: Using ep0 maxpacket: 16
[   57.306052][   T64] usb 5-1: config 0 has no interfaces?
[   57.311825][   T64] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   57.321171][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.330073][   T64] usb 5-1: config 0 descriptor??
[   57.371579][  T829] usb 6-1: 0:2 : does not exist
[   57.377591][  T344] usbhid 1-1:0.0: can't add hid device: -71
[   57.385095][  T344] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   57.394701][  T829] usb 6-1: USB disconnect, device number 2
[   57.405520][  T344] usb 1-1: USB disconnect, device number 20
[   57.536684][   T66] usb 5-1: USB disconnect, device number 14
[   58.259667][  T344] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   58.339665][   T64] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   58.410996][  T344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.420963][  T344] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[   58.432393][  T344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.442677][  T344] usb 6-1: config 0 descriptor??
[   58.509961][   T64] usb 1-1: Using ep0 maxpacket: 8
[   58.517799][   T64] usb 1-1: config 1 has an invalid interface number: 3 but max is 2
[   58.526040][   T64] usb 1-1: config 1 has no interface number 1
[   58.532305][   T64] usb 1-1: too many endpoints for config 1 interface 3 altsetting 2: 47, using maximum allowed: 30
[   58.543238][   T64] usb 1-1: config 1 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 47
[   58.556485][   T64] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[   58.567733][   T64] usb 1-1: config 1 interface 3 has no altsetting 0
[   58.575803][   T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   58.585038][   T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.593102][   T64] usb 1-1: Product: Ч
[   58.597281][   T64] usb 1-1: Manufacturer: 桸䱘똧냛맋ꖩⶎ௷䛎騱很쫉ꋬ褏ජᜄ괏멬ƾ넿
[   58.607264][   T64] usb 1-1: SerialNumber: 쯂⒐뇡너Ń킱༰静铴臨¤螎涝ວ鐳撷腛꼴೸沉뀂쯭갇䱼襮ん⯫⦰쑰빱＋ź䄿䂏ꆑ囥᳣줁葉퉜躂出刷어㘡
[   58.653378][  T344] pantherlord 0003:0810:0001.0007: global environment stack underflow
[   58.668177][  T344] pantherlord 0003:0810:0001.0007: item 0 1 1 11 parsing failed
[   58.676181][  T344] pantherlord 0003:0810:0001.0007: parse failed
[   58.682675][  T344] pantherlord 0003:0810:0001.0007: probe with driver pantherlord failed with error -22
[   58.694171][  T344] usb 6-1: USB disconnect, device number 3
[   58.833045][   T64] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   58.860543][   T64] usb 1-1: USB disconnect, device number 21
[   58.887463][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.166295][ T1714] rust_binder: Error while translating object.
[   59.166333][ T1714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   59.179847][ T1714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:123
[   59.281887][ T1718] __vm_enough_memory: pid: 1718, comm: syz.4.449, bytes: 18014402804453376 not enough memory for the allocation
[   59.323695][ T1723] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588)
[   59.323721][ T1723] rust_binder: Error while translating object.
[   59.335994][ T1723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.342218][ T1723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[   59.357468][ T1726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.451'.
[   59.376267][ T1726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.451'.
[   59.385730][ T1726] netlink: 'syz.0.451': attribute type 6 has an invalid length.
[   59.393544][ T1726] netlink: 'syz.0.451': attribute type 5 has an invalid length.
[   59.401238][ T1726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.451'.
[   59.420779][ T1729] fuse: Unknown parameter '0x0000000000000007'
[   59.427976][ T1729] tipc: Trying to set illegal importance in message
[   59.789716][  T829] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   59.940812][  T829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.951011][  T829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.960638][  T829] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.969749][  T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.977754][  T829] usb 5-1: SerialNumber: syz
[   60.192380][ T1739] netlink: 'syz.4.456': attribute type 11 has an invalid length.
[   60.217851][  T829] usb 5-1: 0:2 : does not exist
[   60.233383][  T829] usb 5-1: USB disconnect, device number 15
[   60.250701][ T1769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.260943][ T1768] tipc: Resetting bearer <eth:syzkaller0>
[   60.274725][ T1768] tipc: Disabling bearer <eth:syzkaller0>
[   60.409129][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   60.409148][   T36] audit: type=1400 audit(1756446354.500:416): avc:  denied  { accept } for  pid=1793 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   60.660044][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   60.728914][ T1813] syz.1.479 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   60.752683][ T1815] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   60.762942][ T1815] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   60.799627][    T9] usb 1-1: device descriptor read/64, error -71
[   61.049651][    T9] usb 1-1: device descriptor read/64, error -71
[   61.289646][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   61.419682][    T9] usb 1-1: device descriptor read/64, error -71
[   61.642374][ T1830] tmpfs: Unknown parameter 'hpge'
[   61.659974][    T9] usb 1-1: device descriptor read/64, error -71
[   61.769766][    T9] usb usb1-port1: attempt power cycle
[   62.109739][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   62.130951][    T9] usb 1-1: device descriptor read/8, error -71
[   62.260800][    T9] usb 1-1: device descriptor read/8, error -71
[   62.440651][ T1851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   62.440686][ T1851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172
[   62.450244][ T1851] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   62.459466][ T1851] rust_binder: Read failure Err(EFAULT) in pid:172
[   62.499694][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   62.530689][    T9] usb 1-1: device descriptor read/8, error -71
[   63.438827][ T1872] /dev/rnullb0: Can't open blockdev
[   63.519891][    T9] usb 1-1: device descriptor read/8, error -71
[   63.595923][ T1880] tipc: New replicast peer: 255.255.255.255
[   63.602240][ T1880] tipc: Enabled bearer <udp:syz2>, priority 10
[   63.609361][ T1880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'.
[   63.618700][ T1880] tipc: Disabling bearer <udp:syz2>
[   63.632124][    T9] usb usb1-port1: unable to enumerate USB device
[   63.799672][  T829] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   63.929691][  T829] usb 6-1: device descriptor read/64, error -71
[   63.929691][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   64.079673][    T9] usb 1-1: Using ep0 maxpacket: 16
[   64.086093][    T9] usb 1-1: config 0 has an invalid interface number: 81 but max is 1
[   64.094244][    T9] usb 1-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config
[   64.104530][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   64.113528][    T9] usb 1-1: config 0 has no interface number 0
[   64.119906][    T9] usb 1-1: too many endpoints for config 0 interface 81 altsetting 104: 193, using maximum allowed: 30
[   64.130988][    T9] usb 1-1: config 0 interface 81 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 193
[   64.144312][    T9] usb 1-1: config 0 interface 81 has no altsetting 0
[   64.152611][    T9] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[   64.161802][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.169830][    T9] usb 1-1: Product: syz
[   64.174004][    T9] usb 1-1: Manufacturer: syz
[   64.178587][    T9] usb 1-1: SerialNumber: syz
[   64.184283][    T9] usb 1-1: config 0 descriptor??
[   64.190426][  T829] usb 6-1: device descriptor read/64, error -71
[   64.392725][   T36] audit: type=1400 audit(1756446358.490:417): avc:  denied  { append } for  pid=1879 comm="syz.0.506" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   64.429716][  T829] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   64.491869][    T9] asix 1-1:0.81 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   64.502407][    T9] asix 1-1:0.81: probe with driver asix failed with error -71
[   64.511605][    T9] usb 1-1: USB disconnect, device number 26
[   64.559706][  T829] usb 6-1: device descriptor read/64, error -71
[   64.799666][  T829] usb 6-1: device descriptor read/64, error -71
[   64.909744][  T829] usb usb6-port1: attempt power cycle
[   64.979697][   T66] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   65.025889][   T36] audit: type=1400 audit(1756446359.120:418): avc:  denied  { create } for  pid=1916 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   65.130869][   T66] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   65.141868][   T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.152817][   T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.162937][   T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   65.176762][   T66] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   65.185866][   T66] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   65.194140][   T66] usb 5-1: Manufacturer: syz
[   65.199302][   T66] usb 5-1: config 0 descriptor??
[   65.249658][  T829] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   65.270760][  T829] usb 6-1: device descriptor read/8, error -71
[   65.400917][  T829] usb 6-1: device descriptor read/8, error -71
[   65.408235][   T36] audit: type=1326 audit(1756446359.500:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1904 comm="syz.4.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ab1d8ebe9 code=0x0
[   65.409630][   T66] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[   65.438730][   T66] appleir 0003:05AC:8243.0008: No inputs registered, leaving
[   65.447536][   T66] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   65.513034][    T9] usb 5-1: USB disconnect, device number 16
[   65.629260][ T1944] pim6reg1: entered promiscuous mode
[   65.634674][ T1944] pim6reg1: entered allmulticast mode
[   65.649705][  T829] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[   65.670812][  T829] usb 6-1: device descriptor read/8, error -71
[   65.701537][   T36] audit: type=1400 audit(1756446359.800:420): avc:  denied  { mounton } for  pid=1949 comm="syz.4.529" path="/69/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   65.813648][  T829] usb 6-1: device descriptor read/8, error -71
[   65.929863][  T829] usb usb6-port1: unable to enumerate USB device
[   66.153371][   T36] audit: type=1400 audit(1756446360.250:421): avc:  denied  { associate } for  pid=1958 comm="syz.4.532" name="cpuacct.usage_sys" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   66.229658][  T829] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   66.359630][  T829] usb 1-1: device descriptor read/64, error -71
[   66.379049][   T36] audit: type=1400 audit(1756446360.470:422): avc:  denied  { read } for  pid=1983 comm="syz.1.541" name="ptp0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[   66.405612][   T36] audit: type=1400 audit(1756446360.470:423): avc:  denied  { open } for  pid=1983 comm="syz.1.541" path="/dev/ptp0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[   66.432758][   T36] audit: type=1400 audit(1756446360.480:424): avc:  denied  { ioctl } for  pid=1983 comm="syz.1.541" path="/dev/ptp0" dev="tmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[   66.599620][  T829] usb 1-1: device descriptor read/64, error -71
[   66.675961][ T2014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   66.676001][ T2014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:232
[   66.722640][   T36] audit: type=1400 audit(1756446360.820:425): avc:  denied  { mounton } for  pid=2017 comm="syz.4.553" path="/75/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.839653][  T829] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   66.853932][   T36] audit: type=1400 audit(1756446360.950:426): avc:  denied  { map } for  pid=2029 comm="syz.4.557" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   66.969687][  T829] usb 1-1: device descriptor read/64, error -71
[   66.977300][   T36] audit: type=1400 audit(1756446361.070:427): avc:  denied  { read } for  pid=2041 comm="syz.5.561" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   67.033346][   T36] audit: type=1400 audit(1756446361.070:428): avc:  denied  { open } for  pid=2041 comm="syz.5.561" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   67.068783][   T36] audit: type=1400 audit(1756446361.070:429): avc:  denied  { ioctl } for  pid=2041 comm="syz.5.561" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   67.081361][ T2047] tc_dump_action: action bad kind
[   67.105240][ T2047] tipc: Enabling of bearer <udp:sy> rejected, already enabled
[   67.123769][ T2049] overlay: Unknown parameter 'dont_measure'
[   67.143115][ T2051] /dev/rnullb0: Can't open blockdev
[   67.148962][ T2051] /dev/rnullb0: Can't open blockdev
[   67.200097][ T2062] fuse: Bad value for 'rootmode'
[   67.249634][  T829] usb 1-1: device descriptor read/64, error -71
[   67.311671][ T2084] rust_binder: Error in use_page_slow: ESRCH
[   67.311688][ T2084] rust_binder: use_range failure ESRCH
[   67.317775][ T2084] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   67.323331][ T2084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   67.331277][ T2084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:101
[   67.362130][  T829] usb usb1-port1: attempt power cycle
[   67.607941][ T2089] tipc: Started in network mode
[   67.612968][ T2089] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   67.621995][ T2089] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038
[   67.630137][ T2089] tipc: Enabled bearer <udp:sy>, priority 10
[   67.648293][ T2091] sit0: entered promiscuous mode
[   67.655341][ T2091] netlink: 'syz.4.574': attribute type 1 has an invalid length.
[   67.663527][ T2091] netlink: 9 bytes leftover after parsing attributes in process `syz.4.574'.
[   67.691223][  T595] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   67.701175][ T2106] cgroup: Name too long
[   67.706918][ T2106] overlayfs: failed to clone upperpath
[   67.719976][  T829] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   67.740890][  T829] usb 1-1: device descriptor read/8, error -71
[   67.861279][  T595] usb 6-1: unable to get BOS descriptor or descriptor too short
[   67.869411][  T595] usb 6-1: not running at top speed; connect to a high speed hub
[   67.878141][  T595] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[   67.881533][  T829] usb 1-1: device descriptor read/8, error -71
[   67.886356][  T595] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   67.902783][  T595] usb 6-1: config 4 has no interface number 0
[   67.910446][  T595] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   67.919549][  T595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.928830][  T595] usb 6-1: Product: syz
[   67.933024][  T595] usb 6-1: Manufacturer: syz
[   67.937626][  T595] usb 6-1: SerialNumber: syz
[   68.129733][  T829] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   68.148935][  T595] usb 6-1: Found UVC 0.02 device syz (04f2:b746)
[   68.150784][  T829] usb 1-1: device descriptor read/8, error -71
[   68.155457][  T595] usb 6-1: No streaming interface found for terminal 6.
[   68.172226][  T595] usb 6-1: USB disconnect, device number 8
[   68.290745][  T829] usb 1-1: device descriptor read/8, error -71
[   68.399729][  T829] usb usb1-port1: unable to enumerate USB device
[   68.749692][    T9] tipc: Node number set to 1
[   68.813866][ T2138] netlink: 'syz.1.590': attribute type 3 has an invalid length.
[   68.821728][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[   68.929009][ T2143] tipc: Enabling of bearer <udp:sy> rejected, already enabled
[   69.115258][ T2167] rust_binder: 124: no such ref 0
[   69.200624][ T2177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer.
[   69.869303][ T2210] netlink: 188 bytes leftover after parsing attributes in process `syz.1.613'.
[   69.897499][ T2212] tipc: Enabling of bearer <udp:sy> rejected, already enabled
[   69.918266][ T2214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2214 comm=syz.1.615
[   69.931219][ T2215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.615'.
[   70.011581][ T2220] netlink: 168 bytes leftover after parsing attributes in process `syz.1.617'.
[   70.091152][ T2224] fuse: Bad value for 'fd'
[   70.320506][ T2236] tipc: Started in network mode
[   70.325444][ T2236] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   70.354951][ T2236] tipc: New replicast peer: fe80:0000:0000:faff:ffff:0000:0000:0038
[   70.369671][ T2236] tipc: Enabled bearer <udp:sy>, priority 10
[   70.399064][ T2239] netlink: 84 bytes leftover after parsing attributes in process `syz.5.624'.
[   70.485578][ T2242] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   70.732734][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   70.732753][   T36] audit: type=1400 audit(7025785460.821:444): avc:  denied  { mounton } for  pid=2253 comm="syz.1.628" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   70.760913][ T2255] incfs: Can't find or create .index dir in ./bus
[   70.767455][ T2255] incfs: mount failed -1
[   70.773156][ T2247] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.780971][ T2255] incfs: Can't find or create .index dir in ./bus
[   70.783870][ T2259] rust_binder: Write failure EINVAL in pid:152
[   70.788872][ T2255] incfs: mount failed -1
[   70.802159][ T2258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   70.823590][ T2258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.369624][   T66] tipc: Node number set to 1
[   71.541127][ T2272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159
[   71.631316][ T2290] tipc: Enabling of bearer <udp:sy> rejected, already enabled
[   71.668218][   T36] audit: type=1400 audit(7025785461.751:445): avc:  denied  { execute_no_trans } for  pid=2273 comm="syz.4.636" path="/87/file1" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.733155][   T36] audit: type=1400 audit(7025785461.821:446): avc:  denied  { bind } for  pid=2291 comm="syz.5.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   71.915095][   T36] audit: type=1326 audit(7025785462.001:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz.1.641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4b78ebe9 code=0x0
[   72.110207][ T2300] rust_binder: Write failure EFAULT in pid:335
[   72.278884][ T2318] tipc: Enabling of bearer <udp:sy> rejected, already enabled
[   72.320518][ T2320] veth1: entered allmulticast mode
[   72.327333][   T36] audit: type=1404 audit(7025785462.411:448): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   72.343115][   T36] audit: type=1400 audit(7025785462.421:449): avc:  denied  { read write } for  pid=831 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   72.350067][ T2320] veth1: left allmulticast mode
[   72.369371][   T36] audit: type=1400 audit(7025785462.431:450): avc:  denied  { create } for  pid=2319 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   72.391928][   T36] audit: type=1400 audit(7025785462.431:451): avc:  denied  { create } for  pid=2319 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   72.411492][   T36] audit: type=1400 audit(7025785462.431:452): avc:  denied  { setopt } for  pid=2319 comm="syz.5.650" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   72.431744][   T36] audit: type=1400 audit(7025785462.431:453): avc:  denied  { getopt } for  pid=2319 comm="syz.5.650" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   72.825371][   T46] bridge_slave_1: left allmulticast mode
[   72.831460][   T46] bridge_slave_1: left promiscuous mode
[   72.837400][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.845367][   T46] bridge_slave_0: left allmulticast mode
[   72.851277][   T46] bridge_slave_0: left promiscuous mode
[   72.856977][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.981236][   T46] tipc: Disabling bearer <udp:syz0>
[   72.986531][   T46] tipc: Left network mode
[   72.991738][   T46] veth1_macvtap: left promiscuous mode
[   72.997274][   T46] veth0_vlan: left promiscuous mode
[   74.043318][ T2349] netlink: 'syz.5.661': attribute type 15 has an invalid length.
[   75.970509][   T36] kauditd_printk_skb: 77 callbacks suppressed
[   75.970529][   T36] audit: type=1400 audit(7025785466.061:531): avc:  denied  { create } for  pid=2371 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   75.996324][   T36] audit: type=1400 audit(7025785466.061:532): avc:  denied  { create } for  pid=2371 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[   76.016358][   T36] audit: type=1400 audit(7025785466.061:533): avc:  denied  { execmem } for  pid=2370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   76.035715][   T36] audit: type=1400 audit(7025785466.061:534): avc:  denied  { create } for  pid=2371 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   76.056119][   T36] audit: type=1400 audit(7025785466.061:535): avc:  denied  { create } for  pid=2371 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0
[   76.075629][   T36] audit: type=1400 audit(7025785466.061:536): avc:  denied  { sys_module } for  pid=2371 comm="syz.5.667" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[   76.096540][   T36] audit: type=1400 audit(7025785466.061:537): avc:  denied  { read } for  pid=2371 comm="syz.5.667" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[   76.119072][   T36] audit: type=1400 audit(7025785466.061:538): avc:  denied  { create } for  pid=2371 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   76.139373][   T36] audit: type=1400 audit(7025785466.071:539): avc:  denied  { read write } for  pid=1603 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   76.163511][   T36] audit: type=1400 audit(7025785466.071:540): avc:  denied  { create } for  pid=2372 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[   81.049380][   T36] kauditd_printk_skb: 41 callbacks suppressed
[   81.049400][   T36] audit: type=1400 audit(7025785471.131:582): avc:  denied  { read write } for  pid=1603 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   81.535181][   T36] audit: type=1400 audit(7025785471.621:583): avc:  denied  { execmem } for  pid=2410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   81.563684][   T36] audit: type=1400 audit(7025785471.621:584): avc:  denied  { read write } for  pid=2414 comm="syz.4.682" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   81.586903][   T36] audit: type=1400 audit(7025785471.631:585): avc:  denied  { create } for  pid=2411 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   81.606367][   T36] audit: type=1400 audit(7025785471.651:586): avc:  denied  { map } for  pid=2411 comm="syz.1.680" path="socket:[16196]" dev="sockfs" ino=16196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0
[   81.630693][   T36] audit: type=1400 audit(7025785471.651:587): avc:  denied  { create } for  pid=2411 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   81.651020][   T36] audit: type=1400 audit(7025785471.651:588): avc:  denied  { create } for  pid=2411 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   81.671496][   T36] audit: type=1400 audit(7025785471.651:589): avc:  denied  { read write } for  pid=831 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   81.695534][   T36] audit: type=1400 audit(7025785471.651:590): avc:  denied  { read write } for  pid=1603 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   82.947284][   T36] audit: type=1400 audit(7025785473.031:591): avc:  denied  { execmem } for  pid=2419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   86.099647][   T36] kauditd_printk_skb: 37 callbacks suppressed
[   86.099668][   T36] audit: type=1400 audit(7025785476.181:629): avc:  denied  { read write } for  pid=2447 comm="syz.5.691" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[   86.129334][   T36] audit: type=1400 audit(7025785476.181:630): avc:  denied  { execmem } for  pid=2446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   86.137695][ T2454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=554 sclass=netlink_route_socket pid=2454 comm=syz.4.692
[   86.156668][   T36] audit: type=1400 audit(7025785476.221:631): avc:  denied  { execmem } for  pid=2448 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   86.180641][   T36] audit: type=1400 audit(7025785476.221:632): avc:  denied  { create } for  pid=2448 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[   86.200170][   T36] audit: type=1400 audit(7025785476.221:633): avc:  denied  { create } for  pid=2448 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   86.220495][   T36] audit: type=1400 audit(7025785476.221:634): avc:  denied  { create } for  pid=2448 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   86.241303][   T36] audit: type=1400 audit(7025785476.241:635): avc:  denied  { create } for  pid=2449 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   86.260852][   T36] audit: type=1400 audit(7025785476.241:636): avc:  denied  { create } for  pid=2449 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   86.280663][   T36] audit: type=1400 audit(7025785476.241:637): avc:  denied  { name_bind } for  pid=2449 comm="syz.1.690" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0
[   86.302182][   T36] audit: type=1400 audit(7025785476.241:638): avc:  denied  { mounton } for  pid=2449 comm="syz.1.690" path="/259/file0" dev="tmpfs" ino=1411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0
[   91.538169][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   91.538190][   T36] audit: type=1400 audit(7025785481.621:667): avc:  denied  { read } for  pid=2478 comm="syz.5.700" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0
[   91.568014][   T36] audit: type=1400 audit(7025785481.621:668): avc:  denied  { create } for  pid=2477 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   91.587942][   T36] audit: type=1400 audit(7025785481.621:669): avc:  denied  { create } for  pid=2477 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   91.607606][   T36] audit: type=1400 audit(7025785481.641:670): avc:  denied  { execmem } for  pid=2476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   91.627144][   T36] audit: type=1400 audit(7025785481.641:671): avc:  denied  { read write } for  pid=831 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   91.651311][   T36] audit: type=1400 audit(7025785481.641:672): avc:  denied  { create } for  pid=2479 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0
[   91.671005][   T36] audit: type=1400 audit(7025785481.641:673): avc:  denied  { mounton } for  pid=2479 comm="syz.1.699" path="/262/file1" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   91.693739][   T36] audit: type=1400 audit(7025785481.641:674): avc:  denied  { sqpoll } for  pid=2479 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   91.713133][   T36] audit: type=1400 audit(7025785481.641:675): avc:  denied  { mounton } for  pid=2478 comm="syz.5.700" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0
[   91.736248][   T36] audit: type=1400 audit(7025785481.641:676): avc:  denied  { read write } for  pid=2478 comm="syz.5.700" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   94.291522][   T12] bridge_slave_1: left allmulticast mode
[   94.297196][   T12] bridge_slave_1: left promiscuous mode
[   94.302867][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.311050][   T12] bridge_slave_0: left allmulticast mode
[   94.316796][   T12] bridge_slave_0: left promiscuous mode
[   94.322640][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.420767][   T12] tipc: Disabling bearer <udp:sy>
[   94.425882][   T12] tipc: Left network mode
[   94.431254][   T12] veth1_macvtap: left promiscuous mode
[   94.436745][   T12] veth0_vlan: left promiscuous mode