last executing test programs:

5m58.996315107s ago: executing program 0 (id=412):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4ea5, 0x4)
memfd_create(&(0x7f0000000000)='mountinfo\x00', 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000100)=""/82, &(0x7f0000000180)=0x52)
socket$nl_xfrm(0x10, 0x3, 0x6)
userfaultfd(0x80801)
r3 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x0, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x2, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x3a, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x8, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2c4, 0x4)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0xb40000, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61783d3030303030303030303030ba00000030303030303030322c73746174733d676c6f62616c2c73746174733d"])

5m58.962946519s ago: executing program 0 (id=413):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

5m58.811719358s ago: executing program 0 (id=417):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0xffffffff, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x7, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x4, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x0, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x80, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) (async)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0xffffffff, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x7, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x4, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x0, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x80, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
close_range(r0, 0xffffffffffffffff, 0x0)

5m58.670420688s ago: executing program 0 (id=421):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGICOUNT(r0, 0x541e, 0xff4f370c567f0000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0xccffffffffffffff, 0x8, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x804)
kcmp(r3, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0})

5m58.460332462s ago: executing program 0 (id=424):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x3)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x2)

5m58.066931267s ago: executing program 0 (id=432):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1})

5m57.973010873s ago: executing program 32 (id=432):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1})

3m52.279279271s ago: executing program 2 (id=1469):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x80000001, 0xda6, 0x1ff, 0x4}}, 0x118) (async, rerun: 64)
fallocate(r1, 0x0, 0x5, 0x5) (rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a000000000000004012000000000000000000000000000100000000200002000a004e20f4fffffffe8000000000000000000000000000bb000000000d0001"], 0x6c}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xf4, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c986143}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff5804}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x881}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9c}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000040)={0x2, r6}) (async)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000002c0)={0x2, r6})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

3m52.124102261s ago: executing program 2 (id=1474):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0)
r1 = epoll_create(0x3)
readv(r1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x11}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

3m51.936271093s ago: executing program 2 (id=1479):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000080)={0xeeee0000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xdddd0000, 0x2000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9"], 0x0}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

3m50.188599287s ago: executing program 2 (id=1497):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2517000000400006803c00040067636d2861"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='ext3\x00', 0x10e845, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f00000001c0)={0x0, 0xfb, 0x80, 0x2, 0x80, "e2e3e057b57c6af155dda9089c83c55c", "3d85f3c212b469824b74d22357290fd6da01082d191b19a7485272da7458ca035a0bcde246c6f9eb2f58892075ca0d2e10f301e8c4db00ee62ea4b32ca2d657e25604db8a992ff10c6fc544200002b5afc6eba82d59549091f0c26ccbb785ff5bd70d2b255d0d1f77b94d6"}, 0x80, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000080))
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000103810101440000102030109022d0001010d000109040008000301017c0921"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000400)=@string={0x2}}, {0x4c, &(0x7f0000000640)=@string={0x4c, 0x3, "f1f5bf07551e92c974a8e3db755ab076c8780138257f53922b58dfcd8482bbdaa65de1a4fc1960550233a75e3a22f0d20cba56abfbc45d253a3241fdb550a59644adf67c4e4d5c5b2cdb"}}]})
setreuid(0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000140)=@sg0, 0x0, &(0x7f0000000180))

3m48.733627152s ago: executing program 2 (id=1528):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000640000/0x4000)=nil, 0x4000, 0x9) (async)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) (async)
fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) (async)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201050000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) (async)
unshare(0x22020600)
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) (async, rerun: 64)
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) (rerun: 64)

3m48.651458087s ago: executing program 2 (id=1530):
close(0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x64)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0x3)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

3m48.626539049s ago: executing program 33 (id=1530):
close(0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x64)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0x3)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

3m25.507914827s ago: executing program 1 (id=1888):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m25.421325403s ago: executing program 1 (id=1889):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0)
getsockname$tipc(r2, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x18)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
timer_settime(r3, 0x0, &(0x7f0000000180)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_getres(0x0, &(0x7f0000000200))
ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f0000000040)=0x22)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r8 = socket$inet(0x2, 0x1, 0x1)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0xa, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdir(0x0, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x31, 0xd, 0x8, {0x11, @tcp_ip4_spec={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e21, 0x4e20, 0xfd}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xf, 0x8, [0x7, 0xd]}, @usr_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x0, 0x3}, {0x0, @empty, 0x0, 0x80, [0x8, 0x3]}, 0xda7c}}})
socket$igmp6(0xa, 0x3, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000fff7ffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3})
r11 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x3}, @enter_looper], 0x50, 0x0, &(0x7f0000000380)="de147e22bade76f1a03b79e954ee20bc43f7fe52218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})

3m25.385425185s ago: executing program 1 (id=1890):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
rt_sigqueueinfo(0x0, 0x13, 0x0)
write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',?k'])
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002d80)=""/254, 0xfe}, {&(0x7f00000004c0)=""/128, 0x80}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
r7 = open(&(0x7f0000000200)='./bus\x00', 0x143a02, 0x0)
sendfile(r7, r4, 0x0, 0xffffffff)

3m24.732407267s ago: executing program 1 (id=1894):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000)
setsockopt$sock_timeval(r2, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r3, 0x1)
recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000000)={{0x2, 0x3, 0x0, 0x0, 0x2}, 0x5})
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88)
sendfile(r0, r0, 0x0, 0x7ffff000)

3m24.69503791s ago: executing program 1 (id=1896):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={{r0}, 0x8, 0xd, 0x80})
syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc010000190001000000000010000000fe8000000000000000000000000000bbffffffff0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000001000000000000000000000000000000000000010000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000300ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000008000000000000ff020000000000000100000000000001000000003200000000000000e00000010000000000000000000000000335000003000100000000000000000000000000ff0100000000000000000000000000010000000032"], 0x1fc}}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x54, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x400035}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000040))

3m24.546584239s ago: executing program 1 (id=1899):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x804)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r3, &(0x7f0000000280)={0xa5, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7fff, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x16, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020)

3m9.376625878s ago: executing program 34 (id=1899):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x804)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r3, &(0x7f0000000280)={0xa5, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7fff, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x16, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020)

2m0.281724735s ago: executing program 3 (id=2855):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d2763", 0x4}], 0x1}, 0x4000001)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080))
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])
mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x22, &(0x7f0000000100)={'trans=xen,', {[], [{@obj_user={'obj_user', 0x3d, '#-\x00'}}, {@measure}]}})

1m59.122567191s ago: executing program 3 (id=2860):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1m59.121976041s ago: executing program 3 (id=2861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x87, 0x51}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000000240)={0x110c, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "43bd17a67723b076f6e15c0509622888ecf98fa232ca41a41ce0538ac839e346b9c15912c72c29b713c5a2775711c5b716694ffce8f3301b19fb51aa01e779665be8e549b4386bc5adc671dc7d2c0c4400be3787326983e724e9f86e7e8afe9f753fdfc916d2ddc20783fef85dd795f35db2fe3d6701007dec4a4d33e7a9ff28d2c69bf58062d2c3c5a389e78684eb15373f74ea13526cc5f42d3e3eba3a00977b998c8bad6217d427ed7f76e9eca1a3eeed1eb42fc2e4e2b148d6208cbe"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}]}, 0x110c}}, 0x90) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), r0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001480)={@empty, <r4=>0x0}, &(0x7f00000014c0)=0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001500)={0x198, 0x12, 0x2, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0xff, 0x9, {0x4e24, 0x4e23, [0x9, 0x10001, 0x2acb, 0x100], [0x4, 0x3, 0x8, 0x2000000], r4, [0xd5c, 0x6ac]}, 0x6, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "ef3bd23e2094ac78eef7a7c3202463b5249bd7240eec5da2bb24eb78f1a9d94f3da15d81d7bdc0f6e6fb2552cea1d350bb5f6fff96fbb44cfdd0a7144109ad4361d65259fa1ad4e922417acc66a6ddddaffbc185481cdfac211a28fcd9bfb064d7ab131126e1f79bda9cba73427686dece6c3d498a93f8234a3a9616dca45a238c1c8131f9643b12f13903c94d9895296335565f415c8ba94fb525ace7d2abfe0d970c818900d431d825fbe84daddcf628bdcac086c672"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "a305a20e483947a7cb690bb313695e130e63082e344a58a3802f71fc40efcffe52e8e93a005504127c71ff1d9fa462109004fd171cfef8776f1a69a7aecd65316d79caae69e3fdab539e0cd0c2b8ed9bf47dd9367a3972b46073768fc1d469cba3235b12fc31ca81c0eb9b0abd2468653cf70c37e6a185549e59b57748cee917722bbbd7404b8536d56f9f"}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001740)={{0x1, 0x1000, 0x1, 0xc}, 'syz0\x00', 0x4d})
r5 = creat(&(0x7f00000017c0)='./file0\x00', 0x19)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x3c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1141e2505c8d5509}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r2)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x38, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x62}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004981}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001a80)={'pimreg\x00', &(0x7f0000001a40)=@ethtool_ringparam={0x10, 0x6, 0x3, 0x0, 0x7fff, 0x2, 0x2, 0x1, 0x9}}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001ac0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001b40)={r7, 0x1, r2, 0x0, 0x80000}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b80)='./binderfs/custom1\x00', 0x802, 0x0) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c00), r5)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xa0, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4100}, 0x10) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40844) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f00), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r10, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) (async)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000002040), r2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002140)={0x2f8, r12, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x44020}, 0x4010)

1m58.562963307s ago: executing program 3 (id=2863):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])

1m58.562145197s ago: executing program 3 (id=2864):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
pipe2$9p(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r5 = dup(r2)
syz_open_dev$usbfs(&(0x7f0000001240), 0xe, 0x20000)
write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001280), 0x2000800, &(0x7f0000001400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e673d7a40f306b73b4c709336c727cfb31c93e246032d5cf2f56188f2934ab326a160dde2dec0243a045ef89669df4b79e5d15787f10c004f06e1b94b8e9291dcb57b6707fc7b6b7b14c0649dd98dd274e892242f8fb44a7c270848828040fc9dbe29a4461ff8caf10fa56d1f5de115946bcca1ad47526a5849993dcc93e6860c8107436c1f79f7cf3b6baea021f466e6bcf0ac3970bb00384a9e7546984a334908bc9718fb94e3230a7dbf7d05e64355be508ff2cd07fb42623901304e384130f93d4d3f59bc6f09d48782afab8774a67f98bda129b825d6ffb5c3917c8c", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000009,\x00'])
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_io_uring_setup(0x44d0, &(0x7f00000012c0)={0x0, 0xc549, 0x400, 0xfffffffd, 0x295}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
socket$inet6(0xa, 0x80001, 0x0)
pread64(r7, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

1m58.559317038s ago: executing program 3 (id=2867):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x129}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x20000, 0x0, {[0x7f, 0x1000, 0x7ff, 0x5, 0x10, 0x401]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)

1m43.583148954s ago: executing program 35 (id=2867):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x129}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x20000, 0x0, {[0x7f, 0x1000, 0x7ff, 0x5, 0x10, 0x401]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)

6.489089487s ago: executing program 4 (id=4053):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x7, 0x3, 0xfffff000, 0x0, 0x1, 0x5, 0x0, 0x5f4}})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000530404002dbd7000fddbff2512e6cb0fa261027cc428855a3f6667637228c6261361391cc37bb0ae6ff4f92bd0557a36e7651756d0e1f9b40fcd2ae1dfc6fabb74fa5c2003fba726c1f88b4686ee92f363de3f114e71b0171699b75b6303a017cdd4e1412a6ea530894da7a42596c4de423d31f7081d45a58ce2f4a6d1410000"], 0x84}, 0x1, 0x0, 0x0, 0x94}, 0x8004)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

5.076507098s ago: executing program 4 (id=4054):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, 0x0, 0x0)

5.025149352s ago: executing program 4 (id=4057):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, '_+tt'}]}}, 0x0}, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r2 = dup(r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x802, 0x0)
sendmmsg$inet(r2, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8", 0xab}, {&(0x7f00000005c0)="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", 0x196}], 0x2}}], 0x1, 0x95)
read$FUSE(r2, &(0x7f0000002a00)={0x2020}, 0x2020)
write$UHID_CREATE2(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x219)

3.399295298s ago: executing program 4 (id=4060):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="34000000000000fffffffe000700000044240d03"], 0x38}}], 0x1, 0x46000)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0)

3.351802761s ago: executing program 4 (id=4063):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000480)="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", 0xfd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x1)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"])
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="380100001000010000000000fe880000000000000000000000000101ac1414bb000000000000000000000000000000005b3c00000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000048000200636263286165732900"/240], 0x138}}, 0x0)
socketpair(0x2f, 0x5, 0x4, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
getsockopt$MRT6(r7, 0x29, 0xcf, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r9 = dup(r8)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xd7)
r10 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r9, 0x8905, &(0x7f0000000340))
sendto$inet(r10, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0xb, 0x3ef, 0x2, 0x9, 0xaae5, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1)

3.255969707s ago: executing program 6 (id=4065):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x1, 0x6, "ed1c17", 0xf6, 0x4, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "0a9ae5092d837df4a2409b49a795a231dc64f73856954ba2f91e2cc14706a08fae633bba02a12f5ea67df81a5ea980126596d1f1a3c5161b19c286f25d20600221f6381f267ecd2142de35858f8ac18c90145499cbe5d53de098ba04a4a91c3ccb7cec8dde9e7132cc855069fcc11bf41f335ed719ede12c12fd224cac3371127c181c4dceb45cdc37bd86ee8940210d9607d748f647d0881ddc3af6229640499ca9cc6b232a7b9da75fbbf4f29108b1370eeffaee8a55bf16d511d7a4d9a8efede74ecd279485b9fc5cb62ba5ead0e580f87224114e39d524f6a49c30faab150527520c697643d4c95d84e95c83c9b08e7548139b60"}}}}}}, 0x134)

3.100532248s ago: executing program 6 (id=4066):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x547302, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x8000, 0x12}})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)

3.023681642s ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

2.28850777s ago: executing program 4 (id=4068):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000001000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000001000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async)

2.287799451s ago: executing program 36 (id=4068):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000001000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000001000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async)

2.269935051s ago: executing program 6 (id=4069):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
ioprio_set$uid(0x3, 0x0, 0x2000) (async)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.176497397s ago: executing program 6 (id=4071):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="340000000000000000ffff000700000044240d03"], 0x38}}], 0x1, 0x46000)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0)

2.15044205s ago: executing program 6 (id=4072):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
finit_module(r0, &(0x7f00000000c0)='{#{.\x00', 0x3) (async)
socket$tipc(0x1e, 0x5, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0x40, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x33}, 0x39573c4e467c4e, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3505, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8084}, 0x0) (async)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040)=0x8887, 0x4) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async)
r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async)
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r8, @ANYRESHEX=r0, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r8, @ANYRESOCT=r8, @ANYBLOB="3f699618ba5cd44cd4ff489e1b8c8d4176beaff37435b4364eddae36e93c7b16fb678259ea5bf08cb8aceacd666d252246b03181406ab4c6380c5101fcf40115714d83a350033cc3d0a9a2e0cd5b7701ef6aa3067e7adf8aa8c6f1065369da9ef3fc1b695dcc13f32d592712c2d69e337fab9b0d84e5cf4ea28397fffcc6a9200ac926ac51e337b53f51c3237fd0477a752ffa8016095e8d4ddff773ccdd433fe58d29e43f24ffd664c6aeb6331c9ea1db7b4d2f1b", @ANYRESHEX=r7], 0x2c, 0x0) (async)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000300)) (async)
socket(0x28, 0x5, 0x1)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
chdir(&(0x7f0000000080)='./file0\x00') (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext'])

2.149719309s ago: executing program 7 (id=4073):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"})

2.102984063s ago: executing program 7 (id=4074):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = getpgid(0xffffffffffffffff)
ptrace(0x8, r1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
getpgid(0xffffffffffffffff) (async)
ptrace(0x8, r1) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) (async)

1.944781793s ago: executing program 6 (id=4075):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @dev={0xfe, 0x80, '\x00', 0xb}, 0x23}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100000001900150000000000fffffffeceabb38e55617a47db71cf171c27235e79d25574b5b8a048034c59dfcfd60e5aab9b80a9c8733fb15803b6ff4ef21ca3"], 0x10}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r2 = dup(r0)
sendmmsg$inet(r2, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="9e25d223bb363e074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6d95c60edba18f1b79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd21000052bb40a3d35dc6340f126aeffdb8db0f61c11e8541987259a7eddf5f06a8de24d3035f2510d3e7", 0xab}, {&(0x7f00000005c0)="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", 0x1b2}], 0x2}}], 0x1, 0x85)
read$FUSE(r2, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
syz_open_procfs(r3, &(0x7f0000000000)='smaps_rollup\x00')
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10008)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
tkill(0x0, 0x13)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x8, "f507b2b0"}]}}, 0x0}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x100, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="6f0f210ac4c1ff116c0400b9b80900000f323e3e3e0fc7b9c42b0000b9c30a00000f32c744240016000000c7442402f7ffffffff2c24c4e2fd9cb3ae4549ab8f0978d1492d36470f78141b", 0x4b}], 0x1, 0x4c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000}}, "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", "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"})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, 0x0)

1.944457823s ago: executing program 7 (id=4077):
r0 = timerfd_create(0x3, 0x80800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10, r0, 0x473e4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup(r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)="a6", 0x1}], 0x1}}], 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x100000004, 0x0)
mmap$binder(&(0x7f00000ba000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x7)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc814}, 0x40001)
timer_create(0x3, 0x0, &(0x7f0000000340)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x3, &(0x7f0000000080))
timer_settime(r8, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000100))
futex(&(0x7f00000002c0), 0x2, 0x2, &(0x7f00000014c0), &(0x7f0000001500)=0x2, 0x0)
mmap$binder(&(0x7f000023c000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0xaae)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000001480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8048000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r11, 0x800, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x40810)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x351000, 0x0)
write(r1, &(0x7f0000000400)="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", 0x1f000)

1.943326333s ago: executing program 7 (id=4078):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2d, 0x0, &(0x7f0000000080))
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000), 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040))
setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

1.840176689s ago: executing program 7 (id=4079):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f00001e7000/0x800000)=nil, 0x800000})
pipe2$9p(&(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r4 = dup(r3)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="400c0d0000000d0e09d25b8f22cb2a67af365c2769903da479"], 0x0}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=<r9=>0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18}, 0x18)
r10 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r10, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES8=r9, @ANYBLOB=',debug=@x0\x00\x000100000000007,\x00', @ANYRES32=r4, @ANYBLOB="21581fb385f1ac86aa847c326a776c1ee732b40d7969438041325a0d56d748"])
r11 = socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r12, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

1.670392031s ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1.501258112s ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

1.356297431s ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1.246868819s ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

1.038502382s ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

1.034572632s ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

758.55026ms ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

603.64112ms ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

462.012659ms ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

310.243899ms ago: executing program 5 (id=3987):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x410}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0022050800"], 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

147.30653ms ago: executing program 8 (id=4076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x3, 0x7ff})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

0s ago: executing program 7 (id=4080):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3400000000000097ffffff000700000044240d03"], 0x38}}], 0x1, 0x46000)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T329] usb 6-1: SerialNumber: syz
[  333.860558][  T329] usb 6-1: config 0 descriptor??
[  333.868113][  T329] ftdi_sio 6-1:0.137: FTDI USB Serial Device converter detected
[  333.900706][  T329] usb 6-1: Detected SIO
[  333.905010][  T329] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8
[  333.935313][  T329] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  333.977599][ T9166] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.981543][ T9166] rust_binder: 465: no such ref 2
[  334.061496][ T9167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.080757][ T9167] rust_binder: 465: no such ref 2
[  334.372689][   T36] kauditd_printk_skb: 364 callbacks suppressed
[  334.372709][   T36] audit: type=1400 audit(1759915028.810:36228): avc:  denied  { create } for  pid=9176 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  334.438481][   T36] audit: type=1400 audit(1759915028.810:36229): avc:  denied  { write } for  pid=9176 comm="syz.6.2928" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  334.499286][   T36] audit: type=1400 audit(1759915028.810:36230): avc:  denied  { read } for  pid=9176 comm="syz.6.2928" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  334.540309][   T36] audit: type=1400 audit(1759915028.810:36231): avc:  denied  { read open } for  pid=9176 comm="syz.6.2928" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  334.586140][   T36] audit: type=1400 audit(1759915028.810:36232): avc:  denied  { read } for  pid=9176 comm="syz.6.2928" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  334.630308][   T36] audit: type=1400 audit(1759915028.810:36233): avc:  denied  { read open } for  pid=9176 comm="syz.6.2928" path="net:[4026532316]" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  334.680259][   T36] audit: type=1400 audit(1759915028.810:36234): avc:  denied  { create } for  pid=9176 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  334.725078][   T36] audit: type=1400 audit(1759915028.810:36235): avc:  denied  { write } for  pid=9176 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  334.767087][ T9180] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.2929'.
[  334.770329][   T36] audit: type=1400 audit(1759915028.810:36236): avc:  denied  { read } for  pid=9176 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  334.799391][ T9180] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2929'.
[  334.826955][   T36] audit: type=1400 audit(1759915028.810:36237): avc:  denied  { read } for  pid=9176 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  335.181923][  T349] usb 6-1: USB disconnect, device number 47
[  335.189730][  T349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  335.201426][  T349] ftdi_sio 6-1:0.137: device disconnected
[  335.613382][ T9185] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  335.613415][ T9185] rust_binder: Error while translating object.
[  335.636015][ T9185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.643115][ T9185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  335.654174][ T9185] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  335.664475][ T9185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.670988][ T9185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  336.157718][ T4330] bridge_slave_1: left allmulticast mode
[  336.174458][ T4330] bridge_slave_1: left promiscuous mode
[  336.180223][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.198201][ T4330] tipc: Resetting bearer <eth:ip6gre0>
[  336.228577][ T4330] tipc: Disabling bearer <eth:ip6gre0>
[  336.310115][ T9207] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2938'.
[  336.319520][ T9207] gretap0: entered promiscuous mode
[  336.325951][ T9208] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2938'.
[  336.334921][ T9208] 0��{X��: renamed from gretap0
[  336.340611][ T9208] 0��{X��: left promiscuous mode
[  336.345681][ T9208] 0��{X��: entered allmulticast mode
[  336.351874][ T9208] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  336.372283][ T4330] tipc: Left network mode
[  336.473097][ T4330] veth1_macvtap: left promiscuous mode
[  336.486293][ T4330] veth0_vlan: left promiscuous mode
[  336.510358][    T9] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  336.571308][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.578472][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.585672][ T9189] bridge_slave_0: entered allmulticast mode
[  336.592153][ T9189] bridge_slave_0: entered promiscuous mode
[  336.600133][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.607370][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.614508][ T9189] bridge_slave_1: entered allmulticast mode
[  336.620956][ T9189] bridge_slave_1: entered promiscuous mode
[  336.686189][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  336.703275][    T9] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  336.713942][ T9222] sock: sock_set_timeout: `syz.4.2942' (pid 9222) tries to set negative timeout
[  336.716321][    T9] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  336.736297][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  336.747526][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.40
[  336.758587][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.768409][    T9] usb 6-1: Product: syz
[  336.777187][    T9] usb 6-1: Manufacturer: х
[  336.782526][    T9] usb 6-1: SerialNumber: syz
[  336.800237][ T9211] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  336.836095][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.843266][ T9189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.850602][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.857655][ T9189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.915787][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.923692][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.938441][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.945534][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.957640][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.964735][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.010330][  T387] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  337.041609][    T9] usbhid 6-1:1.0: can't add hid device: -71
[  337.064061][ T9189] veth0_vlan: entered promiscuous mode
[  337.072593][    T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  337.090699][    T9] usb 6-1: USB disconnect, device number 48
[  337.118142][ T9189] veth1_macvtap: entered promiscuous mode
[  337.150311][  T387] usb 5-1: device descriptor read/64, error -71
[  337.390359][  T387] usb 5-1: device descriptor read/64, error -71
[  337.437000][ T9233] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.639077][  T387] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  337.673068][ T9245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  337.673107][ T9245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:500
[  337.686969][ T9245] 9pnet_virtio: no channels available for device /dev/rnullb0
[  337.693591][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2947'.
[  337.810355][  T387] usb 5-1: device descriptor read/64, error -71
[  338.070319][  T387] usb 5-1: device descriptor read/64, error -71
[  338.102583][ T9267] binder: Bad value for 'defcontext'
[  338.189064][  T387] usb usb5-port1: attempt power cycle
[  338.206541][ T9269] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2955'.
[  338.309011][ T9269] 9pnet_fd: Insufficient options for proto=fd
[  338.414353][ T9289] SELinux: security_context_str_to_sid (syte� `O
A) failed with errno=-22
[  338.478495][ T9291] rust_binder: 673: no such ref 3
[  338.486436][ T9293] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  338.493348][ T9291] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  338.501878][ T9291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:673
[  338.551268][  T387] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  338.633112][  T387] usb 5-1: device descriptor read/8, error -71
[  338.644193][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2966'.
[  338.653561][ T9299] 9pnet_fd: Insufficient options for proto=fd
[  338.658498][ T9297] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  338.704270][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2966'.
[  338.781422][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2966'.
[  338.808954][  T387] usb 5-1: device descriptor read/8, error -71
[  338.823424][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2966'.
[  339.042034][ T9316] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  339.042059][ T9316] rust_binder: Read failure Err(EFAULT) in pid:34
[  339.060419][  T387] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  339.103175][  T387] usb 5-1: device descriptor read/8, error -71
[  339.255218][  T387] usb 5-1: device descriptor read/8, error -71
[  339.372085][  T387] usb usb5-port1: unable to enumerate USB device
[  339.379076][ T9330] rust_binder: Error in use_page_slow: ESRCH
[  339.379102][ T9330] rust_binder: use_range failure ESRCH
[  339.385178][ T9330] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  339.390797][ T9330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  339.398727][ T9330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:692
[  339.427790][   T36] kauditd_printk_skb: 1010 callbacks suppressed
[  339.427805][   T36] audit: type=1400 audit(1759915033.860:37248): avc:  denied  { unmount } for  pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  339.468927][   T36] audit: type=1400 audit(1759915033.900:37249): avc:  denied  { read write } for  pid=5088 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.494230][ T9332] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  339.507942][ T9332] rust_binder: Error in use_page_slow: ESRCH
[  339.514515][ T9332] rust_binder: use_range failure ESRCH
[  339.517942][   T36] audit: type=1400 audit(1759915033.900:37250): avc:  denied  { read write open } for  pid=5088 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.525551][ T9332] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  339.528173][   T36] audit: type=1400 audit(1759915033.900:37251): avc:  denied  { ioctl } for  pid=5088 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.577526][ T9332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  339.585172][ T9332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:694
[  339.586827][   T36] audit: type=1400 audit(1759915033.930:37252): avc:  denied  { read } for  pid=9331 comm="syz.5.2978" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  339.628554][   T36] audit: type=1400 audit(1759915033.930:37253): avc:  denied  { read open } for  pid=9331 comm="syz.5.2978" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  339.653311][   T36] audit: type=1400 audit(1759915033.930:37254): avc:  denied  { ioctl } for  pid=9331 comm="syz.5.2978" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  339.710641][ T9335] rust_binder: 528: no such ref 0
[  339.718168][ T9336] rust_binder: 528: no such ref 0
[  339.723283][   T36] audit: type=1400 audit(1759915033.930:37255): avc:  denied  { create } for  pid=9331 comm="syz.5.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  339.745168][ T9335] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  339.761225][ T9336] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  339.776372][ T9335] rust_binder: 528: no such ref 2
[  339.782065][   T36] audit: type=1400 audit(1759915033.930:37256): avc:  denied  { create } for  pid=9331 comm="syz.5.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  339.802785][ T9336] rust_binder: 528: no such ref 2
[  339.808268][ T9336] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  339.808789][ T9335] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  339.825056][   T36] audit: type=1400 audit(1759915033.940:37257): avc:  denied  { write } for  pid=9331 comm="syz.5.2978" name="anycast6" dev="proc" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  339.839250][ T9341] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  339.857720][ T9341] rust_binder: Error while translating object.
[  339.867009][ T9341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  339.890683][ T9341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138
[  340.120907][ T9348] rust_binder: 535: no such ref 0
[  340.160240][ T9350] binder: Unknown parameter 'defcontext01777777777777777777777'
[  340.168768][ T9348] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  340.178270][ T9348] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  347.860633][   T36] kauditd_printk_skb: 93 callbacks suppressed
[  347.860653][   T36] audit: type=1400 audit(1759915042.300:37351): avc:  denied  { remount } for  pid=9352 comm="syz.4.2986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  347.860963][ T9355] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  347.876505][   T36] audit: type=1400 audit(1759915042.300:37352): avc:  denied  { create } for  pid=9354 comm="syz.5.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  347.959671][ T9358] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.960004][ T9363] rust_binder: Error while translating object.
[  347.967418][ T9363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  347.974470][ T9363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143
[  347.985585][   T36] audit: type=1400 audit(1759915042.350:37353): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.027149][ T9364] 9pnet_fd: Insufficient options for proto=fd
[  348.069267][   T36] audit: type=1400 audit(1759915042.350:37354): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.116314][   T36] audit: type=1400 audit(1759915042.350:37355): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.164005][ T9373] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  348.172173][ T9373] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  348.204339][ T9373] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  348.204887][ T5088] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.212384][   T36] audit: type=1400 audit(1759915042.350:37356): avc:  denied  { ioctl } for  pid=9354 comm="syz.5.2988" path="socket:[43909]" dev="sockfs" ino=43909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.253002][ T9377] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.253954][ T9373] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  348.268809][ T5088] audit: audit_lost=129 audit_rate_limit=0 audit_backlog_limit=64
[  348.276852][   T36] audit: type=1400 audit(1759915042.350:37357): avc:  denied  { setopt } for  pid=9354 comm="syz.5.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  348.401053][ T9385] cgroup: Unknown subsys name 'rdma'
[  348.531593][ T9398] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.581563][ T9400] rust_binder: Error while translating object.
[  348.604298][ T9400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  348.620302][ T9400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:544
[  348.710328][  T349] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  348.748300][ T9410] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  348.804305][ T9412] fuse: Unknown parameter 'max_�ead'
[  348.877208][ T9420] can0: slcan on ttyS3.
[  348.881748][ T9421] binder: Unknown parameter 'fscontext?}'
[  348.893861][ T9421] 9pnet_fd: Insufficient options for proto=fd
[  348.900306][  T349] usb 5-1: Using ep0 maxpacket: 8
[  348.918883][  T349] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  348.945046][  T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.957167][ T9420] can0 (unregistered): slcan off ttyS3.
[  348.982916][  T349] usb 5-1: config 0 descriptor??
[  349.307951][ T9436] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  349.350313][  T329] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  349.476253][ T9441] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  349.512245][  T329] usb 6-1: not running at top speed; connect to a high speed hub
[  349.527208][  T329] usb 6-1: config 127 has an invalid interface number: 217 but max is 0
[  349.537563][  T329] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  349.547964][  T329] usb 6-1: config 127 has no interface number 0
[  349.556919][  T329] usb 6-1: config 127 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  349.568024][  T329] usb 6-1: config 127 interface 217 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  349.579253][  T329] usb 6-1: config 127 interface 217 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  349.590450][  T329] usb 6-1: config 127 interface 217 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[  349.617342][  T329] usb 6-1: string descriptor 0 read error: -22
[  349.628545][  T329] usb 6-1: New USB device found, idVendor=2dc8, idProduct=b003, bcdDevice=ce.b3
[  349.644174][  T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.036572][  T381] usb 6-1: USB disconnect, device number 49
[  350.368305][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.380522][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.448920][ T9454] /dev/rnullb0: Can't open blockdev
[  350.518490][ T9456] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  350.523439][ T9456] rust_binder: Error in use_page_slow: ESRCH
[  350.537597][ T9456] rust_binder: use_range failure ESRCH
[  350.545037][ T9456] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  350.551222][ T9456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  350.559245][ T9456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732
[  350.682199][ T9462] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  350.711371][ T9462] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  350.722429][ T9462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  350.744582][ T9462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:734
[  350.845040][ T9470] SELinux: failed to load policy
[  350.987519][ T9476] rust_binder: Error while translating object.
[  350.987568][ T9476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  351.010961][ T9476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158
[  351.047008][ T9479] rust_binder: Error while translating object.
[  351.057357][ T9479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  351.064443][ T9479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87
[  351.262249][ T9486] SELinux:  policydb version 2134819135 does not match my version range 15-33
[  351.291395][ T9486] SELinux: failed to load policy
[  351.298785][ T9486] __nla_validate_parse: 62 callbacks suppressed
[  351.298808][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'.
[  351.568096][ T9504] rust_binder: Error while translating object.
[  351.568166][ T9504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  351.575343][ T9504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:165
[  351.742778][ T9517] rust_binder: 98: no such ref 2
[  351.903790][ T9525] rust_binder: Error while translating object.
[  351.903838][ T9525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  351.910074][ T9525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[  352.110441][ T9538] rust_binder: Error while translating object.
[  352.137039][ T9538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  352.149266][ T9538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:556
[  352.159232][ T9539] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3047'.
[  352.187777][ T9539] batadv_slave_0: entered promiscuous mode
[  352.201926][ T9539] batadv_slave_0: left promiscuous mode
[  352.230882][ T9546] rust_binder: Write failure EFAULT in pid:107
[  352.230977][ T9545] rust_binder: Write failure EFAULT in pid:107
[  352.342064][ T9547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.410767][ T9558] rust_binder: 9553 RLIMIT_NICE not set
[  352.420365][ T9553] random: crng reseeded on system resumption
[  352.558773][ T9561] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.720376][  T329] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  352.880325][  T329] usb 8-1: Using ep0 maxpacket: 32
[  352.886688][   T36] kauditd_printk_skb: 869 callbacks suppressed
[  352.886707][   T36] audit: type=1400 audit(1759915047.320:38215): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  352.889188][  T329] usb 8-1: config 36 has an invalid interface number: 228 but max is 0
[  352.893050][   T36] audit: type=1400 audit(1759915047.320:38216): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  352.920322][  T329] usb 8-1: config 36 has no interface number 0
[  352.926653][   T36] audit: type=1400 audit(1759915047.320:38217): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  352.952360][  T329] usb 8-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  352.957752][   T36] audit: type=1400 audit(1759915047.320:38218): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  352.983364][  T329] usb 8-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0
[  352.994968][   T36] audit: type=1400 audit(1759915047.320:38219): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.022281][  T329] usb 8-1: config 36 interface 228 has no altsetting 0
[  353.059898][   T36] audit: type=1400 audit(1759915047.360:38220): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.085537][   T36] audit: type=1400 audit(1759915047.520:38221): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.111566][   T36] audit: type=1400 audit(1759915047.550:38222): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.138553][   T36] audit: type=1400 audit(1759915047.550:38223): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.140411][  T329] usb 8-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  353.165189][   T36] audit: type=1400 audit(1759915047.570:38224): avc:  denied  { ioctl } for  pid=9552 comm="syz.7.3054" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  353.191300][  T329] usb 8-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  353.206098][  T329] usb 8-1: Product: syz
[  353.210676][  T329] usb 8-1: Manufacturer: syz
[  353.215457][  T329] usb 8-1: SerialNumber: syz
[  353.437655][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.472789][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.480316][  T329] usb 8-1: USB disconnect, device number 2
[  353.572538][ T9423] udevd[9423]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:36.228/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  354.060798][ T9603] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  354.060825][ T9603] rust_binder: Error while translating object.
[  354.069521][ T9603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  354.079793][ T9603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[  354.099422][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.127233][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.410747][  T349] usbhid 5-1:0.0: can't add hid device: -32
[  354.416836][  T349] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  354.720364][  T349] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  354.872599][  T349] usb 8-1: No LPM exit latency info found, disabling LPM.
[  354.882027][  T349] usb 8-1: config 64 has an invalid interface number: 174 but max is 2
[  354.890363][  T349] usb 8-1: config 64 has an invalid interface number: 252 but max is 2
[  354.898619][  T349] usb 8-1: config 64 has an invalid interface descriptor of length 2, skipping
[  354.907735][  T349] usb 8-1: config 64 has an invalid interface number: 140 but max is 2
[  354.916120][  T349] usb 8-1: config 64 has no interface number 0
[  354.922304][  T349] usb 8-1: config 64 has no interface number 1
[  354.928481][  T349] usb 8-1: config 64 has no interface number 2
[  354.934696][  T349] usb 8-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  354.945861][  T349] usb 8-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  354.957100][  T349] usb 8-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  354.967450][  T349] usb 8-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  354.978674][  T349] usb 8-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  354.989501][  T349] usb 8-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  355.000474][  T349] usb 8-1: config 64 interface 174 has no altsetting 0
[  355.007366][  T349] usb 8-1: config 64 interface 252 has no altsetting 0
[  355.014254][  T349] usb 8-1: config 64 interface 140 has no altsetting 0
[  355.026355][  T349] usb 8-1: string descriptor 0 read error: -22
[  355.032699][  T349] usb 8-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  355.041769][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.055290][  T349] usb-storage 8-1:64.174: USB Mass Storage device detected
[  355.102127][  T349] usb-storage 8-1:64.252: USB Mass Storage device detected
[  355.167916][  T349] usb-storage 8-1:64.140: USB Mass Storage device detected
[  355.217875][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3080'.
[  355.226905][ T9634] tipc: Invalid UDP bearer configuration
[  355.226932][ T9634] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  355.264010][  T349] usb 8-1: USB disconnect, device number 3
[  355.676045][ T9648] fuse: Bad value for 'fd'
[  356.060339][  T349] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  356.210321][  T349] usb 8-1: Invalid ep0 maxpacket: 32
[  356.340317][  T349] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  356.490349][  T349] usb 8-1: Invalid ep0 maxpacket: 32
[  356.495798][  T349] usb usb8-port1: attempt power cycle
[  356.840318][  T349] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  356.861360][  T349] usb 8-1: Invalid ep0 maxpacket: 32
[  357.000323][  T349] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  357.031058][  T349] usb 8-1: Invalid ep0 maxpacket: 32
[  357.040215][  T349] usb usb8-port1: unable to enumerate USB device
[  357.120669][ T9682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=9682 comm=syz.4.3098
[  358.084117][   T36] kauditd_printk_skb: 723 callbacks suppressed
[  358.084140][   T36] audit: type=1400 audit(1759915052.520:38948): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.115715][   T36] audit: type=1400 audit(1759915052.520:38949): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.143144][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.154656][   T36] audit: type=1400 audit(1759915052.520:38950): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.160911][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.199820][   T36] audit: type=1400 audit(1759915052.570:38951): avc:  denied  { read append } for  pid=9701 comm="syz.4.3105" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.223602][   T36] audit: type=1400 audit(1759915052.570:38952): avc:  denied  { read append open } for  pid=9701 comm="syz.4.3105" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.248642][   T36] audit: type=1400 audit(1759915052.570:38953): avc:  denied  { ioctl } for  pid=9701 comm="syz.4.3105" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.274924][   T36] audit: type=1400 audit(1759915052.570:38954): avc:  denied  { set_context_mgr } for  pid=9701 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  358.296766][   T36] audit: type=1400 audit(1759915052.570:38955): avc:  denied  { create } for  pid=9701 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  358.317479][   T36] audit: type=1400 audit(1759915052.570:38956): avc:  denied  { setopt } for  pid=9701 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  358.339662][   T36] audit: type=1400 audit(1759915052.580:38957): avc:  denied  { read write } for  pid=9701 comm="syz.4.3105" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  358.390983][ T9703] rust_binder: 9702 RLIMIT_NICE not set
[  358.509681][ T9715] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  358.524098][ T9715] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3110'.
[  358.533324][ T9715] gretap0: entered promiscuous mode
[  358.999903][  T385] rust_binder: 9701: removing orphan mapping 0:1024
[  359.285637][ T9727] __vm_enough_memory: pid: 9727, comm: syz.4.3114, bytes: 18014402804453376 not enough memory for the allocation
[  359.414594][ T9729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3115'.
[  359.444715][ T9729] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3115'.
[  359.476292][ T9729] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3115'.
[  360.210716][ T9759] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.212665][ T9750] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  360.229196][ T9750] rust_binder: Error while translating object.
[  360.253896][ T9750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  360.265937][ T9759] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.280693][ T9750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137
[  360.310374][ T9753] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.339547][ T9768] overlayfs: failed to clone upperpath
[  360.672821][ T9783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143
[  360.690511][ T9784] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.787178][ T9787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238
[  361.280336][  T385] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  361.440403][  T385] usb 8-1: Using ep0 maxpacket: 16
[  361.447947][  T385] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.458921][  T385] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  361.468002][  T385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.477889][  T385] usb 8-1: config 0 descriptor??
[  361.586416][ T9807] rust_binder: Got transaction with invalid offset.
[  361.586460][ T9807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  361.600370][ T9807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241
[  361.713926][ T9811] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  361.723992][ T9811] rust_binder: Error while translating object.
[  361.737162][ T9811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  361.745353][ T9811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243
[  361.831207][ T9816] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  361.842629][ T9816] rust_binder: inc_ref_done called when no active inc_refs
[  361.900463][  T385] uclogic 0003:28BD:0042.0016: interface is invalid, ignoring
[  362.147679][ T9828] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  362.150706][ T9828] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  362.167584][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.189409][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.291859][  T385] usb 8-1: USB disconnect, device number 8
[  363.002553][ T9897] rust_binder: Error while translating object.
[  363.002613][ T9897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  363.008834][ T9897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:158
[  363.097709][   T36] kauditd_printk_skb: 675 callbacks suppressed
[  363.097731][   T36] audit: type=1400 audit(1759915057.530:39633): avc:  denied  { create } for  pid=9901 comm="syz.7.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.147105][   T36] audit: type=1400 audit(1759915057.570:39634): avc:  denied  { read write } for  pid=9901 comm="syz.7.3174" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  363.210327][   T36] audit: type=1400 audit(1759915057.570:39635): avc:  denied  { read write open } for  pid=9901 comm="syz.7.3174" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  363.255414][   T36] audit: type=1400 audit(1759915057.580:39636): avc:  denied  { ioctl } for  pid=9901 comm="syz.7.3174" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  363.297233][   T36] audit: type=1400 audit(1759915057.580:39637): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.326367][   T36] audit: type=1400 audit(1759915057.580:39638): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.352910][   T36] audit: type=1400 audit(1759915057.580:39639): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.375437][   T36] audit: type=1400 audit(1759915057.580:39640): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.403812][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3177'.
[  363.416987][ T9919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165
[  363.418095][   T36] audit: type=1400 audit(1759915057.580:39641): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  363.448140][   T36] audit: type=1400 audit(1759915057.580:39642): avc:  denied  { setopt } for  pid=9901 comm="syz.7.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  364.257093][ T9948] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  364.317266][ T9950] fuse: Bad value for 'rootmode'
[  364.334401][ T9950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9950 comm=syz.4.3190
[  364.452003][ T9953] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  364.658158][ T9957] devpts: called with bogus options
[  365.464071][ T9988] binder: Binderfs stats mode cannot be changed during a remount
[  365.743373][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.799152][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.048754][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3219'.
[  366.061299][T10026] fuse: Bad value for 'fd'
[  366.142939][T10028] netlink: 37 bytes leftover after parsing attributes in process `syz.7.3220'.
[  366.655340][T10043] rust_binder: Error in use_page_slow: ESRCH
[  366.655367][T10043] rust_binder: use_range failure ESRCH
[  366.673386][T10043] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  366.681105][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3226'.
[  366.685494][T10043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  366.713583][T10043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201
[  366.889989][T10047] rust_binder: inc_ref_done called when no active inc_refs
[  366.960856][T10055] overlayfs: failed to clone upperpath
[  367.180143][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.201635][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.232108][T10062] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  368.083922][T10092] SELinux:  Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped).
[  368.111688][   T36] kauditd_printk_skb: 702 callbacks suppressed
[  368.111710][   T36] audit: type=1400 audit(1759915062.530:40345): avc:  denied  { read write } for  pid=9189 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  368.158322][   T36] audit: type=1400 audit(1759915062.530:40346): avc:  denied  { read write open } for  pid=9189 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  368.184134][   T36] audit: type=1400 audit(1759915062.530:40347): avc:  denied  { ioctl } for  pid=9189 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  368.212467][   T36] audit: type=1400 audit(1759915062.580:40348): avc:  denied  { execmem } for  pid=10088 comm="syz.5.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  368.232751][   T36] audit: type=1400 audit(1759915062.590:40349): avc:  denied  { create } for  pid=10093 comm="syz.7.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  368.253032][   T36] audit: type=1400 audit(1759915062.590:40350): avc:  denied  { read write } for  pid=10091 comm="syz.4.3245" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  368.277034][   T36] audit: type=1400 audit(1759915062.590:40351): avc:  denied  { read write open } for  pid=10091 comm="syz.4.3245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  368.301648][   T36] audit: type=1400 audit(1759915062.590:40352): avc:  denied  { relabelto } for  pid=10091 comm="syz.4.3245" name="UNIX" dev="sockfs" ino=47583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0"
[  368.330370][   T36] audit: type=1400 audit(1759915062.590:40353): avc:  denied  { ioctl } for  pid=10091 comm="syz.4.3245" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  368.355546][   T36] audit: type=1400 audit(1759915062.600:40354): avc:  denied  { mount } for  pid=10093 comm="syz.7.3246" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  368.433622][T10098] netlink: 'syz.7.3247': attribute type 4 has an invalid length.
[  368.441532][T10098] netlink: 992 bytes leftover after parsing attributes in process `syz.7.3247'.
[  368.649896][T10105] netlink: 316 bytes leftover after parsing attributes in process `syz.7.3250'.
[  368.659341][T10105] netlink: 316 bytes leftover after parsing attributes in process `syz.7.3250'.
[  369.969574][T10129] fuse: Bad value for 'fd'
[  370.020326][  T349] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  370.160313][  T349] usb 8-1: device descriptor read/64, error -71
[  370.313543][T10138] 9pnet_fd: Insufficient options for proto=fd
[  370.400408][  T349] usb 8-1: device descriptor read/64, error -71
[  370.640351][  T349] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  370.780310][  T349] usb 8-1: device descriptor read/64, error -71
[  371.020310][  T349] usb 8-1: device descriptor read/64, error -71
[  371.130424][  T349] usb usb8-port1: attempt power cycle
[  371.490349][  T349] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  371.523268][  T349] usb 8-1: device descriptor read/8, error -71
[  371.532756][T10165] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  371.532827][T10163] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  371.539730][T10165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303
[  371.634419][T10169] 9p: Unknown access argument 0000000: -22
[  371.674116][  T349] usb 8-1: device descriptor read/8, error -71
[  371.745082][T10171] tmpfs: Unknown parameter 'noinode32'
[  371.871667][T10176] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  371.920310][  T349] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  371.965314][  T349] usb 8-1: device descriptor read/8, error -71
[  372.113638][  T349] usb 8-1: device descriptor read/8, error -71
[  372.230914][  T349] usb usb8-port1: unable to enumerate USB device
[  372.826463][T10182] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  372.826505][T10182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  372.834898][T10182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:240
[  372.859426][T10184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  372.915856][T10187] futex_wake_op: syz.7.3279 tries to shift op by -1; fix this program
[  373.138338][   T36] kauditd_printk_skb: 387 callbacks suppressed
[  373.138358][   T36] audit: type=1400 audit(1759915067.570:40742): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  373.178722][T10198] rust_binder: Error in use_page_slow: ESRCH
[  373.178748][T10198] rust_binder: use_range failure ESRCH
[  373.185625][T10198] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  373.191888][T10198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  373.198495][   T36] audit: type=1400 audit(1759915067.570:40743): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  373.199909][T10198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:322
[  373.229440][   T36] audit: type=1400 audit(1759915067.570:40744): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  373.269145][   T36] audit: type=1400 audit(1759915067.600:40745): avc:  denied  { read } for  pid=10197 comm="syz.4.3282" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  373.292108][   T36] audit: type=1400 audit(1759915067.600:40746): avc:  denied  { read open } for  pid=10197 comm="syz.4.3282" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  373.316720][   T36] audit: type=1400 audit(1759915067.600:40747): avc:  denied  { map } for  pid=10197 comm="syz.4.3282" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  373.340732][   T36] audit: type=1400 audit(1759915067.600:40748): avc:  denied  { read } for  pid=10197 comm="syz.4.3282" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  373.365950][   T36] audit: type=1400 audit(1759915067.600:40749): avc:  denied  { create } for  pid=10197 comm="syz.4.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  373.387721][   T36] audit: type=1400 audit(1759915067.600:40750): avc:  denied  { map } for  pid=10197 comm="syz.4.3282" path="socket:[48524]" dev="sockfs" ino=48524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  373.411303][   T36] audit: type=1400 audit(1759915067.610:40751): avc:  denied  { execmem } for  pid=10197 comm="syz.4.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  373.432421][T10201] tipc: Started in network mode
[  373.437420][T10201] tipc: Node identity ac14140f, cluster identity 4711
[  373.445761][T10201] tipc: New replicast peer: 255.255.255.255
[  373.452955][T10201] tipc: Enabled bearer <udp:syz2>, priority 10
[  373.463936][T10201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  373.463961][T10201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325
[  373.518317][T10203] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  373.591890][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.609101][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.746163][T10215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254
[  373.984527][T10224] /dev/rnullb0: Can't open blockdev
[  374.083039][T10229] netlink: 'syz.6.3292': attribute type 27 has an invalid length.
[  374.107147][T10229] gretap0: left promiscuous mode
[  374.157457][T10229] veth0_vlan: left promiscuous mode
[  374.165155][T10229] veth0_vlan: entered promiscuous mode
[  374.185611][T10229] veth1_macvtap: left promiscuous mode
[  374.207594][T10229] veth1_macvtap: entered promiscuous mode
[  374.219982][ T4330] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  374.236980][ T4330] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  374.245550][  T385] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  374.261543][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.268655][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.292086][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.299198][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.451130][T10248] input: syz0 as /devices/virtual/input/input27
[  374.481985][T10253] 9pnet_fd: Insufficient options for proto=fd
[  374.570494][  T385] tipc: Node number set to 2886997007
[  374.704413][T10269] rust_binder: Write failure EFAULT in pid:349
[  374.730366][  T385] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  374.821318][T10273] rust_binder: Error while translating object.
[  374.821373][T10273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  374.828520][T10273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:351
[  374.885610][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'.
[  374.944547][T10278] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  375.132500][  T386] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  375.410141][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3317'.
[  375.731511][T10312] fuse: Unknown parameter '�'
[  376.123733][T10320] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  376.141715][T10320] rust_binder: Write failure EINVAL in pid:359
[  376.308445][T10328] rust_binder: Error while translating object.
[  376.320518][T10328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  376.327025][T10328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362
[  376.420334][  T386] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  376.495629][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.495982][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.520664][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.527009][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.561104][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.561536][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.568400][T10339] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.601479][  T386] usb 8-1: Using ep0 maxpacket: 8
[  376.617680][  T386] usb 8-1: unable to get BOS descriptor or descriptor too short
[  376.639661][  T386] usb 8-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  376.660288][  T386] usb 8-1: config 1 interface 0 has no altsetting 0
[  376.674452][  T386] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.40
[  376.684229][  T386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.692481][  T386] usb 8-1: Product: syz
[  376.696794][  T386] usb 8-1: Manufacturer: syz
[  376.701508][  T386] usb 8-1: SerialNumber: syz
[  376.938970][  T386] usbhid 8-1:1.0: can't add hid device: -22
[  376.950375][  T386] usbhid 8-1:1.0: probe with driver usbhid failed with error -22
[  376.966557][  T386] usb 8-1: USB disconnect, device number 13
[  378.098131][T10391] 9pnet_fd: Insufficient options for proto=fd
[  378.250339][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  378.341690][   T36] kauditd_printk_skb: 1353 callbacks suppressed
[  378.341711][   T36] audit: type=1400 audit(1759915072.780:42105): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.372270][   T36] audit: type=1400 audit(1759915072.780:42106): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.398046][   T36] audit: type=1400 audit(1759915072.780:42107): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  378.439829][   T36] audit: type=1400 audit(1759915072.870:42108): avc:  denied  { read } for  pid=10393 comm="syz.4.3350" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  378.493061][   T36] audit: type=1400 audit(1759915072.870:42109): avc:  denied  { read open } for  pid=10393 comm="syz.4.3350" path="net:[4026532644]" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  378.518983][   T36] audit: type=1400 audit(1759915072.870:42110): avc:  denied  { create } for  pid=10393 comm="syz.4.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  378.570379][   T36] audit: type=1400 audit(1759915072.870:42111): avc:  denied  { create } for  pid=10393 comm="syz.4.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  378.663984][   T36] audit: type=1400 audit(1759915072.870:42112): avc:  denied  { write } for  pid=10393 comm="syz.4.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  378.685891][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3354'.
[  378.692642][T10407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3353'.
[  378.729579][   T36] audit: type=1400 audit(1759915072.870:42113): avc:  denied  { read } for  pid=10393 comm="syz.4.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  378.757990][   T36] audit: type=1400 audit(1759915072.900:42114): avc:  denied  { create } for  pid=10395 comm="syz.5.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  379.103005][T10431] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3361'.
[  379.141340][T10430] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3361'.
[  379.220896][T10435] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  379.408133][T10439] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  379.420906][T10439] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  379.535832][T10450] binder: Unknown parameter 'rw�s'
[  379.569481][T10454] rust_binder: Error while translating object.
[  379.569531][T10454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  379.578041][T10454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:309
[  379.673595][T10457] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  379.691010][T10457] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  379.700615][T10457] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  379.708768][T10457] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  379.720713][T10460] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  379.731373][T10457] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  379.778333][T10457] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  379.788086][T10457] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  379.797727][T10457] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  379.894680][T10473] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3375'.
[  379.913052][T10477] binder: Binderfs stats mode cannot be changed during a remount
[  380.073698][T10481] rust_binder: 321: no such ref 3
[  380.078793][T10481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  380.130287][T10481] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  380.149857][T10481] rust_binder: Write failure EFAULT in pid:321
[  380.437111][T10495] rust_binder: Error in use_page_slow: ESRCH
[  380.443354][T10495] rust_binder: use_range failure ESRCH
[  380.449529][T10495] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  380.456137][T10495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  380.464766][T10495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:409
[  380.787448][T10515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10515 comm=syz.6.3390
[  380.851686][T10519] rust_binder: Error while translating object.
[  380.851738][T10519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  380.858272][T10519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420
[  380.913528][T10521] binder: Unknown parameter 'defcontext01777777777777777777777'
[  380.994181][ T4319] Bluetooth: hci0: Frame reassembly failed (-84)
[  381.082596][T10529] kvm: apic: phys broadcast and lowest prio
[  381.210317][    T9] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  381.372793][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  381.395654][    T9] usb 8-1: unable to read config index 0 descriptor/start: -71
[  381.409414][    T9] usb 8-1: can't read configurations, error -71
[  382.172417][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3411'.
[  383.050375][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  383.050390][ T2198] Bluetooth: hci0: command 0x1003 tx timeout
[  383.372468][   T36] kauditd_printk_skb: 487 callbacks suppressed
[  383.372489][   T36] audit: type=1400 audit(1759915077.810:42602): avc:  denied  { read } for  pid=10622 comm="syz.4.3430" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  383.416537][   T36] audit: type=1400 audit(1759915077.810:42603): avc:  denied  { read open } for  pid=10622 comm="syz.4.3430" path="net:[4026532644]" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  383.450639][   T36] audit: type=1400 audit(1759915077.810:42604): avc:  denied  { create } for  pid=10622 comm="syz.4.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  383.499828][   T36] audit: type=1400 audit(1759915077.810:42605): avc:  denied  { bind } for  pid=10622 comm="syz.4.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  383.536652][   T36] audit: type=1400 audit(1759915077.810:42606): avc:  denied  { read } for  pid=10622 comm="syz.4.3430" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  383.566048][   T36] audit: type=1400 audit(1759915077.810:42607): avc:  denied  { read open } for  pid=10622 comm="syz.4.3430" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  383.590654][   T36] audit: type=1400 audit(1759915077.810:42608): avc:  denied  { read write } for  pid=10622 comm="syz.4.3430" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  383.614264][   T36] audit: type=1400 audit(1759915077.810:42609): avc:  denied  { read write open } for  pid=10622 comm="syz.4.3430" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  383.651714][   T36] audit: type=1400 audit(1759915077.840:42610): avc:  denied  { mounton } for  pid=10622 comm="syz.4.3430" path="/154/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  383.681221][   T36] audit: type=1400 audit(1759915077.840:42611): avc:  denied  { mount } for  pid=10622 comm="syz.4.3430" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  383.729398][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3436'.
[  383.743920][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3436'.
[  383.757975][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3436'.
[  384.383430][T10703] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  384.390311][T10704] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  384.400394][T10705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  384.480318][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.506284][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.517538][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.547746][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.583496][T10716] 9pnet_fd: Insufficient options for proto=fd
[  385.209681][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'.
[  385.269696][T10726] fuse: Bad value for 'user_id'
[  385.280311][T10726] fuse: Bad value for 'user_id'
[  385.670327][  T349] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  385.820317][  T349] usb 8-1: Using ep0 maxpacket: 32
[  385.827728][  T349] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  385.836005][  T349] usb 8-1: config 0 has no interface number 0
[  385.842141][  T349] usb 8-1: config 0 interface 184 has no altsetting 0
[  385.852514][  T349] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  385.861673][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.869687][  T349] usb 8-1: Product: syz
[  385.873891][  T349] usb 8-1: Manufacturer: syz
[  385.878506][  T349] usb 8-1: SerialNumber: syz
[  385.885059][  T349] usb 8-1: config 0 descriptor??
[  385.893103][  T349] smsc75xx v1.0.0
[  386.079808][T10741] input: syz0 as /devices/virtual/input/input28
[  386.208993][T10743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  386.209024][T10743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:462
[  386.302173][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.353179][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.386427][  T349] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  386.429354][  T349] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  386.446490][  T349] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  386.458080][  T349] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  386.467497][  T349] usb 8-1: USB disconnect, device number 16
[  386.660434][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  387.202652][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.212751][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.228122][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.250301][  T329] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  387.259722][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.422536][  T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  387.433510][  T329] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  387.446360][  T329] usb 8-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  387.455444][  T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.465505][  T329] usb 8-1: config 0 descriptor??
[  387.478519][T10758] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  387.495613][  T329] usbhid 8-1:0.0: can't add hid device: -22
[  387.511425][  T329] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[  387.713811][  T386] usb 8-1: USB disconnect, device number 17
[  387.818298][T10784] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  387.818328][T10784] rust_binder: Error while translating object.
[  387.827567][T10784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  387.833889][T10784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481
[  388.383238][   T36] kauditd_printk_skb: 563 callbacks suppressed
[  388.383262][   T36] audit: type=1400 audit(1759915082.820:43175): avc:  denied  { setopt } for  pid=10800 comm="syz.7.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  388.431792][   T36] audit: type=1400 audit(1759915082.870:43176): avc:  denied  { read write } for  pid=10800 comm="syz.7.3489" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  388.442962][T10806] overlayfs: failed to clone upperpath
[  388.456200][   T36] audit: type=1400 audit(1759915082.870:43177): avc:  denied  { read write open } for  pid=10800 comm="syz.7.3489" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  388.474797][T10801] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388861952 i:0 err:EBUSY
[  388.485632][   T36] audit: type=1400 audit(1759915082.870:43178): avc:  denied  { create } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  388.486530][T10801] rust_binder: Error in use_page_slow: EBUSY
[  388.496690][   T36] audit: type=1400 audit(1759915082.870:43179): avc:  denied  { create } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  388.517266][T10801] rust_binder: use_range failure EBUSY
[  388.523938][   T36] audit: type=1400 audit(1759915082.870:43180): avc:  denied  { write } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  388.542495][T10801] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  388.550167][   T36] audit: type=1400 audit(1759915082.870:43181): avc:  denied  { create } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  388.569433][T10801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  388.578526][   T36] audit: type=1400 audit(1759915082.870:43182): avc:  denied  { setopt } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  388.597770][T10801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:352
[  388.607714][   T36] audit: type=1400 audit(1759915082.870:43183): avc:  denied  { setopt } for  pid=10805 comm="syz.5.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  388.656687][   T36] audit: type=1400 audit(1759915082.880:43184): avc:  denied  { mounton } for  pid=10805 comm="syz.5.3492" path="/400/bus" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  388.851574][T10828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  388.851609][T10828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:358
[  388.992280][T10834] rust_binder: Write failure EFAULT in pid:364
[  389.028600][T10836] 9pnet_fd: Insufficient options for proto=fd
[  389.119889][T10836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:494
[  389.388675][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.448274][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.941533][T10864] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3512'.
[  390.261606][T10878] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3516'.
[  390.280281][T10878] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.293184][T10881] rust_binder: 508: no such ref 3
[  390.304149][T10881] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  390.318797][T10881] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  390.326089][T10881] rust_binder: 508: no such ref 0
[  390.910294][  T349] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  391.043128][T10923] 9pnet_fd: Insufficient options for proto=fd
[  391.058639][T10923] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  391.070309][  T349] usb 8-1: Using ep0 maxpacket: 8
[  391.076333][T10923] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  391.085949][  T349] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  391.086231][T10923] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  391.102350][T10923] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  391.103576][  T349] usb 8-1: config 0 has no interface number 0
[  391.127177][  T349] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16
[  391.137702][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.146692][  T349] usb 8-1: Product: syz
[  391.150922][  T349] usb 8-1: Manufacturer: syz
[  391.155537][  T349] usb 8-1: SerialNumber: syz
[  391.170575][  T349] usb 8-1: config 0 descriptor??
[  391.311419][T10935] 9pnet_fd: Insufficient options for proto=fd
[  391.382968][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3526'.
[  391.398766][  T349] usb 8-1: Found UVC 0.04 device syz (046d:08c3)
[  391.406994][  T349] usb 8-1: No valid video chain found.
[  391.419835][  T349] usb 8-1: USB disconnect, device number 18
[  391.751759][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.800446][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.838338][T10974] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  392.230355][  T349] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  392.390396][  T349] usb 8-1: Using ep0 maxpacket: 8
[  392.402728][  T349] usb 8-1: unable to get BOS descriptor or descriptor too short
[  392.414867][  T349] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0
[  392.437894][  T349] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0
[  392.454383][  T349] usb 8-1: config 8 interface 0 has no altsetting 0
[  392.471997][  T349] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  392.483317][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.492783][  T349] usb 8-1: Product: syz
[  392.496995][  T349] usb 8-1: Manufacturer: syz
[  392.501675][  T349] usb 8-1: SerialNumber: syz
[  392.545228][T11008] /dev/loop5: Can't lookup blockdev
[  392.585348][T11010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11010 comm=syz.5.3559
[  392.723716][  T349] usb 8-1: selecting invalid altsetting 0
[  392.748604][  T349] snd-usb-audio 8-1:8.0: probe with driver snd-usb-audio failed with error -12
[  392.763599][  T349] usb 8-1: USB disconnect, device number 19
[  392.803739][ T9365] udevd[9365]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  393.400090][   T36] kauditd_printk_skb: 1383 callbacks suppressed
[  393.400110][   T36] audit: type=1400 audit(2000000002.550:44568): avc:  denied  { write } for  pid=11034 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  393.437762][   T36] audit: type=1400 audit(2000000002.550:44569): avc:  denied  { read } for  pid=11034 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  393.462285][   T36] audit: type=1400 audit(2000000002.550:44570): avc:  denied  { read } for  pid=11034 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  393.505482][   T36] audit: type=1400 audit(2000000002.570:44571): avc:  denied  { read write } for  pid=11036 comm="syz.7.3569" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  393.538329][   T36] audit: type=1400 audit(2000000002.570:44572): avc:  denied  { read write open } for  pid=11036 comm="syz.7.3569" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  393.612610][T11049] audit: audit_backlog=65 > audit_backlog_limit=64
[  393.619227][   T36] audit: type=1400 audit(2000000002.570:44573): avc:  denied  { ioctl } for  pid=11036 comm="syz.7.3569" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  393.637831][ T9189] audit: audit_backlog=65 > audit_backlog_limit=64
[  393.646575][T11049] audit: audit_lost=134 audit_rate_limit=0 audit_backlog_limit=64
[  393.658942][T11049] audit: backlog limit exceeded
[  393.675476][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.726747][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.742948][T11047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556
[  393.808987][T11067] netlink: 'syz.6.3577': attribute type 29 has an invalid length.
[  393.826150][T11067] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3577'.
[  393.980402][  T386] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  394.130344][  T386] usb 8-1: Using ep0 maxpacket: 16
[  394.138728][  T386] usb 8-1: unable to get BOS descriptor or descriptor too short
[  394.148206][  T386] usb 8-1: config 13 has an invalid interface number: 50 but max is 0
[  394.156531][  T386] usb 8-1: config 13 has an invalid descriptor of length 98, skipping remainder of the config
[  394.166842][  T386] usb 8-1: config 13 has no interface number 0
[  394.173100][  T386] usb 8-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  394.187341][  T386] usb 8-1: config 13 interface 50 has no altsetting 0
[  394.197853][  T386] usb 8-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  394.206966][  T386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.215024][  T386] usb 8-1: Product: syz
[  394.219197][  T386] usb 8-1: Manufacturer: syz
[  394.223815][  T386] usb 8-1: SerialNumber: syz
[  394.440967][  T386] usb 8-1: MIDIStreaming interface descriptor not found
[  394.457977][  T386] usb 8-1: USB disconnect, device number 20
[  394.577129][ T9403] udevd[9403]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  395.020375][ T4326] Bluetooth: hci0: Frame reassembly failed (-84)
[  395.031235][T11111] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  395.031263][T11111] rust_binder: Error while translating object.
[  395.066247][T11111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  395.107993][T11111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570
[  395.308403][T11135] rust_binder: Error while translating object.
[  395.317784][T11135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  395.326422][T11135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398
[  395.339760][T11137] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  395.487109][T11150] 9pnet_fd: Insufficient options for proto=fd
[  395.960346][  T349] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  396.120311][  T349] usb 8-1: Using ep0 maxpacket: 16
[  396.127741][  T349] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.137872][  T349] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  396.149863][  T349] usb 8-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  396.158992][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.167057][  T349] usb 8-1: Product: syz
[  396.171292][  T349] usb 8-1: Manufacturer: syz
[  396.175910][  T349] usb 8-1: SerialNumber: syz
[  396.182425][  T349] usb 8-1: config 0 descriptor??
[  396.660804][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3611'.
[  397.006309][T11207] 9pnet_fd: Insufficient options for proto=fd
[  397.051164][ T2198] Bluetooth: hci0: command 0x1003 tx timeout
[  397.057310][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  398.472937][   T36] kauditd_printk_skb: 1286 callbacks suppressed
[  398.472958][   T36] audit: type=1400 audit(2000000007.630:45846): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  398.504749][   T36] audit: type=1400 audit(2000000007.630:45847): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  398.544112][   T36] audit: type=1400 audit(2000000007.630:45848): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  398.577564][   T36] audit: type=1400 audit(2000000007.730:45849): avc:  denied  { create } for  pid=11252 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  398.598206][   T36] audit: type=1400 audit(2000000007.730:45850): avc:  denied  { create } for  pid=11252 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  398.619723][   T36] audit: type=1400 audit(2000000007.730:45851): avc:  denied  { ioctl } for  pid=11252 comm="syz.4.3643" path="socket:[52738]" dev="sockfs" ino=52738 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  398.642081][T11257] batadv_slave_0: entered promiscuous mode
[  398.646801][   T36] audit: type=1400 audit(2000000007.730:45852): avc:  denied  { bind } for  pid=11252 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  398.654859][T11257] batadv_slave_0: left promiscuous mode
[  398.672400][   T36] audit: type=1400 audit(2000000007.730:45853): avc:  denied  { setopt } for  pid=11252 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  398.698432][  T349] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  398.708604][  T349] asix 8-1:0.0: probe with driver asix failed with error -71
[  398.717717][   T36] audit: type=1400 audit(2000000007.730:45854): avc:  denied  { write } for  pid=11252 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  398.750292][  T349] usb 8-1: USB disconnect, device number 21
[  398.782966][   T36] audit: type=1400 audit(2000000007.730:45855): avc:  denied  { ioctl } for  pid=11252 comm="syz.4.3643" path="socket:[52737]" dev="sockfs" ino=52737 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  398.822629][T11264] /dev/loop0: Can't lookup blockdev
[  398.828863][T11264] /dev/loop0: Can't lookup blockdev
[  398.891485][T11267] rust_binder: 11260 RLIMIT_NICE not set
[  398.943931][   T31] rust_binder: 11259: removing orphan mapping 0:1024
[  399.057322][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3649'.
[  399.160597][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3653'.
[  399.214686][T11287] sock: sock_timestamping_bind_phc: sock not bind to device
[  399.773560][T11302] netlink: 'syz.4.3658': attribute type 2 has an invalid length.
[  399.887383][T11304] netlink: 'syz.4.3659': attribute type 16 has an invalid length.
[  399.922686][T11306] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK
[  399.922686][T11306] �N����Ho"��hb
[  399.924480][T11304] netlink: 'syz.4.3659': attribute type 2 has an invalid length.
[  399.943551][T11304] netlink: 64086 bytes leftover after parsing attributes in process `syz.4.3659'.
[  400.213901][T11329] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  400.542302][T11343] support for the xor transformation has been removed.
[  401.110337][  T349] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  401.265572][  T349] usb 8-1: Using ep0 maxpacket: 32
[  401.273070][  T349] usb 8-1: config 1 interface 0 altsetting 250 endpoint 0x1 has invalid wMaxPacketSize 0
[  401.283758][  T349] usb 8-1: config 1 interface 0 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 0
[  401.295789][  T349] usb 8-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 1015
[  401.306421][  T349] usb 8-1: config 1 interface 0 has no altsetting 0
[  401.316547][  T349] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  401.326039][  T349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.334089][  T349] usb 8-1: Product: syz
[  401.338275][  T349] usb 8-1: Manufacturer: Տ㡉ਸ਼굱唁ⷌ䝁ю酆囪ؼ쩕ᰐﵞ䤴泈ᱜ雇껠㷻밙和䛾臟癉ᷣဇ颦Ӛ࿿㫫㰂ㅳ誶
[  401.351705][  T349] usb 8-1: SerialNumber: syz
[  401.367048][T11363] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  401.621139][T11381] fuse: Bad value for 'fd'
[  401.625888][T11380] fuse: Bad value for 'fd'
[  401.791710][T11363] rust_binder: Error while translating object.
[  401.791757][T11363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  401.798045][T11363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:435
[  401.810203][T11389] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  401.832037][  T349] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 250 proto 1 vid 0x0525 pid 0xA4A8
[  401.896834][  T349] usb 8-1: USB disconnect, device number 22
[  401.915645][  T349] usblp0: removed
[  402.069472][T11399] tipc: Started in network mode
[  402.075233][T11399] tipc: Node identity ac14140f, cluster identity 4711
[  402.082570][T11399] tipc: New replicast peer: 255.255.255.255
[  402.092153][T11399] tipc: Enabled bearer <udp:syz2>, priority 10
[  402.099588][T11401] 9pnet_fd: Insufficient options for proto=fd
[  402.183613][T11405] netlink: 37 bytes leftover after parsing attributes in process `syz.6.3696'.
[  402.196882][T11405] netlink: 37 bytes leftover after parsing attributes in process `syz.6.3696'.
[  402.220320][  T349] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  402.370480][  T349] usb 8-1: device descriptor read/64, error -71
[  402.511022][T11428] netlink: 'syz.5.3704': attribute type 27 has an invalid length.
[  402.541368][T11428] z00�X��: left allmulticast mode
[  402.552314][T11428] wireguard: wg1: Could not create IPv4 socket
[  402.558519][T11428] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  402.630301][  T349] usb 8-1: device descriptor read/64, error -71
[  402.646208][T11437] overlayfs: failed to resolve './file1': -2
[  402.650620][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  402.719439][T11441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  402.719478][T11441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630
[  402.806030][T11447] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  402.823635][T11445] rust_binder: Write failure EFAULT in pid:634
[  402.870577][  T349] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  402.945255][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.954026][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.976133][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.985006][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.020360][  T349] usb 8-1: device descriptor read/64, error -71
[  403.210867][  T381] tipc: Node number set to 2886997007
[  403.260438][T11461] overlayfs: missing 'lowerdir'
[  403.275173][  T349] usb 8-1: device descriptor read/64, error -71
[  403.400857][  T349] usb usb8-port1: attempt power cycle
[  403.505055][   T36] kauditd_printk_skb: 1298 callbacks suppressed
[  403.505075][   T36] audit: type=1400 audit(2000000012.660:47154): avc:  denied  { ioctl } for  pid=11393 comm="syz.7.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  403.542380][   T36] audit: type=1400 audit(2000000012.670:47155): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  403.567942][   T36] audit: type=1400 audit(2000000012.670:47156): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  403.607932][   T36] audit: type=1400 audit(2000000012.670:47157): avc:  denied  { ioctl } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  403.639555][T11483] netlink: 'syz.6.3722': attribute type 17 has an invalid length.
[  403.670535][   T36] audit: type=1400 audit(2000000012.690:47158): avc:  denied  { ioctl } for  pid=11393 comm="syz.7.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  403.672392][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3722'.
[  403.700450][   T36] audit: type=1400 audit(2000000012.700:47159): avc:  denied  { name_bind } for  pid=11480 comm="syz.5.3721" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  403.734747][   T36] audit: type=1400 audit(2000000012.700:47160): avc:  denied  { node_bind } for  pid=11480 comm="syz.5.3721" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  403.800290][   T36] audit: type=1400 audit(2000000012.700:47161): avc:  denied  { bpf } for  pid=11480 comm="syz.5.3721" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  403.830309][  T349] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  403.834632][   T36] audit: type=1400 audit(2000000012.760:47162): avc:  denied  { create } for  pid=11484 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  403.859836][   T36] audit: type=1400 audit(2000000012.760:47163): avc:  denied  { setopt } for  pid=11484 comm="syz.4.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  403.863166][  T349] usb 8-1: device descriptor read/8, error -71
[  403.968245][T11498] binder: Bad value for 'max'
[  403.977506][T11498] fuse: Bad value for 'fd'
[  404.052018][T11501] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  404.061494][  T349] usb 8-1: device descriptor read/8, error -71
[  404.078335][T11501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11501 comm=syz.6.3727
[  404.300355][  T349] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  404.322638][  T349] usb 8-1: device descriptor read/8, error -71
[  404.452556][  T349] usb 8-1: device descriptor read/8, error -71
[  404.560482][  T349] usb usb8-port1: unable to enumerate USB device
[  405.254876][T11545] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3744'.
[  405.294489][T11547] rust_binder: Error in use_page_slow: ESRCH
[  405.294517][T11547] rust_binder: use_range failure ESRCH
[  405.322481][T11547] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  405.327999][T11547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  405.367799][T11547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:658
[  405.400983][T11551] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768
[  405.430305][T11551] rust_binder: Write failure EINVAL in pid:451
[  405.490790][T11557] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 5
[  405.671860][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3752'.
[  406.052357][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.052847][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.060690][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.071446][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.081505][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.086428][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.107139][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.107456][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.129504][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.129832][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.136952][T11588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.152118][T11594] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.557317][T11619] rust_binder: 667: no such ref 0
[  406.583140][T11619] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  406.600308][T11619] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  406.635781][T11624] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  406.654416][T11624] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  406.743720][T11632] rust_binder: Error while translating object.
[  406.743766][T11632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  406.768195][T11632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:472
[  406.792051][T11634] rust_binder: 672: no such ref 1
[  406.899779][T11636] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3775'.
[  407.112248][T11648] rust_binder: Write failure EINVAL in pid:485
[  407.112663][T11648] rust_binder: 485: no such ref 1
[  407.514777][T11672] overlayfs: failed to clone upperpath
[  407.696731][T11678] rust_binder: 675: no such ref 3
[  407.704457][T11678] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  407.713206][T11678] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  407.720560][T11678] rust_binder: Write failure EFAULT in pid:675
[  407.840312][  T349] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  407.907900][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'.
[  407.919374][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'.
[  407.923399][T11696] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3794'.
[  408.000296][  T349] usb 8-1: Using ep0 maxpacket: 8
[  408.008997][  T349] usb 8-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11
[  408.020480][  T349] usb 8-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  408.033562][  T349] usb 8-1: config 0 interface 0 has no altsetting 0
[  408.040360][  T349] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  408.049906][  T349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.061015][  T349] usb 8-1: config 0 descriptor??
[  408.269911][T11674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=11674 comm=syz.7.3786
[  408.486953][  T349] playstation 0003:054C:09CC.0017: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.7-1/input0
[  408.579612][   T36] kauditd_printk_skb: 720 callbacks suppressed
[  408.579632][   T36] audit: type=1400 audit(2000000017.730:47884): avc:  denied  { create } for  pid=11707 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  408.608019][   T36] audit: type=1400 audit(2000000017.760:47885): avc:  denied  { create } for  pid=11707 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  408.630530][   T36] audit: type=1400 audit(2000000017.790:47886): avc:  denied  { write } for  pid=11707 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  408.656089][   T36] audit: type=1400 audit(2000000017.790:47887): avc:  denied  { read } for  pid=11707 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  408.676729][   T36] audit: type=1400 audit(2000000017.810:47888): avc:  denied  { write } for  pid=11707 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  408.709185][   T36] audit: type=1400 audit(2000000017.810:47889): avc:  denied  { mounton } for  pid=11707 comm="syz.5.3798" path="/526/file0" dev="tmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  408.733974][   T36] audit: type=1400 audit(2000000017.840:47890): avc:  denied  { ioctl } for  pid=11673 comm="syz.7.3786" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  408.812890][   T36] audit: type=1400 audit(2000000017.970:47891): avc:  denied  { unmount } for  pid=8563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  408.850163][   T36] audit: type=1400 audit(2000000017.990:47892): avc:  denied  { read write } for  pid=8563 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  408.919859][   T36] audit: type=1400 audit(2000000018.000:47893): avc:  denied  { read write open } for  pid=8563 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  409.207575][T11722] erofs: dax options not supported
[  410.900516][  T349] playstation 0003:054C:09CC.0017: Failed to retrieve feature with reportID 18: -71
[  410.909967][  T349] playstation 0003:054C:09CC.0017: Failed to retrieve DualShock4 pairing info: -71
[  410.919699][  T349] playstation 0003:054C:09CC.0017: Failed to get MAC address from DualShock4
[  410.928571][  T349] playstation 0003:054C:09CC.0017: Failed to create dualshock4.
[  410.937263][  T349] playstation 0003:054C:09CC.0017: probe with driver playstation failed with error -71
[  410.948279][  T349] usb 8-1: USB disconnect, device number 27
[  411.532437][T11787] fuse: Bad value for 'fd'
[  411.728458][T11795] exFAT-fs (rnullb0): invalid boot record signature
[  411.735301][T11795] exFAT-fs (rnullb0): failed to read boot sector
[  411.741692][T11795] exFAT-fs (rnullb0): failed to recognize exfat type
[  411.876481][T11799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  411.876522][T11799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:713
[  411.902507][T11801] overlayfs: failed to clone upperpath
[  412.504662][T11835] rust_binder: Write failure EFAULT in pid:508
[  412.595622][T11839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512
[  412.853930][T11857] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  412.867532][T11857] rust_binder: Error while translating object.
[  412.899507][T11857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  412.915956][T11857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:727
[  413.060340][  T821] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  413.230278][  T821] usb 8-1: Using ep0 maxpacket: 32
[  413.257853][  T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.257958][T11875] tmpfs: Unknown parameter 'trans'
[  413.276433][  T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.286400][  T821] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  413.295593][  T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.305598][  T821] usb 8-1: config 0 descriptor??
[  413.619906][   T36] kauditd_printk_skb: 603 callbacks suppressed
[  413.619938][   T36] audit: type=1400 audit(2000000022.770:48497): avc:  denied  { create } for  pid=11884 comm="syz.5.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  413.646301][   T36] audit: type=1400 audit(2000000022.780:48498): avc:  denied  { mount } for  pid=11884 comm="syz.5.3859" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  413.668439][   T36] audit: type=1400 audit(2000000022.780:48499): avc:  denied  { create } for  pid=11884 comm="syz.5.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  413.688222][   T36] audit: type=1400 audit(2000000022.780:48500): avc:  denied  { setopt } for  pid=11884 comm="syz.5.3859" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  413.708855][   T36] audit: type=1400 audit(2000000022.780:48501): avc:  denied  { write } for  pid=11884 comm="syz.5.3859" lport=103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  413.729405][   T36] audit: type=1400 audit(2000000022.780:48502): avc:  denied  { bind } for  pid=11884 comm="syz.5.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  413.735700][  T821] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0
[  413.753549][   T36] audit: type=1400 audit(2000000022.890:48503): avc:  denied  { ioctl } for  pid=11852 comm="syz.7.3848" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  413.786043][   T36] audit: type=1400 audit(2000000022.890:48504): avc:  denied  { ioctl } for  pid=11852 comm="syz.7.3848" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  413.860205][   T36] audit: type=1400 audit(2000000023.010:48505): avc:  denied  { create } for  pid=11887 comm="syz.5.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  413.880125][   T36] audit: type=1400 audit(2000000023.020:48506): avc:  denied  { getopt } for  pid=11887 comm="syz.5.3860" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  413.964836][  T821] koneplus 0003:1E7D:2D51.0018: couldn't init struct koneplus_device
[  413.986522][  T821] koneplus 0003:1E7D:2D51.0018: couldn't install mouse
[  414.006624][  T821] koneplus 0003:1E7D:2D51.0018: probe with driver koneplus failed with error -71
[  414.017647][  T821] usb 8-1: USB disconnect, device number 28
[  414.520632][T11911] rust_binder: 523: no such ref 0
[  414.629783][T11918] rust_binder: Error while translating object.
[  414.629840][T11918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  414.639126][T11918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:528
[  414.709395][T11924] binder: Bad value for 'max'
[  414.826926][T11932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  414.826960][T11932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:532
[  414.996245][T11936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  415.005466][T11936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:536
[  415.600287][  T349] usb 8-1: new low-speed USB device number 29 using dummy_hcd
[  415.750304][  T349] usb 8-1: device descriptor read/64, error -71
[  415.932061][T11983] x_tables: duplicate underflow at hook 1
[  415.947952][T11985] erofs: dax options not supported
[  416.000320][  T349] usb 8-1: device descriptor read/64, error -71
[  416.242514][  T349] usb 8-1: new low-speed USB device number 30 using dummy_hcd
[  416.390340][  T349] usb 8-1: device descriptor read/64, error -71
[  416.630302][  T349] usb 8-1: device descriptor read/64, error -71
[  416.740834][  T349] usb usb8-port1: attempt power cycle
[  417.090292][  T349] usb 8-1: new low-speed USB device number 31 using dummy_hcd
[  417.112278][  T349] usb 8-1: device descriptor read/8, error -71
[  417.135974][T12033] batadv_slave_0: mtu less than device minimum
[  417.144256][T12032] batadv_slave_0: mtu less than device minimum
[  417.177934][T12036] overlayfs: failed to clone upperpath
[  417.214083][T12038] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3916'.
[  417.252924][  T349] usb 8-1: device descriptor read/8, error -71
[  417.413209][T12060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=12060 comm=syz.5.3924
[  417.490300][  T349] usb 8-1: new low-speed USB device number 32 using dummy_hcd
[  417.539479][  T349] usb 8-1: device descriptor read/8, error -71
[  417.569310][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3930'.
[  417.674322][  T349] usb 8-1: device descriptor read/8, error -71
[  417.790847][  T349] usb usb8-port1: unable to enumerate USB device
[  418.669133][   T36] kauditd_printk_skb: 572 callbacks suppressed
[  418.669153][   T36] audit: type=1400 audit(2000000283.818:49079): avc:  denied  { create } for  pid=12131 comm="syz.6.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  418.695014][   T36] audit: type=1400 audit(2000000283.828:49080): avc:  denied  { create } for  pid=12131 comm="syz.6.3947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  418.714871][   T36] audit: type=1400 audit(2000000283.828:49081): avc:  denied  { create } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.735709][   T36] audit: type=1400 audit(2000000283.828:49082): avc:  denied  { create } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.756412][   T36] audit: type=1400 audit(2000000283.828:49083): avc:  denied  { create } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.777061][   T36] audit: type=1400 audit(2000000283.828:49084): avc:  denied  { write } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.798998][   T36] audit: type=1400 audit(2000000283.828:49085): avc:  denied  { read } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.819459][   T36] audit: type=1400 audit(2000000283.828:49086): avc:  denied  { read } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.839914][   T36] audit: type=1400 audit(2000000283.828:49087): avc:  denied  { write } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  418.860454][   T36] audit: type=1400 audit(2000000283.828:49088): avc:  denied  { write } for  pid=12140 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  419.440303][  T349] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  419.592537][  T349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.603592][  T349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.614286][  T349] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  419.627820][  T349] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  419.637522][  T349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.648021][  T349] usb 8-1: config 0 descriptor??
[  420.079295][T12174] netlink: 'syz.4.3960': attribute type 6 has an invalid length.
[  420.087111][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'.
[  420.281415][  T349] usbhid 8-1:0.0: can't add hid device: -71
[  420.288260][  T349] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  420.312701][  T349] usb 8-1: USB disconnect, device number 33
[  420.910521][T12213] binder: Unknown parameter 'max0000J	���fk'
[  421.025333][T12220] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  421.033300][T12220] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  421.041790][T12220] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  421.049710][T12220] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  421.147589][T12222] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3977'.
[  421.157460][T12222] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3977'.
[  421.168177][T12222] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3977'.
[  421.182153][T12229] fuse: Unknown parameter 'rootmode00000000000000000100000'
[  421.194199][T12222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560
[  421.600288][  T329] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  421.775813][  T329] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.805453][  T329] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1576, setting to 1024
[  421.820325][T12255] x_tables: duplicate underflow at hook 1
[  421.840583][  T329] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  421.880583][  T329] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  421.898887][  T329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.920261][  T329] usb 8-1: Product: syz
[  421.927196][  T329] usb 8-1: Manufacturer: syz
[  421.940272][  T329] usb 8-1: SerialNumber: syz
[  421.984399][T12260] overlay: ./file0 is not a directory
[  422.175793][T12239] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  422.412353][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4000'.
[  422.536950][T12295] overlayfs: conflicting options: userxattr,redirect_dir=on
[  422.814441][T12239] __vm_enough_memory: pid: 12239, comm: syz.7.3983, bytes: 18014402804453376 not enough memory for the allocation
[  422.827033][  T329] cdc_ncm 8-1:1.0: SET_CRC_MODE failed
[  422.832793][  T329] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed
[  422.861427][  T329] cdc_ncm 8-1:1.0: bind() failure
[  422.867618][  T329] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  422.874646][ T4325] bridge_slave_1: left allmulticast mode
[  422.881816][ T4325] bridge_slave_1: left promiscuous mode
[  422.887490][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.894884][  T329] cdc_ncm 8-1:1.1: bind() failure
[  422.902401][  T329] usb 8-1: USB disconnect, device number 34
[  422.913800][ T4325] bridge_slave_0: left allmulticast mode
[  422.919472][ T4325] bridge_slave_0: left promiscuous mode
[  422.932148][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.220426][ T4325] tipc: Disabling bearer <udp:syz2>
[  423.225821][ T4325] tipc: Left network mode
[  423.321181][ T4325] veth1_macvtap: left promiscuous mode
[  423.326758][ T4325] veth0_vlan: left promiscuous mode
[  423.524949][T12315] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  423.531076][T12315] rust_binder: Error in use_page_slow: ESRCH
[  423.537546][T12315] rust_binder: use_range failure ESRCH
[  423.570055][T12323] netlink: 'syz.6.4008': attribute type 4 has an invalid length.
[  423.570307][T12315] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  423.586119][T12315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  423.596357][T12324] netlink: 'syz.6.4008': attribute type 4 has an invalid length.
[  423.600331][T12315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:571
[  423.622309][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'.
[  423.662996][T12329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.670768][   T36] kauditd_printk_skb: 412 callbacks suppressed
[  423.670788][   T36] audit: type=1400 audit(2000000288.828:49501): avc:  denied  { write } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.682265][T12330] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.711705][   T36] audit: type=1400 audit(2000000288.858:49502): avc:  denied  { read } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.732355][   T36] audit: type=1400 audit(2000000288.858:49503): avc:  denied  { ioctl } for  pid=12332 comm="syz.6.4011" path="socket:[56169]" dev="sockfs" ino=56169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  423.758751][   T36] audit: type=1326 audit(2000000288.868:49504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12332 comm="syz.6.4011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fab8eec9 code=0x0
[  423.803320][   T36] audit: type=1400 audit(2000000288.948:49505): avc:  denied  { create } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.824871][   T36] audit: type=1400 audit(2000000288.948:49506): avc:  denied  { write } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.846472][   T36] audit: type=1400 audit(2000000288.948:49507): avc:  denied  { read } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.867029][   T36] audit: type=1400 audit(2000000288.948:49508): avc:  denied  { read } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  423.887565][   T36] audit: type=1400 audit(2000000288.948:49509): avc:  denied  { write } for  pid=12332 comm="syz.6.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  424.266105][   T36] audit: type=1400 audit(2000000289.418:49510): avc:  denied  { unmount } for  pid=9189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  424.441031][T12345] overlayfs: failed to clone upperpath
[  426.283983][T12372] overlayfs: failed to clone upperpath
[  427.135433][T12379] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  427.170756][T12379] rust_binder: Error in use_page_slow: ESRCH
[  427.177231][T12379] rust_binder: use_range failure ESRCH
[  427.185569][T12378] netlink: 'syz.6.4024': attribute type 27 has an invalid length.
[  427.200261][T12379] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  427.200308][T12379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  427.208418][T12379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:588
[  427.250553][    T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  427.570410][    T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  429.653940][   T36] kauditd_printk_skb: 174 callbacks suppressed
[  429.653960][   T36] audit: type=1400 audit(2000000294.808:49685): avc:  denied  { execmem } for  pid=12424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  429.696500][T12431] audit: audit_backlog=65 > audit_backlog_limit=64
[  429.712778][T12431] audit: audit_lost=140 audit_rate_limit=0 audit_backlog_limit=64
[  429.720299][   T36] audit: type=1400 audit(2000000294.808:49686): avc:  denied  { name_bind } for  pid=12426 comm="syz.6.4037" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  429.730339][T12431] audit: backlog limit exceeded
[  429.751408][T12431] audit: audit_backlog=65 > audit_backlog_limit=64
[  429.760660][   T36] audit: type=1400 audit(2000000294.808:49687): avc:  denied  { node_bind } for  pid=12426 comm="syz.6.4037" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  429.768482][T12431] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64
[  429.797577][T12436] audit: audit_backlog=65 > audit_backlog_limit=64
[  429.802546][   T36] audit: type=1400 audit(2000000294.808:49688): avc:  denied  { mounton } for  pid=12428 comm="syz.7.4038" path="/205" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  429.959106][T12443] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  429.962003][T12443] rust_binder: Error in use_page_slow: ESRCH
[  429.973090][T12443] rust_binder: use_range failure ESRCH
[  429.980269][T12443] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  429.985969][T12443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  429.993985][T12443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:602
[  430.005595][T12443] rust_binder: Error in use_page_slow: ESRCH
[  430.014781][T12443] rust_binder: use_range failure ESRCH
[  430.020862][T12443] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[  430.026389][T12443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  430.034328][T12443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:602
[  431.158715][T12449] netlink: 'syz.4.4042': attribute type 1 has an invalid length.
[  431.251502][T12454] rust_binder: Write failure EFAULT in pid:606
[  431.329314][T12457] rust_binder: 608: no such ref 16777216
[  431.343947][T12457] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  431.344706][T12457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608
[  434.011004][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  434.232705][T12484] fuse: Unknown parameter '/dev/kvm'
[  434.233244][T12486] netlink: 'syz.7.4056': attribute type 4 has an invalid length.
[  434.280314][T12486] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4056'.
[  434.475076][T12500] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  435.879868][   T36] kauditd_printk_skb: 358 callbacks suppressed
[  435.879888][   T36] audit: type=1400 audit(2000000301.028:50044): avc:  denied  { execmem } for  pid=12503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  435.943217][   T36] audit: type=1400 audit(2000000301.048:50045): avc:  denied  { create } for  pid=12504 comm="syz.4.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  435.981063][   T36] audit: type=1400 audit(2000000301.048:50046): avc:  denied  { setopt } for  pid=12504 comm="syz.4.4060" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  436.025647][T12511] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4063'.
[  436.035215][   T36] audit: type=1400 audit(2000000301.048:50047): avc:  denied  { write } for  pid=12504 comm="syz.4.4060" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  436.072111][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.090494][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.108340][   T36] audit: type=1400 audit(2000000301.078:50048): avc:  denied  { create } for  pid=12506 comm="syz.6.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  436.136718][   T36] audit: type=1400 audit(2000000301.078:50049): avc:  denied  { read write } for  pid=12505 comm="syz.7.4062" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  436.187162][   T36] audit: type=1400 audit(2000000301.078:50050): avc:  denied  { read write open } for  pid=12505 comm="syz.7.4062" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  436.223540][   T36] audit: type=1400 audit(2000000301.078:50051): avc:  denied  { map } for  pid=12505 comm="syz.7.4062" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  436.314977][   T36] audit: type=1400 audit(2000000301.078:50052): avc:  denied  { read } for  pid=12505 comm="syz.7.4062" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  436.360325][   T36] audit: type=1400 audit(2000000301.078:50053): avc:  denied  { create } for  pid=12506 comm="syz.6.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  436.391650][T12526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  436.813689][  T349] usb 5-1: USB disconnect, device number 50
[  437.146387][T12544] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  437.146824][T12544] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  437.153857][T12544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:640
[  437.217647][T12548] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  437.231809][ T4325] bridge_slave_1: left allmulticast mode
[  437.251846][T12552] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  437.260307][ T4325] bridge_slave_1: left promiscuous mode
[  437.300332][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.320860][ T4325] bridge_slave_0: left allmulticast mode
[  437.331862][ T4325] bridge_slave_0: left promiscuous mode
[  437.337688][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.378224][T12561] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  437.380127][T12561] rust_binder: Error in use_page_slow: ESRCH
[  437.386786][T12561] rust_binder: use_range failure ESRCH
[  437.393099][T12561] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  437.398670][T12561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  437.411215][T12561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:649
[  437.495822][ T4325] tipc: Disabling bearer <udp:syz2>
[  437.510711][ T4325] tipc: Left network mode
[  437.603574][ T4325] veth1_macvtap: left promiscuous mode
[  437.609237][ T4325] veth0_vlan: left promiscuous mode
[  437.720311][  T329] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  437.870264][  T329] usb 8-1: Using ep0 maxpacket: 32
[  437.883355][  T329] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.902435][  T329] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.934133][  T329] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  437.950345][  T329] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  437.958727][  T329] usb 8-1: Product: syz
[  437.980257][  T329] usb 8-1: Manufacturer: syz
[  437.989490][  T329] hub 8-1:4.0: USB hub found
[  438.201654][  T329] hub 8-1:4.0: 9 ports detected
[  438.210906][  T329] hub 8-1:4.0: insufficient power available to use all downstream ports
[  438.420142][T12564] 9pnet_fd: Insufficient options for proto=fd
[  438.435660][  T329] hub 8-1:4.0: hub_hub_status failed (err = -71)
[  438.450329][  T329] hub 8-1:4.0: config failed, can't get hub status (err -71)
[  438.490965][  T329] usb 8-1: USB disconnect, device number 35
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=5 req=3987 state=3 status=67 (errno 32: Broken pipe)
[  439.930955][ T4325] bridge_slave_1: left allmulticast mode
[  439.936639][ T4325] bridge_slave_1: left promiscuous mode
[  439.942335][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.949855][ T4325] bridge_slave_0: left allmulticast mode
[  439.955627][ T4325] bridge_slave_0: left promiscuous mode
[  439.961293][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.161211][ T4325] veth1_macvtap: left promiscuous mode
[  440.166732][ T4325] veth0_vlan: left promiscuous mode
[  440.930817][ T4325] bridge_slave_1: left allmulticast mode
[  440.936523][ T4325] bridge_slave_1: left promiscuous mode
[  440.942183][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.949577][ T4325] bridge_slave_0: left allmulticast mode
[  440.955274][ T4325] bridge_slave_0: left promiscuous mode
[  440.960913][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.181211][ T4325] veth1_macvtap: left promiscuous mode
[  441.186731][ T4325] veth0_vlan: left promiscuous mode