last executing test programs:

1m26.211906711s ago: executing program 0 (id=25):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4004, 0x4e22, 0x400, 0x2, 0x0, 0x20, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0x81, 0xffffffffffffffff, 0x76, 0x8}, {0x3, 0x0, 0x40000000000000, 0x9}, 0x2e61, 0x0, 0x1}, {{@in6=@empty, 0x4, 0x6c}, 0x2, @in6=@private2, 0x0, 0x2, 0x2, 0x0, 0xf606}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x8)
syz_usb_connect$cdc_ecm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0xa, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "59606632c5"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x4, 0x8}, [@obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x1, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe0, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc, 0x81, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0xff, 0x7, 0x20, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "633db072d1675d6fbd1daffe67307ea39d15ac85829eace01b557b55e3ff526ed7726a95033c6b0339ebd3ffebbce7ce0bbd0d206ad61810fd6534dde423096cd1dfdc83fd407b4ae5b2ff7e6bc610f27464e9f7c9d89be3bc6aa71f5e3daf67761a4008051eba0ebf938fe0c612f257ebdf6be6b7db0014402240c2816a7c645646d41f0debff4cb322eabbdb45a1130998716523d3f8829cd130e71bbed423baa15c80101aa6a1c71cdc65a51a21ff7f81359585f55d649a15cbd83d60efac2aeb6b83949ab6d902bf91decbb0b25201d4f3f1"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x812}}, {0xa8, &(0x7f00000004c0)=@string={0xa8, 0x3, "5de4e90c65593ce077c17a8869a540c7a0af66545cacbff99e18d2300ab4748e1a7a14652e1cd505171e9df3a694f88cd7769c5afc14baba36f502d0769e8a5c5089b295fb2c656775c80bcbceb1d5c91e30b4c64b2c500450c56570a2cd1ecddaf922f7a9febcc4e7616df956bb9a6d18cb432a9e0ec4d1d201d26cee22566f3de5e257889dec3c6c6962d242205089d534a9d374b436541236d7a88854d4a684cb9cbff764"}}]})
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
read(r1, 0x0, 0x0)

1m25.033108781s ago: executing program 0 (id=49):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
clock_gettime(0x0, &(0x7f0000000040))
socket$unix(0x1, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x1, 0x79844e1c)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x52, 0x0)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000001c0)=""/33)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100e550e2000080ffffffef935358c94ad6"])
ftruncate(r6, 0x3)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a55f8cba", @ANYRES16=r7, @ANYBLOB="000828bd7000feffffff1c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c881)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000005c0)=""/227, 0x0, 0x1800, 0x1, 0x2}, 0x20)
ppoll(&(0x7f0000000000)=[{r0, 0x2201}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x28d]}, 0x8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000232000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/160, 0xa0, 0x1, &(0x7f0000000240)=""/45, 0x2d}, &(0x7f00000002c0)=0x40)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r2, 0x309, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1m24.982933352s ago: executing program 0 (id=50):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='.\x00', 0x1d0)
lremovexattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="757365722e2f6465762f676e756c6c6230009bbb606bcf12e482b86faf7d3cdc938579b76b6aca05819485c62a899f15e70e08f970c1b0b510f1e7c421077740149a2bf5a82a41e6f8212487e68296ff691a14b3f5d6eb234a3b90fc44b596b7ca6ea2e7a9000e55d3e026c1a07c9732b2ef7c08dcde9daab550b2"])

1m24.911861513s ago: executing program 0 (id=51):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
read$rfkill(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0))
syz_open_procfs$userns(r0, &(0x7f0000000000))
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r6 = eventfd(0x4b)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f00000003c0)="f9a2d3b965d3d079e569fec9dc7370bde5502ebcf3", 0x15, 0x6, 0x0, 0x0, r6}, &(0x7f0000000440))
close(0x3)
socket$unix(0x1, 0x5, 0x0)
setns(r3, 0x40000080)
mkdirat(0xffffffffffffffff, &(0x7f0000000480)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x138)
pipe2$9p(&(0x7f0000000080), 0x800)
mount$binder(0x0, 0x0, 0x0, 0x103cc1a, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001a40))

1m24.072282968s ago: executing program 0 (id=59):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
ioprio_set$pid(0x2, r0, 0x4000) (async)
ioprio_set$pid(0x2, r0, 0x4000)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x9}}]}}}]}}]}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) (async)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid() (async)
r1 = gettid()
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) (async)
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
syz_usb_connect(0x2, 0x6b2, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x22, 0x92, 0xe6, 0xff, 0x5c6, 0x9225, 0xe00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a0, 0x1, 0x1, 0x5, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0xf, 0x4f, 0xd8, 0xe7, 0x9, [@generic={0x79, 0x8, "3d67e47000dafc54542c5a17a7ae43962f616ee19b63e9cefe1ce9cc570fa1b1c18baa37781a9dd97986f75706f98c4fc94f8b571347e787ccb1b89b6db77d8203f19674fbe555892a9381341b7668bb44dd5c5108fa2615c631a153afc00d3fe122d19668ace3802c9d146d5d008bc3f6816a9632bc39"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8d"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x508, 0xfd99, 0x8}, {0x6, 0x24, 0x1a, 0x989, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x5, 0x53}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x90f4}, @mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x80, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x62, 0x9, 0x1, [@generic={0xf9, 0x23, "bb706c0f4172146332e740b18080adc00f1ba2cb81a6312034fb1b78b1448b675f7ab1ecd617f8fc730a06ca8bf9f2d36a7143f841680a4c9d5eb6eb5ccfd3aa008b03048eef23647ed66be8503f29f450f1bbeca36737473886687edd30332cc4243dd19e025518746b6b7eb8fc109b6e0af5b44e517448cb1dc27a42ae6dac001c5a4ceead60f9f6f8d7bb17777ebbef486adf606f8cf08d9f63f139f9b7d036a1c9a7737874b7973241d3d53ad7f0f9840fa763e159f0b9ee061405d496f693e9e7ac130aacac9dfc614c9f9363bb8d899e74fe0115f86f995db5cb90ffe3974322c750066c4723f1f6d991de1a0dd0aa949189fc6f"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x9, 0xa, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x15, 0x0, 0xfa, [@generic={0x9d, 0x9, "a2a1a11700a1a56622046d366c5dd3d52827e34cb14c8eafc6683e02584ff1e0a7452380a0ba0a78fb7a7e2ebf531937799deaaa46272f6812fd3a6dfe95ffffed1887032a4ed3109f596e6fe1e3f31c965e2eb93ffd7c1d84150cdc762474cf84d57e47b23eec49f7a149297795ad5bc612fd4dd33f554ef42c6d21c2a02f5256c5e5fae48fcfe4cfc7362760ea6e8665ae02d4e6768de1b75357"}, @generic={0xb1, 0x9, "a740859b4df53102cd1e100936b7482040e935b54a32419756eb532fe13b6197c598109ae0f9408dd27dbbed9169ffd58526ed2ef139ec45f6777dcec48782d75bc50e1dd873cefe4ea16c3dbeab3f56e54fa9b500835463e10331f5902dee6d25a525914b648ab0fa2d7d3c1cde7b2ef62118e652fe388c93c59d1fc1128ce353b8c18e01c32a9b264209d0718d68553e236b3cb1a91bae794938055dc3e1fd655c33fd46610e714474c821f8f2c1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xda, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x101}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x2, 0x6, 0x39}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0xba, 0x3, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6a, 0x30, 0x5}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x9, 0xee, 0x8, [@generic={0xe2, 0x3, "b3a7db678652a690fea709bcfae7a4d51ec0d044a2eec2ae53e5c6678b41f15a483986fe1c7504435e340839a3a7eec39993d8839aec89b2408922632af8a167ebd38d0f064bf252d57febec32393f1cf91cfac62b0c17deceff6c9924ab2dec7b799e1d49ba0ef055de7a9f6e8b3f4544eaf65d3dc3a97c7ac7867437dcf7c37a23cbee1bab50e8504e8dc0754359f730262eb0a4ff69ddac230f3637de6b1014ebd5520160df9c5a2c0a9b6ac7117f2f9e263eaaa425424470105a66471925712a347a35fab4b78cf6dd599d3bec487144ea50e695870250f1395ca8b48def"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0xd, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2b}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xff, 0x1, 0xf9, [@generic={0xa5, 0x23, "3fc889f99c813e87eacc1ce7004ab9b4f3ce2645d1944cb67c70a62ef502abcc844f5b1e3167bdc0f97c79b6d12909f1cd78defa5046016fffc723ee678f843206c7e43d80ccffc5687194ac4076a0e704d8dc8832a71892d1e331d41feaf753715696304f8752e91c86f3a12caabcfa03eb0d61f7dfb883a9fb0497dcc2f47472638d16d787c47e59d7c4fa3593640e37204963ad9935f668d646abe3109794306faa"}, @generic={0x11, 0x1, "95a0da5177ea2116d8cfb922d17177"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x7, 0x5, 0x5, [@generic={0xf1, 0x23, "06edfcdb83c31a869c94a102600664dfed0ead38e9155d11790b9ea85d547e5908ce1a62d23c7c639399116b2d51f6246d9ac07039ad476efb93b0e567bf6d5bcf36ac9878254b5d862ca0159ad8ca8c5594fe0cf41610a6c0e404f8c384512a5477fb6f558a60a40700c69555531dc6df4b7e29097e3f4e8bd5bfa4e2de8bba91e8e3d325faed12bdd0630e5e06f1706c1dc13d676521e98820184d5a973873a209561c05cf0e62239b73221c08395f68c1cada81043f46e04bfbd72d56de31020e650efe828545f597bbee3d08c8ba5e204efcd9aa4c85f647cb48d803cc674de7a23a3114454d21743a813450a0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x3, 0x8, [@generic={0x4d, 0x11, "140bc0f93d5690501c43afaedd6a9a16146333dcb3a5675c8ac05a60f6707a7b0bc530d6dedf330dc2fe02c25925d910c5954c83d713a856b7f95e71ac50c4928448533255d8bbe9ee3f32"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0x7, 0x5}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0x0, 0x6, 0x40, 0x3}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x42d0, 0x0, 0x0, [0x3f30, 0x1fefff0, 0xc000]}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x83e}}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0xbe, &(0x7f0000000a40)=@string={0xbe, 0x3, "d72c977ad3e0004345df3d09cddaa6d917c7a132c56c249f2a662f0d0cc7b2e489005555bb2dec33ecff8416df88191f30f99242cc0dd389d6abe370234cc7c54cea19c2e0ce682583d039d89386bee65b4c2f13de1920ddf535b5de20c9db4ee0ad6c6c5a4b93d20b33dbd9493cd6d6a4e36ee6ac21eb09e5a8e5f84e470080104920adafff649f1c583ec9ccf2a1908e6f319d6c39fd8b58005f3f84b8dfd5c99743400bcd1f826738b5c6a8c414ee4bc2ce4a161895f8869a306e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x402}}]}) (async)
syz_usb_connect(0x2, 0x6b2, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x22, 0x92, 0xe6, 0xff, 0x5c6, 0x9225, 0xe00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a0, 0x1, 0x1, 0x5, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0xf, 0x4f, 0xd8, 0xe7, 0x9, [@generic={0x79, 0x8, "3d67e47000dafc54542c5a17a7ae43962f616ee19b63e9cefe1ce9cc570fa1b1c18baa37781a9dd97986f75706f98c4fc94f8b571347e787ccb1b89b6db77d8203f19674fbe555892a9381341b7668bb44dd5c5108fa2615c631a153afc00d3fe122d19668ace3802c9d146d5d008bc3f6816a9632bc39"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8d"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x508, 0xfd99, 0x8}, {0x6, 0x24, 0x1a, 0x989, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x5, 0x53}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x90f4}, @mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x80, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x62, 0x9, 0x1, [@generic={0xf9, 0x23, "bb706c0f4172146332e740b18080adc00f1ba2cb81a6312034fb1b78b1448b675f7ab1ecd617f8fc730a06ca8bf9f2d36a7143f841680a4c9d5eb6eb5ccfd3aa008b03048eef23647ed66be8503f29f450f1bbeca36737473886687edd30332cc4243dd19e025518746b6b7eb8fc109b6e0af5b44e517448cb1dc27a42ae6dac001c5a4ceead60f9f6f8d7bb17777ebbef486adf606f8cf08d9f63f139f9b7d036a1c9a7737874b7973241d3d53ad7f0f9840fa763e159f0b9ee061405d496f693e9e7ac130aacac9dfc614c9f9363bb8d899e74fe0115f86f995db5cb90ffe3974322c750066c4723f1f6d991de1a0dd0aa949189fc6f"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x9, 0xa, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x15, 0x0, 0xfa, [@generic={0x9d, 0x9, "a2a1a11700a1a56622046d366c5dd3d52827e34cb14c8eafc6683e02584ff1e0a7452380a0ba0a78fb7a7e2ebf531937799deaaa46272f6812fd3a6dfe95ffffed1887032a4ed3109f596e6fe1e3f31c965e2eb93ffd7c1d84150cdc762474cf84d57e47b23eec49f7a149297795ad5bc612fd4dd33f554ef42c6d21c2a02f5256c5e5fae48fcfe4cfc7362760ea6e8665ae02d4e6768de1b75357"}, @generic={0xb1, 0x9, "a740859b4df53102cd1e100936b7482040e935b54a32419756eb532fe13b6197c598109ae0f9408dd27dbbed9169ffd58526ed2ef139ec45f6777dcec48782d75bc50e1dd873cefe4ea16c3dbeab3f56e54fa9b500835463e10331f5902dee6d25a525914b648ab0fa2d7d3c1cde7b2ef62118e652fe388c93c59d1fc1128ce353b8c18e01c32a9b264209d0718d68553e236b3cb1a91bae794938055dc3e1fd655c33fd46610e714474c821f8f2c1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xda, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x101}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x2, 0x6, 0x39}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0xba, 0x3, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6a, 0x30, 0x5}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x9, 0xee, 0x8, [@generic={0xe2, 0x3, "b3a7db678652a690fea709bcfae7a4d51ec0d044a2eec2ae53e5c6678b41f15a483986fe1c7504435e340839a3a7eec39993d8839aec89b2408922632af8a167ebd38d0f064bf252d57febec32393f1cf91cfac62b0c17deceff6c9924ab2dec7b799e1d49ba0ef055de7a9f6e8b3f4544eaf65d3dc3a97c7ac7867437dcf7c37a23cbee1bab50e8504e8dc0754359f730262eb0a4ff69ddac230f3637de6b1014ebd5520160df9c5a2c0a9b6ac7117f2f9e263eaaa425424470105a66471925712a347a35fab4b78cf6dd599d3bec487144ea50e695870250f1395ca8b48def"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0xd, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2b}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xff, 0x1, 0xf9, [@generic={0xa5, 0x23, "3fc889f99c813e87eacc1ce7004ab9b4f3ce2645d1944cb67c70a62ef502abcc844f5b1e3167bdc0f97c79b6d12909f1cd78defa5046016fffc723ee678f843206c7e43d80ccffc5687194ac4076a0e704d8dc8832a71892d1e331d41feaf753715696304f8752e91c86f3a12caabcfa03eb0d61f7dfb883a9fb0497dcc2f47472638d16d787c47e59d7c4fa3593640e37204963ad9935f668d646abe3109794306faa"}, @generic={0x11, 0x1, "95a0da5177ea2116d8cfb922d17177"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x7, 0x5, 0x5, [@generic={0xf1, 0x23, "06edfcdb83c31a869c94a102600664dfed0ead38e9155d11790b9ea85d547e5908ce1a62d23c7c639399116b2d51f6246d9ac07039ad476efb93b0e567bf6d5bcf36ac9878254b5d862ca0159ad8ca8c5594fe0cf41610a6c0e404f8c384512a5477fb6f558a60a40700c69555531dc6df4b7e29097e3f4e8bd5bfa4e2de8bba91e8e3d325faed12bdd0630e5e06f1706c1dc13d676521e98820184d5a973873a209561c05cf0e62239b73221c08395f68c1cada81043f46e04bfbd72d56de31020e650efe828545f597bbee3d08c8ba5e204efcd9aa4c85f647cb48d803cc674de7a23a3114454d21743a813450a0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x3, 0x8, [@generic={0x4d, 0x11, "140bc0f93d5690501c43afaedd6a9a16146333dcb3a5675c8ac05a60f6707a7b0bc530d6dedf330dc2fe02c25925d910c5954c83d713a856b7f95e71ac50c4928448533255d8bbe9ee3f32"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0x7, 0x5}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0x0, 0x6, 0x40, 0x3}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x42d0, 0x0, 0x0, [0x3f30, 0x1fefff0, 0xc000]}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x83e}}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0xbe, &(0x7f0000000a40)=@string={0xbe, 0x3, "d72c977ad3e0004345df3d09cddaa6d917c7a132c56c249f2a662f0d0cc7b2e489005555bb2dec33ecff8416df88191f30f99242cc0dd389d6abe370234cc7c54cea19c2e0ce682583d039d89386bee65b4c2f13de1920ddf535b5de20c9db4ee0ad6c6c5a4b93d20b33dbd9493cd6d6a4e36ee6ac21eb09e5a8e5f84e470080104920adafff649f1c583ec9ccf2a1908e6f319d6c39fd8b58005f3f84b8dfd5c99743400bcd1f826738b5c6a8c414ee4bc2ce4a161895f8869a306e"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x402}}]})
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r2)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0)
r4 = gettid()
r5 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000001b40)='posixacl\x00', 0x0, 0x0)
tkill(r4, 0x12)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x20a340, 0x130)
read$FUSE(r6, &(0x7f0000001100)={0x2020}, 0x2020)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
read(r7, &(0x7f0000000080)=""/93, 0xffffff6c) (async)
read(r7, &(0x7f0000000080)=""/93, 0xffffff6c)

1m23.93538315s ago: executing program 0 (id=60):
r0 = socket(0x27, 0x80802, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843209100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64090102}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)=0xfffffff7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r5, 0xc008aec1, &(0x7f0000000180)=ANY=[])
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$RTC_AIE_OFF(r7, 0x7002)
r8 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r8}, @acquire_done], 0xa, 0x0, &(0x7f00000000c0)="5fa1da651125787f642f"})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000030000400000000001000000000000001248e9f7bcedd9ec4b21cb60cea0f8aa5653db8731e7d4a880edfec3b21666dea95b612cfd7b8f1f0b1e6f712932cd7b824121bf40c54c06c28be426ac7a2525b210babca5877d941ee709d64c9572c9a87367d7e1a0d67720a5f0ee07d52f29da3de19551b94256962d63d322ea55ecd228b5314a7158649e59113fe991843ea06b074336672f3f3bbf25bee2f1f3747f00000001e5a803b1811fa7ecaa36e7fb63282f40a23cbd"])
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"})

1m23.9061675s ago: executing program 32 (id=60):
r0 = socket(0x27, 0x80802, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843209100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64090102}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)=0xfffffff7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r5, 0xc008aec1, &(0x7f0000000180)=ANY=[])
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$RTC_AIE_OFF(r7, 0x7002)
r8 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r8}, @acquire_done], 0xa, 0x0, &(0x7f00000000c0)="5fa1da651125787f642f"})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000030000400000000001000000000000001248e9f7bcedd9ec4b21cb60cea0f8aa5653db8731e7d4a880edfec3b21666dea95b612cfd7b8f1f0b1e6f712932cd7b824121bf40c54c06c28be426ac7a2525b210babca5877d941ee709d64c9572c9a87367d7e1a0d67720a5f0ee07d52f29da3de19551b94256962d63d322ea55ecd228b5314a7158649e59113fe991843ea06b074336672f3f3bbf25bee2f1f3747f00000001e5a803b1811fa7ecaa36e7fb63282f40a23cbd"])
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"})

11.751727417s ago: executing program 2 (id=1699):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x44b41, 0x0)
writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5", 0x17}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}], 0x3, 0x2100, 0x0)
recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
pselect6(0x40, &(0x7f0000000040)={0x1, 0x8000, 0x5, 0x9ca2, 0x1, 0x10000, 0xffff, 0x10}, &(0x7f0000000180)={0x8, 0x8, 0x3, 0x1, 0x8000, 0xf993, 0x100, 0x6}, &(0x7f0000000340)={0x8001, 0x5, 0x6, 0x200, 0xfffffffffffff81b, 0x7, 0x7, 0x1}, &(0x7f00000003c0)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x400]}, 0x8})
sendto(r2, &(0x7f0000000240)="900a397e64bac9337947ebd874177b22fff2f6a438529bde208a13540c5fb7bf74025ab30dcf4a40519069a5a3b6c4a0a21aaeb8b9c302a70300194386de6c7aa3304a81010c38411292101139a82079ec4a6a358e881e19a9ae3fa9baaf759ff30a20c97fbaf38f6c6ff71d98dec89e48290c98ccf7d17da3525aac1b4603d228ab41fed920934d911649bb05553340fe1b8c8018483091cea14e3b4b8ba0f9ca26dfa29606f6f6593e50b4dd377403", 0xb0, 0xc7652836dda7905b, &(0x7f0000000500)=@generic={0x2b, "7906bd5e22cd5af5de3039e61536cd4c48005ea94268356f7749ef17614c064b922d2e537806cca57a45bedff01c415771fa48ba01188a2c6a4140481120618fdb53e38391d3756e5c0910252a8c16851979ba0ed8b878716669ad77dd2835d821b636ea1fd2ce7c7471ce386b7ae9ea54198a87fc9aa0f87ffcae8aa831"}, 0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

11.727432887s ago: executing program 2 (id=1700):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(0x3)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xc02063a1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x7000000)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r11, 0x407, 0x100000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x3, 0x300)

11.667876028s ago: executing program 2 (id=1701):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async, rerun: 32)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') (async, rerun: 64)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x1})

11.662779638s ago: executing program 2 (id=1702):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c800}, 0x15)

11.172110157s ago: executing program 2 (id=1718):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
write(r3, &(0x7f0000000080)="9035d1a1facb75526d", 0x9)
close(r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000200)="03e5116d38d77b85b6d8319c55b67acaf7884fc2aef4b4b2570b7f9f00ebc5fb47dc7a871e3982ee8af0378bc04b7e08117fd15d433f597b2af82db06b462b49d19839f43aeab7e72ec57bf6c0156630e3fbe20e80c38a1b8aced31f51c4615a8453426ef9811777f2f49dad1801237d5223d10a42e0bb518ed5beb67285bb52d5b09288edbc2349076a93945f4d5b2e8f53199e49547022f417813bed00e6c815e9fb24fdce221d4dcd4820f8694fd6b780fce4ee1e6dc9ad022c47e29dd7eada28cd6523985356caf8efa0b1245655d56d8ee5f9", 0xd5}, {&(0x7f0000000300)="e80b265a63a1a789fc4f182acddacd0b6700664bb932a19a713f110fcbc54581371e8684c77a18a3ff8ceed60ddafb22323f17d265bda4b5d87419063f95e182f5adcffd519fd832aec31e8177424b3c6106542be2279c72ada3dd5ea1094e487cb40e1f53259455d0eccdb911520ddcab8a0d35019c517cee9a6a35d846ec5a6306ba37e5be65", 0x87}, {&(0x7f00000004c0)="617091e034d727518e0b5695daff2b959f7b290123c5e086ef2048beb9a35453b6333e3765d5deecf286efa87d286afe2760ad796ec4b66a9ad91a55ccbfe5f89c4839f29172f0af787ace933a78626780b190e368f85b5d7fefd566410cbfdb4989708f42b6ca4787f4a0e12019c0610e1f04adbe4307b8b1a8262963ffd62d3d5b65d91d6a50a6c9184b64e02f15fc7919806c8cb4a70963e10f459c1f5cdb2308b227823525208a9471e6366ad99cb393cd7bfe08798fe6fe538436428f5ae53960fbb6886209f37bf787269de201020c4022990ba03031156858923bfb84f689429014f4e6d2d8aeb62f8237", 0xee}, {&(0x7f00000003c0)="d313126e63b3e3c255f2867255620007a30c53cba23295a310ee60895d12acb10f6545938be2a7f08ff61b9022dba61dbeb5abf0adb61811b06bc6c7ca2326b1fa7297b38fcd0c9c5ecc1af24ec1a3f2624a65609c8931605bef8086b0bbc8071c0cc40d1c41c3cec93f30edbecca5d67a32a85b5bedf80a98f1f8e4943090e58b692ce1d08c89", 0x87}, {&(0x7f0000000640)="5b33f5c953e9fbdc27f6c5ad9b4c11f58158f252f0cb86afd5fc1281d2e1b619312cf518102176e7a38ada82f0295c4a5e1b54a058bf122720f0303851676d3249d01092a702d72b21d2c900692f9723a9d90cb01e40de97ee839f948863571c9f1122edfb2bd0e60d2e000b067beb480af3047b0d94c14e8712", 0x7a}, {&(0x7f00000006c0)="569f29ced282c3dea195ad0f34a1a2cbb52713963b4ac97b064738eed6c14f0192f4b0c6923821302d2852b082f59236d3d3b6938e3dc6b805bec704f36c61c43764d5001c98b7f0dfc34d80745e1ada419dfa1e97e0e82cd9cba837bfc4a344684619550ae39f1c3998fc409b", 0x6d}, {&(0x7f0000000740)="cf255e192f19546c20ff7c566e3ce1dd185257aa9b39e7e6c323c2cf02bfbc7f0feda2f7849ef4f1b397754becad3047746667c2403eebee3905794148ecc2f94daf4a53aa8f5c99c2b25a509ce53802e0fec38c6bdb2fe9e230a26ad7bb77bf46074e52629171a1c70784e964d981b21155c186a8b039ed7aa5b7b559d3455da1afbcfcce261f6615ab3d73c2d60a6fe78b30e4294fdf9f1546e9d1bd376c9d01c8855f38ac1f77716e11ac17ae3089ca08ab49d8caa5afb56743ef7739ca437c8a7cd6647539233d6d4becbb2225c4", 0xd0}], 0x7, &(0x7f0000000040)}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
socket(0xf, 0x6, 0x8)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000002, 0x0, 0xfffffffffffffff8}]})
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)

11.069991538s ago: executing program 2 (id=1720):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_get$pid(0x1, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x2)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1508000065ffff6c1d4396f7017f0e08003900"], 0x15)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x0, 0x0, 0x4, 0x2, 0x0, 0x401}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00')
lseek(r5, 0x38, 0x0)
r6 = dup(r2)
r7 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}})
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816"], 0x65)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltuid}]}})
r9 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
sendto$inet6(r9, &(0x7f00000002c0)="1c0000007b00050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
lseek(r0, 0x10001, 0x0)

3.261237534s ago: executing program 1 (id=1899):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x1412, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x3, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x7, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x8, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x8002, 0x1, 0x9, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000})
ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2007)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xfffffffffffffebe, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfffffffffffffe5d, 0x0, 0x0})
openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
write$uinput_user_dev(r0, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x1412, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x3, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x7, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x8, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x8002, 0x1, 0x9, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) (async)
ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2007) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xfffffffffffffebe, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfffffffffffffe5d, 0x0, 0x0}) (async)

3.139882185s ago: executing program 1 (id=1902):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x52, 0x36b, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040))
setreuid(0x0, r1)
setresuid(r1, 0xee01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000200)=0xc)
keyctl$chown(0x4, 0x0, r5, r6)
chown(&(0x7f0000000000)='./file0\x00', r1, r6)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x10001, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82400, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8)
read$FUSE(r7, &(0x7f0000000f00)={0x2020}, 0x2020)

3.067939817s ago: executing program 1 (id=1907):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setresgid(0xee00, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xb, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x79, "f395bb"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x4, 0x2, 0x8], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x305, 0x6, 0x9, 0x8, 0x80, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x8, 0x6, 0x7, 0x9], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x0, {0x7, 0x25, 0x1, 0x81, 0x4, 0x462}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x1, 0x5, {0x7, 0x25, 0x1, 0x82, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
prlimit64(r1, 0x9, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

1.824916688s ago: executing program 1 (id=1936):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], 0x7d4}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], 0x7d4}, 0x1, 0x0, 0x0, 0x4000}, 0xc080)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/368])
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xb6f, 0x0, 0xfffffffffffffffd}, {0x9b2, 0x0, 0x6}]}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xb6f, 0x0, 0xfffffffffffffffd}, {0x9b2, 0x0, 0x6}]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))

1.684311811s ago: executing program 1 (id=1942):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357)
close(r1)
socket$tipc(0x1e, 0x5, 0x0) (async)
r2 = socket(0x18, 0x0, 0x2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64)
r4 = dup3(r3, r0, 0x0) (async, rerun: 64)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0xc040aed5, &(0x7f0000001200)={0x20, 0x2, 0x8})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1.511658104s ago: executing program 1 (id=1947):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fsopen(&(0x7f0000000000)='mqueue\x00', 0x1)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d00060905e515acb0"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x600000000000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve1\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="3f031c000302140006001e00895a05", 0xf, 0x2004c8d5, &(0x7f0000000180)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
sendto$packet(r0, &(0x7f0000000040)="e8d805d4c66e5e559cdd718d677d36aeecf6cee6d583f5dafe54ed93ecd05b84184cf99696476b827fd49ade5cf788ae1ed84a4a37f150e26a71f7bd9e3898fe9ff85818578146bdc0556cd5d037286d98ff6e940fc03c6a93ff8eb1430373c69f2a7e05bb78f74109a75b95d2034cbdfc22c81a92e12bf597651e", 0x7b, 0x0, &(0x7f00000000c0)={0x11, 0x7, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14)
ioctl$KDSKBLED(r4, 0x4b65, 0x5)
socket$inet6(0xa, 0x400000000001, 0x0)
pselect6(0x40, &(0x7f00000005c0)={0x3, 0x60, 0x3, 0x7, 0x61400000, 0x33d6, 0x9, 0x240}, 0x0, &(0x7f0000000240)={0xd, 0x5bb9, 0x80000000, 0xff, 0x0, 0x675, 0x9, 0x9}, &(0x7f00000002c0)={0x77359400}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
close(0x4)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
getpeername(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

968.042793ms ago: executing program 4 (id=1956):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
copy_file_range(r0, 0x0, r0, 0x0, 0x1, 0x0) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x8c802000) (async)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3})

955.090533ms ago: executing program 4 (id=1957):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x2000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1104c0, 0x4)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1, 0x401}, &(0x7f0000000040), &(0x7f0000000140))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)

907.044614ms ago: executing program 4 (id=1958):
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x2000009, 0x2, 0x9, 0x0, 0x2, "972d595029c59b15743b291346db66fb4c8676"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x102f)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="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", 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/143)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
open(0x0, 0x60142, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='devpts\x00', 0x200000, 0x0)

841.821375ms ago: executing program 4 (id=1959):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x2, 0x1, 0x401, 0x3})
openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

771.787177ms ago: executing program 4 (id=1960):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
fstat(r1, &(0x7f0000000780))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
io_setup(0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x30000)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000100)={r1, 0x533, {0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3, 0x16, 0x4, "8414635b4fc7ab0cddb905da9520a0692bef5946f88fd8480fc55727651def95295947cd8cc8459ec8eef5c2b781a154d0e0e626b18e85c1450609772073eb0b", "a996abf6ce10b1a5a4a340cc7a512b09f3be0f1e4d073f9a5f441929cb7085652f036716746061e610bd28a1554df9b1d78f938f65b81d786a7aeea86932bf40", "8ea8bbca92baeecb727bca4d0141916d1b6fe743d91ab64038799be7d19520c7", [0x9, 0x8]}})
r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

291.772064ms ago: executing program 4 (id=1965):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x40804, 0x0, 0x0)
r2 = gettid()
r3 = gettid()
tkill(r2, 0x12)
tkill(r3, 0x14)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x12)
write(r0, &(0x7f0000000280)="59898001d1571c66d822289244a49866bf5fe4d6819f96b87aa6a78a2856", 0x1e)

106.772058ms ago: executing program 3 (id=1968):
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f0000000140)={0x38, 0x5}, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$vga_arbiter(r1, &(0x7f00000001c0)=@other={'unlock', ' ', 'none'}, 0xc) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x1c, 0x1a, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x10\x00\x01 '}]}, 0x1c}], 0x1}, 0x0) (async)
read(r2, &(0x7f0000000080)=""/93, 0xffffff6c)

106.244858ms ago: executing program 3 (id=1969):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='btrfs../bi/binder1\x00'], &(0x7f0000000280)='\x00', 0x1, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2})
fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x1000000020, 0x1fd})
r4 = accept4(r3, &(0x7f0000000040)=@rc={0x1f, @none}, &(0x7f0000000140)=0x80, 0x80800)
r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
flistxattr(r5, 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000180)={{0x2c, @broadcast, 0x4e22, 0x3, 'rr\x00', 0x8, 0x1, 0x3b}, {@broadcast, 0x4e23, 0x0, 0x0, 0x1, 0xfffffff7}}, 0x44)
close_range(r0, 0xffffffffffffffff, 0x0)

105.838218ms ago: executing program 3 (id=1970):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='-+\x00')
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000001c0)='!{[\x00')
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"])
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

89.343118ms ago: executing program 3 (id=1971):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = eventfd2(0x0, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
setreuid(0x0, r5) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = getpid() (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r9=>0x0}, &(0x7f0000000080)=0xc) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)={0x10, 0x21, 0x4, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r8, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r2, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r6}}}], 0x80, 0x4}, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x2, 0x0, 0xff, 0x7, 0x9, 0xd}, 0x20) (rerun: 64)

68.951869ms ago: executing program 3 (id=1972):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45806000)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async, rerun: 64)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000081000d000a01f31390e87dbdeb730780"], 0x1c}}, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))

0s ago: executing program 3 (id=1973):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0381, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x400000, 0x104)
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020de2805120000000000010902240001000000090904000101030000000921000000012205000905810300000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000005840)={0xff, 0x19, 0x0, 0xf0, "69ab5df13861ea47c11086f8417c4e2fb4365414eb5bea72d2155a41d669cda1"})
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1)
syz_usb_disconnect(r1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts.
[   22.748554][   T36] audit: type=1400 audit(1750781967.850:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.750396][  T281] cgroup: Unknown subsys name 'net'
[   22.772020][   T36] audit: type=1400 audit(1750781967.850:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.801133][   T36] audit: type=1400 audit(1750781967.880:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.801415][  T281] cgroup: Unknown subsys name 'devices'
[   22.985484][  T281] cgroup: Unknown subsys name 'hugetlb'
[   22.991140][  T281] cgroup: Unknown subsys name 'rlimit'
[   23.087935][   T36] audit: type=1400 audit(1750781968.190:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.111244][   T36] audit: type=1400 audit(1750781968.190:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.136167][   T36] audit: type=1400 audit(1750781968.190:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.144123][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.168149][   T36] audit: type=1400 audit(1750781968.270:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.190928][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.193920][   T36] audit: type=1400 audit(1750781968.270:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.228240][   T36] audit: type=1400 audit(1750781968.290:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.254114][   T36] audit: type=1400 audit(1750781968.290:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.624745][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.631822][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.640641][  T291] bridge_slave_0: entered allmulticast mode
[   24.647587][  T291] bridge_slave_0: entered promiscuous mode
[   24.655319][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.662472][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.669608][  T291] bridge_slave_1: entered allmulticast mode
[   24.676091][  T291] bridge_slave_1: entered promiscuous mode
[   24.725709][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.732782][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.739932][  T290] bridge_slave_0: entered allmulticast mode
[   24.746289][  T290] bridge_slave_0: entered promiscuous mode
[   24.759815][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.766995][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.774283][  T290] bridge_slave_1: entered allmulticast mode
[   24.780568][  T290] bridge_slave_1: entered promiscuous mode
[   24.786725][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.793962][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.801067][  T288] bridge_slave_0: entered allmulticast mode
[   24.807603][  T288] bridge_slave_0: entered promiscuous mode
[   24.830922][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.838057][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.845229][  T288] bridge_slave_1: entered allmulticast mode
[   24.851527][  T288] bridge_slave_1: entered promiscuous mode
[   24.861610][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.868863][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.876489][  T289] bridge_slave_0: entered allmulticast mode
[   24.882943][  T289] bridge_slave_0: entered promiscuous mode
[   24.899365][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.906461][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.913627][  T289] bridge_slave_1: entered allmulticast mode
[   24.919920][  T289] bridge_slave_1: entered promiscuous mode
[   25.088862][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.095975][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.103318][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.110367][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.118785][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.125868][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.133181][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.140244][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.158066][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.165188][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.172465][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.179529][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.192338][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.199426][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.206767][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.213834][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.259614][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.267126][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.275126][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.282674][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.290093][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.297552][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.304855][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.319457][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.326551][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.350132][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.357241][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.365035][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.372100][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.385488][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.392559][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.401178][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.408303][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.449406][  T290] veth0_vlan: entered promiscuous mode
[   25.460598][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.467719][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.475542][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.482625][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.517080][  T288] veth0_vlan: entered promiscuous mode
[   25.523710][  T291] veth0_vlan: entered promiscuous mode
[   25.539168][  T290] veth1_macvtap: entered promiscuous mode
[   25.563368][  T291] veth1_macvtap: entered promiscuous mode
[   25.572603][  T288] veth1_macvtap: entered promiscuous mode
[   25.582391][  T289] veth0_vlan: entered promiscuous mode
[   25.616719][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   25.619573][  T289] veth1_macvtap: entered promiscuous mode
[   25.720514][  T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   25.720877][  T321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   25.744628][  T323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   25.773598][  T330] =======================================================
[   25.773598][  T330] WARNING: The mand mount option has been deprecated and
[   25.773598][  T330]          and is ignored by this kernel. Remove the mand
[   25.773598][  T330]          option from the mount to silence this warning.
[   25.773598][  T330] =======================================================
[   25.792620][  T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.838675][  T331] binder: Bad value for 'stats'
[   25.839494][  T334] rust_binder: Write failure EINVAL in pid:4
[   25.881623][  T351] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9'.
[   25.993047][  T367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33
[   26.018014][  T369] process 'syz.0.15' launched './file0' with NULL argv: empty string added
[   26.109785][  T378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19'.
[   26.141423][  T382] cgroup: Name too long
[   26.162676][  T376] can0: slcan on ttyS3.
[   26.247346][  T376] can0 (unregistered): slcan off ttyS3.
[   26.347741][  T412] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   26.355414][  T412] rust_binder: Write failure EINVAL in pid:43
[   26.355765][  T412] rust_binder: Write failure EFAULT in pid:43
[   26.510931][  T431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.29'.
[   26.532971][   T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.599688][  T438] rust_binder: Got transaction with invalid offset.
[   26.599740][  T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   26.606785][  T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[   26.624011][  T441] rust_binder: Write failure EINVAL in pid:56
[   26.635540][  T444] rust_binder: Error while translating object.
[   26.644723][  T444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   26.651370][  T444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9
[   26.684083][   T64] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   26.712261][   T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.712561][  T447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.725864][   T64] usb 1-1: config 0 descriptor??
[   26.746470][  T447] rust_binder: Write failure EINVAL in pid:11
[   26.783316][  T456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.38'.
[   26.838720][  T449] kvm: pic: non byte write
[   26.844515][  T449] random: crng reseeded on system resumption
[   26.948201][  T404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   26.970189][  T404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   26.988156][   T64] usb 1-1: Cannot read MAC address
[   26.997210][   T64] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   27.014148][  T467] rust_binder: Error while translating object.
[   27.014195][  T467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.014623][   T64] usb 1-1: USB disconnect, device number 2
[   27.020495][  T467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[   27.215127][  T481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.47'.
[   27.362989][   T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   27.483057][  T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.493120][   T10] usb 2-1: device descriptor read/64, error -71
[   27.557188][  T487] FAT-fs (rnullb0): bogus number of reserved sectors
[   27.564012][  T487] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   27.632986][  T310] usb 3-1: Using ep0 maxpacket: 32
[   27.639413][  T310] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   27.647772][  T310] usb 3-1: config 0 has no interface number 0
[   27.653966][  T310] usb 3-1: config 0 interface 184 has no altsetting 0
[   27.662307][  T310] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   27.671588][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.679831][  T310] usb 3-1: Product: syz
[   27.684397][  T310] usb 3-1: Manufacturer: syz
[   27.689020][  T310] usb 3-1: SerialNumber: syz
[   27.695888][  T310] usb 3-1: config 0 descriptor??
[   27.701797][  T310] smsc75xx v1.0.0
[   27.743027][   T10] usb 2-1: device descriptor read/64, error -71
[   27.824509][   T36] kauditd_printk_skb: 123 callbacks suppressed
[   27.824527][   T36] audit: type=1400 audit(1750781972.930:197): avc:  denied  { ioctl } for  pid=491 comm="syz.3.52" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.855310][   T36] audit: type=1400 audit(1750781972.930:198): avc:  denied  { map } for  pid=491 comm="syz.3.52" path="/proc/67/net/tcp6" dev="proc" ino=4026532517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   27.983122][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   28.020098][  T501] netlink: 'syz.3.55': attribute type 4 has an invalid length.
[   28.029993][   T36] audit: type=1400 audit(1750781973.130:199): avc:  denied  { ioctl } for  pid=500 comm="syz.3.55" path="socket:[4905]" dev="sockfs" ino=4905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   28.054359][   T36] audit: type=1400 audit(1750781973.130:200): avc:  denied  { bind } for  pid=500 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   28.081667][  T501] rust_binder: Write failure EINVAL in pid:76
[   28.113052][   T10] usb 2-1: device descriptor read/64, error -71
[   28.287230][  T505] netlink: 104 bytes leftover after parsing attributes in process `syz.3.56'.
[   28.362991][   T10] usb 2-1: device descriptor read/64, error -71
[   28.388209][  T513] SELinux:  Context +: is not valid (left unmapped).
[   28.395353][   T36] audit: type=1400 audit(1750781973.500:201): avc:  denied  { relabelto } for  pid=512 comm="syz.3.58" name="file1" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="+:"
[   28.400291][  T513] overlayfs: failed to get index nlink (file1/bus, err=-61)
[   28.419605][   T36] audit: type=1400 audit(1750781973.500:202): avc:  denied  { associate } for  pid=512 comm="syz.3.58" name="file1" dev="tmpfs" ino=146 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="+:"
[   28.468012][   T36] audit: type=1400 audit(1750781973.500:203): avc:  denied  { unlink } for  pid=512 comm="syz.3.58" name="#1" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   28.493654][   T10] usb usb2-port1: attempt power cycle
[   28.499254][   T36] audit: type=1400 audit(1750781973.500:204): avc:  denied  { mount } for  pid=512 comm="syz.3.58" name="/" dev="overlay" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   28.522957][   T36] audit: type=1400 audit(1750781973.560:205): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   28.554011][  T304] bridge_slave_1: left allmulticast mode
[   28.559745][  T304] bridge_slave_1: left promiscuous mode
[   28.583453][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.593614][  T304] bridge_slave_0: left allmulticast mode
[   28.603724][  T304] bridge_slave_0: left promiscuous mode
[   28.609431][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.721539][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   28.735377][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   28.752744][   T36] audit: type=1400 audit(1750781973.850:206): avc:  denied  { mounton } for  pid=517 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   28.777369][  T304] veth1_macvtap: left promiscuous mode
[   28.785374][  T304] veth0_vlan: left promiscuous mode
[   28.852958][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   28.874009][   T10] usb 2-1: device descriptor read/8, error -71
[   28.911924][  T517] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.919116][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.926539][  T517] bridge_slave_0: entered allmulticast mode
[   28.933244][  T517] bridge_slave_0: entered promiscuous mode
[   28.939982][  T517] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.947579][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.955164][  T517] bridge_slave_1: entered allmulticast mode
[   28.961678][  T517] bridge_slave_1: entered promiscuous mode
[   28.970945][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   28.981937][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   28.991883][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   29.002798][  T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   29.012785][  T310] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   29.022060][   T10] usb 2-1: device descriptor read/8, error -71
[   29.029541][  T310] usb 3-1: USB disconnect, device number 2
[   29.096585][  T517] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.103717][  T517] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.111045][  T517] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.118227][  T517] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.145961][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.154266][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.172479][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.179607][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.187950][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.195059][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.229136][  T517] veth0_vlan: entered promiscuous mode
[   29.254310][  T517] veth1_macvtap: entered promiscuous mode
[   29.273060][   T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   29.294150][   T10] usb 2-1: device descriptor read/8, error -71
[   29.421375][  T534] sock: sock_timestamping_bind_phc: sock not bind to device
[   29.434000][   T10] usb 2-1: device descriptor read/8, error -71
[   29.474033][  T526] rust_binder: Error while translating object.
[   29.474077][  T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.480423][  T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   29.513801][  T538] overlayfs: missing 'lowerdir'
[   29.515908][  T540] netlink: 104 bytes leftover after parsing attributes in process `syz.4.66'.
[   29.543085][   T10] usb usb2-port1: unable to enumerate USB device
[   29.586417][  T544] overlay: Unknown parameter 'obj_type'
[   29.615673][  T550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'.
[   29.618779][  T549] FAT-fs (rnullb0): bogus number of reserved sectors
[   29.631692][  T549] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   29.640100][  T551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   29.691838][  T555] kvm: pic: non byte write
[   29.697754][  T555] random: crng reseeded on system resumption
[   30.053033][   T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.160162][  T567] netlink: 104 bytes leftover after parsing attributes in process `syz.1.76'.
[   30.206183][   T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.217932][   T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.233185][   T64] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.242340][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   30.250425][   T64] usb 4-1: SerialNumber: syz
[   30.468673][  T584] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.468803][  T584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14
[   30.469840][  T562] kvm: pic: non byte write
[   30.497336][  T587] rust_binder: Error while translating object.
[   30.497367][  T587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.498205][  T562] random: crng reseeded on system resumption
[   30.503996][  T587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16
[   30.542149][   T64] usb 4-1: 0:2 : does not exist
[   30.563051][   T64] usb 4-1: USB disconnect, device number 2
[   30.595726][  T469] udevd[469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.041849][  T590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   31.041874][  T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:20
[   31.130400][  T593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   31.142518][  T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23
[   31.150417][  T599] syz.3.87 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   31.413079][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   31.562984][   T31] usb 4-1: Using ep0 maxpacket: 32
[   31.570325][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.581585][   T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   31.592679][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.601807][   T31] usb 4-1: config 0 descriptor??
[   32.015499][  T599] FAT-fs (rnullb0): bogus number of reserved sectors
[   32.022653][  T599] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   32.062708][   T31] usbhid 4-1:0.0: can't add hid device: -71
[   32.068846][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   32.078101][   T31] usb 4-1: USB disconnect, device number 3
[   32.448512][  T672] Zero length message leads to an empty skb
[   32.562692][  T677] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   32.627504][  T689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   32.706614][  T709] overlayfs: failed to clone upperpath
[   32.833058][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   32.873017][  T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   32.982987][   T10] usb 4-1: Using ep0 maxpacket: 32
[   32.990112][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   32.999057][   T10] usb 4-1: config 0 has no interface number 0
[   33.005256][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[   33.015550][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   33.025093][   T10] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3
[   33.034390][  T310] usb 5-1: Using ep0 maxpacket: 16
[   33.039672][   T10] usb 4-1: Product: syz
[   33.043913][   T10] usb 4-1: Manufacturer: syz
[   33.048660][   T10] usb 4-1: SerialNumber: syz
[   33.054000][  T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.064451][   T10] usb 4-1: config 0 descriptor??
[   33.069575][  T310] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   33.079383][  T310] usb 5-1: config 1 has no interface number 1
[   33.085996][   T10] smsc75xx v1.0.0
[   33.089733][  T310] usb 5-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[   33.100656][  T310] usb 5-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[   33.114545][  T310] usb 5-1: config 1 interface 2 has no altsetting 0
[   33.122745][  T310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.131979][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.140075][  T310] usb 5-1: Product: syz
[   33.144474][  T310] usb 5-1: Manufacturer: syz
[   33.149113][  T310] usb 5-1: SerialNumber: syz
[   33.357284][   T36] kauditd_printk_skb: 35 callbacks suppressed
[   33.357303][   T36] audit: type=1400 audit(1750781978.460:242): avc:  denied  { write } for  pid=690 comm="syz.4.116" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   33.359237][  T691] rust_binder: Write failure EINVAL in pid:42
[   33.363536][   T36] audit: type=1400 audit(1750781978.460:243): avc:  denied  { open } for  pid=690 comm="syz.4.116" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   33.419413][   T36] audit: type=1400 audit(1750781978.460:244): avc:  denied  { read write } for  pid=690 comm="syz.4.116" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.427283][  T310] usb 5-1: USB disconnect, device number 2
[   33.445312][   T36] audit: type=1400 audit(1750781978.460:245): avc:  denied  { open } for  pid=690 comm="syz.4.116" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.469973][  T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   33.513681][   T36] audit: type=1400 audit(1750781978.620:246): avc:  denied  { listen } for  pid=726 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.626278][  T752] netlink: 104 bytes leftover after parsing attributes in process `syz.2.133'.
[   33.648808][   T36] audit: type=1400 audit(1750781978.750:247): avc:  denied  { setopt } for  pid=753 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.709675][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   33.721541][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   33.746707][  T768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'.
[   33.770403][  T771] netlink: 80 bytes leftover after parsing attributes in process `syz.2.140'.
[   33.779846][  T771] tipc: Started in network mode
[   33.784896][  T771] tipc: Node identity 7, cluster identity 4711
[   33.791675][  T771] tipc: Node number set to 7
[   33.814825][   T36] audit: type=1400 audit(1750781978.920:248): avc:  denied  { associate } for  pid=775 comm="syz.1.141" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   33.843008][  T776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.142'.
[   33.933078][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[   33.945031][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[   33.955902][   T13] bridge_slave_1: left allmulticast mode
[   33.961677][   T13] bridge_slave_1: left promiscuous mode
[   33.963247][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[   33.972962][   T36] audit: type=1400 audit(1750781979.070:249): avc:  denied  { sys_nice } for  pid=787 comm="syz.1.148" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   33.993042][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[   33.998111][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.033431][   T13] bridge_slave_0: left allmulticast mode
[   34.039634][   T13] bridge_slave_0: left promiscuous mode
[   34.049402][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.185869][   T13] veth1_macvtap: left promiscuous mode
[   34.191735][   T13] veth0_vlan: left promiscuous mode
[   34.317517][  T798] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.325260][  T798] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.332363][  T798] bridge_slave_0: entered allmulticast mode
[   34.340074][  T798] bridge_slave_0: entered promiscuous mode
[   34.348128][  T798] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.356069][  T798] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.364029][  T798] bridge_slave_1: entered allmulticast mode
[   34.370709][  T798] bridge_slave_1: entered promiscuous mode
[   34.428890][  T798] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.436130][  T798] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.444031][  T798] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.451081][  T798] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.474522][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.482263][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.492686][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.499906][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.509313][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.517029][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.544138][  T798] veth0_vlan: entered promiscuous mode
[   34.555633][  T798] veth1_macvtap: entered promiscuous mode
[   34.576028][   T36] audit: type=1400 audit(1750781979.680:250): avc:  denied  { mounton } for  pid=798 comm="syz-executor" path="/root/syzkaller.Kn2i7L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   34.623556][  T809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37338 sclass=netlink_route_socket pid=809 comm=syz.2.152
[   34.648383][  T811] netlink: 104 bytes leftover after parsing attributes in process `syz.4.153'.
[   34.884284][   T36] audit: type=1326 audit(1750781979.990:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=818 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   34.952742][  T831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.984277][  T835] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   34.991488][  T835] rust_binder: Read failure Err(EFAULT) in pid:14
[   35.025237][  T846] netlink: 104 bytes leftover after parsing attributes in process `syz.1.162'.
[   35.117480][  T858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25987 sclass=netlink_route_socket pid=858 comm=syz.4.163
[   35.185072][  T868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.172'.
[   35.644264][  T563] usb 4-1: USB disconnect, device number 4
[   35.659282][  T879] /dev/nullb0: Can't lookup blockdev
[   35.997642][  T892] tipc: Started in network mode
[   36.002702][  T892] tipc: Node identity 000000000000000003, cluster identity 4711
[   36.071140][  T895] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.105155][  T898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.182'.
[   36.108586][  T900] batadv_slave_1: entered promiscuous mode
[   36.121905][  T899] batadv_slave_1: left promiscuous mode
[   36.139910][  T902] bridge0: port 3(syz_tun) entered blocking state
[   36.147155][  T902] bridge0: port 3(syz_tun) entered disabled state
[   36.154250][  T902] syz_tun: entered allmulticast mode
[   36.161420][  T902] syz_tun: entered promiscuous mode
[   36.167002][  T902] bridge0: port 3(syz_tun) entered blocking state
[   36.173520][  T902] bridge0: port 3(syz_tun) entered forwarding state
[   36.203527][  T914] netlink: 'syz.4.189': attribute type 4 has an invalid length.
[   36.235529][   T13] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[   36.244665][  T914] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   36.248150][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.304355][  T928] netlink: 104 bytes leftover after parsing attributes in process `syz.1.193'.
[   36.545657][  T942] overlayfs: failed to clone upperpath
[   37.031121][  T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133
[   37.603012][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   37.764219][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.775622][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.785902][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   37.799214][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   37.819921][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.828918][   T10] usb 4-1: config 0 descriptor??
[   37.848351][ T1030] __nla_validate_parse: 3 callbacks suppressed
[   37.848376][ T1030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.232'.
[   38.253029][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.253139][  T920] Bluetooth: hci0: command 0x1003 tx timeout
[   38.439148][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   38.445997][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   38.454832][   T10] usb 4-1: USB disconnect, device number 5
[   38.524028][ T1056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   38.583052][ T1057] rust_binder: Write failure EINVAL in pid:41
[   38.636425][ T1060] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'.
[   38.941876][ T1087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.252'.
[   39.016371][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   39.016413][   T36] audit: type=1400 audit(1750781984.124:269): avc:  denied  { shutdown } for  pid=1088 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.084595][   T36] audit: type=1400 audit(1750781984.194:270): avc:  denied  { create } for  pid=1091 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   39.106185][   T36] audit: type=1400 audit(1750781984.194:271): avc:  denied  { sqpoll } for  pid=1091 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   39.139805][ T1105] 9pnet_fd: Insufficient options for proto=fd
[   39.191165][   T36] audit: type=1400 audit(1750781984.294:272): avc:  denied  { read } for  pid=1112 comm="syz.1.261" path="socket:[8051]" dev="sockfs" ino=8051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.429339][ T1116] netlink: 104 bytes leftover after parsing attributes in process `syz.4.262'.
[   39.456587][   T36] audit: type=1400 audit(1750781984.564:273): avc:  denied  { bind } for  pid=1117 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.482997][   T36] audit: type=1400 audit(1750781984.564:274): avc:  denied  { listen } for  pid=1117 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.508504][   T36] audit: type=1400 audit(1750781984.564:275): avc:  denied  { write } for  pid=1117 comm="syz.4.263" path="socket:[7086]" dev="sockfs" ino=7086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.535492][   T36] audit: type=1400 audit(1750781984.564:276): avc:  denied  { accept } for  pid=1117 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.557873][   T36] audit: type=1400 audit(1750781984.564:277): avc:  denied  { read } for  pid=1117 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.616117][ T1120] netlink: 'syz.4.264': attribute type 5 has an invalid length.
[   39.625526][ T1120] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.264'.
[   39.637002][ T1120] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   39.637031][ T1120] rust_binder: Error while translating object.
[   39.650857][ T1120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.658343][ T1120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[   39.678862][   T36] audit: type=1400 audit(1750781984.784:278): avc:  denied  { getopt } for  pid=1121 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.691057][ T1122] x_tables: duplicate underflow at hook 2
[   40.052974][  T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   40.202951][  T310] usb 4-1: Using ep0 maxpacket: 32
[   40.210411][  T310] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   40.220857][  T310] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[   40.242933][  T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.257944][  T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.267489][  T310] usb 4-1: Product: ъ
[   40.271708][  T310] usb 4-1: Manufacturer: ࠚ
[   40.276950][  T310] usb 4-1: SerialNumber: syz
[   40.332167][ T1138] netlink: 104 bytes leftover after parsing attributes in process `syz.2.271'.
[   40.915952][ T1149] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[   40.916038][ T1149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   40.925356][ T1149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:63
[   41.022071][ T1157] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=158 sclass=netlink_xfrm_socket pid=1157 comm=syz.4.277
[   41.039511][ T1157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'.
[   41.257223][ T1172] netlink: 104 bytes leftover after parsing attributes in process `syz.2.280'.
[   42.119931][ T1181] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   42.182185][ T1186] kvm: pic: non byte write
[   42.187449][ T1186] random: crng reseeded on system resumption
[   42.266615][ T1196] netlink: 104 bytes leftover after parsing attributes in process `syz.2.289'.
[   42.286645][ T1197] mmap: syz.1.287 (1197) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   42.834693][  T310] cdc_ncm 4-1:1.0: bind() failure
[   42.850237][  T310] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   42.858219][  T310] cdc_ncm 4-1:1.1: bind() failure
[   42.865920][  T310] usb 4-1: USB disconnect, device number 6
[   42.899077][ T1218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.899116][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[   43.252987][  T310] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[   43.424082][  T310] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8
[   43.435050][  T310] usb 4-1: config 0 interface 0 has no altsetting 0
[   43.441709][  T310] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[   43.450884][  T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.462604][ T1228] overlayfs: failed to clone upperpath
[   43.463381][  T310] usb 4-1: config 0 descriptor??
[   43.473410][ T1222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   43.490851][ T1230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.299'.
[   43.514521][ T1232] SELinux:  Context system_u:object_r:usb_device_t:s0 is not valid (left unmapped).
[   43.525451][ T1232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.300'.
[   43.885726][  T310] lenovo 0003:17EF:60B5.0001: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0
[   44.086494][ T1222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   44.086534][ T1222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:171
[   44.099972][  T306] usb 4-1: USB disconnect, device number 7
[   44.122489][ T1246] overlayfs: failed to clone upperpath
[   44.158749][   T36] kauditd_printk_skb: 25 callbacks suppressed
[   44.158769][   T36] audit: type=1400 audit(1750781989.264:304): avc:  denied  { mount } for  pid=1251 comm="syz.1.307" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   44.204546][ T1255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.308'.
[   44.287000][ T1277] syz.2.316 uses obsolete (PF_INET,SOCK_PACKET)
[   44.294959][ T1276] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   44.315043][ T1279] macsec0: mtu less than device minimum
[   44.418764][ T1292] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   44.420065][   T36] audit: type=1400 audit(1750781989.524:305): avc:  denied  { remount } for  pid=1291 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   44.427673][ T1292] rust_binder: Write failure EINVAL in pid:98
[   44.449017][ T1293] rust_binder: Write failure EINVAL in pid:98
[   44.467661][ T1297] overlayfs: failed to resolve './file0': -2
[   44.616640][   T36] audit: type=1326 audit(1750781989.724:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1304 comm="syz.3.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd106d8e929 code=0x0
[   45.420744][   T36] audit: type=1400 audit(1750781990.524:307): avc:  denied  { map } for  pid=1327 comm="syz.1.336" path="/dev/rnullb0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usb_device_t:s0"
[   45.599874][   T36] audit: type=1400 audit(1750781990.704:308): avc:  denied  { create } for  pid=1334 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   45.801393][   T36] audit: type=1400 audit(1750781990.904:309): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   45.821585][   T36] audit: type=1400 audit(1750781990.904:310): avc:  denied  { map } for  pid=1341 comm="syz.2.340" path="socket:[8512]" dev="sockfs" ino=8512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   45.837862][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180
[   45.874051][ T1347] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.883801][ T1347] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   45.890389][ T1347] rust_binder: Error while translating object.
[   45.901224][ T1347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.907735][ T1347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182
[   46.320252][   T36] audit: type=1400 audit(1750781991.424:311): avc:  denied  { create } for  pid=1355 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   46.406343][   T36] audit: type=1400 audit(1750781991.514:312): avc:  denied  { ioctl } for  pid=1365 comm="syz.1.348" path="socket:[9889]" dev="sockfs" ino=9889 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.445987][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[   46.585943][   T36] audit: type=1400 audit(1750781991.694:313): avc:  denied  { read } for  pid=1394 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   46.611838][ T1401] netlink: 'syz.1.359': attribute type 12 has an invalid length.
[   46.793962][ T1417] overlay: ./file0 is not a directory
[   46.826115][  T750] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   46.982969][  T750] usb 4-1: Using ep0 maxpacket: 32
[   46.989503][  T750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.000746][  T750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.010952][  T750] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.026830][  T750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.037323][  T750] usb 4-1: config 0 descriptor??
[   47.043588][  T750] hub 4-1:0.0: USB hub found
[   47.223208][ T1459] overlayfs: failed to clone upperpath
[   47.243573][  T750] hub 4-1:0.0: 1 port detected
[   47.445592][  T750] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   47.452307][  T750] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   47.462606][  T750] usbhid 4-1:0.0: can't add hid device: -71
[   47.469803][  T750] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   47.495796][  T750] usb 4-1: USB disconnect, device number 8
[   47.566430][ T1499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1499 comm=syz.2.390
[   47.582020][ T1499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[   47.657162][ T1509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116
[   47.658240][ T1509] rust_binder: Read failure Err(EFAULT) in pid:116
[   47.747319][ T1514] __vm_enough_memory: pid: 1514, comm: syz.4.396, bytes: 70373039144960 not enough memory for the allocation
[   48.028831][ T1516] vlan0: mtu greater than device maximum
[   48.057260][ T1522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.399'.
[   48.172610][ T1549] rust_binder: Write failure EINVAL in pid:127
[   48.191910][ T1553] netlink: 104 bytes leftover after parsing attributes in process `syz.1.412'.
[   48.277856][ T1572] batadv_slave_0: entered promiscuous mode
[   48.286060][ T1570] batadv_slave_0: left promiscuous mode
[   48.399338][ T1601] fuse: Unknown parameter 'ft'
[   48.432302][ T1610] 9pnet_fd: Insufficient options for proto=fd
[   48.461029][ T1617] tipc: Started in network mode
[   48.470007][ T1616] fuse: Bad value for 'rootmode'
[   48.475480][ T1617] tipc: Node identity 4, cluster identity 4711
[   48.484648][ T1617] tipc: Node number set to 4
[   48.565816][ T1628] netlink: 260 bytes leftover after parsing attributes in process `syz.2.436'.
[   48.606165][ T1642] binder: Bad value for 'max'
[   48.664829][ T1647] netlink: 57 bytes leftover after parsing attributes in process `syz.2.444'.
[   48.674973][ T1648] netlink: 57 bytes leftover after parsing attributes in process `syz.2.444'.
[   48.790538][ T1664] 9pnet_fd: Insufficient options for proto=fd
[   49.129102][ T1666] IPv4: Oversized IP packet from 127.202.26.0
[   49.322011][ T1692] can0: slcan on ttyS3.
[   49.328041][   T36] kauditd_printk_skb: 21 callbacks suppressed
[   49.328060][   T36] audit: type=1400 audit(1750781994.434:335): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.377039][ T1699] netlink: 393 bytes leftover after parsing attributes in process `syz.3.461'.
[   49.407293][ T1692] can0 (unregistered): slcan off ttyS3.
[   49.413255][ T1699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'.
[   49.431489][   T36] audit: type=1400 audit(1750781994.534:336): avc:  denied  { read } for  pid=1706 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.472077][   T36] audit: type=1400 audit(1750781994.574:337): avc:  denied  { open } for  pid=1706 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.532146][   T36] audit: type=1400 audit(1750781994.574:338): avc:  denied  { getattr } for  pid=1706 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.649780][   T36] audit: type=1400 audit(1750781994.754:339): avc:  denied  { write } for  pid=1701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.715660][   T36] audit: type=1400 audit(1750781994.754:340): avc:  denied  { add_name } for  pid=1701 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.777559][   T36] audit: type=1400 audit(1750781994.814:341): avc:  denied  { read } for  pid=1727 comm="syz.4.467" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   49.847690][ T1737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148
[   49.848230][ T1737] rust_binder: Error while translating object.
[   49.862938][   T36] audit: type=1400 audit(1750781994.814:342): avc:  denied  { open } for  pid=1727 comm="syz.4.467" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   49.863014][ T1737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   49.879615][   T36] audit: type=1400 audit(1750781994.814:343): avc:  denied  { ioctl } for  pid=1727 comm="syz.4.467" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   49.931483][ T1737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148
[   49.972989][   T36] audit: type=1400 audit(1750781994.824:344): avc:  denied  { remove_name } for  pid=1726 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=1364 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.093493][ T1757] tmpfs: Bad value for 'uid'
[   50.100536][ T1757] tmpfs: Bad value for 'uid'
[   50.269932][ T1774] netlink: 'syz.3.480': attribute type 4 has an invalid length.
[   50.286031][ T1774] netlink: 'syz.3.480': attribute type 6 has an invalid length.
[   50.293869][ T1774] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.480'.
[   50.410700][ T1790] binder: Bad value for 'stats'
[   50.432787][ T1792] netlink: 140 bytes leftover after parsing attributes in process `syz.3.489'.
[   50.442681][ T1792] tipc: Enabled bearer <eth:wg1>, priority 10
[   50.516522][ T1804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'.
[   50.544274][ T1806] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   50.566526][ T1812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[   50.870917][ T1838] overlayfs: failed to clone upperpath
[   50.878181][ T1838] netlink: 68 bytes leftover after parsing attributes in process `syz.1.509'.
[   50.888403][ T1840] overlayfs: failed to clone upperpath
[   50.905749][ T1843] netlink: 'syz.1.510': attribute type 4 has an invalid length.
[   50.915339][ T1843] netlink: 'syz.1.510': attribute type 4 has an invalid length.
[   50.950469][ T1850] No source specified
[   51.103754][ T1868] wg2: entered promiscuous mode
[   51.108871][ T1868] wg2: entered allmulticast mode
[   51.232534][ T1876] overlayfs: failed to clone upperpath
[   51.304748][ T1885] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[   51.498952][ T1903] overlayfs: failed to clone upperpath
[   51.519743][ T1907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   51.528566][ T1907] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   51.540622][ T1907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   51.630000][ T1928] overlayfs: failed to resolve './file1': -2
[   53.010029][ T2016] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   53.031064][ T2018] overlayfs: failed to clone upperpath
[   53.668943][ T2050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'.
[   53.679717][ T2050] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96
[   53.705989][ T2056] tipc: Can't bind to reserved service type 0
[   53.812987][ T2066] netlink: 'syz.2.588': attribute type 5 has an invalid length.
[   53.841653][ T2068] capability: warning: `syz.2.589' uses deprecated v2 capabilities in a way that may be insecure
[   54.764440][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   54.764460][   T36] audit: type=1400 audit(1750781999.874:362): avc:  denied  { getopt } for  pid=2093 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.870564][ T2107] batadv_slave_0: entered promiscuous mode
[   55.299592][   T36] audit: type=1400 audit(1750782000.404:363): avc:  denied  { connect } for  pid=2112 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.701523][ T2105] batadv_slave_0: left promiscuous mode
[   55.729711][ T2131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2131 comm=syz.2.615
[   56.130886][   T36] audit: type=1400 audit(1750782001.234:364): avc:  denied  { audit_write } for  pid=2149 comm="syz.3.621" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   56.132156][ T2150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38613 sclass=netlink_route_socket pid=2150 comm=syz.3.621
[   56.296173][ T2163] capability: warning: `syz.2.626' uses 32-bit capabilities (legacy support in use)
[   56.772840][ T2177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'.
[   56.798503][ T2181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'.
[   56.808955][   T36] audit: type=1400 audit(1750782001.914:365): avc:  denied  { read } for  pid=2180 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   56.947115][ T2216] overlayfs: failed to clone upperpath
[   57.121803][ T2236] netlink: 5 bytes leftover after parsing attributes in process `syz.2.649'.
[   57.188600][ T2242] netlink: 57 bytes leftover after parsing attributes in process `syz.2.651'.
[   57.209706][ T2246] overlayfs: failed to clone upperpath
[   57.279330][   T36] audit: type=1400 audit(1750782002.384:366): avc:  denied  { lock } for  pid=2261 comm="syz.2.657" path="socket:[11849]" dev="sockfs" ino=11849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.309010][ T2266] 9pnet_fd: p9_fd_create_tcp (2266): problem connecting socket to 127.0.0.1
[   57.319340][ T2266] 9pnet_fd: p9_fd_create_tcp (2266): problem connecting socket to 127.0.0.1
[   57.365867][   T36] audit: type=1400 audit(1750782002.474:367): avc:  denied  { create } for  pid=2274 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   57.447474][   T36] audit: type=1400 audit(1750782002.554:369): avc:  denied  { create } for  pid=2288 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[   57.467214][   T36] audit: type=1400 audit(1750782002.554:368): avc:  denied  { create } for  pid=2288 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[   57.577632][ T2309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.674'.
[   57.587466][ T2311] overlayfs: failed to clone upperpath
[   57.796752][ T2318] netlink: 128 bytes leftover after parsing attributes in process `syz.4.677'.
[   57.842462][   T36] audit: type=1400 audit(1750782002.944:370): avc:  denied  { getopt } for  pid=2323 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.071044][   T36] audit: type=1400 audit(1750782003.174:371): avc:  denied  { block_suspend } for  pid=2351 comm="syz.4.691" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.268706][ T2363] overlayfs: failed to clone upperpath
[   58.329003][ T2379] rust_binder: Write failure EFAULT in pid:227
[   58.522513][ T2422] overlayfs: failed to clone upperpath
[   59.453291][ T2483] overlayfs: failed to clone upperpath
[   59.474786][ T2488] netlink: 124 bytes leftover after parsing attributes in process `syz.1.741'.
[   59.818016][ T2501] tipc: Failed to remove unknown binding: 66,1,1/4:3282777480/3282777482
[   59.826581][ T2501] tipc: Failed to remove unknown binding: 66,1,1/4:3282777480/3282777482
[   59.978647][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   59.978663][   T36] audit: type=1326 audit(1750782005.084:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.3.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd106d8e929 code=0x0
[   60.070097][   T36] audit: type=1400 audit(1750782005.174:375): avc:  denied  { connect } for  pid=2546 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.090547][   T36] audit: type=1107 audit(1750782005.194:376): pid=2551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='<m��+���D
[   60.090547][   T36] ��F��}sU�OM�t���|Il̹B�J���Yղ�/U��	�;�>�F0����Λ�D�q�o�'
[   60.112797][   T36] audit: type=1326 audit(1750782005.194:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.3.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd106d8e929 code=0x0
[   60.142731][   T36] audit: type=1400 audit(1750782005.244:378): avc:  denied  { execute } for  pid=2566 comm="syz.1.764" path="/dev/rnullb0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:usb_device_t:s0"
[   60.987512][ T2592] netlink: 'syz.1.773': attribute type 5 has an invalid length.
[   60.998782][ T2592] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.773'.
[   61.292431][ T2614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[   61.377592][   T36] audit: type=1400 audit(1750782006.484:379): avc:  denied  { create } for  pid=2617 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   61.621734][ T2645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246
[   61.622134][ T2645] rust_binder: Error while translating object.
[   61.632024][ T2645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   61.641919][ T2645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246
[   61.688576][ T2650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'.
[   61.714791][ T2650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'.
[   61.744029][   T36] audit: type=1400 audit(1750782006.854:380): avc:  denied  { mount } for  pid=2654 comm="syz.3.795" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   61.775160][   T36] audit: type=1400 audit(1750782006.884:381): avc:  denied  { search } for  pid=2654 comm="syz.3.795" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   61.797621][   T36] audit: type=1400 audit(1750782006.884:382): avc:  denied  { read } for  pid=2654 comm="syz.3.795" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   61.827837][   T36] audit: type=1400 audit(1750782006.884:383): avc:  denied  { open } for  pid=2654 comm="syz.3.795" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   62.125608][ T2695] binder: Unknown parameter '�p'
[   62.134979][ T2696] rust_binder: Write failure EINVAL in pid:262
[   62.346596][ T2723] fuse: Unknown parameter '000000000000000000000040xffffffffffffffff'
[   62.739125][ T2758] 9pnet_fd: Insufficient options for proto=fd
[   62.939553][ T2786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.843'.
[   62.965339][ T2786] netlink: 43 bytes leftover after parsing attributes in process `syz.4.843'.
[   62.992995][ T2786] netlink: 'syz.4.843': attribute type 6 has an invalid length.
[   63.001309][ T2786] netlink: 'syz.4.843': attribute type 5 has an invalid length.
[   63.009074][ T2786] netlink: 43 bytes leftover after parsing attributes in process `syz.4.843'.
[   63.093149][ T2802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.093185][ T2802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274
[   64.500063][ T2851] tmpfs: Bad value for 'nr_blocks'
[   64.744201][ T2891] x_tables: duplicate underflow at hook 1
[   65.365452][ T2941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.894'.
[   65.374832][ T2941] 0����M: renamed from gretap0 (while UP)
[   65.381367][ T2941] 0����M: entered allmulticast mode
[   65.386929][ T2941] A link change request failed with some changes committed already. Interface 
30����M may have been left with an inconsistent configuration, please check.
[   65.402727][ T2943] netlink: 5 bytes leftover after parsing attributes in process `syz.3.894'.
[   65.411603][ T2943] 1����M: renamed from 
30����M (while UP)
[   65.418373][ T2943] A link change request failed with some changes committed already. Interface 
31����M may have been left with an inconsistent configuration, please check.
[   65.446476][ T2948] netlink: 9 bytes leftover after parsing attributes in process `syz.2.896'.
[   65.455966][ T2948] gretap0: entered promiscuous mode
[   65.462798][ T2948] netlink: 5 bytes leftover after parsing attributes in process `syz.2.896'.
[   65.471711][ T2948] 0��{X��: renamed from gretap0
[   65.477426][ T2948] 0��{X��: left promiscuous mode
[   65.482485][ T2948] 0��{X��: entered allmulticast mode
[   65.488589][ T2948] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   65.603762][ T2958] tmpfs: Unknown parameter 'usrquota'
[   65.644741][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   65.644760][   T36] audit: type=1326 audit(1750782010.754:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2954 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4950f8e929 code=0x7fc00000
[   65.767799][ T2980] overlayfs: failed to clone upperpath
[   65.785682][ T2982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[   66.371521][ T2991] netlink: 25 bytes leftover after parsing attributes in process `syz.1.914'.
[   66.465388][ T3004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'.
[   66.475680][ T3004] netlink: 'syz.4.919': attribute type 4 has an invalid length.
[   66.483709][ T3004] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.919'.
[   66.777537][   T36] audit: type=1400 audit(1750782011.884:394): avc:  denied  { mounton } for  pid=3050 comm="syz.2.937" path="/285/file0" dev="tmpfs" ino=1573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   66.832798][ T3061] overlayfs: failed to clone upperpath
[   66.838657][ T3061] overlay: Unknown parameter 'mounts'
[   66.844302][ T3061] overlay: Unknown parameter 'mounts'
[   66.850017][ T3061] overlay: Unknown parameter 'mounts'
[   66.855785][ T3061] overlay: Unknown parameter 'mounts'
[   66.861381][ T3061] overlay: Unknown parameter 'mounts'
[   66.867077][ T3061] overlay: Unknown parameter 'mounts'
[   66.873021][ T3061] overlay: Unknown parameter 'mounts'
[   66.879214][ T3061] overlay: Unknown parameter 'mounts'
[   66.884883][ T3061] overlay: Unknown parameter 'mounts'
[   66.890526][ T3061] overlay: Unknown parameter 'mounts'
[   66.896189][ T3061] overlay: Unknown parameter 'mounts'
[   66.902047][ T3061] overlay: Unknown parameter 'mounts'
[   66.907671][ T3061] overlay: Unknown parameter 'mounts'
[   66.913960][ T3061] overlay: Unknown parameter 'mounts'
[   66.919541][ T3061] overlay: Unknown parameter 'mounts'
[   66.925137][ T3061] overlay: Unknown parameter 'mounts'
[   66.930775][ T3061] overlay: Unknown parameter 'mounts'
[   66.936339][ T3061] overlay: Unknown parameter 'mounts'
[   66.942034][ T3061] overlay: Unknown parameter 'mounts'
[   66.947758][ T3061] overlay: Unknown parameter 'mounts'
[   66.953344][ T3061] overlay: Unknown parameter 'mounts'
[   66.958907][ T3061] overlay: Unknown parameter 'mounts'
[   66.964504][ T3061] overlay: Unknown parameter 'mounts'
[   66.970030][ T3061] overlay: Unknown parameter 'mounts'
[   66.975672][ T3061] overlay: Unknown parameter 'mounts'
[   66.981182][ T3061] overlay: Unknown parameter 'mounts'
[   66.986788][ T3061] overlay: Unknown parameter 'mounts'
[   66.992345][ T3061] overlay: Unknown parameter 'mounts'
[   66.997944][ T3061] overlay: Unknown parameter 'mounts'
[   67.003806][ T3061] overlay: Unknown parameter 'mounts'
[   67.009426][ T3061] overlay: Unknown parameter 'mounts'
[   67.015107][ T3061] overlay: Unknown parameter 'mounts'
[   67.020680][ T3061] overlay: Unknown parameter 'mounts'
[   67.026265][ T3061] overlay: Unknown parameter 'mounts'
[   67.031812][ T3061] overlay: Unknown parameter 'mounts'
[   67.037435][ T3061] overlay: Unknown parameter 'mounts'
[   67.043097][ T3061] overlay: Unknown parameter 'mounts'
[   67.048714][ T3061] overlay: Unknown parameter 'mounts'
[   67.054329][ T3061] overlay: Unknown parameter 'mounts'
[   67.059995][ T3061] overlay: Unknown parameter 'mounts'
[   67.065586][ T3061] overlay: Unknown parameter 'mounts'
[   67.071262][ T3061] overlay: Unknown parameter 'mounts'
[   67.077124][ T3061] overlay: Unknown parameter 'mounts'
[   67.082803][ T3061] overlay: Unknown parameter 'mounts'
[   67.088512][ T3061] overlay: Unknown parameter 'mounts'
[   67.094133][ T3061] overlay: Unknown parameter 'mounts'
[   67.099614][ T3061] overlay: Unknown parameter 'mounts'
[   67.105236][ T3061] overlay: Unknown parameter 'mounts'
[   67.110816][ T3061] overlay: Unknown parameter 'mounts'
[   67.116434][ T3061] overlay: Unknown parameter 'mounts'
[   67.122015][ T3061] overlay: Unknown parameter 'mounts'
[   67.127655][ T3061] overlay: Unknown parameter 'mounts'
[   67.133433][ T3061] overlay: Unknown parameter 'mounts'
[   67.139146][ T3061] overlay: Unknown parameter 'mounts'
[   67.144767][ T3061] overlay: Unknown parameter 'mounts'
[   67.150339][ T3061] overlay: Unknown parameter 'mounts'
[   67.155998][ T3061] overlay: Unknown parameter 'mounts'
[   67.161601][ T3061] overlay: Unknown parameter 'mounts'
[   67.167229][ T3061] overlay: Unknown parameter 'mounts'
[   67.172816][ T3061] overlay: Unknown parameter 'mounts'
[   67.178384][ T3061] overlay: Unknown parameter 'mounts'
[   67.183966][ T3061] overlay: Unknown parameter 'mounts'
[   67.460629][   T36] audit: type=1400 audit(1750782012.564:395): avc:  denied  { append } for  pid=3088 comm="syz.4.952" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   67.955832][ T3095] binder: Bad value for 'max'
[   68.019320][   T36] audit: type=1400 audit(1750782013.124:396): avc:  denied  { append } for  pid=3099 comm="syz.4.956" name="pfkey" dev="proc" ino=4026532651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   68.509261][ T3115] netlink: 22 bytes leftover after parsing attributes in process `syz.3.960'.
[   69.099125][ T3141] raw_sendmsg: syz.2.970 forgot to set AF_INET. Fix it!
[   69.138031][ T3150] overlayfs: failed to clone upperpath
[   69.178217][ T3161] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   69.178246][ T3161] rust_binder: Read failure Err(EFAULT) in pid:312
[   69.195936][ T3163] vlan0: mtu greater than device maximum
[   69.204022][ T3166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'.
[   69.371634][   T36] audit: type=1400 audit(1750782014.474:397): avc:  denied  { setopt } for  pid=3192 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   69.488630][   T36] audit: type=1326 audit(1750782014.594:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3124 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   70.300647][ T3224] overlayfs: failed to clone upperpath
[   70.398683][   T36] audit: type=1400 audit(1750782015.504:399): avc:  denied  { map } for  pid=3237 comm="syz.1.1004" path="socket:[14661]" dev="sockfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.447101][   T36] audit: type=1400 audit(1750782015.504:400): avc:  denied  { accept } for  pid=3237 comm="syz.1.1004" path="socket:[14661]" dev="sockfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   70.475710][ T3249] fuse: Bad value for 'group_id'
[   70.480721][ T3249] fuse: Bad value for 'group_id'
[   70.678657][   T36] audit: type=1326 audit(1750782015.784:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3271 comm="syz.2.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4950f8e929 code=0x0
[   71.013410][   T36] audit: type=1400 audit(1750782016.124:402): avc:  denied  { map } for  pid=3281 comm="syz.4.1021" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   71.038414][ T3282] rust_binder: Write failure EINVAL in pid:328
[   71.039632][   T36] audit: type=1400 audit(1750782016.144:403): avc:  denied  { execute } for  pid=3281 comm="syz.4.1021" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   71.185138][ T3291] exFAT-fs (rnullb0): invalid boot record signature
[   71.191976][ T3291] exFAT-fs (rnullb0): failed to read boot sector
[   71.198721][ T3291] exFAT-fs (rnullb0): failed to recognize exfat type
[   71.451792][ T3313] input: syz1 as /devices/virtual/input/input7
[   71.459393][   T36] audit: type=1400 audit(1750782016.564:404): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   71.494542][   T36] audit: type=1400 audit(1750782016.564:405): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   71.525183][   T36] audit: type=1400 audit(1750782016.564:406): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   71.605752][ T3344] SELinux: security_context_str_to_sid () failed with errno=-22
[   71.618350][ T3343] cgroup: fork rejected by pids controller in /syz4
[   71.789095][ T2665] bridge0: port 3(syz_tun) entered disabled state
[   71.800271][ T2665] syz_tun (unregistering): left allmulticast mode
[   71.807125][ T2665] syz_tun (unregistering): left promiscuous mode
[   71.813626][ T2665] bridge0: port 3(syz_tun) entered disabled state
[   71.998236][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.005373][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.012604][ T3449] bridge_slave_0: entered allmulticast mode
[   72.019082][ T3449] bridge_slave_0: entered promiscuous mode
[   72.025901][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.033187][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.040312][ T3449] bridge_slave_1: entered allmulticast mode
[   72.046769][ T3449] bridge_slave_1: entered promiscuous mode
[   72.118918][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.126214][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.136031][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.143138][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.171670][ T3449] veth0_vlan: entered promiscuous mode
[   72.183827][ T3449] veth1_macvtap: entered promiscuous mode
[   72.228040][   T36] audit: type=1400 audit(1750782017.334:407): avc:  denied  { append } for  pid=3457 comm="syz.4.1044" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   72.597042][ T3493] overlayfs: failed to clone upperpath
[   72.659635][ T3505] overlayfs: failed to clone upperpath
[   73.573512][ T3533] overlayfs: failed to clone upperpath
[   73.624670][ T3542] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   74.540110][   T36] audit: type=1326 audit(1750782019.644:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.1.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fe7fcf8e929 code=0x0
[   74.886883][ T3662] No source specified
[   74.891617][ T3662] veth0_to_batadv: entered promiscuous mode
[   74.929098][ T3668] cgroup2: Unknown parameter '��������'
[   75.055962][ T3705] overlayfs: failed to resolve './file1': -2
[   75.087012][   T36] audit: type=1400 audit(1750782020.194:409): avc:  denied  { accept } for  pid=3709 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.308012][ T3717] random: crng reseeded on system resumption
[   75.519154][ T3725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'.
[   75.553748][ T3731] can0: slcan on ttyS3.
[   75.604392][ T3731] can0 (unregistered): slcan off ttyS3.
[   75.674911][ T3751] fuse: Bad value for 'fd'
[   75.831858][   T36] audit: type=1400 audit(1750782020.934:410): avc:  denied  { accept } for  pid=3786 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   75.870288][ T3796] overlayfs: failed to resolve './bus': -2
[   75.877222][ T3796] overlayfs: failed to clone upperpath
[   75.886355][ T3796] overlayfs: failed to clone upperpath
[   75.892772][ T3796] overlayfs: failed to clone upperpath
[   75.899841][ T3796] overlayfs: failed to clone upperpath
[   75.906843][ T3796] overlayfs: failed to clone upperpath
[   75.914336][ T3796] overlayfs: failed to clone upperpath
[   75.920508][ T3804] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1152'.
[   75.934230][ T3796] overlayfs: failed to clone upperpath
[   75.941736][ T3796] overlayfs: failed to clone upperpath
[   75.948537][ T3796] overlayfs: failed to clone upperpath
[   75.956317][ T3796] overlayfs: failed to clone upperpath
[   75.963287][ T3796] overlayfs: failed to clone upperpath
[   75.969754][ T3796] overlayfs: failed to clone upperpath
[   75.976716][ T3796] overlayfs: failed to clone upperpath
[   75.983691][ T3796] overlayfs: failed to clone upperpath
[   75.994313][ T3796] overlayfs: failed to clone upperpath
[   76.000564][ T3796] overlayfs: failed to clone upperpath
[   76.007619][ T3796] overlayfs: failed to clone upperpath
[   76.017486][ T3796] overlayfs: failed to clone upperpath
[   76.025786][ T3796] overlayfs: failed to clone upperpath
[   76.043599][ T3796] overlayfs: failed to clone upperpath
[   76.050507][ T3796] overlayfs: failed to clone upperpath
[   76.057142][ T3796] overlayfs: failed to clone upperpath
[   76.064463][ T3796] overlayfs: failed to clone upperpath
[   76.073379][ T3796] overlayfs: failed to clone upperpath
[   76.084236][ T3796] overlayfs: failed to clone upperpath
[   76.094207][ T3796] overlayfs: failed to clone upperpath
[   76.102375][ T3796] overlayfs: failed to clone upperpath
[   76.114532][ T3796] overlayfs: failed to clone upperpath
[   76.121933][ T3796] overlayfs: failed to clone upperpath
[   76.134708][ T3796] overlayfs: failed to clone upperpath
[   76.147622][ T3796] overlayfs: failed to clone upperpath
[   76.155970][ T3796] overlayfs: failed to clone upperpath
[   76.700909][ T3856] tmpfs: Unknown parameter 'quota'
[   77.552737][ T3884] overlayfs: failed to clone upperpath
[   77.808617][ T3907] overlayfs: failed to resolve './file1': -2
[   78.712958][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'.
[   78.870769][ T3942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=3942 comm=syz.1.1200
[   79.451979][ T3964] overlayfs: missing 'workdir'
[   79.468613][   T36] audit: type=1400 audit(1750782024.574:411): avc:  denied  { rename } for  pid=3966 comm="syz.1.1209" name="file0" dev="tmpfs" ino=2344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   79.470717][ T3967] overlayfs: failed to clone upperpath
[   79.527755][ T3971] tipc: Started in network mode
[   79.535426][ T3971] tipc: Node identity ac1414aa, cluster identity 4711
[   79.544051][ T3971] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   79.980741][ T3982] SELinux: failed to load policy
[   79.981508][   T36] audit: type=1400 audit(1750782025.084:412): avc:  denied  { load_policy } for  pid=3981 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   80.011762][   T36] audit: type=1400 audit(1750782025.114:413): avc:  denied  { append } for  pid=3984 comm="syz.4.1216" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.013671][ T3985] overlay: Unknown parameter 'obj_type'
[   80.168178][   T36] audit: type=1400 audit(1750782025.274:414): avc:  denied  { mounton } for  pid=4021 comm="syz.1.1228" path="/422/file0" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   80.665585][ T4040] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   80.676274][ T4040] rust_binder: Error while translating object.
[   80.676302][ T4040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   80.685190][ T4040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[   80.722145][   T36] audit: type=1400 audit(1750782025.824:415): avc:  denied  { shutdown } for  pid=4043 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   80.734333][ T4044] rust_binder: Error while translating object.
[   80.753439][ T4044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   80.759757][ T4044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65
[   80.802668][   T36] audit: type=1400 audit(1750782025.904:416): avc:  denied  { append } for  pid=4052 comm="syz.4.1238" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   80.843091][ T4057] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.843863][ T4058] rust_binder: Write failure EINVAL in pid:76
[   81.378851][ T4085] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   81.395330][ T4085] rust_binder: Write failure EINVAL in pid:82
[   81.409569][ T4093] rust_binder: Error while translating object.
[   81.416064][ T4093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   81.422776][ T4093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84
[   81.463469][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'.
[   81.487013][ T4104] overlayfs: missing 'lowerdir'
[   81.536116][ T4107] overlayfs: unescaped trailing colons in lowerdir mount option.
[   81.546383][ T4107] 9pnet_fd: p9_fd_create_tcp (4107): problem connecting socket to 127.0.0.1
[   81.631170][   T36] audit: type=1400 audit(1750782026.734:417): avc:  denied  { execute } for  pid=4106 comm="syz.4.1257" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.722096][ T4123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95
[   81.723050][ T4123] binder: Bad value for 'max'
[   81.749493][ T4130] overlay: Bad value for 'verity'
[   81.755735][ T4130] overlay: Bad value for 'verity'
[   81.762531][ T4130] overlay: Bad value for 'verity'
[   81.770241][ T4130] overlay: Bad value for 'verity'
[   81.781049][ T4130] overlay: Bad value for 'verity'
[   81.790981][ T4130] overlay: Bad value for 'verity'
[   81.796890][ T4130] overlay: Bad value for 'verity'
[   81.873440][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'.
[   81.932924][   T36] audit: type=1400 audit(1750782027.034:418): avc:  denied  { create } for  pid=4154 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   82.552902][   T36] audit: type=1400 audit(1750782027.654:419): avc:  denied  { execmem } for  pid=4169 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   82.557953][ T4171] overlayfs: failed to clone upperpath
[   82.590141][   T36] audit: type=1326 audit(1750782027.694:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.619615][   T36] audit: type=1326 audit(1750782027.694:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.645767][   T36] audit: type=1326 audit(1750782027.694:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.676936][   T36] audit: type=1326 audit(1750782027.694:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.709970][   T36] audit: type=1326 audit(1750782027.694:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.738282][   T36] audit: type=1326 audit(1750782027.694:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.769002][   T36] audit: type=1326 audit(1750782027.694:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x7fc00000
[   82.825453][ T4184] netlink: 'syz.1.1277': attribute type 32 has an invalid length.
[   82.836339][ T4184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4184 comm=syz.1.1277
[   82.853475][ T4184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=4184 comm=syz.1.1277
[   82.885090][ T4193] netlink: 'syz.3.1281': attribute type 4 has an invalid length.
[   82.887315][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'.
[   83.013659][ T4221] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1290'.
[   83.662810][ T4261] /dev/rnullb0: Can't lookup blockdev
[   83.704082][ T4268] SELinux:  Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped).
[   83.753089][ T4278] netlink: 'syz.3.1310': attribute type 4 has an invalid length.
[   83.760873][ T4278] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1310'.
[   83.912068][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'.
[   83.964341][ T4309] tmpfs: Bad value for 'uid'
[   83.968998][ T4309] tmpfs: Bad value for 'uid'
[   83.990020][ T4311] fuse: Unknown parameter 'f0x0000000000000003'
[   84.596243][ T4339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4339 comm=syz.3.1331
[   85.095759][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'.
[   85.312538][ T4395] binder: Bad value for 'stats'
[   85.394198][ T4409] binder: Unknown parameter 'smackfsfloor'
[   85.507470][ T4421] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1360'.
[   85.776026][ T4442] fuse: Unknown parameter '>roup_d-00000000000000000000'
[   85.809262][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1370'.
[   85.819223][ T4444] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1370'.
[   85.828996][ T4444] 1����M: entered promiscuous mode
[   85.834459][ T4444] 1����M: left allmulticast mode
[   85.841717][ T4444] 0��{X��: renamed from 
31����M
[   85.848027][ T4444] 0��{X��: left promiscuous mode
[   85.853705][ T4444] 0��{X��: entered allmulticast mode
[   85.859873][ T4444] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   85.892227][ T4446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4446 comm=syz.3.1371
[   86.377345][ T4546] xfrm0: mtu less than device minimum
[   86.499298][ T4574] __nla_validate_parse: 2 callbacks suppressed
[   86.499323][ T4574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1416'.
[   86.944317][ T4596] overlayfs: failed to clone upperpath
[   87.031149][ T4619] TCP: TCP_TX_DELAY enabled
[   87.208581][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'.
[   87.218195][ T4644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4644 comm=syz.1.1444
[   87.271398][   T36] kauditd_printk_skb: 140 callbacks suppressed
[   87.271459][   T36] audit: type=1400 audit(1750782032.374:567): avc:  denied  { bind } for  pid=4656 comm="syz.3.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   87.804205][   T36] audit: type=1400 audit(1750782032.914:568): avc:  denied  { create } for  pid=4677 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   87.849870][ T4689] overlay: Unknown parameter 'mounts'
[   87.855613][ T4689] overlay: Unknown parameter 'mounts'
[   87.861306][ T4689] overlay: Unknown parameter 'mounts'
[   87.867110][ T4689] overlay: Unknown parameter 'mounts'
[   87.873513][ T4689] overlay: Unknown parameter 'mounts'
[   87.880298][ T4689] overlay: Unknown parameter 'mounts'
[   87.886200][ T4689] overlay: Unknown parameter 'mounts'
[   87.891892][ T4689] overlay: Unknown parameter 'mounts'
[   87.897840][ T4689] overlay: Unknown parameter 'mounts'
[   87.903678][ T4689] overlay: Unknown parameter 'mounts'
[   87.909344][ T4689] overlay: Unknown parameter 'mounts'
[   87.919493][ T4689] overlay: Unknown parameter 'mounts'
[   87.927105][ T4689] overlay: Unknown parameter 'mounts'
[   87.934067][ T4689] overlay: Unknown parameter 'mounts'
[   87.939771][ T4689] overlay: Unknown parameter 'mounts'
[   87.946352][ T4689] overlay: Unknown parameter 'mounts'
[   87.957920][ T4689] overlay: Unknown parameter 'mounts'
[   87.963861][ T4689] overlay: Unknown parameter 'mounts'
[   87.970495][ T4689] overlay: Unknown parameter 'mounts'
[   88.034275][ T4689] overlay: Unknown parameter 'mounts'
[   88.052863][ T4689] overlay: Unknown parameter 'mounts'
[   88.058726][ T4689] overlay: Unknown parameter 'mounts'
[   88.080650][ T4689] overlay: Unknown parameter 'mounts'
[   88.088230][ T4689] overlay: Unknown parameter 'mounts'
[   88.106860][ T4689] overlay: Unknown parameter 'mounts'
[   88.127024][ T4689] overlay: Unknown parameter 'mounts'
[   88.153235][ T4689] overlay: Unknown parameter 'mounts'
[   88.179569][ T4689] overlay: Unknown parameter 'mounts'
[   88.209581][ T4689] overlay: Unknown parameter 'mounts'
[   88.236203][ T4689] overlay: Unknown parameter 'mounts'
[   88.269269][ T4689] overlay: Unknown parameter 'mounts'
[   88.301495][ T4689] overlay: Unknown parameter 'mounts'
[   88.333690][ T4689] overlay: Unknown parameter 'mounts'
[   88.375737][   T36] audit: type=1326 audit(1750782033.484:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm="syz.4.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc6b38e929 code=0x0
[   89.075931][ T4773] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1488'.
[   89.106246][ T4777] overlayfs: failed to clone upperpath
[   89.114982][ T4773] netlink: 393 bytes leftover after parsing attributes in process `syz.2.1488'.
[   89.228181][ T4805] /dev/rnullb0: Can't lookup blockdev
[   89.714914][ T4832] overlayfs: failed to clone upperpath
[   89.723130][   T36] audit: type=1400 audit(1750782034.834:570): avc:  denied  { read } for  pid=4831 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.582926][   T36] audit: type=1400 audit(1750782035.684:571): avc:  denied  { listen } for  pid=4844 comm="syz.2.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   90.615485][   T36] audit: type=1400 audit(1750782035.694:572): avc:  denied  { bpf } for  pid=4846 comm="syz.2.1517" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.757858][   T36] audit: type=1326 audit(1750782035.864:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.1526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4950f8e929 code=0x0
[   91.980697][   T36] audit: type=1400 audit(1750782037.084:574): avc:  denied  { setattr } for  pid=4916 comm="syz.3.1540" name="PINGv6" dev="sockfs" ino=20053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.311448][   T36] audit: type=1400 audit(1750782037.414:575): avc:  denied  { create } for  pid=4937 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   92.460465][ T4953] fuse: Bad value for 'fd'
[   92.507442][ T4959] overlay: ./file1 is not a directory
[   92.557370][ T4967] fuse: Bad value for 'group_id'
[   92.562377][ T4967] fuse: Bad value for 'group_id'
[   92.624752][ T4981] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   92.624765][ T4980] rust_binder: Error in use_page_slow: ESRCH
[   92.624781][ T4980] rust_binder: use_range failure ESRCH
[   92.663913][ T4981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   92.669457][ T4981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:157
[   92.712929][ T4980] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   92.742003][ T4980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   92.772509][ T4980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:157
[   92.980830][ T5005] rust_binder: Write failure EFAULT in pid:171
[   93.086860][   T36] audit: type=1400 audit(1750782038.194:576): avc:  denied  { sqpoll } for  pid=5017 comm="syz.3.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   93.180110][ T5021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1576'.
[   93.804052][   T36] audit: type=1326 audit(1750782038.914:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.3.1583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd106d8e929 code=0x0
[   94.744982][  T305] tipc: Subscription rejected, illegal request
[   95.707517][ T5094] overlayfs: failed to clone upperpath
[   95.715170][ T5094] overlayfs: failed to clone upperpath
[   95.759827][ T5109] tmpfs: Unknown parameter '��0x0000000000000000'
[   96.037328][ T5126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5126 comm=syz.2.1610
[   96.142990][ T5133] kvm: pic: non byte write
[   96.148288][ T5133] random: crng reseeded on system resumption
[   96.454841][ T5141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184
[   96.475811][   T36] audit: type=1400 audit(1750782041.584:578): avc:  denied  { associate } for  pid=5142 comm="syz.4.1617" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   96.707642][ T5177] overlayfs: failed to clone upperpath
[   96.911623][   T36] audit: type=1400 audit(1750782042.014:579): avc:  denied  { setopt } for  pid=5187 comm="syz.1.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   97.404240][   T36] audit: type=1400 audit(1750782042.514:580): avc:  denied  { accept } for  pid=5210 comm="syz.4.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.446449][   T36] audit: type=1400 audit(1750782042.514:581): avc:  denied  { write } for  pid=5210 comm="syz.4.1639" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.473114][   T36] audit: type=1400 audit(1750782042.514:582): avc:  denied  { open } for  pid=5210 comm="syz.4.1639" path="/dev/usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.497053][   T36] audit: type=1400 audit(1750782042.544:583): avc:  denied  { read } for  pid=5210 comm="syz.4.1639" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.535328][ T5218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   97.535367][ T5218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:195
[   97.566007][ T5221] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.654418][ T5230] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   97.671470][ T5230] rust_binder: Read failure Err(EFAULT) in pid:204
[   97.862604][ T5238] rust_binder: Write failure EFAULT in pid:209
[   97.926081][ T5235] binder: Unknown parameter '}�dDh���^ǯ%�t�G��VJ�c�~���8T���*�g���Ȅ��)���)0���Ȇ��;U^BH`�b�QH'
[   99.933359][ T5297] netlink: 'syz.2.1668': attribute type 4 has an invalid length.
[  100.361351][ T5324] overlayfs: failed to resolve './file1': -2
[  100.514004][   T36] audit: type=1326 audit(1750782045.624:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.1.1685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x0
[  100.554946][ T5364] 9pnet_fd: Insufficient options for proto=fd
[  100.563170][   T36] audit: type=1326 audit(1750782045.664:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.1.1685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x0
[  100.600763][ T5366] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  100.726773][ T5388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63013 sclass=netlink_route_socket pid=5388 comm=syz.2.1698
[  100.742473][   T36] audit: type=1400 audit(1750782045.844:586): avc:  denied  { mount } for  pid=5387 comm="syz.2.1698" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  101.103244][ T5411] overlayfs: failed to clone upperpath
[  101.183821][ T5428] overlayfs: failed to clone upperpath
[  101.189953][   T36] audit: type=1400 audit(1750782046.294:587): avc:  denied  { append } for  pid=5424 comm="syz.4.1711" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.216206][ T5418] overlayfs: failed to resolve './file1': -2
[  101.258635][ T5438] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  101.266016][ T5438] rust_binder: Write failure EINVAL in pid:229
[  101.361042][ T5446] netlink: 'syz.2.1718': attribute type 4 has an invalid length.
[  101.383349][ T5446] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1718'.
[  101.388488][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'.
[  101.462643][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'.
[  101.481609][ T5462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5462 comm=syz.2.1720
[  101.497204][ T5466] overlayfs: conflicting options: verity=require,redirect_dir=nofollow
[  101.584930][   T36] audit: type=1326 audit(1750782046.694:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.1734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd106d8e929 code=0x0
[  101.881026][ T5496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240
[  102.244179][   T13] tipc: Subscription rejected, illegal request
[  102.453370][   T36] audit: type=1400 audit(1750782047.564:589): avc:  denied  { mounton } for  pid=5524 comm="syz.4.1747" path="/file1/file0" dev="ramfs" ino=21712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  102.972813][ T5564] /dev/rnullb0: Can't lookup blockdev
[  103.067662][   T36] audit: type=1400 audit(1750782048.174:590): avc:  denied  { setopt } for  pid=5595 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.094448][ T5601] overlayfs: failed to clone upperpath
[  103.258441][ T5620] 9pnet_fd: Insufficient options for proto=fd
[  103.573609][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'.
[  103.583956][ T5624] netlink: 'syz.4.1778': attribute type 6 has an invalid length.
[  103.591813][ T5624] netlink: 'syz.4.1778': attribute type 6 has an invalid length.
[  103.599625][ T5624] netlink: 'syz.4.1778': attribute type 6 has an invalid length.
[  104.159581][   T36] audit: type=1400 audit(1750782049.264:591): avc:  denied  { execute } for  pid=5658 comm="syz.1.1792" name="file0" dev="ramfs" ino=21335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  104.211899][   T36] audit: type=1400 audit(1750782049.264:592): avc:  denied  { execute_no_trans } for  pid=5658 comm="syz.1.1792" path="/file0" dev="ramfs" ino=21335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  104.249690][   T36] audit: type=1400 audit(1750782049.354:593): avc:  denied  { mounton } for  pid=5658 comm="syz.1.1792" path="/file0" dev="ramfs" ino=21335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  104.288286][   T36] audit: type=1400 audit(1750782049.354:594): avc:  denied  { connect } for  pid=5664 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  104.326930][   T36] audit: type=1400 audit(1750782049.384:595): avc:  denied  { create } for  pid=5664 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  104.347476][   T36] audit: type=1400 audit(1750782049.384:596): avc:  denied  { write } for  pid=5664 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  105.014218][   T36] audit: type=1400 audit(1750782050.124:597): avc:  denied  { shutdown } for  pid=5697 comm="syz.3.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  106.183768][ T5744] bpf: Bad value for 'mode'
[  106.206036][ T5744] fuse: Bad value for 'fd'
[  106.343420][ T5754] 9pnet_fd: Insufficient options for proto=fd
[  107.070075][ T5782] /dev/rnullb0: Can't lookup blockdev
[  107.161751][   T36] audit: type=1326 audit(1750782052.264:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.1.1839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7fcf8e929 code=0x0
[  107.195870][ T5797] overlayfs: failed to clone upperpath
[  107.263103][ T5814] binder: Bad value for 'max'
[  107.304740][ T5821] tmpfs: Unknown parameter 'nr_blocp#P'
[  107.731880][ T5889] 9pnet_fd: Insufficient options for proto=fd
[  108.006449][ T5915] overlayfs: failed to clone upperpath
[  108.013900][ T5916] overlayfs: workdir and upperdir must reside under the same mount
[  108.023363][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  108.023379][   T36] audit: type=1400 audit(1750782053.134:600): avc:  denied  { unmount } for  pid=5914 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  108.051692][ T5915] overlayfs: workdir and upperdir must reside under the same mount
[  108.462100][   T36] audit: type=1326 audit(1750782053.564:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.3.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd106d8e929 code=0x0
[  108.503858][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.511018][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.518487][ T5948] bridge_slave_0: entered allmulticast mode
[  108.525090][ T5948] bridge_slave_0: entered promiscuous mode
[  108.531716][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.539254][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.546560][ T5948] bridge_slave_1: entered allmulticast mode
[  108.553583][ T5948] bridge_slave_1: entered promiscuous mode
[  108.636357][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.643490][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.650809][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.657898][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.686409][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.694470][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.706503][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.713635][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.745841][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.752973][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.803638][ T5948] veth0_vlan: entered promiscuous mode
[  108.830833][ T5948] veth1_macvtap: entered promiscuous mode
[  108.917093][ T5968] rust_binder: Error while translating object.
[  108.917128][ T5968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  108.930015][ T5968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2
[  109.000366][   T36] audit: type=1400 audit(1750782054.104:602): avc:  denied  { checkpoint_restore } for  pid=5969 comm="syz.1.1896" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  109.153062][ T5976] FAT-fs (rnullb0): bogus number of reserved sectors
[  109.159808][ T5976] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  109.186992][ T5978] serio: Serial port ttynull
[  109.237465][ T5979] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  109.244707][ T5979] rust_binder: Write failure EINVAL in pid:12
[  109.244723][ T5978] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  109.244744][ T5978] rust_binder: Write failure EINVAL in pid:12
[  109.271073][ T5981] input: syz0 as /devices/virtual/input/input9
[  109.286122][ T5981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15
[  109.286201][ T5981] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  109.295404][ T5981] rust_binder: Read failure Err(EFAULT) in pid:15
[  109.306497][   T13] bridge_slave_1: left allmulticast mode
[  109.323647][   T36] audit: type=1400 audit(1750782054.424:603): avc:  denied  { search } for  pid=5986 comm="syz.3.1900" name="/" dev="configfs" ino=2473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  109.329530][   T13] bridge_slave_1: left promiscuous mode
[  109.364889][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.384628][   T13] bridge_slave_0: left allmulticast mode
[  109.390393][   T13] bridge_slave_0: left promiscuous mode
[  109.396912][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.451028][   T36] audit: type=1400 audit(1750782054.554:604): avc:  denied  { read write } for  pid=6003 comm="syz.1.1907" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.474611][   T36] audit: type=1400 audit(1750782054.554:605): avc:  denied  { open } for  pid=6003 comm="syz.1.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.498817][   T36] audit: type=1400 audit(1750782054.554:606): avc:  denied  { ioctl } for  pid=6003 comm="syz.1.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.624517][   T13] tipc: Left network mode
[  109.629803][   T13] veth1_macvtap: left promiscuous mode
[  109.635426][   T13] veth0_vlan: left promiscuous mode
[  109.686482][  T750] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  109.842972][  T750] usb 2-1: Using ep0 maxpacket: 16
[  109.849640][  T750] usb 2-1: unable to get BOS descriptor or descriptor too short
[  109.858219][  T750] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping
[  109.867614][  T750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.878996][  T750] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.887925][  T750] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  109.903210][  T750] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.912736][  T750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.921347][  T750] usb 2-1: Product: syz
[  109.926006][  T750] usb 2-1: Manufacturer: syz
[  109.930693][  T750] usb 2-1: SerialNumber: syz
[  110.130695][ T6027] /dev/rnullb0: Can't lookup blockdev
[  110.144829][ T6005] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  110.147076][  T750] usb 2-1: 0:2 : does not exist
[  110.170071][  T750] usb 2-1: USB disconnect, device number 6
[  110.259036][   T36] audit: type=1400 audit(1750782055.364:607): avc:  denied  { watch watch_reads } for  pid=6043 comm="syz.3.1920" path="/540/file0" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  110.301647][ T6049] overlayfs: failed to clone upperpath
[  110.538440][   T36] audit: type=1400 audit(1750782055.644:608): avc:  denied  { read } for  pid=6064 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  110.618532][   T36] audit: type=1400 audit(1750782055.724:609): avc:  denied  { sys_module } for  pid=6081 comm="syz.3.1934" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  110.685296][ T6088] rust_binder: BINDER_SET_CONTEXT_MGR already set
Stopping sshd: stopped /usr/sbin/sshd (pid 200)
OK
Stopping crond: stopped /usr/sbin/crond (pid 193)
OK
[  110.687191][ T6089] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.886734][ T6110] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 147)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: [  110.906317][ T6110] rust_binder: Write failure EINVAL in pid:28
[  111.282924][   T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  111.306234][ T6159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'.
[  111.315371][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1951'.
done
[  111.453232][   T31] usb 2-1: Using ep0 maxpacket: 32
[  111.466052][   T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  111.482976][   T31] usb 2-1: config 0 has no interface number 0
[  111.502916][   T31] usb 2-1: config 0 interface 184 altsetting 7 has an endpoint descriptor with address 0xE5, changing to 0x85
[  111.522913][   T31] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  111.552943][   T31] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x85 has invalid maxpacket 41132, setting to 1024
[  111.574967][   T31] usb 2-1: config 0 interface 184 has no altsetting 0
[  111.586109][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  111.602915][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.618001][   T31] usb 2-1: Product: syz
[  111.634454][   T31] usb 2-1: Manufacturer: syz
[  111.639125][   T31] usb 2-1: SerialNumber: syz
Stopping klogd: [  111.646748][   T31] usb 2-1: config 0 descriptor??
[  111.663376][   T31] smsc75xx v1.0.0
[  111.669861][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  111.689308][   T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
OK
Stopping acpid: [  112.466200][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'.
OK
Stopping syslogd: stopped /sbin/syslogd (pid 91)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.237 closed by remote host.
[  113.098299][   T36] kauditd_printk_skb: 22 callbacks suppressed
[  113.098323][   T36] audit: type=1400 audit(1750782058.204:632): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[2872]" dev="pipefs" ino=2872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
Sent SIGTERM to all processes
[  113.354359][   T13] bridge_slave_1: left allmulticast mode
[  113.360035][   T13] bridge_slave_1: left promiscuous mode
[  113.365770][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.373866][   T13] bridge_slave_0: left allmulticast mode
[  113.379550][   T13] bridge_slave_0: left promiscuous mode
[  113.385371][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.574366][  T306] usb 2-1: USB disconnect, device number 7
[  113.583160][   T13] veth1_macvtap: left promiscuous mode
[  113.588730][   T13] veth0_vlan: left promiscuous mode
[  113.884434][   T13] bridge_slave_1: left allmulticast mode
[  113.890112][   T13] bridge_slave_1: left promiscuous mode
[  113.895795][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.903367][   T13] bridge_slave_0: left allmulticast mode
[  113.909010][   T13] bridge_slave_0: left promiscuous mode
[  113.914695][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.922321][   T13] bridge_slave_1: left allmulticast mode
[  113.928022][   T13] bridge_slave_1: left promiscuous mode
[  113.934394][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.941901][   T13] bridge_slave_0: left allmulticast mode
[  113.947635][   T13] bridge_slave_0: left promiscuous mode
[  113.953288][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.155682][   T13] tipc: Disabling bearer <eth:wg1>
[  114.160942][   T13] tipc: Left network mode
[  114.166901][   T13] veth1_macvtap: left promiscuous mode
[  114.172422][   T13] veth0_vlan: left promiscuous mode
[  114.178167][   T13] veth1_macvtap: left promiscuous mode
Sent SIGKILL to[  114.183937][   T13] veth0_vlan: left promiscuous mode
 all processes
Requesting system poweroff
[  115.224561][ T6236] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  115.231250][ T6236] ACPI: PM: Preparing to enter system sleep state S5
[  115.238278][ T6236] kvm: exiting hardware virtualization
[  115.243847][ T6236] reboot: Power down
serialport: VM disconnected.