last executing test programs:

3m20.353996242s ago: executing program 32 (id=2026):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
r5 = dup(r4) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0) (rerun: 32)
write(r6, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) (async)
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r2, 0x0, 0x80000000)

2m37.124305862s ago: executing program 1 (id=2572):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x87)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0xf0ffffff)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]})
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000800)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000701030000000000000000020000080c000640000000000000000944b43370005060478b8cfb2c880ad65a8b1f1d01282c448af1a9d122aa7fdbb62628d1d18d2d5a298e15bfa27f1c05cd9905d80918c1b6d04023d7d788dd2553c3949e28a411dc04d0e07a809b4a003d4c5228ab7174a61e0001f35e9588c6c4023324b3043eab3972279c6ba5115afb7de37bcdf1624137a420e488d35862aab8d72ce343cf7d9b9acd2c4015e9a07cadf194030304994c11e48a2257c897c5f7e6acb2a812458ef2ffb668729a6293ef2e8f"], 0x20}, 0x1, 0x0, 0x0, 0x4008049}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000202505a8a440000102030109021b0001010500010904000703070101ba09050102f7030704074524863da44ddffc57a7eb5133b5be04ae7c33405de41c05008d6dd9d612a635ed51bfaeb0f210ebdc6d8b"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

2m34.024557054s ago: executing program 1 (id=2580):
r0 = userfaultfd(0x80001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x30, r2, 0x301, 0x0, 0x0, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000383000/0x2000)=nil, 0x2000, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r3=>0x0)
r4 = eventfd(0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000003c0))
io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0])
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(r6, &(0x7f00000001c0)='./file1\x00', r6, 0x0, 0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x241e, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0xfffffffe, 0x20, 0x0, r6}, 0x0, 0x0)
pipe2(&(0x7f0000001040)={<r7=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84000)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x561001, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000002180)={<r10=>0x0, "9a76a968dd312f991da8a793cd53f65b"})
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f00000008c0)=ANY=[@ANYRES32=r9, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB=':max'])
tee(r7, r8, 0xfffffffffffffc01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3b, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x7fff, 0x9, 0x3fe, 0x401, 0x8, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x6, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x8, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0xd, 0x48893690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x1, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x7, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10002, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
faccessat2(r6, &(0x7f0000000100)='./file0\x00', 0x64, 0x1000)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE(r11, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001180)=""/4096, 0x1000, 0xff, 0x2, 0x2, 0x1000, 0x4}}, 0x120)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1)

2m33.03769879s ago: executing program 1 (id=2583):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
unshare(0x62040200) (async)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x8010) (async)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4010, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) (async)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async)
recvmmsg(r1, &(0x7f0000003180)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0xfa4144f6c3d0b50}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/96, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xffffffffffffff3f}, 0x5}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000440)=""/27}, {&(0x7f0000000b40)=""/4096}, {&(0x7f0000000540)=""/21}, {&(0x7f0000004540)=""/4096}, {&(0x7f0000005540)=""/4096}, {&(0x7f0000000900)=""/76}, {&(0x7f0000006540)=""/4096}, {&(0x7f0000000780)=""/47}], 0x0, &(0x7f0000001bc0)=""/229}, 0xe8}, {{&(0x7f0000001cc0)=@caif=@rfm, 0x0, &(0x7f0000003040)=[{&(0x7f0000001d40)=""/13}, {&(0x7f0000001d80)=""/160}, {&(0x7f0000009540)=""/4096}, {&(0x7f0000001e40)=""/194}, {&(0x7f0000008540)=""/4096}, {&(0x7f0000001f40)=""/53}, {&(0x7f0000002fc0)=""/116}], 0x0, &(0x7f00000030c0)=""/176}}], 0x1, 0x40002000, &(0x7f0000003700)={0x77359400}) (async)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000a00)=ANY=[]) (async)
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000) (async)
bind$vsock_stream(r0, &(0x7f0000001f80)={0x28, 0x0, 0xffffffff}, 0x10)

2m32.824720764s ago: executing program 1 (id=2584):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x88)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@directio}, {@afid={'afid', 0x3d, 0x8}}]}})
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r6, r0, 0x0, 0x80000000)

2m32.689747766s ago: executing program 1 (id=2585):
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c020000", @ANYRES32=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f401088070"], 0x21c}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

2m32.45130043s ago: executing program 1 (id=2587):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
clock_gettime(0xa, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x2710, 0x5, 0xdddd0000, 0x1000, &(0x7f0000106000/0x1000)=nil, 0x3})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
clock_gettime(0xa, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x0) (async)
fcntl$setlease(r1, 0x400, 0x1) (async)
fcntl$setlease(r1, 0x400, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x2710, 0x5, 0xdddd0000, 0x1000, &(0x7f0000106000/0x1000)=nil, 0x3}) (async)

2m24.855963784s ago: executing program 33 (id=2550):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
fstat(0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@ra={0x94, 0x4}]}}}}})
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)
ioctl$KVM_CREATE_VCPU(r0, 0x81007702, 0x2)

2m23.038393544s ago: executing program 5 (id=2610):
syz_usb_connect$uac1(0x2, 0x78, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x6, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x9a, 0xa, {0x7, 0x25, 0x1, 0x2, 0x7, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x0, 0x5, {0x7, 0x25, 0x1, 0x80, 0x7, 0x9}}}}}}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000002c0)='@\\-\\#^.\x00') (async, rerun: 32)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000003c0)=""/139) (rerun: 32)

2m22.786986598s ago: executing program 34 (id=2567):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
statx(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$FUSE_ATTR(r0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x7, 0x8, 0x0, {0x2, 0xe, 0xc4, 0xb94, 0x2, 0x5, 0xfffffe38, 0x401, 0x800, 0x1000, 0x8, r1, r2, 0xdb78, 0x5}}}, 0x78)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x24, &(0x7f0000000040)) (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) (async)
write$FUSE_ATTR(r0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x7, 0x8, 0x0, {0x2, 0xe, 0xc4, 0xb94, 0x2, 0x5, 0xfffffe38, 0x401, 0x800, 0x1000, 0x8, r1, r2, 0xdb78, 0x5}}}, 0x78) (async)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) (async)

2m21.833676494s ago: executing program 5 (id=2615):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f00000004c0)=0x4) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) (async)
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r0, 0x80000)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4)

2m21.613943367s ago: executing program 5 (id=2617):
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

2m21.541539979s ago: executing program 5 (id=2618):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0x81007702, 0x2)

2m17.321471238s ago: executing program 35 (id=2587):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
clock_gettime(0xa, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x2710, 0x5, 0xdddd0000, 0x1000, &(0x7f0000106000/0x1000)=nil, 0x3})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
clock_gettime(0xa, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x0) (async)
fcntl$setlease(r1, 0x400, 0x1) (async)
fcntl$setlease(r1, 0x400, 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x2710, 0x5, 0xdddd0000, 0x1000, &(0x7f0000106000/0x1000)=nil, 0x3}) (async)

2m6.442377377s ago: executing program 36 (id=2618):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0x81007702, 0x2)

35.708164663s ago: executing program 8 (id=3676):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000000c0))
rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000600)={0x26, 0x7, 0x80000000})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ptrace$getsig(0x4202, r1, 0x70a, &(0x7f0000000100))

35.589060295s ago: executing program 8 (id=3678):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc31d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r4, r3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r5, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
syz_clone3(&(0x7f0000001200)={0x40845000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)

35.33980421s ago: executing program 8 (id=3679):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x801, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000200)={@any, 0x2})
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffbf)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0)
ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
close(r2)
read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0})

35.232389411s ago: executing program 8 (id=3680):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0)
fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) (async)
mkdirat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) (async)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x111) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async, rerun: 32)
close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32)

35.048585804s ago: executing program 8 (id=3681):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = dup2(r1, r1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000440))
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x6, 0x7fff})

34.954867796s ago: executing program 8 (id=3682):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@wr_crn={0x46, 0x20, {0x4, 0x3}}, @cpuid={0x14, 0x18, {0x7, 0x3925}}, @wrmsr={0x1e, 0x20, {0x812, 0x4}}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @rdmsr={0x32, 0x18, {0x9c7}}, @code={0xa, 0x43, {"c421fc5be78f2978e1e545dcb8b86d00000f01cf81d66608000064400fbfc3c4a1e5dbfdc402950810450f79cdc401332ae6"}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0x40000081}}, @uexit={0x0, 0x18, 0x8b}, @cpuid={0x14, 0x18, {0x1, 0x7}}, @code={0xa, 0x5d, {"640f01cb66f30f166647470f01f8c4e17e161ca0b9ad020000b800800000ba000000000f3066b8e7008ee02636f2af4183620081c744240077000000c744240200000100ff1c2426450f01c8"}}, @code={0xa, 0x4a, {"0f79760fb805000000b9515d00000f01c1980f35400f08440f08670f01c2f3470f0936f2f2426a9966baf80cb86ce57c8bef66bafc0cb000ee"}}, @wrmsr={0x1e, 0x20, {0x572, 0x2}}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x32, 0x18, {0xac2}}, @code={0xa, 0x6a, {"67410f00920000010065f30f01ea8f6910926a2966baf80cb8d85d6985ef66bafc0cb8c5d90000ef0f43d80f01c248b80a000000000000000f23c80f21f835040060000f23f866b855008ec0430f201a3e460fc7a900000000"}}, @rdmsr={0x32, 0x18, {0xb35}}, @rdmsr={0x32, 0x18, {0x1f5}}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0x4d34d19982ecea4e, 0x101}}, @wrmsr={0x1e, 0x20, {0x95d, 0x5}}, @uexit={0x0, 0x18, 0x7fffffff}, @rdmsr={0x32, 0x18, {0xbd9}}, @code={0xa, 0x69, {"2e470f78b27de100003e450f79b14c000000c4421d0b7051b9fc0b00000f32c744240000000000c7442402e2e43bb1c7442406000000000f011424b9300200000f32660f380a9d010000002e0f076764660f01df0f005694"}}, @wr_crn={0x46, 0x20, {0x2}}, @wrmsr={0x1e, 0x20, {0x855, 0xc}}, @wr_crn={0x46, 0x20, {0x0, 0x8000000000000000}}, @wrmsr={0x1e, 0x20, {0x206, 0x9}}, @uexit={0x0, 0x18, 0x7f}], 0x485}) (rerun: 64)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xdddd5000) (async, rerun: 32)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (rerun: 32)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x2000000, 0x30012, r0, 0xca71d000) (rerun: 32)

34.815589968s ago: executing program 37 (id=3682):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@wr_crn={0x46, 0x20, {0x4, 0x3}}, @cpuid={0x14, 0x18, {0x7, 0x3925}}, @wrmsr={0x1e, 0x20, {0x812, 0x4}}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @rdmsr={0x32, 0x18, {0x9c7}}, @code={0xa, 0x43, {"c421fc5be78f2978e1e545dcb8b86d00000f01cf81d66608000064400fbfc3c4a1e5dbfdc402950810450f79cdc401332ae6"}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0x40000081}}, @uexit={0x0, 0x18, 0x8b}, @cpuid={0x14, 0x18, {0x1, 0x7}}, @code={0xa, 0x5d, {"640f01cb66f30f166647470f01f8c4e17e161ca0b9ad020000b800800000ba000000000f3066b8e7008ee02636f2af4183620081c744240077000000c744240200000100ff1c2426450f01c8"}}, @code={0xa, 0x4a, {"0f79760fb805000000b9515d00000f01c1980f35400f08440f08670f01c2f3470f0936f2f2426a9966baf80cb86ce57c8bef66bafc0cb000ee"}}, @wrmsr={0x1e, 0x20, {0x572, 0x2}}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x32, 0x18, {0xac2}}, @code={0xa, 0x6a, {"67410f00920000010065f30f01ea8f6910926a2966baf80cb8d85d6985ef66bafc0cb8c5d90000ef0f43d80f01c248b80a000000000000000f23c80f21f835040060000f23f866b855008ec0430f201a3e460fc7a900000000"}}, @rdmsr={0x32, 0x18, {0xb35}}, @rdmsr={0x32, 0x18, {0x1f5}}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0x4d34d19982ecea4e, 0x101}}, @wrmsr={0x1e, 0x20, {0x95d, 0x5}}, @uexit={0x0, 0x18, 0x7fffffff}, @rdmsr={0x32, 0x18, {0xbd9}}, @code={0xa, 0x69, {"2e470f78b27de100003e450f79b14c000000c4421d0b7051b9fc0b00000f32c744240000000000c7442402e2e43bb1c7442406000000000f011424b9300200000f32660f380a9d010000002e0f076764660f01df0f005694"}}, @wr_crn={0x46, 0x20, {0x2}}, @wrmsr={0x1e, 0x20, {0x855, 0xc}}, @wr_crn={0x46, 0x20, {0x0, 0x8000000000000000}}, @wrmsr={0x1e, 0x20, {0x206, 0x9}}, @uexit={0x0, 0x18, 0x7f}], 0x485}) (rerun: 64)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xdddd5000) (async, rerun: 32)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (rerun: 32)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x2000000, 0x30012, r0, 0xca71d000) (rerun: 32)

25.072638748s ago: executing program 6 (id=3828):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r0, &(0x7f0000001780), 0x0, 0x4000040)

25.030694979s ago: executing program 6 (id=3830):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

24.897787421s ago: executing program 6 (id=3833):
syz_clone(0x401000, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
inotify_init()
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)

24.762979023s ago: executing program 6 (id=3837):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})

24.686442724s ago: executing program 6 (id=3839):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
pread64(r2, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000102505a1a440000000011d090244000101000000090400001202060000050b"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa0400, 0x80)

24.574097866s ago: executing program 6 (id=3842):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002640)="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", 0xa41}], 0x1, 0x0, 0x1220}}], 0x1, 0x85)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x80000000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080))
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
unshare(0x64000600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x840, 0x120)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x41, 0x5, 0x0, r4, 0x0}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
unshare(0x2040000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="473735ff8f16ac4fcccfe8fa09f28e3313725e2f5f70457418cf225a85626b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

24.492345408s ago: executing program 38 (id=3842):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002640)="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", 0xa41}], 0x1, 0x0, 0x1220}}], 0x1, 0x85)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x80000000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080))
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
unshare(0x64000600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x840, 0x120)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x41, 0x5, 0x0, r4, 0x0}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
unshare(0x2040000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="473735ff8f16ac4fcccfe8fa09f28e3313725e2f5f70457418cf225a85626b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

22.300686904s ago: executing program 7 (id=3876):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x800})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)

22.140732456s ago: executing program 7 (id=3878):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003080)="a215c0add719490a88f0d497e7474605b479d0bf7c45bcd50a800ae0c7e17ce91084d3491f6b2184392d7888e788218807041334ac000b350bebb7807372730252929d527debd50bf4ed68741fea46196196d35252a3a0619c272fde934ba108207cd2e8f77f385b23a855432b2264e437d9f5ee1c86e9d799a5ec523385469331cac65350aef274eb1643c43425434eeb708f627b1d6a1f474582a1fb879d23eb1d8831f03b", 0xa6}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f0000003180)="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", 0x1b6}, {&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000100)="9f9e73a3b05da17cb33c08d66158bb47f8a69c0e98c8813ea43f4259d397b032e1a3c9d681703f190bf9f46e7d2b3288e2d317319cc204c664dcc41ed1e74ba0df807e72f988ab96c1ed39474c044a38b523698394161952180d70e708779673d1a1eae7a51bd23d91ac2098237f0333d02e4d281e3a09050a5956cc1ef6f3eb964302bce9bd40e2db37ee9af3dfb7093082cee1d731f98fe581f6290143c1862af03329e8192d2d537f619327e27d36cacf70145c6c8e1e37cb0d6c827bde8603ce6d3e67e13802f3fcb82296e9db176439c2c91242dc23324c3e573c460f6ccab2479bb7ef31ae511714209032fb0e356ff9595bebe3b1eb", 0xf9}, {&(0x7f00000004c0)="bb0bb54b3708489718b3b67a829fb4bba4b259b2f2ec85dbfd31423365fe8489953614213197dc81e56ab9570af68c3c6d368419ce36631be174240e4ff6977aa986ccb73fce0aad106bc317307c9d85d89fc8278a6d8a576f67b4f23b445fb80f7caa5f177a5f0d84d981e386793a4aa1b186e19422bedc369c63668c88e286376985f5275ccf68ae4193e889adaefde733465d57e11f37ff445ec3afb2ca93a66d8a344892287dfe1c20d23ad377fd02c3a6e3c44315aa8935f5222e0970216d4e3dcadb195a7e67deee9ea3e3cf458a", 0xd1}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}}], 0x2, 0x4000040)

22.067576768s ago: executing program 7 (id=3880):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f00000001c0)=""/215)

21.571149996s ago: executing program 7 (id=3886):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x9, &(0x7f0000000080)={@local={0xac, 0x14, 0x0}, @rand_addr=0x8}, 0x8)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
close_range(r0, 0xffffffffffffffff, 0x0)

21.452581858s ago: executing program 7 (id=3888):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003080)="a215c0add719490a88f0d497e7474605b479d0bf7c45bcd50a800ae0c7e17ce91084d3491f6b2184392d7888e788218807041334ac000b350bebb7807372730252929d527debd50bf4ed68741fea46196196d35252a3a0619c272fde934ba108207cd2e8f77f385b23a855432b2264e437d9f5ee1c86e9d799a5ec523385469331cac65350aef274eb1643c43425434eeb708f627b1d6a1f474582a1fb879d23eb1d8831f03b", 0xa6}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f0000003180)="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", 0x1b6}, {&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000100)="9f9e73a3b05da17cb33c08d66158bb47f8a69c0e98c8813ea43f4259d397b032e1a3c9d681703f190bf9f46e7d2b3288e2d317319cc204c664dcc41ed1e74ba0df807e72f988ab96c1ed39474c044a38b523698394161952180d70e708779673d1a1eae7a51bd23d91ac2098237f0333d02e4d281e3a09050a5956cc1ef6f3eb964302bce9bd40e2db37ee9af3dfb7093082cee1d731f98fe581f6290143c1862af03329e8192d2d537f619327e27d36cacf70145c6c8e1e37cb0d6c827bde8603ce6d3e67e13802f3fcb82296e9db176439c2c91242dc23324c3e573c460f6ccab2479bb7ef31ae511714209032fb0e356ff9595bebe3b1eb", 0xf9}, {&(0x7f00000004c0)="bb0bb54b3708489718b3b67a829fb4bba4b259b2f2ec85dbfd31423365fe8489953614213197dc81e56ab9570af68c3c6d368419ce36631be174240e4ff6977aa986ccb73fce0aad106bc317307c9d85d89fc8278a6d8a576f67b4f23b445fb80f7caa5f177a5f0d84d981e386793a4aa1b186e19422bedc369c63668c88e286376985f5275ccf68ae4193e889adaefde733465d57e11f37ff445ec3afb2ca93a66d8a344892287dfe1c20d23ad377fd02c3a6e3c44315aa8935f5222e0970216d4e3dcadb195a7e67deee9ea3e3cf458a", 0xd1}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}}], 0x2, 0x4000040)

21.231735891s ago: executing program 7 (id=3890):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_usb_connect$uac1(0x2, 0x9f, &(0x7f0000004f80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xbe, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x2, 0x4, 0x98b1, 0x2, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x81, "16a0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7f, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7, 0x7f, 0x3, {0x7, 0x25, 0x1, 0x0, 0xf, 0x3eb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x10, 0xdf, "a4d7ff", '$'}]}, {{0x9, 0x5, 0x82, 0x9, 0x1cf, 0x2, 0xf0, 0x8, {0x7, 0x25, 0x1, 0x82, 0x3, 0xff80}}}}}}}]}}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0})
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, 0x0, 0x4010)
bind$xdp(r4, &(0x7f0000000000)={0x2c, 0x1, 0x0, 0x8}, 0x10)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000202505a8a440000102030109021b0001010500010904000703070101ba09050102f7030704074524863da44ddffc57a7eb5133b5be04ae7c33405de41c05008d6dd9d612a635ed51bfaeb0f210ebdc6d8b"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

21.169521942s ago: executing program 39 (id=3890):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_usb_connect$uac1(0x2, 0x9f, &(0x7f0000004f80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xbe, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x2, 0x4, 0x98b1, 0x2, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x81, "16a0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7f, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7, 0x7f, 0x3, {0x7, 0x25, 0x1, 0x0, 0xf, 0x3eb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x10, 0xdf, "a4d7ff", '$'}]}, {{0x9, 0x5, 0x82, 0x9, 0x1cf, 0x2, 0xf0, 0x8, {0x7, 0x25, 0x1, 0x82, 0x3, 0xff80}}}}}}}]}}, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0})
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, 0x0, 0x4010)
bind$xdp(r4, &(0x7f0000000000)={0x2c, 0x1, 0x0, 0x8}, 0x10)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000202505a8a440000102030109021b0001010500010904000703070101ba09050102f7030704074524863da44ddffc57a7eb5133b5be04ae7c33405de41c05008d6dd9d612a635ed51bfaeb0f210ebdc6d8b"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

5.394137541s ago: executing program 2 (id=4091):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async, rerun: 32)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0) (async, rerun: 32)
sendfile(r2, r2, 0x0, 0x7ffff000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00002be000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) (async, rerun: 64)
read(r1, &(0x7f0000003680)=""/52, 0x34) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4) (async)
sendmsg(r5, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24044044) (async)
r6 = fsmount(r0, 0x0, 0xa)
fchdir(r6)
ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000080)=0x7) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB])

5.267922504s ago: executing program 2 (id=4093):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
sendto(r1, &(0x7f0000000740)="1200000000f0ffa1", 0xffffffffffffff1b, 0x4040010, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402)
write$evdev(r2, &(0x7f0000000180)=[{{0x0, 0x2710}, 0x11, 0xffff, 0x4}], 0x18)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002c80)={0x2020}, 0xfffffdb2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x4, @mcast2}, 0x1c)
socket$inet6(0xa, 0x80003, 0x3)
socket(0x10, 0x3, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xffffffc1)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0xf9389000)
syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.924210779s ago: executing program 0 (id=4101):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000)
syz_usb_connect(0x3, 0x24, &(0x7f0000002a00)={{0x12, 0x1, 0x110, 0xaf, 0x88, 0x8, 0x20, 0x645d, 0xbc2c, 0x146c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x99, 0xdc, 0x0, 0x8, 0x5, 0x1, 0xe}}]}}]}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async)
ftruncate(0xffffffffffffffff, 0xffff) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
dup(r2) (async)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648e000) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000002a00)={{0x12, 0x1, 0x110, 0xaf, 0x88, 0x8, 0x20, 0x645d, 0xbc2c, 0x146c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x99, 0xdc, 0x0, 0x8, 0x5, 0x1, 0xe}}]}}]}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)

4.87039145s ago: executing program 4 (id=4102):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])

4.760659082s ago: executing program 4 (id=4104):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003080)="a215c0add719490a88f0d497e7474605b479d0bf7c45bcd50a800ae0c7e17ce91084d3491f6b2184392d7888e788218807041334ac000b350bebb7807372730252929d527debd50bf4ed68741fea46196196d35252a3a0619c272fde934ba108207cd2e8f77f385b23a855432b2264e437d9f5ee1c86e9d799a5ec523385469331cac65350aef274eb1643c43425434eeb708f627b1d6a1f474582a1fb879d23eb1d8831f03b", 0xa6}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f0000003180)="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", 0x1b6}, {&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000100)="9f9e73a3b05da17cb33c08d66158bb47f8a69c0e98c8813ea43f4259d397b032e1a3c9d681703f190bf9f46e7d2b3288e2d317319cc204c664dcc41ed1e74ba0df807e72f988ab96c1ed39474c044a38b523698394161952180d70e708779673d1a1eae7a51bd23d91ac2098237f0333d02e4d281e3a09050a5956cc1ef6f3eb964302bce9bd40e2db37ee9af3dfb7093082cee1d731f98fe581f6290143c1862af03329e8192d2d537f619327e27d36cacf70145c6c8e1e37cb0d6c827bde8603ce6d3e67e13802f3fcb82296e9db176439c2c91242dc23324c3e573c460f6ccab2479bb7ef31ae511714209032fb0e356ff9595bebe3b1eb", 0xf9}, {&(0x7f00000004c0)="bb0bb54b3708489718b3b67a829fb4bba4b259b2f2ec85dbfd31423365fe8489953614213197dc81e56ab9570af68c3c6d368419ce36631be174240e4ff6977aa986ccb73fce0aad106bc317307c9d85d89fc8278a6d8a576f67b4f23b445fb80f7caa5f177a5f0d84d981e386793a4aa1b186e19422bedc369c63668c88e286376985f5275ccf68ae4193e889adaefde733465d57e11f37ff445ec3afb2ca93a66d8a344892287dfe1c20d23ad377fd02c3a6e3c44315aa8935f5222e0970216d4e3dcadb195a7e67deee9ea3e3cf458a", 0xd1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002980)="722abe089b92444a712571d5db482a97046f64a6eec001e41000000000001b44ad6e5c6fb2a6ecc31560d3027d0cdc373c000000000000a0b6eb910fa4f8f52ca8c54ca144aaa54c7b1d279ade05b07321a6aaeb18fab9e6674490db2dd28e1672270208b4b88ad84f72ee5cc1742f7c82ea789809e37144ff96c118e068dd266802845bbece4d07ca7c4a0d674c992d9d2495dca4164dc3609c7bfcdcaf0c5d91", 0xa1}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5", 0x58}, {&(0x7f0000001a40)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c6c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225d52116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372cdcebb9e3ada079fb014445dd3926473befecaea1fa995b8e65422c93715a52aba5634713227b9ab695b7f77e2ff044fb7e94b917cd37ad642a555bb8d2b884252c48147e3545d2a4b448e8be5aa61f7a14257e9f0f777c9a012b15a1c9139d8a4af53cd48c5a70c0729734947c3ac75eacf941fd1aeb771d9c789f04a95155b5154909441ca153df09dfcbde5472c37ebc5a8788e6cc606014e478fe7e2257309929c09351de59cd3de9f2f3ef3a4e7801019cf34833d5c9f55ed06e388948afbaac5224f0bd51ae32d13de5aec183b5906615ede66537a70d07aa75df2d3ca8cd2ff049728d60b8c7d52d8dee72b062e16b00e064a5de0a44ae0f3e0e50cda01e5f44d966727bde3fdcdb40f53669379e790a841e63549b1bcc6fe8b523f8ca110666611543dba205ac9282839b83f62af961b3743bcf5eb16a4182b10f647aec2b4ca6dce273803ad36b70afa6f04be62d3605b11c053a4bd6963adfca9a145edc0259d93295eed70b44abc59878101801563190a3121a049ef8b77ef44950ea7c6af543387aa37e40800eb03d5f45aaa73f0e23b2eacff9744afb4fb2a4f5a04644fd23302c80fe1389d61d6a589e27ccc7067a5ce6fa2f79b6ed5279a59ecb11074bf31beb27dee216255b003cfed235abba923f70f82f059de8254ce74cfbe709cb0fc8898a3a45acdc2d98a83b1abc22b69c9843c2787f6109c9c7f655c12bd5e7e2b8d60535c50ad4eebcaf4650d9c8d297658abcc802008b13c7edef23e65d645fde267dae6d9db8db53c5b4481370ea24f6657ae740ea0074b787cc47ff24617ed30012816998967f942c963f0abde5d76c9d7e036b4130a1e6c3dd27a010e3b62b17167e91b3df5126f679f0fd7dfce334b10b20f3aeb60628342d735f2488bd2b69b7c20c0d18b7b3efb7e59384383ce09c9508da0952c744627b8dcf15644406579f18d23295a15f3cc92b2ee54474afda3dac13c552f9bae4938354a15360eb2d5991541e332819d852881d0e22376a3977a06df6bf86a0c54237eb89b85be61e8ac7fad3f26ae8cba397736fe0977028ae6eb3342b0e74d93164eb5f7494f66571ac6b734034083007575e1f1e2bc882cb641623336e275c59e2a30ec98ff913cd9df5e7af4c977d8e5549c443d99785337548d36cd617fc82e4386ce36795bf3d4004ded873252a692758ef89175cdd54b08097a6f73d443ae583e42458534acd5aeebc46771b1e624632242f570ab622d2ee8a68f359e11780676e8340ced6c6b7b38632518a1e6f16e502a8c47c8a1b12038ebe181c3edbe3223a611aa060c768744aa8f9c78048a8c3c4d6805930a375af1d02503b639b952d78be871a8ea148f0cf8afb71cafca4d99631f672f531e88a1b8d27716ab2cef302416aa21da7c8206cb6fcd5e66fe966f9ad7b46b617ff02f613b51fee7bf9ec709310b3f126c1f88951855713010e2be1c9d17bf094fb6358c5c9e9970b186eaa123a06f051ad7a4b7e339b163e9f9e5d9108f0e142c33bee0cfc33e469755f14c40c6311bf79221501057e43074f06ff098bab5827acb10e9890697aeb94fd30d241ed521319bb65865396739514be568b99e30002cf5b69c01e550a4258a396840d8d786490609755bcb90e293b01418389a649be1791b3fae9d946666e3b46817bc49f1b84ba99fe5244a26de6a11811cda82e7432b9b4fc8fcd94b7f8b9b78af1a76fbf45297e7e2956b56489132a6be34825af94e7b6c5a33f9f4e5bd962436d603ab73df5a2c33117295046532b3f3207371681c17333fb5f51742f0edb4da3c2d5cefa31a8a772e1d9099adf30e532eaf1ad3a874b830c79fa9665af7f42b50ed581f9099670ef923c2f182690d17c638e90bfa439d21ef8ed5e1a1946b977278bb93da72e58f5c7e78bece53fac3435017072bd4d2385debfb7f29e8b83fff12d0493200142a0c070c239b41b6caac4a8c6294cfec3adbfe056481387e674bda09e08a70ab6678be35f8c1ce7701b82b0edad73dd7d6da94be26197f4b92948e389c2e67a272004427dbf4db45dde59195f9c1c51913b968f97e1cad5707508757952eef02c07ae3feaea1cd90e85b7da429dcf9271c81a6e45cbe7966b3aca0edd532b1a084fc19ea6235e7226cff78b4ccabcb3caef6fe31c7280b435efa2deaf9acc6a7cfb8ba7fa47f3d56b96e4765b6e074408e2d67d6e37139db80fb19c3a9e0a0236f4d776af7ffbe175c5aa30ce0c0496cdf25a54fb122a77fb738a1b56b12c5b26b80568d6c513c6c1f02d3f8acc33cae368d433d1685d785060355bc3690c0ec28a98dfbde3d4686d0fe0861867ebf5cb2c37db8930e3c645739b16564074cb326ec3ee8ff4a5b480e755f063c9e6b3f6ea4bf558ae90e0f3d32d422a0fc284d2fbb0b08af9609180647160803ad18f0a90aaffe76af020063b306c330b0192b527bf3b945648467f53751b44d4ccbf1e8111e0888e80a0e68bfe2c6ab325254f2ad633a9471d7b20117488167f172603e19627fcd179effdeb5f030ff764bb160f91ddc9cd8aa281ee0e2701594fb8fa3a803390b3ff7ed7130693bb74ec856d5fa83b0671518f71002561312244cfb5668415c278d24f5ee5f0617eb3aed7c7d52baa9b5e3d69b9f2baa09d1834505686198987d5a0517a94d5fc39bc64db3dd531eddea09942bb4b51d2964ab48f0b4c753f356d53271d6bd5727f220e6cd56d6866e3bfc1b542b9022bc5fa8a46ea2b4c1208994b5f2ba8631f2e1af84fa9bec1c7d23dee4d2528e49db4e75ce60ab1ab78a31974e4917", 0xa3b}], 0x3, &(0x7f00000009c0)}}], 0x2, 0x4000040)

4.742056482s ago: executing program 4 (id=4105):
socketpair(0x1, 0xa, 0x4, &(0x7f0000000140)) (async)
socketpair(0x1, 0xa, 0x4, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x800)
r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100))
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

4.693998723s ago: executing program 4 (id=4106):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000480)={0x2, 0x0, @pic={0xcd, 0x4, 0x24, 0xc, 0x6, 0x0, 0xe7, 0xfa, 0x6, 0x0, 0x7, 0xb5, 0x7f, 0x5, 0xd7, 0xe}})
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f00000002c0)=0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7, 0xc, 0x800, 0x101, 0x4, 0x0, 0xaa}, 0x1c)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000300000010700c11d8a300010200010902240001017f500709040009020301000809210f00060122c902090581030002040e08119bc4c0a0c2fa99f92dad794e38da9ad625e98da4ba70fc8e2ec3035e3d9f3effd3c21149327e523f00df92703830deb307fca35938ea7e1a8f9b272fdf370a70dcb06aadedb50fd3b617fdf20232840ffa075a197da9f9f3ccf4af5349764b19e8c068fd2c934a517fd527358d9f45c6985998b2f827d09d6f4d2a5ae93166f9fa61836ac2c9346b75bddb7e240500000000"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r3, 0xf648e000)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$key(0xf, 0x3, 0x2)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1}, 0x8}], 0x2, 0x40000000, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001af8808205d642cbc6c140102030109021200010184ed9e18c18b8734ccfbff80ac442e7ddc000805010e"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x4, 0x1b, 0x5]}, &(0x7f0000000100)=0x44)
fgetxattr(r5, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)

4.640657874s ago: executing program 2 (id=4107):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c05e3ac1414bb0063e70100010018"], 0x20}, 0x0)
r2 = eventfd(0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x12)
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0])
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fstat(r5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setfsuid(r6)
setfsuid(r6)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140100001500040025bd7000fbdbdf2520010000000000000000000000000001ac1e01010000000000000000002300c60c7c86006700"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="be6b6e00020000002c001300ac1e0101000000000000000000000000fc000000000000000000000000000001000000000a00000076001400726d643235362d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500100008000000075c4e95612017da57aa9cd794f9143167ebf726c419aa0409eacb2e8e7f8382deeabffe509e1fadf43c7000020001700010000002bbd700028bd700029bd70002cbd70000000000000010000"], 0x114}}, 0x90)
io_destroy(r0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000)

4.569640645s ago: executing program 2 (id=4108):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00'])
getgroups(0x2, &(0x7f0000000000)=[<r1=>0x0, <r2=>0x0])
setresgid(r2, r1, 0x0)
setresgid(0xffffffffffffffff, 0x0, r2)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)="eb31f1e4cdf72902622b57b21e4ee867fbb4f104ddd79843bfd266be85c224078124f0c402afacd18d", 0x29, 0x3335abe57b7d11de)

4.540308266s ago: executing program 2 (id=4109):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='cpuset\x00', 0x1000014, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@directio}, {@afid={'afid', 0x3d, 0x8}}]}})
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)

4.476664666s ago: executing program 2 (id=4110):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x184)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
unshare(0x2040400)
r3 = getpid()
syz_pidfd_open(r3, 0x0) (async)
r4 = syz_pidfd_open(r3, 0x0)
r5 = fcntl$dupfd(r4, 0x406, r4)
setns(r5, 0x2000000)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}})
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async)
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r0, 0x0, 0x80000000)

4.476408166s ago: executing program 40 (id=4110):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x184)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
unshare(0x2040400)
r3 = getpid()
syz_pidfd_open(r3, 0x0) (async)
r4 = syz_pidfd_open(r3, 0x0)
r5 = fcntl$dupfd(r4, 0x406, r4)
setns(r5, 0x2000000)
r6 = dup(r2)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}})
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async)
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r0, 0x0, 0x80000000)

2.376416711s ago: executing program 3 (id=4132):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')
syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
read$FUSE(r1, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, <r4=>0x0})
syz_open_procfs(r4, &(0x7f0000000080)='smaps\x00')
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
close_range(r2, 0xffffffffffffffff, 0x0)

2.313067592s ago: executing program 3 (id=4133):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="857846a6d7bcb43f859847bdcfabf578722072451119b9845ef091ed897a05b7bfd3a9244798824c0658eb2710cc9e0c571c64815355307ba71d531b2ea7c5cf991ce8bf58728256edd0abfe27a11c10"}) (async)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000180)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x7e, 0x0, &(0x7f0000000200)="2d04294bc51619ecc39668288ad1cf84920dcf4365a805727a1483878267b2a68c4071b27c8ea9c733a86b7d7695bfa5f1a90ef61570819aabc06c9b70ab6661b7e8a8d116919de9b94dc2b69f5dca622d9761c54afc285b93e1d5bc201a9e780bbac004618e90d7d00dd3aec6bdf98b636960cc2d2439b4d421572719c9"}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x6, 0xff, 0x0, 0xfffffeff}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

2.192711644s ago: executing program 3 (id=4135):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

2.191708714s ago: executing program 3 (id=4136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x24, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000017200))
sigaltstack(0x0, &(0x7f0000000040)={0x0})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x10, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0xf, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0xe, 0x8, 0xff, 0x9}, 0xf5, &(0x7f0000000140)={0x5, 0xf, 0xf5, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2b237648c44985186859f15ca94cc46d"}, @generic={0xd9, 0x10, 0xb, "a788f864f3960b7496c046afe11e5fc0163fa7a4fdd7f129f4319faecc483eae4be59ac031623b46400380be521a806fb29a3461d526932a2ea88ed82c7be71d1a833474eda49abf8a87102c36baea89a64f1b699454f2c6434b20c8b3a3038204055930a9219e1d7c4a967b3f3ee46df101c9658490596cd1445147a0af563dc2f13d1dbd7c1639089e81a3054abad4081bd56de0bb8a3d8b4eaabd4a2e73525f2c26273e8b08750225d379948162d2cfcff1dfe2afa8e0386aeacbdb217f63e7f35df2aedc5d261c9558b0eef95ed076bc2615c355"}]}, 0x8, [{0x97, &(0x7f0000000240)=@string={0x97, 0x3, "4b7b1ba1031635227d528e406f2376518c34c6607fd29b94a7c32d0a02134ed3b50f360d490bfb9b6d3a6182f27cb8488d6b7783b014a9ffad29f0ceddeb5e294fb3ad2805d7e760a923655ceebd133f36cc42cb5109a38ea5b68029ea3606d8ae4e14a50238a83534beb4e713e26583b849d4339e2b67a314265fe6009b5a3cbb55984e5fd8a03f598b8aee5f1921014496138a4f"}}, {0x95, &(0x7f0000000300)=@string={0x95, 0x3, "85fe65e0ab8f0b636b3b8e4eba19aaacc160f20c32534b29c4ea764d1dd62400d3a74d1a2ee19b681f4a5df86307abb6aab89233678b3af2047ee279273bf7a3e48a22f36ea52e15a535d1298cc0e36bc0f7bac131ed5d28046c25821bd35951e807e06d8f3a0579b70fe01cb87317325a88bde2e73a9b0014ed15b0ccfa31a7d2e732205141091b54dd38a48cd47b85dbfbbb"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x814}}, {0xf2, &(0x7f0000000400)=@string={0xf2, 0x3, "7b040a6cdbc08e23302284f1755b19c64f1334e8846c1e2e3d51dc6b20d68adf2001396bbfe0521d6e405e890574a31582d539ab4d607fcb2134667cfff4945281f82bd37cdeb3661b022f7bbc968f5b3a209bf5a6474b3c5a1a15af8e077c9d164ab47f20fec7ee4a83445e70ea03f7ef1d93c501e59efdaa8bd21ed5c2b08f3f3dd7f00981e55ece3246de6eaac20a7abfbf5e2f5d47649c86f1c6997962f75b9e7cee03b3fb1b2f3d7408833ba9d05c95c161d4b96eade3138396379b8f11503cd8913b0b08d29db465c65e629fd94f708af1a561119585bf4ec02bb58a992ea26fe6d7689f32680e5274193cd80b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2001}}, {0xab, &(0x7f0000000580)=@string={0xab, 0x3, "24651365a5a7cd362cc8765a9a8e4adcd82a270134717c1d8ff2faad9c71dd1c0bae2919e7b569aa58f2df8256f90732ae41a98f3632df5235a0de5ca0094ad8b0df3cbe9c3434da5741b088fa8f028ce37b1e4f342741d19386df9065963d842aee78e104709bef08431a86756726c07ca7a33c333efdba8d4f95681378a9ad6f477dfb07bd4d4cbe31d5567ef7e54df425ead26f059da7a266e40ad64ed731d9a5c0fa899a02b935"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x180a}}]})

1.685395633s ago: executing program 0 (id=4137):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
write$tcp_mem(r1, &(0x7f0000000280)={0xa4c1, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r5, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0)
ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)

1.541929665s ago: executing program 0 (id=4138):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x40801)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x143000, 0x0)
fcntl$notify(r5, 0x402, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/160, 0x0, 0x1000, 0x8}, 0x20)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15)
r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x60)
fstat(r7, &(0x7f0000000580))
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4012, r2, 0xaa58d000)
getpeername$packet(r2, &(0x7f0000000600), &(0x7f0000000640)=0x14)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={<r10=>0xffffffffffffffff})
r11 = openat2(0xffffffffffffff9c, &(0x7f0000000740)='\x00', &(0x7f0000000780)={0x20c80, 0x20, 0x4}, 0x18)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000007c0)={<r12=>r5, 0x9, 0xf48, 0x880})
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
keyctl$get_persistent(0x16, r13, 0xfffffffffffffffc)
listen(r3, 0x2)
timer_settime(0x0, 0x1, &(0x7f00000009c0), &(0x7f0000000a00))
timer_create(0x5, &(0x7f0000000a40)={0x0, 0x1f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000a80)=<r14=>0x0)
timer_gettime(r14, &(0x7f0000000ac0))

1.436517767s ago: executing program 0 (id=4139):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = timerfd_create(0x1, 0x800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000540))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x1a1cc0, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000185000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

1.388500738s ago: executing program 4 (id=4140):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = syz_open_procfs(r1, 0x0)
syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "c138c257eef13a8cd0d8f68a7a302543"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "875b14c8772c2a1340c0c18fc643318b"}]}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0)
read(r0, &(0x7f0000000000)=""/249, 0xf9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10000, 0x20}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x40400c0)

1.369078268s ago: executing program 0 (id=4141):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async)
r3 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3})
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000140)=0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.22093533s ago: executing program 9 (id=4143):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
getdents64(r3, &(0x7f0000000080)=""/37, 0x25)
ioprio_get$pid(0x2, r4)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x3, 0x2, 0x4, 0xf9, r4})
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)

1.115107292s ago: executing program 9 (id=4144):
r0 = eventfd(0xc)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4048000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718561a10d8, 0xfffc}}, 0x50)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x1, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0xfffffffd, 0xe, 0x0, 0x0, 0xa4})
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x80000001, 0x101, 0x3, 0x401, 0x93e, 0x400000})
mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents'])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0x770a, 0x2)

1.037679113s ago: executing program 0 (id=4145):
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, 0x0, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x4}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x80)
lseek(0xffffffffffffffff, 0x3, 0x4)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_clone(0x80e50211, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

734.054658ms ago: executing program 3 (id=4146):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002640), 0x101841, 0x0)
ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000))
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x44002)
mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0})
syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffefb, 0x400000)

676.582429ms ago: executing program 4 (id=4147):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xec9a5f35b4009359, 0x0)
socket(0x1, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008)
r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffa, 0x181000)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000140)={0x0, 0x0})
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4)
chdir(0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r7, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
recvmmsg(r7, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b39ff, 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0017040815e1cf9a46df71dc9399bfa9459c24000000abe763a8083d46cb46791c24acb083a6944cf9f3bbd44831f29bae660e7578"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x4, "28f28583"}, 0x0, 0x0})

632.56414ms ago: executing program 3 (id=4148):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000580001c000009dfcee"])
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="c4c178ae9a3100000048b805000000000000000f23c80f21f835080000000f23f8660f73f8003ed03468c4e3790569d700b9380a00000f3266ba2000b817d395d6ef0f20d835080000000f22d866baf80cb8869f448bef66bafc0cb000ee66b84c000f00d0", 0x65}], 0x1, 0x4, &(0x7f0000000280), 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r8 = socket(0x1e, 0x805, 0x0)
connect$tipc(r8, 0x0, 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r9, @ANYBLOB="05", @ANYRES16=r9, @ANYRES16], 0x0)
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0)
sendfile(r1, r10, 0x0, 0x2af)
ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0), 0x8)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff)
syz_clone(0x4b40dae11be2ff94, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

154.130778ms ago: executing program 9 (id=4149):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003080)="a215c0add719490a88f0d497e7474605b479d0bf7c45bcd50a800ae0c7e17ce91084d3491f6b2184392d7888e788218807041334ac000b350bebb7807372730252929d527debd50bf4ed68741fea46196196d35252a3a0619c272fde934ba108207cd2e8f77f385b23a855432b2264e437d9f5ee1c86e9d799a5ec523385469331cac65350aef274eb1643c43425434eeb708f627b1d6a1f474582a1fb879d23eb1d8831f03b", 0xa6}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f0000003180)="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", 0x1b6}, {&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000100)="9f9e73a3b05da17cb33c08d66158bb47f8a69c0e98c8813ea43f4259d397b032e1a3c9d681703f190bf9f46e7d2b3288e2d317319cc204c664dcc41ed1e74ba0df807e72f988ab96c1ed39474c044a38b523698394161952180d70e708779673d1a1eae7a51bd23d91ac2098237f0333d02e4d281e3a09050a5956cc1ef6f3eb964302bce9bd40e2db37ee9af3dfb7093082cee1d731f98fe581f6290143c1862af03329e8192d2d537f619327e27d36cacf70145c6c8e1e37cb0d6c827bde8603ce6d3e67e13802f3fcb82296e9db176439c2c91242dc23324c3e573c460f6ccab2479bb7ef31ae511714209032fb0e356ff9595bebe3b1eb", 0xf9}, {&(0x7f00000004c0)="bb0bb54b3708489718b3b67a829fb4bba4b259b2f2ec85dbfd31423365fe8489953614213197dc81e56ab9570af68c3c6d368419ce36631be174240e4ff6977aa986ccb73fce0aad106bc317307c9d85d89fc8278a6d8a576f67b4f23b445fb80f7caa5f177a5f0d84d981e386793a4aa1b186e19422bedc369c63668c88e286376985f5275ccf68ae4193e889adaefde733465d57e11f37ff445ec3afb2ca93a66d8a344892287dfe1c20d23ad377fd02c3a6e3c44315aa8935f5222e0970216d4e3dcadb195a7e67deee9ea3e3cf458a", 0xd1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002980)="722abe089b92444a712571d5db482a97046f64a6eec001e41000000000001b44ad6e5c6fb2a6ecc31560d3027d0cdc373c000000000000a0b6eb910fa4f8f52ca8c54ca144aaa54c7b1d279ade05b07321a6aaeb18fab9e6674490db2dd28e1672270208b4b88ad84f72ee5cc1742f7c82ea789809e37144ff96c118e068dd266802845bbece4d07ca7c4a0d674c992d9d2495dca4164dc3609c7bfcdcaf0c5d91", 0xa1}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5", 0x58}, {&(0x7f0000001a40)="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", 0xa56}], 0x3, &(0x7f00000009c0)}}], 0x2, 0x4000040)

77.460759ms ago: executing program 9 (id=4150):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f00000028c0)={'syztnl0\x00', 0x0})
pread64(r0, &(0x7f0000000080)=""/15, 0xf, 0x5)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='hostfs\x00', 0xa38026, 0x0)

673.87µs ago: executing program 9 (id=4151):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8000, 0x0, 0x1, 0x3, 0x4}, 0x14)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f00000001c0)=""/165, 0x1})

0s ago: executing program 9 (id=4152):
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="0802002af5266b7363bfdf41260c346a578411eb02e83e8c8f3da7d7faf26700005e46fb00479fbe5953a12ef46528419d12"])
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'xfrm0\x00', 0x3})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0xfffe, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'veth1_to_bridge\x00', &(0x7f0000001780)=@ethtool_pauseparam={0x13, 0x1, 0x0, 0x3}}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'veth1_to_bridge\x00', &(0x7f0000001780)=@ethtool_pauseparam={0x13, 0x1, 0x0, 0x3}})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000180)={0x1, 0x5, 0x1}) (async)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000180)={0x1, 0x5, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030241d2418"])
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000680)={0x1})

kernel console output (not intermixed with test programs):

e number 10 using dummy_hcd
[  322.681789][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.690461][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.708578][  T413] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.719573][ T5140] usb 7-1: 0:2 : does not exist
[  322.730981][  T413] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  322.743784][ T5140] usb 7-1: USB disconnect, device number 22
[  322.768767][  T413] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  322.797029][  T413] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  322.816416][  T413] usb 8-1: SerialNumber: syz
[  322.838195][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  323.051481][T10011] input: syz1 as /devices/virtual/input/input28
[  323.077761][  T413] usb 8-1: MIDIStreaming interface descriptor not found
[  323.085921][T10053] new mount options do not match the existing superblock, will be ignored
[  323.122105][  T413] usb 8-1: USB disconnect, device number 10
[  323.202151][T10055] binder: Bad value for 'max'
[  323.251175][ T9655] udevd[9655]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  323.402277][T10064] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  323.516668][T10067] rust_binder: Error while translating object.
[  323.516708][T10067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  323.522974][T10067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:323
[  323.586432][T10069] usb usb8: usbfs: process 10069 (syz.8.3145) did not claim interface 0 before use
[  324.017964][T10088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  324.194751][T10096] rust_binder: Failed to allocate buffer. len:1072, is_oneway:true
[  324.274571][ T5137] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  324.445559][ T5137] usb 8-1: Using ep0 maxpacket: 16
[  324.460576][ T5137] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.477764][ T5137] usb 8-1: config 0 interface 0 has no altsetting 0
[  324.496537][ T5137] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  324.519629][ T5137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.531359][ T5137] usb 8-1: config 0 descriptor??
[  324.542438][T10110] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  324.550124][T10110] rust_binder: Write failure EINVAL in pid:373
[  324.552896][T10111] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  324.566745][T10111] rust_binder: Write failure EINVAL in pid:373
[  324.648697][ T5135] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  324.765999][T10117] binder: Unknown parameter '00017777777777'
[  324.830425][ T5135] usb 7-1: Using ep0 maxpacket: 32
[  324.846284][ T5135] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  324.874617][ T5135] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  324.883817][ T5135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.895661][ T5135] usb 7-1: config 0 descriptor??
[  324.979994][ T5137] hid (null): invalid report_size -1004342442
[  324.995996][ T5137] hid (null): unknown global tag 0x8c
[  325.002716][ T5137] hid (null): unknown global tag 0xf5
[  325.008534][ T5137] hid (null): report_id 0 is invalid
[  325.014397][ T5137] hid (null): report_id 0 is invalid
[  325.019774][ T5137] hid (null): unknown global tag 0x1f
[  325.026815][ T5137] hid (null): invalid report_count -1413864962
[  325.033055][ T5137] hid (null): invalid report_count -57090436
[  325.040467][ T5137] hid (null): global environment stack underflow
[  325.047677][ T5137] hid (null): unknown global tag 0xd
[  325.067691][ T5137] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0009/input/input29
[  325.082186][ T5137] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0009/input/input30
[  325.122387][ T5137] kye 0003:0458:5013.0009: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0
[  325.200425][T10088] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585)
[  325.200471][T10088] rust_binder: Error while translating object.
[  325.246891][T10087] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585)
[  325.253207][T10087] rust_binder: Error while translating object.
[  325.294215][T10088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  325.315449][T10088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280
[  325.347624][T10087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  325.376964][ T5135] elecom 0003:056E:010D.000A: item fetching failed at offset 2/5
[  325.385861][T10087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280
[  325.402233][ T5135] elecom 0003:056E:010D.000A: probe with driver elecom failed with error -22
[  325.420734][ T5151] usb 8-1: USB disconnect, device number 11
[  325.473491][T10125] fido_id[10125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  325.544891][T10134] rust_binder: Failed copying remainder into alloc: EFAULT
[  325.544918][T10134] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  325.552905][T10134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  325.563855][T10134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:393
[  325.763083][T10139] fuse: Bad value for 'rootmode'
[  326.035854][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.044044][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.052507][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.060558][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.070388][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.078355][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.086764][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.094707][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.104605][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.112616][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.121062][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.129032][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.139896][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.147920][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.156343][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.164256][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.174248][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.182224][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.190654][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.198664][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.209157][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.217154][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.225543][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.233501][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.243525][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.251444][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.259826][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.267791][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.277845][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.285950][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.295065][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.303033][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.313786][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.321779][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.330236][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.338361][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.338389][T10148] gre0: left promiscuous mode
[  326.350873][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.351974][T10148] gre0: left allmulticast mode
[  326.360441][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.367417][T10148] netlink: 'syz.2.3169': attribute type 2 has an invalid length.
[  326.373811][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.380837][T10148] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3169'.
[  326.389424][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.407460][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.418287][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.426975][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.434960][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.446244][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.454369][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.463348][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.472910][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.484115][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.493036][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.502425][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.521447][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.543319][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.563517][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.572042][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.581836][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.592694][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.601529][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.614176][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.625223][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.637570][T10160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3174'.
[  326.648590][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.660071][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.673541][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.682352][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.696781][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.717746][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.735394][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.752595][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.764692][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.780472][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.790731][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.803144][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.815739][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.824066][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.833122][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.836662][T10165] rust_binder: Error in use_page_slow: ESRCH
[  326.841875][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.846687][T10165] rust_binder: use_range failure ESRCH
[  326.850199][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.856954][T10165] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  326.870241][T10165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  326.872840][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.878345][T10165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:402
[  326.890328][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.914006][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  326.925668][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.936180][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  326.948741][T10145] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  326.965396][T10145] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  327.168995][   T36] kauditd_printk_skb: 1196 callbacks suppressed
[  327.169017][   T36] audit: type=1400 audit(2000000407.197:33575): avc:  denied  { read write } for  pid=10178 comm="syz.8.3181" name="binder0" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  327.205401][   T36] audit: type=1400 audit(2000000407.225:33576): avc:  denied  { read write open } for  pid=10178 comm="syz.8.3181" path="/dev/binderfs/binder0" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  327.230964][   T36] audit: type=1400 audit(2000000407.225:33577): avc:  denied  { create } for  pid=10178 comm="syz.8.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  327.251346][   T36] audit: type=1400 audit(2000000407.225:33578): avc:  denied  { connect } for  pid=10178 comm="syz.8.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  327.352846][   T36] audit: type=1400 audit(2000000407.235:33579): avc:  denied  { read } for  pid=10178 comm="syz.8.3181" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  327.437566][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.461623][   T36] audit: type=1400 audit(2000000407.235:33580): avc:  denied  { read open } for  pid=10178 comm="syz.8.3181" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  327.498224][   T36] audit: type=1400 audit(2000000407.281:33581): avc:  denied  { read write } for  pid=8457 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.528165][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.548901][   T36] audit: type=1400 audit(2000000407.281:33582): avc:  denied  { read write open } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.591211][ T5135] usb 7-1: USB disconnect, device number 23
[  327.606207][T10181] 9pnet_fd: Insufficient options for proto=fd
[  327.626409][   T36] audit: type=1400 audit(2000000407.281:33583): avc:  denied  { ioctl } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.668623][T10190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296
[  327.687182][   T36] audit: type=1400 audit(2000000407.310:33584): avc:  denied  { create } for  pid=10178 comm="syz.8.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  328.484437][T10192] 9pnet_fd: Insufficient options for proto=fd
[  328.626990][T10215] fuse: blksize only supported for fuseblk
[  328.765466][T10229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305
[  328.853716][T10232] rust_binder: Error while translating object.
[  328.892933][T10232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  328.899304][T10232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:305
[  329.267071][ T5135] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  329.438088][ T5135] usb 7-1: Using ep0 maxpacket: 32
[  329.447541][ T5135] usb 7-1: config 5 has an invalid interface number: 97 but max is 1
[  329.455981][ T5135] usb 7-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config
[  329.466495][ T5135] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2
[  329.476632][ T5135] usb 7-1: config 5 has no interface number 0
[  329.488638][ T5135] usb 7-1: config 5 interface 97 has no altsetting 0
[  329.500976][ T5135] usb 7-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=55.c7
[  329.511006][ T5135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.519116][ T5135] usb 7-1: Product: syz
[  329.523356][ T5135] usb 7-1: Manufacturer: syz
[  329.528003][ T5135] usb 7-1: SerialNumber: syz
[  329.731146][T10263] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585)
[  329.731177][T10263] rust_binder: Error while translating object.
[  329.747695][T10263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  329.754059][T10263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425
[  329.775589][T10249] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  330.019722][ T5135] usb 7-1: USB disconnect, device number 24
[  330.038576][ T9660] udevd[9660]: setting mode of /dev/bus/usb/007/024 to 020664 failed: No such file or directory
[  330.069197][ T9660] udevd[9660]: setting owner of /dev/bus/usb/007/024 to uid=0, gid=0 failed: No such file or directory
[  330.223380][T10282] netlink: 4432 bytes leftover after parsing attributes in process `syz.8.3211'.
[  330.742740][T10301] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  330.844552][T10307] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.113245][T10324] rust_binder: 318: no such ref 3
[  331.167175][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.227521][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.235031][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.242477][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.251339][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.259465][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.267622][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.275074][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.283408][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.290923][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.298500][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.305922][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.314274][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.322345][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.329786][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.338319][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.347413][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.356274][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.364336][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.371771][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.380175][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.388237][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.396386][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.403834][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.418450][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.425920][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.434614][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.442708][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.450022][T10330] rust_binder: Error while translating object.
[  331.450149][T10330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  331.451165][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.456799][T10330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446
[  331.466931][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.489749][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.497221][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.528189][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.535728][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.543158][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.551929][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.560562][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.568688][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.576130][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.614768][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.629725][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.644433][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.655055][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.663345][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.671834][T10333] fuse: Bad value for 'fd'
[  331.693666][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.716800][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.747256][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.777156][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.797649][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.817302][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.833067][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.849250][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.857481][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.865674][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.873162][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.880606][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.888113][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.895516][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.903013][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.910479][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.917950][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.925389][ T5137] hid-generic 0006:0E57:0008.000B: unknown main item tag 0x0
[  331.933606][ T5137] hid-generic 0006:0E57:0008.000B: hidraw0: VIRTUAL HID v1.ff Device [syz0] on syz1
[  332.045657][T10343] fido_id[10343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  332.260457][ T5137] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  332.422004][ T5137] usb 8-1: Using ep0 maxpacket: 16
[  332.437501][ T5137] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  332.459816][ T5137] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  332.479872][ T5137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  332.501470][ T5137] usb 8-1: SerialNumber: syz
[  332.520212][   T36] kauditd_printk_skb: 485 callbacks suppressed
[  332.520232][   T36] audit: type=1400 audit(2000000412.211:34070): avc:  denied  { ioctl } for  pid=10344 comm="syz.7.3234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.552465][T10345] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  332.595630][   T36] audit: type=1400 audit(2000000412.211:34071): avc:  denied  { ioctl } for  pid=10344 comm="syz.7.3234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.623158][   T36] audit: type=1400 audit(2000000412.211:34072): avc:  denied  { read write } for  pid=8792 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.653275][   T36] audit: type=1400 audit(2000000412.211:34073): avc:  denied  { read write open } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.682795][   T36] audit: type=1400 audit(2000000412.211:34074): avc:  denied  { ioctl } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.709536][   T36] audit: type=1400 audit(2000000412.239:34075): avc:  denied  { ioctl } for  pid=10344 comm="syz.7.3234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.734882][   T36] audit: type=1400 audit(2000000412.239:34076): avc:  denied  { ioctl } for  pid=10344 comm="syz.7.3234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.760492][   T36] audit: type=1400 audit(2000000412.248:34077): avc:  denied  { ioctl } for  pid=10344 comm="syz.7.3234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.818967][   T36] audit: type=1400 audit(2000000412.305:34078): avc:  denied  { read write } for  pid=10353 comm="syz.8.3238" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  332.848768][ T5137] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[  332.869069][ T5137] usb 8-1: USB disconnect, device number 12
[  332.900702][   T36] audit: type=1400 audit(2000000412.305:34079): avc:  denied  { read open } for  pid=10353 comm="syz.8.3238" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  333.093535][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.111246][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.139865][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.148551][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.791427][T10395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  333.791455][T10395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:463
[  333.900239][T10398] rust_binder: Write failure EFAULT in pid:465
[  334.227816][T10400] netlink: 'syz.2.3255': attribute type 4 has an invalid length.
[  334.241842][T10400] netlink: 'syz.2.3255': attribute type 5 has an invalid length.
[  334.249624][T10400] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3255'.
[  334.260958][T10400] 9pnet_fd: Insufficient options for proto=fd
[  334.583832][T10418] FAT-fs (rnullb0): bogus number of reserved sectors
[  334.607069][T10418] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  334.650995][T10422] rust_binder: Error while translating object.
[  334.651030][T10422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  334.668824][T10422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:330
[  334.934418][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3266'.
[  334.952575][T10437] erspan0: entered promiscuous mode
[  334.978115][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.008894][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.039967][T10447] rust_binder: 10443 RLIMIT_NICE not set
[  335.051637][T10443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.061369][T10443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471
[  335.256021][T10467] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  335.382079][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  335.553169][   T10] usb 7-1: Using ep0 maxpacket: 16
[  335.565471][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.575398][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.593584][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  335.601891][   T10] usb 7-1: unable to read config index 0 descriptor/start: -71
[  335.609516][   T10] usb 7-1: can't read configurations, error -71
[  335.627992][  T413] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  335.777614][  T413] usb 8-1: device descriptor read/64, error -71
[  336.044897][  T413] usb 8-1: device descriptor read/64, error -71
[  336.301472][  T413] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  336.441395][  T413] usb 8-1: device descriptor read/64, error -71
[  336.697015][  T413] usb 8-1: device descriptor read/64, error -71
[  336.729100][   T10] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  336.814719][  T413] usb usb8-port1: attempt power cycle
[  336.900016][   T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  336.908933][   T10] usb 7-1: config 179 has no interface number 0
[  336.916501][   T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  336.934473][   T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  336.964264][   T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  336.983693][   T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[  336.997072][   T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  337.011260][   T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  337.027658][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.047921][T10498] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  337.071728][T10498] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  337.191326][T10535] 9pnet_fd: Insufficient options for proto=fd
[  337.191540][T10534] 9pnet_fd: Insufficient options for proto=fd
[  337.220858][  T413] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  337.245805][  T413] usb 8-1: device descriptor read/8, error -71
[  337.385649][  T413] usb 8-1: device descriptor read/8, error -71
[  337.648502][  T413] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  337.672627][  T413] usb 8-1: device descriptor read/8, error -71
[  337.811321][  T413] usb 8-1: device descriptor read/8, error -71
[  337.861003][ T5140] usb 7-1: USB disconnect, device number 26
[  337.861126][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  337.876096][    C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending?
[  337.883672][   T36] kauditd_printk_skb: 610 callbacks suppressed
[  337.883692][   T36] audit: type=1400 audit(2000000417.215:34690): avc:  denied  { read write } for  pid=8350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.927868][  T413] usb usb8-port1: unable to enumerate USB device
[  337.944886][   T36] audit: type=1400 audit(2000000417.215:34691): avc:  denied  { read write open } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.986051][   T36] audit: type=1400 audit(2000000417.215:34692): avc:  denied  { ioctl } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  338.056668][   T36] audit: type=1400 audit(2000000417.272:34693): avc:  denied  { read write } for  pid=8792 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  338.106755][   T36] audit: type=1400 audit(2000000417.272:34694): avc:  denied  { read write open } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  338.153323][   T36] audit: type=1400 audit(2000000417.272:34695): avc:  denied  { ioctl } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  338.179089][   T36] audit: type=1400 audit(2000000417.281:34696): avc:  denied  { ioctl } for  pid=10468 comm="syz.7.3277" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.211323][   T36] audit: type=1400 audit(2000000417.318:34698): avc:  denied  { read write } for  pid=10552 comm="syz.8.3306" name="binder1" dev="binder" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  338.227652][T10564] SELinux: security_context_str_to_sid () failed with errno=-22
[  338.256408][   T36] audit: type=1400 audit(2000000417.318:34697): avc:  denied  { read write } for  pid=10551 comm="syz.6.3305" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.300478][ T8792] audit: audit_backlog=65 > audit_backlog_limit=64
[  338.321991][ T5140] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  338.441937][T10574] 9pnet_fd: Insufficient options for proto=fd
[  338.482380][ T5140] usb 7-1: Using ep0 maxpacket: 16
[  338.490682][ T5140] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  338.503232][ T5140] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.525759][ T5140] usb 7-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  338.541931][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.551867][ T5140] usb 7-1: config 0 interface 0 has no altsetting 0
[  338.560496][ T5140] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  338.570765][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.593406][ T5140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.612810][ T5140] usb 7-1: config 0 descriptor??
[  338.620256][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.648401][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.713300][T10581] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3316'.
[  338.738767][T10581] gretap0: entered promiscuous mode
[  338.859767][T10554] netlink: 2885 bytes leftover after parsing attributes in process `syz.6.3305'.
[  338.876708][T10554] loop7: detected capacity change from 0 to 7
[  338.898138][T10590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  338.898173][T10590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:350
[  338.933721][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.995793][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.087656][T10595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  339.087694][T10595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:354
[  339.101232][T10554] loop7: detected capacity change from 7 to 8
[  339.176576][ T5140] usbhid 7-1:0.0: can't add hid device: -71
[  339.187952][ T5140] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  339.217705][ T5140] usb 7-1: USB disconnect, device number 27
[  339.221317][T10597] netlink: 37 bytes leftover after parsing attributes in process `syz.2.3322'.
[  339.536912][T10615] rust_binder: 501: no such ref 2
[  339.547935][T10615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501
[  339.883760][T10626] rust_binder: Error while translating object.
[  339.905120][T10626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  339.911485][T10626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:505
[  340.022508][T10632] rust_binder: 10631 RLIMIT_NICE not set
[  340.033261][T10631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  340.038988][T10631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397
[  340.101409][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.134117][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.177045][T10635] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  340.353199][ T5140] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  340.524250][ T5140] usb 7-1: Invalid ep0 maxpacket: 64
[  340.673911][ T5140] usb 7-1: new low-speed USB device number 29 using dummy_hcd
[  340.802038][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.832804][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.866338][ T5140] usb 7-1: Invalid ep0 maxpacket: 64
[  340.872271][ T5140] usb usb7-port1: attempt power cycle
[  340.875057][T10662] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  340.885747][T10662] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  340.894135][T10662] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  340.902105][T10662] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  341.240558][ T5140] usb 7-1: new low-speed USB device number 30 using dummy_hcd
[  341.262790][ T5140] usb 7-1: Invalid ep0 maxpacket: 64
[  341.400953][ T5140] usb 7-1: new low-speed USB device number 31 using dummy_hcd
[  341.423044][ T5140] usb 7-1: Invalid ep0 maxpacket: 64
[  341.434616][ T5140] usb usb7-port1: unable to enumerate USB device
[  341.443639][ T5137] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  341.491240][T10683] fuse: Unknown parameter 'obj_user'
[  341.614725][ T5137] usb 8-1: Using ep0 maxpacket: 32
[  341.625583][ T5137] usb 8-1: config 1 has an invalid interface number: 153 but max is 0
[  341.634058][ T5137] usb 8-1: config 1 has no interface number 0
[  341.641060][ T5137] usb 8-1: config 1 interface 153 has no altsetting 0
[  341.657046][ T5137] usb 8-1: New USB device found, idVendor=645d, idProduct=bc2c, bcdDevice=14.6c
[  341.678868][ T5137] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.687640][ T5137] usb 8-1: Product: syz
[  341.693012][ T5137] usb 8-1: Manufacturer: syz
[  341.697709][ T5137] usb 8-1: SerialNumber: syz
[  341.792455][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.813200][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.897916][T10701] tipc: Started in network mode
[  341.902911][T10701] tipc: Node identity ac14140f, cluster identity 4711
[  341.911549][T10701] tipc: New replicast peer: 255.255.255.255
[  341.919014][T10701] tipc: Enabled bearer <udp:syz2>, priority 10
[  341.932836][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'.
[  341.943306][T10701] tipc: Disabling bearer <udp:syz2>
[  342.001975][ T5137] usb-storage 8-1:1.153: USB Mass Storage device detected
[  342.057842][ T5137] usb 8-1: USB disconnect, device number 17
[  342.106122][T10708] 9pnet_fd: Insufficient options for proto=fd
[  342.590392][T10715] rust_binder: 386: no such ref 3
[  342.595511][T10715] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  342.961732][  T413] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  343.100694][  T413] usb 8-1: device descriptor read/64, error -71
[  343.273846][   T36] kauditd_printk_skb: 669 callbacks suppressed
[  343.273865][   T36] audit: type=1400 audit(2000000422.267:35366): avc:  denied  { create } for  pid=10731 comm="syz.2.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  343.301070][   T36] audit: type=1400 audit(2000000422.285:35367): avc:  denied  { ioctl } for  pid=10717 comm="syz.7.3366" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  343.333702][   T36] audit: type=1400 audit(2000000422.323:35368): avc:  denied  { read write } for  pid=8350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.357283][  T413] usb 8-1: device descriptor read/64, error -71
[  343.383481][   T36] audit: type=1400 audit(2000000422.323:35369): avc:  denied  { read write open } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.409450][   T36] audit: type=1400 audit(2000000422.323:35370): avc:  denied  { ioctl } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.436138][   T36] audit: type=1400 audit(2000000422.360:35371): avc:  denied  { read } for  pid=10734 comm="syz.6.3371" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.459997][   T36] audit: type=1400 audit(2000000422.360:35372): avc:  denied  { read open } for  pid=10734 comm="syz.6.3371" path="/dev/binderfs/binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.490224][   T36] audit: type=1400 audit(2000000422.360:35373): avc:  denied  { ioctl } for  pid=10734 comm="syz.6.3371" path="/dev/binderfs/binder0" dev="binder" ino=43 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.516775][   T36] audit: type=1400 audit(2000000422.360:35374): avc:  denied  { set_context_mgr } for  pid=10734 comm="syz.6.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  343.537674][   T36] audit: type=1400 audit(2000000422.369:35375): avc:  denied  { create } for  pid=10734 comm="syz.6.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  343.624594][  T413] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  343.763505][  T413] usb 8-1: device descriptor read/64, error -71
[  343.774244][ T5158] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  343.937185][ T5158] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.949015][ T5158] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  343.960464][ T5158] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  343.971898][ T5158] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  343.980995][ T5158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.992266][T10735] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  344.030769][  T413] usb 8-1: device descriptor read/64, error -71
[  344.148487][  T413] usb usb8-port1: attempt power cycle
[  344.511860][  T413] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  344.535837][  T413] usb 8-1: device descriptor read/8, error -71
[  344.674655][  T413] usb 8-1: device descriptor read/8, error -71
[  344.865551][ T5158] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[  344.873195][ T5158] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input33
[  344.939495][  T413] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  344.963242][  T413] usb 8-1: device descriptor read/8, error -71
[  345.114377][  T413] usb 8-1: device descriptor read/8, error -71
[  345.239381][  T413] usb usb8-port1: unable to enumerate USB device
[  345.993598][T10764] rust_binder: Error while translating object.
[  345.993680][T10764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  346.000852][T10764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:391
[  346.024274][T10765] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.572330][ T5151] usb 7-1: USB disconnect, device number 32
[  346.572382][    C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  346.596532][ T5137] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  346.765178][T10804] rust_binder: 10801 RLIMIT_NICE not set
[  346.767568][ T5137] usb 8-1: device descriptor read/64, error -71
[  346.777341][T10801] rust_binder: Write failure EFAULT in pid:407
[  346.780026][ T5151] rust_binder: 10799: removing orphan mapping 0:4248
[  347.034862][ T5137] usb 8-1: device descriptor read/64, error -71
[  347.136751][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3397'.
[  347.152433][ T5135] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  347.193024][T10816] cgroup: fork rejected by pids controller in /syz8
[  347.291409][ T5137] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  347.334327][ T5135] usb 7-1: too many configurations: 151, using maximum allowed: 8
[  347.374545][T10852] 9pnet_fd: Insufficient options for proto=fd
[  347.394675][ T5135] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  347.411169][ T5135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  347.430371][ T5135] usb 7-1: Product: syz
[  347.434614][ T5135] usb 7-1: Manufacturer: syz
[  347.439258][ T5135] usb 7-1: SerialNumber: syz
[  347.445764][ T5137] usb 8-1: device descriptor read/64, error -71
[  347.468784][ T5135] usb 7-1: config 0 descriptor??
[  347.487464][T10857] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3399'.
[  347.509491][T10861] tipc: New replicast peer: 255.255.255.255
[  347.515956][T10861] tipc: Enabled bearer <udp:syz2>, priority 10
[  347.523503][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'.
[  347.533377][T10861] tipc: Disabling bearer <udp:syz2>
[  347.699371][T10873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3404'.
[  347.719690][T10809] rust_binder: Error in use_page_slow: ESRCH
[  347.719718][T10809] rust_binder: use_range failure ESRCH
[  347.725889][ T5137] usb 8-1: device descriptor read/64, error -71
[  347.751141][T10809] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  347.751195][T10809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  347.759122][T10809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:412
[  347.771857][ T5135] usb 7-1: bad CDC descriptors
[  347.795851][ T5135] usb 7-1: USB disconnect, device number 33
[  347.879960][ T5137] usb usb8-port1: attempt power cycle
[  347.946855][T10881] syz.8.3405 (10881) used obsolete PPPIOCDETACH ioctl
[  348.242885][ T5137] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  348.267598][ T5137] usb 8-1: device descriptor read/8, error -71
[  348.407830][ T5137] usb 8-1: device descriptor read/8, error -71
[  348.440747][T10906] incfs: Options parsing error. -22
[  348.446206][T10906] incfs: mount failed -22
[  348.632536][   T36] kauditd_printk_skb: 685 callbacks suppressed
[  348.632554][   T36] audit: type=1400 audit(2000000427.280:36061): avc:  denied  { read write } for  pid=8350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.680113][   T36] audit: type=1400 audit(2000000427.280:36062): avc:  denied  { ioctl } for  pid=10779 comm="syz.7.3385" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  348.713115][  T413] rust_binder: 10874: removing orphan mapping 0:1048
[  348.713275][ T5137] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  348.721597][   T36] audit: type=1400 audit(2000000427.290:36063): avc:  denied  { read write open } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.752220][ T5137] usb 8-1: device descriptor read/8, error -71
[  348.754895][   T36] audit: type=1400 audit(2000000427.290:36064): avc:  denied  { ioctl } for  pid=8350 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  348.784440][   T36] audit: type=1400 audit(2000000427.318:36065): avc:  denied  { read write } for  pid=10913 comm="syz.6.3419" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  348.809025][   T36] audit: type=1400 audit(2000000427.318:36066): avc:  denied  { read write open } for  pid=10913 comm="syz.6.3419" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  348.833434][   T36] audit: type=1400 audit(2000000427.318:36067): avc:  denied  { block_suspend } for  pid=10913 comm="syz.6.3419" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  348.855113][   T36] audit: type=1400 audit(2000000427.318:36068): avc:  denied  { mounton } for  pid=10913 comm="syz.6.3419" path="/129/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  348.877903][   T36] audit: type=1400 audit(2000000427.318:36069): avc:  denied  { mount } for  pid=10913 comm="syz.6.3419" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  348.928618][T10918] rust_binder: Write failure EFAULT in pid:425
[  348.929890][ T5137] usb 8-1: device descriptor read/8, error -71
[  348.959130][   T36] audit: type=1400 audit(2000000427.393:36070): avc:  denied  { ioctl } for  pid=10779 comm="syz.7.3385" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  349.070223][ T5137] usb usb8-port1: unable to enumerate USB device
[  349.218835][T10938] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  349.218864][T10938] rust_binder: Read failure Err(EFAULT) in pid:435
[  349.227314][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.286471][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.315205][T10940] TCP: TCP_TX_DELAY enabled
[  349.357213][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3425'.
[  349.596436][T10947] netlink: 'syz.7.3431': attribute type 4 has an invalid length.
[  349.612452][T10947] netlink: 'syz.7.3431': attribute type 4 has an invalid length.
[  350.018654][T10967] incfs: Options parsing error. -22
[  350.023978][T10967] incfs: mount failed -22
[  350.048204][T10967] 9pnet_fd: Insufficient options for proto=fd
[  350.220648][ T5158] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  350.355267][T10978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615
[  350.391682][ T5158] usb 8-1: Using ep0 maxpacket: 16
[  350.408630][ T5158] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.422181][ T5158] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  350.432473][ T5158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  350.441320][ T5158] usb 8-1: SerialNumber: syz
[  350.443861][T10979] rust_binder: Error while translating object.
[  350.446073][T10979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  350.452016][ T5158] hub 8-1:1.0: bad descriptor, ignoring hub
[  350.466606][T10979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:615
[  350.468773][ T5158] hub 8-1:1.0: probe with driver hub failed with error -5
[  350.724621][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'.
[  350.773927][T10994] overlayfs: failed to clone upperpath
[  350.787360][ T5158] usb 8-1: USB disconnect, device number 26
[  351.345409][T11009] random: crng reseeded on system resumption
[  351.461080][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.470150][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.605279][T11025] overlayfs: failed to clone upperpath
[  351.649859][T11027] 9pnet_fd: Insufficient options for proto=fd
[  351.684363][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3460'.
[  351.823566][T11044] overlayfs: failed to clone upperpath
[  352.561365][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.588321][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.678955][T11080] /dev/loop0: Can't lookup blockdev
[  352.782124][T11087] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true
[  352.809483][T11089] exFAT-fs (rnullb0): invalid boot record signature
[  352.889819][T11089] exFAT-fs (rnullb0): failed to read boot sector
[  352.910870][T11089] exFAT-fs (rnullb0): failed to recognize exfat type
[  353.059137][ T5135] rust_binder: 0: removing orphan mapping 0:1048
[  353.151959][T11092] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.159060][T11092] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.166238][T11092] bridge_slave_0: entered allmulticast mode
[  353.172739][T11092] bridge_slave_0: entered promiscuous mode
[  353.180514][T11092] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.204540][T11092] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.238001][T11092] bridge_slave_1: entered allmulticast mode
[  353.244449][T11092] bridge_slave_1: entered promiscuous mode
[  353.296533][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3487'.
[  353.419144][ T4745] bridge0: port 3(erspan0) entered disabled state
[  353.434206][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.470878][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.683402][ T4745] tipc: Left network mode
[  353.915554][T11157] rust_binder: 11147 RLIMIT_NICE not set
[  353.934162][T11092] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.946946][T11092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.954385][T11092] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.961449][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.022024][   T36] kauditd_printk_skb: 675 callbacks suppressed
[  354.022044][   T36] audit: type=1400 audit(2000000432.324:36746): avc:  denied  { read write } for  pid=8792 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  354.070643][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.082016][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.109408][   T36] audit: type=1400 audit(2000000432.333:36747): avc:  denied  { sys_module } for  pid=11092 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  354.147463][   T36] audit: type=1400 audit(2000000432.333:36748): avc:  denied  { sys_module } for  pid=11092 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  354.171390][   T36] audit: type=1400 audit(2000000432.333:36749): avc:  denied  { sys_module } for  pid=11092 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  354.194728][   T36] audit: type=1400 audit(2000000432.352:36750): avc:  denied  { read write open } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  354.220524][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.227687][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.240170][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.247311][ T4746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.277007][   T36] audit: type=1400 audit(2000000432.352:36751): avc:  denied  { ioctl } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  354.333231][   T36] audit: type=1400 audit(2000000432.380:36752): avc:  denied  { watch } for  pid=11162 comm="syz.6.3501" path="/159" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  354.369929][T11092] veth0_vlan: entered promiscuous mode
[  354.379603][   T36] audit: type=1400 audit(2000000432.380:36753): avc:  denied  { sys_module } for  pid=11092 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  354.421647][   T36] audit: type=1400 audit(2000000432.389:36754): avc:  denied  { wake_alarm } for  pid=11162 comm="syz.6.3501" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  354.428561][T11092] veth1_macvtap: entered promiscuous mode
[  354.464729][   T36] audit: type=1400 audit(2000000432.399:36755): avc:  denied  { read write } for  pid=11164 comm="syz.8.3502" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  354.592965][T11170] rust_binder: Error in use_page_slow: ESRCH
[  354.593002][T11170] rust_binder: use_range failure ESRCH
[  354.606320][T11170] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  354.617518][T11170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  354.642087][T11170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2
[  354.710868][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'.
[  355.370744][T11215] 9pnet_fd: Insufficient options for proto=fd
[  355.581147][T11223] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  355.707466][T11228] /dev/rnullb0: Can't lookup blockdev
[  356.154672][T11267] Invalid ELF header type: 2 != 1
[  356.187710][T11267] exFAT-fs (rnullb0): invalid boot record signature
[  356.194374][T11267] exFAT-fs (rnullb0): failed to read boot sector
[  356.244316][T11267] exFAT-fs (rnullb0): failed to recognize exfat type
[  356.414044][T11289] SELinux: security_context_str_to_sid () failed with errno=-22
[  356.763294][ T5135] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  356.885257][T11298] rust_binder: 11296 RLIMIT_NICE not set
[  356.930136][ T5137] rust_binder: 11295: removing orphan mapping 0:40
[  356.948157][T11306] rust_binder: 11307 RLIMIT_NICE not set
[  356.948674][T11306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:479
[  356.956323][ T5135] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  356.997974][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.014117][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.024061][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  357.042070][ T5137] rust_binder: 11305: removing orphan mapping 0:1048
[  357.050364][ T5135] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  357.081482][ T5135] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  357.097412][ T5135] usb 3-1: Manufacturer: syz
[  357.111412][ T5135] usb 3-1: config 0 descriptor??
[  357.114127][T11313] rust_binder: Error while translating object.
[  357.116446][T11313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  357.132041][T11313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:688
[  357.451225][T11330] /dev/nullb0: Can't lookup blockdev
[  357.821663][  T551] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  357.992725][  T551] usb 8-1: Using ep0 maxpacket: 16
[  358.001468][  T551] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  358.013658][  T551] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  358.029821][  T551] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  358.040542][  T551] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  358.049547][  T551] usb 8-1: SerialNumber: syz
[  358.067786][  T551] usb 8-1: bad CDC descriptors
[  358.316334][  T551] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  358.348146][  T551] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  358.417776][T11339] 9pnet_fd: Insufficient options for proto=fd
[  358.443133][T11345] fido_id[11345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  358.479219][ T5158] usb 8-1: USB disconnect, device number 27
[  359.134104][T11369] binder: Unknown parameter 'fsconte�����xt'
[  359.303234][T11378] binder: Unknown parameter '�'
[  359.375587][   T36] kauditd_printk_skb: 830 callbacks suppressed
[  359.375610][   T36] audit: type=1400 audit(2000000437.328:37586): avc:  denied  { read write } for  pid=8792 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  359.436076][   T36] audit: type=1400 audit(2000000437.328:37587): avc:  denied  { read write open } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  359.489757][   T36] audit: type=1400 audit(2000000437.328:37588): avc:  denied  { ioctl } for  pid=8792 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  359.533345][   T36] audit: type=1400 audit(2000000437.394:37589): avc:  denied  { create } for  pid=11384 comm="syz.6.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  359.553238][   T36] audit: type=1400 audit(2000000437.431:37590): avc:  denied  { read write } for  pid=11383 comm="syz.8.3569" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  359.577034][   T36] audit: type=1400 audit(2000000437.431:37591): avc:  denied  { read write open } for  pid=11383 comm="syz.8.3569" path="/dev/binderfs/binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  359.602349][   T36] audit: type=1400 audit(2000000437.459:37592): avc:  denied  { create } for  pid=11387 comm="syz.6.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  359.622295][   T36] audit: type=1400 audit(2000000437.468:37593): avc:  denied  { read } for  pid=11383 comm="syz.8.3569" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  359.643739][   T36] audit: type=1400 audit(2000000437.468:37594): avc:  denied  { ioctl } for  pid=11387 comm="syz.6.3571" path="socket:[55635]" dev="sockfs" ino=55635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  359.669584][   T36] audit: type=1400 audit(2000000437.468:37595): avc:  denied  { setopt } for  pid=11387 comm="syz.6.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  359.817657][ T5135] usbhid 3-1:0.0: can't add hid device: -71
[  359.842310][ T5135] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  359.882512][T11394] rust_binder: Write failure EFAULT in pid:722
[  359.884112][ T5135] usb 3-1: USB disconnect, device number 39
[  360.060159][T11407] netlink: 'syz.2.3573': attribute type 1 has an invalid length.
[  360.381707][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.388713][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.395499][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.420894][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.427518][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.453104][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.472530][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.479543][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.486994][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.494083][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.500987][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.508247][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.517187][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.524151][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.531744][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.559864][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.566879][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.575989][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.584409][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.592593][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.600295][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.607791][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.623973][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.631519][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.640098][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.666686][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.673528][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.698809][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.705645][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.738618][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.749327][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.759911][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.767002][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.774097][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.784816][T11425] /dev/rnullb0: Can't lookup blockdev
[  360.912464][T11443] rust_binder: Write failure EINVAL in pid:29
[  361.081737][T11454] netlink: 'syz.7.3593': attribute type 13 has an invalid length.
[  362.511064][T11499] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 186)
[  362.511093][T11499] rust_binder: Error while translating object.
[  362.523373][T11499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  362.530405][T11499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  362.798639][T11520] binder: Bad value for 'max'
[  362.957994][T11528] binder: Unknown parameter 'context�'
[  363.290893][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3617'.
[  363.341300][T11549] netlink: 'syz.2.3619': attribute type 1 has an invalid length.
[  363.424480][T11554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  363.424523][T11554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54
[  363.776331][  T551] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  363.850886][T11573] netlink: 'syz.8.3629': attribute type 4 has an invalid length.
[  363.873119][T11575] netlink: 'syz.8.3629': attribute type 17 has an invalid length.
[  363.958066][  T551] usb 8-1: Using ep0 maxpacket: 8
[  363.967667][  T551] usb 8-1: unable to get BOS descriptor or descriptor too short
[  363.979075][  T551] usb 8-1: config 4 has an invalid interface number: 147 but max is 0
[  363.988593][  T551] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  363.998801][  T551] usb 8-1: config 4 has no interface number 0
[  364.010111][  T551] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  364.020565][  T551] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.029434][  T551] usb 8-1: Product: syz
[  364.034501][  T551] usb 8-1: Manufacturer: syz
[  364.039200][  T551] usb 8-1: SerialNumber: syz
[  364.289123][T11561] 9pnet_fd: Insufficient options for proto=fd
[  364.299077][  T551] usb 8-1: Found UVC 0.02 device syz (04f2:b746)
[  364.305664][  T551] usb 8-1: No valid video chain found.
[  364.313666][  T551] usb 8-1: USB disconnect, device number 28
[  364.503310][ T5158] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  364.666125][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.677080][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.686891][ T5158] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  364.699729][ T5158] usb 3-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.00
[  364.708809][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.718650][ T5158] usb 3-1: config 0 descriptor??
[  364.847901][   T36] kauditd_printk_skb: 659 callbacks suppressed
[  364.847922][   T36] audit: type=1400 audit(2000000442.445:38255): avc:  denied  { read write } for  pid=8457 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  364.878612][   T36] audit: type=1400 audit(2000000442.445:38256): avc:  denied  { read write open } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  364.913651][   T36] audit: type=1400 audit(2000000442.445:38257): avc:  denied  { ioctl } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  364.940129][   T36] audit: type=1400 audit(2000000442.529:38258): avc:  denied  { read } for  pid=11587 comm="syz.7.3633" name="binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  364.966408][   T36] audit: type=1400 audit(2000000442.529:38259): avc:  denied  { read open } for  pid=11587 comm="syz.7.3633" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  364.991105][   T36] audit: type=1400 audit(2000000442.529:38260): avc:  denied  { read write } for  pid=11587 comm="syz.7.3633" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  365.014852][   T36] audit: type=1400 audit(2000000442.529:38261): avc:  denied  { read write open } for  pid=11587 comm="syz.7.3633" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  365.039493][   T36] audit: type=1400 audit(2000000442.529:38262): avc:  denied  { ioctl } for  pid=11587 comm="syz.7.3633" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  365.065390][   T36] audit: type=1400 audit(2000000442.529:38263): avc:  denied  { ioctl } for  pid=11587 comm="syz.7.3633" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  365.100163][T11590] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  365.100210][T11590] rust_binder: Read failure Err(EFAULT) in pid:752
[  365.110392][T11591] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  365.125214][   T36] audit: type=1400 audit(2000000442.529:38264): avc:  denied  { ioctl } for  pid=11587 comm="syz.7.3633" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  365.126222][T11591] rust_binder: Read failure Err(EFAULT) in pid:752
[  365.198166][  T551] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  365.219710][ T5158] ntrig 0003:1B96:0007.000D: hidraw0: USB HID v0.00 Device [HID 1b96:0007] on usb-dummy_hcd.2-1/input0
[  365.415481][ T5158] ntrig 0003:1B96:0007.000D: Firmware version: 6.8.19.53.5 (226d b566)
[  365.422738][  T551] usb 8-1: device descriptor read/64, error -71
[  365.684377][T11580] incfs: Options parsing error. -22
[  365.689683][T11580] incfs: mount failed -22
[  365.701594][  T551] usb 8-1: device descriptor read/64, error -71
[  365.770538][ T5158] usb 3-1: USB disconnect, device number 40
[  365.970711][  T551] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  366.128257][  T551] usb 8-1: device descriptor read/64, error -71
[  366.438335][  T551] usb 8-1: device descriptor read/64, error -71
[  366.442347][T11652] 9pnet_fd: Insufficient options for proto=fd
[  366.566271][  T551] usb usb8-port1: attempt power cycle
[  366.683886][T11673] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  366.693447][ T5158] rust_binder: 11653: removing orphan mapping 0:1048
[  366.951453][  T551] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  366.996977][  T551] usb 8-1: device descriptor read/8, error -71
[  367.092542][T11700] x_tables: duplicate underflow at hook 1
[  367.153035][  T551] usb 8-1: device descriptor read/8, error -71
[  367.421842][  T551] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  367.445856][  T551] usb 8-1: device descriptor read/8, error -71
[  367.589168][  T551] usb 8-1: device descriptor read/8, error -71
[  367.721274][  T551] usb usb8-port1: unable to enumerate USB device
[  367.892245][ T5158] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  368.063301][ T5158] usb 3-1: device descriptor read/64, error -71
[  368.081296][T11721] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  368.090276][T11721] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  368.099395][T11721] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  368.112727][T11721] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  368.301451][T11729] netlink: 'syz.7.3677': attribute type 11 has an invalid length.
[  368.326039][T11729] FAT-fs (rnullb0): bogus number of reserved sectors
[  368.341240][ T5158] usb 3-1: device descriptor read/64, error -71
[  368.349299][T11729] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  368.597815][ T5158] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  368.707402][   T10] usb 9-1: USB disconnect, device number 6
[  368.758195][ T5158] usb 3-1: device descriptor read/64, error -71
[  368.886535][ T4745] bridge_slave_1: left allmulticast mode
[  368.892253][ T4745] bridge_slave_1: left promiscuous mode
[  368.914648][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.931534][ T4745] bridge_slave_0: left allmulticast mode
[  368.940046][ T4745] bridge_slave_0: left promiscuous mode
[  368.960627][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.036148][ T5158] usb 3-1: device descriptor read/64, error -71
[  369.158991][ T5158] usb usb3-port1: attempt power cycle
[  369.168870][T11746] /dev/rnullb0: Can't lookup blockdev
[  369.184012][ T4745] veth1_macvtap: left promiscuous mode
[  369.197126][ T4745] veth0_vlan: left promiscuous mode
[  369.381668][T11744] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.388917][T11744] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.396098][T11744] bridge_slave_0: entered allmulticast mode
[  369.403242][T11744] bridge_slave_0: entered promiscuous mode
[  369.411689][T11744] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.418894][T11744] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.427381][T11744] bridge_slave_1: entered allmulticast mode
[  369.433765][T11744] bridge_slave_1: entered promiscuous mode
[  369.533718][T11744] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.540875][T11744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.548226][T11744] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.555387][T11744] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.562896][ T5158] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  369.595774][ T5158] usb 3-1: device descriptor read/8, error -71
[  369.641327][T11766] rust_binder: 563: no such ref 3
[  369.646774][T11766] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  369.671381][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.679000][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.693937][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.701091][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.714294][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.721450][ T4746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.755597][ T5158] usb 3-1: device descriptor read/8, error -71
[  369.856479][T11744] veth0_vlan: entered promiscuous mode
[  369.915127][T11744] veth1_macvtap: entered promiscuous mode
[  370.019650][ T5158] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  370.045089][ T5158] usb 3-1: device descriptor read/8, error -71
[  370.203064][   T36] kauditd_printk_skb: 787 callbacks suppressed
[  370.203085][   T36] audit: type=1400 audit(366.535:39052): avc:  denied  { ioctl } for  pid=11708 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.241083][ T5158] usb 3-1: device descriptor read/8, error -71
[  370.254334][   T36] audit: type=1400 audit(366.535:39053): avc:  denied  { ioctl } for  pid=11708 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.280589][   T36] audit: type=1400 audit(366.563:39054): avc:  denied  { ioctl } for  pid=11708 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.310248][   T36] audit: type=1400 audit(366.563:39055): avc:  denied  { read } for  pid=11786 comm="syz.7.3693" name="binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  370.310358][T11793] rust_binder: 11787 RLIMIT_NICE not set
[  370.332902][   T36] audit: type=1400 audit(366.563:39056): avc:  denied  { read open } for  pid=11786 comm="syz.7.3693" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  370.364135][ T5158] usb usb3-port1: unable to enumerate USB device
[  370.371021][   T36] audit: type=1400 audit(366.563:39057): avc:  denied  { ioctl } for  pid=11708 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  370.425867][   T36] audit: type=1400 audit(366.563:39058): avc:  denied  { create } for  pid=11786 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  370.500078][   T36] audit: type=1400 audit(366.563:39059): avc:  denied  { connect } for  pid=11786 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  370.540173][T11801] loop7: detected capacity change from 0 to 7
[  370.552189][T11803] overlayfs: cannot append lower layer
[  370.557420][   T36] audit: type=1400 audit(366.563:39060): avc:  denied  { write } for  pid=11786 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  370.579475][   T36] audit: type=1400 audit(366.563:39061): avc:  denied  { write } for  pid=11786 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  370.600142][T11804] overlayfs: cannot append lower layer
[  370.650892][T11805] loop7: detected capacity change from 7 to 8
[  370.773322][T11807] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1168, size: 18446744073709551585)
[  370.773354][T11807] rust_binder: Error while translating object.
[  370.798395][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3701'.
[  370.810654][T11807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  370.816718][T11807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587
[  370.955429][T11813] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  370.971323][T11813] rust_binder: Read failure Err(EFAULT) in pid:70
[  371.224158][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3708'.
[  371.366911][T11840] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  371.962734][  T413] rust_binder: 11879: removing orphan mapping 0:1048
[  371.994966][T11886] netlink: 'syz.2.3727': attribute type 1 has an invalid length.
[  372.339023][T11907] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  372.842059][T11930] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  373.097155][T11951] /dev/rnullb0: Can't lookup blockdev
[  373.102099][T11945] bridge0: port 3(vlan0) entered blocking state
[  373.119752][T11945] bridge0: port 3(vlan0) entered disabled state
[  373.149614][T11945] vlan0: entered allmulticast mode
[  373.161095][T11945] veth0_vlan: entered allmulticast mode
[  373.174989][T11945] vlan0: entered promiscuous mode
[  373.191215][T11945] bridge0: port 3(vlan0) entered blocking state
[  373.197576][T11945] bridge0: port 3(vlan0) entered forwarding state
[  373.537727][ T5137] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  373.558354][  T551] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  373.729890][ T5137] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1023
[  373.751566][ T5137] usb 3-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  373.765759][  T551] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8
[  373.777807][ T5137] usb 3-1: config 1 interface 0 has no altsetting 0
[  373.785924][  T551] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  373.797064][  T551] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 33209, setting to 1024
[  373.808303][  T551] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  373.823026][  T551] usb 10-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  373.832305][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  373.847845][  T551] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.856408][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  373.868193][  T551] usb 10-1: config 0 descriptor??
[  373.873513][ T5137] usb 3-1: SerialNumber: syz
[  373.884191][T11963] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  373.893391][  T551] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  374.120685][T11953] rust_binder: 11961 RLIMIT_NICE not set
[  374.127696][  T551] rust_binder: get_current_thread was called from the wrong process.
[  374.144629][ T5137] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  374.170350][  T551] usb 10-1: USB disconnect, device number 2
[  374.198056][ T5137] usb 3-1: USB disconnect, device number 45
[  374.247525][T11985] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=11985 comm=syz.7.3760
[  374.390466][T11992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11992 comm=syz.7.3762
[  374.403722][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3762'.
[  374.422178][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3762'.
[  374.522952][T11999] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  374.706685][T12003] /dev/rnullb0: Can't lookup blockdev
[  374.715785][T12003] /dev/rnullb0: Can't lookup blockdev
[  374.765577][  T413] rust_binder: 11952: removing orphan mapping 0:4248
[  374.841631][ T5158] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  375.050975][ T5158] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.053489][T12016] /dev/rnullb0: Can't lookup blockdev
[  375.088084][ T5158] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  375.141118][ T5158] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  375.154571][ T5158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.173351][ T5158] usb 8-1: Product: syz
[  375.177632][ T5158] usb 8-1: Manufacturer: syz
[  375.182247][ T5158] usb 8-1: SerialNumber: syz
[  375.354261][T12050] /dev/nullb0: Can't lookup blockdev
[  375.436081][T12001] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  375.661768][   T36] kauditd_printk_skb: 894 callbacks suppressed
[  375.661790][   T36] audit: type=1400 audit(371.633:39956): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.692682][   T36] audit: type=1400 audit(371.633:39957): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.717188][   T36] audit: type=1400 audit(371.633:39958): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.741670][   T36] audit: type=1400 audit(371.633:39959): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.866920][   T36] audit: type=1400 audit(371.829:39960): avc:  denied  { read write } for  pid=11744 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  375.891827][   T36] audit: type=1400 audit(371.829:39961): avc:  denied  { read write open } for  pid=11744 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  375.919319][   T36] audit: type=1400 audit(371.829:39962): avc:  denied  { ioctl } for  pid=11744 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  375.950078][   T36] audit: type=1400 audit(371.876:39963): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.975195][   T36] audit: type=1400 audit(371.876:39964): avc:  denied  { ioctl } for  pid=12000 comm="syz.7.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  375.984285][T12062] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.000484][   T36] audit: type=1400 audit(371.876:39965): avc:  denied  { create } for  pid=12061 comm="syz.9.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  376.127536][T12001] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  376.229610][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3790'.
[  376.355801][ T5158] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[  376.362501][ T5158] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  376.372416][ T5158] cdc_mbim 8-1:1.0: setting rx_max = 2048
[  376.621645][ T5158] cdc_mbim 8-1:1.0: setting tx_max = 184
[  376.666476][ T5158] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  376.678819][ T5158] wwan wwan0: port wwan0mbim0 attached
[  376.705785][ T5158] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 42:42:42:42:42:42
[  376.723256][ T5158] usb 8-1: USB disconnect, device number 33
[  376.733662][ T5158] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM
[  376.852847][ T5158] wwan wwan0: port wwan0mbim0 disconnected
[  376.893700][  T413] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  377.067510][  T413] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.089946][T12130] 9pnet: Could not find request transport: fd
[  377.089946][T12130] r�N��tW4�|`�v)������I�N������˖~�1�TS��4�{���е��ܪZ\�4�P�n�
[  377.091152][  T413] usb 10-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  377.132011][  T413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.140412][  T413] usb 10-1: Product: syz
[  377.144754][  T413] usb 10-1: Manufacturer: syz
[  377.150600][  T413] usb 10-1: SerialNumber: syz
[  377.161217][  T413] usb 10-1: config 0 descriptor??
[  377.178778][  T413] usb 10-1: bad CDC descriptors
[  377.183918][  T413] cdc_acm 10-1:0.0: Control and data interfaces are not separated!
[  377.200361][  T413] cdc_acm 10-1:0.0: This needs exactly 3 endpoints
[  377.207032][  T413] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22
[  377.262277][T12138] /dev/rnullb0: Can't lookup blockdev
[  377.281862][T12141] fuse: Bad value for 'fd'
[  377.399308][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3813'.
[  377.510888][T12157] netlink: 'syz.7.3816': attribute type 12 has an invalid length.
[  377.520065][T12158] netlink: 'syz.7.3816': attribute type 4 has an invalid length.
[  377.948902][  T551] usb 10-1: USB disconnect, device number 3
[  378.254925][T12168] /dev/rnullb0: Can't lookup blockdev
[  378.471686][T12182] binder: Unknown parameter '0000000000000000000000400000000000000000000004'
[  378.547094][T12186] netlink: 'syz.6.3826': attribute type 16 has an invalid length.
[  378.567349][T12186] netlink: 'syz.6.3826': attribute type 3 has an invalid length.
[  378.577986][T12186] netlink: 'syz.6.3826': attribute type 1 has an invalid length.
[  378.585843][T12186] netlink: 'syz.6.3826': attribute type 1 has an invalid length.
[  378.593670][T12186] netlink: 'syz.6.3826': attribute type 2 has an invalid length.
[  378.602410][T12186] netlink: 64006 bytes leftover after parsing attributes in process `syz.6.3826'.
[  378.767024][T12193] overlay: Unknown parameter 'dont_hash'
[  378.899450][T12202] fuse: Bad value for 'fd'
[  379.126145][T12215] rust_binder: Write failure EFAULT in pid:667
[  379.186256][ T4747] bridge_slave_1: left allmulticast mode
[  379.215949][ T4747] bridge_slave_1: left promiscuous mode
[  379.221804][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.234229][ T4747] bridge_slave_0: left allmulticast mode
[  379.245617][ T4747] bridge_slave_0: left promiscuous mode
[  379.263170][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.452723][ T4747] veth1_macvtap: left promiscuous mode
[  379.458496][ T4747] veth0_vlan: left promiscuous mode
[  379.633178][T12226] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.640413][T12226] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.647556][T12226] bridge_slave_0: entered allmulticast mode
[  379.653864][T12226] bridge_slave_0: entered promiscuous mode
[  379.661372][T12226] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.668481][T12226] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.675682][T12226] bridge_slave_1: entered allmulticast mode
[  379.681979][T12226] bridge_slave_1: entered promiscuous mode
[  379.782096][T12233] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[  379.871699][T12226] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.886764][T12226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.894134][T12226] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.901240][T12226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.919463][T12250] rust_binder: 12237 RLIMIT_NICE not set
[  379.927261][T12253] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  379.953304][ T5151] rust_binder: 12236: removing orphan mapping 0:1048
[  379.994014][ T5151] rust_binder: 0: removing orphan mapping 1048:8
[  380.009008][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.036843][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.092146][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.099266][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.133177][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.140291][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.361167][T12226] veth0_vlan: entered promiscuous mode
[  380.420634][T12226] veth1_macvtap: entered promiscuous mode
[  380.763287][T12303] 9pnet_fd: Insufficient options for proto=fd
[  381.096688][   T36] kauditd_printk_skb: 841 callbacks suppressed
[  381.096708][   T36] audit: type=1400 audit(376.731:40807): avc:  denied  { read write } for  pid=8457 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  381.177197][T12331] rust_binder: 12330 RLIMIT_NICE not set
[  381.177452][T12331] rust_binder: Write failure EINVAL in pid:688
[  381.184025][   T36] audit: type=1400 audit(376.731:40808): avc:  denied  { read write open } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  381.244892][ T5151] rust_binder: 0: removing orphan mapping 0:1048
[  381.287654][   T36] audit: type=1400 audit(376.731:40809): avc:  denied  { ioctl } for  pid=8457 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  381.334508][   T36] audit: type=1400 audit(376.787:40810): avc:  denied  { read } for  pid=12326 comm="syz.7.3872" name="binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.367096][   T36] audit: type=1400 audit(376.787:40811): avc:  denied  { read open } for  pid=12326 comm="syz.7.3872" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.392184][   T36] audit: type=1400 audit(376.787:40812): avc:  denied  { ioctl } for  pid=12326 comm="syz.7.3872" path="/dev/binderfs/binder0" dev="binder" ino=56 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.421420][   T36] audit: type=1400 audit(376.787:40813): avc:  denied  { set_context_mgr } for  pid=12326 comm="syz.7.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  381.519729][   T36] audit: type=1400 audit(376.787:40814): avc:  denied  { ioctl } for  pid=12326 comm="syz.7.3872" path="/dev/binderfs/binder0" dev="binder" ino=56 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.586872][   T36] audit: type=1400 audit(376.796:40815): avc:  denied  { map } for  pid=12326 comm="syz.7.3872" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.641539][   T36] audit: type=1400 audit(376.796:40816): avc:  denied  { read } for  pid=12326 comm="syz.7.3872" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  381.803014][T12355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3881'.
[  381.844541][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3881'.
[  382.063591][T12351] sit0: entered promiscuous mode
[  382.083523][T12351] netlink: 'syz.7.3880': attribute type 1 has an invalid length.
[  382.103411][T12351] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3880'.
[  382.520510][ T4745] vlan0: left allmulticast mode
[  382.525995][ T4745] veth0_vlan: left allmulticast mode
[  382.533238][ T4745] vlan0: left promiscuous mode
[  382.538248][ T4745] bridge0: port 3(vlan0) entered disabled state
[  382.546402][ T4745] bridge_slave_1: left allmulticast mode
[  382.552163][ T4745] bridge_slave_1: left promiscuous mode
[  382.557901][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.567434][ T4745] bridge_slave_0: left allmulticast mode
[  382.573306][ T4745] bridge_slave_0: left promiscuous mode
[  382.579171][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.680486][ T4745] veth1_macvtap: left promiscuous mode
[  382.686161][ T4745] veth0_vlan: left promiscuous mode
[  382.790485][T12376] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.797687][T12376] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.804792][T12376] bridge_slave_0: entered allmulticast mode
[  382.811597][T12376] bridge_slave_0: entered promiscuous mode
[  382.819578][T12376] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.826653][T12376] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.833761][T12376] bridge_slave_1: entered allmulticast mode
[  382.840093][T12376] bridge_slave_1: entered promiscuous mode
[  382.931708][T12376] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.938809][T12376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.946240][T12376] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.953293][T12376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.007274][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.014769][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.031918][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.039022][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.051260][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.058380][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.181420][T12376] veth0_vlan: entered promiscuous mode
[  383.231224][T12376] veth1_macvtap: entered promiscuous mode
[  384.253544][T12422] 9pnet_fd: Insufficient options for proto=fd
[  384.413438][T12432] 9pnet_fd: Insufficient options for proto=fd
[  384.853241][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'.
[  385.077222][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'.
[  385.475417][T12482] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3924'.
[  385.562516][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3926'.
[  385.731326][T12494] netlink: 'syz.0.3928': attribute type 3 has an invalid length.
[  385.744350][T12496] Invalid ELF header len 16
[  385.823991][T12501] binder: Unknown parameter 'fscontext?}'
[  386.454861][   T36] kauditd_printk_skb: 1244 callbacks suppressed
[  386.454882][   T36] audit: type=1400 audit(381.735:42061): avc:  denied  { create } for  pid=12523 comm="syz.9.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  386.482352][   T36] audit: type=1400 audit(381.735:42062): avc:  denied  { write } for  pid=12523 comm="syz.9.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  386.503164][   T36] audit: type=1400 audit(381.735:42063): avc:  denied  { read } for  pid=12523 comm="syz.9.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  386.523671][   T36] audit: type=1400 audit(381.735:42064): avc:  denied  { read } for  pid=12523 comm="syz.9.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  386.564016][   T36] audit: type=1400 audit(381.838:42065): avc:  denied  { create } for  pid=12534 comm="syz.2.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  386.584304][   T36] audit: type=1400 audit(381.838:42066): avc:  denied  { write } for  pid=12534 comm="syz.2.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  386.606165][   T36] audit: type=1400 audit(381.838:42067): avc:  denied  { create } for  pid=12534 comm="syz.2.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  386.627030][   T36] audit: type=1400 audit(381.838:42068): avc:  denied  { write } for  pid=12534 comm="syz.2.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  386.654991][   T36] audit: type=1400 audit(381.885:42069): avc:  denied  { execmem } for  pid=12536 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  386.673859][   T36] audit: type=1400 audit(381.885:42070): avc:  denied  { create } for  pid=12536 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  388.923294][T12632] 9pnet_fd: Insufficient options for proto=fd
[  388.988022][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3978'.
[  390.067923][T12678] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3988'.
[  390.468290][T12682] 9pnet_fd: Insufficient options for proto=fd
[  391.062288][T12699] tmpfs: Unknown parameter '����'
[  391.067912][T12698] tmpfs: Unknown parameter '����'
[  391.341110][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.341807][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.356748][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.357372][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.370631][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.372235][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.379191][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.385491][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.392431][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.398740][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.405683][T12709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[  391.412053][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.421584][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.427988][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.434953][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.441303][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.448328][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.454609][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.461596][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.467869][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.474836][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.481179][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.489934][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.494556][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.503164][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.508429][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.516993][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.522526][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.531386][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.536375][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.545201][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.549707][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.558783][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.565075][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.570510][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.579094][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.585698][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.591102][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.600065][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.605417][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.611698][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.621223][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.625011][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.633905][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.639956][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.645542][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.654273][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.687056][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.687384][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.708281][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.708737][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.715659][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.723362][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.730272][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.739639][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.740802][T12715] overlayfs: failed to clone lowerpath
[  391.748185][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.758451][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.765843][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.773740][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.781374][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.789028][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.796005][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.803379][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.811597][   T36] kauditd_printk_skb: 422 callbacks suppressed
[  391.811600][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.811667][   T36] audit: type=1400 audit(386.749:42493): avc:  denied  { ioctl } for  pid=12708 comm="syz.4.3996" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  391.820971][T12710] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  391.841205][   T36] audit: type=1400 audit(386.758:42494): avc:  denied  { ioctl } for  pid=12708 comm="syz.4.3996" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  391.887649][   T36] audit: type=1400 audit(386.814:42495): avc:  denied  { create } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  391.907779][   T36] audit: type=1400 audit(386.814:42496): avc:  denied  { write } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  391.928076][   T36] audit: type=1400 audit(386.814:42497): avc:  denied  { read } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  391.948865][   T36] audit: type=1400 audit(386.814:42498): avc:  denied  { read } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  391.989047][   T36] audit: type=1400 audit(386.833:42499): avc:  denied  { create } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  392.050307][   T36] audit: type=1400 audit(386.833:42500): avc:  denied  { write } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  392.075171][   T36] audit: type=1400 audit(386.833:42501): avc:  denied  { read } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  392.096508][   T36] audit: type=1400 audit(386.833:42502): avc:  denied  { read } for  pid=12718 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  392.218895][T12729] overlayfs: failed to clone upperpath
[  392.306903][T12734] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4004'.
[  392.467844][T12738] fuse: Bad value for 'fd'
[  392.744862][T12750] rust_binder: 12748 RLIMIT_NICE not set
[  392.783427][ T5140] rust_binder: 0: removing orphan mapping 0:4248
[  392.914462][T12762] netlink: 'syz.2.4014': attribute type 27 has an invalid length.
[  394.427968][T12808] netlink: 'syz.9.4029': attribute type 16 has an invalid length.
[  394.435931][T12808] netlink: 'syz.9.4029': attribute type 3 has an invalid length.
[  394.443710][T12808] netlink: 'syz.9.4029': attribute type 1 has an invalid length.
[  394.451699][T12808] netlink: 'syz.9.4029': attribute type 1 has an invalid length.
[  394.459639][T12808] netlink: 'syz.9.4029': attribute type 2 has an invalid length.
[  394.467420][T12808] netlink: 64006 bytes leftover after parsing attributes in process `syz.9.4029'.
[  395.136052][T12836] netlink: 'syz.2.4038': attribute type 4 has an invalid length.
[  395.147503][T12836] netlink: 'syz.2.4038': attribute type 4 has an invalid length.
[  396.098625][T12894] incfs: Error accessing: ./file0.
[  396.114296][T12894] incfs: mount failed -20
[  396.196770][T12898] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4050'.
[  396.448197][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4053'.
[  396.457167][T12913] bridge_slave_1: left allmulticast mode
[  396.486909][T12913] bridge_slave_1: left promiscuous mode
[  396.511531][T12913] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.543295][T12913] bridge_slave_0: left allmulticast mode
[  396.555535][T12913] bridge_slave_0: left promiscuous mode
[  396.574918][T12913] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.633226][T12930] rust_binder: Error in use_page_slow: ESRCH
[  396.633278][T12930] rust_binder: use_range failure ESRCH
[  396.650009][T12930] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  396.655766][T12930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  396.665362][T12930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:47
[  396.729494][T12939] fuse: Unknown parameter '0x0000000000000004'
[  396.947866][T12952] rust_binder: Write failure EFAULT in pid:51
[  397.167666][   T36] kauditd_printk_skb: 461 callbacks suppressed
[  397.167691][   T36] audit: type=1400 audit(391.756:42964): avc:  denied  { read write } for  pid=12959 comm="syz.0.4065" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  397.214148][   T36] audit: type=1400 audit(391.756:42965): avc:  denied  { read write open } for  pid=12959 comm="syz.0.4065" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  397.270059][   T36] audit: type=1400 audit(391.756:42966): avc:  denied  { mount } for  pid=12959 comm="syz.0.4065" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  397.313950][   T36] audit: type=1400 audit(391.756:42967): avc:  denied  { read } for  pid=12959 comm="syz.0.4065" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  397.335587][   T36] audit: type=1400 audit(391.756:42968): avc:  denied  { read open } for  pid=12959 comm="syz.0.4065" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  397.359122][   T36] audit: type=1400 audit(391.756:42969): avc:  denied  { create } for  pid=12959 comm="syz.0.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  397.379463][   T36] audit: type=1400 audit(391.765:42970): avc:  denied  { create } for  pid=12959 comm="syz.0.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  397.387719][   T10] rust_binder: 12916: removing orphan mapping 0:1048
[  397.398767][   T36] audit: type=1400 audit(391.765:42971): avc:  denied  { bind } for  pid=12959 comm="syz.0.4065" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  397.438410][   T36] audit: type=1400 audit(391.765:42972): avc:  denied  { node_bind } for  pid=12959 comm="syz.0.4065" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  397.486180][   T36] audit: type=1400 audit(391.765:42973): avc:  denied  { connect } for  pid=12959 comm="syz.0.4065" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  398.199203][T13014] rust_binder: 60: no such ref 3
[  398.210800][T13014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[  398.221932][T13017] incfs: Options parsing error. -22
[  398.236611][T13017] incfs: mount failed -22
[  398.521014][T13045] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  398.569073][T13047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13047 comm=syz.0.4095
[  398.602124][T13047] rust_binder: Error in use_page_slow: ESRCH
[  398.602151][T13047] rust_binder: use_range failure ESRCH
[  398.609891][T13047] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  398.615461][T13047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  398.624825][T13047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:79
[  398.810744][T13059] can: request_module (can-proto-0) failed.
[  398.934113][T13065] binder: Bad value for 'max'
[  399.375831][ T4745] bridge_slave_1: left allmulticast mode
[  399.381599][ T4745] bridge_slave_1: left promiscuous mode
[  399.387351][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.394936][ T4745] bridge_slave_0: left allmulticast mode
[  399.400733][ T4745] bridge_slave_0: left promiscuous mode
[  399.406366][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.506855][T13081] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.513941][T13081] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.521075][T13081] bridge_slave_0: entered allmulticast mode
[  399.527513][T13081] bridge_slave_0: entered promiscuous mode
[  399.535107][T13081] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.542267][T13081] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.549654][T13081] bridge_slave_1: entered allmulticast mode
[  399.558060][T13081] bridge_slave_1: entered promiscuous mode
[  399.572822][ T4745] veth1_macvtap: left promiscuous mode
[  399.578408][ T4745] veth0_vlan: left promiscuous mode
[  399.713892][T13081] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.721002][T13081] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.728307][T13081] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.735386][T13081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.787915][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.795491][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.809873][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.817016][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.829485][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.836600][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.920876][T13081] veth0_vlan: entered promiscuous mode
[  399.958813][T13081] veth1_macvtap: entered promiscuous mode
[  400.109011][T13099] rust_binder: 4: no such ref 2
[  401.495590][T13151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[  401.591831][T13160] tipc: Enabling <eth:lo> not permitted
[  401.606598][T13160] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  401.636164][T13159] netlink: 'syz.9.4134': attribute type 27 has an invalid length.
[  401.909975][  T551] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  402.074927][  T551] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 64
[  402.088136][  T551] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.101338][  T551] usb 4-1: config 1 interface 0 has no altsetting 0
[  402.112943][  T551] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  402.127711][  T551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.141334][  T551] usb 4-1: Product: ࠔ
[  402.149439][  T551] usb 4-1: Manufacturer: ﺅ辫挋㭫于ᦺ겪惁ೲ匲⥋䵶혝$ꟓᩍ梛䨟ݣ뚫뢪㎒譧縄秢㬧ꏷ諤ꕮᔮ㖥⧑삌毣솺⡝氄舥팛兙ߨ淠㪏礅ྷ᳠玸㈗衚㫧›뀕頻ꜱ′䅑ᬉꐸ풌蕻ﯛ
[  402.172542][  T551] usb 4-1: SerialNumber: ѻ氊샛⎎∰孵옙ፏ沄⸞儽毜혠Ġ欹ᵒ䁮襞琅ᖣ햂ꬹ恍쭿㐡籦劔팫暳ț笯隼宏›䞦㱋ᩚ꼕ގ鵼䨖羴︠荊幄ᷯ얓ﶞ讪Ồ싕辰㴿脉廥㋎ꩮૂ뽺庿崯摇蚜웱禙鹛댃᯻㴯ࡴ㮃킩镜懁맔굮Ꮳ隃鬷ᆏ㱐釘଻툈뒝왥扞灏憥锑뾅쁎딫馊ꈮ棗㊟๨瑒㰙௘
[  402.212993][T13160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  402.464134][  T551] usb 4-1: USB disconnect, device number 40
[  402.535738][   T36] kauditd_printk_skb: 847 callbacks suppressed
[  402.535760][   T36] audit: type=1400 audit(396.779:43821): avc:  denied  { ioctl } for  pid=13169 comm="syz.0.4141" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  402.652977][   T36] audit: type=1400 audit(396.882:43822): avc:  denied  { read write } for  pid=12226 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  402.687835][   T36] audit: type=1400 audit(396.882:43823): avc:  denied  { read write open } for  pid=12226 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  402.716574][   T36] audit: type=1400 audit(396.882:43824): avc:  denied  { ioctl } for  pid=12226 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  402.742977][   T36] audit: type=1400 audit(396.947:43825): avc:  denied  { read write } for  pid=13181 comm="syz.0.4145" name="binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  402.771242][   T36] audit: type=1400 audit(396.947:43826): avc:  denied  { read write open } for  pid=13181 comm="syz.0.4145" path="/dev/binderfs/binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  402.795852][   T36] audit: type=1400 audit(396.947:43827): avc:  denied  { read } for  pid=13181 comm="syz.0.4145" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  402.817184][   T36] audit: type=1400 audit(396.947:43828): avc:  denied  { read open } for  pid=13181 comm="syz.0.4145" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  402.840473][   T36] audit: type=1400 audit(396.947:43829): avc:  denied  { create } for  pid=13181 comm="syz.0.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  402.845653][T13183] cgroup2: Unknown parameter 'pids_localevents@
'
[  402.860548][   T36] audit: type=1400 audit(396.976:43830): avc:  denied  { read write } for  pid=13181 comm="syz.0.4145" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  403.058618][T13185] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  403.058644][T13185] rust_binder: Read failure Err(EFAULT) in pid:37
[  403.126287][T13187] kvm: kvm [13186]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xee
[  403.406444][ T5151] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  403.566770][ T5151] usb 4-1: Using ep0 maxpacket: 16
[  403.574311][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.585989][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.596365][ T5151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  403.609582][ T5151] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  403.618911][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.641746][ T5151] usb 4-1: config 0 descriptor??
[  403.761021][T13197] xfrm0: mtu less than device minimum
[  403.778712][T13197] bpf: Bad value for 'mode'
[  404.081825][ T5151] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.089219][ T5151] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  404.102001][ T5151] ==================================================================
[  404.110109][ T5151] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0
[  404.117764][ T5151] Read of size 1152 at addr ffff88810da71321 by task kworker/0:11/5151
[  404.126015][ T5151] 
[  404.128368][ T5151] CPU: 0 UID: 0 PID: 5151 Comm: kworker/0:11 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b
[  404.128397][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  404.128410][ T5151] Workqueue: usb_hub_wq hub_event
[  404.128443][ T5151] Call Trace:
[  404.128451][ T5151]  <TASK>
[  404.128481][ T5151]  __dump_stack+0x21/0x30
[  404.128506][ T5151]  dump_stack_lvl+0x10c/0x190
[  404.128527][ T5151]  ? __cfi_dump_stack_lvl+0x10/0x10
[  404.128548][ T5151]  ? __cfi__printk+0x10/0x10
[  404.128575][ T5151]  print_address_description+0x71/0x220
[  404.128594][ T5151]  print_report+0x4a/0x70
[  404.128609][ T5151]  kasan_report+0x163/0x1a0
[  404.128625][ T5151]  ? mon_bin_event+0x12c1/0x23e0
[  404.128649][ T5151]  ? mon_bin_event+0x12c1/0x23e0
[  404.128672][ T5151]  kasan_check_range+0x299/0x2a0
[  404.128688][ T5151]  ? mon_bin_event+0x12c1/0x23e0
[  404.128711][ T5151]  __asan_memcpy+0x31/0x80
[  404.128734][ T5151]  mon_bin_event+0x12c1/0x23e0
[  404.128760][ T5151]  ? mon_bin_complete+0x50/0x50
[  404.128784][ T5151]  ? __kmalloc_noprof+0x1b1/0x450
[  404.128807][ T5151]  ? __hid_request+0x1e5/0x410
[  404.128830][ T5151]  ? hid_connect+0x49a/0x1a20
[  404.128855][ T5151]  ? hid_hw_start+0xcb/0x160
[  404.128878][ T5151]  ? ms_probe+0x194/0x460
[  404.128901][ T5151]  ? __cfi_mon_bin_submit+0x10/0x10
[  404.128924][ T5151]  mon_bin_submit+0x2b/0x40
[  404.128947][ T5151]  mon_submit+0x1b9/0x230
[  404.128966][ T5151]  usb_hcd_submit_urb+0x12d/0x1a20
[  404.128983][ T5151]  ? bus_probe_device+0x18b/0x270
[  404.129005][ T5151]  ? usb_probe_device+0x1d4/0x380
[  404.129021][ T5151]  ? really_probe+0x2d6/0x890
[  404.129036][ T5151]  ? __driver_probe_device+0x198/0x280
[  404.129062][ T5151]  ? driver_probe_device+0x54/0x3f0
[  404.129078][ T5151]  ? __device_attach_driver+0x2f1/0x4b0
[  404.129095][ T5151]  usb_submit_urb+0x111b/0x1800
[  404.129118][ T5151]  usb_start_wait_urb+0x11b/0x2f0
[  404.129147][ T5151]  ? usb_api_blocking_completion+0xd0/0xd0
[  404.129183][ T5151]  ? __kasan_kmalloc+0x96/0xb0
[  404.129221][ T5151]  ? __kasan_check_write+0x18/0x20
[  404.129243][ T5151]  ? usb_alloc_urb+0x9b/0x200
[  404.129264][ T5151]  usb_control_msg+0x25a/0x490
[  404.129288][ T5151]  usbhid_raw_request+0x457/0x590
[  404.129312][ T5151]  __hid_request+0x1e5/0x410
[  404.129336][ T5151]  hidinput_connect+0x241b/0x3340
[  404.129359][ T5151]  hid_connect+0x49a/0x1a20
[  404.129384][ T5151]  ? usbhid_start+0x1a67/0x2530
[  404.129406][ T5151]  ? __cfi_hid_connect+0x10/0x10
[  404.129432][ T5151]  hid_hw_start+0xcb/0x160
[  404.129455][ T5151]  ms_probe+0x194/0x460
[  404.129495][ T5151]  hid_device_probe+0x2c4/0x5d0
[  404.129523][ T5151]  ? __cfi_hid_device_probe+0x10/0x10
[  404.129550][ T5151]  really_probe+0x2d6/0x890
[  404.129567][ T5151]  __driver_probe_device+0x198/0x280
[  404.129595][ T5151]  driver_probe_device+0x54/0x3f0
[  404.129611][ T5151]  ? __device_attach_driver+0x2db/0x4b0
[  404.129628][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.129645][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.129666][ T5151]  ? __cfi___device_attach_driver+0x10/0x10
[  404.129683][ T5151]  ? __cfi_bus_for_each_drv+0x10/0x10
[  404.129704][ T5151]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  404.129729][ T5151]  __device_attach+0x2bd/0x3a0
[  404.129755][ T5151]  ? device_attach+0x40/0x40
[  404.129783][ T5151]  ? _raw_spin_lock+0x8c/0x120
[  404.129807][ T5151]  ? __cfi__raw_spin_lock+0x10/0x10
[  404.129835][ T5151]  device_initial_probe+0x1e/0x30
[  404.129869][ T5151]  bus_probe_device+0x18b/0x270
[  404.129897][ T5151]  device_add+0x80c/0xc00
[  404.129932][ T5151]  hid_add_device+0x39b/0x560
[  404.129958][ T5151]  usbhid_probe+0xde3/0x12b0
[  404.129981][ T5151]  usb_probe_interface+0x696/0xc00
[  404.129999][ T5151]  ? __cfi_usb_probe_interface+0x10/0x10
[  404.130015][ T5151]  really_probe+0x2d6/0x890
[  404.130031][ T5151]  __driver_probe_device+0x198/0x280
[  404.130057][ T5151]  driver_probe_device+0x54/0x3f0
[  404.130073][ T5151]  ? __device_attach_driver+0x2db/0x4b0
[  404.130089][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.130106][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.130128][ T5151]  ? __cfi___device_attach_driver+0x10/0x10
[  404.130143][ T5151]  ? __cfi_bus_for_each_drv+0x10/0x10
[  404.130164][ T5151]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  404.130185][ T5151]  __device_attach+0x2bd/0x3a0
[  404.130210][ T5151]  ? device_attach+0x40/0x40
[  404.130234][ T5151]  ? _raw_spin_lock+0x8c/0x120
[  404.130253][ T5151]  ? __cfi__raw_spin_lock+0x10/0x10
[  404.130272][ T5151]  device_initial_probe+0x1e/0x30
[  404.130297][ T5151]  bus_probe_device+0x18b/0x270
[  404.130318][ T5151]  device_add+0x80c/0xc00
[  404.130343][ T5151]  usb_set_configuration+0x1ad4/0x20b0
[  404.130372][ T5151]  usb_generic_driver_probe+0x95/0x160
[  404.130394][ T5151]  usb_probe_device+0x1d4/0x380
[  404.130408][ T5151]  ? __cfi_usb_probe_device+0x10/0x10
[  404.130423][ T5151]  really_probe+0x2d6/0x890
[  404.130439][ T5151]  __driver_probe_device+0x198/0x280
[  404.130466][ T5151]  driver_probe_device+0x54/0x3f0
[  404.130492][ T5151]  ? __device_attach_driver+0x2db/0x4b0
[  404.130508][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.130525][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.130545][ T5151]  ? __cfi___device_attach_driver+0x10/0x10
[  404.130562][ T5151]  ? __cfi_bus_for_each_drv+0x10/0x10
[  404.130583][ T5151]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  404.130605][ T5151]  __device_attach+0x2bd/0x3a0
[  404.130631][ T5151]  ? device_attach+0x40/0x40
[  404.130654][ T5151]  ? _raw_spin_lock+0x8c/0x120
[  404.130672][ T5151]  ? __cfi__raw_spin_lock+0x10/0x10
[  404.130692][ T5151]  device_initial_probe+0x1e/0x30
[  404.130717][ T5151]  bus_probe_device+0x18b/0x270
[  404.130741][ T5151]  device_add+0x80c/0xc00
[  404.130765][ T5151]  usb_new_device+0x9ed/0x1590
[  404.130789][ T5151]  ? __cfi_usb_new_device+0x10/0x10
[  404.130813][ T5151]  hub_event+0x2c81/0x4270
[  404.130845][ T5151]  ? __cfi_hub_event+0x10/0x10
[  404.130870][ T5151]  ? __kasan_check_write+0x18/0x20
[  404.130891][ T5151]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[  404.130915][ T5151]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  404.130935][ T5151]  ? kick_pool+0xb9/0x550
[  404.130951][ T5151]  process_scheduled_works+0x7d2/0x1020
[  404.130979][ T5151]  worker_thread+0xc58/0x1250
[  404.131006][ T5151]  kthread+0x2ca/0x370
[  404.131021][ T5151]  ? __cfi_worker_thread+0x10/0x10
[  404.131045][ T5151]  ? __cfi_kthread+0x10/0x10
[  404.131059][ T5151]  ret_from_fork+0x67/0xa0
[  404.131080][ T5151]  ? __cfi_kthread+0x10/0x10
[  404.131095][ T5151]  ret_from_fork_asm+0x1a/0x30
[  404.131120][ T5151]  </TASK>
[  404.131128][ T5151] 
[  404.410021][T13203] netlink: 'syz.9.4154': attribute type 32 has an invalid length.
[  404.415022][ T5151] Allocated by task 5151:
[  404.415039][ T5151]  kasan_save_track+0x3e/0x80
[  404.415078][ T5151]  kasan_save_alloc_info+0x40/0x50
[  404.415104][ T5151]  __kasan_kmalloc+0x96/0xb0
[  404.524200][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.527220][ T5151]  __kmalloc_noprof+0x1b1/0x450
[  404.555307][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.557805][ T5151]  __hid_request+0xa9/0x410
[  404.809352][ T5151]  hidinput_connect+0x241b/0x3340
[  404.814428][ T5151]  hid_connect+0x49a/0x1a20
[  404.818997][ T5151]  hid_hw_start+0xcb/0x160
[  404.823476][ T5151]  ms_probe+0x194/0x460
[  404.827684][ T5151]  hid_device_probe+0x2c4/0x5d0
[  404.832613][ T5151]  really_probe+0x2d6/0x890
[  404.837187][ T5151]  __driver_probe_device+0x198/0x280
[  404.842530][ T5151]  driver_probe_device+0x54/0x3f0
[  404.847601][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.853021][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.857934][ T5151]  __device_attach+0x2bd/0x3a0
[  404.862756][ T5151]  device_initial_probe+0x1e/0x30
[  404.867836][ T5151]  bus_probe_device+0x18b/0x270
[  404.872740][ T5151]  device_add+0x80c/0xc00
[  404.877125][ T5151]  hid_add_device+0x39b/0x560
[  404.881855][ T5151]  usbhid_probe+0xde3/0x12b0
[  404.886497][ T5151]  usb_probe_interface+0x696/0xc00
[  404.891653][ T5151]  really_probe+0x2d6/0x890
[  404.896207][ T5151]  __driver_probe_device+0x198/0x280
[  404.901551][ T5151]  driver_probe_device+0x54/0x3f0
[  404.906629][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.912055][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.916957][ T5151]  __device_attach+0x2bd/0x3a0
[  404.921770][ T5151]  device_initial_probe+0x1e/0x30
[  404.926856][ T5151]  bus_probe_device+0x18b/0x270
[  404.931755][ T5151]  device_add+0x80c/0xc00
[  404.936140][ T5151]  usb_set_configuration+0x1ad4/0x20b0
[  404.941654][ T5151]  usb_generic_driver_probe+0x95/0x160
[  404.947169][ T5151]  usb_probe_device+0x1d4/0x380
[  404.952067][ T5151]  really_probe+0x2d6/0x890
[  404.956614][ T5151]  __driver_probe_device+0x198/0x280
[  404.962064][ T5151]  driver_probe_device+0x54/0x3f0
[  404.967131][ T5151]  __device_attach_driver+0x2f1/0x4b0
[  404.972547][ T5151]  bus_for_each_drv+0x260/0x2f0
[  404.977448][ T5151]  __device_attach+0x2bd/0x3a0
[  404.982272][ T5151]  device_initial_probe+0x1e/0x30
[  404.987364][ T5151]  bus_probe_device+0x18b/0x270
[  404.992275][ T5151]  device_add+0x80c/0xc00
[  404.996660][ T5151]  usb_new_device+0x9ed/0x1590
[  405.001474][ T5151]  hub_event+0x2c81/0x4270
[  405.005949][ T5151]  process_scheduled_works+0x7d2/0x1020
[  405.011555][ T5151]  worker_thread+0xc58/0x1250
[  405.016289][ T5151]  kthread+0x2ca/0x370
[  405.020404][ T5151]  ret_from_fork+0x67/0xa0
[  405.024876][ T5151]  ret_from_fork_asm+0x1a/0x30
[  405.029697][ T5151] 
[  405.032052][ T5151] The buggy address belongs to the object at ffff88810da71320
[  405.032052][ T5151]  which belongs to the cache kmalloc-8 of size 8
[  405.045799][ T5151] The buggy address is located 1 bytes inside of
[  405.045799][ T5151]  allocated 7-byte region [ffff88810da71320, ffff88810da71327)
[  405.059640][ T5151] 
[  405.062002][ T5151] The buggy address belongs to the physical page:
[  405.068451][ T5151] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810da71620 pfn:0x10da71
[  405.078645][ T5151] flags: 0x4000000000000000(zone=1)
[  405.083903][ T5151] page_type: f5(slab)
[  405.087940][ T5151] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122
[  405.096575][ T5151] raw: ffff88810da71620 000000008080007f 00000001f5000000 0000000000000000
[  405.105195][ T5151] page dumped because: kasan: bad access detected
[  405.111652][ T5151] page_owner tracks the page as allocated
[  405.117396][ T5151] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2169440490, free_ts 0
[  405.134985][ T5151]  post_alloc_hook+0x3b9/0x3f0
[  405.139801][ T5151]  prep_new_page+0x1c/0x120
[  405.144351][ T5151]  get_page_from_freelist+0x46bb/0x4750
[  405.149958][ T5151]  __alloc_pages_noprof+0x30d/0x6c0
[  405.155207][ T5151]  alloc_slab_page+0x6b/0x1f0
[  405.159945][ T5151]  allocate_slab+0x69/0x440
[  405.164509][ T5151]  ___slab_alloc+0x59a/0x8b0
[  405.169158][ T5151]  __kmalloc_noprof+0x243/0x450
[  405.174064][ T5151]  acpi_ex_allocate_name_string+0xe6/0x410
[  405.179925][ T5151]  acpi_ex_get_name_string+0x2a7/0x490
[  405.185445][ T5151]  acpi_ds_create_operand+0x15a/0x8a0
[  405.190869][ T5151]  acpi_ds_evaluate_name_path+0x157/0x410
[  405.196641][ T5151]  acpi_ds_exec_end_op+0x245/0x11a0
[  405.201890][ T5151]  acpi_ps_parse_loop+0xc3f/0x1ac0
[  405.207050][ T5151]  acpi_ps_parse_aml+0x218/0x9b0
[  405.212040][ T5151]  acpi_ps_execute_method+0x7c0/0x920
[  405.217468][ T5151] page_owner free stack trace missing
[  405.222869][ T5151] 
[  405.225220][ T5151] Memory state around the buggy address:
[  405.230884][ T5151]  ffff88810da71200: fa fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc
[  405.238992][ T5151]  ffff88810da71280: 00 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc
[  405.247096][ T5151] >ffff88810da71300: 05 fc fc fc 07 fc fc fc 05 fc fc fc fa fc fc fc
[  405.255192][ T5151]                                ^
[  405.260346][ T5151]  ffff88810da71380: fa fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc
[  405.268458][ T5151]  ffff88810da71400: 05 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc
[  405.276556][ T5151] ==================================================================
[  405.284655][ T5151] Disabling lock debugging due to kernel taint
[  406.535557][ T5151] microsoft 0003:045E:07DA.000E: No inputs registered, leaving
[  406.549300][ T5151] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  406.575708][ T5151] microsoft 0003:045E:07DA.000E: no inputs found
[  406.582193][ T5151] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway
[  406.594161][ T5151] usb 4-1: USB disconnect, device number 41
[  406.657071][T13216] fido_id[13216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory