last executing test programs:

2m54.671699868s ago: executing program 3 (id=35):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10081, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', <r2=>0x0, 0x701, 0x80, 0x9, 0x4, {{0x16, 0x4, 0x0, 0x21, 0x58, 0x64, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x1f, 0x12, [@rand_addr=0x64010102, @remote, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x24, 0xb6, 0x3, 0x5, [{@multicast2, 0x81}, {@empty, 0x6}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x40, 0x7800, 0x3, 0x9, {{0x33, 0x4, 0x0, 0x4, 0xcc, 0x64, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0x8e, 0x1, 0x8, [{@empty, 0x8}, {@loopback}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010102, 0x100}, {@multicast1, 0x3}, {@remote, 0x10}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xd4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0xb, 0xac, [@multicast2, @empty]}, @ra={0x94, 0x4}, @generic={0x88, 0xf, "78d144712aab7ce657d8ebd52e"}, @end, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x45, 0x1, [{0x5, 0xd, "e231eb3eedb270c0f1ef07"}, {0x6, 0x9, "947d026422ffc1"}, {0x1, 0xf, "ebaf471911bafb1d89704ad6f6"}, {0x5, 0xe, "69e9ac17ef26696d836c1472"}, {0x1, 0x9, "bf119db889ec38"}, {0x6, 0x3, "11"}]}]}}}}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @ptr={0x70742a85, 0x401, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})

2m54.629734459s ago: executing program 3 (id=36):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x5, 0x2a40})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
syslog(0x1, 0x0, 0x0)

2m54.535451651s ago: executing program 3 (id=37):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000fc0600000000000000000000000000004ded02855a3f493df877c92ba714d3ae5a6c23ed2bd8d67e74de735f3026ec689e76dee52b0ff89e0349774481eae4327f6169ce149f4537c584fd88d2e8de6da33ec985e49a0f04a2485499ca74222381f4c39d6c91571737d0d1e8edccd21612bc40459747654da5a713e567f64824f00a0b069575f71dfc3424ff5c2da219438aca95112a93d91acce46b61dc8e41437446c0bcde4edd32c59d88ad90181eb728daca867f922c487b0d34b0dee6ed1d44d48b2f5a8da8cefbcf368c3a34fc6d0b4e5e022fabf81380f6546cd571295730adf82f030c90db1ed20439f156cda4108074e8a9e33718e1710d5b38683940828038b1947c908d3b46f45c5971c48642dbe693d235f4cb59895eaa08298b465b61f18196b35372120c4307b76c70155cdf7c4d9d51852f820becd6f239c54de8d1c1741d057147490106655c4a15fa9df57c21efa1873c28164c00"/367])
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setfsuid(r4)
setfsuid(r4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid>', @ANYRESDEC=r4, @ANYBLOB="2c756208ca7a00000000000000e7c54bc0fbf5feda75aba70367535eb35903dfb882cd5d92ebddfea57ce6c965bbc1300ecb20de0688475e4f9f150f15e1fa372be860840041", @ANYRESDEC=r4, @ANYBLOB=',obj_user=,\x00'])
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)

2m54.426342922s ago: executing program 3 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x8a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x408, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getsig(0x4202, r1, 0x2000000000006b, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f000056c000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xe)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f000056a000/0x3000)=nil, 0x3000, 0xaaeb1e57b74d975f, 0x4010, r6, 0xdb7d6000)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000040)={0x7fffffff, {0x0, 0x9, 0x3ff, 0x3, 0x7ff}})
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000240)={0x4, 0x3})
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x0, 0x1000000})

2m54.412406482s ago: executing program 3 (id=39):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=[@increfs], 0x1e, 0x0, 0x0})

2m54.315291664s ago: executing program 3 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000007c0)=0x6, 0x4)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x4000, 0x0, 0x2}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000500))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r4 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0)
munlockall()
write$cgroup_subtree(r3, 0x0, 0xfffffdef)
write$uinput_user_dev(r2, &(0x7f0000001180)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x4, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x11d24d, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x0, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7ffc, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x9a, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000)
io_setup(0x4, &(0x7f0000000100))
mkdirat(r3, &(0x7f0000000040)='./file0/../file0\x00', 0x80)

2m54.314427484s ago: executing program 32 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000007c0)=0x6, 0x4)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x4000, 0x0, 0x2}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000500))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r4 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0)
munlockall()
write$cgroup_subtree(r3, 0x0, 0xfffffdef)
write$uinput_user_dev(r2, &(0x7f0000001180)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x4, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x11d24d, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x0, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7ffc, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x9a, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000)
io_setup(0x4, &(0x7f0000000100))
mkdirat(r3, &(0x7f0000000040)='./file0/../file0\x00', 0x80)

2m27.510626315s ago: executing program 1 (id=322):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001})
pipe(&(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

2m27.387553457s ago: executing program 1 (id=323):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x14}, 0x2}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0})

2m26.905838954s ago: executing program 1 (id=323):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x14}, 0x2}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0})

2m26.827204605s ago: executing program 1 (id=326):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
read$FUSE(r0, &(0x7f0000011b80)={0x2020}, 0x2020) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
read(r3, &(0x7f0000000080)=""/93, 0xffffff6c)

2m26.784735666s ago: executing program 1 (id=327):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000001340)=0x40, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000100))
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"})
close(0x3)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfc)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context'])

2m26.655222398s ago: executing program 1 (id=328):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
write$cgroup_int(r2, &(0x7f0000000000)=0x9, 0x12)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x800009}, 0x405}, 0x1c)
r4 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000300)=[@increfs, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x775419d99c2d4381, 0x80, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0xd4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0xf, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0xff}, 0x8f, &(0x7f0000000440)={0x5, 0xf, 0x8f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1b, 0x2, 0x80, 0x6}, @generic={0x80, 0x10, 0x0, "18556421c090a8bf4c0de72dfbca0df0733c670dc3fe8a17b8a7dccc970d7018d6ec1e782a527179058651322eabe2f8064427f6dc2499300aa60976e45283d6cc118faac7e73f309f46ed805f102d9703b5c50157e5b424c3304da9b720ecebf708aecb33354a36b970912ad53efbd731f9f25b627a4489dd292fc06c"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x216}}, {0x100, &(0x7f0000000500)=@string={0x100, 0x3, "44ee6a2b0787234fe372d50bf831341b4c357133cce3b2584d2c0b11d5f086a2442102cd2a9b16cc42a324b33cd97c4fa3aed644cea252b88429b1800d03253f8d583b39b71e6c51019aae9f9119cddefade4c0a319a7a9bfddb1a73a57102b536c39f9cd04e6c4f1e486f7bd57d7a22b375413ed1fe1d97a808b293cf8e78c25b56e2593acb208dcbaa05b946bdd762976f6c0c8700015ab5f1839cd652897e5fa56420e31fb82ad651592f0038cd8b678bee6a1d07e7c143674badd079df1c811d1ead75bb76f756a802b09898a78d42e8d4a6a2bb72ec3b811b2b7c03641dc284a464098601e7d6cccc8b5042885611ec3933c6a0fe05dbe78ee358fb"}}]})
syz_usb_control_io(r5, &(0x7f0000002840)={0x2c, &(0x7f0000002680)={0x0, 0xb, 0xb6, {0xb6, 0x0, "e183888a17a875fcad69021eec39b6f9614aa4b6861b2c75c2a895c761da50f1ef3702577caa2a869b9d5f085b918d52321d320de72b03acf1ea32b354105c5e53a9054a944490ab39482a963dd3ebe87289c9173d34b2435311c6491fd614dd1fecead5500ac7f1017ceb5d93becb354c75f2ba94bc30bcee2096e62bb226fa62d13ba8c112a3bbd18fb5fc01cee3a856dde275012db1c4c35349eba75359c61fe9894ba42c593e5c54d7ac91ee8421641c7bbf"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000002740)={0x0, 0xf, 0x8b, {0x5, 0xf, 0x8b, 0x6, [@generic={0x41, 0x10, 0x2, "e663c6cb1f97b8e651c2fda67fd5880cf6c41ade237fb03a0c32e423df31b5cff4bc3af6a57a12293e4690d694bb84bcce32390bc8f5e1ff81beeeff0555"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a913c6312d59a761e399b8aeab2bc2ae"}, @ssp_cap={0x24, 0x10, 0xa, 0x3b, 0x6, 0x8, 0xf0f, 0x3, [0x3f30, 0x3f00, 0xc00f, 0xc0, 0x1800f, 0xff]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x1, 0xfff9}, @ptm_cap={0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x7, "ab721b67", "a4035bba"}}, &(0x7f0000002800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x4, 0x2, 0x10, 0xfff8, 0x1000}}}, &(0x7f0000002cc0)={0x84, &(0x7f0000002880)={0x0, 0x1f, 0x6b, "cc0b5c2dad5138ce1c86736393a7b45f6f62e4abc45fc9d5e6e94ab83f5a6a1d18fe30db134f146104088fa628acf9141cfb5aa85562db1d189406477319f5da2954de8ebea5e04d1715a0ad9b6300438cf94da32ee5e7315ca422ae18eb98791dfd3ba839582f656ba875"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000002980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000029c0)={0x20, 0x0, 0x4, {0xc0, 0x64}}, &(0x7f0000002a00)={0x40, 0x7, 0x2, 0x5e}, &(0x7f0000002a40)={0x40, 0x9, 0x1, 0x34}, &(0x7f0000002a80)={0x40, 0xb, 0x2, '=&'}, &(0x7f0000002ac0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000002b40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002b80)={0x40, 0x19, 0x2, "79d8"}, &(0x7f0000002bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002c40)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000002c80)={0x40, 0x21, 0x1, 0xa0}})

2m26.654906238s ago: executing program 33 (id=328):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
write$cgroup_int(r2, &(0x7f0000000000)=0x9, 0x12)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x800009}, 0x405}, 0x1c)
r4 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000300)=[@increfs, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r5 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x775419d99c2d4381, 0x80, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0xd4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0xf, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0xff}, 0x8f, &(0x7f0000000440)={0x5, 0xf, 0x8f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1b, 0x2, 0x80, 0x6}, @generic={0x80, 0x10, 0x0, "18556421c090a8bf4c0de72dfbca0df0733c670dc3fe8a17b8a7dccc970d7018d6ec1e782a527179058651322eabe2f8064427f6dc2499300aa60976e45283d6cc118faac7e73f309f46ed805f102d9703b5c50157e5b424c3304da9b720ecebf708aecb33354a36b970912ad53efbd731f9f25b627a4489dd292fc06c"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x216}}, {0x100, &(0x7f0000000500)=@string={0x100, 0x3, "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"}}]})
syz_usb_control_io(r5, &(0x7f0000002840)={0x2c, &(0x7f0000002680)={0x0, 0xb, 0xb6, {0xb6, 0x0, "e183888a17a875fcad69021eec39b6f9614aa4b6861b2c75c2a895c761da50f1ef3702577caa2a869b9d5f085b918d52321d320de72b03acf1ea32b354105c5e53a9054a944490ab39482a963dd3ebe87289c9173d34b2435311c6491fd614dd1fecead5500ac7f1017ceb5d93becb354c75f2ba94bc30bcee2096e62bb226fa62d13ba8c112a3bbd18fb5fc01cee3a856dde275012db1c4c35349eba75359c61fe9894ba42c593e5c54d7ac91ee8421641c7bbf"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000002740)={0x0, 0xf, 0x8b, {0x5, 0xf, 0x8b, 0x6, [@generic={0x41, 0x10, 0x2, "e663c6cb1f97b8e651c2fda67fd5880cf6c41ade237fb03a0c32e423df31b5cff4bc3af6a57a12293e4690d694bb84bcce32390bc8f5e1ff81beeeff0555"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a913c6312d59a761e399b8aeab2bc2ae"}, @ssp_cap={0x24, 0x10, 0xa, 0x3b, 0x6, 0x8, 0xf0f, 0x3, [0x3f30, 0x3f00, 0xc00f, 0xc0, 0x1800f, 0xff]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x1, 0xfff9}, @ptm_cap={0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x7, "ab721b67", "a4035bba"}}, &(0x7f0000002800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x4, 0x2, 0x10, 0xfff8, 0x1000}}}, &(0x7f0000002cc0)={0x84, &(0x7f0000002880)={0x0, 0x1f, 0x6b, "cc0b5c2dad5138ce1c86736393a7b45f6f62e4abc45fc9d5e6e94ab83f5a6a1d18fe30db134f146104088fa628acf9141cfb5aa85562db1d189406477319f5da2954de8ebea5e04d1715a0ad9b6300438cf94da32ee5e7315ca422ae18eb98791dfd3ba839582f656ba875"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000002980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000029c0)={0x20, 0x0, 0x4, {0xc0, 0x64}}, &(0x7f0000002a00)={0x40, 0x7, 0x2, 0x5e}, &(0x7f0000002a40)={0x40, 0x9, 0x1, 0x34}, &(0x7f0000002a80)={0x40, 0xb, 0x2, '=&'}, &(0x7f0000002ac0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000002b40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002b80)={0x40, 0x19, 0x2, "79d8"}, &(0x7f0000002bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002c40)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000002c80)={0x40, 0x21, 0x1, 0xa0}})

1m3.410902046s ago: executing program 5 (id=1735):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
fchdir(r0)
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000580)=""/176, 0xb0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r2, r3/1000+10000}}, 0x100) (async, rerun: 64)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000040), 0x2012827, &(0x7f00000000c0)=ANY=[]) (rerun: 64)

1m2.607376559s ago: executing program 5 (id=1757):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r4, 0x0, 0x0)
r5 = fcntl$getown(r1, 0x9)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xda)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000140)={r1, r6, 0x7fffffff})
close(r3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)
splice(r0, 0x0, r3, 0x0, 0x100000004, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r9, &(0x7f00000000c0), 0x12)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m2.542764279s ago: executing program 5 (id=1758):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1m2.48349644s ago: executing program 5 (id=1759):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x420e, r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m2.48310307s ago: executing program 5 (id=1760):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/119, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000008c0)=""/87, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
setrlimit(0x6aa4587fc8409897, &(0x7f0000000000)={0x8000})

1m2.48279095s ago: executing program 5 (id=1761):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040))
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r6}, 0x14)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe9e00000000000000000000000000bb", @ANYRES32=r6, @ANYBLOB="000000001800"], 0x40}}], 0x1, 0x4000005)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000180)=0x4, 0x12)
r9 = userfaultfd(0x1)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x2c000001)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1047711330ff2bb17b5508000000000000009bc400", '\\]?\x00'}, 0x38)
ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000080)={&(0x7f000021e000/0x1000)=nil, 0x1000})

45.839042846s ago: executing program 34 (id=1761):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040))
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r6}, 0x14)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe9e00000000000000000000000000bb", @ANYRES32=r6, @ANYBLOB="000000001800"], 0x40}}], 0x1, 0x4000005)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000180)=0x4, 0x12)
r9 = userfaultfd(0x1)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x2c000001)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1047711330ff2bb17b5508000000000000009bc400", '\\]?\x00'}, 0x38)
ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000080)={&(0x7f000021e000/0x1000)=nil, 0x1000})

3.626874134s ago: executing program 0 (id=2585):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x430, 0x110, 0x110, 0x0, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @loopback, 0x1, 0x1fffffffe}}}, {{@arp={@loopback, @multicast2, 0xffffffff, 0xff000000, 0xd, 0xe, {@empty, {[0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x1, 0xfff6, 0x1, 0xfff1, 0x6, 0x0, 'ip6_vti0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x241}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x8000, 0xd, 0x0, 0x0, "2f1ea5148a88a786dbcff390c6c351aa02ef864748133e2e7443fee960205189e44ab20dd58e755835832bbecede2f0f956e22946f3025818a9f476212bf4be5"}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fff, 'syz1\x00', {0x10}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0)
mmap(&(0x7f0000062000/0x3000)=nil, 0x3000, 0x3000001, 0x810, r1, 0x99333000)
io_setup(0x4, &(0x7f0000000100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setstatus(r2, 0x4, 0x42000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="050000"], 0x34}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00')
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff94000040"])
sendfile(r4, r3, &(0x7f0000000000)=0x11, 0x7)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x1})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r8, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
sendto$inet(r8, &(0x7f00000004c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1ebf4bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c37", 0xaf, 0x12, 0x0, 0x0)
recvfrom$inet(r8, &(0x7f0000000080), 0x0, 0xc9100120, 0x0, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0xfffb, @none, 0x3, 0x1}, 0xe)

3.477263856s ago: executing program 0 (id=2589):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4a401, 0x0) (async, rerun: 64)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) (async, rerun: 64)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000002600))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x289, 0x0, 0xfffffffffffffff9}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0x2020) (async)
syz_clone3(&(0x7f0000004900)={0x0, &(0x7f00000046c0), &(0x7f0000004700), &(0x7f0000004740), {0x11}, &(0x7f0000004780)=""/59, 0x3b, &(0x7f00000047c0)=""/238, &(0x7f00000048c0)=[0x0], 0x1}, 0x58) (async)
lstat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) (async)
stat(&(0x7f0000004a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004c80)) (async)
socket$inet_icmp(0x2, 0x2, 0x1)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async)
r6 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r6], 0x20}}, 0x40816) (async)
r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
syz_usb_control_io$hid(r7, &(0x7f0000005100)={0x24, &(0x7f0000004f80)={0x20, 0x8, 0x6d, {0x6d, 0x22, "99b5353eb032a777d195ba239efbe365dea20dc51da7b20b5519a4bc7bfa0b7988fdf51e7c2e6456827d9dcbc9f7e8467f27b0d42404e0c4d8ed13a3103d08c230cb9036eabc2d02c287d39908f1f46b674ef6c772cc57f8b703b6f6a5f1e7875195dc2b395f63a0c3c24b"}}, &(0x7f0000005000)={0x0, 0x3, 0x50, @string={0x50, 0x3, "4cc6a3f069f51a27a95fc4aed9d6e2a15494c630b117d8333092523cff495549570c8475e9c868db5e5fa74ed5dd2957d01461ff996fd14bd9e1632992dbcfc18bea7a7cc59d4079a081a40441d2"}}, &(0x7f0000005080)={0x0, 0x22, 0x1c, {[@main=@item_012={0x2, 0x0, 0xb, "5d91"}, @local=@item_4={0x3, 0x2, 0x1, "b19b5577"}, @global=@item_4={0x3, 0x1, 0x8, "313badd8"}, @local=@item_4={0x3, 0x2, 0x9, "2e5f851f"}, @main=@item_4={0x3, 0x0, 0x7, 'xM*\\'}, @main=@item_4={0x3, 0x0, 0xc, "85f0abec"}]}}, &(0x7f00000050c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xf, 0x1, {0x22, 0x3}}}}, &(0x7f0000005400)={0x2c, &(0x7f0000005140)={0x40, 0x31, 0xdc, "93dc8262f2f9e53efd07df5cab62806f55b45fade9756243626e683b6b9271cd283f805bcc4522ff0e1de9b9e26cb4e38ec56f7eb64716e4def16607574e48a70de7b85aa62b2c94c2ec8ce072f97f7dbffa2db98b622bad118c19f60022e6f1d7fe2ed315ca2402bf3228241fb94248800114b031ec8c66547cd9bfc1f0a0983b240d0f0f6ff14be6e0a22651db6678e4d3aae4e7c74de92a6983972e781ad8c51457d6a82f5962f125fdcc72111fc97e20c7306fabf7fb56e749670706da65790d55c970cea1657872f7b04cdea1f6575b288371ee5b2eac5eabdf"}, &(0x7f0000005240)={0x0, 0xa, 0x1}, &(0x7f0000005280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000052c0)={0x20, 0x1, 0xf6, "a72b389557c18f5a8b2caa838da99d37cfca74c9c12d2d1afe28875f40f07215cc63ab410fb6cfc3e9ecdf94217bb67ff33869d8b51a3d6554b050a52c64dd081d71a942a4749f101616f0e31ee373fc8cc6a8895b969a1a882372c211f0587a63fc76cb760b646935f771f5237d086bb491461e835e84d31acd2e7368b5d3bce586370ca21ed9c0b5a7aed315f72b99771be72b0e9f79b8186627917d4ddcce6e9bed2900fcdce8d05be0fde8a0782c69c941455c920c7c0aa996a124cccbbd175d5f2932b1f945ea29e52fa3b73a7c0951e8fae831597e27d7be81d425aeb75ec807a04936c5e7362d9a617c3539fde12bc8a43f36"}, &(0x7f00000053c0)={0x20, 0x3, 0x1, 0x7f}})
syz_socket_connect_nvme_tcp() (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) (async, rerun: 64)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004d00), 0xa8a800, 0x0) (async, rerun: 64)
getpgid(0xffffffffffffffff)

3.331293339s ago: executing program 0 (id=2590):
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) (async, rerun: 32)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) (rerun: 32)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000045000000040000000fa2"], 0x45}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x20008800) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000140)=0x3)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x51, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7"}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
syz_clone3(&(0x7f0000000280)={0x243012400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.425171398s ago: executing program 2 (id=2591):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
read$FUSE(r4, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0xb}]})
socket$inet_udp(0x2, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00@\x00\x00\x00\b'], 0x24}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.369995439s ago: executing program 0 (id=2592):
prctl$PR_CAPBSET_READ(0x17, 0x11)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r2 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @random="1e03eaf0b8ad"}, 0x4a, {0x2, 0x0, @dev}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

552.129662ms ago: executing program 2 (id=2599):
r0 = fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0)
writev(r0, &(0x7f0000001340)=[{&(0x7f0000000040)="5ae19896eeb0048af31ab11207cc056f6f785ad54e123f9fc4b4070677166d28aefca8c593122f483924401f87d8192c8359d38377bb5bae9afa9e25f38d90482a8bca097e10df895779110f840b7c265bcef6915284e72aac6fd0ee705b1c42a88331039a40acd2b2ce7c662ea831381be1ff98fc270734fbd26f4016e6b9c46744311f2c19b90efca147ec2fba6fa1dba8e2610833f8bc82ba2c40c334f988c44cca44bd5a4fc91fa4bc6588ee4a226f254b62b01ea7d388a3627c949eaacf8bc3f4949723bf0659fcc8e0011024a3cd05a536994089a4196a9d7c4aee179b", 0xe0}, {&(0x7f0000000140)="16b9acd172be195071bee884b69fa87e6e8147972208f5aa9e5137f9d6d13374e399624d25f53bf11675f69296107091120f049affd0561a67760d0c1deb837d4cfb0d846ba91dde033ca224f3ba86b0da20c206609b127a44855ca2af0313580d709fe43aa797aa5d", 0x69}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="2844fe31a81132de01a17003d9ca5a9e31a216017bd803b6c4f6d4da2cab82d4a5088916612caa96104e9566f06511d17ff63afd48f9d6b9d799b4aeab43a253e97b4426a520077e9381068dfb114945846cadeacbbe1f1245049aefb6287051b35b9b8b24e9d98f16c040f9af1c", 0x6e}, {&(0x7f0000001240)="503e98e2a87463cfd9a39462fd118538273d2a7b48508f9713b45698453bb028b460e5a0792b396930ef2af964d8c005388746398254a32977f4eb39152fbd8b940c217a9049fb445c0e26bf50c749466b224f4212189ec80636fd5b96471b3e6c562b2f4c070e0e2e0e44efaa533b8749e8f143bd0636b171f31ebab534e0a328797fa1f3554192b1d7649683aa758d8fcc168b90decdfecbb8018346a28e5cdac24d10d179dc3f4e949b790adb81027a3ea0445e16ebaebcd04cefd62d922aa2c7db8deebde64c719ca4", 0xcb}], 0x5)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000003440)={0x0, r1, 0x7, 0xfff, 0x5, 0x3})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000003500)={'gre0\x00', &(0x7f0000003480)={'erspan0\x00', <r2=>0x0, 0x8000, 0x700, 0x81, 0x0, {{0x18, 0x4, 0x2, 0x27, 0x60, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x3a, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x431}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0xf}, {@multicast1, 0xb3}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0xe, [0x81, 0x200, 0x3]}, @noop, @timestamp={0x44, 0xc, 0xe1, 0x0, 0x0, [0x6, 0x6]}, @generic={0x98, 0x8, "f43fc942d04e"}, @end]}}}}})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000003540)={@dev={0xfe, 0x80, '\x00', 0x27}, r2}, 0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000003580), r1)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000035c0)) (async)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000035c0))
r3 = add_key$keyring(&(0x7f00000039c0), &(0x7f0000003a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$unlink(0x9, 0x0, r3) (async)
keyctl$unlink(0x9, 0x0, r3)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003a80), r0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000044c0)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004480)={&(0x7f0000003ac0)={0x9b8, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x174, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8a2d, @mcast1, 0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x7b8, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "918ee35ccdc24fb2b8a085c9a61885f07f8d45f0ff85dcaff2f0276aff311466"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c184af019bca221b6a4315a59848cdd84c211cf3e02713c810c66758e418bfd"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @loopback, 0x100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ebbe7c828a6649141ee670dab5c43f54c93c0eba6a221085e0cb94aae67ec0a"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @local, 0xffff7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c7ae955ce14f858966fc283e4adbdda1591dbe85dde24bc70996681b738708f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "365472712d3649b81fc14d61c37b9d9194bd55aa0e6955888648bfb2ca5e0234"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "102aff2e9452ec720e69de657a46a4f8a7cdfc366bd7eb1133c66df9449e2901"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @local, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x288, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e98ab0c6634f5e27baeb42feb6c731de926c7eb91748c6e833e7a31981bca0bb"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @empty}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "396f5f78dff6213f12c155fbde6aa7f7c545716bf83314dbc055f2c81395aeca"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x7f}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "42e36514304848f68b6e1663df2f981f6d7791bc3f195ebd2665d5faa7ad38c7"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x401, @mcast2, 0x5}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d379714159fa4f6f6542c2f6b3a1604d27a7ee2c451a554e06fe6056a3568c5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}]}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x44010}, 0x8000)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000004500)) (async)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000004500))
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000004540)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x401}}, 0x30)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000004580)={0x2, 0x3, 0x3179, 0x1, 0x800})
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x1) (async)
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r3, 0x1)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000045c0), &(0x7f0000004600)={'U-', 0x6}, 0x16, 0x2)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004640), 0x2800, 0x0)
dup2(r4, r4) (async)
r6 = dup2(r4, r4)
lseek(r0, 0x8, 0x1) (async)
lseek(r0, 0x8, 0x1)
dup(r1) (async)
dup(r1)
keyctl$setperm(0x5, r3, 0xa000000)
clock_gettime(0x0, &(0x7f00000046c0)) (async)
clock_gettime(0x0, &(0x7f00000046c0)={<r7=>0x0, <r8=>0x0})
clock_gettime(0x0, &(0x7f0000004700)) (async)
clock_gettime(0x0, &(0x7f0000004700)={<r9=>0x0, <r10=>0x0})
utimensat(r6, &(0x7f0000004680)='./file0\x00', &(0x7f0000004740)={{r7, r8/1000+60000}, {r9, r10/1000+60000}}, 0x0)
futex_waitv(&(0x7f0000004a80)=[{0x7, &(0x7f0000004780)=0x2, 0x82}, {0x7, &(0x7f00000047c0)=0x8, 0x82}, {0x7fffffffffffffff, &(0x7f0000004800)=0x5, 0x82}, {0xa, &(0x7f0000004840)=0x8000000000000001, 0x2}, {0x3, &(0x7f0000004880)=0x7fff, 0x2}, {0x7, &(0x7f00000048c0), 0x2}, {0x8, &(0x7f0000004900)=0x8, 0x2}, {0x1, &(0x7f0000004940)=0x7, 0x82}, {0xffffffffffffffff, &(0x7f0000004980)=0x33, 0x82}, {0x7, &(0x7f00000049c0)=0x81, 0x82}, {0x7fff, &(0x7f0000004a00)=0x80000, 0x2}, {0x8000000000000000, &(0x7f0000004a40)=0x8, 0x2}], 0xc, 0x0, &(0x7f0000004bc0), 0x0)

533.061102ms ago: executing program 2 (id=2600):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x802882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdir(&(0x7f0000001580)='./file0\x00', 0x8)
mount$tmpfs(0x0, &(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00), 0x800000, &(0x7f0000004d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2c, 0x31]}}}}]})
r3 = eventfd(0x2)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ftruncate(r4, 0xc17a)
lseek(r4, 0x2000, 0x4)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="b8050000000f23c00f21f835000008000f23f8c0250c0001006636dea4d50c000000b805000000b9b0b500000f01c1c4e2f1bead00400000c744240000700000c74424020f000100c7442406000000000f011424260fc769370f7972363e360f01c966b816018ed0", 0x68}], 0x1, 0x8, &(0x7f0000000200), 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}, @hopopts={{0x18, 0x29, 0x3b, {0x85}}}], 0x30}, 0x810)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r3, 0x2, 0x80000})

494.225032ms ago: executing program 0 (id=2602):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x7, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda6508340"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe9b, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200a82, 0x0)

437.687464ms ago: executing program 2 (id=2605):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r2 = socket(0xa, 0x3, 0x3a)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x18)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

435.175224ms ago: executing program 4 (id=2606):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000000000), 0x2002) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2000000000000000})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpriority(0x4320e11e835fbdba, 0x0) (async)
openat$cgroup_ro(r2, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x4000}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x348bbc08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r3, 0x5501) (async)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x4) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0xffffffffffffff38}}, 0x1000}], 0x0, 0x0, 0x0})

430.750713ms ago: executing program 4 (id=2607):
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x40000008}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000540)=[@dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x26, 0x700000000000000, 0x0})

386.994684ms ago: executing program 2 (id=2609):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) (async)
r3 = dup(r2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async)
mmap(&(0x7f0000598000/0x4000)=nil, 0x4000, 0x9, 0x28011, r6, 0xc1211000) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1dcdde13c42af40c, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x181, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x38}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})

386.721284ms ago: executing program 4 (id=2610):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGICOUNT(r0, 0x541e, 0xff4f370c567f0000) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x3, 0x3a) (async, rerun: 32)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
dup3(r1, r2, 0x80000) (async)
syz_clone(0x502a5280, 0x0, 0x0, 0x0, 0x0, 0x0)

386.049584ms ago: executing program 0 (id=2611):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080))
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100862, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200040, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000580)=""/176, 0xb0)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30303031373737373737373737372c00c12b334a7ab51cfae759a064eb34e309abfebace3b47439a9f6f6a81623e93dfe318a2e8c49da5bf99e600f28b4db9c3f40cff5685ed71d587edad9babc1f0b070bffc1d04114d26e5cf214df182"])

385.725904ms ago: executing program 4 (id=2612):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x18) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)=""/95, 0x5f) (async, rerun: 64)
mount$incfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) (rerun: 64)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x1, 0x7, "48c308730a1eab"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x22, 0x2a, {0x2a, 0x21, "ed8b89d36fc1b9a901dfc784215bb3603e6c7791b72e2248c970e4e1c827048742475af85c31c63b"}}, &(0x7f0000000240)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "b94a1e32a8beeeeb3f201a48bc664ed69657f5df0e36747ac6668505791b992beb0b11ac281057b69537d7ce4b49e644dec58d6b38fbd95ce13ccdd1e066c4a38cdcf939cef70724d7719f1a689d7ba35d3ee583d5a8d89cc7610e4d5efdcabe0f23630c7cb5a8b5c67036e675d2b121effce81b9d6310b34db1245d33f716115d97ec0946a3479cc4a0ceae77d4406341bb0f2bcc06c16ef390b23a91dd3494fe1612400e59988b413c57f2b9930a9fc6"}}, &(0x7f0000000180)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x2, "36abd030"}, @local=@item_012={0x1, 0x2, 0x0, '?'}, @main=@item_4={0x3, 0x0, 0xa, "e0f8707b"}, @global=@item_4={0x3, 0x1, 0x1, "8339bb77"}, @global=@item_012={0x2, 0x1, 0xb, "65a8"}, @main=@item_012={0x1, 0x0, 0xa, 'f'}, @global=@item_4={0x3, 0x1, 0x3, "bd9cc22a"}, @global=@item_012={0x2, 0x1, 0x7, "beb3"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xff, 0x1, {0x22, 0x9ad}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="2007290000002b46739ba5cd920e437d82fb6b6d40ed9b086528dbe5937eb2416105f171cdd0f906f09dd9259304bb"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x1, 0x40, "33d4be8d7d8210a8b94d299cdaea985409562935eb7fb6c9211fa21d504f24233a6e3ace90b371d29e85eeff59111b7fc53f67d735b1a842b73f3c85a8c7aa3c"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) (async)
creat(&(0x7f0000000240)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}], [], 0x6b}}) (async)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0xfffffffe, 0xfe, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) (async)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000100)=0x8683) (async, rerun: 32)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x7ff, 0x5, 0x3, 0x1, 0x4, "efd36c8697e67f323922c0a0614bfab679f142"}) (rerun: 32)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

299.863825ms ago: executing program 4 (id=2615):
clock_gettime(0x1, &(0x7f0000000040))
stat(0x0, &(0x7f0000000240))
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setns(r2, 0x8000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

299.542635ms ago: executing program 4 (id=2616):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)=@arm64)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x551000, 0x0)
unlinkat(r6, &(0x7f0000000080)='./cgroup\x00', 0x0)
sendfile(r0, r0, 0x0, 0x5e7f)

273.949176ms ago: executing program 2 (id=2618):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x800, 0x86)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
getsockopt(r1, 0x633, 0xc999, &(0x7f0000002540)=""/4096, &(0x7f0000000400)=0x1000)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xe1}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, <r6=>0x0}, 0x2020)
r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0)
syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "dcf7e087779d5ac6453aa8647731d1df00babb01ed135fd2b56b"}}}, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440))
write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0xf07c6abf6daf7730, r6, {0x7, 0x2b, 0x9, 0x100000, 0x2, 0xf, 0x93d2, 0xdedc, 0x0, 0x0, 0x1, 0x8001}}, 0x50)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper], 0x0, 0x0, 0x0})

213.767407ms ago: executing program 6 (id=2619):
syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0xfffffffe, 0x0, 0x0, 0x0}, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]})

155.349957ms ago: executing program 6 (id=2620):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
setuid(0xee01)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
prctl$PR_MCE_KILL(0x23, 0x5, 0x7fffffffeffe)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080))
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r3, 0x0, 0x5)

154.900917ms ago: executing program 6 (id=2621):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x8010aebb, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x40}], 0x5})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x400000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r5}], 0xaa, 0x0, &(0x7f0000000580)="de547e22ba0104000000000000ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, &(0x7f0000000740)={0x1f, @none}, 0x8)
listen(r6, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

53.479549ms ago: executing program 6 (id=2622):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0xec, 0x0, 0x8, {r2, @loopback, @local}}}], 0x20}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0)
r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110)
ioctl$KVM_GET_IRQCHIP(r5, 0xc0386723, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x400, "9d1b6613d939f6bfd61d468ec934ebff"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000480)="2ba2fd800cbbaccf2e59b3315b3b7bb44b69d89193871ee1a6408c0475be71a79c490a528985c70b9d0c768da0855ea996c47cce0d6262cfbf5440b514abfcd318f1d6a3da01bbbc6ad19b2befde3f71839283f64cc77ab764f0f1280a230765be53076ba8e1b2690084b3b0ad5a9beea395aa1a1778dd5e5a2af09807765d7e15343b9d7c1be5661de6d08b61", 0x8d}, {&(0x7f0000000340)="451194e058d65aa7edfa63d1ce1a999bc1cb77aeb067b844f54fa804ea9172dfa660019ce7e6433c622086737048dc4a9709e1f25f08ae2fdc4d2080b61425a7416cfc835e4889f9b71977", 0x4b}], 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r4], 0x138}, 0x20040004)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x300000b, 0x11, r8, 0x0)
mmap$KVM_VCPU(&(0x7f00008da000/0x3000)=nil, r10, 0x2000008, 0x80010, r5, 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

40.84799ms ago: executing program 6 (id=2623):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000000200010000000000000604fdec19ecd9030005000000000002"], 0x50}}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
stat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

0s ago: executing program 6 (id=2624):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0), 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x20}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

746): avc:  denied  { create } for  pid=3160 comm="syz.2.986" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0
[  102.519599][   T36] audit: type=1400 audit(2000000068.442:747): avc:  denied  { create } for  pid=3160 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  102.540149][   T36] audit: type=1400 audit(2000000068.442:748): avc:  denied  { create } for  pid=3160 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  102.580306][   T36] audit: type=1400 audit(2000000068.472:749): avc:  denied  { mounton } for  pid=3175 comm="syz.0.991" path="/183" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[  102.610388][   T36] audit: type=1400 audit(2000000068.502:750): avc:  denied  { create } for  pid=3181 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  102.641327][   T36] audit: type=1400 audit(2000000068.612:751): avc:  denied  { create } for  pid=3191 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0
[  103.545295][ T3275] bridge0: port 3(veth0_vlan) entered blocking state
[  103.553912][ T3275] bridge0: port 3(veth0_vlan) entered disabled state
[  103.568902][ T3275] veth0_vlan: entered allmulticast mode
[  103.577748][ T3275] bridge0: port 3(veth0_vlan) entered blocking state
[  103.584500][ T3275] bridge0: port 3(veth0_vlan) entered forwarding state
[  103.613368][  T362] Bluetooth: hci0: Frame reassembly failed (-84)
[  105.103651][ T3376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3376 comm=syz.0.1053
[  105.405150][ T3409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3409 comm=syz.2.1063
[  105.690374][  T592] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  105.696524][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  105.774003][ T3428] netlink: 'syz.0.1072': attribute type 4 has an invalid length.
[  105.784240][ T3428] netlink: 'syz.0.1072': attribute type 4 has an invalid length.
[  105.794557][ T3428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3428 comm=syz.0.1072
[  106.702374][  T355] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.673946][   T36] kauditd_printk_skb: 323 callbacks suppressed
[  107.673962][   T36] audit: type=1400 audit(2000000073.702:1075): avc:  denied  { create } for  pid=3528 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  107.699993][   T36] audit: type=1400 audit(2000000073.702:1076): avc:  denied  { create } for  pid=3528 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  107.720106][   T36] audit: type=1400 audit(2000000073.702:1077): avc:  denied  { accept } for  pid=3528 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=0
[  107.740617][   T36] audit: type=1400 audit(2000000073.732:1078): avc:  denied  { name_bind } for  pid=3530 comm="syz.4.1114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0
[  107.764327][   T36] audit: type=1400 audit(2000000073.732:1079): avc:  denied  { lock } for  pid=3530 comm="syz.4.1114" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0
[  107.788532][   T36] audit: type=1400 audit(2000000073.732:1080): avc:  denied  { lock } for  pid=3530 comm="syz.4.1114" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0
[  107.812979][   T36] audit: type=1400 audit(2000000073.732:1081): avc:  denied  { lock } for  pid=3530 comm="syz.4.1114" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0
[  107.837350][   T36] audit: type=1400 audit(2000000073.732:1082): avc:  denied  { lock } for  pid=3530 comm="syz.4.1114" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0
[  107.861330][   T36] audit: type=1400 audit(2000000073.732:1083): avc:  denied  { lock } for  pid=3530 comm="syz.4.1114" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0
[  107.886625][   T36] audit: type=1400 audit(2000000073.732:1084): avc:  denied  { name_bind } for  pid=3530 comm="syz.4.1114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0
[  108.730314][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  108.736530][  T592] Bluetooth: hci0: command 0x1003 tx timeout
[  112.454927][ T3790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=3790 comm=syz.4.1209
[  113.106990][   T36] kauditd_printk_skb: 247 callbacks suppressed
[  113.107005][   T36] audit: type=1400 audit(2000000079.142:1332): avc:  denied  { read write } for  pid=1371 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  113.169372][   T36] audit: type=1400 audit(2000000079.162:1333): avc:  denied  { read write } for  pid=3814 comm="syz.5.1219" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0
[  113.193696][   T36] audit: type=1400 audit(2000000079.162:1334): avc:  denied  { read } for  pid=3814 comm="syz.5.1219" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0
[  113.218478][   T36] audit: type=1400 audit(2000000079.162:1335): avc:  denied  { read } for  pid=3814 comm="syz.5.1219" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  113.241264][   T36] audit: type=1400 audit(2000000079.172:1336): avc:  denied  { read } for  pid=3814 comm="syz.5.1219" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  113.264620][   T36] audit: type=1400 audit(2000000079.172:1337): avc:  denied  { read } for  pid=3814 comm="syz.5.1219" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  113.287435][   T36] audit: type=1400 audit(2000000079.172:1338): avc:  denied  { read write } for  pid=1371 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  113.316248][   T36] audit: type=1400 audit(2000000079.182:1339): avc:  denied  { read } for  pid=3816 comm="syz.5.1221" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  113.340310][   T36] audit: type=1400 audit(2000000079.182:1340): avc:  denied  { read write } for  pid=1371 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  113.364995][   T36] audit: type=1400 audit(2000000079.192:1341): avc:  denied  { remount } for  pid=3818 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0
[  114.572645][ T3957] netlink: 'syz.2.1269': attribute type 4 has an invalid length.
[  114.586516][ T3957] netlink: 'syz.2.1269': attribute type 4 has an invalid length.
[  114.630345][    T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  114.659634][ T3970] netlink: 'syz.2.1274': attribute type 12 has an invalid length.
[  114.791129][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  114.799949][    T9] usb 6-1: config 2 has an invalid interface number: 52 but max is 2
[  114.808345][    T9] usb 6-1: config 2 has an invalid interface number: 3 but max is 2
[  114.816614][    T9] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  114.825496][    T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  114.835867][    T9] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 3
[  114.845026][    T9] usb 6-1: config 2 has no interface number 0
[  114.851397][    T9] usb 6-1: config 2 has no interface number 1
[  114.857489][    T9] usb 6-1: config 2 interface 52 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  114.870852][    T9] usb 6-1: too many endpoints for config 2 interface 3 altsetting 255: 136, using maximum allowed: 30
[  114.882095][    T9] usb 6-1: config 2 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 136
[  114.895696][    T9] usb 6-1: config 2 interface 52 has no altsetting 0
[  114.902580][    T9] usb 6-1: config 2 interface 3 has no altsetting 0
[  114.911510][    T9] usb 6-1: string descriptor 0 read error: -22
[  114.917714][    T9] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01d3, bcdDevice=4a.37
[  114.927101][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.938234][    T9] ftdi_sio 6-1:2.52: FTDI USB Serial Device converter detected
[  114.946329][    T9] ftdi_sio ttyUSB0: unknown device type: 0x4a37
[  114.953564][    T9] ftdi_sio 6-1:2.3: FTDI USB Serial Device converter detected
[  114.961548][    T9] ftdi_sio ttyUSB1: unknown device type: 0x4a37
[  115.172228][    T9] usb 6-1: USB disconnect, device number 20
[  115.182471][    T9] ftdi_sio 6-1:2.52: device disconnected
[  115.188761][    T9] ftdi_sio 6-1:2.3: device disconnected
[  115.552308][ T4014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1291'.
[  115.561490][ T4014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1291'.
[  115.940362][ T1004] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  116.090354][ T1004] usb 6-1: Using ep0 maxpacket: 32
[  116.101386][ T1004] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  116.113390][ T1004] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  116.123569][ T1004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.144021][ T1004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  116.162620][ T1004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  116.173044][ T1004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  116.182967][ T1004] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  116.196506][ T1004] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  116.206143][ T1004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.215265][ T1004] usb 6-1: config 0 descriptor??
[  116.237782][ T4045] x_tables: duplicate underflow at hook 2
[  117.211147][ T4122] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1326'.
[  118.509663][ T4191] syz.4.1353 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  118.712541][   T31] usb 6-1: USB disconnect, device number 21
[  118.727483][   T36] kauditd_printk_skb: 765 callbacks suppressed
[  118.727499][   T36] audit: type=1400 audit(2000000084.752:2107): avc:  denied  { write } for  pid=4193 comm="syz.5.1354" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  118.764187][   T36] audit: type=1400 audit(2000000084.792:2108): avc:  denied  { read } for  pid=4193 comm="syz.5.1354" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  118.785796][   T36] audit: type=1400 audit(2000000084.792:2109): avc:  denied  { open } for  pid=4193 comm="syz.5.1354" path="net:[4026532547]" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  118.809175][   T36] audit: type=1400 audit(2000000084.792:2110): avc:  denied  { create } for  pid=4193 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.832023][   T36] audit: type=1400 audit(2000000084.792:2111): avc:  denied  { ioctl } for  pid=4193 comm="syz.5.1354" path="socket:[22210]" dev="sockfs" ino=22210 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.857450][   T36] audit: type=1400 audit(2000000084.792:2112): avc:  denied  { map } for  pid=4193 comm="syz.5.1354" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  118.882630][   T36] audit: type=1400 audit(2000000084.912:2113): avc:  denied  { bind } for  pid=4196 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.909239][ T4201] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1356'.
[  118.909977][   T36] audit: type=1400 audit(2000000084.942:2114): avc:  denied  { mounton } for  pid=4200 comm="syz.0.1356" path="/303/file0" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  118.941067][   T36] audit: type=1400 audit(2000000084.942:2115): avc:  denied  { write } for  pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22961 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  119.000301][   T36] audit: type=1400 audit(2000000085.022:2116): avc:  denied  { mounton } for  pid=4204 comm="syz.5.1357" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  119.790338][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  119.940319][    T9] usb 6-1: Using ep0 maxpacket: 32
[  119.946584][    T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  119.954992][    T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  119.963639][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.973917][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  119.983069][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  119.992775][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  120.002465][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  120.015498][    T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  120.024639][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.033119][    T9] usb 6-1: config 0 descriptor??
[  120.064064][ T4228] overlayfs: failed to clone upperpath
[  120.070066][ T4228] 9pnet_fd: Insufficient options for proto=fd
[  120.831877][ T4298] overlayfs: failed to clone upperpath
[  120.938158][ T4312] overlayfs: failed to clone upperpath
[  120.989491][ T4323] overlayfs: failed to clone upperpath
[  121.569184][ T4347] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  121.631861][ T4365] netlink: 'syz.0.1414': attribute type 4 has an invalid length.
[  121.664486][ T4369] overlayfs: failed to clone upperpath
[  122.211006][ T4403] overlayfs: failed to clone upperpath
[  122.327425][ T4421] tmpfs: Unsupported parameter 'mpol'
[  122.333750][ T4421] fuse: Unknown parameter '€'
[  122.352492][ T4423] @: renamed from vlan0 (while UP)
[  122.559897][  T379] usb 6-1: USB disconnect, device number 22
[  122.735838][ T4459] binder: Unknown parameter 'maÂç÷¨000000000000000000000'
[  122.764267][ T4462] overlayfs: failed to clone upperpath
[  123.260349][  T449] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  123.410339][  T449] usb 6-1: Using ep0 maxpacket: 8
[  123.416895][  T449] usb 6-1: unable to get BOS descriptor or descriptor too short
[  123.425401][  T449] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  123.433725][  T449] usb 6-1: config 0 has no interface number 0
[  123.439810][  T449] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  123.451467][  T449] usb 6-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85
[  123.463521][  T449] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024
[  123.475040][  T449] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024
[  123.485409][  T449] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0
[  123.495471][  T449] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0
[  123.505506][  T449] usb 6-1: config 0 interface 122 has no altsetting 0
[  123.513587][  T449] usb 6-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a
[  123.522735][  T449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.530772][  T449] usb 6-1: Product: syz
[  123.534992][  T449] usb 6-1: Manufacturer: syz
[  123.539700][  T449] usb 6-1: SerialNumber: syz
[  123.544879][  T449] usb 6-1: config 0 descriptor??
[  123.550177][ T4468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  123.557481][ T4468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  123.871625][   T36] kauditd_printk_skb: 32 callbacks suppressed
[  123.871641][   T36] audit: type=1400 audit(2000000089.902:2149): avc:  denied  { write } for  pid=4467 comm="syz.5.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  123.904472][   T36] audit: type=1400 audit(2000000089.932:2150): avc:  denied  { append } for  pid=4467 comm="syz.5.1454" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.974695][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'.
[  124.288802][   T36] audit: type=1400 audit(2000000090.312:2151): avc:  denied  { connect } for  pid=4523 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.310291][   T36] audit: type=1400 audit(2000000090.332:2152): avc:  denied  { getopt } for  pid=4523 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.336263][   T36] audit: type=1400 audit(2000000090.362:2153): avc:  denied  { accept } for  pid=4523 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.373795][ T4527] overlayfs: failed to resolve './file0': -2
[  124.499942][ T4535] overlayfs: failed to clone upperpath
[  124.508250][   T36] audit: type=1400 audit(2000000090.542:2154): avc:  denied  { getopt } for  pid=4534 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  124.969486][   T36] audit: type=1400 audit(2000000090.992:2155): avc:  denied  { audit_read } for  pid=4551 comm="syz.2.1481" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  126.043848][  T449] pl2303 6-1:0.122: pl2303 converter detected
[  126.044013][   T36] audit: type=1400 audit(2000000092.072:2156): avc:  denied  { unmount } for  pid=1371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  126.050491][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  126.080000][  T449] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  126.088390][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  126.096778][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  126.105000][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  126.113170][  T449] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  126.121560][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  126.129732][  T449] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  126.137924][  T449] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0000]: -71
[  126.146276][  T449] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0001]: -71
[  126.154639][  T449] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0002]: -71
[  126.163841][  T449] usb 6-1: pl2303 converter now attached to ttyUSB0
[  126.173266][  T449] usb 6-1: USB disconnect, device number 23
[  126.180175][  T449] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  126.188159][  T449] pl2303 6-1:0.122: device disconnected
[  130.446764][   T36] audit: type=1400 audit(2000000096.472:2157): avc:  denied  { create } for  pid=4575 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  130.476258][ T4579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4579 comm=syz.2.1490
[  130.480304][   T36] audit: type=1400 audit(2000000096.502:2158): avc:  denied  { read } for  pid=4575 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  130.509241][ T4576] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4576 comm=syz.2.1490
[  130.890376][  T379] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  131.040306][  T379] usb 6-1: Using ep0 maxpacket: 32
[  131.046700][  T379] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  131.055240][  T379] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  131.063899][  T379] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  131.072892][  T379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  131.082558][  T379] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  131.092280][  T379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.102129][  T379] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  131.115143][  T379] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  131.124213][  T379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.133196][  T379] usb 6-1: config 0 descriptor??
[  131.202920][   T36] audit: type=1400 audit(2000000097.222:2159): avc:  denied  { bind } for  pid=4610 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  131.213353][ T4615] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1505'.
[  131.234416][   T36] audit: type=1400 audit(2000000097.262:2160): avc:  denied  { mounton } for  pid=4612 comm="syz.0.1504" path="/file0" dev="rootfs" ino=13441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  131.256729][   T36] audit: type=1400 audit(2000000097.262:2161): avc:  denied  { create } for  pid=4612 comm="syz.0.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  131.276905][   T36] audit: type=1400 audit(2000000097.262:2162): avc:  denied  { sys_admin } for  pid=4612 comm="syz.0.1504" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  131.298227][   T36] audit: type=1326 audit(2000000097.292:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.0.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffae358e929 code=0x0
[  131.370490][   T36] audit: type=1400 audit(2000000097.402:2164): avc:  denied  { connect } for  pid=4626 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  131.397508][   T36] audit: type=1400 audit(2000000097.422:2165): avc:  denied  { setopt } for  pid=4632 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  131.417238][   T36] audit: type=1400 audit(2000000097.422:2166): avc:  denied  { bind } for  pid=4632 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.441093][ T4637] fuse: Bad value for 'fd'
[  131.497333][ T4638] fuse: Bad value for 'group_id'
[  131.502463][ T4638] fuse: Bad value for 'group_id'
[  133.187731][ T4676] /dev/loop0: Can't lookup blockdev
[  133.193910][ T4676] binder: Unknown parameter 'Òa’s'
[  133.247037][ T4681] overlayfs: failed to clone lowerpath
[  133.442026][ T4710] fuse: Bad value for 'fd'
[  133.568184][ T4726] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1546'.
[  133.656428][    T9] usb 6-1: USB disconnect, device number 24
[  133.669924][ T4740] binder: Bad value for 'stats'
[  133.823056][ T4760] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1557'.
[  134.190312][    T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  134.273459][ T4784] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1566'.
[  134.340341][    T9] usb 6-1: Using ep0 maxpacket: 32
[  134.346593][    T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  134.354997][    T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  134.363665][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  134.372635][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.382297][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  134.391966][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  134.401728][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  134.414721][    T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  134.423763][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.432310][    T9] usb 6-1: config 0 descriptor??
[  134.467960][ T4790] netlink: 'syz.2.1569': attribute type 4 has an invalid length.
[  134.477037][ T4790] netlink: 'syz.2.1569': attribute type 4 has an invalid length.
[  135.215072][ T4931] 9pnet_fd: Insufficient options for proto=fd
[  135.329129][ T4966] xfrm0: mtu less than device minimum
[  135.610293][ T5021] overlayfs: failed to clone upperpath
[  135.799543][   T36] kauditd_printk_skb: 25 callbacks suppressed
[  135.799559][   T36] audit: type=1326 audit(2000000330.822:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef6d8e929 code=0x7fc00000
[  135.853305][   T36] audit: type=1400 audit(2000000330.882:2193): avc:  denied  { setattr } for  pid=5044 comm="syz.2.1664" path="socket:[25373]" dev="sockfs" ino=25373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  135.893016][ T5050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32828 sclass=netlink_route_socket pid=5050 comm=syz.2.1666
[  136.809020][ T5115] tmpfs: Unknown parameter 'soze'
[  136.957800][   T31] usb 6-1: USB disconnect, device number 25
[  136.980113][ T5124] binder: Bad value for 'stats'
[  136.999017][   T36] audit: type=1400 audit(2000000332.022:2194): avc:  denied  { write } for  pid=5127 comm="syz.5.1695" name="001" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  137.073736][   T36] audit: type=1400 audit(2000000332.102:2195): avc:  denied  { read write } for  pid=5127 comm="syz.5.1695" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  137.098261][   T36] audit: type=1400 audit(2000000332.112:2196): avc:  denied  { open } for  pid=5127 comm="syz.5.1695" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  137.126268][   T36] audit: type=1400 audit(2000000332.152:2197): avc:  denied  { ioctl } for  pid=5127 comm="syz.5.1695" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  137.177603][   T36] audit: type=1326 audit(2000000332.202:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.1698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ef6d8e929 code=0x0
[  137.250940][ T5141] binder: Unknown parameter 'defcontext01777777777777777777777'
[  137.250948][   T36] audit: type=1400 audit(2000000332.282:2199): avc:  denied  { remount } for  pid=5140 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  137.360880][ T5160] 8021q: VLANs not supported on wg2
[  137.374139][   T36] audit: type=1400 audit(2000000332.402:2200): avc:  denied  { read } for  pid=5161 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  137.520338][   T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  137.670322][   T31] usb 6-1: Using ep0 maxpacket: 32
[  137.676475][   T31] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  137.684851][   T31] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  137.693482][   T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  137.702466][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.712121][   T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  137.722117][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  137.731959][   T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  137.741822][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  137.754825][   T31] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  137.763883][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.772598][   T31] usb 6-1: config 0 descriptor??
[  137.978922][   T31] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  138.026107][   T36] audit: type=1400 audit(2000000333.052:2201): avc:  denied  { name_bind } for  pid=5180 comm="syz.2.1709" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  138.180872][    T9] usb 6-1: USB disconnect, device number 26
[  138.188232][    T9] usblp0: removed
[  138.570007][ T5191] overlayfs: failed to clone upperpath
[  138.575995][ T5191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  138.584912][ T5191] overlayfs: missing 'lowerdir'
[  138.711810][ T5199] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  138.711810][ T5200] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  138.711834][ T5200] overlayfs: missing 'lowerdir'
[  138.735056][ T5199] overlayfs: missing 'lowerdir'
[  138.848409][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.855761][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.863019][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.870315][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.877679][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.884881][ T5208] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.901798][ T5210] fuse: Bad value for 'group_id'
[  138.906773][ T5210] fuse: Bad value for 'group_id'
[  138.914239][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'.
[  139.016863][ T5220] binder: Unknown parameter 'f'
[  139.195867][ T5235] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  141.396751][ T5352] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1775'.
[  141.434526][   T36] kauditd_printk_skb: 19 callbacks suppressed
[  141.434543][   T36] audit: type=1400 audit(2000000336.462:2221): avc:  denied  { mount } for  pid=5357 comm="syz.0.1778" name="/" dev="pstore" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  141.473578][ T5360] netlink: 'syz.0.1779': attribute type 4 has an invalid length.
[  141.481424][ T5360] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1779'.
[  141.714863][ T5374] TCP: TCP_TX_DELAY enabled
[  141.935445][ T5378] tipc: Can't bind to reserved service type 2
[  141.946250][ T5378] overlayfs: failed to clone upperpath
[  142.030790][ T5398] overlayfs: failed to clone upperpath
[  142.204601][ T5426] fuse: Bad value for 'fd'
[  143.523980][   T36] audit: type=1400 audit(2000000338.552:2222): avc:  denied  { execute } for  pid=5474 comm="syz.0.1826" name="file0" dev="ramfs" ino=27019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  143.546061][   T36] audit: type=1400 audit(2000000338.552:2223): avc:  denied  { execute_no_trans } for  pid=5474 comm="syz.0.1826" path="/file0" dev="ramfs" ino=27019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  143.728523][ T5481] overlayfs: failed to clone upperpath
[  143.790812][ T5492] @: renamed from vlan0 (while UP)
[  143.896650][ T5504] incfs: Options parsing error. -22
[  143.910339][ T5504] incfs: mount failed -22
[  144.120726][   T36] audit: type=1400 audit(2000000339.152:2224): avc:  denied  { accept } for  pid=5525 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.341883][   T36] audit: type=1400 audit(2000000339.372:2225): avc:  denied  { mount } for  pid=5544 comm="syz.0.1853" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  145.011596][ T5557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5557 comm=syz.4.1857
[  145.855197][   T36] audit: type=1400 audit(2000000340.882:2226): avc:  denied  { mounton } for  pid=5577 comm="syz.0.1864" path="/bus" dev="ramfs" ino=27081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  145.855270][ T5578] overlay: ./file0 is not a directory
[  146.466334][   T36] audit: type=1400 audit(2000000341.492:2227): avc:  denied  { setopt } for  pid=5589 comm="syz.4.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  146.512226][   T36] audit: type=1400 audit(2000000341.542:2228): avc:  denied  { create } for  pid=5593 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  146.843718][   T36] audit: type=1400 audit(2000000341.872:2229): avc:  denied  { lock } for  pid=5623 comm="syz.4.1881" path="socket:[27126]" dev="sockfs" ino=27126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  146.927460][   T36] audit: type=1400 audit(2000000341.952:2230): avc:  denied  { write } for  pid=5640 comm="syz.4.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  147.016358][ T5653] overlayfs: failed to clone lowerpath
[  147.020296][   T36] audit: type=1400 audit(2000000342.042:2231): avc:  denied  { mount } for  pid=5652 comm="syz.4.1893" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  147.126282][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1888'.
[  147.271863][   T36] audit: type=1326 audit(2000000342.302:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.4.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fb0f8e929 code=0x0
[  147.322199][   T36] audit: type=1400 audit(2000000342.352:2233): avc:  denied  { read } for  pid=5684 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.698671][ T5704] netlink: 'syz.2.1913': attribute type 4 has an invalid length.
[  147.706751][ T5704] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1913'.
[  147.872082][ T5708] fuseblk: Bad value for 'fd'
[  147.877274][   T36] audit: type=1400 audit(2000000342.902:2234): avc:  denied  { listen } for  pid=5707 comm="syz.2.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.774334][   T36] audit: type=1400 audit(2000000344.802:2235): avc:  denied  { getopt } for  pid=5760 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  150.487021][ T5795] overlayfs: failed to clone upperpath
[  150.791935][   T36] audit: type=1400 audit(2000000345.822:2236): avc:  denied  { ioctl } for  pid=5815 comm="syz.4.1953" path="socket:[27379]" dev="sockfs" ino=27379 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.828563][ T5818] overlayfs: failed to clone upperpath
[  151.250468][ T5847] @: renamed from vlan0 (while UP)
[  151.577578][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  151.577595][   T36] audit: type=1400 audit(2000000346.602:2238): avc:  denied  { map } for  pid=5880 comm="syz.2.1979" path="socket:[27405]" dev="sockfs" ino=27405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  151.918048][ T5906] /dev/loop0: Can't lookup blockdev
[  151.923686][ T5906] bpf: Bad value for 'mode'
[  152.274080][   T36] audit: type=1400 audit(2000000347.302:2239): avc:  denied  { create } for  pid=5931 comm="syz.4.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  156.177049][ T3346] veth0_vlan: left allmulticast mode
[  156.182436][ T3346] bridge0: port 3(veth0_vlan) entered disabled state
[  156.189493][ T3346] bridge_slave_1: left allmulticast mode
[  156.195166][ T3346] bridge_slave_1: left promiscuous mode
[  156.200790][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.208197][ T3346] bridge_slave_0: left allmulticast mode
[  156.213918][ T3346] bridge_slave_0: left promiscuous mode
[  156.219671][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.302703][ T3346] veth1_macvtap: left promiscuous mode
[  156.308198][ T3346] veth0_vlan: left promiscuous mode
[  156.834845][ T5951] overlayfs: failed to clone upperpath
[  156.943804][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.950938][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.957992][ T5968] bridge_slave_0: entered allmulticast mode
[  156.964277][ T5968] bridge_slave_0: entered promiscuous mode
[  156.971020][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.978130][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.985358][ T5968] bridge_slave_1: entered allmulticast mode
[  156.991920][ T5968] bridge_slave_1: entered promiscuous mode
[  157.035370][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.042705][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.049931][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.056971][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.075774][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.083041][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.092173][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.099193][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.107894][  T359] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.115032][  T359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.136842][ T5968] veth0_vlan: entered promiscuous mode
[  157.146740][ T5968] veth1_macvtap: entered promiscuous mode
[  157.162600][   T36] audit: type=1400 audit(2000000352.192:2240): avc:  denied  { mounton } for  pid=5968 comm="syz-executor" path="/root/syzkaller.36zW81/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  157.187909][   T36] audit: type=1400 audit(2000000352.192:2241): avc:  denied  { mounton } for  pid=5968 comm="syz-executor" path="/root/syzkaller.36zW81/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  157.215243][   T36] audit: type=1400 audit(2000000352.192:2242): avc:  denied  { mounton } for  pid=5968 comm="syz-executor" path="/root/syzkaller.36zW81/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  157.243477][   T36] audit: type=1400 audit(2000000352.192:2243): avc:  denied  { unmount } for  pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  157.263420][   T36] audit: type=1400 audit(2000000352.212:2244): avc:  denied  { mounton } for  pid=5968 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  157.286406][   T36] audit: type=1400 audit(2000000352.212:2245): avc:  denied  { mounton } for  pid=5968 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  157.310904][   T36] audit: type=1400 audit(2000000352.252:2246): avc:  denied  { ioctl } for  pid=5990 comm="syz.6.2006" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  157.323748][ T5998] binder: Binderfs stats mode cannot be changed during a remount
[  157.489413][   T36] audit: type=1400 audit(2000000352.512:2247): avc:  denied  { mount } for  pid=6021 comm="syz.6.2030" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  157.513212][   T36] audit: type=1400 audit(2000000352.542:2248): avc:  denied  { unmount } for  pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  157.613557][ T6038] kvm: kvm [6037]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff
[  157.641091][ T6038] binder: Bad value for 'max'
[  157.692950][ T6050] fuse: Bad value for 'fd'
[  157.698009][ T6050] fuse: Unknown parameter 'user_id'
[  157.762108][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.769168][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.776649][ T6052] bridge_slave_0: entered allmulticast mode
[  157.782997][ T6052] bridge_slave_0: entered promiscuous mode
[  157.789621][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.797469][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.804584][ T6052] bridge_slave_1: entered allmulticast mode
[  157.810846][ T6052] bridge_slave_1: entered promiscuous mode
[  157.849446][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.856517][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.863791][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.870838][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.891763][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.899038][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.908126][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.915202][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.924168][  T359] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.931242][  T359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.954500][ T6052] veth0_vlan: entered promiscuous mode
[  157.964632][ T6052] veth1_macvtap: entered promiscuous mode
[  157.994386][   T36] audit: type=1400 audit(2000000353.022:2249): avc:  denied  { read } for  pid=6075 comm="syz.2.2034" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  158.017715][  T449] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  158.033594][ T6076] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  158.041871][ T6076] rust_binder: Write failure EINVAL in pid:2
[  158.170385][  T449] usb 7-1: Using ep0 maxpacket: 32
[  158.182867][  T449] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  158.191290][  T449] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  158.199889][  T449] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  158.208882][  T449] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5
[  158.220749][  T449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.230560][  T449] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.233739][ T6080] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  158.240211][  T449] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  158.247705][ T6080] rust_binder: Write failure EINVAL in pid:5
[  158.261753][  T449] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c97, bcdDevice=16.40
[  158.276858][  T449] usb 7-1: New USB device strings: Mfr=0, Product=218, SerialNumber=0
[  158.279562][ T6083] devtmpfs: Unknown parameter '^	*([%Ž'
[  158.292442][  T449] usb 7-1: Product: syz
[  158.297942][  T449] usb 7-1: config 0 descriptor??
[  158.506790][  T449] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C97
[  158.540372][  T973] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  158.690294][  T973] usb 3-1: Using ep0 maxpacket: 16
[  158.696453][  T973] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.707656][  T973] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.711619][   T31] usb 7-1: USB disconnect, device number 2
[  158.717655][  T973] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  158.726815][   T31] usblp0: removed
[  158.736655][  T973] usb 3-1: config 0 interface 0 has no altsetting 0
[  158.746827][  T973] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  158.755912][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.764546][  T973] usb 3-1: config 0 descriptor??
[  159.420143][ T6085] binder: Bad value for 'stats'
[  159.490301][   T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  159.511045][  T973] usbhid 3-1:0.0: can't add hid device: -71
[  159.521591][  T973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  159.531196][  T973] usb 3-1: USB disconnect, device number 15
[  159.640293][   T31] usb 7-1: Using ep0 maxpacket: 32
[  159.646469][   T31] usb 7-1: config 0 has an invalid interface number: 244 but max is 0
[  159.654740][   T31] usb 7-1: config 0 has no interface number 0
[  159.662187][   T31] usb 7-1: New USB device found, idVendor=0b05, idProduct=edda, bcdDevice= 5.46
[  159.671276][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.679253][   T31] usb 7-1: Product: syz
[  159.683468][   T31] usb 7-1: Manufacturer: syz
[  159.688086][   T31] usb 7-1: SerialNumber: syz
[  159.693753][   T31] usb 7-1: config 0 descriptor??
[  159.900444][ T6140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  159.952502][ T6156] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  160.005941][ T6158] netlink: 'syz.4.2075': attribute type 4 has an invalid length.
[  160.087705][   T31] usb 7-1: USB disconnect, device number 3
[  160.270324][  T973] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  160.420317][  T973] usb 3-1: Using ep0 maxpacket: 32
[  160.426589][  T973] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  160.435152][  T973] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  160.443884][  T973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  160.452900][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  160.462553][  T973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  160.472209][  T973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  160.485189][  T973] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  160.494547][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.503141][  T973] usb 3-1: config 0 descriptor??
[  160.710752][  T973] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  160.900288][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  160.931534][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.940481][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.011018][  T973] usb 3-1: USB disconnect, device number 16
[  161.018039][  T973] usblp0: removed
[  161.050502][    T9] usb 7-1: Using ep0 maxpacket: 8
[  161.056631][    T9] usb 7-1: config 129 has an invalid interface number: 21 but max is 3
[  161.065013][    T9] usb 7-1: config 129 has an invalid interface number: 28 but max is 3
[  161.073299][    T9] usb 7-1: config 129 has an invalid interface number: 139 but max is 3
[  161.081722][    T9] usb 7-1: config 129 has an invalid interface number: 86 but max is 3
[  161.089985][    T9] usb 7-1: config 129 has an invalid interface number: 104 but max is 3
[  161.098348][    T9] usb 7-1: config 129 has 5 interfaces, different from the descriptor's value: 4
[  161.107533][    T9] usb 7-1: config 129 has no interface number 0
[  161.113826][    T9] usb 7-1: config 129 has no interface number 1
[  161.120085][    T9] usb 7-1: config 129 has no interface number 2
[  161.126351][    T9] usb 7-1: config 129 has no interface number 3
[  161.132643][    T9] usb 7-1: config 129 has no interface number 4
[  161.138999][    T9] usb 7-1: config 129 interface 21 altsetting 7 has an endpoint descriptor with address 0x47, changing to 0x7
[  161.150873][    T9] usb 7-1: config 129 interface 21 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  161.161936][    T9] usb 7-1: config 129 interface 21 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  161.172912][    T9] usb 7-1: config 129 interface 21 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  161.183700][    T9] usb 7-1: config 129 interface 21 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  161.195002][    T9] usb 7-1: config 129 interface 21 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64
[  161.205963][    T9] usb 7-1: config 129 interface 21 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  161.216741][    T9] usb 7-1: config 129 interface 21 altsetting 7 endpoint 0x6 has an invalid bInterval 247, changing to 7
[  161.228060][    T9] usb 7-1: config 129 interface 21 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  161.238860][    T9] usb 7-1: config 129 interface 21 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  161.249690][    T9] usb 7-1: config 129 interface 28 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[  161.260475][    T9] usb 7-1: config 129 interface 28 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  161.273685][    T9] usb 7-1: too many endpoints for config 129 interface 139 altsetting 187: 95, using maximum allowed: 30
[  161.285013][    T9] usb 7-1: config 129 interface 139 altsetting 187 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  161.296526][    T9] usb 7-1: config 129 interface 139 altsetting 187 has a duplicate endpoint with address 0x2, skipping
[  161.307584][    T9] usb 7-1: config 129 interface 139 altsetting 187 has an invalid descriptor for endpoint zero, skipping
[  161.318798][    T9] usb 7-1: config 129 interface 139 altsetting 187 has an invalid descriptor for endpoint zero, skipping
[  161.330057][    T9] usb 7-1: config 129 interface 139 altsetting 187 bulk endpoint 0xA has invalid maxpacket 64
[  161.340333][    T9] usb 7-1: config 129 interface 139 altsetting 187 has an invalid descriptor for endpoint zero, skipping
[  161.351570][    T9] usb 7-1: config 129 interface 139 altsetting 187 has 8 endpoint descriptors, different from the interface descriptor's value: 95
[  161.365059][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  161.375845][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  161.386722][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  161.397503][    T9] usb 7-1: config 129 interface 86 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  161.408542][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[  161.415613][ T6206] 9pnet_fd: Insufficient options for proto=fd
[  161.419893][    T9] usb 7-1: config 129 interface 86 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  161.436655][    T9] usb 7-1: config 129 interface 86 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  161.447817][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[  161.458829][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  161.469768][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[  161.480695][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  161.491749][    T9] usb 7-1: config 129 interface 86 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  161.503237][    T9] usb 7-1: config 129 interface 86 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  161.514205][    T9] usb 7-1: config 129 interface 21 has no altsetting 0
[  161.521204][    T9] usb 7-1: config 129 interface 28 has no altsetting 0
[  161.528139][    T9] usb 7-1: config 129 interface 139 has no altsetting 0
[  161.537510][    T9] usb 7-1: config 129 interface 86 has no altsetting 0
[  161.544911][    T9] usb 7-1: config 129 interface 104 has no altsetting 0
[  161.554876][    T9] usb 7-1: New USB device found, idVendor=28a7, idProduct=a01b, bcdDevice=d0.ce
[  161.564227][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.572445][    T9] usb 7-1: Product: 낿퉮�馚ⵔ殡⇋뉈Ѵ䒹涣歞ṭͽᡊۿ莂澂쀑館䑭༵�⾡궕⊢�ꕅꭨ⨻㙣룲⇚陵툭�踆䔿嶕䅼Ỗ邞令伾Ꭿꟷ禔咉�殘�ꦛ鉩튦㤗儈ᛱꄰ㈦蚔ﶘః緤數蓕ᲀ���
[  161.596221][    T9] usb 7-1: Manufacturer: â°‰
[  161.600914][    T9] usb 7-1: SerialNumber: о
[  161.659823][ T6233] bridge0: port 3(syz_tun) entered blocking state
[  161.666309][ T6233] bridge0: port 3(syz_tun) entered disabled state
[  161.672977][ T6233] syz_tun: entered allmulticast mode
[  161.678764][ T6233] syz_tun: entered promiscuous mode
[  161.684291][ T6233] bridge0: port 3(syz_tun) entered blocking state
[  161.690738][ T6233] bridge0: port 3(syz_tun) entered forwarding state
[  161.821182][    T9] usb-storage 7-1:129.21: USB Mass Storage device detected
[  161.887606][    T9] usb 7-1: USB disconnect, device number 4
[  162.171460][   T36] kauditd_printk_skb: 14 callbacks suppressed
[  162.171476][   T36] audit: type=1400 audit(2000000357.202:2264): avc:  denied  { create } for  pid=6263 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  162.198875][   T36] audit: type=1400 audit(2000000357.202:2265): avc:  denied  { read append } for  pid=6263 comm="syz.2.2112" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  162.223221][   T36] audit: type=1400 audit(2000000357.202:2266): avc:  denied  { open } for  pid=6263 comm="syz.2.2112" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  162.238493][ T6270] rust_binder: inc_ref_done called when no active inc_refs
[  162.255991][   T36] audit: type=1400 audit(2000000357.262:2267): avc:  denied  { associate } for  pid=6269 comm="syz.2.2114" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  162.265343][ T6274] overlayfs: failed to resolve './file0': -2
[  162.321699][ T6276] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  162.332314][ T6276] rust_binder: Write failure EINVAL in pid:43
[  162.420378][   T36] audit: type=1400 audit(2000000357.452:2268): avc:  denied  { append } for  pid=6303 comm="syz.2.2126" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  162.476992][ T6304] netlink: 'syz.2.2126': attribute type 12 has an invalid length.
[  162.583628][ T6328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53
[  162.600295][   T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  162.761449][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.772535][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.782921][   T31] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  162.792246][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.801593][   T31] usb 7-1: config 0 descriptor??
[  162.831236][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  162.842085][ T6350] overlayfs: failed to clone upperpath
[  162.970357][    T9] usb 3-1: device descriptor read/64, error -71
[  163.011554][ T6358] rust_binder: Error in use_page_slow: ESRCH
[  163.011567][ T6358] rust_binder: use_range failure ESRCH
[  163.017668][ T6358] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  163.023704][ T6358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  163.031170][ T6358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49
[  163.209797][   T31] usbhid 7-1:0.0: can't add hid device: -71
[  163.210423][    T9] usb 3-1: device descriptor read/64, error -71
[  163.217225][   T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  163.233564][   T31] usb 7-1: USB disconnect, device number 5
[  163.460324][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  163.590322][    T9] usb 3-1: device descriptor read/64, error -71
[  163.830341][    T9] usb 3-1: device descriptor read/64, error -71
[  163.875644][   T36] audit: type=1400 audit(2000000358.902:2269): avc:  denied  { create } for  pid=6411 comm="syz.0.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  163.924742][ T6424] veth0_to_bond: mtu less than device minimum
[  163.926260][ T6427] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  163.932127][ T6427] rust_binder: Error while translating object.
[  163.940547][    T9] usb usb3-port1: attempt power cycle
[  163.940959][ T6427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  163.952386][ T6427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  163.974022][ T6430] rust_binder: Error while translating object.
[  163.974035][   T36] audit: type=1400 audit(2000000359.002:2270): avc:  denied  { transfer } for  pid=6429 comm="syz.6.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  163.983228][ T6430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  164.010071][ T6430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72
[  164.081519][ T6447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81
[  164.100037][   T36] audit: type=1400 audit(2000000359.122:2271): avc:  denied  { write } for  pid=6448 comm="syz.6.2179" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  164.209611][ T6457] binder: Bad value for 'stats'
[  164.280344][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  164.302076][    T9] usb 3-1: device descriptor read/8, error -71
[  164.413091][   T36] audit: type=1400 audit(2000000359.442:2272): avc:  denied  { create } for  pid=6461 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  164.431360][    T9] usb 3-1: device descriptor read/8, error -71
[  164.460323][   T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  164.611420][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  164.621244][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  164.632482][   T31] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  164.641572][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.649547][   T31] usb 7-1: Product: syz
[  164.653715][   T31] usb 7-1: Manufacturer: syz
[  164.658319][   T31] usb 7-1: SerialNumber: syz
[  164.663498][   T31] usb 7-1: config 0 descriptor??
[  164.668729][ T6460] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  164.675959][ T6460] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  164.680317][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  164.711414][    T9] usb 3-1: device descriptor read/8, error -71
[  164.841371][    T9] usb 3-1: device descriptor read/8, error -71
[  164.884551][ T6460] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  164.891812][ T6460] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  164.950414][    T9] usb usb3-port1: unable to enumerate USB device
[  165.533007][ T6488] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000004'
[  165.571262][   T31] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  165.581120][   T31] usb 7-1: USB disconnect, device number 6
[  165.665575][ T6501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  165.674544][ T6501] binder: Unknown parameter ''
[  166.089344][ T6525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6525 comm=syz.4.2202
[  166.102066][ T6525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6525 comm=syz.4.2202
[  166.320334][  T449] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  166.384634][ T6531] hub 6-0:1.0: USB hub found
[  166.389392][ T6531] hub 6-0:1.0: 1 port detected
[  166.470292][  T449] usb 7-1: Using ep0 maxpacket: 32
[  166.476550][  T449] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  166.484994][  T449] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  166.493832][  T449] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  166.502866][  T449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.512576][  T449] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  166.522280][  T449] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  166.539777][  T449] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  166.548886][  T449] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.557952][  T449] usb 7-1: config 0 descriptor??
[  166.633008][ T6563] overlay: ./file0 is not a directory
[  166.654729][ T6565] 9pnet_fd: Insufficient options for proto=fd
[  166.670300][ T1004] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  166.779490][ T6580] overlayfs: failed to resolve './file0': -2
[  166.810288][ T1004] usb 3-1: device descriptor read/64, error -71
[  166.822599][  T449] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  166.956518][ T6616] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2237'.
[  167.024421][   T31] usb 7-1: USB disconnect, device number 7
[  167.030863][   T31] usblp0: removed
[  167.060344][ T1004] usb 3-1: device descriptor read/64, error -71
[  167.265873][ T6652] overlayfs: failed to clone upperpath
[  167.300301][ T1004] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  167.440304][ T1004] usb 3-1: device descriptor read/64, error -71
[  167.524090][   T36] audit: type=1326 audit(2000000362.552:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.2258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb0f8e929 code=0x0
[  167.594233][ T6689] rust_binder: Error while translating object.
[  167.594251][ T6689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  167.600525][ T6689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110
[  167.618335][   T36] audit: type=1400 audit(2000000362.642:2274): avc:  denied  { read write } for  pid=6691 comm="syz.6.2265" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  167.650936][   T36] audit: type=1400 audit(2000000362.642:2275): avc:  denied  { open } for  pid=6691 comm="syz.6.2265" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  167.674381][   T36] audit: type=1400 audit(2000000362.642:2276): avc:  denied  { ioctl } for  pid=6691 comm="syz.6.2265" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  167.710284][ T1004] usb 3-1: device descriptor read/64, error -71
[  167.746207][ T6696] fuse: Bad value for 'user_id'
[  167.751146][ T6696] fuse: Bad value for 'user_id'
[  167.820392][ T1004] usb usb3-port1: attempt power cycle
[  168.000310][   T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  168.151416][   T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.161577][ T1004] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  168.169176][   T45] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  168.179618][   T45] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.202917][ T1004] usb 3-1: device descriptor read/8, error -71
[  168.221679][   T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  168.240282][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.248301][   T45] usb 7-1: Product: syz
[  168.260271][   T45] usb 7-1: Manufacturer: syz
[  168.264917][   T45] usb 7-1: SerialNumber: syz
[  168.297667][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.304757][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.311874][ T6699] bridge_slave_0: entered allmulticast mode
[  168.318091][ T6699] bridge_slave_0: entered promiscuous mode
[  168.324699][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.331794][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.338872][ T6699] bridge_slave_1: entered allmulticast mode
[  168.345384][ T6699] bridge_slave_1: entered promiscuous mode
[  168.345534][ T1004] usb 3-1: device descriptor read/8, error -71
[  168.393045][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.400109][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.407379][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.414414][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.442283][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.449728][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.460138][  T359] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.467212][  T359] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.476796][  T359] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.483858][  T359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.510670][ T6699] veth0_vlan: entered promiscuous mode
[  168.526272][ T6699] veth1_macvtap: entered promiscuous mode
[  168.600330][ T1004] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  168.621306][ T1004] usb 3-1: device descriptor read/8, error -71
[  168.677706][ T6696] rust_binder: Write failure EINVAL in pid:116
[  168.687124][   T45] cdc_ncm 7-1:1.0: bind() failure
[  168.699939][   T45] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71
[  168.710349][   T45] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71
[  168.719090][  T359] bridge_slave_1: left allmulticast mode
[  168.724778][  T359] bridge_slave_1: left promiscuous mode
[  168.731461][   T45] usb 7-1: USB disconnect, device number 8
[  168.737905][  T359] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.742820][   T36] audit: type=1400 audit(2000000363.762:2277): avc:  denied  { setattr } for  pid=6713 comm="syz.4.2270" name="NETLINK" dev="sockfs" ino=31903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.756938][ T1004] usb 3-1: device descriptor read/8, error -71
[  168.775646][  T359] bridge_slave_0: left allmulticast mode
[  168.781387][  T359] bridge_slave_0: left promiscuous mode
[  168.787101][  T359] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.900651][ T1004] usb usb3-port1: unable to enumerate USB device
[  168.952889][  T359] veth1_macvtap: left promiscuous mode
[  168.958414][  T359] veth0_vlan: left promiscuous mode
[  169.301454][ T6721] binder: Unknown parameter 'processor	: 0
[  169.301454][ T6721] vendor_id	: GenuineIntel
[  169.301454][ T6721] cpu family	: 6
[  169.301454][ T6721] model		: 79
[  169.301454][ T6721] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[  169.301454][ T6721] stepping	: 0
[  169.301454][ T6721] microcode	: 0xffffffff
[  169.301454][ T6721] cpu MHz		: 2200.142
[  169.301454][ T6721] cache size	: 56320 KB
[  169.301454][ T6721] physical id	: 0
[  169.301454][ T6721] siblings	: 2
[  169.301454][ T6721] core id		: 0
[  169.301454][ T6721] cpu cores	: 1
[  169.301454][ T6721] apicid		: 0
[  169.301454][ T6721] initial apicid	: 0
[  169.301454][ T6721] fpu		: yes
[  169.301454][ T6721] fpu_exception	: yes
[  169.301454][ T6721] cpuid level	: 13
[  169.301454][ T6721] wp		: yes
[  169.301454][ T6721] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[  169.301454][ T6721] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[  169.366191][ T6726] rust_binder: Write failure EFAULT in pid:123
[  169.535856][ T6736] can: request_module (can-proto-0) failed.
[  169.553222][ T6732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6732 comm=syz.6.2276
[  169.566892][ T6733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=6733 comm=syz.6.2276
[  169.579836][ T6732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=6732 comm=syz.6.2276
[  169.615343][   T36] audit: type=1400 audit(2000000364.642:2278): avc:  denied  { write } for  pid=6741 comm="syz.4.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  169.646281][ T6745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6745 comm=syz.6.2276
[  169.659067][ T6733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6733 comm=syz.6.2276
[  169.693447][ T6754] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.693474][ T6754] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.700144][ T6754] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.710152][ T6754] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.731282][ T6761] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2285'.
[  169.797596][   T36] audit: type=1400 audit(2000000364.822:2279): avc:  denied  { append } for  pid=6762 comm="syz.6.2287" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  169.831257][ T6777] binder: Bad value for 'defcontext'
[  169.847413][   T36] audit: type=1400 audit(2000000364.872:2280): avc:  denied  { write } for  pid=6780 comm="syz.6.2294" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  169.929617][ T6786] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  169.929634][ T6786] rust_binder: Error while translating object.
[  169.938476][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  169.944915][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[  170.160331][ T6796] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  170.169535][ T6796] rust_binder: Error while translating object.
[  170.180397][ T6796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.186591][ T6796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145
[  170.196833][ T6796] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.206403][ T6796] rust_binder: Error while translating object.
[  170.212891][ T6796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.219116][ T6796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145
[  170.422358][   T36] audit: type=1400 audit(2000000365.452:2281): avc:  denied  { bind } for  pid=6810 comm="syz.2.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  170.767630][ T6815] rust_binder: Got transaction with invalid offset.
[  170.767664][ T6815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.774355][ T6815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[  170.817509][   T36] audit: type=1400 audit(2000000365.842:2282): avc:  denied  { create } for  pid=6819 comm="syz.4.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  170.848460][ T6823] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  170.856811][ T6823] rust_binder: Write failure EINVAL in pid:151
[  170.967078][ T6844] fuse: Unknown parameter 'roê—{ìK³iRotmode'
[  171.043940][ T6847] rust_binder: 6846 RLIMIT_NICE not set
[  171.044044][ T6846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.168393][ T6854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89
[  171.175318][ T6854] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.258704][ T6864] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 255)
[  171.265199][ T6864] rust_binder: Error while translating object.
[  171.275770][ T6864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.281961][ T6864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[  171.529741][ T6884] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.548845][ T6888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123
[  171.609822][ T6896] binder: Bad value for 'max'
[  171.637516][ T6903] rust_binder: Error while translating object.
[  171.637544][ T6903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  171.643864][ T6903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:155
[  171.667246][ T6906] netlink: 'syz.6.2336': attribute type 4 has an invalid length.
[  171.857704][ T6916] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  172.018629][ T6923] input: syz1 as /devices/virtual/input/input17
[  172.120436][ T1004] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  172.282244][ T1004] usb 7-1: unable to get BOS descriptor or descriptor too short
[  172.291175][ T1004] usb 7-1: not running at top speed; connect to a high speed hub
[  172.300307][ T1004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.310657][ T1004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.321328][ T1004] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.331104][ T1004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.339177][ T1004] usb 7-1: Product: syz
[  172.343678][ T1004] usb 7-1: Manufacturer: syz
[  172.348409][ T1004] usb 7-1: SerialNumber: syz
[  172.581546][ T6910] rust_binder: Write failure EINVAL in pid:159
[  172.581627][ T6910] rust_binder: Read failure Err(EAGAIN) in pid:159
[  172.592201][ T1004] usb 7-1: 0:2 : does not exist
[  172.604006][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'.
[  172.604346][ T1004] usb 7-1: unit 6 not found!
[  172.620588][ T1004] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  172.631074][ T1004] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  172.641194][ T1004] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[  172.654836][ T1004] usb 7-1: USB disconnect, device number 9
[  172.900359][   T64] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  173.050327][   T64] usb 3-1: Using ep0 maxpacket: 32
[  173.056916][ T6938] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  173.056947][ T6938] rust_binder: Error while translating object.
[  173.065744][ T6938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  173.071987][ T6938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[  173.083047][   T64] usb 3-1: unable to get BOS descriptor or descriptor too short
[  173.100396][   T64] usb 3-1: unable to read config index 0 descriptor/start: -71
[  173.107960][   T64] usb 3-1: can't read configurations, error -71
[  173.283062][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  173.283078][   T36] audit: type=1400 audit(2000000368.312:2289): avc:  denied  { create } for  pid=6950 comm="syz.4.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  173.325177][ T6955] 8021q: VLANs not supported on wg2
[  173.400339][ T1004] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  173.550338][ T1004] usb 7-1: Using ep0 maxpacket: 8
[  173.556629][ T1004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.567728][ T1004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.577502][ T1004] usb 7-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00
[  173.586560][ T1004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.595470][ T1004] usb 7-1: config 0 descriptor??
[  173.681264][ T6969] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.692990][ T6973] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.709901][ T6975] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.717259][ T6975] rust_binder: Error in use_page_slow: ESRCH
[  173.724356][ T6975] rust_binder: use_range failure ESRCH
[  173.730416][ T6975] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  173.735940][ T6975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  173.743895][ T6975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:159
[  173.763974][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.764061][   T36] audit: type=1400 audit(2000000368.792:2290): avc:  denied  { getopt } for  pid=6976 comm="syz.2.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.773633][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.799693][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.807208][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.813996][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.820042][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.830271][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.832875][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.839390][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.845960][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.858430][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.859228][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.872531][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.872553][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.879074][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.889851][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.892010][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.898544][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.911514][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.911533][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.911630][ T6979] rust_binder: Error in use_page_slow: ESRCH
[  173.918024][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.930802][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.936949][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.943502][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.949787][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.949801][ T6979] rust_binder: use_range failure ESRCH
[  173.956607][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.968362][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.974698][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.975068][ T6979] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  173.981382][ T6977] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.987984][ T6979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  174.001864][ T6979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:161
[  174.015598][ T1004] wacom 0003:056A:0002.0004: unknown main item tag 0x0
[  174.036586][ T1004] wacom 0003:056A:0002.0004: Unknown device_type for 'HID 056a:0002'. Ignoring.
[  174.075018][ T6987] overlayfs: failed to clone upperpath
[  174.081097][ T6986] netlink: 'syz.4.2365': attribute type 32 has an invalid length.
[  174.219200][   T36] audit: type=1400 audit(2000000369.242:2291): avc:  denied  { setattr } for  pid=6946 comm="syz.6.2350" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  174.219575][ T6947] rust_binder: Failed copying remainder into alloc: EFAULT
[  174.242234][ T6947] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  174.249461][ T6947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  174.258333][ T6947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:166
[  174.775677][   T64] usb 7-1: USB disconnect, device number 10
[  174.880270][   T36] audit: type=1400 audit(2000000369.902:2292): avc:  denied  { append } for  pid=7001 comm="syz.2.2370" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  174.976955][ T7013] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  174.984392][ T7013] rust_binder: Write failure EINVAL in pid:174
[  175.120322][   T64] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  175.313694][ T7032] rust_binder: Error while translating object.
[  175.313725][ T7032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  175.320006][ T7032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:20
[  175.467592][ T7028] rust_binder: Read failure Err(EFAULT) in pid:189
[  175.538038][   T36] audit: type=1400 audit(2000000370.562:2293): avc:  denied  { append } for  pid=7044 comm="syz.2.2386" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  175.613387][ T7045] block device autoloading is deprecated and will be removed.
[  175.687892][ T7048] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2387'.
[  175.780914][ T7061] rust_binder: Write failure EINVAL in pid:202
[  175.810711][ T7066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.842027][   T36] audit: type=1400 audit(2000000370.872:2294): avc:  denied  { map } for  pid=7067 comm="syz.4.2394" path="socket:[33799]" dev="sockfs" ino=33799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  175.896057][ T7072] fuse: Unknown parameter '1844674407370955161500000000000000000004'
[  175.984999][ T7078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2398'.
[  176.003809][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'.
[  176.270278][ T1004] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  176.421456][ T1004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.432561][ T1004] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  176.441873][ T1004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.454628][ T1004] usb 3-1: config 0 descriptor??
[  176.798001][   T36] audit: type=1400 audit(2000000371.822:2295): avc:  denied  { accept } for  pid=7082 comm="syz.4.2400" path="socket:[33818]" dev="sockfs" ino=33818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  176.872616][ T7078] binder: Unknown parameter ''
[  176.879559][ T1004] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[  177.100333][ T1004] playstation 0003:054C:0BA0.0005: Invalid byte count transferred, expected 16 got 0
[  177.109854][ T1004] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -22
[  177.119501][ T1004] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4
[  177.128498][ T1004] playstation 0003:054C:0BA0.0005: Failed to create dualshock4.
[  177.137347][ T1004] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -22
[  177.902603][   T64] usb 7-1: unable to get BOS descriptor or descriptor too short
[  177.917784][   T64] usb 7-1: unable to read config index 0 descriptor/start: -71
[  177.919669][   T36] audit: type=1400 audit(2000000372.942:2296): avc:  denied  { setattr } for  pid=7102 comm="syz.6.2408" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  177.935507][   T64] usb 7-1: can't read configurations, error -71
[  178.320299][   T64] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  178.481292][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.510286][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.530310][   T64] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  178.549539][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.567107][   T64] usb 7-1: config 0 descriptor??
[  178.590572][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.597672][   T36] audit: type=1400 audit(2000000373.612:2297): avc:  denied  { write } for  pid=7122 comm="syz.0.2415" path="socket:[33758]" dev="sockfs" ino=33758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.625208][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.641092][ T7114] bridge_slave_0: entered allmulticast mode
[  178.650194][ T7114] bridge_slave_0: entered promiscuous mode
[  178.669912][ T6670] bridge0: port 3(syz_tun) entered disabled state
[  178.682481][ T6670] syz_tun (unregistering): left allmulticast mode
[  178.694924][ T6670] syz_tun (unregistering): left promiscuous mode
[  178.703181][ T6670] bridge0: port 3(syz_tun) entered disabled state
[  178.718779][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.725964][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.738647][ T7114] bridge_slave_1: entered allmulticast mode
[  178.750045][ T7114] bridge_slave_1: entered promiscuous mode
[  178.776563][   T64] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  178.865363][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.872463][ T7114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.879780][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.886827][ T7114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.912102][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.919610][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.937102][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.944177][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.952249][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.959288][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.976499][   T64] usb 3-1: USB disconnect, device number 27
[  178.982366][ T7114] veth0_vlan: entered promiscuous mode
[  178.995170][ T7114] veth1_macvtap: entered promiscuous mode
[  179.022469][   T36] audit: type=1400 audit(2000000374.052:2298): avc:  denied  { create } for  pid=7139 comm="syz.4.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  179.023171][ T7140] rust_binder: Write failure EINVAL in pid:2
[  179.048400][   T36] audit: type=1400 audit(2000000374.082:2299): avc:  denied  { unmount } for  pid=7114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  179.089933][ T7148] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.089960][ T7148] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.102261][ T7153] rust_binder: Write failure EINVAL in pid:10
[  179.116867][ T3342] Bluetooth: hci0: Frame reassembly failed (-84)
[  179.485711][  T379] usb 7-1: USB disconnect, device number 12
[  179.505443][ T7162] netlink: 468 bytes leftover after parsing attributes in process `syz.6.2425'.
[  179.628249][ T7165] rust_binder: Write failure EFAULT in pid:186
[  179.642122][ T7167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188
[  179.661187][   T36] audit: type=1326 audit(2000000374.692:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.695623][ T7169] binder: Unknown parameter 'context'
[  179.715093][   T36] audit: type=1326 audit(2000000374.722:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.739005][   T36] audit: type=1326 audit(2000000374.722:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.762975][   T36] audit: type=1326 audit(2000000374.722:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.786937][   T36] audit: type=1326 audit(2000000374.722:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.818164][   T36] audit: type=1326 audit(2000000374.722:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.845303][   T36] audit: type=1326 audit(2000000374.722:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x7ffc0000
[  179.869664][ T7171] rust_binder: Write failure EFAULT in pid:192
[  180.014225][ T7182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203
[  180.145758][ T7189] rust_binder: Write failure EFAULT in pid:17
[  180.159339][ T7193] binder: Bad value for 'stats'
[  180.178187][ T7195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214
[  180.179062][ T7195] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  180.195997][ T7195] SELinux: failed to load policy
[  180.215897][ T7199] tun0: tun_chr_ioctl cmd 1074025675
[  180.221309][ T7199] tun0: persist disabled
[  180.296074][ T7210] rust_binder: Write failure EFAULT in pid:26
[  180.305139][ T7212] overlayfs: missing 'workdir'
[  180.550278][  T379] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  180.730274][  T379] usb 5-1: Using ep0 maxpacket: 8
[  180.738698][  T379] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.756221][  T379] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  180.772072][  T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.781083][  T379] usb 5-1: config 0 descriptor??
[  180.989011][  T379] kye 0003:0458:4018.0007: unbalanced collection at end of report description
[  180.999049][  T379] kye 0003:0458:4018.0007: parse failed
[  181.008933][  T379] kye 0003:0458:4018.0007: probe with driver kye failed with error -22
[  181.130310][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  181.136507][  T592] Bluetooth: hci0: command 0x1003 tx timeout
[  181.195778][    T9] usb 5-1: USB disconnect, device number 25
[  181.304660][ T7236] rust_binder: Write failure EINVAL in pid:36
[  181.305720][ T7234] rust_binder: Read failure Err(EAGAIN) in pid:36
[  181.333194][ T7241] binder: Unknown parameter 'context'
[  181.365136][ T7243] binder: Unknown parameter 'm	'
[  181.483050][ T7257] binder: Bad value for 'max'
[  181.820349][   T45] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  181.950311][   T45] usb 7-1: device descriptor read/64, error -71
[  182.190371][   T45] usb 7-1: device descriptor read/64, error -71
[  182.247417][ T7277] netlink: 'syz.2.2465': attribute type 4 has an invalid length.
[  182.266001][ T7277] netlink: 'syz.2.2465': attribute type 4 has an invalid length.
[  182.390357][  T379] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  182.390822][ T7281] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  182.430290][   T45] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  182.541281][  T379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.551446][  T379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.561020][  T379] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  182.570073][  T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  182.578505][   T45] usb 7-1: device descriptor read/64, error -71
[  182.584840][  T379] usb 5-1: SerialNumber: syz
[  182.640277][   T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  182.790273][   T31] usb 3-1: Using ep0 maxpacket: 32
[  182.796872][  T379] usb 5-1: 0:2 : does not exist
[  182.802353][   T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  182.811535][   T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  182.820176][   T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  182.829994][   T45] usb 7-1: device descriptor read/64, error -71
[  182.837384][  T379] usb 5-1: USB disconnect, device number 26
[  182.844303][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  182.854963][   T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  182.865083][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  182.878240][   T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  182.887335][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.896008][   T31] usb 3-1: config 0 descriptor??
[  182.950392][   T45] usb usb7-port1: attempt power cycle
[  183.102357][   T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.290450][   T45] usb 7-1: new low-speed USB device number 15 using dummy_hcd
[  183.305342][   T31] usb 3-1: USB disconnect, device number 28
[  183.312064][   T31] usblp0: removed
[  183.316238][   T45] usb 7-1: device descriptor read/8, error -71
[  183.369969][ T7289] rust_binder: Write failure EINVAL in pid:65
[  183.451281][   T45] usb 7-1: device descriptor read/8, error -71
[  183.487905][ T7297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  183.487926][ T7297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73
[  183.700340][   T45] usb 7-1: new low-speed USB device number 16 using dummy_hcd
[  183.731365][   T45] usb 7-1: device descriptor read/8, error -71
[  183.861355][   T45] usb 7-1: device descriptor read/8, error -71
[  183.970365][   T45] usb usb7-port1: unable to enumerate USB device
[  184.330318][  T379] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  184.481314][  T379] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  184.491343][  T379] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  184.500418][  T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.510140][  T379] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[  184.605206][ T7319] input: syz0 as /devices/virtual/input/input22
[  187.100907][    T9] usb 5-1: USB disconnect, device number 27
[  192.046076][ T7366] rust_binder: Write failure EINVAL in pid:71
[  192.078398][   T36] kauditd_printk_skb: 21 callbacks suppressed
[  192.078416][   T36] audit: type=1326 audit(2000000387.102:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.6.2494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd26c58e929 code=0x0
[  192.121517][ T7372] rust_binder: Write failure EINVAL in pid:71
[  192.130769][ T7374] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  192.166403][ T7380] rust_binder: Write failure EINVAL in pid:103
[  192.240285][   T64] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  192.401378][   T64] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  192.409499][   T64] usb 3-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config
[  192.419876][   T64] usb 3-1: config 0 has no interface number 0
[  192.427318][   T64] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00
[  192.436447][   T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.444464][   T64] usb 3-1: Product: syz
[  192.449051][   T64] usb 3-1: Manufacturer: syz
[  192.453650][   T64] usb 3-1: SerialNumber: syz
[  192.459036][   T64] usb 3-1: config 0 descriptor??
[  192.667477][   T64] usb 3-1: Found UVC 0.00 device syz (056d:0000)
[  192.673917][   T64] usb 3-1: No valid video chain found.
[  192.680144][   T64] usb 3-1: USB disconnect, device number 29
[  192.925186][ T7399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258
[  192.925781][   T36] audit: type=1400 audit(2000000387.952:2329): avc:  denied  { read } for  pid=7398 comm="syz.6.2502" name="/" dev="configfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  192.935197][   T36] audit: type=1400 audit(2000000387.952:2330): avc:  denied  { open } for  pid=7398 comm="syz.6.2502" path="/" dev="configfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  192.994522][   T36] audit: type=1400 audit(2000000388.022:2331): avc:  denied  { read } for  pid=7408 comm="syz.0.2504" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  193.019126][   T36] audit: type=1400 audit(2000000388.022:2332): avc:  denied  { open } for  pid=7408 comm="syz.0.2504" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  193.044087][   T36] audit: type=1400 audit(2000000388.022:2333): avc:  denied  { ioctl } for  pid=7408 comm="syz.0.2504" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  193.071098][   T36] audit: type=1400 audit(2000000388.022:2334): avc:  denied  { execute } for  pid=7408 comm="syz.0.2504" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  193.082403][ T7420] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 4216, size: 4112)
[  193.094492][ T7420] rust_binder: Error while translating object.
[  193.105310][ T7420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  193.111494][ T7420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117
[  193.131626][ T7422] overlayfs: overlapping lowerdir path
[  193.154413][ T7426] FAULT_INJECTION: forcing a failure.
[  193.154413][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  193.167516][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.4.2510 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  193.167547][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.167560][ T7426] Call Trace:
[  193.167564][ T7426]  <TASK>
[  193.167569][ T7426]  __dump_stack+0x21/0x30
[  193.167594][ T7426]  dump_stack_lvl+0x10c/0x190
[  193.167605][ T7426]  ? __cfi_dump_stack_lvl+0x10/0x10
[  193.167616][ T7426]  ? unwind_get_return_address+0x51/0x90
[  193.167626][ T7426]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  193.167638][ T7426]  dump_stack+0x19/0x20
[  193.167647][ T7426]  should_fail_ex+0x3d9/0x530
[  193.167659][ T7426]  should_fail+0xf/0x20
[  193.167667][ T7426]  should_fail_usercopy+0x1e/0x30
[  193.167678][ T7426]  _copy_from_user+0x22/0xb0
[  193.167690][ T7426]  ___sys_recvmsg+0x12f/0x510
[  193.167700][ T7426]  ? __sys_recvmsg+0x280/0x280
[  193.167708][ T7426]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  193.167718][ T7426]  ? selinux_file_permission+0x309/0xb30
[  193.167732][ T7426]  ? __fget_files+0x2c5/0x340
[  193.167746][ T7426]  do_recvmmsg+0x326/0x770
[  193.167756][ T7426]  ? __sys_recvmmsg+0x290/0x290
[  193.167764][ T7426]  ? __cfi_vfs_write+0x10/0x10
[  193.167776][ T7426]  ? fput+0x1a5/0x240
[  193.167789][ T7426]  __x64_sys_recvmmsg+0x191/0x240
[  193.167798][ T7426]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  193.167806][ T7426]  ? __kasan_check_read+0x15/0x20
[  193.167817][ T7426]  x64_sys_call+0x292c/0x2ee0
[  193.167828][ T7426]  do_syscall_64+0x58/0xf0
[  193.167841][ T7426]  ? clear_bhb_loop+0x35/0x90
[  193.167854][ T7426]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  193.167867][ T7426] RIP: 0033:0x7f220c38e929
[  193.167879][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.167886][ T7426] RSP: 002b:00007f220d128038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  193.167901][ T7426] RAX: ffffffffffffffda RBX: 00007f220c5b5fa0 RCX: 00007f220c38e929
[  193.167908][ T7426] RDX: 0000000000000004 RSI: 0000200000009800 RDI: 0000000000000003
[  193.167914][ T7426] RBP: 00007f220d128090 R08: 0000000000000000 R09: 0000000000000000
[  193.167921][ T7426] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001
[  193.167926][ T7426] R13: 0000000000000000 R14: 00007f220c5b5fa0 R15: 00007ffdc109e208
[  193.167934][ T7426]  </TASK>
[  193.182467][ T7428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260
[  193.188771][ T7429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260
[  193.194104][ T7428] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  193.197365][ T7429] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  193.200186][ T7428] rust_binder: Read failure Err(EFAULT) in pid:260
[  193.205241][ T7429] rust_binder: Read failure Err(EFAULT) in pid:260
[  193.584556][ T7442] fuse: Bad value for 'user_id'
[  193.596155][ T7442] fuse: Bad value for 'user_id'
[  193.700299][  T379] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  193.707941][ T7444] ip6_vti0: entered promiscuous mode
[  193.764435][   T36] audit: type=1400 audit(2000000388.792:2335): avc:  denied  { map } for  pid=7450 comm="syz.6.2519" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  193.860303][  T379] usb 3-1: Using ep0 maxpacket: 16
[  193.866486][  T379] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  193.876901][  T379] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  193.886005][  T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.894154][  T379] usb 3-1: Product: syz
[  193.898366][  T379] usb 3-1: Manufacturer: syz
[  193.903012][  T379] usb 3-1: SerialNumber: syz
[  193.908487][  T379] usb 3-1: config 0 descriptor??
[  193.914364][  T379] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  193.922114][  T379] usb 3-1: Detected FT232R
[  193.988698][ T7457] FAULT_INJECTION: forcing a failure.
[  193.988698][ T7457] name failslab, interval 1, probability 0, space 0, times 1
[  194.001516][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.6.2521 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  194.001547][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  194.001558][ T7457] Call Trace:
[  194.001565][ T7457]  <TASK>
[  194.001572][ T7457]  __dump_stack+0x21/0x30
[  194.001589][ T7457]  dump_stack_lvl+0x10c/0x190
[  194.001601][ T7457]  ? __cfi_dump_stack_lvl+0x10/0x10
[  194.001618][ T7457]  ? ___sys_recvmsg+0x1b6/0x510
[  194.001635][ T7457]  dump_stack+0x19/0x20
[  194.001653][ T7457]  should_fail_ex+0x3d9/0x530
[  194.001671][ T7457]  should_failslab+0xac/0x100
[  194.001690][ T7457]  kmem_cache_alloc_node_noprof+0x45/0x3b0
[  194.001702][ T7457]  ? __alloc_skb+0x10c/0x370
[  194.001713][ T7457]  ? mutex_lock+0x92/0x1c0
[  194.001722][ T7457]  __alloc_skb+0x10c/0x370
[  194.001733][ T7457]  netlink_dump+0x237/0xeb0
[  194.001746][ T7457]  ? refcount_inc+0x90/0x90
[  194.001770][ T7457]  ? __kfree_skb+0x18f/0x210
[  194.001790][ T7457]  ? skb_free_datagram+0x19/0x30
[  194.001811][ T7457]  ? consume_skb+0x65/0x1a0
[  194.001829][ T7457]  netlink_recvmsg+0x677/0xdf0
[  194.001843][ T7457]  ? __cfi_netlink_recvmsg+0x10/0x10
[  194.001856][ T7457]  ? bpf_lsm_socket_recvmsg+0xd/0x20
[  194.001870][ T7457]  ? security_socket_recvmsg+0x3a/0xf0
[  194.001881][ T7457]  ? __cfi_netlink_recvmsg+0x10/0x10
[  194.001896][ T7457]  sock_recvmsg+0x216/0x270
[  194.001916][ T7457]  ____sys_recvmsg+0x1ca/0x460
[  194.001932][ T7457]  ? __sys_recvmsg_sock+0x60/0x60
[  194.001950][ T7457]  ? import_iovec+0x81/0xb0
[  194.001971][ T7457]  ___sys_recvmsg+0x1b6/0x510
[  194.001979][ T7457]  ? __sys_recvmsg+0x280/0x280
[  194.001988][ T7457]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  194.002006][ T7457]  ? selinux_file_permission+0x309/0xb30
[  194.002019][ T7457]  ? __fget_files+0x2c5/0x340
[  194.002032][ T7457]  do_recvmmsg+0x326/0x770
[  194.002047][ T7457]  ? __sys_recvmmsg+0x290/0x290
[  194.002062][ T7457]  ? __cfi_vfs_write+0x10/0x10
[  194.002082][ T7457]  ? fput+0x1a5/0x240
[  194.002104][ T7457]  __x64_sys_recvmmsg+0x191/0x240
[  194.002117][ T7457]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  194.002126][ T7457]  ? __kasan_check_read+0x15/0x20
[  194.002136][ T7457]  x64_sys_call+0x292c/0x2ee0
[  194.002148][ T7457]  do_syscall_64+0x58/0xf0
[  194.002159][ T7457]  ? clear_bhb_loop+0x35/0x90
[  194.002173][ T7457]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.002192][ T7457] RIP: 0033:0x7fd26c58e929
[  194.002206][ T7457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.002220][ T7457] RSP: 002b:00007fd26d442038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  194.002239][ T7457] RAX: ffffffffffffffda RBX: 00007fd26c7b5fa0 RCX: 00007fd26c58e929
[  194.002252][ T7457] RDX: 0000000000000004 RSI: 0000200000009800 RDI: 0000000000000003
[  194.002260][ T7457] RBP: 00007fd26d442090 R08: 0000000000000000 R09: 0000000000000000
[  194.002266][ T7457] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001
[  194.002272][ T7457] R13: 0000000000000000 R14: 00007fd26c7b5fa0 R15: 00007fff7a8f8eb8
[  194.002280][ T7457]  </TASK>
[  194.314730][  T379] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  194.433134][   T36] audit: type=1400 audit(2000000389.462:2336): avc:  denied  { create } for  pid=7488 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  194.453017][   T36] audit: type=1400 audit(2000000389.462:2337): avc:  denied  { create } for  pid=7488 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  194.468708][ T7498] overlay: Unknown parameter 'func'
[  194.487214][ T7501] tipc: Trying to set illegal importance in message
[  194.526893][  T379] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  194.829973][    T9] usb 3-1: USB disconnect, device number 30
[  194.837565][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  194.847236][    T9] ftdi_sio 3-1:0.0: device disconnected
[  195.590291][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  195.740277][    T9] usb 3-1: Using ep0 maxpacket: 16
[  195.746536][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.757567][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.770371][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.779386][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.788030][    T9] usb 3-1: config 0 descriptor??
[  196.194347][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.202946][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.212203][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.219414][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.226681][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.233935][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.241165][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.248369][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.255588][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.262812][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.270007][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.277225][    T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  196.286057][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input23
[  196.298704][    T9] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  196.415867][ T7534] rust_binder: Write failure EFAULT in pid:266
[  196.416280][   T31] usb 3-1: USB disconnect, device number 31
[  196.654311][ T7546] overlayfs: failed to clone upperpath
[  197.000111][ T7554] overlay: Unknown parameter 'uid<00000000000000000000'
[  197.008027][ T7554] netlink: 'syz.2.2553': attribute type 11 has an invalid length.
[  197.151044][ T7561] FAULT_INJECTION: forcing a failure.
[  197.151044][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.164462][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.2.2555 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  197.164491][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  197.164501][ T7561] Call Trace:
[  197.164506][ T7561]  <TASK>
[  197.164511][ T7561]  __dump_stack+0x21/0x30
[  197.164527][ T7561]  dump_stack_lvl+0x10c/0x190
[  197.164538][ T7561]  ? __cfi_dump_stack_lvl+0x10/0x10
[  197.164549][ T7561]  ? __sys_recvmsg_sock+0x60/0x60
[  197.164559][ T7561]  dump_stack+0x19/0x20
[  197.164569][ T7561]  should_fail_ex+0x3d9/0x530
[  197.164580][ T7561]  should_fail+0xf/0x20
[  197.164589][ T7561]  should_fail_usercopy+0x1e/0x30
[  197.164599][ T7561]  _copy_from_user+0x22/0xb0
[  197.164611][ T7561]  ___sys_recvmsg+0x12f/0x510
[  197.164621][ T7561]  ? __sys_recvmsg+0x280/0x280
[  197.164630][ T7561]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  197.164640][ T7561]  ? selinux_file_permission+0x309/0xb30
[  197.164654][ T7561]  ? __fget_files+0x2c5/0x340
[  197.164667][ T7561]  do_recvmmsg+0x326/0x770
[  197.164676][ T7561]  ? __sys_recvmmsg+0x290/0x290
[  197.164685][ T7561]  ? __cfi_vfs_write+0x10/0x10
[  197.164696][ T7561]  ? fput+0x1a5/0x240
[  197.164709][ T7561]  __x64_sys_recvmmsg+0x191/0x240
[  197.164717][ T7561]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  197.164727][ T7561]  ? __kasan_check_read+0x15/0x20
[  197.164737][ T7561]  x64_sys_call+0x292c/0x2ee0
[  197.164753][ T7561]  do_syscall_64+0x58/0xf0
[  197.164769][ T7561]  ? clear_bhb_loop+0x35/0x90
[  197.164784][ T7561]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.164797][ T7561] RIP: 0033:0x7f6add58e929
[  197.164806][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.164815][ T7561] RSP: 002b:00007f6ade38d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  197.164827][ T7561] RAX: ffffffffffffffda RBX: 00007f6add7b5fa0 RCX: 00007f6add58e929
[  197.164835][ T7561] RDX: 0000000000000004 RSI: 0000200000009800 RDI: 0000000000000003
[  197.164841][ T7561] RBP: 00007f6ade38d090 R08: 0000000000000000 R09: 0000000000000000
[  197.164847][ T7561] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001
[  197.164853][ T7561] R13: 0000000000000000 R14: 00007f6add7b5fa0 R15: 00007ffddb1d5cd8
[  197.164861][ T7561]  </TASK>
[  197.460953][  T449] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  197.483641][ T7577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  197.483669][ T7577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303
[  197.494469][ T7589] SELinux:  Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped).
[  197.513010][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  197.513024][   T36] audit: type=1400 audit(2000000392.552:2341): avc:  denied  { relabelto } for  pid=7588 comm="syz.4.2567" name="file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0"
[  197.545607][   T36] audit: type=1400 audit(2000000392.552:2342): avc:  denied  { associate } for  pid=7588 comm="syz.4.2567" name="file0" dev="tmpfs" ino=415 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0"
[  197.573084][   T36] audit: type=1400 audit(2000000392.552:2343): avc:  denied  { rmdir } for  pid=7114 comm="syz-executor" name="file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_mail_t:s0"
[  197.610311][  T449] usb 3-1: Using ep0 maxpacket: 16
[  197.615832][  T449] usb 3-1: too many configurations: 38, using maximum allowed: 8
[  197.629944][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.640939][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.651414][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.662323][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.672827][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.683895][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.694731][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.707141][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.717570][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.728489][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.738949][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.749847][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.760302][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.771252][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.781794][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.792698][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.802505][  T449] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  197.811566][  T449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.820115][  T449] usb 3-1: config 0 descriptor??
[  198.229817][  T449] usbhid 3-1:0.0: can't add hid device: -71
[  198.235864][  T449] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  198.245092][  T449] usb 3-1: USB disconnect, device number 32
[  198.430301][  T379] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  198.580286][  T379] usb 7-1: Using ep0 maxpacket: 16
[  198.586382][  T379] usb 7-1: config index 0 descriptor too short (expected 52, got 36)
[  198.594758][  T379] usb 7-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config
[  198.605078][  T379] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  198.618249][  T379] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  198.627831][  T379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.637041][  T379] usb 7-1: config 0 descriptor??
[  198.644009][  T379] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  198.656035][   T36] audit: type=1400 audit(2000000393.682:2344): avc:  denied  { map } for  pid=7621 comm="syz.4.2579" path="socket:[36628]" dev="sockfs" ino=36628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  198.789797][   T36] audit: type=1326 audit(2000000393.812:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220c38e929 code=0x7fc00000
[  199.017339][ T7635] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  199.036225][ T7638] x_tables: duplicate underflow at hook 1
[  201.203868][    T9] usb 7-1: USB disconnect, device number 17
[  201.268460][   T36] audit: type=1326 audit(2000000396.292:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.2591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6add58e929 code=0x0
[  201.319116][   T36] audit: type=1400 audit(2000000396.342:2347): avc:  denied  { map } for  pid=7666 comm="syz.0.2592" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  201.377188][   T36] audit: type=1326 audit(2000000396.372:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.0.2592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f767398e929 code=0x0
[  201.582156][   T36] audit: type=1326 audit(2000000396.612:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.4.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f220c32ab19 code=0x7fc00000
[  202.086921][   T36] audit: type=1400 audit(2000000397.112:2350): avc:  denied  { mounton } for  pid=7679 comm="syz.6.2598" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  202.087158][ T7680] FAT-fs (rnullb0): bogus number of reserved sectors
[  202.117587][ T7680] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  202.178402][ T7697] random: crng reseeded on system resumption
[  202.215241][ T7694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94
[  202.215277][ T7694] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  202.229800][ T7694] rust_binder: Read failure Err(EFAULT) in pid:94
[  202.284601][ T7722] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  202.348923][ T7717] netlink: 'syz.2.2609': attribute type 4 has an invalid length.
[  202.459362][ T7749] binder: Binderfs stats mode cannot be changed during a remount
[  202.482767][ T7753] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  202.485371][ T7753] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  202.544289][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  202.544305][   T36] audit: type=1400 audit(2000000397.572:2355): avc:  denied  { listen } for  pid=7752 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  202.640610][   T36] audit: type=1400 audit(2000000397.672:2356): avc:  denied  { map } for  pid=7760 comm="syz.6.2624" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  202.665815][ T7765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350
[  202.677051][ T7767] netlink: 'syz.6.2627': attribute type 4 has an invalid length.
[  202.695390][ T7767] binder: Bad value for 'max'
[  202.855206][ T7781] binder: Unknown parameter 'defcontext01777777777777777777777'
[  203.119640][   T36] audit: type=1400 audit(2000000398.142:2357): avc:  denied  { rename } for  pid=6699 comm="syz-executor" name="#1d" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  203.165659][ T6699] ------------[ cut here ]------------
[  203.171157][ T6699] WARNING: CPU: 0 PID: 6699 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190
[  203.180573][ T6699] Modules linked in:
[  203.184502][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz-executor Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  203.198240][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.208324][ T6699] RIP: 0010:ovl_dir_modified+0x15a/0x190
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  203.214029][ T6699] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 83 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 98 43 ff <0f> 0b e9 3e ff ff ff e8 ba 98 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  203.218471][   T36] audit: type=1400 audit(2000000398.242:2358): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[2786]" dev="pipefs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  203.233691][ T6699] RSP: 0018:ffffc900103a7b68 EFLAGS: 00010293
[  203.233710][ T6699] RAX: ffffffff8241e48a RBX: 0000000000000000 RCX: ffff88813fa65f00
[  203.271009][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  203.279278][ T6699] RBP: ffffc900103a7b90 R08: ffff888142c1d2df R09: 1ffff11028583a5b
[  203.287427][ T6699] R10: dffffc0000000000 R11: ffffed1028583a5c R12: 0000000000000000
[  203.295535][ T6699] R13: dffffc0000000000 R14: ffff888142c1d240 R15: ffff888142c38110
[  203.303729][ T6699] FS:  0000555568804500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  203.312704][ T6699] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  203.319292][ T6699] CR2: 00007ffc711e1c08 CR3: 00000001298ee000 CR4: 00000000003526b0
[  203.327332][ T6699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  203.335353][ T6699] DR3: 0000000000004c07 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  203.343367][ T6699] Call Trace:
[  203.346637][ T6699]  <TASK>
[  203.349545][ T6699]  ovl_do_remove+0x7b8/0xcf0
[  203.354146][ T6699]  ? ovl_set_redirect+0x780/0x780
[  203.359165][ T6699]  ? down_write+0xe9/0x2a0
[  203.363604][ T6699]  ? __cfi_down_write+0x10/0x10
[  203.368444][ T6699]  ovl_rmdir+0x1e/0x30
[  203.372527][ T6699]  vfs_rmdir+0x3dd/0x560
[  203.376760][ T6699]  incfs_kill_sb+0x109/0x230
[  203.381354][ T6699]  deactivate_locked_super+0xd5/0x2a0
[  203.386717][ T6699]  deactivate_super+0xb8/0xe0
[  203.391433][ T6699]  cleanup_mnt+0x3f1/0x480
[  203.395857][ T6699]  __cleanup_mnt+0x1d/0x40
[  203.400487][ T6699]  task_work_run+0x1e0/0x250
[  203.405074][ T6699]  ? __cfi_task_work_run+0x10/0x10
[  203.410162][ T6699]  ? __x64_sys_umount+0x126/0x170
[  203.415245][ T6699]  ? __cfi___x64_sys_umount+0x10/0x10
[  203.420634][ T6699]  ? __kasan_check_read+0x15/0x20
[  203.425653][ T6699]  resume_user_mode_work+0x36/0x50
[  203.430776][ T6699]  syscall_exit_to_user_mode+0x64/0xb0
[  203.436228][ T6699]  do_syscall_64+0x64/0xf0
[  203.440652][ T6699]  ? clear_bhb_loop+0x35/0x90
[  203.445331][ T6699]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  203.451236][ T6699] RIP: 0033:0x7f767398fc57
[  203.455653][ T6699] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  203.475291][ T6699] RSP: 002b:00007ffc711e4598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.483732][ T6699] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f767398fc57
[  203.491714][ T6699] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc711e4650
[  203.499677][ T6699] RBP: 00007ffc711e4650 R08: 0000000000000000 R09: 0000000000000000
[  203.507665][ T6699] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc711e5740
[  203.515684][ T6699] R13: 00007f7673a10925 R14: 000000000003166a R15: 00007ffc711e6810
[  203.523881][ T6699]  </TASK>
[  203.526894][ T6699] ---[ end trace 0000000000000000 ]---
[  203.532660][ T6699] ------------[ cut here ]------------
[  203.538117][ T6699] WARNING: CPU: 1 PID: 6699 at fs/overlayfs/util.c:600 ovl_dir_modified+0x15a/0x190
[  203.547556][ T6699] Modules linked in:
[  203.551482][ T6699] CPU: 1 UID: 0 PID: 6699 Comm: syz-executor Tainted: G        W          6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  203.566633][ T6699] Tainted: [W]=WARN
[  203.570445][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.580527][ T6699] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  203.586171][ T6699] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 83 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 98 43 ff <0f> 0b e9 3e ff ff ff e8 ba 98 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  203.605799][ T6699] RSP: 0018:ffffc900103a7b68 EFLAGS: 00010293
[  203.611910][ T6699] RAX: ffffffff8241e48a RBX: 0000000000000000 RCX: ffff88813fa65f00
[  203.619865][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  203.627857][ T6699] RBP: ffffc900103a7b90 R08: ffff888142c1d2df R09: 1ffff11028583a5b
[  203.635857][ T6699] R10: dffffc0000000000 R11: ffffed1028583a5c R12: 0000000000000000
[  203.643853][ T6699] R13: dffffc0000000000 R14: ffff888142c1d240 R15: ffff888142c38110
[  203.651855][ T6699] FS:  0000555568804500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  203.660813][ T6699] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  203.667388][ T6699] CR2: 00005641cb5ccb98 CR3: 00000001298ee000 CR4: 00000000003526b0
[  203.675375][ T6699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  203.683394][ T6699] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  203.691460][ T6699] Call Trace:
[  203.694733][ T6699]  <TASK>
[  203.697643][ T6699]  ovl_do_remove+0x7b8/0xcf0
[  203.702245][ T6699]  ? ovl_set_redirect+0x780/0x780
[  203.707261][ T6699]  ? down_write+0xe9/0x2a0
[  203.711704][ T6699]  ? __cfi_down_write+0x10/0x10
[  203.716575][ T6699]  ovl_rmdir+0x1e/0x30
[  203.720655][ T6699]  vfs_rmdir+0x3dd/0x560
[  203.724889][ T6699]  incfs_kill_sb+0x1a0/0x230
[  203.729453][ T6699]  deactivate_locked_super+0xd5/0x2a0
[  203.734839][ T6699]  deactivate_super+0xb8/0xe0
[  203.739509][ T6699]  cleanup_mnt+0x3f1/0x480
[  203.743936][ T6699]  __cleanup_mnt+0x1d/0x40
[  203.748352][ T6699]  task_work_run+0x1e0/0x250
[  203.752959][ T6699]  ? __cfi_task_work_run+0x10/0x10
[  203.758059][ T6699]  ? __x64_sys_umount+0x126/0x170
[  203.763090][ T6699]  ? __cfi___x64_sys_umount+0x10/0x10
[  203.768453][ T6699]  ? __kasan_check_read+0x15/0x20
[  203.773498][ T6699]  resume_user_mode_work+0x36/0x50
[  203.778600][ T6699]  syscall_exit_to_user_mode+0x64/0xb0
[  203.784083][ T6699]  do_syscall_64+0x64/0xf0
[  203.788544][ T6699]  ? clear_bhb_loop+0x35/0x90
[  203.793250][ T6699]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  203.799139][ T6699] RIP: 0033:0x7f767398fc57
[  203.803566][ T6699] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  203.823222][ T6699] RSP: 002b:00007ffc711e4598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.831679][ T6699] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f767398fc57
[  203.839643][ T6699] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc711e4650
[  203.847631][ T6699] RBP: 00007ffc711e4650 R08: 0000000000000000 R09: 0000000000000000
[  203.855630][ T6699] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc711e5740
[  203.863625][ T6699] R13: 00007f7673a10925 R14: 000000000003166a R15: 00007ffc711e6810
[  203.871614][ T6699]  </TASK>
[  203.874625][ T6699] ---[ end trace 0000000000000000 ]---
[  203.955881][ T3342] bridge_slave_1: left allmulticast mode
[  203.961603][ T3342] bridge_slave_1: left promiscuous mode
[  203.968133][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.975911][ T3342] bridge_slave_0: left allmulticast mode
[  203.990294][ T3342] bridge_slave_0: left promiscuous mode
[  203.996007][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.152440][ T3342] veth1_macvtap: left promiscuous mode
[  204.157947][ T3342] veth0_vlan: left promiscuous mode
[  204.412195][ T3342] bridge_slave_1: left allmulticast mode
[  204.417848][ T3342] bridge_slave_1: left promiscuous mode
[  204.423507][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.430881][ T3342] bridge_slave_0: left allmulticast mode
[  204.436498][ T3342] bridge_slave_0: left promiscuous mode
[  204.442206][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.449799][ T3342] bridge_slave_1: left allmulticast mode
[  204.455506][ T3342] bridge_slave_1: left promiscuous mode
[  204.461147][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.468500][ T3342] bridge_slave_0: left allmulticast mode
[  204.474264][ T3342] bridge_slave_0: left promiscuous mode
[  204.479874][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.632928][ T3342] veth1_macvtap: left promiscuous mode
[  204.638426][ T3342] veth0_vlan: left promiscuous mode
[  204.643873][ T3342] veth1_macvtap: left promiscuous mode
[  204.649348][ T3342] veth0_vlan: left promiscuous mode