last executing test programs:

2m27.483617238s ago: executing program 0 (id=5):
socket$inet6(0xa, 0x1, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x801}, 0x14}}, 0x0)
close(r0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = gettid()
rt_sigqueueinfo(r3, 0x34, &(0x7f0000000000)={0x35, 0x9, 0x8}) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r7) (async)
r8 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', &(0x7f0000000100)="f866ef", 0x3) (async)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="2062a31de3da8aab00426199e2010000004000000100"]) (async)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {0x0, 0x0, 0x4}, {}, {0x0, 0x35}, {0x20}, {}, {}, {0x1, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {}, {0xff}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x8}]}}) (async)
ioctl$KVM_RUN(r9, 0x8004ae98, 0x20e10000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)

2m25.088700364s ago: executing program 0 (id=20):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0})

2m25.058629714s ago: executing program 0 (id=21):
r0 = socket(0xa, 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0x0, &(0x7f0000000000))
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES8], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_usb_disconnect(r2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x10)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="7365636c6162656c2c00e959a4b0dd41e44973fa7830a2d0987f528b1ad506fffb0c5c5fb6200be3f11c602ac0bc668946158d6e1edb59a06d4c0932166fc12ffef9b09d3be41b1ea49f58083f"])

2m23.667543335s ago: executing program 0 (id=30):
setresgid(0x0, 0x0, 0xee01)
getgroups(0x2, &(0x7f00000000c0)=[<r0=>0xee01, <r1=>0xee01])
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e)
getgroups(0x2, &(0x7f0000000100)=[r0, r0])
setfsgid(r1)
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_team\x00', <r4=>0x0})
times(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2905099, 0x0)
write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40010102)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0)
ioctl$RNDADDENTROPY(r7, 0x40085203, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x2)
sendto$packet(r3, &(0x7f0000000580)="100833fe1e5b0c9a728e92038fce", 0xe, 0x4000, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r8, 0x10001, 0x0)

2m22.631965531s ago: executing program 0 (id=33):
prctl$PR_SET_TSC(0x1a, 0x1) (async)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x2) (async)
prctl$PR_SET_TSC(0x1a, 0x2)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x2) (async)
prctl$PR_SET_TSC(0x1a, 0x2)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x1) (async)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f0000000040)='net/route\x00') (async)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/route\x00')
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
getsockopt$packet_buf(r1, 0x107, 0x9, &(0x7f0000000080)=""/196, &(0x7f0000000180)=0xc4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x1, 0x2, 0x3}, 0x10)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x1) (async)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x1) (async)
prctl$PR_SET_TSC(0x1a, 0x1)
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0xcd7c441e34304536)
prctl$PR_SET_TSC(0x1a, 0x2)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})
prctl$PR_SET_TSC(0x1a, 0x2)
prctl$PR_SET_TSC(0x1a, 0x2) (async)
prctl$PR_SET_TSC(0x1a, 0x2)
prctl$PR_SET_TSC(0x1a, 0x1)
epoll_create1(0x0)
prctl$PR_SET_TSC(0x1a, 0x0) (async)
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0x0) (async)
prctl$PR_SET_TSC(0x1a, 0x0)
prctl$PR_SET_TSC(0x1a, 0x1)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0xe, 0x2d, {0x2d, 0xe, "e871b5e2368022f53d7b804b9888baecf8fe43c01a0afe1abbd70df99bf110da24ca6823e4047ede19fe4d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f00000005c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a4f1d1e51d184d11a8468b6da1eb19e6"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x1, 0x3, "8214682e", "2c3e21aa"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x6, 0x5, 0x8, 0x4, 0x5}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x0, 0xd, 0xa1, "485732f2c9a53dcc4cab48e76d55a1a291b8dcd723bd251056936d015df2f133337193f703e552b144a206eedcbbabd292c9df7c93de6b28408a82d4101e9da2f5141e234e1278ac041bf0fe2648d90d5f91a5b0a84567e0ac8c90dc20e310ce4d59d4e80483147f1f4c73a69381792eaed1f9d8e49a2e9b0b3b90c20775fe4b3f377e5960dcf24cc5396b6c7daa08d324d77226d578c11aa56765ab9f45b8b73a"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xcf}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xe0}, &(0x7f0000000900)={0x40, 0xb, 0x2, 'GT'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x13, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "c0d2"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x1e}})

2m22.557434522s ago: executing program 0 (id=34):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x3, '\x00', 0xfffffffffffffffc})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000008200)={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9, 0x80, 0xf8, 0x2}]})
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)

2m22.516264613s ago: executing program 32 (id=34):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x3, '\x00', 0xfffffffffffffffc})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000008200)={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9, 0x80, 0xf8, 0x2}]})
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)

45.660712292s ago: executing program 1 (id=1410):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1400, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r1, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x3}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x12040, 0x0)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat, @fda={0x66646185, 0x2, 0x1, 0x2a}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
mkdir(&(0x7f00000001c0)='./file0\x00', 0xc0)

45.597048143s ago: executing program 1 (id=1411):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}}, 0x108)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x819, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x840)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='\x00')
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0)

45.590678343s ago: executing program 1 (id=1412):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x11)
read(r0, 0x0, 0x0) (async)
read(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
close_range(r0, r1, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r2, 0x7704, 0x2) (async)
ioctl$KVM_CREATE_VCPU(r2, 0x7704, 0x2)

45.589096733s ago: executing program 1 (id=1413):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f})
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2}, 0xffffffffffffffd1)
splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
sendto(r0, &(0x7f0000000140)="7636f4969578959783b46a2808a506230ec4f5daba6869479f2fef2eda466a8cb7a0021b227fc7b267db773dc8707cbcb6253bc42202d59817eeb736c06d", 0x3e, 0x20000000, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xe7f0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x3}}, 0x80)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000080)={0x80000002})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0)
ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x51)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
sendfile(r3, r3, 0x0, 0x5e7d)

45.588342693s ago: executing program 1 (id=1414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x129)
mount$incfs(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
getsockname$unix(r3, 0x0, &(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r4, 0x9, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
socket(0x1e, 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x1, 0x8679, 0x1, 0x4e8}}) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xa) (async, rerun: 64)
read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) (async, rerun: 64)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r6, 0x200000000000008, 0x0)

45.285107788s ago: executing program 1 (id=1417):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0x19}, @fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0xf}], 0x0, 0x0, 0x0})

45.223129509s ago: executing program 33 (id=1417):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0x19}, @fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0xf}], 0x0, 0x0, 0x0})

4.323878165s ago: executing program 3 (id=1823):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x14927e, 0x120) (async)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async)
fallocate(r0, 0x0, 0x0, 0x11000f4)
r3 = socket$unix(0x1, 0x5, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0})
ppoll(&(0x7f0000000180)=[{r5, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x19, 0x0, 0x0})

3.675432324s ago: executing program 4 (id=1824):
r0 = socket(0x2a, 0x801, 0x200000)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x8}, 'syz1\x00', 0x4})
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x35, {0x20, 0x0, 0x3, 0x0, 0x3, 0xffff1865}})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x6)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x141342)
ioctl$EVIOCGREP(r3, 0x80084503, 0x0)
cachestat(r1, 0x0, 0x0, 0x0)
getsockopt(r0, 0x3, 0x6, 0x0, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

3.622641835s ago: executing program 4 (id=1825):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x5, 0x10, 0xf1, 0x0, 0x970, 0x8, 0xffffffffffffffff, 0xb, 0x0, 0x5, 0x0, 0xbdb], 0xfffe1001, 0x3d4e00}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) (async, rerun: 32)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) (rerun: 32)

3.549062597s ago: executing program 4 (id=1826):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x6659052f40bf1dc8, 0x0, &(0x7f0000000200)="1920ff09511b1099c7961fdcc408000000a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16a66dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f6114e06301c52299fa00000000000000079b398845796c8777bd5c9ed3fe5a39ab91c3b89849a57af2780fa0e584954a5ab7502e7bd502dc1513885f55fdeb0b9487d4a3e5f312fc784d3342b8b29fc4fffa3408667d2343483d62ffb1f44ab8efcd0d50dc8d4f65caf444ba39c5b1683e6af16320c32dd364"})

3.499453268s ago: executing program 3 (id=1827):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0)
getitimer(0x1, &(0x7f0000000740))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
read(r3, &(0x7f0000000040)=""/98, 0x3a)
getitimer(0x1, &(0x7f00000000c0))
mkdir(&(0x7f0000000100)='./file0\x00', 0x88)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00')
lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=0x18, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

3.397011549s ago: executing program 3 (id=1829):
r0 = syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x25, &(0x7f0000004400)=0x5, 0x4)
ioprio_set$pid(0x1, r0, 0x4000)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0})

3.33440524s ago: executing program 2 (id=1832):
ioprio_set$pid(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000a40)=@get={0x1, 0x0, 0x4})
wait4(r0, 0x0, 0x20000000, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x2201, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x4)
r3 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r3, 0x9, 0x0, &(0x7f0000000500))
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @local, 0x1}, 0x1c)
ioctl$BLKRRPART(r4, 0x125f, 0x0)

3.30155098s ago: executing program 5 (id=1833):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'pim6reg1\x00', 0xc67})

3.30125779s ago: executing program 5 (id=1834):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x100400, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0])

3.213004812s ago: executing program 5 (id=1835):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="0061783d30303030303030303030303030303030010000003030302c00"])
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
r2 = syz_open_dev$evdev(0x0, 0x51bf3295, 0x101040)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0x400445a0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000080)="00000095ad00", 0x6}], 0x2}, 0x0)
recvfrom(r5, 0x0, 0x9, 0x40000000, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008c04"])
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]})
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])

3.204915441s ago: executing program 3 (id=1836):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x6d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x9]}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40041) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000000)) (async, rerun: 64)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (rerun: 64)
syz_usb_control_io$hid(r6, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000a6231306e53f070c0000002a9000030900be0083010000000b09007a150b5d8c3dda"], 0x0}, 0x0) (async, rerun: 64)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)=0x3)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00')
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x8)
ioctl$KVM_SET_MSRS(r9, 0x5000aea5, &(0x7f0000000080)=ANY=[]) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x62, r10}) (async)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010327bd7000fcdbdf2505000000080001001e00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x9}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "130d8d13ba7309c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5b8d74eb35ed17ec9757e3aefcac7e06"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01e410f3c784c3d4"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9df42e00034833e9814f8cb1b2335837a756aa6cbf9c1627db5758db0378d028"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "86cd7ea082453739"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f13d9ce6cf5197e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f6f8507f8ff03d38"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8f72c36dc0885911295a90e995ba4fa3fd5e6a1d03c7a37ecd5fbee1365c25c6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2202eae7d8bd1464"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="73af0203e8ea0a319740c890e496a77a8b3f107057a8653e70c13a421344ce47"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b2e2eb5b716f456159ed80bde562151f"}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8080}, 0x41)

3.079585734s ago: executing program 2 (id=1837):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3.004846745s ago: executing program 2 (id=1838):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
fsopen(0x0, 0x1)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
rt_sigaction(0x3e, 0x0, 0x0, 0x8, &(0x7f00000001c0))
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x2110, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x9, 0xff, 0x8, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x700, 0x20, 0x2, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', <r3=>0x0, 0x7800, 0x8, 0x5, 0x1, {{0x13, 0x4, 0x2, 0x3b, 0x4c, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x23, 0x1f, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @remote, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xe1, 0x0, 0x4, [0xfffffff9, 0x5, 0x8, 0x7]}, @noop]}}}}})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000380)={0x1d, r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', <r6=>r5, 0x4, 0x6, 0xb, 0x9, 0x0, @remote, @private2, 0x7800, 0x8, 0x3, 0x2}})
sendmmsg$inet(r1, &(0x7f0000003280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000000c0)="e52cac9fe158963e5ca265cfee27f685a821a56a7656df904eb058f817e3121e15dda459349faec18feec1ce73ad73e7bb98d1b4084554de32a0a05698ccd72a3befbc53af6ae244be1a9300edcdf767d15c0eab49231b8442ed2f4f222687009b81465b534deb24cd06c3baddceb87ac866eba50eb9ff70faa8a1bac45a4ab2de9e235d8daa5a2e47328dbca5d818277d6ce6ac44c38c79b978d7683b55a847639d8af08414242a1e0c8f4efb886fbe777feae56032bac07a785e2f07f2c5fc4b61eb59830adad4dacc30d5f080ca03b7c9f693d19722557767059b2f395b", 0xdf}, {&(0x7f0000000200)="4d32f1f0bc9583f8704d5870", 0xc}, {&(0x7f0000000300)="fb82dc45c2503f605a4f832c0ff39faea19cffb386832a16653b302acfa43ec19bf0dc84d680085c1ef8e1f07bd8879cc599646d71705e748116cfca1a4ba175025a36a5890563d8a55aae54230f5fce8289977ca0dba37611c313191e239a6da81d809fd9398920b64830f507027b4c06c202f819c85c671b8633b06c8edcee3eecd0f314de8179dbee1e19beeb6648f7482c5b3a7e1a8734e0606d0e353657d84974568c5222f9821de486a653724fd33923b1d017ce976132", 0xba}, {&(0x7f00000003c0)="a08193af62b308f37bf2ec5954db8128712c93f89b468206fef0575b0749e35a7bc0041fa047f4f2960e673e1538fb570410bf529b5df81747605691f50b472ba7c84709208ee27ec9c724049d3edb659a2eca647556a57e44673be7341c3a980a269fe3dcff4667b373dbe6a4413d421115480cb66638b25d9ff3622b05c1b063b4acc70563e3ea01c3ab", 0x8b}], 0x5, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x23, 0xc7, [@loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @remote, @loopback, @multicast1, @rand_addr=0x64010101, @remote]}, @noop, @noop, @ssrr={0x89, 0x2b, 0xdd, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @local, @rand_addr=0x64010101, @loopback, @remote, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x7, 0x9, "c37d3ba49751de"}, @cipso={0x86, 0x23, 0x3, [{0x2, 0xf, "11b4f9592b9161779c0f29bc76"}, {0x0, 0x5, "bd7a7a"}, {0x0, 0x9, "769124e7ce2df1"}]}, @end, @rr={0x7, 0x1f, 0xec, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x91, [@multicast2, @broadcast, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x6, "978bc099"}, @noop, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x1c0}}, {{&(0x7f0000000800)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000840)="382a74e20c549d97eea1d3f500e5943a9cac740d7f7d001360b85b27e387c88ed421ab31f7fc821fce8a0b627a6b511fe69afabac18e4c6f565a6756a2c5f5a444566f88aeb1bde4f3644bf141e17e30b14d58f2d0cf084a35c501e20aca2df6c8428ca72800f0a6c5143d65b6f345e38f6760023603b35f77700f971b6f5db47d2933b00a9423c1f26e3f1403e44d55feb873928b6482d2a5c077bfe4b9bc06c5244149605a6bd76d48817f4fc6c45e8ff3813cd2651ec9cf288d195d18d4a889203cf8c95313916bc0bebd00479324a251ac9504448494e579b6abc1da2d8154f8132943544ff465", 0xe9}, {&(0x7f0000000940)="9be6dc93869b12c72443b074848b8265a1acfa71ea6cb537f9a0f20ea928818e4628be4d99ebc1a9413943cbdb23b84bc583ba8075970f29a0c5cb3075f305ba0be82bef9743a86db00de2ba44158b023ca96d630794adebdcf473bc0fd9ce65a0fcd92e533f50a1fec9e762df817835c2f135cb719e6cb7daf4ca7644cb74dd098d20549294e92693b6f109789693cbd9ab9e87f173631be01229e43c3e763be5126f19b3eff94b9a07e2dc751c1b7e0c1d59b8c84995516bf839d377a6d129c6400b305b945d4ac70a85001be3", 0xce}, {&(0x7f0000000a40)="f7c70e838d50cab99d7ccf6a37453217112bec7b0d2948605a0f1b79952f74207b16431b832735ad2add9c39a7d11f2b8c13ac9575dd9a4fcd7a20b34337501c6f1bb80e1e66f1c016f57d9812cb19b8635713bc6abd344a799b561b8a97429f1e2cb897f954ae609edf925b9f5621b43bc20741d6de922e669ad6eaa770378d2a59724571d6eede1f9080d04c59966ff905b04e30370cd5cb5c6048f852103ba9e61159c8215df59c60d503b377791b562cd177e6aceb35da082a2f9ff25764d11cf5763dc6e12215d5c09384f90d372acb8422", 0xd4}], 0x3, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x42}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @multicast1}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0xb, [{@multicast1, 0xefb}, {@loopback, 0xb49}, {@multicast2, 0x20000000}]}, @rr={0x7, 0x1b, 0x77, [@private=0xa010100, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0xa, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010102}}}], 0x108}}, {{&(0x7f0000000d80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000dc0)="b4381fab77ee05d019d61f8635b7a48ed218d0d70a191ee990580d093415da090af3c1c47671e4b9ca57b9f6d04e9556bfa971d8165bebea873a0d5692691448c9685c0dcf3c3cc129e1a824222f7da1cccad9ff6f98f8523931b6b5b373118f79980ffb573cbf60911ea437b650b227995f91e081acd303742a2eda2df6e518ee6e2e2186487abbc0cc3520977edeef5137fc5a14d6d3ae4afcea57443b5d7988ed5e41c3e09778849d464f6813a0765f5231793d82d1816b6cdd3177a4108e52", 0xc1}, {&(0x7f0000000ec0)="4fee619e0e446f05927b3a21ccfd7349f912280b2b27d86c6a5e9b7d275ad938b2aa481ef590200c26b866b28e7951cad10175cbc3dc4fddb378bfdd187847193db34bd8f5258e6ce728990207250f0e89967f85a0662fb5f62ebd55dd034fdcadd5757e3289ab1e45defbec62d3151eba12d2b9bd7dcf3211277a66cea5565d0ef064161a272c64bb63850abe072f3d30e512fc54addab55c4dfa01c4b8f8feaa9c1a7891ddc6cfb68e2ac5ff9d11b7f8af2895a1532c0197429fbc2cba9bf701f5ef419dedb20ace212eb98cd5aab56b3ef9c4d01a15b8ffb15a356635c7822982d2c7eec4ca4bf9b901068f38", 0xee}, {&(0x7f0000000fc0)="46fc99023e4779a8d7e5b671ed68e5136d7e54df1cd2930a5f37e95f294c", 0x1e}, {&(0x7f0000001000)="9349064307f61c7349e4", 0xa}, {&(0x7f0000001040)="aba0d8f2edb05153029ef66b7bb220bd5fbf0fb54f35d0d7b89659fb35bcd208a9bdb6343ad7d52767da9435d7de6c796800bb0e4c10aa9b9a8a50e679105e5f0a40182a9392f3182af96099ad71e16b808975ae7c07fb10", 0x58}, {&(0x7f00000010c0)="d57be97e4478b4f37a0fb2797c0c2fe7fe1ccf55b5a30e10fbe2344e812aa54b253942ddb2a62c35b52cd27334106d01dccd1a948f0317c886abd19ee6fbe5", 0x3f}, {&(0x7f0000001100)="b8c1618729dc68f3ed5b4afd4f2d985e669e93b153ece0767baa444474e36af821e9e37af2a7ff22a6783f37e87c5226ff3f35361b", 0x35}, {&(0x7f0000002180)="f9a47a7ebf0a487b9f9e3302", 0xc}, {&(0x7f00000021c0)="8eb8a776feca5bfe7f1602cdea91e671f27e0df7ff8aef7825588e4ad2645cc554153c649f74fb639b1cc9b66d8273873ce99ba9973dfb6ff36910618040578739ed7c1f40cc37cf5a88ee4c452c8f38a0a6b5069f0ceb238864bc5bc95762591c907fb02e15c572b27783a7591c692455ba6b60828894ddc1074b191d2ad194a40c270737fcbef163f43b48167a2abf3eeb01572f84efc51795176ff3565ae8f108c2ba68533f4e2c5f52eb3c3cabbb559202292a3f2a56b9d069713cd88d46b8347cbd2bd9e07cfb08cedf1b9afb952671bc8e5b24ca936704bcfba1a2b703fa9da80fffa8faed29ff5127145f05a454cf812d9b84e27e17def83edfd3359a65e9bf74300ce9d04818b1552bb1f87348e1e5a80e4069182a39b1facfdf80280ee03118c521b8a804fb0343b6105d21956e2af56350cf30c9d1e34ce0ef543b7601b4e7a2513f02fe2b14a480c73df0897834f6c817b1ed4048f0d360b3aae317bd794911fe43d582b1b0d83ed3eaab60609875cca25fa9400ecf2f47310f56d5a70e6dfe79f40f90e1c4abd92cdf21ca74e4df9e90f8f3ae36fde405ccae649713136832c4bac7a4840f7f6fae64a7f89ba35d45b939b85e8bbf5c2c54663f4e49ab2c228ad8d7c79a3be9fab287094db445c0156aae5c66794d47940f140b489fedc9be4323e663bdb95f0ab29e9a37481fd3b44bce343007b2f75449143177c704919b9c60af98ab6efb55a759e16b04cfba59c1a51f88097a387f081aeb60a42be2f83bd9c87ec9cd624dbcbff7a4b924768ca88bb0caedde7d365e0f7fc80dad62dde0a3f53009061a6802c461341b7b32a7ad9abaa29d5f16745d6ecca930ee33c0231630034316db6547259d6225b479d30076692d11fc833c9b983ec19cc538eac805fbc60ac53db1bbb94b3f7050a5abfae9e779a14345eb30b3190e469424abd560527b9c82421194044f0b4c1ab3741de7422b60dfd8d6d2088138784bd1730a2ceb2fe23318799578bcfabaa92eb5b66899df13b45813cb462b1574bc7cbdd45c1251a1c163c1bece53f749f71d4dad093a7c7b2cacb6649a8fa2fa028726f499fa9382f3ef34ff056ac479f12ed0c5f21a80021caad4e3ed1216e7c2fb943a3da02757e996d37b9e405c1d328707c2cf40cc3bc46f0505bfb9954dc8231f8795b4b01b15f3dd3b02634f493b48e7c05ebad42847e5ed9e9c294af48fab3f907de2d353f38ac76cd0b7ad8ed9fc732a3c416ab53de6bae670347d943d7a9a8ba97b643055b39399bc2eacec922888b9f8cfccaa56a62d06f7304df358f3f7eafde7138d45c30c29203d91433d5c3b5dc3a19b6c70e3f6bb781b0d85952bb1b8f26af4dc381eabc17d68e2d0ed1873d2b46cfaff127a4a88ec4d640828a8a7a9c6f87ba4be8d84f3ed10a0f9545a0db5c70a484e86c72f702365670bb229e10874adbf8bfa9c5b1b0c932a455848415facf88653df1f439a3f54b46fa514b9a99dbab5bbeb165c5bec3ac65ba8d7654296a41a749e7ea5e786e6e04ae6f0cb2ba933fd869acf21a39ff702b4207d6fedbbc6bc6312693df26c792b53dbd6e54870f76642249d8d477f072e1aaee96de4b006ec4d8c7293e158315bd970d1374cf2ba0a37188ba27add14eda20bca23263c736843ae8b11a318853b594e70092caf29d9d2c5bea8f1682b4bc826ffa091a5a08572a3b9207af5ca6e8076fd80528dc7e4b247d52b1b59db41c2ff692c28221f7bf16074b944ff3f05a708d8e079ce7b76c03dc43603d42cbeb4add3a290913f99bee9aabd380cfb57341eff306d0843a7cb90975c34c02fb281be2646c94ba00d9f64d16e639c440b7617cb526d4bdcdab96b58b5bc57390e5e9d5acb21437dce6914ffe2a38702af82d865abc255e745dbd85f3d743b7d2fd767349ed56625ae2a325134bb3242f2053c477108e74f48af524768425d31f31d82ab9cd763f0f982edf8807b5a95eff0164223ab85d75dd6e35fed3122b54f8d617893068dbff5cfa61d9062347362b6c62a51b9dbec8f7d368bc7140768ce77a2363068e7845120b8b25d441bb21fdb7465901e7378f478fd6b26f131a358477ce928bc93f77c229802bb9b4fd7707e3c99f4d5a38750d1a4f40d7672ac2b97d09192d9499a25cd666aca2d33211f17a8a5bea078a4cddf81f6d3de759d3f94915a5cf30fa3b017af8653d550cdb448ad70df39333f7d45bd0f93eccc7f14f98e8b9d07d946dced33b5e1a209bb41360645039219be218cf799f2cfb428fc03dde61b73cc9e36cba208d061d9a289e100493d128225b1a9c68e6c404f5d884a4d7da61e016da227cf96e1a89611a198313b55399218ace4994a546db521f098c87b85ba4f9f4cfb558947731702ff367e2da33c398a45909ec7c1305a3627823335170d7f974fa2e6737e348e33bca94d877fa05f4dc676be46fadc4c49cdcec4e14a402460c580eb904d7f238d7dc918b4361b779d2f95ae3a7c99b03c797b4960c031480ccafe5cb59726fbae067a07d9be4102226dea8c0e5b32597fea461649366340fd177099a271c9a8e41eb69212aceabbf356f8ecdaa2acb1918fb3b1d9980159af30ddba7654922bd1261dd16f056c82500619b16ab8b6cec870ef09a9d594d1b37d0b37b4d1ffcb0b5d1a030d5423b7736ac763ff3c90908c244708471288b390c4157b35f109845ad39f15a0ebf2fadb260d80855239e1a56f3ef2fc5c99b76082c0e47ceddc7065a4c9fe743ddba2947a245b92fd83f146d9676a1c020962e8b578e1d283f3724c3b64c9a53eff5cc746a2e94fb6db6581503e55ea5fe29158d0b46e3ec155713c39e311e88ccf188237a8e0d8c16f34721bdf41acbbc3da6d6cd5b23f9db00c12f33fa59b199b1dd889018a23ca9f8fc925a8b03842a5c55443269de95376e5795a5eaba767aadb347615dcbf94a36d002b9aa0bacf3fe23816eefaa875f1832110cb4da6af3b88a980d5d1c7ecc63f5669f7af63484f06a71d6d847b98ecd8eedf1894c8494d399f92fe020b92479d0ba0ee74600163c7678a194db6d48d5d45d4d2b7e88146c830d681250e21bd889953622bb3a7c439d7c85ac262275cf423db7683f68e7658d8ed7959d74ca1046c6881af19e70a79d8601d2d2bf3d6257b28dab1a82f852f13917c064e13d251fa9689e270c33f6cfeef1538caf84ded0619817aab24f2fa3d3d6afec3ac777662d4015f97a3db6e657d8c32284cd97134a9990ce5e9f54e20fd0b9d736ff7e733942675bca898326d7a7075095758d24b73733030d9a1f38cca016c98c5a0bfb3471f40f5e78b0aa1b561a6293fb730eaca444fd6d646dd11cdc4297741252efc9d592b0ed7f84753a8dd8b69eee77545d071d06da54b717392a97be0aef26bc234f661ca2b8a4b50102ba173d43b2bbbc13301214abc571d5f77f3f062851eecf985ac4fe9daf5f90e90f779a14c8fafb724d2311f2a143ff179c57b18f5246412e51f598a6029d5e4242d2bd617ad62876c8f033c9e7de39fc31d69bb846349c23022c330e215f3290cb1f857982d249aac2acd63be1b930c6f9b8a03d9f25d450c7dd644db537cfe22e6ec9f1cdc1a2cd2759d724570e989d91e2fab3e1f4b9c13b60fef4bdd0399dfde2067e24323985ecbb3bb0460790f63c02ce4bdda2289c85d8f126af9c34039402ded37dcf9965907ccc4000e424a963a6898742a4bca0cf10a9ab0b34ae67f03c6284d38213c42f445a9f4d0d155330155097db19aee81a913126a9fb5993092cf56946bc521df9dc97407bfc166eceb3517413c575562eed0602cf46d0c5a1f69e1e5a72eb8472b5b8b728376cee058e440e0a2f8a666881b8026d232ad75f55e68f0e3047da7ad69a6c3ffbcd4e62fc07373234e51fccc9067040608fded79f1f618c9371b7a18a30af913eb754e1ad2b6df318087c660d2929c95e4eecfd1c2e6f8fccdd3c9020c4d9cb440f658f9328da488459bdceb5da7eb1ed007b6041206d1b948254dbce6941e5f6e7fa02df1f3b8dddaac7acf8ff228034f8f482eb879d2c3f3a3037381810ca8372d3ffdeda4649ab1faf6f0aba833658bce7cbe87410aa9d3e5d6f1da00e8d1b15684f373be1081cc48b1ff9ddedc624a42cb3c59aedbc8240d1eb283b405f76ab605c8586f1647b3e561d585557fa874230c152bed472c069ba438c4173e3dc23235d2608f10e24488e4550253d2c62c53594946cbb526736a77d32d66f19964db2855a450d3b318fade71d9f3f1140fe7755a04fb9f2ee581521d164dbe226580f1dddc771505c3bcc8ca027d00f2217c6dc8bb1e458ee9a559f77ffca6dc865eb44aeab80b5c0fb2f3228d6d777298652384d04a3b0610b12ae028fb25cfbe942420c097691a7c784811ecc9aa11887b3099858a21dd7887d648324d0dbc0fbf2ad232926b2f080021dab85cd489a759142b9c09817ec683709362f0181cef64edab6ac5615546e79be6e025ddec6b9134a55b560233192b1464bba13e5572ae02f7211688fe52ed6badc4edaec937a3f733b6904c10de0ced2e9a8563c1f20a5d75ae9f1893f6128cafd374cb88244236fcfaaec7321e877d29fef724a31c6054ae53c47d5014f5138ae69806a733956ef8ac39bc99d5f898a8e6e0b2b37bfcd3ab714637f684476f227e43422c2ec09f5abfc11e43bd0ae82355750176c001d451099cc13d354f2e7477a5ced889fc5312b3db9c10dab6605cc8516c33467f95e4f7446e89570c7dbb472d012ecdab0e1517d861a036f791eb1ce6dc9586d796034f65bba2653ee7a9dacfe3f1abde91edb92a8f3902d1022e275510157fff5347b94192c61aa36fcd3b4e0fe923a669ffb13b7fa97b94a3817afe854c6b0bbf26981433dce094fba357e4a48ee5badcbb70f3da7ca25661ec2fd196e5f776a1e4d81a2afe0bd5fc98d7cdebee906ec9e4b6b949ec78cd0467afbb467cdea935a9ba0a2f947ad0861a07db596ee6e79cae5d2e8da15e32a7963eec8f705e395ec768c380707e36cd1efd668827d68811fe99b9723e9229803339bc81045e649200ead0a462cca160eb77283c2eca1a4b1b1dbfc235a7ac235bdb693f33b4b251f863878eb40ab9283950ba657c1bbcda99e09673530ba9299408064f67aebe89ea8d2cdd245dfec194681cd8fe11f4a0522294f4a547be3566a580ac694f5f297ba5c5879fecf5f48f9b9ec7a97aa3832392f447a278458398c9611ecd7e47c629961a56fb21c4a6904a24100dc79ca445b0baf1ab63b7dc2df065a1b44e0f8c0f4edc23e27cc3301949045b3d3e0ba23ded5999f1817b685f89efeada537d1934aa170f8fd414b4e48c8da7b10e134e91ffbd3e49c08e3442bb4631cb1de8debec4e52cdf8fc9e06c84ecb5c614556c1457b4d35f7d6c6567a460287a3234fdc09db24c69501fd953a80445a64695618daeb102c3e949ca5fe29bcc588e1fc99edf9a0fd62bbb3609f4e11072c822aafd31202063aca3610f19036ee178ee684cdf188df89b7acca7d84a327e274e1949acab709a2f452217096a939900e645a9eee3d129f47633ad0c74593666a372dc5641d561564c52bce108d20e280f887b68007e9faef600cac5cb8feb798c5dde02f8ba8df2b3afc27727ba97e55da0f3aa6c5c56e94b60b6fdd3564c92dffd463ade1625b47ff2586e591adb3d91535b7f8020b394f149a4ad98d90d80bd7dcb6f29c08b2378962ee312d913bcce39e7a533991eddbb318c2760d41685faa44fb29e61ce35", 0x1000}], 0x9}}], 0x3, 0xc0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000001, 0x4010, r0, 0x2000)

3.004309465s ago: executing program 2 (id=1839):
r0 = socket(0x10, 0x803, 0x0)
syz_open_procfs(0x0, &(0x7f0000003f40)='mountstats\x00')
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20004, 0x0)
readahead(r1, 0x1, 0x79844e1c)

3.003471375s ago: executing program 2 (id=1840):
ioprio_set$uid(0x3, 0x0, 0x0) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) (async)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x6000000)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r3 = syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'wlan0\x00', 0x400})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000300)={0x34, r3, 'id0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="320001f4", @ANYRES16=r10, @ANYBLOB="030300000000fcdbdf251100000008000300", @ANYRES32=r12, @ANYBLOB="240081000500020001000000000005000200800000000600ab0055c700005100ac00233da23aaabf9152f9f4c9f11b774d079f3ba9d6106cee52e7e565cae04a8eca61951e656d9820e38ce5c01bd9ec7c4429373a938a1c2c7b2bce5ad30455d3f5b5c54f048e7f640e207d350b47000000"], 0x9c}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="320001f4", @ANYRES16=r10, @ANYBLOB="030300000000fcdbdf251100000008000300", @ANYRES32=r12, @ANYBLOB="240081000500020001000000000005000200800000000600ab0055c700005100ac00233da23aaabf9152f9f4c9f11b774d079f3ba9d6106cee52e7e565cae04a8eca61951e656d9820e38ce5c01bd9ec7c4429373a938a1c2c7b2bce5ad30455d3f5b5c54f048e7f640e207d350b47000000"], 0x9c}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x90, r8, 0x1e1d50d5bd46b4be, 0x70bd2b, 0x25dedbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x77a}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x634}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2c3}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x90, r8, 0x1e1d50d5bd46b4be, 0x70bd2b, 0x25dedbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x77a}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x634}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2c3}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.916321546s ago: executing program 3 (id=1841):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28)
sendto$inet6(r2, &(0x7f0000000300)="822d7bf9e161c7", 0x7, 0x8000, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

2.916061996s ago: executing program 3 (id=1842):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2000000040000000) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x9, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c537551d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x7, 0xf}, {0x6, 0x24, 0x1a, 0x431d, 0x4}, [@obex={0x5, 0x24, 0x15, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x6, 0x9, 0xff, 0x1, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xb, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0xa6, 0x24}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x10, 0xe, 0xc}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x8, 0x8, 0x40, 0xd}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8a, 0xdd, 0x3c, 0x4, 0x97}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x6, 0x8, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x3, 0x11}]}, 0x3, [{0x5d, &(0x7f00000001c0)=@string={0x5d, 0x3, "4514cf3a43f2de1ca578bc2f10b06dad1b45d99f9e6ba195a7ebab67a9ba637f887d21efd11a9fe6dfebc71bed97ead2387feedffd0d22ba9b24746c26bc2193122e758e63a83866dc8de22c76da3485550f9f8d7ba90f108476f3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}]})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0xc, 0xb7, {0xb7, 0x5, "1fa01035d8c3cb5a3468be459fb1d1790ea22b7b930491e96b59569783b1fe2015fea68199efda6fe081e41ee4a1c3b5a052adf7bb2b715287acbddbe6304aca84a807ffc074b1fc559e79a114284af4d69e3cc96f6f6d23ca24346238bf840d685a397a3ae3785146c86f7382a9805f0b6f342e39816fe44ae11847678fd26f3e3e67cf5bc2b438bda1fc0b2ce4b909ac3aaed931b36f024cf85c3e5058d379f252fcae9820dece377fde21556463a2f7b20d4eef"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0x14, 0x16, "86801f6628c81d59961b226fbed98dccc63acd19d8f3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xba, 0x0, 0x1, 0xfff0, 0x8001, 0x10, 0x9, 0x0, 0x0, 0xb08e, 0x5f, 0x8e}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xf}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xc}, &(0x7f0000000640)={0x20, 0x89, 0x2}})

2.745834979s ago: executing program 4 (id=1843):
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x10001) (async)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x10001)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000e, 0x2010, r1, 0x22c45000)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240))
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000280)={@loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}}, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
fchmod(r0, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000016c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000000380)={0x12f8, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x127c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x121c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa3, 0x6, "eb5366d16c1fdb5ff658699721a57a701b671a241ffa19a6cdc369905d9b17d4f7e84232f57de76577b8a6ea2f059319f40e0074bdb94468e7d4cb4a13e9db0e7f520e4a76ecb29f9f57401836b34f316d552aa07c4fee81fe0f011275fbfd1250e3175ca2c800e2bf7f4435985876f6d22806d582013def6867c99a1a9cfa3f7e6be46fbefd1f8189734e1879c9ecbbdf295158154fbd09aee20c05861590"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x1004, 0xb, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x67, 0x6, "755744913667d6712d34c8718caa098c05bc2b5b2d1b0947c9e6ff94a617e1a7db92d98e87b0b827e33c30092d3eee71b2b56be6def15d739480e4a2c7045df66aa189d4b975dbca775d4a7381f5ceb94d05d7dcfd1022dc1403c71765f81b07956c2d"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xfbff}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd6, 0x6, "7bdf2a9f017c908af4e5f77b3fb7dc3b9d38aa183a54572769a0bca59893d7c4a88e8cbeb39036e43ce509644d04bd570678b1a84fde60abaaedb6628f54c853f392ab4f92d2f666eb85c87e5f36bd5d9cf31ef43ec3127c47d1cb598a06b8a43dd30bc833f9b0f53d20c676f537e9829031bf20a92ddc33f3e05a8c9e0915b3bc569e2f9f9ee0c7bebd45b9a08494510f6999b07213870c180cceceee63dd832a38eb1a1a609fbe1049d8e1f9ee40091d056b0f26f1ef11f1b1a20874813fb17aac2ae76b61efa2d5da2b7203577d3ab574"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x80}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}]}]}, 0x12f8}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r1) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r1)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40044)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r1)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44010)
ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000001980)=0x3)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000019c0), 0x181000, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000001a00)={0x1, 0xf})
fcntl$getownex(r1, 0x10, &(0x7f0000001a40)) (async)
fcntl$getownex(r1, 0x10, &(0x7f0000001a40)={0x0, <r7=>0x0})
r8 = syz_open_procfs(r7, &(0x7f0000001a80)='net/llc/core\x00')
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000001ac0)={0x7, 0xfffffc00})
syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r8) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r8)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x10000)
accept4$packet(r1, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c80)=0x14, 0x80800)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r0, 0x110c000) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r0, 0x110c000)
socket$inet(0x2, 0x6, 0x9)
connect$unix(r1, &(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async)
connect$unix(r1, &(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42}, 0x8841) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42}, 0x8841)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001e80)={<r10=>0x0, "cea7ef1205653c519a2703694f84bc34"})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000003280)={0xa, 0x4, {0xd1c, @struct={0x7, 0xf}, r10, 0x4, 0x7f91, 0x9, 0x9, 0x0, 0x94, @usage=0xd898, 0xc5, 0x3, [0x0, 0x3ff, 0x10, 0x0, 0x7, 0x200]}, {0x3, @struct={0x7, 0x5}, 0x0, 0xac8, 0x3, 0xa859, 0xd34d, 0x8, 0x41, @struct={0x47c, 0x2}, 0x9, 0xd54, [0x1, 0x1, 0x600000000000, 0xfffffffffffffffd, 0x2, 0xf9]}, {0x3ff, @struct={0x5, 0x6}, 0x0, 0xe, 0x8, 0x7, 0x7, 0x1, 0x4, @struct={0x2, 0x1}, 0x1224, 0xfffffff9, [0x7, 0x9, 0x3, 0x8, 0xfffffffffffffff7, 0x4]}, {0xbcf, 0xb081, 0x9}})

2.685097449s ago: executing program 4 (id=1844):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0xe, &(0x7f0000000000)={0xd4, 0x100000000}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r5, 0x409, 0x12)
mmap(&(0x7f000000e000/0x3000)=nil, 0x3000, 0xbe89c803569edeac, 0x11, r5, 0x98c5b000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
read$FUSE(r4, &(0x7f0000002c80)={0x2020}, 0xfffffdb2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fchdir(r3)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
sendfile(r1, r1, 0x0, 0x7ffff000)

2.316629405s ago: executing program 5 (id=1845):
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x3}, @increfs={0x40046304, 0x3}, @acquire], 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x141080, 0x50, 0x18}, 0x18) (rerun: 32)
getdents(r2, &(0x7f0000000380)=""/180, 0xb4) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000006c0)={0x14, 0x0, 0x0}, &(0x7f0000000a40)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="20177c000000a3bf443d9e494af2d98e523070df8175848cfa83be518f3189b62328a6d9354ead37b215fcfaf2a77de5822f348ebc259e7fa01ad9035136f2527e863b137bea18f398c8f02cd111c78517842d4f4cf028f18ade282bd36c944bc874d95f287a6576d30ca32a5a737fcd66b5587a925ace8f7c9caf0b4ff3c63edb543996bbf9eb4aef0b13097daca23e138a3fe51d56278caa13d501bcfaf0e44005fd81080118d9d37a8ae4f5dbf09a"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xef}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r5, 0x0, 0x0) (rerun: 64)
write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0xffffffff80000000, 0x0, 0x7, 0xc797, 0x9, 0x0, 0x0, 0x175, 0xffff0001}}, 0x50)

2.270454326s ago: executing program 5 (id=1846):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3667726f75705f020b44a7170008d4d469643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0xffffffffffffffda, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, r2, 0x2000, 0x10000000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x81)
getdents(r3, 0x0, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r5 = timerfd_create(0x8, 0x80000)
ioctl$AUTOFS_IOC_FAIL(r4, 0x40087543, 0x200000000000)
setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80))
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r5])

2.117043018s ago: executing program 5 (id=1847):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9c95d92fb386758", 0x5c}], 0x1}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x4004, 0x4)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000009a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="d463", 0x2}], 0x1}}], 0x1, 0x4004044)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000080), 0x5e2, 0x2001, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb35fbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa", 0x6f, 0x40080c0, 0x0, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902820002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000c241b070005008e0118000f0524"], 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x7, 0x2, 0x10}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x0, 0x22, 0x7, {0x7, 0x21, "c5be9a0122"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0x14, 0x75, "976783a111c28823b588444a9b3986ac2a79ba0b92988341c94e0b652261b0e892fc32c8728e913de82eb6102d3b3eae4b3d38f75b9c7b26caa9a7f363bc60d5172b5a8bf2679eba050a183156d02e968f2bf8893ad2cf3ffee301b726d4538af7d1548a0481bdf338a103fde994094e7844f4a4fc"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x0, 0x42, 0xb, 0x8, 0x887, 0x9, 0x2, 0xfffffff9, 0x6794, 0x40, 0x6, 0x7}}, &(0x7f0000000540)={0x20, 0x85, 0x4}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000600)={0x20, 0x89, 0x2}})

1.866476362s ago: executing program 4 (id=1848):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
mkdirat(r0, &(0x7f0000000140)='.\x00', 0x8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$invalidate(0x15, r6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x713900, 0x0)
getpid()
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x490, 0x0, 0x100000005}]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000500)={{r0}, 0x0, 0x18, @unused=[0x80000000, 0xc5, 0x10], @subvolid=0x8001})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)

0s ago: executing program 2 (id=1849):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffb)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r0, 0xd0eb4000)

kernel console output (not intermixed with test programs):

 T1966]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   82.922511][ T1966]  ? do_vfs_ioctl+0xeda/0x1e30
[   82.922539][ T1966]  ? arch_stack_walk+0x10b/0x170
[   82.922567][ T1966]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   82.922598][ T1966]  ? _parse_integer+0x2e/0x40
[   82.922622][ T1966]  ? ioctl_has_perm+0x384/0x4d0
[   82.922652][ T1966]  ? has_cap_mac_admin+0xd0/0xd0
[   82.922684][ T1966]  ? proc_fail_nth_write+0x17e/0x210
[   82.922704][ T1966]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   82.922724][ T1966]  ? selinux_file_ioctl+0x6e0/0x1360
[   82.922753][ T1966]  ? vfs_write+0x8ba/0xe80
[   82.922776][ T1966]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   82.922808][ T1966]  ? __cfi_vfs_write+0x10/0x10
[   82.922840][ T1966]  ? __kasan_check_write+0x18/0x20
[   82.922863][ T1966]  ? mutex_unlock+0x8b/0x240
[   82.922883][ T1966]  ? __cfi_mutex_unlock+0x10/0x10
[   82.922902][ T1966]  ? __fget_files+0x2c5/0x340
[   82.922931][ T1966]  ? __fget_files+0x2c5/0x340
[   82.922958][ T1966]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   82.922990][ T1966]  ? __se_sys_ioctl+0x114/0x1b0
[   82.923019][ T1966]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   82.923050][ T1966]  __se_sys_ioctl+0x132/0x1b0
[   82.923079][ T1966]  __x64_sys_ioctl+0x7f/0xa0
[   82.923107][ T1966]  x64_sys_call+0x1878/0x2ee0
[   82.923134][ T1966]  do_syscall_64+0x58/0xf0
[   82.923162][ T1966]  ? clear_bhb_loop+0x35/0x90
[   82.923193][ T1966]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   82.923223][ T1966] RIP: 0033:0x7fb24298e929
[   82.923251][ T1966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.923270][ T1966] RSP: 002b:00007fb24381f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   82.923297][ T1966] RAX: ffffffffffffffda RBX: 00007fb242bb5fa0 RCX: 00007fb24298e929
[   82.923314][ T1966] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003
[   82.923328][ T1966] RBP: 00007fb24381f090 R08: 0000000000000000 R09: 0000000000000000
[   82.923342][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.923354][ T1966] R13: 0000000000000000 R14: 00007fb242bb5fa0 R15: 00007ffc6bb47478
[   82.923370][ T1966]  </TASK>
[   83.747561][ T2008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.757926][ T2008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   83.765751][ T2008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336
[   83.891576][ T2013] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.941170][   T36] kauditd_printk_skb: 46 callbacks suppressed
[   83.941190][   T36] audit: type=1400 audit(2000000010.930:433): avc:  denied  { map } for  pid=2025 comm="syz.4.602" path="socket:[12859]" dev="sockfs" ino=12859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   84.043353][ T2039] overlayfs: failed to clone lowerpath
[   84.097431][   T36] audit: type=1400 audit(2000000011.090:434): avc:  denied  { write } for  pid=2046 comm="syz.4.610" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   84.638018][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'.
[   84.647272][ T2054] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.647728][ T2054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   84.654278][ T2054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:341
[   84.915415][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[   84.966955][   T36] audit: type=1326 audit(2000000011.960:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2059 comm="syz.1.614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c2398e929 code=0x0
[   85.047306][ T2068] overlayfs: failed to clone upperpath
[   85.155494][ T2080] ip6_vti0: entered promiscuous mode
[   85.163000][ T2080] 9pnet_fd: Insufficient options for proto=fd
[   85.172412][ T2086] can: request_module (can-proto-6) failed.
[   85.186240][ T2090] overlayfs: failed to clone upperpath
[   85.223209][ T2097] netlink: 'syz.3.626': attribute type 32 has an invalid length.
[   85.300353][ T2118] netlink: 'syz.1.634': attribute type 4 has an invalid length.
[   85.308202][ T2118] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.634'.
[   85.339090][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.391899][ T2126] rust_binder: Write failure EFAULT in pid:355
[   85.831188][ T2130] incfs: Options parsing error. -22
[   85.842778][ T2130] incfs: mount failed -22
[   86.185083][ T2137] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   86.186076][ T2137] rust_binder: Write failure EINVAL in pid:358
[   87.256989][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   87.408501][ T2163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:362
[   88.185429][ T2191] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.359362][ T2207] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.370133][ T2209] fuse: Unknown parameter '���������'
[   88.419507][   T36] audit: type=1400 audit(2000000015.410:436): avc:  denied  { checkpoint_restore } for  pid=2206 comm="syz.2.667" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   88.427069][ T2217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382
[   88.446411][   T36] audit: type=1400 audit(2000000015.440:437): avc:  denied  { mount } for  pid=2218 comm="syz.3.672" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   88.446894][ T2219] overlayfs: failed to clone upperpath
[   89.207357][   T36] audit: type=1400 audit(2000000016.200:438): avc:  denied  { audit_write } for  pid=2260 comm="syz.2.687" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   89.208296][ T2261] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.237533][ T2261] rust_binder: Write failure EINVAL in pid:385
[   89.321493][ T2264] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.328427][ T2265] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.335085][ T2266] rust_binder: Write failure EINVAL in pid:387
[   89.351743][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.357990][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.364761][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.371471][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.377948][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.384526][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.390992][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.397449][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.403981][ T2268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.406523][   T36] audit: type=1400 audit(2000000016.400:439): avc:  denied  { write } for  pid=2267 comm="syz.2.689" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   89.440339][   T36] audit: type=1400 audit(2000000016.420:440): avc:  denied  { ioctl } for  pid=2272 comm="syz.2.690" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   89.481497][ T2275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.563776][ T2281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[   89.611052][   T36] audit: type=1400 audit(2000000016.610:441): avc:  denied  { watch watch_reads } for  pid=2288 comm="syz.3.696" path="/238/file0" dev="tmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   89.806608][   T36] audit: type=1400 audit(2000000016.800:442): avc:  denied  { create } for  pid=2300 comm="syz.1.699" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   89.930870][  T369] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   90.082097][  T369] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   90.092082][  T369] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   90.105756][  T369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.114858][  T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   90.122881][  T369] usb 3-1: SerialNumber: syz
[   90.128616][ T2285] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   90.136845][  T369] cdc_ether 3-1:1.0: skipping garbage
[   90.142382][  T369] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   90.482462][ T2338] overlayfs: failed to clone upperpath
[   90.499563][ T2340] fuse: Unknown parameter '000000000000000000000100x0000000000000008'
[   90.848753][ T2359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2359 comm=syz.4.721
[   90.878367][   T36] audit: type=1400 audit(2000000017.871:443): avc:  denied  { setattr } for  pid=2363 comm="syz.4.725" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[   90.914638][ T2371] overlayfs: missing 'lowerdir'
[   91.393626][ T2379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2379 comm=syz.4.728
[   91.406510][ T2379] netlink: 'syz.4.728': attribute type 5 has an invalid length.
[   91.414200][ T2379] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.728'.
[   91.426294][   T36] audit: type=1400 audit(2000000018.421:444): avc:  denied  { accept } for  pid=2378 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.360204][ T2404] Invalid ELF header type: 2 != 1
[   92.439494][ T2393] overlayfs: statfs failed on './file0'
[   92.492920][   T36] audit: type=1400 audit(2000000019.491:445): avc:  denied  { bind } for  pid=2417 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.824665][  T369] usb 3-1: USB disconnect, device number 19
[   92.842327][ T2425] loop2: detected capacity change from 0 to 7
[   92.848713][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.857900][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.865967][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.875162][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.883056][ T2425]  loop2: unable to read partition table
[   92.888867][ T2425] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[   92.899347][   T36] audit: type=1400 audit(2000000019.891:446): avc:  denied  { map } for  pid=2424 comm="syz.2.746" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   92.900153][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.931315][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.939419][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.948605][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.956720][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.965894][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.975342][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.984564][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   92.992932][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.002133][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   93.087170][   T36] audit: type=1326 audit(2000000020.081:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.3.753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x0
[   93.203695][ T2453] binder: Unknown parameter 'r��'
[   93.262041][ T2459] binder: Unknown parameter 'ynI@'
[   93.282974][ T2462] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.422910][ T2467] binder: Unknown parameter 'binder'
[   93.965064][ T2490] overlayfs: failed to resolve './file0': -2
[   94.304883][ T2516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'.
[   94.471149][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:453
[   94.553033][ T2554] rust_binder: Write failure EINVAL in pid:462
[   94.810546][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   94.829835][ T2592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'.
[   94.849908][ T2595] netlink: 104 bytes leftover after parsing attributes in process `syz.1.806'.
[   94.954750][    T9] usb 3-1: device descriptor read/64, error -71
[   95.200601][    T9] usb 3-1: device descriptor read/64, error -71
[   95.270752][ T2607] netlink: 'syz.3.810': attribute type 11 has an invalid length.
[   95.440557][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   95.570548][    T9] usb 3-1: device descriptor read/64, error -71
[   95.601698][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   95.601717][   T36] audit: type=1400 audit(2000000022.601:452): avc:  denied  { create } for  pid=2629 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   95.634848][   T36] audit: type=1400 audit(2000000022.631:453): avc:  denied  { mounton } for  pid=2624 comm="syz.4.818" path="/proc/193/task" dev="proc" ino=15118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   95.810541][    T9] usb 3-1: device descriptor read/64, error -71
[   95.920634][    T9] usb usb3-port1: attempt power cycle
[   95.942741][ T2672] kvm: kvm [2670]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x4000002a) = 0x0
[   95.952424][ T2672] binder: Unknown parameter '01777777777777777777777'
[   96.035685][   T36] audit: type=1400 audit(2000000023.031:454): avc:  denied  { append } for  pid=2691 comm="syz.4.842" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   96.084595][   T36] audit: type=1400 audit(2000000023.081:455): avc:  denied  { read write } for  pid=2696 comm="syz.4.844" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   96.108026][   T36] audit: type=1400 audit(2000000023.081:456): avc:  denied  { open } for  pid=2696 comm="syz.4.844" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   96.144420][   T36] audit: type=1400 audit(2000000023.081:457): avc:  denied  { create } for  pid=2696 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   96.184589][   T36] audit: type=1400 audit(2000000023.181:458): avc:  denied  { create } for  pid=2705 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   96.280535][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   96.285566][ T2718] binder: Unknown parameter 'defcontext01777777777777777777777'
[   96.288514][   T36] audit: type=1400 audit(2000000023.281:459): avc:  denied  { write } for  pid=2717 comm="syz.4.851" name="psched" dev="proc" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   96.326093][   T36] audit: type=1400 audit(2000000023.281:460): avc:  denied  { write } for  pid=2717 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.352927][    T9] usb 3-1: device descriptor read/8, error -71
[   96.481601][    T9] usb 3-1: device descriptor read/8, error -71
[   96.720470][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   96.741534][    T9] usb 3-1: device descriptor read/8, error -71
[   96.826684][   T36] audit: type=1400 audit(2000000023.821:461): avc:  denied  { mount } for  pid=2748 comm="syz.3.864" name="/" dev="configfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   96.871505][    T9] usb 3-1: device descriptor read/8, error -71
[   96.895965][ T2758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.868'.
[   96.931489][ T2762] netlink: 1 bytes leftover after parsing attributes in process `syz.3.870'.
[   96.980626][    T9] usb usb3-port1: unable to enumerate USB device
[   97.268622][ T2771] binder: Unknown parameter 'defcontext01777777777777777777777'
[   97.483694][ T2790] tipc: Started in network mode
[   97.489468][ T2790] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   97.498625][ T2790] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   97.549179][ T2803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.665383][ T2817] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   97.665412][ T2817] rust_binder: Error while translating object.
[   97.674232][ T2817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   97.680697][ T2817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471
[   97.718133][ T2827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   97.724873][ T2831] fuse: Unknown parameter 'f�
[   97.724873][ T2831] ��z��'
[   97.786529][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   98.355052][ T2854] overlayfs: failed to clone upperpath
[   98.478854][ T2864] @: renamed from ip_vti0 (while UP)
[   98.508331][ T2874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'.
[   99.133608][ T2886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'.
[   99.810271][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   99.810306][  T542] Bluetooth: hci0: command 0x1003 tx timeout
[   99.887831][ T2911] sock: sock_set_timeout: `syz.3.926' (pid 2911) tries to set negative timeout
[  100.082494][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492
[  100.083448][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.092762][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.099255][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.105785][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.112304][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.118823][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.125331][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.132590][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.139189][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.146525][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.152551][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.510259][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  100.680209][    T9] usb 3-1: Using ep0 maxpacket: 8
[  100.692671][    T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  100.701337][    T9] usb 3-1: config 179 has no interface number 0
[  100.707639][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  100.719457][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  100.737091][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  100.751667][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.762035][    T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  100.775961][    T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  100.785409][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.794867][ T2941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  100.802847][    T9] xpad 3-1:179.65: probe with driver xpad failed with error -5
[  100.827579][ T2980] overlayfs: failed to resolve './file0': -2
[  100.915829][ T3023] xfrm0: mtu less than device minimum
[  101.012995][   T36] kauditd_printk_skb: 17 callbacks suppressed
[  101.013013][   T36] audit: type=1400 audit(2000000028.011:479): avc:  denied  { listen } for  pid=2940 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  101.014241][    T9] usb 3-1: USB disconnect, device number 24
[  101.372775][ T3035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3035 comm=syz.1.955
[  101.822078][ T3046] netlink: 112 bytes leftover after parsing attributes in process `syz.3.959'.
[  101.860212][   T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  102.011780][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  102.019857][   T31] usb 3-1: not running at top speed; connect to a high speed hub
[  102.028969][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.039108][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.049409][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  102.058602][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.066647][   T31] usb 3-1: Product: syz
[  102.070926][   T31] usb 3-1: Manufacturer: syz
[  102.075538][   T31] usb 3-1: SerialNumber: syz
[  102.283201][ T3016] Bluetooth: hci0: Frame reassembly failed (-84)
[  102.291622][   T31] usb 3-1: unknown interface protocol 0xfc, assuming v1
[  102.298947][   T31] usb 3-1: 0:2 : does not exist
[  102.305688][   T31] usb 3-1: USB disconnect, device number 25
[  102.315946][ T1105] udevd[1105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  102.446010][ T3059] overlay: ./bus is not a directory
[  103.027274][ T3066] fuse: Bad value for 'fd'
[  103.619773][ T3074] overlayfs: failed to clone upperpath
[  103.654630][ T3083] fuseblk: Bad value for 'fd'
[  104.027640][ T3100] FAULT_INJECTION: forcing a failure.
[  104.027640][ T3100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.040877][ T3100] CPU: 0 UID: 0 PID: 3100 Comm: syz.4.979 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  104.040913][ T3100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  104.040927][ T3100] Call Trace:
[  104.040934][ T3100]  <TASK>
[  104.040943][ T3100]  __dump_stack+0x21/0x30
[  104.040970][ T3100]  dump_stack_lvl+0x10c/0x190
[  104.040989][ T3100]  ? __cfi_dump_stack_lvl+0x10/0x10
[  104.041009][ T3100]  ? __kasan_check_read+0x15/0x20
[  104.041027][ T3100]  dump_stack+0x19/0x20
[  104.041043][ T3100]  should_fail_ex+0x3d9/0x530
[  104.041060][ T3100]  should_fail+0xf/0x20
[  104.041074][ T3100]  should_fail_usercopy+0x1e/0x30
[  104.041092][ T3100]  __kvm_read_guest_page+0x177/0x210
[  104.041115][ T3100]  kvm_vcpu_read_guest_page+0x31a/0x400
[  104.041139][ T3100]  kvm_fetch_guest_virt+0x146/0x190
[  104.041159][ T3100]  ? __cfi_kvm_fetch_guest_virt+0x10/0x10
[  104.041178][ T3100]  __do_insn_fetch_bytes+0x321/0x730
[  104.041200][ T3100]  ? x86_decode_insn+0x4fb0/0x4fb0
[  104.041221][ T3100]  ? kvm_io_bus_read+0x29f/0x5f0
[  104.041237][ T3100]  x86_decode_insn+0x33b/0x4fb0
[  104.041259][ T3100]  ? vcpu_mmio_read+0x2dc/0x300
[  104.041284][ T3100]  ? __cfi_x86_decode_insn+0x10/0x10
[  104.041304][ T3100]  ? __kasan_check_write+0x18/0x20
[  104.041320][ T3100]  ? vmx_read_guest_seg_ar+0x1c8/0x350
[  104.041336][ T3100]  ? __asan_memset+0x39/0x50
[  104.041351][ T3100]  ? init_decode_cache+0x7c/0x90
[  104.041373][ T3100]  ? init_emulate_ctxt+0x410/0x540
[  104.041396][ T3100]  ? kvm_inject_realmode_interrupt+0x2e0/0x2e0
[  104.041419][ T3100]  ? kernel_text_address+0xa9/0xe0
[  104.041435][ T3100]  ? unwind_get_return_address+0x51/0x90
[  104.041450][ T3100]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  104.041469][ T3100]  x86_decode_emulated_instruction+0x66/0x190
[  104.041484][ T3100]  x86_emulate_instruction+0x2d3/0x1870
[  104.041501][ T3100]  handle_ud+0x19e/0x320
[  104.041522][ T3100]  ? __cfi_handle_ud+0x10/0x10
[  104.041544][ T3100]  ? __cfi_rcu_note_context_switch+0x10/0x10
[  104.041568][ T3100]  ? kernel_text_address+0xa9/0xe0
[  104.041583][ T3100]  ? clear_bhb_loop+0x35/0x90
[  104.041606][ T3100]  ? clear_bhb_loop+0x35/0x90
[  104.041628][ T3100]  ? clear_bhb_loop+0x35/0x90
[  104.041650][ T3100]  ? clear_bhb_loop+0x35/0x90
[  104.041673][ T3100]  ? clear_bhb_loop+0x12/0x90
[  104.041696][ T3100]  handle_exception_nmi+0x194/0xeb0
[  104.041719][ T3100]  ? __cfi_handle_exception_nmi+0x10/0x10
[  104.041748][ T3100]  vmx_handle_exit+0x12c2/0x1b40
[  104.041767][ T3100]  ? vmx_read_guest_seg_ar+0x179/0x350
[  104.041782][ T3100]  ? __cfi_vmx_vcpu_run+0x10/0x10
[  104.041801][ T3100]  ? vmx_get_segment+0x3e4/0x8e0
[  104.041815][ T3100]  ? vmx_handle_exit_irqoff+0x401/0x7a0
[  104.041834][ T3100]  vcpu_run+0x481a/0x7260
[  104.041861][ T3100]  ? signal_pending+0xc0/0xc0
[  104.041878][ T3100]  ? complete_emulated_mmio+0x4fb/0x790
[  104.041894][ T3100]  kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0
[  104.041913][ T3100]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  104.041929][ T3100]  ? kstrtoull+0x13b/0x1e0
[  104.041946][ T3100]  ? kstrtouint+0x78/0xf0
[  104.041962][ T3100]  ? ioctl_has_perm+0x1aa/0x4d0
[  104.041984][ T3100]  ? __asan_memcpy+0x5a/0x80
[  104.042003][ T3100]  ? ioctl_has_perm+0x3e0/0x4d0
[  104.042025][ T3100]  ? has_cap_mac_admin+0xd0/0xd0
[  104.042046][ T3100]  ? __kasan_check_write+0x18/0x20
[  104.042062][ T3100]  ? mutex_lock_killable+0x92/0x1c0
[  104.042077][ T3100]  ? __cfi_mutex_lock_killable+0x10/0x10
[  104.042092][ T3100]  ? proc_fail_nth_write+0x17e/0x210
[  104.042106][ T3100]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  104.042123][ T3100]  kvm_vcpu_ioctl+0x96f/0xee0
[  104.042144][ T3100]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  104.042164][ T3100]  ? __cfi_vfs_write+0x10/0x10
[  104.042183][ T3100]  ? __kasan_check_write+0x18/0x20
[  104.042199][ T3100]  ? mutex_unlock+0x8b/0x240
[  104.042213][ T3100]  ? __cfi_mutex_unlock+0x10/0x10
[  104.042226][ T3100]  ? __fget_files+0x2c5/0x340
[  104.042248][ T3100]  ? __fget_files+0x2c5/0x340
[  104.042268][ T3100]  ? bpf_lsm_file_ioctl+0xd/0x20
[  104.042284][ T3100]  ? security_file_ioctl+0x34/0xd0
[  104.042305][ T3100]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  104.042326][ T3100]  __se_sys_ioctl+0x132/0x1b0
[  104.042347][ T3100]  __x64_sys_ioctl+0x7f/0xa0
[  104.042367][ T3100]  x64_sys_call+0x1878/0x2ee0
[  104.042387][ T3100]  do_syscall_64+0x58/0xf0
[  104.042407][ T3100]  ? clear_bhb_loop+0x35/0x90
[  104.042429][ T3100]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  104.042451][ T3100] RIP: 0033:0x7f6748b8e929
[  104.042464][ T3100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.042478][ T3100] RSP: 002b:00007f6749aa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.042495][ T3100] RAX: ffffffffffffffda RBX: 00007f6748db5fa0 RCX: 00007f6748b8e929
[  104.042507][ T3100] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  104.042517][ T3100] RBP: 00007f6749aa3090 R08: 0000000000000000 R09: 0000000000000000
[  104.042527][ T3100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.042536][ T3100] R13: 0000000000000000 R14: 00007f6748db5fa0 R15: 00007ffe174f1798
[  104.042550][ T3100]  </TASK>
[  104.340045][  T542] Bluetooth: hci0: command 0x1003 tx timeout
[  104.344250][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  105.458725][ T3125] rust_binder: Error while translating object.
[  105.458758][ T3125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  105.466155][ T3125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:516
[  105.521429][ T3135] FAULT_INJECTION: forcing a failure.
[  105.521429][ T3135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.550648][ T3135] CPU: 1 UID: 0 PID: 3135 Comm: syz.2.991 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  105.550686][ T3135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  105.550699][ T3135] Call Trace:
[  105.550707][ T3135]  <TASK>
[  105.550716][ T3135]  __dump_stack+0x21/0x30
[  105.550744][ T3135]  dump_stack_lvl+0x10c/0x190
[  105.550769][ T3135]  ? __cfi_dump_stack_lvl+0x10/0x10
[  105.550795][ T3135]  dump_stack+0x19/0x20
[  105.550818][ T3135]  should_fail_ex+0x3d9/0x530
[  105.550842][ T3135]  should_fail+0xf/0x20
[  105.550863][ T3135]  should_fail_usercopy+0x1e/0x30
[  105.550894][ T3135]  _copy_to_user+0x24/0xa0
[  105.550921][ T3135]  simple_read_from_buffer+0xed/0x160
[  105.550956][ T3135]  proc_fail_nth_read+0x19e/0x210
[  105.550982][ T3135]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  105.551002][ T3135]  ? bpf_lsm_file_permission+0xd/0x20
[  105.551025][ T3135]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  105.551044][ T3135]  vfs_read+0x278/0xb60
[  105.551068][ T3135]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  105.551096][ T3135]  ? __cfi_vfs_read+0x10/0x10
[  105.551119][ T3135]  ? __kasan_check_write+0x18/0x20
[  105.551142][ T3135]  ? mutex_lock+0x92/0x1c0
[  105.551162][ T3135]  ? __cfi_mutex_lock+0x10/0x10
[  105.551181][ T3135]  ? __fget_files+0x2c5/0x340
[  105.551211][ T3135]  ksys_read+0x141/0x250
[  105.551234][ T3135]  ? __cfi_ksys_read+0x10/0x10
[  105.551259][ T3135]  ? __kasan_check_read+0x15/0x20
[  105.551282][ T3135]  __x64_sys_read+0x7f/0x90
[  105.551306][ T3135]  x64_sys_call+0x2638/0x2ee0
[  105.551332][ T3135]  do_syscall_64+0x58/0xf0
[  105.551358][ T3135]  ? clear_bhb_loop+0x35/0x90
[  105.551389][ T3135]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  105.551417][ T3135] RIP: 0033:0x7fb24298d33c
[  105.551435][ T3135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  105.551454][ T3135] RSP: 002b:00007fb24381f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  105.551477][ T3135] RAX: ffffffffffffffda RBX: 00007fb242bb5fa0 RCX: 00007fb24298d33c
[  105.551493][ T3135] RDX: 000000000000000f RSI: 00007fb24381f0a0 RDI: 0000000000000007
[  105.551507][ T3135] RBP: 00007fb24381f090 R08: 0000000000000000 R09: 0000000000000000
[  105.551522][ T3135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.551534][ T3135] R13: 0000000000000000 R14: 00007fb242bb5fa0 R15: 00007ffc6bb47478
[  105.551551][ T3135]  </TASK>
[  105.952587][   T36] audit: type=1400 audit(2000000032.951:480): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  105.998953][ T3181] binder: Bad value for 'stats'
[  106.031030][ T3185] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.031546][ T3184] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  106.031821][   T36] audit: type=1400 audit(2000000033.031:481): avc:  denied  { setattr } for  pid=3183 comm="syz.2.1005" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  106.038021][ T3184] rust_binder: Write failure EINVAL in pid:534
[  106.038137][ T3184] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  106.091841][ T3184] rust_binder: Write failure EINVAL in pid:534
[  106.183081][ T3188] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  106.183112][ T3188] rust_binder: Error while translating object.
[  106.206392][ T3188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.217844][ T3188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:537
[  106.624120][ T3209] can: request_module (can-proto-0) failed.
[  106.668078][ T3216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=3216 comm=syz.1.1016
[  106.839874][  T305] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  106.990058][  T305] usb 3-1: Using ep0 maxpacket: 8
[  106.996312][  T305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.006710][  T305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.021443][  T305] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.030717][  T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.038747][  T305] usb 3-1: Product: 羪葦⚨㿟ể㒅ൃ仠筱⿀㑯鞞晤殞䙇甹蟂ں途⡦峼Ⴠ饳ꞙ૯꠷䍈蔦꺼㐎䪛率㟡ꂘ挸浚먕甩벏∋ທᮘ焇ꮴ豕洎쮙풢朳冏숈峟᪈跱砶暢⚬赹俌㣾䊛甹杗튚殷औ載궢ဵ⳾ẵ⟢ꗞ툑᮰貝ޕ뾟穝ࢋ㐸㥒፶
[  107.068574][  T305] usb 3-1: Manufacturer: ䷇꺕﫾஄霰➪砯㚅힛찗Ỉᛒ蠹캻攮屫啽싽릙駦ሦᜣ㳚੫ु봡㣬鿥䄫먻郦䎔劜㦧虃⿶貒넺ྊ⤅盉ろ頒ˢ腙஋쉦୲侥韊鵈ຯ൒ꑨ퉻钏槖ᛝ稺䒥㿍몙붽鈋쭥眤菼껂漺봔ᄡ儐맽씜䤊㑨괫텽ᾈ瞧ꭾ䌠ሌ얦轸⁳쪛ᴇ䳯躡遤㻞짛썴ꪗ﬽ꢜ䵘猾벞۸﹪➲构᫦趧츸﵇怙熒Ї伺绱퀻♱ᠡ
[  107.072147][ T3227] xfrm0: mtu less than device minimum
[  107.105271][   T36] audit: type=1400 audit(2000000034.061:482): avc:  denied  { read } for  pid=3225 comm="syz.4.1019" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  107.105354][  T305] usb 3-1: SerialNumber: ࠓ
[  107.107009][  T305] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  107.148164][  T305] usb 3-1: no configuration chosen from 1 choice
[  107.350844][   T36] audit: type=1400 audit(2000000034.351:483): avc:  denied  { getopt } for  pid=3234 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  107.745784][ T3264] kvm: MONITOR instruction emulated as NOP!
[  107.752594][ T3264] rust_binder: Error while translating object.
[  107.752615][ T3264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  107.758945][ T3264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376
[  107.924843][ T3272] overlayfs: failed to clone upperpath
[  107.966199][ T3277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  107.966227][ T3277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:382
[  107.976134][   T36] audit: type=1400 audit(2000000034.971:484): avc:  denied  { mounton } for  pid=3269 comm="syz.4.1034" path="/134/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  109.006975][ T3306] binder: Unknown parameter 'fssconfined_u'
[  109.025390][ T3308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'.
[  109.034733][ T3308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3308 comm=syz.4.1047
[  109.048296][ T3308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411
[  109.048735][ T3308] rust_binder: Error while translating object.
[  109.058047][ T3308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  109.064272][ T3308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411
[  109.558551][    T9] usb 3-1: USB disconnect, device number 26
[  109.675467][ T3318] random: crng reseeded on system resumption
[  109.702259][ T3318] Restarting kernel threads ... done.
[  109.708484][ T3318] rust_binder: Error while translating object.
[  109.708518][ T3318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  109.714758][ T3318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:548
[  109.724476][ T3318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:548
[  109.922254][   T36] audit: type=1400 audit(2000000036.922:485): avc:  denied  { read } for  pid=3338 comm="syz.3.1057" path="socket:[18223]" dev="sockfs" ino=18223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.939917][ T3341] netlink: 'syz.2.1058': attribute type 8 has an invalid length.
[  110.028075][   T36] audit: type=1400 audit(2000000037.022:486): avc:  denied  { map } for  pid=3358 comm="syz.3.1063" path="socket:[18302]" dev="sockfs" ino=18302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.173472][ T3375] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.266098][ T3381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3381 comm=syz.2.1069
[  110.342012][ T3383] rust_binder: Write failure EINVAL in pid:570
[  110.342067][ T3383] rust_binder: Write failure EINVAL in pid:570
[  110.365878][ T3388] rust_binder: Write failure EINVAL in pid:575
[  110.620877][ T3417] overlayfs: failed to clone lowerpath
[  111.879614][  T305] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  112.029597][  T305] usb 3-1: Using ep0 maxpacket: 32
[  112.034802][   T36] audit: type=1326 audit(2000000039.032:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x7fc00000
[  112.060536][  T305] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  112.068764][  T305] usb 3-1: config 0 has no interface number 0
[  112.075116][  T305] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  112.085461][  T305] usb 3-1: config 0 interface 196 has no altsetting 0
[  112.093995][  T305] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  112.103364][  T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.111580][  T305] usb 3-1: Product: syz
[  112.115877][  T305] usb 3-1: Manufacturer: syz
[  112.120981][  T305] usb 3-1: SerialNumber: syz
[  112.129906][  T305] usb 3-1: config 0 descriptor??
[  112.136127][ T3480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  112.217808][   T36] audit: type=1400 audit(2000000039.212:488): avc:  denied  { associate } for  pid=3496 comm="syz.1.1108" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  112.268576][   T36] audit: type=1400 audit(2000000039.262:489): avc:  denied  { ioctl } for  pid=3506 comm="syz.1.1112" path="socket:[19412]" dev="sockfs" ino=19412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.408273][   T36] audit: type=1400 audit(2000000039.402:490): avc:  denied  { bind } for  pid=3514 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.439208][ T3520] overlay: ./file1 is not a directory
[  112.529583][  T542] Bluetooth: hci0: command 0x1003 tx timeout
[  112.535685][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  112.551114][  T305] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  112.560489][  T305] ipheth 3-1:0.196: probe with driver ipheth failed with error -22
[  112.612782][ T3543] binder: Bad value for 'stats'
[  112.752607][ T3480] rust_binder: Write failure EFAULT in pid:596
[  112.752983][   T45] usb 3-1: USB disconnect, device number 27
[  113.080025][ T3550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'.
[  113.204787][   T36] audit: type=1400 audit(2000000040.202:491): avc:  denied  { getopt } for  pid=3567 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  113.295451][ T3586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.303655][ T3585] tipc: Disabling bearer <eth:syzkaller0>
[  113.335015][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'.
[  113.649491][   T45] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  113.691302][   T36] audit: type=1400 audit(2000000040.692:492): avc:  denied  { setattr } for  pid=3638 comm="syz.1.1157" name="NETLINK" dev="sockfs" ino=20769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  113.811377][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.822588][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  113.833030][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  113.842141][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  113.851172][   T45] usb 3-1: SerialNumber: syz
[  113.858383][   T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  113.859166][   T36] audit: type=1400 audit(2000000040.852:493): avc:  denied  { write } for  pid=3653 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  113.867260][   T45] usb-storage 3-1:1.0: USB Mass Storage device detected
[  113.895865][   T45] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  113.904305][   T45] scsi host1: usb-storage 3-1:1.0
[  113.914587][   T36] audit: type=1326 audit(2000000040.912:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3657 comm="syz.4.1165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6748b8e929 code=0x0
[  114.059287][ T3663] netlink: 'syz.3.1166': attribute type 4 has an invalid length.
[  114.067072][ T3663] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1166'.
[  114.413709][   T31] usb 3-1: USB disconnect, device number 28
[  114.540144][ T3682] Invalid ELF header type: 2 != 1
[  114.574824][ T3686] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  114.681360][   T36] audit: type=1400 audit(2000000041.682:495): avc:  denied  { mounton } for  pid=3693 comm="syz.1.1178" path="/401/file0" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  114.699315][ T3699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:624
[  114.931297][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.950030][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.169532][  T369] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  115.319389][  T369] usb 3-1: Using ep0 maxpacket: 32
[  115.326473][  T369] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  115.339419][  T369] usb 3-1: config 1 interface 0 has no altsetting 0
[  115.347400][  T369] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.40
[  115.356499][  T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.364546][  T369] usb 3-1: Product: 댣䝣톘ᚉ쯼퀕䒣ü朒翙舽㞗섘퇓뼧碇࿙⩽㕷뷟鴇藛໱꤉复∗퇅哘䍣慚쵬ᄐ⹍ᾜ婬⺪ⴲ蠤藬员ᵳꗢ뷣質攆ꧫ羮♷抅叺䫗⦬撦湺⫅ぎﯬ뤬碕㠦ᝢ㴋䒧貒⽝醈㒔᮷逛ᱦ뙝◵뗧钏晠貧
[  115.391173][  T369] usb 3-1: Manufacturer: 真䋰郖ꎾ䉜䭺쀉৙鮾⩞嗓峅ࡘ鎩Ⴞ陴좜䯐樥콘藤ᡐ䃌栗ꛌ⾔ᠧ튅⼒숰ɣ妆蚥臒巜힃㡓搕杆盝
[  115.406947][  T369] usb 3-1: SerialNumber: ꪼ떴ꡃ뙉鷕脔͠⁶鷅븸롗镧穚휆옋⯡୎쪪␯ѝ㏯乱爻筠岒脔更뙧쟤尝宼Њ⨟鸝畇ಸ័ㅅ眵그ⶑ쭛塶㬒애㼽썁⦗唑ū籂鞮뫼灊䦍錆㚘碾ᄑ種
[  115.489545][ T3726] overlayfs: failed to clone upperpath
[  115.518535][   T36] audit: type=1326 audit(2000000042.512:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.1.1189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c2398e929 code=0x0
[  115.633607][  T369] usbhid 3-1:1.0: can't add hid device: -71
[  115.642892][  T369] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  115.654571][  T369] usb 3-1: USB disconnect, device number 29
[  117.178489][ T3760] tipc: Started in network mode
[  117.183625][ T3760] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  117.193373][ T3760] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  118.343236][ T3795] rust_binder: Error while translating object.
[  118.343280][ T3795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.349673][ T3795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641
[  118.599975][    T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  118.637642][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  118.637660][   T36] audit: type=1326 audit(2000000045.632:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x7fc00000
[  118.682526][ T3843] rust_binder: Error while translating object.
[  118.682560][ T3843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.687531][ T3846] fuse: Unknown parameter '�)h��*�ƶ�X-Ӷ�x90�R��fS'
[  118.698303][ T3843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466
[  118.760854][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  118.784362][    T9] usb 3-1: config 1 interface 0 altsetting 221 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.799167][    T9] usb 3-1: config 1 interface 0 altsetting 221 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  118.810472][    T9] usb 3-1: config 1 interface 0 altsetting 221 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  118.823952][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  118.832310][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.40
[  118.841705][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.851726][    T9] usb 3-1: Product: 译榻稈ꥨ婉Ⲵ北ⷒ䣹⎼딂啪ិ⚮뻪艵ཽ⫝㮗瞼쐠ퟺ潕츒
[  118.863562][ T3852] cgroup: fork rejected by pids controller in /syz3
[  118.863854][    T9] usb 3-1: Manufacturer: 㧀ﰣ꒷밴ㆸ艾흔㰜븰敱ᰛ馳稧꽺몝泮⌻꟭꧅渌ל硊鈺ፄ嬦掝쪊砧㡚悍刣꾖ං㙕ช〾ถ欼盱⹤㖏制韀舎㚀
[  118.888233][    T9] usb 3-1: SerialNumber: syz
[  118.907444][ T3795] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  118.916056][ T3795] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  118.934514][ T3885] overlayfs: failed to clone upperpath
[  119.347789][    T9] usbhid 3-1:1.0: can't add hid device: -71
[  119.359221][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  119.386165][    T9] usb 3-1: USB disconnect, device number 30
[  119.942077][   T36] audit: type=1326 audit(2000000046.942:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.1.1242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c2398e929 code=0x0
[  119.986473][ T3958] rust_binder: Error while translating object.
[  119.986499][ T3958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  119.992933][ T3958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:651
[  120.162816][   T36] audit: type=1400 audit(2000000047.162:500): avc:  denied  { view } for  pid=3964 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  120.195347][ T3967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659
[  120.195679][ T3967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659
[  120.358348][ T3981] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1252'.
[  120.421164][ T3989] 9pnet_fd: Insufficient options for proto=fd
[  120.459087][  T344] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  120.609177][  T344] usb 3-1: Using ep0 maxpacket: 16
[  120.616215][  T344] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping
[  120.625179][  T344] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  120.638054][  T344] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  120.650526][  T344] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.659701][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.667703][  T344] usb 3-1: Product: syz
[  120.671910][  T344] usb 3-1: Manufacturer: syz
[  120.676543][  T344] usb 3-1: SerialNumber: syz
[  120.787573][ T3991] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1257'.
[  120.796782][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  120.934719][  T344] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  120.943383][  T344] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  120.953880][  T344] usb 3-1: USB disconnect, device number 31
[  121.086390][ T4034] overlay: Unknown parameter '#&['
[  121.105112][   T36] audit: type=1400 audit(2000000048.102:501): avc:  denied  { accept } for  pid=4032 comm="syz.3.1271" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  121.119996][ T1105] udevd[1105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  121.256421][ T4058] tipc: New replicast peer: 255.255.255.255
[  121.262759][ T4058] tipc: Enabled bearer <udp:syz1>, priority 10
[  121.759065][  T369] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  121.773282][ T4067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471
[  121.909015][  T369] usb 3-1: Using ep0 maxpacket: 32
[  121.923777][  T369] usb 3-1: too many configurations: 217, using maximum allowed: 8
[  121.932748][  T369] usb 3-1: unable to read config index 0 descriptor/start: -61
[  121.940368][  T369] usb 3-1: can't read configurations, error -61
[  122.069019][  T369] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  122.219014][  T369] usb 3-1: Using ep0 maxpacket: 32
[  122.224943][  T369] usb 3-1: too many configurations: 217, using maximum allowed: 8
[  122.240076][  T369] usb 3-1: unable to read config index 0 descriptor/start: -61
[  122.247776][  T369] usb 3-1: can't read configurations, error -61
[  122.254439][  T369] usb usb3-port1: attempt power cycle
[  122.379021][    T9] tipc: Node number set to 4269801642
[  122.599029][  T369] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  122.619403][  T369] usb 3-1: Using ep0 maxpacket: 32
[  122.625017][  T369] usb 3-1: too many configurations: 217, using maximum allowed: 8
[  122.634004][  T369] usb 3-1: unable to read config index 0 descriptor/start: -61
[  122.641655][  T369] usb 3-1: can't read configurations, error -61
[  122.769041][  T369] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  122.789484][  T369] usb 3-1: Using ep0 maxpacket: 32
[  122.795112][  T369] usb 3-1: too many configurations: 217, using maximum allowed: 8
[  122.804352][  T369] usb 3-1: unable to read config index 0 descriptor/start: -61
[  122.812052][  T369] usb 3-1: can't read configurations, error -61
[  122.818516][  T369] usb usb3-port1: unable to enumerate USB device
[  123.284376][   T36] audit: type=1400 audit(2000000050.282:502): avc:  denied  { map } for  pid=4099 comm="syz.1.1293" path="pipe:[2585]" dev="pipefs" ino=2585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  123.380532][   T36] audit: type=1400 audit(2000000050.382:503): avc:  denied  { read } for  pid=4110 comm="syz.1.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  124.414234][ T4146] netlink: 'syz.3.1311': attribute type 12 has an invalid length.
[  124.422981][ T4146] fuse: Bad value for 'group_id'
[  124.427941][ T4146] fuse: Bad value for 'group_id'
[  124.434035][ T4146] fuse: blksize only supported for fuseblk
[  124.861536][   T36] audit: type=1400 audit(2000000051.862:504): avc:  denied  { append } for  pid=4151 comm="syz.4.1314" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  124.862491][ T4152] rust_binder: Write failure EINVAL in pid:475
[  124.885827][ T4153] rust_binder: Write failure EINVAL in pid:475
[  124.904106][ T4157] binder: Binderfs stats mode cannot be changed during a remount
[  124.938893][  T369] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  124.941576][ T4165] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1317'.
[  124.946566][   T36] audit: type=1400 audit(2000000051.942:505): avc:  denied  { create } for  pid=4164 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  125.089730][ T4174] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  125.089758][ T4174] rust_binder: Read failure Err(EFAULT) in pid:492
[  125.118831][  T369] usb 3-1: Using ep0 maxpacket: 16
[  125.131794][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.142812][  T369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.152709][  T369] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  125.161805][  T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.170628][  T369] usb 3-1: config 0 descriptor??
[  125.655459][  T369] usbhid 3-1:0.0: can't add hid device: -71
[  125.661872][  T369] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  125.672215][  T369] usb 3-1: USB disconnect, device number 36
[  126.190971][ T4194] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  126.237882][ T4202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=4202 comm=syz.2.1329
[  126.508768][  T344] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  126.658769][  T344] usb 3-1: Using ep0 maxpacket: 16
[  126.665054][  T344] usb 3-1: config 1 has an invalid interface number: 135 but max is 0
[  126.673458][  T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.683592][  T344] usb 3-1: config 1 has no interface number 0
[  126.689731][  T344] usb 3-1: config 1 interface 135 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  126.702898][  T344] usb 3-1: config 1 interface 135 has no altsetting 0
[  126.710983][  T344] usb 3-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=d4.40
[  126.720146][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.728151][  T344] usb 3-1: Product: syz
[  126.732341][  T344] usb 3-1: Manufacturer: syz
[  126.736952][  T344] usb 3-1: SerialNumber: syz
[  127.144997][  T344] usb 3-1: USB disconnect, device number 37
[  127.461486][   T36] audit: type=1326 audit(2000000054.463:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x7ffc0000
[  127.485249][   T36] audit: type=1326 audit(2000000054.463:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x7ffc0000
[  127.517125][   T36] audit: type=1326 audit(2000000054.463:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2f7c58e929 code=0x7ffc0000
[  127.543579][   T36] audit: type=1326 audit(2000000054.463:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c58e929 code=0x7ffc0000
[  127.640891][ T4270] incfs: Options parsing error. -22
[  127.646254][ T4270] incfs: mount failed -22
[  127.678785][   T36] audit: type=1326 audit(2000000054.673:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.3.1359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f7c58e929 code=0x0
[  127.705211][   T36] audit: type=1400 audit(2000000054.683:511): avc:  denied  { setopt } for  pid=4278 comm="syz.1.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  127.734137][   T36] audit: type=1326 audit(2000000054.703:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2398e929 code=0x7ffc0000
[  127.759293][   T36] audit: type=1326 audit(2000000054.703:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2398e929 code=0x7ffc0000
[  127.978687][   T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  128.129976][   T31] usb 3-1: config 1 has an invalid interface number: 229 but max is 1
[  128.138248][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.148559][   T31] usb 3-1: config 1 has no interface number 0
[  128.154715][   T31] usb 3-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30
[  128.166017][   T31] usb 3-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  128.179452][   T31] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  128.192382][   T31] usb 3-1: config 1 interface 229 has no altsetting 0
[  128.199402][   T31] usb 3-1: config 1 interface 1 has no altsetting 0
[  128.208054][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.217203][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.225242][   T31] usb 3-1: Product: syz
[  128.229446][   T31] usb 3-1: Manufacturer: syz
[  128.234059][   T31] usb 3-1: SerialNumber: syz
[  128.445601][ T4284] SELinux: security policydb version 17 (MLS) not backwards compatible
[  128.454104][ T4284] SELinux: failed to load policy
[  128.502992][   T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  128.512816][   T31] usb 3-1: USB disconnect, device number 38
[  128.546036][ T4295] sock: sock_set_timeout: `syz.3.1366' (pid 4295) tries to set negative timeout
[  128.924720][ T4306] fuse: Bad value for 'fd'
[  129.276409][ T4337] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.277071][ T4335] rust_binder: Error while translating object.
[  129.283808][ T4335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  129.290223][ T4335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:698
[  129.334535][ T4340] rust_binder: Write failure EFAULT in pid:701
[  129.410309][ T4342] binder: Unknown parameter 'smackfsfloor'
[  129.414140][ T4346] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 255)
[  129.423238][ T4346] rust_binder: Error while translating object.
[  129.433887][ T4346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  129.440179][ T4346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512
[  129.482245][ T4338] bridge0: port 3(veth0_to_bridge) entered blocking state
[  129.498724][ T4338] bridge0: port 3(veth0_to_bridge) entered disabled state
[  129.505893][ T4338] veth0_to_bridge: entered allmulticast mode
[  129.512820][ T4338] veth0_to_bridge: entered promiscuous mode
[  129.518990][ T4338] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  129.531432][ T4338] bridge0: port 3(veth0_to_bridge) entered blocking state
[  129.538617][ T4338] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  129.575004][ T4371] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[  129.575031][ T4371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  129.583138][ T4371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:521
[  129.889816][ T4383] binder: Unknown parameter 'rwv��d'
[  129.952737][ T4385] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  129.961494][ T4385] rust_binder: Write failure EINVAL in pid:713
[  129.974532][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  129.974550][   T36] audit: type=1400 audit(2000000056.973:521): avc:  denied  { map } for  pid=4386 comm="syz.2.1396" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  130.111586][ T4399] fuse: Bad value for 'rootmode'
[  130.369017][   T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  130.518585][   T31] usb 3-1: Using ep0 maxpacket: 16
[  130.524898][   T31] usb 3-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config
[  130.535336][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.545749][   T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.554884][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.562958][   T31] usb 3-1: Product: syz
[  130.567154][   T31] usb 3-1: Manufacturer: syz
[  130.571824][   T31] usb 3-1: SerialNumber: syz
[  130.579927][ T4406] netlink: 'syz.1.1404': attribute type 4 has an invalid length.
[  130.587641][ T4408] 9pnet_fd: p9_fd_create_unix (4408): problem connecting socket: ./file0: -111
[  130.597947][ T4406] netlink: 'syz.1.1404': attribute type 4 has an invalid length.
[  130.689413][ T4425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1412'.
[  130.976613][   T31] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  131.005212][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  131.025727][   T31] usb 3-1: USB disconnect, device number 39
[  131.041601][ T1105] udevd[1105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  131.049522][ T4438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  131.062826][ T4438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:726
[  131.096720][ T4441] cgroup2: Unknown parameter 'memory_�ecursiveprot'
[  131.223332][   T36] audit: type=1400 audit(2000000058.223:522): avc:  denied  { read } for  pid=4451 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  131.243719][   T36] audit: type=1400 audit(2000000058.233:523): avc:  denied  { mounton } for  pid=4453 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  131.316027][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.323366][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.330699][ T4453] bridge_slave_0: entered allmulticast mode
[  131.337055][ T4453] bridge_slave_0: entered promiscuous mode
[  131.343801][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.350916][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.361585][ T4453] bridge_slave_1: entered allmulticast mode
[  131.368014][ T4453] bridge_slave_1: entered promiscuous mode
[  131.379389][   T36] audit: type=1326 audit(2000000058.383:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24298e929 code=0x7ffc0000
[  131.402948][   T36] audit: type=1326 audit(2000000058.383:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb24298e929 code=0x7ffc0000
[  131.426667][   T36] audit: type=1326 audit(2000000058.383:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24298e929 code=0x7ffc0000
[  131.450119][   T36] audit: type=1326 audit(2000000058.383:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb242990847 code=0x7ffc0000
[  131.473446][   T36] audit: type=1326 audit(2000000058.383:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb2429907bc code=0x7ffc0000
[  131.496962][   T36] audit: type=1326 audit(2000000058.383:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2429906f4 code=0x7ffc0000
[  131.520282][   T36] audit: type=1326 audit(2000000058.383:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2429906f4 code=0x7ffc0000
[  131.624918][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.632060][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.639396][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.646457][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.678732][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.686140][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.696427][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.703512][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.712654][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.719817][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.748242][ T4453] veth0_vlan: entered promiscuous mode
[  131.760728][ T4453] veth1_macvtap: entered promiscuous mode
[  132.098663][ T4505] overlayfs: failed to clone lowerpath
[  132.131417][ T4512] overlayfs: failed to clone upperpath
[  132.138585][    T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  132.163235][ T4519] netlink: 'syz.3.1443': attribute type 4 has an invalid length.
[  132.249552][ T4523] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1445'.
[  132.289580][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.302192][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  132.314305][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  132.326085][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  132.341006][    T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  132.350453][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.358670][    T9] usb 6-1: Product: syz
[  132.365147][    T9] usb 6-1: Manufacturer: syz
[  132.370051][    T9] usb 6-1: SerialNumber: syz
[  132.375834][    T9] usb 6-1: config 0 descriptor??
[  132.381484][ T4498] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  132.390431][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14
[  132.588423][   T31] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  132.600741][ T4498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.609317][ T4498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.748772][   T31] usb 3-1: no configurations
[  132.757874][   T31] usb 3-1: can't read configurations, error -22
[  132.900649][   T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  133.069371][   T31] usb 3-1: no configurations
[  133.078482][   T45] usb 6-1: USB disconnect, device number 2
[  133.093151][   T31] usb 3-1: can't read configurations, error -22
[  133.113202][   T31] usb usb3-port1: attempt power cycle
[  133.478396][   T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  133.499093][   T31] usb 3-1: no configurations
[  133.503713][   T31] usb 3-1: can't read configurations, error -22
[  133.618403][ T4585] SELinux: failed to load policy
[  133.638361][   T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  133.659047][   T31] usb 3-1: no configurations
[  133.663742][   T31] usb 3-1: can't read configurations, error -22
[  133.671357][   T31] usb usb3-port1: unable to enumerate USB device
[  133.869398][ T4592] binder: Bad value for 'stats'
[  134.147330][ T4617] rust_binder: Error while translating object.
[  134.147367][ T4617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  134.154484][ T4617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29
[  134.184258][ T4620] rust_binder: Error while translating object.
[  134.195983][ T4620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  134.206085][ T4620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:32
[  134.582443][ T4635] rust_binder: Error while translating object.
[  134.591791][ T4635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  134.598019][ T4635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44
[  134.714686][ T4641] binder: Unknown parameter '00000000001699160122r	: '
[  135.045027][  T405] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  135.199358][  T405] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  135.218946][  T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.239823][  T405] usb 6-1: config 0 descriptor??
[  135.360715][ T4695] SELinux: security_context_str_to_sid () failed with errno=-22
[  135.405180][ T4703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756
[  135.425966][ T4705] binder: Unknown parameter 'audit'
[  135.654603][  T405] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  135.664680][  T405] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  135.675062][  T405] asix 6-1:0.0: probe with driver asix failed with error -71
[  135.683360][  T405] usb 6-1: USB disconnect, device number 3
[  135.778265][   T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  135.928249][   T31] usb 3-1: Using ep0 maxpacket: 8
[  135.935338][   T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  135.945824][   T31] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  135.958858][   T31] usb 3-1: config 1 interface 0 has no altsetting 0
[  135.966875][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.976964][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.985045][   T31] usb 3-1: Product: Т
[  135.989205][   T31] usb 3-1: Manufacturer: ौ뀆顲ꃋꞒ뇔킙▜㻪컓뵲መ꜐葶킥乡ᆻ횟칡㪍䅐ꇹ䋁ᵋ⪢億澲捍಻⚦蝅滇已컨릸ג焤╮ᾅ몾鼗旋㔠믁
[  136.005610][   T31] usb 3-1: SerialNumber: 
[  136.215513][   T31] cdc_ether 3-1:1.0: skipping garbage
[  136.221153][   T31] cdc_ether 3-1:1.0: skipping garbage
[  136.226719][   T31] usb 3-1: bad CDC descriptors
[  136.232700][   T31] usb 3-1: USB disconnect, device number 44
[  136.282222][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.282253][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.288915][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.295510][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.303120][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.309670][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.316209][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.322756][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.329244][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.336751][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.343272][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.349980][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.356524][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.363164][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.369888][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.376390][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.382943][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.389455][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.395908][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.402680][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.409440][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.416098][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.422681][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.429767][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.436326][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.442852][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.449942][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.456714][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.463617][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.470539][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.477045][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.483548][ T4722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.621241][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'.
[  136.724568][   T36] kauditd_printk_skb: 26 callbacks suppressed
[  136.724586][   T36] audit: type=1400 audit(2000000063.717:557): avc:  denied  { mounton } for  pid=4737 comm="syz.4.1515" path="/182/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  136.731865][ T4738] rust_binder: Error while translating object.
[  136.753562][ T4738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  136.754369][   T36] audit: type=1400 audit(2000000063.727:558): avc:  denied  { setattr } for  pid=4737 comm="syz.4.1515" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  136.770971][ T4738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541
[  136.861501][ T4752] rust_binder: Error while translating object.
[  136.870885][ T4752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  136.877212][ T4752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548
[  136.887068][ T4753] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  137.048366][  T405] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  137.080951][ T4759] 9pnet: Could not find request transport: virti00.L
[  137.119728][ T4765] rust_binder: Write failure EINVAL in pid:561
[  137.190116][   T36] audit: type=1400 audit(2000000064.187:559): avc:  denied  { audit_read } for  pid=4770 comm="syz.3.1526" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  137.217432][  T405] usb 3-1: Using ep0 maxpacket: 16
[  137.224147][  T405] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  137.233072][  T405] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.243302][  T405] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.253871][  T405] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.263011][  T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.271292][  T405] usb 3-1: Product: syz
[  137.275483][  T405] usb 3-1: Manufacturer: syz
[  137.280104][  T405] usb 3-1: SerialNumber: syz
[  137.687252][  T405] usb 3-1: 0:2 : does not exist
[  139.105609][  T405] usb 3-1: USB disconnect, device number 45
[  139.268735][ T1105] udevd[1105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  143.259219][ T4784] binder: Binderfs stats mode cannot be changed during a remount
[  143.268080][   T36] audit: type=1400 audit(2000000070.258:560): avc:  denied  { map } for  pid=4778 comm="syz.2.1531" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  143.359191][ T4808] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  143.687821][   T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  143.837781][   T31] usb 3-1: Using ep0 maxpacket: 16
[  143.844168][   T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30
[  143.854964][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.864754][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67
[  143.877701][   T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[  143.886786][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.895456][   T31] usb 3-1: config 0 descriptor??
[  143.994355][ T4830] fuse: Unknown parameter '/00000000L000000004000��n�P� ��00000000000000000000'
[  144.103277][   T31] wacom 0003:17EF:6004.0008: unknown main item tag 0x1
[  144.122285][   T31] wacom 0003:17EF:6004.0008: item fetching failed at offset 8/11
[  144.132239][   T31] wacom 0003:17EF:6004.0008: parse failed
[  144.138387][   T31] wacom 0003:17EF:6004.0008: probe with driver wacom failed with error -22
[  144.288363][    T9] usb 3-1: USB disconnect, device number 46
[  144.517065][   T36] audit: type=1400 audit(2000000071.508:561): avc:  denied  { create } for  pid=4858 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  144.547522][ T4859] Dead loop on virtual device ip6_vti0, fix it urgently!
[  144.571036][ T4850] rust_binder: Write failure EINVAL in pid:79
[  144.572243][   T36] audit: type=1400 audit(2000000071.568:562): avc:  denied  { setopt } for  pid=4858 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  144.766891][ T4871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  144.766915][ T4871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:88
[  144.776419][ T4871] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  144.785683][ T4871] rust_binder: Read failure Err(EFAULT) in pid:88
[  144.893013][ T4877] overlayfs: failed to resolve './file1': -2
[  144.932275][ T4882] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1563'.
[  145.023434][ T4894] fuse: Bad value for 'rootmode'
[  145.058782][ T4898] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  145.084786][   T36] audit: type=1400 audit(2000000072.078:563): avc:  denied  { setattr } for  pid=4903 comm="syz.2.1571" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[  145.237917][ T4918] rust_binder: Error while translating object.
[  145.237951][ T4918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  145.244281][ T4918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:812
[  145.275020][ T4920] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.295285][ T4920] overlay: filesystem on ./bus not supported as upperdir
[  145.315221][ T4921] overlay: filesystem on ./bus not supported as upperdir
[  145.354643][ T4928] syzkaller0: entered allmulticast mode
[  145.361938][ T4928] rust_binder: validate_parent_fixup: new_min_offset=1099511627806, sg_entry.length=64
[  145.361959][ T4928] rust_binder: Error while translating object.
[  145.371891][ T4928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  145.378171][ T4928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101
[  145.501997][ T4930] rust_binder: Error while translating object.
[  145.511255][ T4930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  145.517443][ T4930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:818
[  145.553006][   T36] audit: type=1400 audit(2000000072.548:564): avc:  denied  { map } for  pid=4933 comm="syz.5.1584" path="socket:[30571]" dev="sockfs" ino=30571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  145.553150][ T4934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103
[  145.580817][ T4938] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  145.604326][ T4938] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  145.626741][   T36] audit: type=1326 audit(2000000072.618:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4939 comm="syz.5.1586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9e638e929 code=0x0
[  145.655722][   T36] audit: type=1400 audit(2000000072.618:566): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  145.695796][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1589'.
[  145.917699][   T45] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  145.937671][  T344] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  146.067660][   T45] usb 6-1: Invalid ep0 maxpacket: 32
[  146.088948][  T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.099948][  T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.109743][  T344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  146.122669][  T344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.131784][  T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.140638][  T344] usb 3-1: config 0 descriptor??
[  146.197659][   T45] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  146.271918][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'.
[  146.280913][ T4969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1595'.
[  146.338757][ T4978] rust_binder: Error while translating object.
[  146.338789][ T4978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  146.345336][ T4978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:574
[  146.347644][   T45] usb 6-1: Invalid ep0 maxpacket: 32
[  146.370847][   T45] usb usb6-port1: attempt power cycle
[  146.384120][ T4984] sock: sock_timestamping_bind_phc: sock not bind to device
[  146.517910][   T36] audit: type=1400 audit(2000000073.518:567): avc:  denied  { mounton } for  pid=4993 comm="syz.4.1604" path="/198/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  146.518809][ T4994] incfs: Can't find or create .index dir in ./file0
[  146.546915][ T4994] incfs: mount failed -1
[  146.555846][ T4994] overlayfs: failed to resolve './file0': -2
[  146.569381][   T36] audit: type=1400 audit(2000000073.568:568): avc:  denied  { unmount } for  pid=414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  146.591005][   T36] audit: type=1400 audit(2000000073.588:569): avc:  denied  { create } for  pid=4949 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  146.591221][  T344] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 13/15
[  146.620300][  T344] plantronics 0003:047F:FFFF.0009: parse failed
[  146.626691][  T344] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22
[  146.638565][  T344] usb 3-1: USB disconnect, device number 47
[  146.658326][ T5003] input: syz1 as /devices/virtual/input/input15
[  146.674038][ T5003] fuse: Bad value for 'group_id'
[  146.679152][ T5003] fuse: Bad value for 'group_id'
[  146.685202][ T5003] vcan0: entered allmulticast mode
[  146.690925][ T5003] vcan0: left allmulticast mode
[  146.707612][   T45] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  146.737947][   T45] usb 6-1: Invalid ep0 maxpacket: 32
[  146.867630][   T45] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  146.908118][   T45] usb 6-1: Invalid ep0 maxpacket: 32
[  146.915705][   T45] usb usb6-port1: unable to enumerate USB device
[  146.918115][ T5010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5010 comm=syz.3.1609
[  146.952973][ T5014] overlay: ./file0 is not a directory
[  147.043514][ T5025] rust_binder: Error in use_page_slow: ESRCH
[  147.043540][ T5025] rust_binder: use_range failure ESRCH
[  147.057574][ T5025] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  147.084723][ T5025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  147.103807][ T5025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:851
[  147.291637][ T5034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  147.300933][ T5034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:856
[  147.328909][ T5036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  147.338232][ T5036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:858
[  147.613050][ T5053] binder: Unknown parameter 'euid'
[  147.877617][   T45] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  148.029172][   T45] usb 3-1: unable to get BOS descriptor or descriptor too short
[  148.037272][   T45] usb 3-1: not running at top speed; connect to a high speed hub
[  148.045890][   T45] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  148.054104][   T45] usb 3-1: config 0 has no interface number 0
[  148.060238][   T45] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  148.070179][   T45] usb 3-1: config 0 interface 88 has no altsetting 0
[  148.078277][   T45] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  148.087323][   T45] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  148.095450][   T45] usb 3-1: Product: syz
[  148.099698][   T45] usb 3-1: Manufacturer: syz
[  148.104305][   T45] usb 3-1: SerialNumber: syz
[  148.109715][   T45] usb 3-1: config 0 descriptor??
[  148.316992][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  148.317011][   T36] audit: type=1326 audit(2000000075.308:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.2.1624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24298e929 code=0x0
[  148.317060][ T5058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.355076][ T5058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.632893][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.632923][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.640010][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.646508][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.653351][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.659940][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.666437][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.672944][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.679438][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.685879][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.692357][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.716769][ T5072] binder: Unknown parameter 'fscontext?}'
[  149.057493][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  149.208857][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.222379][    T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 43520, setting to 1024
[  149.233561][    T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  149.245008][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0
[  149.254126][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.262168][    T9] usb 6-1: Product: syz
[  149.266355][    T9] usb 6-1: Manufacturer: syz
[  149.271013][    T9] usb 6-1: SerialNumber: syz
[  149.277527][    T9] cdc_ncm 6-1:1.0: skipping garbage
[  149.484227][ T3014] veth0_to_bridge: left allmulticast mode
[  149.490190][ T3014] veth0_to_bridge: left promiscuous mode
[  149.496025][ T3014] bridge0: port 3(veth0_to_bridge) entered disabled state
[  149.504165][ T3014] bridge_slave_1: left allmulticast mode
[  149.509929][ T3014] bridge_slave_1: left promiscuous mode
[  149.515695][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.523527][ T3014] bridge_slave_0: left allmulticast mode
[  149.529309][ T3014] bridge_slave_0: left promiscuous mode
[  149.535157][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.658780][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.665973][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.673148][ T5088] bridge_slave_0: entered allmulticast mode
[  149.679689][ T5088] bridge_slave_0: entered promiscuous mode
[  149.687193][ T3014] veth1_macvtap: left promiscuous mode
[  149.692769][ T3014] veth0_vlan: left promiscuous mode
[  149.747307][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.754518][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.761837][ T5088] bridge_slave_1: entered allmulticast mode
[  149.768662][ T5088] bridge_slave_1: entered promiscuous mode
[  149.842411][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.849607][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.856961][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.864062][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.891424][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.899339][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.909776][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.916887][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.926549][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.933644][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.965891][ T5088] veth0_vlan: entered promiscuous mode
[  149.980028][ T5088] veth1_macvtap: entered promiscuous mode
[  150.033786][   T36] audit: type=1400 audit(2000000077.028:577): avc:  denied  { ioctl } for  pid=5094 comm="syz.3.1638" path="socket:[31158]" dev="sockfs" ino=31158 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  150.239920][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'.
[  150.696545][   T45] usb 3-1: USB disconnect, device number 48
[  150.981055][ T5106] rust_binder: Got transaction with invalid offset.
[  150.981102][ T5106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  150.992434][ T5106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:607
[  151.002686][ T5106] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.017357][   T36] audit: type=1400 audit(2000000078.008:578): avc:  denied  { execute } for  pid=5107 comm="syz.3.1643" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  151.020106][ T5106] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.048555][ T5106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:607
[  151.058335][    T9] cdc_ncm 6-1:1.0: bind() failure
[  151.086380][    T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  151.092015][ T5111] rust_binder: Failed copying remainder into alloc: EFAULT
[  151.094333][ T5111] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  151.095759][    T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  151.106192][ T5111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  151.113805][    T9] usb 6-1: USB disconnect, device number 8
[  151.143494][ T5111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:609
[  151.225929][ T5122] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  151.236325][ T5122] rust_binder: Error while translating object.
[  151.247343][ T5122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  151.254514][ T5122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[  151.280522][ T5127] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.304323][ T5132] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1652'.
[  151.319937][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'.
[  151.606140][ T5153] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.662881][ T5161] rust_binder: Error while translating object.
[  151.669586][ T5161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  151.675798][ T5161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30
[  151.762546][ T5166] rust_binder: Write failure EINVAL in pid:882
[  151.847331][  T405] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  152.007394][  T405] usb 6-1: Using ep0 maxpacket: 16
[  152.013691][  T405] usb 6-1: config 9 has an invalid interface number: 186 but max is 0
[  152.021942][  T405] usb 6-1: config 9 has no interface number 0
[  152.028124][  T405] usb 6-1: config 9 interface 186 altsetting 10 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  152.039322][  T405] usb 6-1: config 9 interface 186 altsetting 10 endpoint 0x9 has an invalid bInterval 116, changing to 7
[  152.051154][  T405] usb 6-1: config 9 interface 186 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  152.062267][  T405] usb 6-1: config 9 interface 186 has no altsetting 0
[  152.071406][  T405] usb 6-1: string descriptor 0 read error: -22
[  152.077767][  T405] usb 6-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=98.63
[  152.086821][  T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.096674][  T405] usbhid 6-1:9.186: couldn't find an input interrupt endpoint
[  152.299330][  T344] usb 6-1: USB disconnect, device number 9
[  152.497573][ T5153] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  156.766023][ T5185] rust_binder: Write failure EFAULT in pid:36
[  156.824892][ T5194] binder: Unknown parameter '���U/ttyS3'
[  156.861884][ T5198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645
[  156.866282][ T5198] ip6gretap0: entered promiscuous mode
[  156.881378][ T5198] ip6gretap0: entered allmulticast mode
[  156.917341][  T344] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  156.931921][ T5200] SELinux: security_context_str_to_sid () failed with errno=-22
[  157.017041][  T405] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  157.047032][  T344] usb 3-1: device descriptor read/64, error -71
[  157.178203][  T405] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.189946][  T405] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  157.199057][  T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.207098][  T405] usb 4-1: Product: syz
[  157.211283][  T405] usb 4-1: Manufacturer: syz
[  157.215874][  T405] usb 4-1: SerialNumber: syz
[  157.221599][  T405] usb 4-1: config 0 descriptor??
[  157.227624][  T405] cdc_acm 4-1:0.0: skipping garbage
[  157.287023][  T344] usb 3-1: device descriptor read/64, error -71
[  157.429061][  T405] usb 4-1: USB disconnect, device number 5
[  157.527016][  T344] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  157.550733][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.550766][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.557369][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.563827][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.570360][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.576807][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.583504][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.590166][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.596706][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.603410][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.620067][ T5216] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.667104][  T344] usb 3-1: device descriptor read/64, error -71
[  157.917073][  T344] usb 3-1: device descriptor read/64, error -71
[  158.027285][  T344] usb usb3-port1: attempt power cycle
[  158.065124][  T405] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  158.073752][  T405] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  158.227687][ T5236] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 4096)
[  158.227712][ T5236] rust_binder: Error while translating object.
[  158.238482][ T5236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  158.244661][ T5236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52
[  158.329815][ T5246] rust_binder: Error while translating object.
[  158.339033][ T5246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  158.345468][ T5246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[  158.367076][  T344] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  158.400798][  T344] usb 3-1: device descriptor read/8, error -71
[  158.538108][  T344] usb 3-1: device descriptor read/8, error -71
[  158.554938][ T5252] rust_binder: Error while translating object.
[  158.554964][ T5252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  158.561247][ T5252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:68
[  158.776998][  T344] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  158.808047][  T344] usb 3-1: device descriptor read/8, error -71
[  158.816975][  T405] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  158.937954][  T344] usb 3-1: device descriptor read/8, error -71
[  158.966980][  T405] usb 4-1: Using ep0 maxpacket: 32
[  158.973397][  T405] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  158.981539][  T405] usb 4-1: config 0 has no interface number 0
[  158.989032][  T405] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  158.998150][  T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.006151][  T405] usb 4-1: Product: syz
[  159.010857][  T405] usb 4-1: Manufacturer: syz
[  159.015467][  T405] usb 4-1: SerialNumber: syz
[  159.020816][  T405] usb 4-1: config 0 descriptor??
[  159.026608][  T405] smsc95xx v2.0.0
[  159.047110][  T344] usb usb3-port1: unable to enumerate USB device
[  159.427319][  T405] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  159.438132][  T405] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  159.675563][ T5256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:889
[  159.675608][ T5256] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  159.684937][ T5256] rust_binder: Read failure Err(EFAULT) in pid:889
[  160.455215][  T405] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  160.472787][  T405] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  160.482025][  T405] usb 4-1: USB disconnect, device number 6
[  160.552848][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1694'.
[  160.800265][  T369] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  160.956796][  T369] usb 3-1: Using ep0 maxpacket: 32
[  160.965054][  T369] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  160.986780][  T369] usb 3-1: config 1 interface 0 has no altsetting 0
[  160.996354][ T5282] rust_binder: Write failure EINVAL in pid:72
[  160.997918][  T369] usb 3-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.40
[  161.019195][  T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.022006][ T5286] overlayfs: missing 'lowerdir'
[  161.032736][  T369] usb 3-1: Product: ࠊ
[  161.037015][  T369] usb 3-1: Manufacturer: 繑䔟뉸帛㻋ｘ駭춎茐⤜㷕ධ몊铄귢⇕₸ꦀ힢ⱡ⠻ꅻ儷챍缳Ħ霬捷߇⬸䕈堙덻䟁뼰ꀐ䌎ꩮ
[  161.052191][  T369] usb 3-1: SerialNumber: 瀀龎껇㋉冈ꊧ彖틝⦾誸⿀뱲Ｆ솆䗊鐻䲇썶㲣䴀髧㕋т햢ﰯ䧢ጤ䬳䱂섈䠕૰㳵섿丒໼㨮
[  161.108602][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.121406][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.132185][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.143754][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.153242][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.163765][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.173287][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.183822][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.193314][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.199950][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.206303][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.212902][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.219480][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.225817][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.232435][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.238934][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.245295][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.255295][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.264012][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.270558][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.277150][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.284597][ T5264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  161.284631][ T5264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:895
[  161.286863][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.337314][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.346560][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.353063][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.359708][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.366088][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.372535][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.379995][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.386409][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.392759][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.400307][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.406663][ T5285] 9pnet_fd: Insufficient options for proto=fd
[  161.487528][  T369] usbhid 3-1:1.0: can't add hid device: -71
[  161.496814][  T369] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  161.515898][  T369] usb 3-1: USB disconnect, device number 53
[  161.903585][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'.
[  161.927234][ T5302] bridge_slave_1: left allmulticast mode
[  161.933662][ T5302] bridge_slave_1: left promiscuous mode
[  161.939594][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.947679][ T5302] bridge_slave_0: left allmulticast mode
[  161.953447][ T5302] bridge_slave_0: left promiscuous mode
[  161.959451][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.231223][ T5333] rust_binder: Write failure EFAULT in pid:904
[  162.286325][ T5341] netlink: 'syz.2.1716': attribute type 64 has an invalid length.
[  162.586772][  T369] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  162.739589][  T369] usb 4-1: not running at top speed; connect to a high speed hub
[  162.751894][  T369] usb 4-1: config 16 has an invalid interface number: 77 but max is 0
[  162.760256][  T369] usb 4-1: config 16 has no interface number 0
[  162.766882][  T369] usb 4-1: config 16 interface 77 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  162.782725][  T369] usb 4-1: config 16 interface 77 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  162.795394][  T369] usb 4-1: config 16 interface 77 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  162.806472][  T369] usb 4-1: config 16 interface 77 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  162.817256][  T369] usb 4-1: config 16 interface 77 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  162.828138][  T369] usb 4-1: config 16 interface 77 altsetting 4 has an endpoint descriptor with address 0x12, changing to 0x2
[  162.839808][  T369] usb 4-1: config 16 interface 77 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  162.854244][  T369] usb 4-1: config 16 interface 77 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  162.865228][  T369] usb 4-1: config 16 interface 77 has no altsetting 0
[  163.150627][   T36] audit: type=1400 audit(2000000090.149:579): avc:  denied  { ioctl } for  pid=5360 comm="syz.2.1723" path="socket:[34141]" dev="sockfs" ino=34141 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  163.295827][ T5366] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  163.295857][ T5366] rust_binder: Error while translating object.
[  163.306779][ T5366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  163.312998][ T5366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:916
[  163.782204][ T5382] netlink: 'syz.2.1732': attribute type 4 has an invalid length.
[  163.799212][ T5382] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1732'.
[  163.811744][ T5382] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  164.076709][   T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  164.229676][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.238924][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.247283][   T45] usb 3-1: Product: syz
[  164.251764][   T45] usb 3-1: Manufacturer: syz
[  164.256385][   T45] usb 3-1: SerialNumber: syz
[  164.467206][   T36] audit: type=1400 audit(2000000091.469:580): avc:  denied  { compute_member } for  pid=5383 comm="syz.2.1733" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  165.030794][ T5402] /dev/sr0: Can't lookup blockdev
[  165.036330][ T5402] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  165.036372][ T5402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  165.045206][ T5402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:165
[  165.289461][   T45] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  165.305151][   T45] cdc_ncm 3-1:1.0: setting rx_max = 16384
[  165.354794][  T369] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=2e.4d
[  165.364105][  T369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.372761][  T369] usb 4-1: Product: Ј
[  165.376895][  T369] usb 4-1: Manufacturer: Ј
[  165.386927][  T369] usb 4-1: can't set config #16, error -71
[  165.394557][  T369] usb 4-1: USB disconnect, device number 7
[  165.405221][ T5416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  165.405257][ T5416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:110
[  165.415397][ T5416] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  165.425591][ T5416] rust_binder: Read failure Err(EFAULT) in pid:110
[  165.489859][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'.
[  165.513126][ T5418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  165.513158][ T5418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172
[  165.523659][ T5384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  165.533671][ T5419] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.534125][ T5384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:934
[  165.555891][   T45] cdc_ncm 3-1:1.0: setting tx_max = 16384
[  165.588446][   T45] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  165.606091][   T45] usb 3-1: USB disconnect, device number 54
[  165.618870][   T36] audit: type=1400 audit(2000000092.619:581): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  165.640473][   T45] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  165.682929][   T36] audit: type=1400 audit(2000000092.619:582): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.736702][   T36] audit: type=1400 audit(2000000092.619:583): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  165.774865][   T36] audit: type=1400 audit(2000000092.619:584): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  165.839388][   T36] audit: type=1400 audit(2000000092.619:585): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  165.866448][ T5452] rust_binder: Write failure EINVAL in pid:699
[  165.866604][ T5452] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.900077][   T36] audit: type=1400 audit(2000000092.679:586): avc:  denied  { read } for  pid=5435 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.978637][   T36] audit: type=1400 audit(2000000092.679:587): avc:  denied  { open } for  pid=5435 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.028869][   T36] audit: type=1400 audit(2000000092.679:588): avc:  denied  { getattr } for  pid=5435 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.055758][ T5462] rust_binder: Error while translating object.
[  166.055786][ T5462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  166.062211][ T5462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:706
[  166.254529][ T5423] cgroup: fork rejected by pids controller in /syz5
[  166.467447][ T5512] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  166.692269][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'.
[  166.919180][ T5534] tipc: Enabling of bearer <ib:lo> rejected, media not registered
[  166.927273][ T5533] tipc: Enabling of bearer <ib:lo> rejected, media not registered
[  167.081369][ T5541] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  167.081482][ T5541] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  167.106442][ T5543] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1762'.
[  167.186063][ T5475] rust_binder: Error while translating object.
[  167.186113][ T5475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  167.192810][ T5475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:936
[  167.272828][ T5559] binder: Bad value for 'max'
[  167.383007][ T5575] incfs_lookup_dentry err:-1
[  167.387806][ T5575] incfs: Can't find or create .index dir in ./file0
[  167.394512][ T5575] incfs: mount failed -1
[  167.671207][ T5577] rust_binder: Got transaction with invalid offset.
[  167.671242][ T5577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  167.677984][ T5577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[  167.969946][ T3016] bridge_slave_1: left allmulticast mode
[  167.984899][ T3016] bridge_slave_1: left promiscuous mode
[  167.990634][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.998483][ T3016] bridge_slave_0: left allmulticast mode
[  168.004296][ T3016] bridge_slave_0: left promiscuous mode
[  168.010114][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.025665][ T5581] overlay: Unknown parameter 'appraise'
[  168.047782][ T5583] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[  168.148514][ T3016] tipc: Disabling bearer <udp:syz1>
[  168.154029][ T3016] tipc: Left network mode
[  168.159714][ T3016] veth1_macvtap: left promiscuous mode
[  168.165213][ T3016] veth0_vlan: left promiscuous mode
[  168.605705][ T5598] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[  168.605734][ T5598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  168.614334][ T5598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:756
[  168.634481][ T5600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:758
[  168.634745][ T5601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:758
[  168.710764][   T36] kauditd_printk_skb: 21 callbacks suppressed
[  168.710784][   T36] audit: type=1400 audit(2000000095.709:610): avc:  denied  { setattr } for  pid=5610 comm="syz.4.1787" path="socket:[34714]" dev="sockfs" ino=34714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  168.945989][ T5614] xfrm0: mtu less than device minimum
[  169.225218][ T5624] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  169.556092][ T5630] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  169.594522][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'.
[  169.614782][ T5634] random: crng reseeded on system resumption
[  169.652926][ T5634] futex_wake_op: syz.4.1795 tries to shift op by -1; fix this program
[  169.776510][ T5644] rust_binder: Write failure EFAULT in pid:155
[  169.863143][ T5652] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1800'.
[  170.484184][ T5669] SELinux:  policydb magic number 0x7a9cdd27 does not match expected magic number 0xf97cff8c
[  170.494455][ T5669] SELinux: failed to load policy
[  170.533683][   T36] audit: type=1400 audit(2000000097.529:611): avc:  denied  { create } for  pid=5676 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  170.553279][   T36] audit: type=1400 audit(2000000097.529:612): avc:  denied  { write } for  pid=5676 comm="syz.3.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  170.563843][ T5679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[  170.572839][ T5679] rust_binder: Error while translating object.
[  170.582170][ T5679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.588637][ T5679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[  170.598998][ T5679] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.599179][ T5680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[  170.626249][ T5684] rust_binder: Write failure EINVAL in pid:183
[  170.646287][  T306] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  170.652112][ T5689] rust_binder: Error while translating object.
[  170.660181][ T5689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  170.666433][ T5689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:188
[  170.712092][ T5691] rust_binder: Write failure EFAULT in pid:190
[  170.732257][ T5693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192
[  170.738832][ T5693] futex_wake_op: syz.3.1813 tries to shift op by -1; fix this program
[  170.796313][  T306] usb 3-1: Using ep0 maxpacket: 16
[  170.802694][  T306] usb 3-1: config 4 has an invalid interface number: 140 but max is 0
[  170.807857][ T5694] rust_binder: Write failure EINVAL in pid:192
[  170.811141][  T306] usb 3-1: config 4 has no interface number 0
[  170.823447][  T306] usb 3-1: config 4 interface 140 has no altsetting 0
[  170.831879][  T306] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b
[  170.841019][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.849105][  T306] usb 3-1: Product: syz
[  170.853297][  T306] usb 3-1: Manufacturer: syz
[  170.857945][  T306] usb 3-1: SerialNumber: syz
[  170.864530][  T306] ums-cypress 3-1:4.140: USB Mass Storage device detected
[  171.065761][  T306] usb 3-1: USB disconnect, device number 55
[  171.072131][   T36] audit: type=1400 audit(2000000098.069:613): avc:  denied  { bind } for  pid=5658 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  171.095775][   T36] audit: type=1400 audit(2000000098.089:614): avc:  denied  { ioctl } for  pid=5658 comm="syz.2.1802" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  171.677827][ T5704] overlayfs: failed to resolve './file1': -2
[  171.695072][ T5706] rust_binder: Error while translating object.
[  171.695094][ T5706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.701387][ T5706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201
[  171.711377][ T5707] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.727136][ T5708] rust_binder: Error while translating object.
[  171.727167][ T5708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.733368][ T5708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201
[  171.856240][  T306] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  171.903065][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.903171][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.909790][ T5713] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  172.016165][  T306] usb 3-1: Using ep0 maxpacket: 32
[  172.025934][ T5728] rust_binder: Write failure EFAULT in pid:221
[  172.030394][  T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.047212][  T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  172.056279][  T306] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.070493][  T306] usb 3-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40
[  172.079631][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.087762][  T306] usb 3-1: Product: syz
[  172.091947][  T306] usb 3-1: Manufacturer: syz
[  172.096578][  T306] usb 3-1: SerialNumber: syz
[  172.310797][  T306] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  172.317748][  T306] cdc_ncm 3-1:1.0: bind() failure
[  172.325542][  T306] usb 3-1: USB disconnect, device number 56
[  172.634128][   T36] audit: type=1400 audit(2000000099.629:615): avc:  denied  { create } for  pid=5730 comm="syz.4.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  172.639746][ T5731] input: syz1 as /devices/virtual/input/input17
[  172.664405][ T5181] udevd[5181]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  172.830413][ T5739] overlay: Unknown parameter 'subj_type'
[  172.837061][   T36] audit: type=1400 audit(2000000099.839:616): avc:  denied  { map } for  pid=5740 comm="syz.3.1827" path="socket:[35696]" dev="sockfs" ino=35696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  172.874898][ T5745] TCP: TCP_TX_DELAY enabled
[  172.888306][ T5739] binder: Unknown parameter 'Peclabe'
[  172.888306][ T5742] binder: Unknown parameter 'Peclabe'
[  172.955072][ T5761] netlink: 'syz.5.1831': attribute type 12 has an invalid length.
[  172.979752][   T36] audit: type=1400 audit(2000000099.969:617): avc:  denied  { append } for  pid=5760 comm="syz.5.1831" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  173.005364][ T5768] netlink: 'syz.5.1834': attribute type 12 has an invalid length.
[  173.012224][   T36] audit: type=1326 audit(2000000100.009:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e638e929 code=0x7ffc0000
[  173.039202][   T36] audit: type=1326 audit(2000000100.009:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5767 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e638e929 code=0x7ffc0000
[  173.233435][ T5780] rust_binder: Error while translating object.
[  173.233483][ T5780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  173.240007][ T5780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:973
[  173.406158][ T5795] rust_binder: Write failure EINVAL in pid:243
[  173.636122][    T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  173.806087][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[  173.956085][    T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  174.059519][ T5811] fuse: Bad value for 'user_id'
[  174.064441][ T5811] fuse: Bad value for 'user_id'
[  174.111296][ T5812] binder: Unknown parameter 'dev/udmabuf'
[  174.126060][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[  174.139110][    T9] usb usb4-port1: attempt power cycle
[  174.157791][ T5814] netlink: 'syz.5.1847': attribute type 4 has an invalid length.
[  174.176138][ T5814] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1847'.
[  174.516061][    T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  174.556390][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[  174.584774][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  174.584793][   T36] audit: type=1400 audit(2000000101.579:628): avc:  denied  { setattr } for  pid=5816 comm="syz.4.1848" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.695499][ T3014] Bluetooth: hci0: Frame reassembly failed (-84)
[  174.719680][    T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  174.768454][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[  174.775084][    T9] usb usb4-port1: unable to enumerate USB device
[  176.330799][ T5820] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5:
[  176.330799][ T5820] attempt to add with overflow
[  176.347738][ T5820] ------------[ cut here ]------------
[  176.353257][ T5820] kernel BUG at rust/helpers/bug.c:7!
[  176.359085][ T5820] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  176.360062][   T36] audit: type=1400 audit(2000000103.359:629): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  176.366074][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz.2.1849 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[  176.366105][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  176.366120][ T5820] RIP: 0010:rust_helper_BUG+0x8/0x10
[  176.388799][   T36] audit: type=1400 audit(2000000103.359:630): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.401460][ T5820] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 38 7e bc ef 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 72 ba f5 63 90 90 90 90 90 90 90 90 90
[  176.401487][ T5820] RSP: 0018:ffffc90001c0f3f0 EFLAGS: 00010246
[  176.401507][ T5820] RAX: 000000000000008c RBX: 1ffff92000381e80 RCX: 50e51421cbed7300
[  176.401526][ T5820] RDX: ffffc90002264000 RSI: 0000000000003d3d RDI: 0000000000003d3e
[  176.412292][   T36] audit: type=1400 audit(2000000103.359:631): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.417082][ T5820] RBP: ffffc90001c0f3f0 R08: ffffc90001c0f0e7 R09: 1ffff92000381e1c
[  176.417103][ T5820] R10: dffffc0000000000 R11: fffff52000381e1d R12: 0000000000000000
[  176.417121][ T5820] R13: dffffc0000000000 R14: ffffc90001c0f420 R15: ffffc90001c0f450
[  176.438903][   T36] audit: type=1400 audit(2000000103.359:632): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.458018][ T5820] FS:  00007fb24381f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  176.458043][ T5820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.458059][ T5820] CR2: 0000001b2de1fffc CR3: 0000000126262000 CR4: 00000000003526b0
[  176.458079][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  176.464765][   T36] audit: type=1400 audit(2000000103.359:633): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  176.472143][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  176.472165][ T5820] Call Trace:
[  176.472172][ T5820]  <TASK>
[  176.472182][ T5820]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  176.480637][   T36] audit: type=1400 audit(2000000103.359:634): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  176.501420][ T5820]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  176.501464][ T5820]  ? kernel_text_address+0xa9/0xe0
[  176.501486][ T5820]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  176.509933][   T36] audit: type=1400 audit(2000000103.359:635): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  176.517443][ T5820]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  176.517477][ T5820]  ? arch_stack_walk+0x10b/0x170
[  176.702792][ T5820]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  176.710022][ T5820]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  176.717957][ T5820]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0
[  176.727905][ T5820]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  176.738530][ T5820]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0
[  176.750793][ T5820]  ? mas_wr_store_type+0x8eb/0x1ad0
[  176.756014][ T5820]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10
[  176.768961][ T5820]  ? mas_preallocate+0x56e/0xc60
[  176.773915][ T5820]  ? __cfi_mas_preallocate+0x10/0x10
[  176.779291][ T5820]  ? kasan_save_alloc_info+0x40/0x50
[  176.784588][ T5820]  ? __asan_memset+0x39/0x50
[  176.789285][ T5820]  mmap_region+0x1371/0x1bd0
[  176.793905][ T5820]  ? __cfi_mmap_region+0x10/0x10
[  176.798853][ T5820]  ? __futex_queue+0x19a/0x340
[  176.803652][ T5820]  ? __kasan_check_read+0x15/0x20
[  176.808681][ T5820]  ? arch_get_unmapped_area_topdown+0x232/0x8d0
[  176.814944][ T5820]  ? file_mmap_ok+0x147/0x1a0
[  176.815961][  T542] Bluetooth: hci0: command 0x1003 tx timeout
[  176.819629][ T5820]  do_mmap+0xb6d/0x13c0
[  176.819660][ T5820]  ? __cfi_do_mmap+0x10/0x10
[  176.825662][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  176.829977][ T5820]  ? down_write_killable+0xe9/0x2d0
[  176.830005][ T5820]  ? __cfi_down_write_killable+0x10/0x10
[  176.851790][ T5820]  vm_mmap_pgoff+0x38f/0x4e0
[  176.856431][ T5820]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  176.861560][ T5820]  ? __fget_files+0x2c5/0x340
[  176.866279][ T5820]  ksys_mmap_pgoff+0x166/0x1e0
[  176.871057][ T5820]  __x64_sys_mmap+0x121/0x140
[  176.875749][ T5820]  x64_sys_call+0x13bf/0x2ee0
[  176.880443][ T5820]  do_syscall_64+0x58/0xf0
[  176.884928][ T5820]  ? clear_bhb_loop+0x35/0x90
[  176.889628][ T5820]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  176.895538][ T5820] RIP: 0033:0x7fb24298e929
[  176.899957][ T5820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.919576][ T5820] RSP: 002b:00007fb24381f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  176.928011][ T5820] RAX: ffffffffffffffda RBX: 00007fb242bb5fa0 RCX: 00007fb24298e929
[  176.935989][ T5820] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000
[  176.943963][ T5820] RBP: 00007fb242a10b39 R08: 0000000000000003 R09: 00000000d0eb4000
[  176.951951][ T5820] R10: 000000000002c011 R11: 0000000000000246 R12: 0000000000000000
[  176.959932][ T5820] R13: 0000000000000000 R14: 00007fb242bb5fa0 R15: 00007ffc6bb47478
[  176.967960][ T5820]  </TASK>
[  176.971071][ T5820] Modules linked in:
[  176.975364][ T5820] ---[ end trace 0000000000000000 ]---
[  176.981581][ T5820] RIP: 0010:rust_helper_BUG+0x8/0x10
[  176.986970][ T5820] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 38 7e bc ef 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 72 ba f5 63 90 90 90 90 90 90 90 90 90
[  177.006693][ T5820] RSP: 0018:ffffc90001c0f3f0 EFLAGS: 00010246
[  177.013424][ T5820] RAX: 000000000000008c RBX: 1ffff92000381e80 RCX: 50e51421cbed7300
[  177.021484][ T5820] RDX: ffffc90002264000 RSI: 0000000000003d3d RDI: 0000000000003d3e
[  177.029558][ T5820] RBP: ffffc90001c0f3f0 R08: ffffc90001c0f0e7 R09: 1ffff92000381e1c
[  177.037807][ T5820] R10: dffffc0000000000 R11: fffff52000381e1d R12: 0000000000000000
[  177.045925][ T5820] R13: dffffc0000000000 R14: ffffc90001c0f420 R15: ffffc90001c0f450
[  177.053929][ T5820] FS:  00007fb24381f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  177.062920][ T5820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.069562][ T5820] CR2: 0000001b2de1fffc CR3: 0000000126262000 CR4: 00000000003526b0
[  177.077611][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.085622][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.094069][ T5820] Kernel panic - not syncing: Fatal exception
[  177.100617][ T5820] Kernel Offset: disabled
[  177.104951][ T5820] Rebooting in 86400 seconds..