last executing test programs:

31.2651118s ago: executing program 0 (id=159):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

31.24600977s ago: executing program 0 (id=161):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

31.162458382s ago: executing program 0 (id=162):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="040300000000fdf1db2554000000"], 0x14}}, 0x8000) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x4, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 64)
r5 = syz_clone(0x3e067c91, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
waitid(0x0, r5, 0x0, 0x1000008, 0x0)
mmap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x0, 0x6011, r4, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xb) (async)
ptrace$poke(0x1, 0x0, &(0x7f0000000040), 0x8) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_type(r8, &(0x7f00000001c0), 0x2, 0x0)
readv(r9, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/79, 0x4f}], 0x1) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
close(0xffffffffffffffff) (async, rerun: 32)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r10, 0x0) (async, rerun: 32)
syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0)

31.119785853s ago: executing program 0 (id=164):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)

31.024537285s ago: executing program 0 (id=166):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_create1(0x0)
r1 = epoll_create(0xef77)
epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x1ff, &(0x7f0000000200)={[0x1000000]}, 0x8)
setresuid(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xfffffffffffffff7, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})

30.813326579s ago: executing program 0 (id=172):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbff, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e20, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@multicast1, 0x4d2, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, {0x0, 0x5e8, 0xfffffffffffffffa, 0x6, 0x8, 0x100, 0x1, 0x800}, {0x68a031d9, 0x81, 0x8001, 0x2412}, {0xffffffff, 0xbba, 0x1}, 0x70bd29, 0x0, 0x2, 0x3, 0xf2, 0x1}, 0x9, 0x2}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
unshare(0x62040200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@empty, 0x4b, r7}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000003300)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x0, 0x0, 0x3d}, @ipv6=@gre_packet={0x2, 0x6, "39d39c", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1e, 0x3, 0x0, 0x2, 0x6, 0x9}, 0x1, {0xf88a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0xe3}, 0x2, {0x100, 0x3, 0x1, 0x6, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}, 0x7a) (async)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000580)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) (async)
ioctl$TCSBRKP(r4, 0x5425, 0x4) (async)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async)
close_range(r1, r2, 0x2)

30.73231118s ago: executing program 32 (id=172):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbff, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e20, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@multicast1, 0x4d2, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, {0x0, 0x5e8, 0xfffffffffffffffa, 0x6, 0x8, 0x100, 0x1, 0x800}, {0x68a031d9, 0x81, 0x8001, 0x2412}, {0xffffffff, 0xbba, 0x1}, 0x70bd29, 0x0, 0x2, 0x3, 0xf2, 0x1}, 0x9, 0x2}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
unshare(0x62040200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@empty, 0x4b, r7}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000003300)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x0, 0x0, 0x3d}, @ipv6=@gre_packet={0x2, 0x6, "39d39c", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1e, 0x3, 0x0, 0x2, 0x6, 0x9}, 0x1, {0xf88a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0xe3}, 0x2, {0x100, 0x3, 0x1, 0x6, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}, 0x7a) (async)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000580)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) (async)
ioctl$TCSBRKP(r4, 0x5425, 0x4) (async)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async)
close_range(r1, r2, 0x2)

3.843227835s ago: executing program 3 (id=539):
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x40010, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r2=>0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="5f999fc6750e73894cc18e4c070fd9b8f52a4e65650c30af902613bb7d5b50efb3802d8eaf95de7236ca566301fa606786bf85d65f1d5525d76cd77e88ea315dc4066bb33a5bdb922e7a474efa3a4086f0e92d33d1f0385c6ded1f4c59ad2a0ff2c80ed2dc66424dbdf68ecaa44289f99d689eaec349381ddcd94a9c040041803d427eaa2aeece9d2c77bd1ee9c24f869d941e745b188d9dad10a598a9f0e539f890a14e9a2f05a89e74ef3c3b9291a64906aba497b1aa213d12b4a13ca77fb2e13dcdd08f42ca333919a42cc9372990432cd5955e664c1cb1ad3f164dd4158c86836f51f884fd1e8733dcd5dbdffeec7274d164ef2f24e5ad36dcbb2f2acd94da48e0ed6ab8d43e2e7cfeb625f896002c4ca03067c1d176628624f7c823792e21857c86f2f547f63307b96a7478c5c3104b40fb9980a39e5d87145e8452a67578240723e9bc3f730587025e68bf581104000580f5f8e99f66011e3b04b31136c3fb3a859f56375b9620a79ccec5f23dfbf13ff2400102760b8152f90dd115efb11e34c7514b729ff1da9773fe4e45bd41147b2f668a44eca3dfc017fc6c3247ed68106ac0d341a2a552ee2f787e8f68d8489f789bc24f7fff3cfa04002e80ac98512efdd6770959e6c144e796058b80d0ff96635a3375299e5a2f6eab8b5e0cda8b7bca5dc98a451b36ad49f687554fc82f873ae9a705971b88e31ced60244967535e9445d164679333706a73b00da89530de7f445742cae68bac46e57cad087f739ba36456ef9344d735651d3ea64f8974171c1b52f7c824f203a067bd8883b48278104f20f70b5f204e163e9c19144e5e1623fcebb1b5f8c346e79c1f9300000800ac00", @ANYRES32=0xee00, @ANYBLOB="1800018000498b9ae6fd0000100000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4}, 0x804)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4)
sendmsg$netlink(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="100000001e002307e60000009faf00005a436ff4cd186cd67e3fccd9ce5069dbfd3f6979cb90b24f707f4355dc06b84c628cfdbf51d34c461f8ca26dd3f10b1f91c6b131802f3547b6f738ab"], 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010)
r4 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0xe)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='(\x00'])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
request_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0)

3.758432437s ago: executing program 3 (id=540):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f7)
write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3, 0xfffbffec, 0x4000336, 0x40, 0xf5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0xfffa}, [{0x3, 0xf97, 0x3, 0xd, 0x282, 0xe2, 0xfe10, 0x3}]}, 0x78)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
bind$vsock_stream(r0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]})
write$tun(0xffffffffffffffff, &(0x7f0000003300)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x0, 0x0, 0x3d}, @ipv6=@gre_packet={0x2, 0x6, "39d39c", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1e, 0x3, 0x0, 0x2, 0x6, 0x9}, 0x1, {0xf88a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0xe3}, 0x2, {0x100, 0x3, 0x1, 0x6, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}, 0x7a)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x105)
r6 = socket(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
fspick(r5, &(0x7f0000000040)='./file0\x00', 0x1)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0})

3.700369418s ago: executing program 3 (id=541):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}, 0xc98}], 0x1, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0)
write(r4, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

3.455215103s ago: executing program 3 (id=544):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

3.438931033s ago: executing program 3 (id=545):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0"], 0x21c}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b'], 0x16c}}, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000240)={'syz1\x00', {0x508, 0x7fff, 0x7, 0x1}, 0x100004a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x8, 0x0, 0x0, 0x4000000, 0x5, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0x1, 0x1, 0x3f, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffff7, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x1d, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x80000001, 0x0, 0x15960318, 0x0, 0x0, 0xb, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x800000, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0)
fgetxattr(r2, &(0x7f0000000000)=@known='user.incfs.size\x00', &(0x7f00000006c0)=""/242, 0xf2)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180))
r5 = dup3(r4, r3, 0xe23a7afef348cd93)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000007c0)={0x87, 0x5, 0x8, 0x0, 0x0, [{{r4}}, {{r1}, 0x6}, {{r2}, 0x8}, {{r3}, 0x4}, {{r1}, 0x3}, {{r0}, 0x5da}, {{r5}}, {{r2}, 0x1}]})

3.322525735s ago: executing program 3 (id=546):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})

3.322231165s ago: executing program 33 (id=546):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})

2.718555757s ago: executing program 5 (id=549):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x10140, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$FIONCLEX(r4, 0x5450)

2.643745069s ago: executing program 4 (id=551):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r2=>0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)

2.538505651s ago: executing program 4 (id=552):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}, 0xc98}], 0x1, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0)
write(r4, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

2.402232833s ago: executing program 2 (id=553):
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0)
timer_create(0x5, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x3dc)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000151000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x3c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.350360475s ago: executing program 4 (id=554):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
socketpair(0x1f, 0x2, 0x6, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x8000, 0x13}})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x6e426000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65", 0xb}], 0x1)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
setgroups(0xd329779ad33ee0b6, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r3, 0x333, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x1c, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0})

2.258583316s ago: executing program 2 (id=555):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x95d9fe90de42831f)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xb)

2.255430896s ago: executing program 2 (id=556):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x3cde, &(0x7f00000003c0)={0x0, 0x48a1, 0x40, 0x2, 0x3a6}, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) (async)
r2 = socket$inet(0x2, 0x3, 0x6)
dup3(r1, r2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (async)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0xf580) (async)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})

2.222129777s ago: executing program 2 (id=557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b3c68855b36112b1be624190542ca34eda09f81439d5e479", @ANYRES16=r5, @ANYBLOB="000226bd7000fedbdf2501000000000000000c4100000031001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.140639069s ago: executing program 2 (id=558):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "2aac8ccbd1b0851b263ee5483bdeae474e9d9d7e6065ae5e06bba998857aaf1da65a2d3f25d4dcb6f240b457d2e41b9682eb046a634c1e087485f1cbfa03e60cb76b225d312cb1a95c93725e9838cc1369f0c5d67fdc9e664befb3ca6b09c9eea7210f2b16cf9c17f3a52bdc0f30bd09ead8c39eaa54fd759a8238cedd46ec5245312df46fb04f73a600ddab3052ec4abae491b94b34d53f2f69b82d67ea9575622f59b1671aab73441803a8256f55e0d3309e7c87478b9d24f35edbc62967d0763930ec907f00730c4c4926dcfd9f3391a4d70ddf68173cb43f3e7fe70b68321603a06b18add2d5eef89ede73b4c1e7a16dcaf0a9f75d6fe9d674f3ade7aedd4a39cc977d52f6f562d63c271e1b5399d828bbc7e8b3d238bb50871661ef6d2cee4a9a3e523167e395133dd4df2994a9d6958064229ed366ce5dd0f256c6cdf18bfda9da68cda4cd1443e8a8f67953c5b24258f1ccd9e514ed186c507bddd2477a9d6e953298c145c8a974f05c0ae2637ee01198d7f94de7ecbc0bb2d084c804f72e7393162f86fc7202e8395df0213bc5e1e0da856132ae00a649fc7a3a26a8a5b022a48dbfe81847ae08706c9c7366d5a16fb6ac68f0f436ad5fa0f289d74438a7c208c92bdc597fb2da2f19e222bde02b874e70e2f2a2a50b906f7fed4358450a8803950f68d7bdc3332fd645d03c61f177e0e602f69cc41772ccbdf70a35f5fdf313f5788f863ad5534d303b6dfe42fbffdd47efa0df5b7bf01dbd8e0038caa023b36e40988b5619d318c989a470d95bdd0ca9bb3610d19502d12c091256090d88d9345f9c89e1a24566e2536ad151a3e462160417319ba34979ac13fb7e713f0d2aa151f40b52d360a82e2a2420e4181bcffbe0f6c8007241fa6a0c2789beab1f366db4af3f28a114dd97eb1a4beffb99d7df3437fb8263cde23c44fcd8a6e73e1107360b8e417204e135464d8f996b86a1812c253408fb78737a368b1b88e4cc8585487fe39961896ed1b093c21cfc456c5dc6a177dcb881b776053468ee0d1ff7ffc05599a383b7c1c16b38fe3cd7c3d3386b4f974075f09a196cba336bbba2defa91763ab5c7bf973c12d8de66937a7a5a8116b47a98b01977970ce43772e78f5c4862ad2ca5a2cc1a5cc191dca2ae031c867c4cca9598ba2332bcba7379c7f5b97c91240870737686edf1b3c4d4fd32d091cf865f5596f24d9130b40a1e3a62b40dfa7908d8cb679400add3a72d06f6dd738aaf5cdae9c2979c56136a7f566d0062c38cdb3e472024ffb6fe1e3e1042d4411a7d9cf9936aa464dda64898d602a584024c3f6b0cc45c9009af1bffd80bebec4bf8a6aec280bf078dc82c0700b8394271eedd7debd57e5c9a09fb997da37fd3306ca0a51459f299b48bf0908f5c9be3c31379c4f1dea89841fa49cee8a459316e553fed7f31fbe714de"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

1.866470044s ago: executing program 5 (id=559):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="00101e5738"]}]}, 0x24}], 0x1}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r2)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r4, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240))
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0x4, &(0x7f00000001c0)=""/4}, {0x10000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.866257664s ago: executing program 5 (id=560):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32], 0x24}}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"])
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x6], 0x80a0000, 0x2010d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

989.847371ms ago: executing program 5 (id=561):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x29, 0x8f, 0x2, 0x9, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x7800, 0x400, 0x5}})
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newchain={0x22e4, 0x64, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2}, {0xfff2, 0x6}, {0xc, 0xffff}}, [@f_tcindex={{0xc}, {0x18e4, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xaeb7}, @TCA_TCINDEX_POLICE={0x85c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x304, 0x2, 0xe5, 0x9, 0x8, {0x6, 0x1, 0x4, 0xa, 0x1, 0xe}, {0x9, 0x0, 0x6, 0x0, 0xb17, 0x3}, 0xd4c, 0xc45b, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa9c4, 0x7ff, 0x9, 0xe, 0x0, 0xc57, 0xc, 0x297, 0x0, 0xffffa0c9, 0x9, 0x5, 0xd, 0x5, 0x8, 0x8000, 0x4, 0x7, 0x6, 0x4, 0x4, 0x2, 0x8, 0x8, 0x6, 0x0, 0x2, 0x6, 0x4, 0x401, 0x80, 0xffffffff, 0xa0, 0x0, 0x8, 0x8, 0x5, 0x0, 0xd038813, 0x9, 0x6, 0x2, 0x8, 0x5, 0x5, 0x3, 0x5, 0x1000, 0x6, 0x9, 0x3, 0x1d27, 0x1ff, 0x3, 0x7, 0x40, 0x1, 0xa, 0xff, 0x1ff, 0x7f, 0xae0, 0x7, 0x3, 0x48d87bc1, 0x8a, 0x5, 0x10000, 0x5, 0x6, 0x7298, 0x3, 0xff, 0x1eb, 0x7, 0x2, 0x3, 0x0, 0xa00, 0x9, 0x80, 0x8, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x6, 0x4, 0xf, 0x0, 0x7ff, 0xe1510676, 0x10000, 0x4, 0xffff6556, 0x10000, 0x20, 0x8000, 0x7, 0x5, 0x2d0, 0x6, 0x7ff, 0x7, 0x8, 0x3, 0x8001, 0x400, 0x1, 0x9, 0xd, 0x2, 0x3ff, 0xb83, 0xfffeffff, 0x5, 0x1, 0x7, 0x4, 0x9, 0x4, 0x1, 0x738c, 0x0, 0x3, 0x5, 0x6, 0x1, 0x0, 0x6, 0x2, 0x8, 0x21a, 0x0, 0x5, 0x0, 0x7, 0x4, 0x82d, 0x40, 0x86e2, 0x4, 0x6, 0x9, 0xb, 0x8, 0x7, 0x16, 0x4, 0x8, 0x2, 0x5, 0x1000, 0xa579, 0xc, 0x3, 0x9, 0xfffffff9, 0x3, 0x90, 0x2, 0x80000000, 0x2e, 0x3, 0xffffffff, 0x3, 0x6f, 0x8, 0x7, 0x200, 0xd, 0x5, 0x2, 0x3, 0xffff, 0x0, 0x0, 0x4, 0xfffffff8, 0x5, 0x6, 0x8, 0x7f, 0x9422, 0x9, 0x2, 0x1020000, 0x1ff, 0x8, 0x80, 0x276a, 0x7f, 0x0, 0x9, 0x8, 0x7fff, 0x2, 0xc81e, 0x3, 0xd, 0x7b8, 0x8, 0x7, 0x2, 0x4, 0x1ff, 0x80b, 0x9, 0x8, 0x3, 0x88, 0x2, 0x8, 0x8, 0x2, 0x1f61, 0x4, 0x3, 0x9b1, 0x1000, 0x7, 0x1, 0xfffffffc, 0x3, 0x10, 0x6, 0xffff, 0x1, 0x8000, 0x0, 0x10001, 0x8, 0x2, 0x4, 0x6, 0x7, 0x6, 0x3, 0x1, 0x7, 0x1, 0x7, 0x9, 0xc18e, 0x5, 0x15, 0x9, 0x2, 0x4, 0x1, 0xfffffffa, 0x3, 0x401, 0x9, 0x44db]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x9f, 0x0, 0xf2a, 0x8001, 0xffffffff, 0x160a, 0x7, 0x10000, 0x5, 0x9, 0xb, 0x0, 0x6, 0x6, 0x3, 0x0, 0x28, 0x7ff, 0x7, 0xe, 0x6, 0x10, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1ff, 0x7, 0x5, 0x8, 0xdbb960e, 0xe, 0x0, 0x2, 0x8, 0x10000, 0x3, 0x8, 0x9, 0x0, 0x4db, 0x2a409faf, 0x4, 0x2, 0x5, 0x5, 0xcb, 0x100, 0xa, 0x7, 0x7, 0x1, 0xb463, 0xa6d, 0x1, 0x9, 0x9, 0x6, 0x4, 0x76, 0x6, 0x6, 0x4, 0x4, 0x0, 0x7fffffff, 0x7fffffff, 0x3, 0x8, 0xd, 0x4, 0x0, 0x2, 0x2, 0x2, 0x3, 0x5, 0x5, 0x3, 0x0, 0x9, 0x99, 0x8, 0xf, 0x31, 0xd837889, 0x8001, 0x4, 0xfff, 0xc, 0x769, 0x10000, 0x91e, 0x1, 0x6, 0x3, 0x5, 0x414, 0x81, 0x2, 0x80, 0xe039, 0x7, 0x87c1, 0x8, 0xfff, 0x100, 0xa, 0xf, 0x3, 0x5, 0x10, 0x4, 0x0, 0x2, 0x8, 0x6, 0x7e0, 0x8, 0x5, 0x1, 0x2, 0x79c, 0x8001, 0xfffffffa, 0x7f, 0x0, 0xe0a, 0x6, 0x9, 0x1a, 0xffc1, 0xf61, 0x4, 0x8, 0x6d7, 0x5, 0x632, 0x400, 0x9, 0x3, 0x7, 0x1, 0x0, 0x7, 0x0, 0x87d4, 0x4, 0x6, 0xfffffff7, 0xff, 0x6, 0x40, 0xffffffff, 0x0, 0x5, 0x7ff, 0x1000, 0xfffffffb, 0x56, 0x4, 0x5c, 0x2, 0x1, 0x1, 0x81, 0x0, 0x80000, 0x6127, 0x4, 0x5, 0x9, 0x1, 0x0, 0x3, 0x4, 0x91, 0x5, 0x39e8411, 0x7, 0xfffffffb, 0x2, 0x33, 0xe, 0xf93, 0x9, 0xfffffffb, 0xf4, 0xd44, 0x5, 0x5, 0x68, 0x7, 0x2, 0x8, 0x8, 0x7, 0x80, 0x4, 0x9, 0x3, 0x8, 0x3, 0x3, 0x80000000, 0x2, 0x5, 0xffc0, 0x7, 0xa518, 0x121, 0xffff0000, 0x3, 0x1, 0x1, 0x7, 0xfffffff8, 0x5, 0xc, 0x7, 0x7b, 0xfffff800, 0x7, 0x0, 0x2, 0xd, 0x0, 0x10000, 0xb47, 0x3, 0x8, 0xfffffff0, 0x4, 0x101, 0x527f, 0x3, 0x2, 0xffff, 0x8, 0x5, 0x80000001, 0x4, 0x6, 0x58, 0x9, 0x850d, 0x3, 0xffffffff, 0x6846, 0x96f8, 0x0, 0x9, 0x1000]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x31be}, @TCA_TCINDEX_POLICE={0x106c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2000, 0x3, 0x3, 0xf4, 0x700, 0xfff, 0xb, 0x3ff, 0x360, 0x3, 0x10, 0x2, 0x0, 0x38fc, 0x6, 0xfffffff9, 0x0, 0x6, 0x4e, 0x1, 0x6, 0x8, 0x1, 0x4, 0x0, 0x1, 0xff, 0x4, 0xf1a, 0x9, 0x0, 0x7, 0xe, 0x3, 0x9, 0x460, 0x100, 0x10000, 0xe8c, 0x7, 0x3, 0x3, 0xff00000, 0x7, 0x18000, 0x4, 0x3, 0x3, 0x8, 0x5, 0x100, 0x4, 0x8, 0xe, 0x3, 0x6, 0x8, 0x6, 0xffff, 0x3, 0x2, 0x400, 0x3, 0x6, 0x80000000, 0x8001, 0x0, 0xff, 0x100, 0xa0, 0x3, 0x5, 0x0, 0x5, 0x200, 0x36, 0x4, 0x4, 0x5, 0x2, 0x0, 0x4, 0xffffffff, 0x8, 0x1, 0x9, 0xefc5, 0x1, 0x2, 0xc, 0x80, 0x24c, 0x3, 0x1, 0xfffff1d0, 0x6, 0xe4, 0x4, 0x1000, 0x4, 0x6, 0x5, 0xffff, 0x4f6, 0x1, 0x2, 0x92, 0xce, 0x7, 0x2, 0x2, 0xffff, 0x3, 0x4, 0x2, 0x6, 0x400, 0x0, 0x3, 0x81cf, 0x6, 0x7, 0x1, 0x1, 0x5, 0x590e, 0x0, 0x3, 0x200, 0xa, 0xfffffff1, 0x2, 0xbf86000, 0x4, 0x3, 0x0, 0xc4f8, 0x6, 0x10000, 0x6, 0xfffffff0, 0xfffffff7, 0xfff, 0x5, 0x3, 0x6, 0xe00f, 0x6, 0x4, 0x8, 0x8, 0x2, 0x6, 0x7f0000, 0x49, 0x2, 0x5, 0xf, 0x0, 0x5, 0xf, 0xe484, 0x1, 0x8, 0x9, 0x1, 0x7, 0x9, 0x8, 0x100, 0x6, 0x7f, 0xda5e, 0x5, 0xa77, 0x0, 0x3, 0x1000, 0xffffffff, 0x1000, 0x9, 0x6, 0x7, 0x0, 0x3, 0x7, 0x6, 0xf5, 0x9, 0xe1, 0xff, 0x3ff, 0x0, 0xc, 0x0, 0xffffb09f, 0x5422, 0x8, 0x9, 0x1, 0x7, 0xfffff001, 0x9, 0x0, 0x96, 0x6, 0x400, 0x5, 0x3, 0x3, 0x7, 0x9, 0x22, 0x9, 0x7fff, 0x3ff, 0x2, 0x3, 0x1ff, 0x9, 0x80, 0x0, 0x6, 0x5eaa, 0x7, 0x7ec6, 0x310283be, 0x7, 0xa, 0xff, 0x3, 0x7, 0x1000, 0x7, 0x7, 0x8, 0x9, 0x77aeaab0, 0xc000, 0x1d, 0x2, 0x400, 0x9, 0x8000, 0x9af, 0xd, 0x8, 0x644, 0x5, 0x6, 0x401, 0xb, 0x2, 0xd89, 0x4, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc587, 0x8, 0x5, 0x101, 0x101, 0x3, 0x90, 0xfbab, 0x9, 0xfffffffa, 0x3, 0x0, 0x101, 0x2, 0x1000, 0x1, 0x4, 0x1, 0x9, 0x4, 0x1, 0x1, 0x8, 0xfffffe00, 0x2, 0x2, 0x9, 0xfff, 0x6, 0xfffffff9, 0x3, 0x8, 0x4, 0x6, 0xf, 0x0, 0x8, 0xc4c, 0x3, 0x6, 0xb833, 0x382, 0x5, 0x6, 0x8, 0x3a9f, 0x1, 0x355, 0x5, 0x100, 0x6, 0x9, 0x7, 0x10, 0x1, 0x7, 0x9, 0x400, 0x401, 0x10000, 0x1, 0x0, 0xa, 0x200, 0xc, 0x6, 0x3208, 0x2, 0x2, 0x0, 0xce24, 0x7fffffff, 0x4, 0x0, 0x5, 0x7fffffff, 0x8000, 0x3, 0x81, 0x6, 0x5, 0xb, 0x5cf948c7, 0x914c, 0xfffffff4, 0x4, 0x3, 0x48, 0x400, 0x1, 0x9, 0x2, 0x6, 0x3ff, 0x2, 0x8, 0x7e3d, 0x5a70, 0x8, 0x9, 0x16e2, 0x100, 0xb, 0x0, 0x1, 0x5, 0xe66, 0x6, 0x4, 0x478, 0x45, 0x0, 0x100, 0xe40, 0x3015, 0x2880, 0xffff045f, 0x5, 0x17de4445, 0x2, 0x5, 0xa85, 0x6, 0x409916f6, 0x1, 0x2, 0x8000, 0x7, 0x9, 0x2, 0x1, 0x8, 0x5, 0x1, 0x1, 0xa, 0x7fffffff, 0x0, 0x3, 0x8, 0xff, 0xdb, 0x5, 0x3, 0xf4dc, 0x5b, 0x7, 0x7, 0x9, 0x9, 0x4, 0xde9, 0x7fff, 0xfffff801, 0x7, 0x34366253, 0x3, 0x80000000, 0xc, 0x16e2, 0x5, 0xb000, 0x2, 0xfffffffa, 0x9, 0x5, 0x1, 0x9, 0x4, 0x9, 0x1, 0xc, 0xc6, 0xfd6, 0x6, 0x7, 0x1, 0xfffffffc, 0x3, 0x715, 0x9, 0x9, 0x8, 0x7ff, 0x6, 0xf4a00000, 0x7, 0x80000000, 0x0, 0x6, 0x80000000, 0x6, 0x7ff, 0x80, 0x2, 0x6, 0xd, 0xb, 0xfffffffc, 0x69b, 0x6, 0x100, 0x80, 0x7fffffff, 0xd9, 0x4e, 0x9, 0x3, 0x10001, 0x8, 0x5, 0x851, 0x6, 0xc, 0xe, 0xfffffffd, 0xfff, 0x2, 0xfffffffc, 0x80, 0xfffffffd, 0x4, 0x8, 0x200, 0x1, 0x68d, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x0, 0xac1, 0x10, 0x9, 0xe, 0x2, 0x7, 0x400, 0x1, 0xef, 0x2, 0x10, 0x1ff, 0x2, 0xfffffff7, 0x1, 0xcd4, 0x7, 0x2, 0xd, 0xabd, 0x2, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xffffffff, 0x8, 0xffff, 0x0, 0x1, 0x81, 0x9, 0x100, 0x3, 0x401, 0x400, 0x3, 0x1, 0x101, 0x8, 0x3, 0xf8, 0x83, 0xafa, 0x678, 0x1, 0x2, 0x0, 0xffffffff, 0x8, 0xfffffffb, 0x7, 0x5, 0x10001, 0x8, 0x1000, 0x2, 0x9, 0x4, 0x2a3, 0x4, 0x9, 0x8, 0x2, 0x9, 0x0, 0x3, 0xff, 0x800, 0x4, 0x0, 0x81, 0x1, 0x5, 0x8, 0x7ff, 0x4, 0x5, 0x800, 0x3, 0x4, 0x10001, 0x280, 0x4e, 0x6, 0x8, 0x7fff, 0x75, 0x7, 0x5, 0x8, 0x4e, 0x40, 0xfff, 0xebc821c, 0xff, 0x1, 0x8, 0x8, 0xfff, 0x6000, 0x3ff, 0xffffff81, 0x3, 0xe94, 0x80000000, 0x2, 0x8, 0x1, 0x7, 0x0, 0x2, 0x2, 0x8, 0x10, 0x7, 0x3, 0x0, 0x1, 0x2, 0xfffffffb, 0x5, 0x401, 0x0, 0x8, 0x9, 0x8, 0x61, 0xb, 0x15, 0x0, 0xfffffffc, 0x4fe, 0x7, 0xfffffff3, 0x0, 0xe69e, 0x2, 0x0, 0x8001, 0x9, 0x8, 0xc, 0x4, 0x9, 0x100, 0xb1e8, 0x8, 0x7, 0xa, 0x81, 0xd0f, 0x7, 0x400, 0x80, 0x80000001, 0xffff, 0x2, 0x7, 0x101, 0x7, 0x7, 0x0, 0x4, 0x14, 0xffffff80, 0x4, 0x1, 0x6b5, 0x1, 0x80, 0x8, 0x7, 0x7, 0x7f, 0x2, 0xff, 0x101, 0x8251, 0x1, 0x54, 0x43, 0x9, 0x40, 0x5, 0x8, 0x1ff, 0x101, 0x40, 0x400, 0x8, 0xffffff99, 0x8, 0x5, 0x400, 0xd588, 0x1000, 0x6, 0x5, 0x3, 0x0, 0x9, 0x0, 0x4, 0x2, 0x80000001, 0x7, 0x9, 0x2, 0x98, 0x283, 0x0, 0x2, 0x1, 0x6, 0x1ff, 0x9, 0x8, 0x7, 0x80000000, 0x1, 0x2, 0x5f, 0x6, 0x80000001, 0x2, 0x80000001, 0x0, 0xc4, 0x10001, 0x3, 0x6, 0x2, 0x8, 0x4, 0x9, 0x2, 0x4759, 0x8, 0xf, 0xf1, 0x7, 0x2, 0x400, 0x55b2, 0x3, 0x8, 0xffffffe1, 0x6, 0x8, 0x9, 0x9, 0x200, 0x10, 0x6, 0x4, 0x3, 0x5, 0x6, 0xecf, 0xff, 0x3fb0, 0x0, 0x9, 0x5, 0x0, 0xfb, 0x0, 0x8001, 0x3, 0x3, 0x3, 0x163, 0xa4a, 0x5, 0x7, 0x7, 0x80, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x7, 0x8, 0x2, {0x5, 0x2, 0x7e, 0xfffe, 0x5, 0x2}, {0x10, 0x2, 0x6, 0xb6, 0xf, 0x7}, 0xe, 0x6, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x6, 0x873, 0x6, 0x8, 0x7f, 0x1, 0x3b, 0x6, 0x5, 0x7, 0x9d5, 0x9, 0xfffffffb, 0x1, 0x3, 0x140, 0x76, 0x0, 0x4, 0x1, 0x6, 0x5, 0x678a4c3a, 0x6, 0x80, 0xffff116a, 0xf, 0x0, 0x5, 0x7, 0x2, 0x40, 0x9, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x8, 0x3, 0x9, 0x80, 0xae, 0xffffff2b, 0x8, 0x3, 0x7, 0x0, 0x1, 0x0, 0x4, 0x10000, 0x80, 0xd, 0x5, 0x181e6e3e, 0x0, 0x1, 0x9, 0x4, 0xb7b, 0x0, 0x2, 0x2c0, 0x411, 0x0, 0x8, 0xffffffff, 0x81, 0xf, 0x5, 0xfff, 0x10, 0x5, 0x645, 0x3, 0x7, 0x7fffffff, 0x2, 0x5, 0x800, 0x7ff, 0x0, 0xd, 0x3, 0x7, 0x8, 0x10000000, 0xa9, 0x80000001, 0xa4e, 0x2, 0x6, 0x1, 0x4, 0x3, 0x8, 0x7737, 0x3ff, 0xf, 0x3, 0xb, 0x0, 0x8, 0x4, 0xd5e, 0x8001, 0xfffffeff, 0x4, 0x4, 0x80000001, 0xebf, 0x1, 0x7, 0xfffffffd, 0x7, 0x6, 0x4, 0xff, 0x3, 0x80000000, 0xd, 0x7, 0x5, 0x2, 0x0, 0x958a, 0x6, 0x1, 0x5, 0x4, 0xec0, 0x0, 0x1, 0x875b, 0x8, 0x8, 0x20, 0x1, 0x8, 0x3ff, 0x8, 0x2, 0x9d8, 0x7fff, 0x9, 0x3, 0xffffffff, 0x56937b38, 0x3, 0x100, 0xfa, 0x0, 0xf, 0x3, 0x8, 0xf, 0x401, 0x1, 0x11, 0x10001, 0x80000000, 0x5, 0x80, 0xc, 0x7, 0x3, 0x6a, 0xca, 0x0, 0x166301cf, 0xfb, 0x3, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x6c2, 0x8000000, 0xff, 0x44, 0x4, 0x10000, 0xfffffff6, 0x5, 0x6, 0x5, 0x4, 0x5, 0x6, 0x800, 0xcf, 0x5, 0x0, 0xfffffffb, 0x58600, 0x7ff, 0x1ff, 0x8, 0x5da5cba0, 0x4, 0x6, 0xffffffff, 0x528, 0x0, 0x43c0, 0x401, 0x7, 0x7, 0x842e, 0x9, 0x1, 0x1, 0xcae, 0x2, 0x0, 0x7fffffff, 0x7, 0x1, 0x7, 0x5, 0x200, 0xfffffffe, 0xfffffd62, 0x7, 0x101, 0x7, 0x100, 0x3395, 0x2, 0x0, 0x1000, 0x5, 0x7fff, 0x1, 0x7fff, 0x8, 0xb5, 0x6, 0x2, 0x10000, 0x10000, 0x1, 0x9, 0x2, 0x9, 0x7fffffff, 0x4, 0x19, 0xf, 0x0, 0x11ff2ae7, 0x80000001]}]}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe6cd}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff8, 0xfff1}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x97dd}]}}, @f_rsvp={{0x9}, {0x994, 0x2, [@TCA_RSVP_POLICE={0x868, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0xffffffffeffffffc, 0x8, 0x0, 0x5, {0x3, 0x2, 0x5, 0x1ff, 0x3, 0x100}, {0x10, 0x0, 0x100, 0x40, 0xf, 0x2}, 0x3019, 0x80000001, 0xc307}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffa, 0x81, 0x4, 0x1, 0x4, 0x100, 0x7ff, 0x0, 0x4, 0x5, 0x8, 0x7, 0x0, 0x5, 0x5, 0x5b5f, 0x9, 0x1, 0x5, 0x7f, 0x7, 0x1, 0x8, 0x9, 0x6, 0x8, 0x0, 0x5, 0x0, 0x6, 0xa498, 0x3, 0xffff, 0x101, 0x0, 0x10000, 0xae1, 0xe6, 0xe78d, 0xd, 0x8, 0x5, 0xff, 0xfffffffe, 0x8, 0x6, 0x4000000, 0x3, 0x4d583f31, 0xfffff801, 0x1, 0xa21, 0xfffffffb, 0x3, 0x3, 0x7, 0x200, 0x9, 0x6, 0x6, 0x9448, 0x0, 0x6, 0x2, 0x2, 0x400, 0x9, 0xe, 0x101, 0x421, 0x100, 0x0, 0x740, 0x6, 0xfff, 0x9, 0x400, 0x1, 0x3, 0xa2, 0x7, 0x3ff, 0x6, 0x9, 0x5, 0x5, 0x4, 0x1, 0xfff, 0x37, 0x7, 0x7f, 0x6, 0x80, 0xbf, 0x100, 0x80, 0x6, 0x8, 0x1a000, 0x5, 0x3, 0x86, 0x4, 0xdfc, 0x6, 0x3000, 0x8, 0x58, 0xfb36, 0xffff815a, 0x7ff, 0x4, 0x9, 0x9, 0x0, 0x3, 0xe8, 0x8, 0x4, 0xc8000000, 0x7, 0xb4, 0x2, 0xae, 0xfffffffa, 0xfffffff9, 0x6, 0x0, 0x8, 0xb, 0x4, 0xf, 0xa1b8, 0x0, 0x3ff, 0xd, 0xf6b, 0x3, 0x1, 0x3, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x8, 0x6, 0x9, 0x7, 0x4, 0x4, 0x40000000, 0x1, 0xd, 0x5, 0x80000001, 0x501b, 0x6, 0x8000, 0xb, 0x4, 0x0, 0x5, 0x88b2, 0x9, 0x9, 0x7, 0xc0, 0x1, 0x7, 0x9, 0x5, 0x8001, 0x3, 0xfffffffe, 0x7, 0x3, 0x1, 0x1, 0x3, 0x2, 0x100, 0x7, 0x5f, 0x3, 0x8, 0x4, 0x0, 0xa, 0x8, 0x9, 0x4, 0x55, 0x3, 0x2, 0x1, 0x459d, 0xfda, 0x8000, 0x5, 0xfc49, 0x8, 0xbb, 0x803, 0x7, 0x5, 0x8, 0x2847, 0x6, 0xff, 0x3ff, 0x0, 0x6, 0x7, 0x5, 0x1, 0x8000, 0x4, 0x8001, 0xd1, 0x9, 0x4, 0x7fc, 0xfff, 0x6, 0x5, 0x9, 0x401, 0x8, 0x5, 0x7, 0x4, 0x4, 0x8, 0x8, 0x5, 0x5, 0x3, 0x9, 0x7ff, 0x80, 0x2, 0x1b50, 0x0, 0xffff, 0xffffffff, 0x2a4, 0x8, 0x1ff, 0xfe, 0x7, 0x9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x2, 0x9, 0x9, 0xfff, 0x2e2, 0x3, 0x3, 0xff, 0x6, 0x7f, 0x1, 0x100, 0xfffffffc, 0x6, 0x3, 0xfffff4b2, 0xb121, 0x0, 0x8, 0x430d17c0, 0xfffffff7, 0x8, 0x15, 0x80000000, 0x3, 0xbb5f, 0x6, 0x4, 0x80000001, 0x20, 0x3, 0x2, 0x68, 0x2, 0x3ff, 0x1, 0x27, 0x8, 0x0, 0x1, 0xfffffff9, 0x90, 0x3, 0x400, 0xc7e, 0x6, 0x9, 0xadd9, 0x5, 0x9, 0x6, 0x4, 0xfffffe49, 0xff, 0x1, 0x6, 0x8, 0x1, 0x7, 0xffff816a, 0x8, 0xfffffd59, 0x8, 0x8, 0x7fffffff, 0xa3, 0x6, 0x3, 0x10001, 0x10001, 0x9, 0xb97, 0x6, 0x3, 0x5b71, 0x0, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x1, 0x101, 0x1, 0x3, 0xb54d, 0x2, 0xc8, 0xb54a, 0x10000, 0x8, 0x10, 0x7, 0x0, 0x6, 0x7, 0xb, 0x2, 0x61, 0xffff, 0x0, 0x1, 0x1, 0xc, 0x2, 0x6, 0x400, 0xbd, 0x2, 0xcda, 0x2, 0xfeef, 0xe0000000, 0x9f64, 0x80000000, 0x0, 0x1c3, 0x9, 0x74d, 0xe0000000, 0xe91, 0x7fff, 0x7, 0x9, 0x8, 0x0, 0x4, 0x5, 0x200, 0xf9a, 0x1a0f, 0x3, 0x0, 0xfffffffd, 0x4, 0x1103, 0x0, 0xfffff6d8, 0x7, 0xb, 0x9, 0x62, 0x1, 0x81, 0x9, 0x4, 0x1, 0x3, 0x8, 0x7, 0x6, 0x80000000, 0x6, 0xaca, 0xe651, 0xffff835f, 0x7, 0xbeb9, 0x1, 0x8, 0x0, 0xffff63e6, 0xf, 0x2, 0x6, 0x0, 0x9, 0x3a, 0x2, 0x2, 0xb, 0xffff, 0x407c, 0xa, 0xffff, 0x5, 0x100, 0x1bb, 0x7f, 0xf, 0x800, 0x0, 0x2, 0x7f, 0x4, 0x4, 0x9, 0x2, 0x8, 0x0, 0x5, 0x5, 0x28, 0x6, 0xffff, 0x2, 0x1, 0x10000, 0x7ff, 0x3, 0x3ff, 0x9, 0x28, 0x1, 0x2, 0x80, 0x4, 0x10000, 0x0, 0x5, 0x80, 0xfffffffb, 0x9, 0x5, 0x1, 0x8e, 0x0, 0x7ff, 0x3, 0x3fe00, 0x5, 0x10, 0x5, 0x7, 0x80000000, 0x7, 0x4, 0x4, 0x2, 0x5, 0xb, 0x7, 0x6, 0x397, 0xb, 0x4, 0x8, 0x1, 0x5343, 0x0, 0x4, 0x4, 0x400, 0x400, 0xfffffffd, 0xff, 0x8, 0xcd8ecc10, 0x2, 0x7, 0x0, 0x80, 0x5, 0x2]}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x5}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0xffffffff, 0x800}, {0x1, 0x2, 0x1}, 0x5e, 0x3, 0x6}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_POLICE={0xd0, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x4069, 0x3, 0x7f, {0x4, 0x0, 0x1, 0x2, 0x1, 0x40}, {0x40, 0x1, 0x8, 0x0, 0x6}, 0x2, 0x7f1, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6832}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x400, 0x6, 0xb, {0xa2, 0x2, 0x0, 0x88, 0x4, 0x14000}, {0x8, 0x1, 0x3, 0x0, 0x1, 0x6}, 0x6, 0x56, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x7, 0x3, 0x2, {0x10, 0x2, 0x2, 0xc, 0x625, 0x1}, {0x6, 0x1, 0x0, 0x6, 0x80, 0x73d}, 0xe2, 0x9, 0x800}}]}]}}]}, 0x22e4}}, 0x81)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

986.018511ms ago: executing program 4 (id=562):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}, 0xc98}], 0x1, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0)
write(r4, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

918.429313ms ago: executing program 5 (id=563):
socket$inet(0x2, 0x5, 0x6)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ftruncate(r5, 0xc17a)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
lseek(r5, 0x2000, 0x4)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000bb6b6e00010000000000000044000500e0000002000000000000000000000000000000003c0000000200000000000000000000000000ffff6401010206000000040100000000000000000000000000007c807370e6e8d0b9f79122a1db4b20d930a7b02730ce5f9fb924107f1935ef28ea3975228d06d33e183d5a66572935501b"], 0xfc}, 0x1, 0x0, 0x0, 0x4040800}, 0x48110)
socket$nl_audit(0x10, 0x3, 0x9)
inotify_init1(0x40000)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c)
pipe2$9p(&(0x7f0000000000), 0x84800)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000680))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#\xba', 0x3a, './file0'}, 0x2a)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0xc, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})

817.135414ms ago: executing program 5 (id=565):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000740)={0x1f, @none}, 0x8)
listen(r3, 0x2)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x400000042, 0x1, 0x1ff, 0x5, 0x85, 0x70a, 0x4, 0x1, 0x80000001, 0x20010000000000, 0x5, 0xb, 0xffffffffffffffea, 0xe6, 0x100000000000001], 0x3000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
listen(r6, 0xfffffff2)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0xe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r9, 0xa0e4f000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

716.318736ms ago: executing program 4 (id=571):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
close(0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xfffffe01, 0xa3, 0x7, 0x10, 0x52})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002740)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x300, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x30}, @fda={0x66646185, 0x2, 0x2, 0x3d}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async)
close(0xffffffffffffffff) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xfffffe01, 0xa3, 0x7, 0x10, 0x52}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002740)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x300, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x30}, @fda={0x66646185, 0x2, 0x2, 0x3d}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) (async)

666.210347ms ago: executing program 4 (id=573):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r2, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040f30455070000200000010902240040b10904000001030001000921010100d3dd6ee95c536b5cb63c030122050009080003ff030c00"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="571807"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x768943b6b926b3ed)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000001c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
copy_file_range(r7, &(0x7f00000008c0)=0x4, r4, 0x0, 0x8, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x47)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "8e14d523940a5348a45f2f5131c32826"})

121.737028ms ago: executing program 1 (id=583):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0xb, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x5], [0x74a]}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r2=>0x0})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f0000000080)=""/147)
r3 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
mmap(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x44da1000)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

83.019178ms ago: executing program 1 (id=584):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000000)="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", 0xfc, 0x4010, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x2199, 0x3, 0x8000, 0x3, 0x40]}, &(0x7f00000001c0)=0x54)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = syz_clone(0x200800, &(0x7f0000000280)="150e3c30f07e133942378882efbacb95a7e0c03ba25a6cca40e0639d7335107776e0980922279022f3f2487a1c0a43c8a5a9e4e34d2c", 0x36, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f21f59a62e8df5111e0ae4f65de3d1da2bd9a1458bcaea4b6ea00adafb94")
sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0x1}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xe3, 0x0, 0x0, @pid=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000840)={0xaf, 0x7, &(0x7f0000000440)})
sendmsg$AUDIT_GET(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000980)={0x10, 0x3, 0x96cf, 0x3, 0x323})
r3 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = request_key(&(0x7f00000009c0)='cifs.spnego\x00', &(0x7f0000000a00)={'syz', 0x1}, &(0x7f0000000a40)='&/)\'-\')\x00', r3)
readv(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/144, 0x90}, {&(0x7f0000001d40)=""/38, 0x26}], 0x5)
r5 = request_key(&(0x7f0000001e00)='blacklist\x00', &(0x7f0000001e40)={'syz', 0x2}, &(0x7f0000001e80)='*.\x00', r4)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001ec0)={r5, 0xd2, 0x36}, &(0x7f0000001f00)={'enc=', 'oaep', ' hash=', {'rmd320-generic\x00'}}, &(0x7f0000001f80)="d5af758a4b48a5fdba7bca05a21a30e19abc43a65fcca32e17518b6b1ea0c181e3a036d1a0da2ac09899847fca07a087be297964c8c13a7b809788a3332aa37e87e7915a52f62321010249d719b6cacd9a96a8a5915e10e55674afe84b73fdcc6f26082c0969f19623611041e6c244149f87c0e71fcae499c76388c67003836be34df9287376c5b57971e75225e8dfe507902a104cd4dca4862b5c12792c5cbbd490dded798f553c1e68081aba15416b7f4ee1ba1abbe31d425665ceae7c462b59591bf9adabd6f82f97c4216a094ad02ea5", &(0x7f0000002080)=""/54)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
add_key$fscrypt_v1(&(0x7f0000002200), &(0x7f0000002240)={'fscrypt:', @desc4}, &(0x7f0000002280)={0x0, "c301bbe28b8bccfae711e45064d25e4815eef59a72b6e14a61b7998fa6f17651b0d9f4fc2ddbeb1ca580b4190936b37f8cf2f0ed397b2ed85f917eeb68663c42", 0x28}, 0x48, r3)
keyctl$update(0x2, r4, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x28, r6, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
pipe2(&(0x7f0000002400)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522)
syz_create_resource$binfmt(&(0x7f0000002440)='./file0\x00')
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), r9)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x910}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r10, 0x0, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002600), r7)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r11, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd98}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4080)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000002880)=0xe8)
mount$fuse(0x0, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740), 0x101000, &(0x7f0000002b00)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@euid_eq}, {@euid_eq}]}})

67.750039ms ago: executing program 1 (id=585):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="00637075736574200b696f05"], 0xc)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/125, 0x7d, 0x1)

14.58632ms ago: executing program 1 (id=586):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{@stats}]})

14.44307ms ago: executing program 1 (id=587):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r3, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f0000010000000000000200000000000000830000", 0x25) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = timerfd_create(0xf1f404c066d9f186, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
timerfd_settime(r4, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) (async)
listen(r0, 0x9) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x4c8040)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r6, 0x8, 0x100, 0x9})

14.2903ms ago: executing program 1 (id=588):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xc98}], 0x1, 0x2, 0x0)
recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0)
write(r4, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

0s ago: executing program 2 (id=589):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (rerun: 64)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x94822, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) (async)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x2) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) (async)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000580)=[@exit_looper], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.33' (ED25519) to the list of known hosts.
[   27.007474][   T36] audit: type=1400 audit(1757117360.020:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.009239][  T282] cgroup: Unknown subsys name 'net'
[   27.030357][   T36] audit: type=1400 audit(1757117360.020:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.057562][   T36] audit: type=1400 audit(1757117360.040:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.057876][  T282] cgroup: Unknown subsys name 'devices'
[   27.223095][  T282] cgroup: Unknown subsys name 'hugetlb'
[   27.228761][  T282] cgroup: Unknown subsys name 'rlimit'
[   27.403813][   T36] audit: type=1400 audit(1757117360.410:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.427287][   T36] audit: type=1400 audit(1757117360.410:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.438181][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.452352][   T36] audit: type=1400 audit(1757117360.410:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.483940][   T36] audit: type=1400 audit(1757117360.470:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.509445][   T36] audit: type=1400 audit(1757117360.470:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.539410][   T36] audit: type=1400 audit(1757117360.540:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.565080][   T36] audit: type=1400 audit(1757117360.540:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.565253][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.438305][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.445459][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.452620][  T292] bridge_slave_0: entered allmulticast mode
[   28.458897][  T292] bridge_slave_0: entered promiscuous mode
[   28.469303][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.476437][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.483751][  T290] bridge_slave_0: entered allmulticast mode
[   28.490029][  T290] bridge_slave_0: entered promiscuous mode
[   28.503205][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.510451][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.517743][  T292] bridge_slave_1: entered allmulticast mode
[   28.524108][  T292] bridge_slave_1: entered promiscuous mode
[   28.530548][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.537601][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.544731][  T290] bridge_slave_1: entered allmulticast mode
[   28.551050][  T290] bridge_slave_1: entered promiscuous mode
[   28.560010][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.567120][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.574278][  T289] bridge_slave_0: entered allmulticast mode
[   28.580587][  T289] bridge_slave_0: entered promiscuous mode
[   28.599465][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.606555][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.613704][  T289] bridge_slave_1: entered allmulticast mode
[   28.620008][  T289] bridge_slave_1: entered promiscuous mode
[   28.682377][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.689446][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.696635][  T291] bridge_slave_0: entered allmulticast mode
[   28.702972][  T291] bridge_slave_0: entered promiscuous mode
[   28.709375][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.717042][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.724182][  T291] bridge_slave_1: entered allmulticast mode
[   28.730415][  T291] bridge_slave_1: entered promiscuous mode
[   28.852255][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.859322][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.866697][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.873759][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.914878][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.921975][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.929273][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.936340][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.947274][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.954361][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.961722][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.968844][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.978794][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.985884][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.993192][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.000225][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.035389][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.043229][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.050551][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.058108][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.065900][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.073204][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.080453][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.087796][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.111353][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.118430][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.126838][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.134054][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.148621][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.155719][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.163580][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.170706][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.193551][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.200698][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.215850][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.222940][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.231268][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.238420][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.253797][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.260971][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.309995][  T291] veth0_vlan: entered promiscuous mode
[   29.320447][  T290] veth0_vlan: entered promiscuous mode
[   29.334089][  T289] veth0_vlan: entered promiscuous mode
[   29.345345][  T292] veth0_vlan: entered promiscuous mode
[   29.356935][  T291] veth1_macvtap: entered promiscuous mode
[   29.383074][  T290] veth1_macvtap: entered promiscuous mode
[   29.392337][  T289] veth1_macvtap: entered promiscuous mode
[   29.408597][  T292] veth1_macvtap: entered promiscuous mode
[   29.419761][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.456709][  T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.524178][  T337] binder: Bad value for 'stats'
[   29.578721][  T340] =======================================================
[   29.578721][  T340] WARNING: The mand mount option has been deprecated and
[   29.578721][  T340]          and is ignored by this kernel. Remove the mand
[   29.578721][  T340]          option from the mount to silence this warning.
[   29.578721][  T340] =======================================================
[   29.661623][  T347] rust_binder: 6: no such ref 3
[   29.708140][  T352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.708219][  T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   29.718700][  T352] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   29.729435][  T352] rust_binder: Read failure Err(EFAULT) in pid:4
[   29.729671][  T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4
[   29.816886][  T362] raw_sendmsg: syz.2.14 forgot to set AF_INET. Fix it!
[   29.858953][  T365] overlayfs: failed to resolve './file1': -2
[   29.879949][  T366] rust_binder: 358 RLIMIT_NICE not set
[   29.888459][   T61] rust_binder: 357: removing orphan mapping 0:4248
[   29.928257][  T368] kvm: kvm [367]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   29.949260][  T368] kvm: kvm [367]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   30.170176][  T379] Zero length message leads to an empty skb
[   30.243662][  T384] netlink: 80 bytes leftover after parsing attributes in process `syz.1.21'.
[   30.623652][  T411] sock: sock_timestamping_bind_phc: sock not bind to device
[   30.643366][  T413] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false
[   30.643398][  T413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   30.652236][  T413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:14
[   30.807688][  T425] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.817685][  T424] rust_binder: 21: no such ref 3
[   30.820591][  T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.858895][  T424] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   31.010630][  T330] usb 4-1: Using ep0 maxpacket: 32
[   31.017064][  T330] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   31.025589][  T330] usb 4-1: config 0 has no interface number 0
[   31.034150][  T330] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   31.043801][  T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.052357][  T330] usb 4-1: Product: syz
[   31.061490][  T330] usb 4-1: Manufacturer: syz
[   31.066165][  T330] usb 4-1: SerialNumber: syz
[   31.084687][  T330] usb 4-1: config 0 descriptor??
[   31.092538][  T330] smsc95xx v2.0.0
[   31.148566][  T434] /dev/rnullb0: Can't open blockdev
[   31.267191][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   31.500592][  T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   31.511428][  T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   31.758629][  T452] 9p: Unknown Cache mode or invalid value mmap�
[   31.858762][  T457] fuse: Unknown parameter 'fdA�4�T�'
[   31.864421][  T457] fuse: Unknown parameter 'fdA�4�T�'
[   31.870075][  T457] fuse: Unknown parameter 'fdA�4�T�'
[   31.918405][  T461] x_tables: duplicate underflow at hook 1
[   32.001914][  T465] tipc: Started in network mode
[   32.006891][  T465] tipc: Node identity 4e45ee0dd65c, cluster identity 4711
[   32.022415][  T465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.082422][  T465] syzkaller0: entered promiscuous mode
[   32.098152][  T465] syzkaller0: entered allmulticast mode
[   32.109371][  T465] tipc: Resetting bearer <eth:syzkaller0>
[   32.121004][   T36] kauditd_printk_skb: 108 callbacks suppressed
[   32.121020][   T36] audit: type=1400 audit(1757117365.133:182): avc:  denied  { write } for  pid=464 comm="syz.1.47" name="file2" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.166006][   T36] audit: type=1400 audit(1757117365.153:183): avc:  denied  { open } for  pid=464 comm="syz.1.47" path="/15/file2" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.194236][   T36] audit: type=1400 audit(1757117365.153:184): avc:  denied  { ioctl } for  pid=464 comm="syz.1.47" path="/15/file2" dev="tmpfs" ino=102 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   32.440623][   T94] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   32.461697][  T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   32.480650][  T330] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[   32.501827][   T13] tipc: Resetting bearer <eth:syzkaller0>
[   32.600577][   T94] usb 2-1: Using ep0 maxpacket: 32
[   32.615681][   T94] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.636735][   T94] usb 2-1: config 1 interface 0 has no altsetting 0
[   32.652074][   T94] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40
[   32.670613][   T94] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.688859][   T94] usb 2-1: Manufacturer: и
[   32.700560][   T94] usb 2-1: SerialNumber: syz
[   32.878834][   T36] audit: type=1400 audit(1757117365.883:185): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   32.907329][   T36] audit: type=1400 audit(1757117365.913:186): avc:  denied  { create } for  pid=469 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   32.908907][  T470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.931167][   T36] audit: type=1400 audit(1757117365.933:187): avc:  denied  { map } for  pid=464 comm="syz.1.47" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.961366][  T465] __vm_enough_memory: pid: 465, comm: syz.1.47, bytes: 18014402804453376 not enough memory for the allocation
[   32.975666][  T464] tipc: Resetting bearer <eth:syzkaller0>
[   32.979014][   T94] usbhid 2-1:1.0: can't add hid device: -71
[   32.987784][   T94] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   33.002004][  T464] tipc: Disabling bearer <eth:syzkaller0>
[   33.003017][   T94] usb 2-1: USB disconnect, device number 2
[   33.200592][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.320607][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   33.320725][  T440] Bluetooth: hci0: command 0x1003 tx timeout
[   33.351774][   T36] audit: type=1400 audit(1757117366.363:188): avc:  denied  { bind } for  pid=474 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.372026][   T31] usb 1-1: Using ep0 maxpacket: 16
[   33.377915][   T36] audit: type=1400 audit(1757117366.363:189): avc:  denied  { setopt } for  pid=474 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   33.400652][  T481] loop2: detected capacity change from 0 to 7
[   33.407952][   T36] audit: type=1400 audit(1757117366.403:190): avc:  denied  { append } for  pid=479 comm="syz.2.51" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.409469][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.431353][   T31] usb 1-1: config 8 has an invalid interface number: 97 but max is 2
[   33.440357][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.448944][   T31] usb 1-1: config 8 has an invalid interface number: 94 but max is 2
[   33.456645][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.464762][   T31] usb 1-1: config 8 has an invalid interface number: 21 but max is 2
[   33.473568][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.482029][   T31] usb 1-1: config 8 has no interface number 0
[   33.489567][  T374]  loop2: unable to read partition table
[   33.496696][   T31] usb 1-1: config 8 has no interface number 1
[   33.508095][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.517291][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.525423][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.526033][   T31] usb 1-1: config 8 has no interface number 2
[   33.534609][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.540824][   T31] usb 1-1: config 8 interface 94 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 1024
[   33.549318][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.558977][   T31] usb 1-1: config 8 interface 94 altsetting 253 has an invalid descriptor for endpoint zero, skipping
[   33.567845][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.576256][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.588488][   T31] usb 1-1: config 8 interface 94 altsetting 253 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   33.595841][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.598325][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.607379][   T31] usb 1-1: config 8 interface 94 altsetting 253 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   33.614805][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.624102][   T31] usb 1-1: config 8 interface 21 altsetting 109 has an invalid descriptor for endpoint zero, skipping
[   33.636094][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.648489][   T31] usb 1-1: config 8 interface 21 altsetting 109 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   33.653844][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.663082][  T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   33.676418][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.698617][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.706748][  T481]  loop2: unable to read partition table
[   33.706778][   T31] usb 1-1: config 8 interface 21 altsetting 109 has a duplicate endpoint with address 0x3, skipping
[   33.723590][   T31] usb 1-1: config 8 interface 21 altsetting 109 has an invalid descriptor for endpoint zero, skipping
[   33.723753][  T481] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   33.738450][   T31] usb 1-1: config 8 interface 97 has no altsetting 0
[   33.749358][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   33.755939][   T31] usb 1-1: config 8 interface 94 has no altsetting 0
[   33.764036][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   33.771011][   T31] usb 1-1: config 8 interface 21 has no altsetting 0
[   33.787080][   T31] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=d4.ce
[   33.796410][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.804623][   T31] usb 1-1: Product: syz
[   33.808870][   T31] usb 1-1: Manufacturer: syz
[   33.813529][   T31] usb 1-1: SerialNumber: syz
[   33.871955][  T330] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[   33.880404][  T330] usb 3-1: config 160 has no interface number 0
[   33.885121][  T473] usb 4-1: USB disconnect, device number 2
[   33.887019][  T330] usb 3-1: config 160 interface 200 has no altsetting 0
[   33.901448][  T330] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[   33.918501][  T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.927041][  T330] usb 3-1: Product: syz
[   33.931809][  T330] usb 3-1: Manufacturer: syz
[   33.936585][  T330] usb 3-1: SerialNumber: syz
[   33.952614][   T36] audit: type=1400 audit(1757117366.963:191): avc:  denied  { mounton } for  pid=490 comm="syz.1.54" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   33.974454][  T491] capability: warning: `syz.1.54' uses 32-bit capabilities (legacy support in use)
[   34.020009][  T472] __vm_enough_memory: pid: 472, comm: syz.0.49, bytes: 18014402804453376 not enough memory for the allocation
[   34.031961][  T472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[   34.043833][   T31] ftdi_sio 1-1:8.97: FTDI USB Serial Device converter detected
[   34.066460][   T31] ftdi_sio ttyUSB0: unknown device type: 0xd4ce
[   34.082360][   T31] ftdi_sio 1-1:8.94: FTDI USB Serial Device converter detected
[   34.091260][   T31] ftdi_sio ttyUSB1: unknown device type: 0xd4ce
[   34.109060][   T31] ftdi_sio 1-1:8.21: FTDI USB Serial Device converter detected
[   34.119364][   T31] ftdi_sio ttyUSB2: unknown device type: 0xd4ce
[   34.131403][   T31] usb 1-1: USB disconnect, device number 2
[   34.138015][   T31] ftdi_sio 1-1:8.97: device disconnected
[   34.145661][   T31] ftdi_sio 1-1:8.94: device disconnected
[   34.156991][  T330] usb 3-1: MIDIStreaming interface descriptor not found
[   34.166249][   T31] ftdi_sio 1-1:8.21: device disconnected
[   34.181586][  T330] usb 3-1: USB disconnect, device number 2
[   34.202820][  T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.233747][  T507] process 'syz.0.55' launched './file0' with NULL argv: empty string added
[   34.274251][  T513] overlay: Unknown parameter 'smackfsfloor'
[   34.330609][  T473] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   34.480604][  T473] usb 4-1: Using ep0 maxpacket: 32
[   34.487354][  T473] usb 4-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[   34.497613][  T473] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.508638][  T473] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   34.517782][  T473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.526646][  T473] usb 4-1: Product: syz
[   34.530894][  T473] usb 4-1: Manufacturer: syz
[   34.535590][  T473] usb 4-1: SerialNumber: syz
[   34.546315][  T473] usb 4-1: config 0 descriptor??
[   34.874320][  T536] rust_binder: Write failure EFAULT in pid:73
[   34.931847][  T539] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1735060478 (27760967648 ns) > initial count (27267544304 ns). Using initial count to start timer.
[   35.051515][  T547] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[   35.171489][  T555] kvm: kvm [554]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[   35.186088][  T555] exFAT-fs (rnullb0): invalid boot record signature
[   35.192825][  T555] exFAT-fs (rnullb0): failed to read boot sector
[   35.199285][  T555] exFAT-fs (rnullb0): failed to recognize exfat type
[   35.360607][  T473] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   35.510572][  T473] usb 2-1: Using ep0 maxpacket: 16
[   35.516816][  T473] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   35.525705][  T473] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.535832][  T473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   35.551133][  T473] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   35.560238][  T473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.568630][  T473] usb 2-1: Product: syz
[   35.580638][  T473] usb 2-1: Manufacturer: syz
[   35.585289][  T473] usb 2-1: SerialNumber: syz
[   35.994292][  T473] usb 2-1: 0:2 : does not exist
[   36.418933][  T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.427740][  T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.457307][  T589] netlink: 'syz.0.80': attribute type 30 has an invalid length.
[   36.485493][  T473] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1)
[   36.499089][  T473] usb 2-1: USB disconnect, device number 3
[   36.508011][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.846145][  T610] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   36.940566][  T473] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   37.090258][  T620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   37.090572][  T473] usb 3-1: Using ep0 maxpacket: 32
[   37.106804][  T473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   37.121999][   T10] usb 4-1: USB disconnect, device number 3
[   37.134242][  T473] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   37.145754][  T473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.154024][  T473] usb 3-1: Product: syz
[   37.158395][  T473] usb 3-1: Manufacturer: syz
[   37.163079][  T473] usb 3-1: SerialNumber: syz
[   37.171903][   T36] kauditd_printk_skb: 29 callbacks suppressed
[   37.171918][   T36] audit: type=1400 audit(1757117370.183:221): avc:  denied  { name_bind } for  pid=630 comm="syz.1.91" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   37.184191][  T473] usb 3-1: config 0 descriptor??
[   37.205166][   T36] audit: type=1400 audit(1757117370.183:222): avc:  denied  { node_bind } for  pid=630 comm="syz.1.91" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   37.228582][  T473] usb 3-1: bad CDC descriptors
[   37.238014][  T473] usb 3-1: unsupported MDLM descriptors
[   37.385668][  T639] rust_binder: Error while translating object.
[   37.385729][  T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   37.392849][  T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54
[   37.414503][   T36] audit: type=1400 audit(1757117370.423:223): avc:  denied  { write } for  pid=641 comm="syz.3.95" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   37.438282][   T61] usb 3-1: USB disconnect, device number 3
[   37.446778][   T36] audit: type=1400 audit(1757117370.433:224): avc:  denied  { create } for  pid=603 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.643501][   T36] audit: type=1400 audit(1757117370.653:225): avc:  denied  { read } for  pid=696 comm="syz.1.103" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.666637][   T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   37.667541][   T36] audit: type=1400 audit(1757117370.653:226): avc:  denied  { open } for  pid=696 comm="syz.1.103" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.723691][   T36] audit: type=1400 audit(1757117370.653:227): avc:  denied  { write } for  pid=696 comm="syz.1.103" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.831850][   T10] usb 4-1: config 1 has an invalid interface number: 102 but max is 0
[   37.840158][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.850430][   T10] usb 4-1: config 1 has no interface number 0
[   37.856719][   T10] usb 4-1: config 1 interface 102 has no altsetting 0
[   37.864925][   T10] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb
[   37.874043][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.882100][   T10] usb 4-1: Product: syz
[   37.886277][   T10] usb 4-1: Manufacturer: syz
[   37.890925][   T10] usb 4-1: SerialNumber: syz
[   37.897827][   T10] usbserial_generic 4-1:1.102: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   37.909451][   T10] usbserial_generic 4-1:1.102: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   37.920393][   T61] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   37.927964][   T10] usbserial_generic 4-1:1.102: device has no bulk endpoints
[   37.960564][  T647] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.080632][   T61] usb 3-1: Using ep0 maxpacket: 32
[   38.086907][   T61] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   38.095384][   T61] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   38.104115][   T61] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   38.113429][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   38.123204][   T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   38.132916][   T61] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   38.146058][   T61] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   38.155161][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.163241][  T483] usb 4-1: USB disconnect, device number 4
[   38.164741][   T61] usb 3-1: config 0 descriptor??
[   38.174306][  T647] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[   38.182882][  T647] usb 1-1: config 0 has no interface number 0
[   38.191399][  T647] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   38.200645][  T647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.208713][  T647] usb 1-1: Product: syz
[   38.212947][  T647] usb 1-1: Manufacturer: syz
[   38.217570][  T647] usb 1-1: SerialNumber: syz
[   38.223088][  T647] usb 1-1: config 0 descriptor??
[   38.392755][   T61] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   38.405252][   T61] usb 3-1: USB disconnect, device number 4
[   38.412126][   T61] usblp0: removed
[   38.431976][   T36] audit: type=1400 audit(1757117371.443:228): avc:  denied  { append } for  pid=698 comm="syz.0.104" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.551929][   T36] audit: type=1400 audit(1757117371.563:229): avc:  denied  { setattr } for  pid=714 comm="syz.1.108" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   38.715576][  T723] fuse: Unknown parameter 'Vx���a�PЁ��g��'�e�Tz��A̚9�����V���[�'
[   38.717393][   T36] audit: type=1400 audit(1757117371.723:230): avc:  denied  { ioctl } for  pid=722 comm="syz.3.109" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7238 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.852768][   T61] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   39.010546][   T61] usb 3-1: Using ep0 maxpacket: 32
[   39.024323][   T61] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   39.040541][   T61] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   39.059319][   T61] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   39.079708][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   39.100538][   T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   39.121450][   T61] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   39.150146][   T61] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   39.153424][  T734] 9pnet_fd: Insufficient options for proto=fd
[   39.169537][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.188771][   T61] usb 3-1: config 0 descriptor??
[   39.525464][  T740] exFAT-fs (rnullb0): invalid boot record signature
[   39.542717][  T740] exFAT-fs (rnullb0): failed to read boot sector
[   39.549114][  T740] exFAT-fs (rnullb0): failed to recognize exfat type
[   39.604153][  T746] rust_binder: 128: no such ref 3
[   39.696956][  T753] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[   40.003070][  T769] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   40.260598][  T483] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   40.412575][  T483] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 7660, setting to 1024
[   40.423622][  T483] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024
[   40.433585][  T483] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023
[   40.443660][  T483] usb 4-1: config 1 interface 0 has no altsetting 0
[   40.457555][  T483] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   40.466681][  T483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.474878][  T483] usb 4-1: Product: 訨퉆켫ﹿ롁ⴻ鵯꦳ℨ瘯⊌埊鞤뿣ڟ˚酉ꮄヘ೷됫烇줾ۅ铠卥뺭풺읚鵉Რാ崊库㿧쎄䩙㐏鵾頄鎳⟴熡䷡䝳౰㋉핿夞嶅䞈ˈ였鶨∓⎥ᠮ짙㚸珙ᖫ퀡ଢ଼쑪탇乎૴힣鐹￑뮰؟苂徦⡭嚽괻茀賐㌰鱰꾓斅볎䑡ꓦ橑쭴ᒕ댐奀療䢋놴㐼筄厢ʦ喾聢碆鳼⦯쌐眓⯾‬昐艠뀬
[   40.484927][  T807] binder: Bad value for 'stats'
[   40.516256][  T483] usb 4-1: Manufacturer: 嗃꘼랢뷜
[   40.521900][  T483] usb 4-1: SerialNumber: syz
[   40.528124][  T800] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   40.535401][  T800] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   40.595871][  T810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   40.605991][  T810] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   40.617833][  T810] rust_binder: Error in use_page_slow: ESRCH
[   40.617855][  T810] rust_binder: use_range failure ESRCH
[   40.624088][  T810] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   40.624099][  T811] rust_binder: Error in use_page_slow: ESRCH
[   40.624113][  T811] rust_binder: use_range failure ESRCH
[   40.637458][  T810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   40.646984][  T811] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   40.659522][   T61] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   40.682579][  T811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   40.682633][  T811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138
[   40.683660][  T814] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   40.693705][   T61] usb 3-1: USB disconnect, device number 5
[   40.708607][  T810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138
[   40.711387][   T61] usblp0: removed
[   40.743614][  T800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.749754][  T819] rust_binder: Write failure EFAULT in pid:123
[   40.753559][  T800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.787838][  T483] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 3 proto 3 vid 0x04B8 pid 0x0202
[   40.806015][  T483] usb 4-1: USB disconnect, device number 5
[   40.819187][  T483] usblp0: removed
[   40.854196][  T819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=819 comm=syz.2.137
[   40.869607][  T826] overlayfs: missing 'lowerdir'
[   40.997438][  T833] tmpfs: Unknown parameter ''
[   41.020760][  T836] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.020791][  T836] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.051635][  T840] capability: warning: `syz.3.143' uses deprecated v2 capabilities in a way that may be insecure
[   41.115394][  T845] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   41.122728][  T845] rust_binder: 132: no such ref 0
[   41.390568][   T61] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   41.540948][   T61] usb 3-1: too many configurations: 217, using maximum allowed: 8
[   41.549829][   T61] usb 3-1: unable to read config index 0 descriptor/start: -61
[   41.557466][   T61] usb 3-1: can't read configurations, error -61
[   41.655184][  T853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.655248][  T853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[   41.665182][  T853] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   41.674559][  T853] rust_binder: Read failure Err(EFAULT) in pid:121
[   41.690610][   T61] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   41.850938][   T61] usb 3-1: too many configurations: 217, using maximum allowed: 8
[   41.859888][   T61] usb 3-1: unable to read config index 0 descriptor/start: -61
[   41.867541][   T61] usb 3-1: can't read configurations, error -61
[   41.873970][   T61] usb usb3-port1: attempt power cycle
[   41.920597][  T483] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   42.040584][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   42.071688][  T483] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   42.083224][  T483] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64
[   42.094023][  T483] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   42.107793][  T483] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   42.117029][  T483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   42.125067][  T483] usb 2-1: SerialNumber: syz
[   42.130934][  T860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   42.138756][  T483] hub 2-1:1.0: bad descriptor, ignoring hub
[   42.144731][  T483] hub 2-1:1.0: probe with driver hub failed with error -5
[   42.190553][   T10] usb 4-1: Using ep0 maxpacket: 16
[   42.196940][   T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   42.205706][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.215892][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.224823][   T61] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   42.233831][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   42.242965][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.251043][   T10] usb 4-1: Product: syz
[   42.255266][   T10] usb 4-1: Manufacturer: syz
[   42.259964][   T10] usb 4-1: SerialNumber: syz
[   42.264953][   T61] usb 3-1: too many configurations: 217, using maximum allowed: 8
[   42.273863][   T61] usb 3-1: unable to read config index 0 descriptor/start: -61
[   42.281593][   T61] usb 3-1: can't read configurations, error -61
[   42.387556][  T483] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[   42.410009][  T872] vcan0: entered allmulticast mode
[   42.410652][   T61] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   42.415704][  T483] usb 2-1: USB disconnect, device number 4
[   42.426717][  T872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153
[   42.428536][  T872] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   42.440080][  T872] rust_binder: Read failure Err(EFAULT) in pid:153
[   42.449053][   T61] usb 3-1: too many configurations: 217, using maximum allowed: 8
[   42.465057][   T61] usb 3-1: unable to read config index 0 descriptor/start: -61
[   42.472821][   T61] usb 3-1: can't read configurations, error -61
[   42.479343][   T61] usb usb3-port1: unable to enumerate USB device
[   42.674840][   T36] kauditd_printk_skb: 23 callbacks suppressed
[   42.674858][   T36] audit: type=1400 audit(1757117375.683:254): avc:  denied  { read write } for  pid=878 comm="syz.1.154" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   42.678863][   T61] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   42.681101][   T36] audit: type=1400 audit(1757117375.683:255): avc:  denied  { open } for  pid=878 comm="syz.1.154" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   42.709036][   T10] usb 4-1: 0:2 : does not exist
[   42.714903][   T36] audit: type=1400 audit(1757117375.723:256): avc:  denied  { getopt } for  pid=878 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.735275][   T61] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   42.776525][  T882] fido_id[882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   43.080020][  T888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.088639][  T888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.099968][  T888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.108534][  T888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.245404][  T647] usb 1-1: Found UVC 0.08 device syz (046d:0823)
[   43.251875][  T647] usb 1-1: No valid video chain found.
[   43.346672][   T10] usb 4-1: USB disconnect, device number 6
[   43.359569][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.630831][   T36] audit: type=1400 audit(1757117376.643:257): avc:  denied  { append } for  pid=889 comm="syz.0.157" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   43.701541][  T890] rust_binder: Error in use_page_slow: ESRCH
[   43.701562][  T890] rust_binder: use_range failure ESRCH
[   43.707570][  T890] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   43.713142][  T890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   43.721282][  T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:110
[   43.735743][  T892] rust_binder: 168: no such ref 1
[   43.770552][   T36] audit: type=1400 audit(1757117376.773:258): avc:  denied  { connect } for  pid=896 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.793947][  T901] netlink: 'syz.0.161': attribute type 4 has an invalid length.
[   43.835587][  T903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116
[   43.911782][  T910] pim6reg1: entered promiscuous mode
[   43.926299][  T910] pim6reg1: entered allmulticast mode
[   43.977278][   T36] audit: type=1400 audit(1757117376.983:259): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   44.093239][  T920] rust_binder: 133: no such ref 1
[   44.098332][  T920] rust_binder: Write failure EFAULT in pid:133
[   44.113783][   T36] audit: type=1400 audit(1757117377.123:260): avc:  denied  { read append } for  pid=922 comm="syz.3.168" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   44.133950][  T925] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.146266][  T647] usb 1-1: USB disconnect, device number 3
[   44.155124][   T36] audit: type=1400 audit(1757117377.153:261): avc:  denied  { open } for  pid=922 comm="syz.3.168" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   44.192577][   T12] bridge_slave_1: left allmulticast mode
[   44.200236][  T925] rust_binder: 181: no such ref 1
[   44.207587][  T925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181
[   44.208070][   T36] audit: type=1400 audit(1757117377.213:262): avc:  denied  { ioctl } for  pid=924 comm="syz.1.169" path="socket:[8706]" dev="sockfs" ino=8706 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   44.241434][   T12] bridge_slave_1: left promiscuous mode
[   44.250351][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.258481][   T12] bridge_slave_0: left allmulticast mode
[   44.267716][   T12] bridge_slave_0: left promiscuous mode
[   44.281426][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.320649][   T36] audit: type=1400 audit(1757117377.323:263): avc:  denied  { append } for  pid=934 comm="syz.3.174" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.372272][  T938] incfs: Options parsing error. -22
[   44.377568][  T938] incfs: mount failed -22
[   44.404717][  T938] sit0: entered promiscuous mode
[   44.422142][  T938] netlink: 'syz.3.174': attribute type 1 has an invalid length.
[   44.429862][  T938] netlink: 1 bytes leftover after parsing attributes in process `syz.3.174'.
[   44.448246][  T931] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   44.481999][   T12] veth1_macvtap: left promiscuous mode
[   44.499217][   T12] veth0_vlan: left promiscuous mode
[   44.573183][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   44.587602][  T943] incfs: Options parsing error. -22
[   44.601091][  T943] incfs: mount failed -22
[   44.658935][  T925] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   44.679456][  T941] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.686851][  T941] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.694052][  T941] bridge_slave_0: entered allmulticast mode
[   44.701059][  T941] bridge_slave_0: entered promiscuous mode
[   44.707748][  T941] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.714996][  T941] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.722173][  T941] bridge_slave_1: entered allmulticast mode
[   44.728739][  T941] bridge_slave_1: entered promiscuous mode
[   44.805172][  T941] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.812320][  T941] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.814548][  T955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.819634][  T941] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.838338][  T941] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.858999][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.866536][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.908193][  T944] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.915302][  T944] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.924820][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.931993][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.957696][  T941] veth0_vlan: entered promiscuous mode
[   44.969289][  T941] veth1_macvtap: entered promiscuous mode
[   45.449104][  T988] netlink: 96 bytes leftover after parsing attributes in process `syz.4.185'.
[   45.470646][   T94] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   45.620701][   T94] usb 4-1: Using ep0 maxpacket: 32
[   45.627623][   T94] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   45.636735][   T94] usb 4-1: config 1 has no interface number 1
[   45.642927][   T94] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   45.657496][   T94] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   45.666684][   T94] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.674706][   T94] usb 4-1: Product: 姄큩꾖뛫巟녒⎁ꦀ⦓퓀爤ꪴ砫὞簀疴삳囐ᄢ偂刧數奤쀹錱쐤讥ጛ쓯⏷輴䄇糦텱
[   45.688331][   T94] usb 4-1: Manufacturer: 輾⣞␬Ϣꜷ适瘦㖼轂廕﵊譴헍몜赧඄竪ឦኙ個㊤萱鎃㮉줩Ἑ섰芟靖圤ﲠ룇㠑畫ꄚۖ䔙䪼ᔤ
[   45.703568][   T94] usb 4-1: SerialNumber: ࡠ
[   45.709186][  T980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   45.749590][  T996] rust_binder: 196: no such ref 0
[   45.754724][  T996] rust_binder: 196: no such ref 3
[   45.760448][  T996] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   45.767887][  T996] rust_binder: Write failure EINVAL in pid:196
[   45.768075][  T996] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   45.781504][  T996] rust_binder: Write failure EINVAL in pid:196
[   45.796838][  T998] rust_binder: Write failure EFAULT in pid:198
[   45.803172][  T999] rust_binder: Write failure EFAULT in pid:198
[   45.843165][ T1003] netlink: 'syz.1.191': attribute type 4 has an invalid length.
[   45.922379][   T94] usb 4-1: found format II with max.bitrate = 7, frame size=7
[   45.930009][   T94] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   45.938455][   T94] usb 4-1: USB disconnect, device number 7
[   45.950184][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.120758][  T483] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   46.270572][  T483] usb 2-1: Using ep0 maxpacket: 16
[   46.276897][  T483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.288098][  T483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.298000][  T483] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   46.310881][  T483] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   46.320026][  T483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.328820][  T483] usb 2-1: config 0 descriptor??
[   46.497046][ T1015] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   46.505994][ T1015] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   46.514556][ T1015] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   46.523137][ T1015] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   46.535441][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.545012][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.553460][ T1018] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   46.569912][  T483] usbhid 2-1:0.0: can't add hid device: -71
[   46.584563][  T483] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   46.600567][  T440] Bluetooth: hci0: command 0x1003 tx timeout
[   46.600581][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.606726][  T483] usb 2-1: USB disconnect, device number 5
[   46.855150][ T1037] rust_binder: Write failure EFAULT in pid:146
[   46.875896][ T1039] netlink: 'syz.4.204': attribute type 4 has an invalid length.
[   46.880587][  T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   46.882184][ T1039] netlink: 17 bytes leftover after parsing attributes in process `syz.4.204'.
[   46.906939][ T1040] netlink: 'syz.4.204': attribute type 4 has an invalid length.
[   46.918232][ T1040] netlink: 17 bytes leftover after parsing attributes in process `syz.4.204'.
[   47.040582][  T330] usb 4-1: Using ep0 maxpacket: 16
[   47.047801][  T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.058513][  T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.069076][  T330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.078286][  T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.086932][  T330] usb 4-1: Product: syz
[   47.091208][  T330] usb 4-1: Manufacturer: syz
[   47.095916][  T330] usb 4-1: SerialNumber: syz
[   47.180592][  T483] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   47.344006][  T483] usb 3-1: Using ep0 maxpacket: 16
[   47.354682][  T483] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30
[   47.366473][  T483] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.376295][  T483] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   47.389342][  T483] usb 3-1: config 0 interface 0 has no altsetting 0
[   47.399129][  T483] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[   47.408533][  T483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.416922][  T330] usb 4-1: 0:2 : does not exist
[   47.423630][  T483] usb 3-1: config 0 descriptor??
[   47.429514][  T330] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   47.446031][  T330] usb 4-1: USB disconnect, device number 8
[   47.457963][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.496956][ T1048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.506669][ T1048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.556013][ T1054] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.572794][ T1056] /dev/rnullb0: Can't open blockdev
[   47.632131][  T483] wacom 0003:056A:0015.0002: Unknown device_type for 'HID 056a:0015'. Assuming pen.
[   47.650852][  T483] wacom 0003:056A:0015.0002: hidraw0: USB HID v0.21 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0
[   47.671853][  T483] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0002/input/input4
[   47.686338][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   47.686355][   T36] audit: type=1400 audit(1757117380.693:279): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.715001][  T483] usb 3-1: USB disconnect, device number 10
[   47.727222][   T36] audit: type=1400 audit(1757117380.693:280): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.751043][   T36] audit: type=1400 audit(1757117380.763:281): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=488 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   47.898448][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.898478][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.905140][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.911799][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.918301][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.926452][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.933229][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.947718][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.970551][  T647] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   48.130561][  T647] usb 2-1: Using ep0 maxpacket: 16
[   48.137521][  T647] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.147730][  T647] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   48.156736][  T647] usb 2-1: too many endpoints for config 1 interface 1 altsetting 6: 178, using maximum allowed: 30
[   48.167597][  T647] usb 2-1: config 1 interface 1 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 178
[   48.180882][  T647] usb 2-1: config 1 interface 1 has no altsetting 0
[   48.188907][  T647] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   48.197999][  T647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.206034][  T647] usb 2-1: Product: syz
[   48.210194][  T647] usb 2-1: Manufacturer: syz
[   48.214856][  T647] usb 2-1: SerialNumber: syz
[   48.240578][   T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   48.400562][   T61] usb 5-1: Using ep0 maxpacket: 16
[   48.406815][   T61] usb 5-1: config index 0 descriptor too short (expected 4495, got 71)
[   48.415180][   T61] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[   48.423963][   T61] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   48.434990][   T61] usb 5-1: config 0 has no interface number 0
[   48.441908][  T647] usb 2-1: 0:2 : does not exist
[   48.448103][   T61] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[   48.457486][   T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.465677][   T61] usb 5-1: Product: syz
[   48.474483][  T647] usb 2-1: USB disconnect, device number 6
[   48.480444][   T61] usb 5-1: Manufacturer: syz
[   48.485121][   T61] usb 5-1: SerialNumber: syz
[   48.490900][   T61] usb 5-1: config 0 descriptor??
[   48.706993][ T1079] rust_binder: Write failure EFAULT in pid:52
[   48.707205][   T36] audit: type=1400 audit(1757117381.713:282): avc:  denied  { read } for  pid=1077 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.773379][  T483] usb 5-1: USB disconnect, device number 2
[   48.957902][   T36] audit: type=1400 audit(1757117381.963:283): avc:  denied  { create } for  pid=1095 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   48.959034][ T1096] veth1: entered allmulticast mode
[   48.988613][ T1096] veth1: left allmulticast mode
[   49.015597][ T1104] overlayfs: failed to resolve './file1': -2
[   49.292741][ T1113] netlink: 188 bytes leftover after parsing attributes in process `syz.4.224'.
[   49.506784][   T36] audit: type=1400 audit(1757117382.513:284): avc:  denied  { ioctl } for  pid=1112 comm="syz.4.224" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   49.961572][ T1127] fuse: blksize only supported for fuseblk
[   49.980441][ T1130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.989061][ T1130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.210629][   T94] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   50.361534][   T94] usb 2-1: not running at top speed; connect to a high speed hub
[   50.370030][   T94] usb 2-1: config 95 has an invalid interface number: 1 but max is 0
[   50.378251][   T94] usb 2-1: config 95 has no interface number 0
[   50.384595][   T94] usb 2-1: config 95 interface 1 has no altsetting 0
[   50.392874][   T94] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[   50.402037][   T94] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.410168][   T94] usb 2-1: Product: syz
[   50.414396][   T94] usb 2-1: Manufacturer: syz
[   50.419007][   T94] usb 2-1: SerialNumber: syz
[   50.638968][   T94] usb 2-1: USB disconnect, device number 7
[   50.659810][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.060315][ T1140] kvm: kvm [1139]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   51.068999][ T1140] kvm: kvm [1139]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   51.142890][   T36] audit: type=1400 audit(1757117384.153:285): avc:  denied  { setattr } for  pid=1144 comm="syz.1.234" name="NETLINK" dev="sockfs" ino=10473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   51.166837][   T36] audit: type=1400 audit(1757117384.153:286): avc:  denied  { write } for  pid=1144 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   51.200405][ T1150] overlayfs: failed to clone upperpath
[   51.231114][ T1156] 9pnet_fd: Insufficient options for proto=fd
[   51.248223][   T36] audit: type=1400 audit(1757117384.253:287): avc:  denied  { mount } for  pid=1157 comm="syz.1.238" name="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   51.248608][ T1158] fuse: Bad value for 'fd'
[   51.277208][ T1158] incfs: Error accessing: ./file0.
[   51.282569][ T1158] incfs: mount failed -20
[   51.310301][ T1163] netlink: 'syz.1.240': attribute type 4 has an invalid length.
[   51.354847][   T36] audit: type=1400 audit(1757117384.363:288): avc:  denied  { bpf } for  pid=1169 comm="syz.3.243" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.383305][ T1171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1171 comm=syz.3.243
[   51.407189][ T1175] netlink: 'syz.1.244': attribute type 6 has an invalid length.
[   51.415133][ T1175] IPv6: NLM_F_CREATE should be specified when creating new route
[   51.437810][ T1181] SELinux:  Context system_u:object_r:apt_var_cache_t:s0 is not valid (left unmapped).
[   51.463734][ T1184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'.
[   51.510999][ T1186] exFAT-fs (rnullb0): invalid boot record signature
[   51.517638][ T1186] exFAT-fs (rnullb0): failed to read boot sector
[   51.524080][ T1186] exFAT-fs (rnullb0): failed to recognize exfat type
[   51.706554][ T1206] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   51.890579][  T647] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   51.927343][ T1249] netlink: 'syz.3.262': attribute type 15 has an invalid length.
[   51.935240][ T1249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'.
[   51.944684][ T1249] binder: Unknown parameter ''
[   52.051609][  T647] usb 5-1: config 0 interface 0 has no altsetting 0
[   52.058295][  T647] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[   52.067469][  T647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.076101][  T647] usb 5-1: config 0 descriptor??
[   52.120581][  T330] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   52.270560][  T330] usb 3-1: Using ep0 maxpacket: 32
[   52.276893][  T330] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   52.285383][  T330] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   52.294163][  T330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   52.303429][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   52.313153][  T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   52.322853][  T330] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   52.335893][  T330] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   52.344968][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.353843][  T330] usb 3-1: config 0 descriptor??
[   52.488933][  T647] elecom 0003:056E:010C.0003: unknown main item tag 0x0
[   52.496698][  T647] elecom 0003:056E:010C.0003: hidraw0: USB HID v1.01 Device [HID 056e:010c] on usb-dummy_hcd.4-1/input0
[   52.560653][  T330] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   52.572750][  T330] usb 3-1: USB disconnect, device number 11
[   52.579444][  T330] usblp0: removed
[   52.669372][ T1268] netlink: 'syz.1.269': attribute type 4 has an invalid length.
[   52.689564][ T1203] binder: Unknown parameter ''
[   52.695257][   T94] usb 5-1: USB disconnect, device number 3
[   52.870665][  T330] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   52.976810][ T1289] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   52.984213][ T1289] rust_binder: Write failure EINVAL in pid:206
[   53.000922][  T330] usb 3-1: device descriptor read/64, error -71
[   53.021858][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   53.021874][   T36] audit: type=1400 audit(1757117386.033:298): avc:  denied  { accept } for  pid=1290 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   53.234739][ T1302] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.266037][  T330] usb 3-1: device descriptor read/64, error -71
[   53.279030][   T36] audit: type=1400 audit(1757117386.273:299): avc:  denied  { setopt } for  pid=1306 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   53.330557][   T94] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   53.501678][   T94] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.511615][   T94] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   53.521018][   T94] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.529825][   T94] usb 4-1: config 0 descriptor??
[   53.540555][  T330] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   53.670620][  T330] usb 3-1: device descriptor read/64, error -71
[   53.720068][   T36] audit: type=1400 audit(1757117386.723:300): avc:  denied  { ioctl } for  pid=1319 comm="syz.4.285" path="net:[4026532475]" dev="nsfs" ino=4026532475 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   53.724245][ T1320] pim6reg1: entered promiscuous mode
[   53.750196][ T1320] pim6reg1: entered allmulticast mode
[   53.759232][   T94] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[   53.829485][ T1324] rust_binder: 87: no such ref 2
[   53.829722][ T1323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.834547][ T1323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87
[   53.834619][ T1324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87
[   53.886904][ T1329] rust_binder: 93: no such ref 0
[   53.901749][ T1329] netlink: 'syz.4.288': attribute type 29 has an invalid length.
[   53.909556][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'.
[   53.920592][  T330] usb 3-1: device descriptor read/64, error -71
[   53.935867][ T1331] rust_binder: 95: no such ref 3
[   53.938561][ T1332] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[   53.948108][ T1332] rust_binder: Write failure EINVAL in pid:95
[   53.963330][ T1335] rust_binder: Write failure EFAULT in pid:99
[   53.970416][ T1335] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   53.984269][ T1335] rust_binder: Write failure EINVAL in pid:99
[   53.984734][ T1335] rust_binder: 99: no such ref 2
[   53.995852][ T1335] rust_binder: 99: no such ref 0
[   54.000886][ T1335] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   54.031373][  T330] usb usb3-port1: attempt power cycle
[   54.116208][   T36] audit: type=1400 audit(1757117387.123:301): avc:  denied  { getopt } for  pid=1336 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.197221][   T10] usb 4-1: USB disconnect, device number 9
[   54.370590][  T330] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   54.391719][  T330] usb 3-1: device descriptor read/8, error -71
[   54.521714][  T330] usb 3-1: device descriptor read/8, error -71
[   54.528282][   T36] audit: type=1400 audit(1757117387.533:302): avc:  denied  { setopt } for  pid=1355 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   54.576386][ T1360] 9pnet: Unknown protocol version 9
[   54.583511][ T1360] fuse: Unknown parameter 'bd'
[   54.600844][ T1360] syzkaller0: entered promiscuous mode
[   54.606457][ T1360] syzkaller0: entered allmulticast mode
[   54.672987][ T1364] SELinux: failed to load policy
[   54.678065][   T36] audit: type=1400 audit(1757117387.683:303): avc:  denied  { load_policy } for  pid=1362 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   54.699180][ T1364] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   54.699203][ T1364] rust_binder: Read failure Err(EFAULT) in pid:238
[   54.701110][   T36] audit: type=1400 audit(1757117387.683:304): avc:  denied  { write } for  pid=1361 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.790579][  T330] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   54.815076][  T330] usb 3-1: device descriptor read/8, error -71
[   54.824989][   T36] audit: type=1400 audit(1757117387.833:305): avc:  denied  { search } for  pid=1370 comm="syz.4.303" name="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.873993][   T36] audit: type=1400 audit(1757117387.883:306): avc:  denied  { read } for  pid=1370 comm="syz.4.303" name="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.897149][   T36] audit: type=1400 audit(1757117387.883:307): avc:  denied  { watch watch_reads } for  pid=1370 comm="syz.4.303" path="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.951715][  T330] usb 3-1: device descriptor read/8, error -71
[   54.977143][ T1375] 9pnet_fd: Insufficient options for proto=fd
[   54.988323][ T1380] rust_binder: Error while translating object.
[   54.988377][ T1380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   54.994812][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:103
[   55.061003][  T330] usb usb3-port1: unable to enumerate USB device
[   55.099247][ T1387] netlink: 'syz.2.308': attribute type 58 has an invalid length.
[   55.107317][ T1390] netlink: 'syz.3.309': attribute type 4 has an invalid length.
[   55.140467][ T1394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'.
[   55.156383][ T1394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   55.156418][ T1394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:251
[   55.416594][ T1412] overlayfs: failed to clone upperpath
[   55.432875][ T1412] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   55.465343][ T1419] netlink: 96 bytes leftover after parsing attributes in process `syz.1.317'.
[   55.474841][ T1419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=1419 comm=syz.1.317
[   55.774391][ T1442] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   55.784119][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   55.943011][   T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[   55.952215][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.960336][   T31] usb 4-1: Product: syz
[   55.964563][   T31] usb 4-1: Manufacturer: syz
[   55.969198][   T31] usb 4-1: SerialNumber: syz
[   55.974576][   T31] usb 4-1: config 0 descriptor??
[   56.014750][ T1449] input: syz1 as /devices/virtual/input/input8
[   56.099352][ T1449] rust_binder: Write failure EINVAL in pid:113
[   56.385818][   T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   56.402085][   T31] asix 4-1:0.0: probe with driver asix failed with error -61
[   56.449158][ T1467] kernel read not supported for file /policy (pid: 1467 comm: syz.4.333)
[   56.472035][ T1472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.472085][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134
[   56.482172][ T1472] rust_binder: 134: no such ref 2
[   56.497178][ T1472] rust_binder: Error while translating object.
[   56.497210][ T1472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.503458][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134
[   56.528506][ T1478] overlayfs: missing 'lowerdir'
[   56.799655][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   56.804913][ T1490] incfs: Options parsing error. -22
[   56.811362][ T1490] incfs: mount failed -22
[   57.730583][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   57.856671][ T1519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.348'.
[   57.865765][ T1519] netlink: 43 bytes leftover after parsing attributes in process `syz.1.348'.
[   57.874721][ T1519] netlink: 'syz.1.348': attribute type 6 has an invalid length.
[   57.882410][ T1519] netlink: 'syz.1.348': attribute type 5 has an invalid length.
[   57.890227][ T1519] netlink: 43 bytes leftover after parsing attributes in process `syz.1.348'.
[   57.892796][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.909051][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.921903][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[   57.931000][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.942868][   T10] usb 5-1: config 0 descriptor??
[   58.352231][   T10] wacom 0003:056A:0336.0005: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0
[   58.592910][   T10] usb 4-1: USB disconnect, device number 10
[   58.806109][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   58.806127][   T36] audit: type=1400 audit(1757117391.813:321): avc:  denied  { create } for  pid=1552 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   58.832967][   T36] audit: type=1400 audit(1757117391.813:322): avc:  denied  { write } for  pid=1552 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   58.840604][  T440] Bluetooth: hci0: command 0x1003 tx timeout
[   58.853522][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   58.860868][   T36] audit: type=1400 audit(1757117391.813:323): avc:  denied  { read } for  pid=1552 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   59.100799][   T10] usb 5-1: USB disconnect, device number 4
[   59.127780][ T1561] tipc: Started in network mode
[   59.132745][ T1561] tipc: Node identity 92fb93f696a5, cluster identity 4711
[   59.139976][ T1561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.163702][ T1561] syzkaller0: entered promiscuous mode
[   59.169474][ T1561] syzkaller0: entered allmulticast mode
[   59.175398][ T1561] tipc: Resetting bearer <eth:syzkaller0>
[   59.183732][ T1561] tipc: Resetting bearer <eth:syzkaller0>
[   59.196709][ T1561] tipc: Disabling bearer <eth:syzkaller0>
[   59.334571][ T1570] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   59.346819][ T1572] rust_binder: Write failure EFAULT in pid:155
[   59.454438][ T1577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'.
[   59.650021][ T1588] loop2: detected capacity change from 0 to 7
[   59.656677][    C0] blk_print_req_error: 4 callbacks suppressed
[   59.656701][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.671958][    C0] buffer_io_error: 4 callbacks suppressed
[   59.671977][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.685763][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.695018][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.703096][ T1588]  loop2: unable to read partition table
[   59.709258][ T1588] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   59.716269][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.732105][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.741225][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.743288][ T1591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'.
[   59.750433][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.768273][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.777475][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.786675][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.795883][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.803860][ T1589]  loop2: unable to read partition table
[   59.804180][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.818680][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.832416][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.841629][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.850347][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   59.855581][ T1599] rust_binder: Error while translating object.
[   59.859542][ T1599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   59.859560][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   59.866103][ T1599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:207
[   59.907127][   T36] audit: type=1400 audit(1757117392.913:324): avc:  denied  { setopt } for  pid=1602 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   59.912687][ T1603] kernel profiling enabled (shift: 11)
[   59.916845][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   59.947730][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   60.090842][  T647] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   60.109818][ T1617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=1617 comm=syz.3.380
[   60.165870][ T1623] input: syz0 as /devices/virtual/input/input12
[   60.220569][  T647] usb 5-1: device descriptor read/64, error -71
[   60.460606][  T647] usb 5-1: device descriptor read/64, error -71
[   60.700590][  T647] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   60.830575][  T647] usb 5-1: device descriptor read/64, error -71
[   61.070620][  T647] usb 5-1: device descriptor read/64, error -71
[   61.121984][ T1683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1683 comm=syz.3.394
[   61.134805][ T1683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.394'.
[   61.157676][ T1698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.397'.
[   61.184838][  T647] usb usb5-port1: attempt power cycle
[   61.205298][ T1702] fuse: Bad value for 'user_id'
[   61.210184][ T1702] fuse: Bad value for 'user_id'
[   61.530573][  T647] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   61.551735][  T647] usb 5-1: device descriptor read/8, error -71
[   61.681591][  T647] usb 5-1: device descriptor read/8, error -71
[   61.920563][  T647] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   61.941597][  T647] usb 5-1: device descriptor read/8, error -71
[   61.960576][  T440] Bluetooth: hci0: command 0x1003 tx timeout
[   61.960576][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   62.058989][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   62.073535][  T647] usb 5-1: device descriptor read/8, error -71
[   62.122603][ T1724] /dev/sr0: Can't lookup blockdev
[   62.180664][  T647] usb usb5-port1: unable to enumerate USB device
[   62.337909][   T36] audit: type=1400 audit(1757117395.343:325): avc:  denied  { append } for  pid=1737 comm="syz.2.409" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   62.338131][ T1738] rust_binder: Read failure Err(EAGAIN) in pid:225
[   62.360859][ T1739] rust_binder: Read failure Err(EAGAIN) in pid:225
[   62.394559][   T36] audit: type=1400 audit(1757117395.403:326): avc:  denied  { listen } for  pid=1742 comm="syz.2.411" path=2F36332FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   62.397640][ T1744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=1744 comm=syz.2.411
[   62.401202][   T36] audit: type=1400 audit(1757117395.403:327): avc:  denied  { accept } for  pid=1742 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   62.487333][   T12] Bluetooth: hci1: Frame reassembly failed (-84)
[   63.174109][   T36] audit: type=1400 audit(1757117396.183:328): avc:  denied  { read append } for  pid=1788 comm="syz.4.425" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.198258][   T36] audit: type=1400 audit(1757117396.183:329): avc:  denied  { open } for  pid=1788 comm="syz.4.425" path="/57/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.222733][   T36] audit: type=1400 audit(1757117396.183:330): avc:  denied  { ioctl } for  pid=1788 comm="syz.4.425" path="/57/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.394558][ T1799] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   63.660612][   T61] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   63.798432][ T1811] overlayfs: failed to resolve './file1': -2
[   63.820569][   T61] usb 5-1: Using ep0 maxpacket: 32
[   63.831318][   T61] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   63.844307][   T61] usb 5-1: config 1 interface 0 has no altsetting 0
[   63.852458][   T61] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.40
[   63.861605][   T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.869619][   T61] usb 5-1: Product: syz
[   63.873992][   T61] usb 5-1: Manufacturer: syz
[   63.878619][   T61] usb 5-1: SerialNumber: syz
[   63.936062][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   63.936081][   T36] audit: type=1400 audit(1757117396.943:334): avc:  denied  { setopt } for  pid=1820 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   63.973925][   T36] audit: type=1400 audit(1757117396.983:335): avc:  denied  { ioctl } for  pid=1822 comm="syz.1.439" path="socket:[13941]" dev="sockfs" ino=13941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.120603][  T439] Bluetooth: hci0: command 0x1003 tx timeout
[   64.120603][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   64.243632][   T36] audit: type=1400 audit(1757117397.253:336): avc:  denied  { bind } for  pid=1844 comm="syz.1.444" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.263959][   T36] audit: type=1400 audit(1757117397.253:337): avc:  denied  { name_bind } for  pid=1844 comm="syz.1.444" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   64.285045][   T36] audit: type=1400 audit(1757117397.253:338): avc:  denied  { node_bind } for  pid=1844 comm="syz.1.444" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   64.308867][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.318742][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.328724][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.337764][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.346474][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.355106][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.365618][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.374479][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.390088][   T61] usbhid 5-1:1.0: can't add hid device: -71
[   64.396161][   T61] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   64.409461][   T61] usb 5-1: USB disconnect, device number 9
[   64.411957][ T1856] binder: Bad value for 'max'
[   64.520575][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[   64.520569][  T440] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   64.537207][ T1867] binder: Unknown parameter 'L+��!3�<�z����ɗF�&�<p/�D�'
[   64.545214][ T1867] netlink: 'syz.3.450': attribute type 1 has an invalid length.
[   64.552978][ T1867] netlink: 1 bytes leftover after parsing attributes in process `syz.3.450'.
[   64.562415][   T36] audit: type=1400 audit(1757117397.573:339): avc:  denied  { setattr } for  pid=1864 comm="syz.3.450" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   64.899861][ T1874] 2N: renamed from vcan0 (while UP)
[   65.007337][ T1884] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.052575][   T36] audit: type=1400 audit(1757117398.063:340): avc:  denied  { nlmsg_read } for  pid=1888 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.073495][ T1890] loop7: detected capacity change from 0 to 7
[   65.280547][   T31] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[   65.440554][   T31] usb 4-1: Invalid ep0 maxpacket: 64
[   65.545349][ T1931] syzkaller0: entered promiscuous mode
[   65.550990][ T1931] syzkaller0: entered allmulticast mode
[   65.580604][   T31] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[   65.700587][   T61] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   65.734966][ T1950] rust_binder: 215: no such ref 1
[   65.750607][   T31] usb 4-1: Invalid ep0 maxpacket: 64
[   65.756842][   T31] usb usb4-port1: attempt power cycle
[   65.850570][   T61] usb 3-1: Using ep0 maxpacket: 32
[   65.857034][   T61] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.867467][   T61] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.878657][   T61] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.888539][   T61] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   65.901487][   T61] usb 3-1: config 0 interface 0 has no altsetting 0
[   65.908120][   T61] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   65.917303][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.925911][   T61] usb 3-1: config 0 descriptor??
[   66.100591][   T31] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[   66.120757][ T1969] rust_binder: inc_ref_done called when no active inc_refs
[   66.120937][   T31] usb 4-1: Invalid ep0 maxpacket: 64
[   66.211328][ T1974] rust_binder: 1973 RLIMIT_NICE not set
[   66.260606][   T31] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[   66.290997][   T31] usb 4-1: Invalid ep0 maxpacket: 64
[   66.296491][   T31] usb usb4-port1: unable to enumerate USB device
[   66.336785][   T61] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0xd
[   66.345291][   T61] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[   66.357580][   T61] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[   66.540278][    C0] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71
[   66.549754][   T61] usb 3-1: USB disconnect, device number 17
[   66.738384][ T2001] netlink: 'syz.1.490': attribute type 12 has an invalid length.
[   66.842369][   T36] audit: type=1400 audit(1757117399.853:341): avc:  denied  { create } for  pid=2009 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   66.864117][ T2013] netlink: 'syz.1.494': attribute type 7 has an invalid length.
[   66.871863][ T2013] netlink: 'syz.1.494': attribute type 5 has an invalid length.
[   66.879540][ T2013] netlink: 17 bytes leftover after parsing attributes in process `syz.1.494'.
[   67.125493][ T2032] rust_binder: Error while translating object.
[   67.125538][ T2032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   67.131803][ T2032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257
[   67.161391][ T2036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260
[   67.187853][ T2041] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   67.205437][ T2041] rust_binder: Write failure EINVAL in pid:262
[   67.240591][  T330] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   67.400565][  T330] usb 5-1: Using ep0 maxpacket: 32
[   67.406861][  T330] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   67.415336][  T330] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   67.423992][  T330] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   67.433024][  T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   67.442732][  T330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   67.452427][   T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   67.460024][  T330] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   67.473084][  T330] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   67.482692][  T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.491766][  T330] usb 5-1: config 0 descriptor??
[   67.630565][   T31] usb 3-1: Using ep0 maxpacket: 32
[   67.636809][   T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   67.645456][   T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   67.654137][   T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   67.663151][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   67.672826][   T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   67.682511][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   67.695612][   T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   67.704984][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.713305][  T330] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   67.724879][   T31] usb 3-1: config 0 descriptor??
[   67.731793][  T330] usb 5-1: USB disconnect, device number 10
[   67.740357][  T330] usblp0: removed
[   67.941060][   T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   67.953185][   T31] usb 3-1: USB disconnect, device number 18
[   67.960191][   T31] usblp0: removed
[   68.140936][ T2060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.148497][  T330] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   68.150666][ T2060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.300562][  T330] usb 5-1: Using ep0 maxpacket: 8
[   68.306822][  T330] usb 5-1: config 6 has an invalid interface number: 209 but max is 2
[   68.315337][  T330] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[   68.324372][  T330] usb 5-1: config 6 has an invalid interface number: 99 but max is 2
[   68.340552][  T330] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[   68.349289][  T330] usb 5-1: config 6 has an invalid interface number: 109 but max is 2
[   68.370924][  T330] usb 5-1: config 6 has an invalid interface number: 114 but max is 2
[   68.379151][  T330] usb 5-1: config 6 has an invalid interface descriptor of length 4, skipping
[   68.399174][   T94] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   68.421174][  T330] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3
[   68.430282][  T330] usb 5-1: config 6 has no interface number 0
[   68.444870][  T330] usb 5-1: config 6 has no interface number 1
[   68.451286][  T330] usb 5-1: config 6 has no interface number 2
[   68.457932][  T330] usb 5-1: config 6 has no interface number 3
[   68.464539][  T330] usb 5-1: config 6 interface 209 altsetting 34 has an invalid descriptor for endpoint zero, skipping
[   68.476119][  T330] usb 5-1: config 6 interface 209 altsetting 34 endpoint 0xC has invalid maxpacket 512, setting to 64
[   68.487470][  T330] usb 5-1: config 6 interface 209 altsetting 34 has 6 endpoint descriptors, different from the interface descriptor's value: 13
[   68.501139][  T330] usb 5-1: too many endpoints for config 6 interface 99 altsetting 74: 129, using maximum allowed: 30
[   68.512335][  T330] usb 5-1: config 6 interface 99 altsetting 74 endpoint 0x1 has an invalid bInterval 217, changing to 11
[   68.524995][  T330] usb 5-1: config 6 interface 99 altsetting 74 endpoint 0xE has invalid maxpacket 1015, setting to 64
[   68.536236][  T330] usb 5-1: config 6 interface 99 altsetting 74 has a duplicate endpoint with address 0xA, skipping
[   68.547164][  T330] usb 5-1: config 6 interface 99 altsetting 74 has a duplicate endpoint with address 0xC, skipping
[   68.558102][  T330] usb 5-1: config 6 interface 99 altsetting 74 has an endpoint descriptor with address 0xFD, changing to 0x8D
[   68.570117][  T330] usb 5-1: config 6 interface 99 altsetting 74 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[   68.584331][  T330] usb 5-1: config 6 interface 99 altsetting 74 has a duplicate endpoint with address 0x4, skipping
[   68.595334][  T330] usb 5-1: config 6 interface 99 altsetting 74 has 7 endpoint descriptors, different from the interface descriptor's value: 129
[   68.608901][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[   68.619848][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0xD, skipping
[   68.630886][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0xC, skipping
[   68.641890][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[   68.653578][   T36] audit: type=1400 audit(1757117401.663:342): avc:  denied  { map } for  pid=2070 comm="syz.2.510" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   68.677703][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   68.688571][  T330] usb 5-1: config 6 interface 109 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 64
[   68.702190][  T330] usb 5-1: config 6 interface 109 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[   68.715375][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[   68.726327][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[   68.737218][  T330] usb 5-1: config 6 interface 114 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1023
[   68.747474][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[   68.758415][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[   68.769646][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x8, skipping
[   68.780779][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[   68.795709][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[   68.806504][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[   68.817282][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xD, skipping
[   68.828140][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[   68.838896][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[   68.850133][  T330] usb 5-1: config 6 interface 114 altsetting 2 has a duplicate endpoint with address 0xA, skipping
[   68.860937][  T330] usb 5-1: config 6 interface 209 has no altsetting 0
[   68.867820][  T330] usb 5-1: config 6 interface 99 has no altsetting 0
[   68.874582][  T330] usb 5-1: config 6 interface 109 has no altsetting 0
[   68.881446][  T330] usb 5-1: config 6 interface 114 has no altsetting 0
[   68.889770][  T330] usb 5-1: New USB device found, idVendor=1b80, idProduct=c810, bcdDevice=42.14
[   68.899067][  T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.907173][  T330] usb 5-1: Product: syz
[   68.911401][  T330] usb 5-1: Manufacturer: 뻐賬㴱뾨҄獵俆ኂ큼쓬閩詓㐧鮟粦律뼤팼䗖䂖䩨莸봑‬뮺讦̳柱끮쏦⥯熁㐣쐍᩾꒮轢酷䀘擶㗞⊯蓡죿☚卨핞鎥뼮纮䈥㪵崙䴿ྠ傢⯭㖅鮩ꊽ旦㋋菜苷䵬펼菒莭㸧╲澸㬀Ʞ嬳븈껯ㄤ㤇膐편葳낒鹭隕ꏁ懪ꤝ浧៼⮐霥▽깘蝎ᔠ쨺宊⻰麸騝⎣о뾫凉妜⇙
[   68.947647][  T330] usb 5-1: SerialNumber: syz
[   68.997388][ T2076] binder: Binderfs stats mode cannot be changed during a remount
[   69.020134][   T36] audit: type=1400 audit(1757117402.023:343): avc:  denied  { audit_write } for  pid=2077 comm="syz.2.512" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   69.041252][   T36] audit: type=1400 audit(1757117402.023:344): avc:  denied  { write } for  pid=2077 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.060980][   T36] audit: type=1400 audit(1757117402.033:345): avc:  denied  { getopt } for  pid=2077 comm="syz.2.512" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.081073][   T36] audit: type=1400 audit(1757117402.033:346): avc:  denied  { getopt } for  pid=2077 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   69.154976][ T2027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.158292][ T2089] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   69.163626][ T2089] rust_binder: Read failure Err(EFAULT) in pid:286
[   69.165095][ T2027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.200853][  T330] usb 5-1: USB disconnect, device number 11
[   69.463826][ T2108] binder: Unknown parameter 'defcontext01777777777777777777777'
[   69.720603][  T647] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   69.741775][ T2113] 9pnet_fd: Insufficient options for proto=fd
[   69.870554][  T647] usb 3-1: Using ep0 maxpacket: 8
[   69.877477][  T647] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   69.886247][  T647] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   69.896371][  T647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   69.906872][  T647] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   69.916010][  T647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.924182][  T647] usb 3-1: Product: ퟰt㻃ᇭ홽훜䤼鳩繟󋒆㭂ሼ眍곥覭䁗獔퉵瞖좞舭捣朘உ洰픎鯑⶛鎪픅䰲㩆⼆䓼훷␘ﷺ밦귚ᖏ읉⯙﹁՘ິ䳞ᕛ陫癥᫁誰⦕⢬ꖈ䄓瑝ꩊ楷뾛ଘ䆼뱐䳰䵯滌ഀ坥ퟫ㤋￴ᠴ蔚⋰⸈鄂Ҁ魇ꬵ瘙ꪎᮉዤ붏倻ꬕဗ大ၵ뎅틑᱁冂鴮쨊碵蚎读̺⭚桀㩫뚑㿣
[   69.957255][  T647] usb 3-1: Manufacturer: ₛ彄਌藬믺ꤪㅁ퍅ҹ㡙朰⊶胎룕响嘩匶邢챡쬏坻蹏薀俱ぽ뱄吮മ襡壱峜昊爆ﰱ齦펐꼁槵℧
[   69.972534][  T647] usb 3-1: SerialNumber: 䠧ᫍ䫘싷潭䢄᳎ᱜ庈閉祱᳗뚎戾⥎휯徬Ỗ틇龻蜘⽻邎儭켨൨럘順ꊶ㲃厴펡쨇剛慗䂗ꌹꙥ傸纛帷艭Λ鍢붾坽摘ざ鄧竖녅칾쿛謠ޡ镙쎲ⵙꉿ︹ᑧ좮⃠鏤秞䐹ᾩ㖄榴鹋팖蟆촧嬱켏㛄윦
[   70.719123][  T647] usb 3-1: 0:2 : does not exist
[   70.732833][  T647] usb 3-1: USB disconnect, device number 20
[   70.745197][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   70.878861][   T61] rust_binder: 2124: removing orphan mapping 0:24
[   71.057767][ T2146] rust_binder: 377: no such ref 1
[   71.063306][ T2146] rust_binder: Write failure EFAULT in pid:377
[   71.063318][ T2147] rust_binder: 377: no such ref 1
[   71.063335][ T2147] rust_binder: Write failure EFAULT in pid:377
[   71.110568][ T2153] 2N: renamed from vcan0 (while UP)
[   71.183102][ T2165] syz.3.539 (2165): attempted to duplicate a private mapping with mremap.  This is not supported.
[   71.202056][ T2165] 9pnet_fd: Insufficient options for proto=fd
[   71.251066][ T2168] rust_binder: Write failure EFAULT in pid:386
[   71.361773][ T2174] loop5: detected capacity change from 0 to 7
[   71.374500][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.383735][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.391802][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.401051][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.408937][ T2174]  loop5: unable to read partition table
[   71.415336][ T2174] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   71.429134][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.438348][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.446346][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.455520][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.463409][  T499]  loop5: unable to read partition table
[   71.470463][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.479908][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.488362][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.497557][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.505678][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.514970][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.523150][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.532328][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.540678][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.549888][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   71.793912][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.801089][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.805629][ T2193] rust_binder: Error while translating object.
[   71.808364][ T2189] bridge_slave_0: entered allmulticast mode
[   71.808429][ T2193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   71.815366][ T2189] bridge_slave_0: entered promiscuous mode
[   71.820789][ T2193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:309
[   71.836544][   T12] bridge_slave_1: left allmulticast mode
[   71.851322][   T12] bridge_slave_1: left promiscuous mode
[   71.857205][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.864912][   T12] bridge_slave_0: left allmulticast mode
[   71.870732][   T12] bridge_slave_0: left promiscuous mode
[   71.876360][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.943615][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.950747][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.957945][ T2189] bridge_slave_1: entered allmulticast mode
[   71.964404][ T2189] bridge_slave_1: entered promiscuous mode
[   71.984547][   T12] veth1_macvtap: left promiscuous mode
[   71.990115][   T12] veth0_vlan: left promiscuous mode
[   72.072145][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.079276][ T2189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.086602][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.093686][ T2189] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.115811][  T944] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.123340][  T944] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.133205][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.140279][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.149725][  T944] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.156817][  T944] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.184178][ T2189] veth0_vlan: entered promiscuous mode
[   72.195782][ T2189] veth1_macvtap: entered promiscuous mode
[   72.229199][   T36] audit: type=1326 audit(1757117405.233:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.5.547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e7a58ebe9 code=0x0
[   72.359576][ T2209] netlink: 100 bytes leftover after parsing attributes in process `syz.4.550'.
[   72.910578][   T61] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   73.060616][   T61] usb 5-1: Using ep0 maxpacket: 32
[   73.066998][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.078042][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.087858][   T61] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   73.097006][   T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.105913][   T61] usb 5-1: config 0 descriptor??
[   73.112644][   T61] hub 5-1:0.0: USB hub found
[   73.120546][  T647] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   73.212021][ T2239] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   73.271582][  T647] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   73.288783][  T647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.297680][  T647] usb 3-1: config 0 descriptor??
[   73.311923][   T61] hub 5-1:0.0: 1 port detected
[   73.514539][ T2222] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   73.522319][   T61] hub 5-1:0.0: hub_hub_status failed (err = -71)
[   73.528758][   T61] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   73.537892][   T61] usbhid 5-1:0.0: can't add hid device: -71
[   73.543952][   T61] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   73.571033][   T61] usb 5-1: USB disconnect, device number 12
[   74.163647][ T2245] rust_binder: Error in use_page_slow: ESRCH
[   74.163675][ T2245] rust_binder: use_range failure ESRCH
[   74.169710][ T2245] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   74.175254][ T2245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   74.183299][ T2245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:19
[   74.256298][   T36] audit: type=1326 audit(1757117407.263:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2259 comm="syz.5.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e7a58ebe9 code=0x0
[   74.310800][ T2272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   74.310837][ T2272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:274
[   74.332317][ T2272] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.369583][ T2271] netlink: 40 bytes leftover after parsing attributes in process `syz.5.565'.
[   74.509683][  T647] usb 3-1: Cannot set autoneg
[   74.514552][  T647] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   74.526903][  T647] usb 3-1: USB disconnect, device number 21
[   74.600900][   T94] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[   74.751676][   T94] usb 5-1: config 177 has too many interfaces: 64, using maximum allowed: 32
[   74.760547][   T94] usb 5-1: config 177 has an invalid descriptor of length 0, skipping remainder of the config
[   74.771200][   T94] usb 5-1: config 177 has 0 interfaces, different from the descriptor's value: 64
[   74.781192][   T94] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   74.790278][   T94] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[   74.798450][   T94] usb 5-1: Manufacturer: syz
[   74.904600][ T2313] netlink: 'syz.1.583': attribute type 15 has an invalid length.
[   75.047072][ T2328] ------------[ cut here ]------------
[   75.052638][ T2328] WARNING: CPU: 1 PID: 2328 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[   75.062115][ T2328] Modules linked in:
[   75.066159][ T2328] CPU: 1 UID: 0 PID: 2328 Comm: syz.2.589 Not tainted syzkaller #0 cbcc7fb1a3c48ec238a6a34dd578fa775d2dddba
[   75.077698][ T2328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   75.087819][ T2328] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[   75.093881][ T2328] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 48 ee 05 00 0f 85 be 00 00 00 c6 05 cc 48 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[   75.113682][ T2328] RSP: 0018:ffffc9000c50f580 EFLAGS: 00010246
[   75.119908][ T2328] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[   75.127968][ T2328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c50f638
[   75.135996][ T2328] RBP: ffffc9000c50f6c0 R08: ffffc9000c50f637 R09: 0000000000000000
[   75.144113][ T2328] R10: ffffc9000c50f620 R11: fffff520018a1ec7 R12: ffffc9000c50f5c0
[   75.152402][ T2328] R13: dffffc0000000000 R14: 1ffff920018a1eb4 R15: 0000000000000000
[   75.160419][ T2328] FS:  00007f7d30c8e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   75.169537][ T2328] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.176241][ T2328] CR2: 0000200000006000 CR3: 0000000138d4a000 CR4: 00000000003526b0
[   75.184281][ T2328] Call Trace:
[   75.187761][ T2328]  <TASK>
[   75.190737][ T2328]  ? vfs_write+0x3c3/0xe80
[   75.195282][ T2328]  ? ksys_write+0x141/0x250
[   75.199801][ T2328]  ? x64_sys_call+0x271c/0x2ee0
[   75.204719][ T2328]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   75.210547][ T2328]  ? hashtab_init+0xdb/0x1f0
[   75.215209][ T2328]  ___kmalloc_large_node+0xb5/0x250
[   75.220459][ T2328]  ? hashtab_init+0xdb/0x1f0
[   75.225109][ T2328]  __kmalloc_large_node_noprof+0x1e/0xe0
[   75.230915][ T2328]  ? hashtab_init+0xdb/0x1f0
[   75.235543][ T2328]  __kmalloc_noprof+0x26d/0x450
[   75.240430][ T2328]  hashtab_init+0xdb/0x1f0
[   75.245294][ T2328]  ? common_read+0x16d/0x480
[   75.249928][ T2328]  symtab_init+0x44/0x70
[   75.254324][ T2328]  common_read+0x1de/0x480
[   75.258781][ T2328]  ? __cfi_common_read+0x10/0x10
[   75.263764][ T2328]  ? hashtab_init+0x105/0x1f0
[   75.268460][ T2328]  policydb_read+0xaa8/0x28c0
[   75.273180][ T2328]  ? kasan_save_alloc_info+0x40/0x50
[   75.278489][ T2328]  ? __cfi_policydb_read+0x10/0x10
[   75.283650][ T2328]  ? security_load_policy+0x128/0x12f0
[   75.289135][ T2328]  security_load_policy+0x162/0x12f0
[   75.294486][ T2328]  ? irqentry_exit+0x4a/0x60
[   75.299107][ T2328]  ? exc_page_fault+0x66/0xc0
[   75.303840][ T2328]  ? asm_exc_page_fault+0x2b/0x30
[   75.308887][ T2328]  ? __cfi_security_load_policy+0x10/0x10
[   75.314643][ T2328]  ? rep_movs_alternative+0x4a/0xa0
[   75.319870][ T2328]  sel_write_load+0x298/0x5e0
[   75.324622][ T2328]  ? futex_wait+0x29a/0x7a0
[   75.329163][ T2328]  ? __cfi_sel_write_load+0x10/0x10
[   75.334425][ T2328]  ? __cfi_futex_wait+0x10/0x10
[   75.339324][ T2328]  ? bpf_lsm_file_permission+0xd/0x20
[   75.344750][ T2328]  ? __cfi_sel_write_load+0x10/0x10
[   75.349977][ T2328]  vfs_write+0x3c3/0xe80
[   75.354262][ T2328]  ? __cfi_vfs_write+0x10/0x10
[   75.359046][ T2328]  ? __kasan_check_write+0x18/0x20
[   75.364224][ T2328]  ? mutex_lock+0x92/0x1c0
[   75.368667][ T2328]  ? __cfi_mutex_lock+0x10/0x10
[   75.373561][ T2328]  ? __fget_files+0x2c5/0x340
[   75.378259][ T2328]  ksys_write+0x141/0x250
[   75.382621][ T2328]  ? xfd_validate_state+0x68/0x150
[   75.387758][ T2328]  ? __cfi_ksys_write+0x10/0x10
[   75.392650][ T2328]  ? __kasan_check_write+0x18/0x20
[   75.397791][ T2328]  ? fpregs_restore_userregs+0x11d/0x260
[   75.403501][ T2328]  __x64_sys_write+0x7f/0x90
[   75.408120][ T2328]  x64_sys_call+0x271c/0x2ee0
[   75.412862][ T2328]  do_syscall_64+0x58/0xf0
[   75.417310][ T2328]  ? clear_bhb_loop+0x50/0xa0
[   75.422035][ T2328]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   75.427962][ T2328] RIP: 0033:0x7f7d2fd8ebe9
[   75.432437][ T2328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.452100][ T2328] RSP: 002b:00007f7d30c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   75.460583][ T2328] RAX: ffffffffffffffda RBX: 00007f7d2ffc6090 RCX: 00007f7d2fd8ebe9
[   75.468578][ T2328] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000003
[   75.476596][ T2328] RBP: 00007f7d2fe11e19 R08: 0000000000000000 R09: 0000000000000000
[   75.484637][ T2328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.492653][ T2328] R13: 00007f7d2ffc6128 R14: 00007f7d2ffc6090 R15: 00007fff683744a8
[   75.500677][ T2328]  </TASK>
[   75.503718][ T2328] ---[ end trace 0000000000000000 ]---
[   75.509309][ T2328] SELinux: failed to load policy
[   75.510673][   T94] usb 5-1: USB disconnect, device number 13