last executing test programs:

2.11156568s ago: executing program 3 (id=1771):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2200, 0x1a8, 0x1}, 0x18)
move_mount(r1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x202)

2.09841349s ago: executing program 3 (id=1772):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYRES64=0x0, @ANYBLOB="a136cc3b72ae16779f0bfcf5"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x8010)
recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

1.212056077s ago: executing program 3 (id=1779):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB=' \x00o'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xc46, 0x4)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000884000/0x2000)=nil)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])

1.08899668s ago: executing program 2 (id=1780):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0})

1.07757199s ago: executing program 2 (id=1781):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x508})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pipe(&(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
r2 = socket(0x15, 0x80000, 0x4)
write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0})

1.04796873s ago: executing program 2 (id=1783):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) (async)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) (async)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

911.941823ms ago: executing program 1 (id=1790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000080))
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000001c0)={0x1000, "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"})
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001200)={{0x2, 0x4e24, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, {0x2, 0x4e22, @private=0xa010101}, 'ip6gretap0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001280)={<r3=>0x0, <r4=>0x0}, &(0x7f00000012c0)=0xc)
sched_setaffinity(r3, 0x8, &(0x7f0000001300)=0xffffffffffffff4e)
fchmod(r0, 0x1c0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mount$cgroup(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x10000, &(0x7f00000013c0)={[{@xattr}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@nofavordynmods}, {@noprefix}, {@cpuset_v2_mode}, {@none}, {@favordynmods}, {@cpuset_v2_mode}, {@clone_children}], [{@smackfsdef={'smackfsdef', 0x3d, '*%\')-^].'}}, {@subj_user={'subj_user', 0x3d, '\\'}}, {@uid_eq={'uid', 0x3d, r4}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ip6gretap0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'S'}}, {@smackfsroot={'smackfsroot', 0x3d, '[$/&'}}]})
r5 = openat$cgroup_int(r2, &(0x7f00000014c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000001500)=0x1, 0x12)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = openat$cgroup(r2, &(0x7f0000001540)='syz1\x00', 0x200002, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/wake_unlock', 0x8000, 0x44)
ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f00000015c0)=0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0)
truncate(&(0x7f0000001600)='./file0\x00', 0x6)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001640)={{r6}, "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"})
getpgid(r3)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/consoles\x00', 0x0, 0x0)
ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3)
fspick(r2, &(0x7f0000002680)='./file0\x00', 0x0)
r10 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece)
read$FUSE(r10, &(0x7f00000026c0)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f0000004800)={{r8}, 0x0, 0x2, @unused=[0xfff, 0xffffffff, 0x3], @subvolid=0x4})

911.299583ms ago: executing program 1 (id=1791):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0240, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "b98de733ebcd15091aa33c3f1e1f962d"}, 0x11, 0x1)
r1 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x3900)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r2 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x8900)
accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x856, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c810}, 0x4000010)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x1a, 0x5, 0x1db, &(0x7f0000000340)="bcfe343723247c7ef672ffca78924862561a8ad88915a4f27cb150c2477ed9aad09cfac90aad06b443ea2d3c780be9aa6b5d10e1d4fa69a37b6011a2648ef7074fcd4a53842f02b807ca4e2994fe5466908da0b66f21f0cc43bdcf2a052118cbecd8fc1cdae26254dd7617e04049ec45b26a5de6eb8d24ac05b4fa66f22ac311b00ecac724c5632b90afc5466dd34676cb543342645012a351097f2ad3d8175a5afd8b972f16255176b713c21424669572abb89e26a8ec8c95f6abd236b76c49200e5de00d8c8f0d95e3241ca4e65750caad7d17bf08b1d176615bd890eea1d9818aba77135bba055078e615e38a4fae858c4b06bcf1a74868459419c8b439b3ea37b1db38a36c6af5817bdd494b491fc1e16bc270b8a1cd1c3a8e665abac5d75bcd0cbb5e1da66461d74f95a1dec5a21b3ebe8f9b5a4fa116fd77157063d8ffb385014d20f21a00d0da935b5c4bab3a93f5ce0d0d9897e4da7d63a5cf37014a90342ef1e39913d8ac41f5601b860f56904a9137b0b781272b7c3e8683bf584f7f53dcf79a83c131fde729a4818c65121e4f0c263834dee4643ae03f0f11aef6c31b833b6bb2a58621483a4a51e4bec9d06043d1cd01146852df102fea5543d5a14ae0c5900d18bc72aa3bac1cb6bfed8d5801df7c57674a48a32dea83b00b77554582610b32ccc9175968082b90f0211ee322949da59b24cef0387f754bae5a9c435dda546e55303dcf87c1766e65c72eaba261449f797842f1e89fcdb4590ef599561baf37cce728f000c3d8c77286f3ed99776eb3bffc0015e31daa69a999fa42148fd42a10d31412572152c07e23cd57d74ace00a458cd97e25f4067a26839c72df2328a178e56da47db38179a58651b0cb706888c9089fd043ddff430dff38a149ce4b76bc41158b9b7916c69c3ac9035b0f204263c920e898d337994b4e068a291553bece5afb264753d64773f8363d1f25d5b7fe943f1723f6b6aafaaa1cd7d1db43055f1de6abf5178d79bf63fff30cc52b5b91e706d112dd7dfc76ffb572025a4e082f7fa0eea9abeca27d6cb8988e6b21dd51dd397833be042ea4b1ea97a52aac2f712dbe2b24da4dbe0200654e2838340faeb26e9a2bd78e3b785d68b8cafedd3ac0e5b670e8d85250423bb73b016236109424883c991b17aa1f310ad64acd229b91074e72ac6a7fa172e254648d0807c737918a92c20d68c74695b7f3310ee3a6a99d948742cab89876349a5899eabd45733c8e541a295feeef52671d66ad5adeded67d893a51ca4964b1db11ab0f7345882c1896d291b6a6c1d49aedd55a30c05f717256ae6d9deb428aaaf76b02aed1fc763135834ad3eae0873b255b58c70342c2b39528dc57ac13ff533042dd53558806e1df14210d0261a491cf7cb4f14e6b6059a1193ba3cf2e6bf087d595983c4e632db4df9ab6cc0ea"})
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000007c0)=@gcm_256={{0xe9f6ddbaf3f6ae10}, "53bf2b4af2ec119d", "826be61972909cfc6c966195be7437d045ded76a0806541ef5b28852913d909d", "d5bb48ef", "b18cf521a29bbfd6"}, 0x38)
ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000800))
recvfrom$unix(r1, &(0x7f0000000840)=""/214, 0xd6, 0x40000000, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
r6 = accept4$unix(r1, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x81}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4)
r8 = syz_open_dev$loop(&(0x7f0000000b80), 0x1, 0x4000)
ioctl$BLKCRYPTOPREPAREKEY(r8, 0xc040128b, &(0x7f0000000c80)={&(0x7f0000000bc0)="749996518a5d23ab444ec34223501840e6e9d84c4d40d04aad88297f3078a9b10ab4b23d8a743fddf0819bb36c274aba6ddaa78f6d9e3ca6cb9cfffc0fe8894c18039c23105b656769e4f22487d91e0dfeb820ec6c370beeba695085ecc34980296ab3fb0b7bf2775b", 0x69, &(0x7f0000000c40)=""/37, 0x25})
fchmod(r6, 0x100)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000dc0), 0x4c0000, 0x0)
ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000e00)={0x6, 0x0, [{0x80000019, 0x8, 0x198f, 0x7, 0x2}, {0x0, 0x5, 0x7, 0xf12c}, {0x1, 0xfffffffe, 0x7, 0x5, 0xfd7}, {0x2, 0x1, 0x401, 0x2, 0x5}, {0xb, 0x28e, 0x0, 0x101, 0x8}, {0x0, 0x1, 0x10001, 0x8, 0xfff}]})
bind$pptp(r9, &(0x7f0000000ec0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
recvmmsg(r3, &(0x7f0000002ac0)=[{{&(0x7f0000000f00)=@rc, 0x80, 0xfffffffffffffffe}, 0x62}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/166, 0xa6}, {&(0x7f0000001040)=""/206, 0xce}, {&(0x7f0000001140)=""/141, 0x8d}], 0x3, &(0x7f0000001240)=""/249, 0xf9}, 0x8}, {{&(0x7f0000001340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/154, 0x9a}, {&(0x7f0000002480)=""/255, 0xff}, {&(0x7f0000002580)=""/8, 0x8}, {&(0x7f00000025c0)=""/82, 0x52}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/196, 0xc4}, {&(0x7f00000027c0)=""/154, 0x9a}], 0x8, &(0x7f0000002900)}, 0x5f0}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002940)=""/179, 0xb3}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)}], 0x3}, 0xe}], 0x4, 0x10000, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000002bc0)={0x6, 0x0, [{0x80000000, 0x2b8e, 0xfffffffd, 0x674}, {0x0, 0x8, 0xc, 0x8, 0x1dac}, {0x40000000, 0x6, 0x6, 0x2, 0xffffff16}, {0xd, 0x80000000, 0x7fff, 0x16, 0x5}, {0xb, 0xa, 0x2, 0x400, 0xfff}, {0x2, 0x4, 0x8, 0x5, 0x1}]})
ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000003000)={{'\x00', 0x2}, {0xe}, 0x4, 0x0, 0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)="b61e62e90d7dcd30ba95696a3ec4aa83074e71adee5c224388e8364d2b7e3f1788685d91c287a8ac65e82aafde79d1ef38c42a33094d7a83a7ac6a41e35045bf180c1f54988d6610b231621cec9a97c2ff885210995cfc3fe0e870ebe07c828393c4fb1251831da549889e0ae2eefdd92b702a45014b991cbf027793795b1a2e4896ec17c15dcdf18d7b4a570ce73924f6c53154060f36e535da32af9fabc7a9fce144a5001d48564295c960bb1b8b833bb16ab137ec95d2dc1bf17ae2ab7d20ee1aa1616138f82a6fe5f910fce3bb4f6c3a0d47d93026f543f7573b41adef77a75b8af5a342bf26ce6a752cbe3554cf546caf085e4d860618ba276bfa9a1dfd45ab663b778a4f2b03", 0x109, 0x0, &(0x7f0000002e40)={0x2, 0xd3, {0x1, 0xc, 0x1f, "c960f07c3f991dd1ca65498cd490ed42ea32dc70b22eedb409f1e809132bd4", 0xa7, "6be45bc18d59717eada7536c3d1f9d2b07e71ec1e2b4627c1bef0259e21b053f7cd4dbf69aa64dabd113b0b65a0897c6449086ddec372e9293343525f3179086917c88266ea29913898f72befcf8b0652653835bac1c43c4959747b823b3eecc4fd176931768cd6cc2a703b1b3e39b47d189aec0b475a908a22839ecc85b3f207ff88b05206de7b6434cb1f6fe8a261aa99973d3edc7de83525789da1daec41d17bf6851d03d9f"}, 0xd1, "1c72e183a90b7e9e81a5e23da1ee6331e4f43663b705bd834e7d1f03e0dc209ba24c4b22359f273ca38c5e509c4aa22dcba9c9f3e242504c70440d9481cd21927068d973a4b4e367a9fe3d61c2bcd273f986fc57e6b2fe62b9ced62053716b563307ead7e54b98a4866c47abc07abf3db9aefe530779647451fd8aaac36f511a6c6c5e457cd124a165e159c4cb61e2143b527561de0fe637f17fe2ff30bf17c8e060b3640b9ff9e4223e10cf1b08823e386eeb8feb31758f5a5cd1d530c4f02ed67a97fee2ccfbeba46a03f9271affcede"}, 0x1b0})
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6)
mkdirat(0xffffffffffffffff, &(0x7f0000003080)='./file0\x00', 0x140)

910.995033ms ago: executing program 1 (id=1792):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00')
dup(r0) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000)

860.010484ms ago: executing program 1 (id=1793):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

859.064224ms ago: executing program 1 (id=1794):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000140)={0xd, 0x5, [{0x0, 0x0, 0x1}, {0xf, 0x0, 0xfffffffffffff0ef}, {0x200, 0x0, 0x5}, {0x800dd7}, {0x3, 0x0, 0x7f}, {0x8, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0xe0000000000000}, {0x10000000, 0x0, 0x80}, {0x5, 0x0, 0x51}, {}, {0x21ff, 0x0, 0x3}, {0x9, 0x0, 0x3}, {0x5, 0x0, 0x1fb}, {0x4, 0x0, 0xaf6}, {0x8c3, 0x0, 0xef}, {0x401, 0x0, 0x101}]})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0)
read(r4, &(0x7f0000000080)=""/122, 0x7a)
read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x38)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sched_setattr(r5, &(0x7f0000002140)={0x38, 0x0, 0x10000036, 0xffffffa6, 0x3, 0x3, 0x5d9, 0x4, 0x1000d, 0x7fff}, 0x0)
write(r7, &(0x7f0000000000)="24000000010006", 0x7)
r8 = dup(r6)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@empty, 0x0, 0x56, 0x4e24, 0x0, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000340)={0x5, 0x2, 0x9, 0x13, 0x10, "98506107b5d30e48"})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
r10 = accept4$tipc(r3, &(0x7f00000021c0), &(0x7f0000002200)=0x10, 0x80000)
bind$tipc(r10, &(0x7f0000002240)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCEXCL(r1, 0x540c)

740.326966ms ago: executing program 3 (id=1795):
r0 = socket(0x15, 0x80000, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)=ANY=[@ANYBLOB="1400000018000117d8e2e497cc8791251d010900"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40)
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="66b9341001c00f323ef20f3264f30f090f38f167060406f3366565f20f300f01df66b9014d564b66b87900000066ba000000000f30260f01cf0f01996c87", 0x3e}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

727.373207ms ago: executing program 3 (id=1796):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x38, 0x12)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x13, 0x9, 0x7f, 0x1}}) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x250803, 0x0)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000)

672.092067ms ago: executing program 3 (id=1797):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet(0x2, 0x2, 0xfffffffe)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x30500000)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4015, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000800000c0"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="660f69f8660f8d13000000b807008ec0660f72d0860f2252ddb330ffba4100b80000ef0f23f866b8e4da00200f23c00f21f86635020007000f23f8f30f1ec0", 0x3f}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = epoll_create1(0x80000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb4000040"])
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x8000001a})
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
close_range(r6, r6, 0x0)

667.994538ms ago: executing program 0 (id=1799):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3}}, 0x2e)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fallocate(r1, 0x11, 0x8, 0x5ad)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x62040200)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000001900)="900000001c001f4d154a817393278bff0a80a578020000000304840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2a724d6e7d8f2bb079fc14cfc33ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x8090, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'bond0\x00', {0x5}, 0x8})
ioctl$BLKRRPART(r3, 0x125f, 0x0)

622.597359ms ago: executing program 0 (id=1800):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+')
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) (async)

568.038639ms ago: executing program 0 (id=1801):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x30, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x9, 0x0, 0x0, 0x1, [@generic="cec654a2c5"]}]}]}, 0x30}], 0x1}, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x2, 0x764e}) (async)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x2, 0x764e})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

565.88711ms ago: executing program 0 (id=1802):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x7, 0x1, 0x1}}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000000) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
prctl$PR_SET_MM(0x23, 0x6, &(0x7f00005a0000/0x1000)=nil) (async)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) (rerun: 64)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4) (async)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023b0e33cbf1d2b4d0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c31625080a1c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a07000000e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5595865a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc52872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82edcc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f605076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae75d1f5ae611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3f994c56a82a02a35aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f70100000000000000600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd4912b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"}) (async, rerun: 32)
epoll_create1(0x80000) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 32)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r5, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

547.05009ms ago: executing program 2 (id=1803):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(r0, 0x0, 0x20008800)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2240, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000700)={0xc7, 0x0, 0x1})
ioctl$KVM_GET_REGS(r6, 0x8090ae81, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r9 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c)
io_setup(0x8, &(0x7f0000004200)=<r10=>0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00')
io_submit(r10, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x8, 0xfffe, r11, 0x0}])
socket$netlink(0x10, 0x3, 0x0)

371.368553ms ago: executing program 1 (id=1804):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x20, 0x0, 0x0)
write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000540)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_POLL(r3, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r4, {0xff}}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x8fe69000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x40001b2, 0x40002040, 0x0)
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17)
close_range(r0, 0xffffffffffffffff, 0x0)

32.05736ms ago: executing program 0 (id=1805):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) (async)
sendmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
pipe2$9p(&(0x7f0000000040), 0x4c000) (async)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4c000)
write$P9_RLERRORu(r3, &(0x7f0000000080)={0x15, 0x7, 0x1, {{0x8, '*\'(][\xca\\)'}, 0x8}}, 0x15)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0) (async)
ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0)

31.665959ms ago: executing program 0 (id=1806):
gettid()
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = gettid()
futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
timer_delete(r4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)

15.059ms ago: executing program 2 (id=1807):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async)
setuid(0xee01) (async)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffa000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000040)=0x46c, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'sit0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x62}, 0x14)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}})
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)

0s ago: executing program 2 (id=1808):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000900)={'vlan0\x00', @random="0600002000"})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r3, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d)
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000, 0x40000000000000, 0x21, 0x7, 0x1, 0x8000, 0x0, r5, r6, 0x1020003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000700)=ANY=[@ANYBLOB="726c6f675f70616765733d31383434360004343035363532393638323433322c0086556ba4a06a6542b579b97c04e600ef83d2312c93b66884ac0f3fb23e58907e657d198fdfa3be887cb0d6dd0d17541c71eddc3a2c5880a27e87b1a5c4f76c6bae5680fd730bbd98a1a0109010eee5a76729afdc432c7998d71c861c8682e076ea95d544c090141ab938a85b825ffb124022d6137e33894a6aa02a9f73221cb0d094d03537e3fa61a15e89811b31a40bdf9e4aced1ce399aa3c0a331e599e80cb782"])
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8)
ftruncate(r2, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400080, 0x4)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x21044, &(0x7f0000000600)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_lt={'uid<', r7}}, {@euid_gt={'euid>', r5}}, {@fsmagic}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x62, 0x30, 0xe, 0x36, 0x31, 0x66, 0x30], 0x2d, [0x64, 0x63, 0x33, 0x1], 0x2d, [0x62, 0x35, 0x65, 0x35], 0x2d, [0x64, 0x38, 0x32, 0x39], 0x2d, [0x65, 0x65, 0x35, 0x38, 0x2, 0x0, 0x61, 0x38]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x6, 0x33, 0x52, 0x32, 0x30, 0x52, 0x31], 0x2d, [0x64, 0x33, 0x38, 0x66], 0x2d, [0x36, 0x35, 0x34, 0x62], 0x2d, [0x2, 0x32, 0x33, 0x37], 0x2d, [0x0, 0x64, 0x39, 0x63, 0x65, 0x37, 0x65, 0x38]}}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}], 0x2f})
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0))
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'ip6tnl0\x00', 0x85d2})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

0: port 1(bridge_slave_0) entered disabled state
[   34.521033][   T85] usb 4-1: device descriptor read/64, error -71
[   34.590274][  T621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   34.599614][  T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   34.599637][  T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68
[   34.641365][   T10] rust_binder: 547: removing orphan mapping 0:1168
[   34.661264][  T623] GUP no longer grows the stack in syz.0.92 (623): 200000001000-200000c01000 (200000000000)
[   34.671590][  T623] CPU: 0 UID: 0 PID: 623 Comm: syz.0.92 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[   34.671629][  T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   34.671652][  T623] Call Trace:
[   34.671660][  T623]  <TASK>
[   34.671669][  T623]  __dump_stack+0x21/0x30
[   34.671713][  T623]  dump_stack_lvl+0x10c/0x190
[   34.671744][  T623]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.671774][  T623]  ? find_vma+0xcd/0x110
[   34.671797][  T623]  dump_stack+0x19/0x20
[   34.671826][  T623]  __get_user_pages+0x1e34/0x22d0
[   34.671856][  T623]  ? __kasan_check_write+0x18/0x20
[   34.671894][  T623]  ? down_read_killable+0x79/0xf0
[   34.671916][  T623]  ? populate_vma_page_range+0x230/0x230
[   34.671945][  T623]  ? kernel_text_address+0xa9/0xe0
[   34.671988][  T623]  __gup_longterm_locked+0xcb1/0x1580
[   34.672017][  T623]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   34.672047][  T623]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   34.672074][  T623]  gup_fast_fallback+0x12ae/0x14a0
[   34.672103][  T623]  ? kasan_save_track+0x4f/0x80
[   34.672126][  T623]  ? kasan_save_track+0x3e/0x80
[   34.672150][  T623]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.672188][  T623]  ? get_user_pages_fast_only+0xc0/0xc0
[   34.672219][  T623]  get_user_pages_fast+0x73/0xb0
[   34.672248][  T623]  get_futex_key+0x24d/0x930
[   34.672270][  T623]  ? __cfi_get_futex_key+0x10/0x10
[   34.672299][  T623]  ? futex_setup_timer+0xb4/0xd0
[   34.672321][  T623]  futex_lock_pi+0x1c0/0xa10
[   34.672346][  T623]  ? futex_unqueue+0x136/0x160
[   34.672369][  T623]  ? __cfi_futex_lock_pi+0x10/0x10
[   34.672396][  T623]  ? __cfi_futex_wake_mark+0x10/0x10
[   34.672425][  T623]  ? futex_setup_timer+0xb4/0xd0
[   34.672446][  T623]  ? __cfi_futex_wake_mark+0x10/0x10
[   34.672475][  T623]  ? __seccomp_filter+0x433/0x1a70
[   34.672497][  T623]  do_futex+0x25c/0x500
[   34.672520][  T623]  ? __cfi_do_futex+0x10/0x10
[   34.672542][  T623]  ? vm_mmap_pgoff+0x145/0x4e0
[   34.672564][  T623]  __se_sys_futex+0x28f/0x300
[   34.672588][  T623]  ? __x64_sys_futex+0x110/0x110
[   34.672613][  T623]  __x64_sys_futex+0xe9/0x110
[   34.672637][  T623]  x64_sys_call+0x227f/0x2ee0
[   34.672669][  T623]  do_syscall_64+0x58/0xf0
[   34.672696][  T623]  ? clear_bhb_loop+0x50/0xa0
[   34.672718][  T623]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.672751][  T623] RIP: 0033:0x7f580bf8eec9
[   34.672776][  T623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.672794][  T623] RSP: 002b:00007f580cef8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   34.672824][  T623] RAX: ffffffffffffffda RBX: 00007f580c1e5fa0 RCX: 00007f580bf8eec9
[   34.672841][  T623] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00
[   34.672856][  T623] RBP: 00007f580c011f91 R08: 0000000000000000 R09: 0000000000000002
[   34.672871][  T623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   34.672885][  T623] R13: 00007f580c1e6038 R14: 00007f580c1e5fa0 R15: 00007fff58a590e8
[   34.672904][  T623]  </TASK>
[   34.993490][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.993521][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.000137][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.006553][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.013326][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.020265][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.027213][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.033378][   T85] usb 4-1: device descriptor read/64, error -71
[   35.034109][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.047598][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.056754][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.059571][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.066115][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.073052][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.079322][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.079340][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.092393][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.098686][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.098706][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.112409][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.118093][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.124907][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.131696][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.138424][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.159400][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.159422][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.166154][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.172682][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.179292][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.186004][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.192576][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.199147][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.205736][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.213415][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.219968][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.226713][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.233435][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.239963][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.246740][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.253238][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.259688][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.266308][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.272794][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.279238][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.281104][   T85] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   35.285761][   T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   35.292848][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.307437][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.314222][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.320809][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.327394][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.334274][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.340886][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.347689][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.355090][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.362000][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.368567][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.375375][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.382102][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.388694][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.395461][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.402221][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.408816][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.415392][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.421951][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.428678][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.435243][  T632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.455566][   T65] usb 1-1: Using ep0 maxpacket: 16
[   35.471068][   T65] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   35.487373][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20
[   35.499099][   T65] usb 1-1: SerialNumber: syz
[   35.504779][   T65] usb 1-1: config 0 descriptor??
[   35.511394][   T65] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   35.519511][   T65] usb 1-1: Detected FT232A
[   35.528093][   T65] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   35.536419][  T638] process 'syz.1.96' launched './file0' with NULL argv: empty string added
[   35.701048][   T85] usb 4-1: device descriptor read/64, error -71
[   35.715571][  T632] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[   35.715598][  T632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   35.723695][  T632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:49
[   35.771779][   T65] usb 1-1: USB disconnect, device number 7
[   35.787444][   T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   35.797122][   T65] ftdi_sio 1-1:0.0: device disconnected
[   35.951039][   T85] usb 4-1: device descriptor read/64, error -71
[   36.061194][   T85] usb usb4-port1: attempt power cycle
[   36.319346][   T36] kauditd_printk_skb: 3323 callbacks suppressed
[   36.319365][   T36] audit: type=1400 audit(1759621880.610:3523): avc:  denied  { getopt } for  pid=644 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.354242][  T648] netlink: 72 bytes leftover after parsing attributes in process `syz.0.100'.
[   36.363569][  T648] SELinux: security_context_str_to_sid () failed with errno=-22
[   36.401093][   T85] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   36.422068][   T85] usb 4-1: device descriptor read/8, error -71
[   36.491053][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   36.491331][  T595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   36.552210][   T85] usb 4-1: device descriptor read/8, error -71
[   36.621100][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   36.772151][   T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.783121][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   36.789774][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[   36.798950][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.807032][   T85] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   36.815966][   T10] usb 1-1: config 0 descriptor??
[   36.832051][   T85] usb 4-1: device descriptor read/8, error -71
[   36.848489][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.972037][   T85] usb 4-1: device descriptor read/8, error -71
[   37.022223][  T654] can: request_module (can-proto-3) failed.
[   37.026084][  T656] FAT-fs (rnullb0): bogus number of reserved sectors
[   37.037451][   T10] wacom 0003:056A:00FA.0003: hidraw0: USB HID v0.01 Device [HID 056a:00fa] on usb-dummy_hcd.0-1/input0
[   37.048641][  T656] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   37.064506][    T9] usb 1-1: USB disconnect, device number 8
[   37.085958][   T85] usb usb4-port1: unable to enumerate USB device
[   37.243128][  T664] netlink: 'syz.3.106': attribute type 4 has an invalid length.
[   37.258157][  T664] netlink: 'syz.3.106': attribute type 4 has an invalid length.
[   37.272882][  T670] rust_binder: Error while translating object.
[   37.272936][  T670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.279354][  T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[   37.306176][  T675] veth1_macvtap: left promiscuous mode
[   37.320752][  T675] macsec0: entered promiscuous mode
[   37.327481][   T36] audit: type=1400 audit(1759621881.620:3524): avc:  denied  { bind } for  pid=672 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.328200][  T675] veth1_macvtap: entered promiscuous mode
[   37.352626][  T675] macsec0: left promiscuous mode
[   37.361391][  T675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.361419][  T675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81
[   37.386948][   T36] audit: type=1400 audit(1759621881.680:3525): avc:  denied  { listen } for  pid=677 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.421321][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   37.438432][   T36] audit: type=1400 audit(1759621881.730:3526): avc:  denied  { mount } for  pid=679 comm="syz.2.112" name="/" dev="overlay" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.460727][   T36] audit: type=1400 audit(1759621881.750:3527): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.482166][   T36] audit: type=1400 audit(1759621881.750:3528): avc:  denied  { mount } for  pid=681 comm="syz.3.113" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   37.482686][  T683] 9pnet_fd: Insufficient options for proto=fd
[   37.504267][   T36] audit: type=1400 audit(1759621881.750:3529): avc:  denied  { mounton } for  pid=681 comm="syz.3.113" path="/35/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   37.513353][  T682] 9pnet_fd: Insufficient options for proto=fd
[   37.533474][   T36] audit: type=1400 audit(1759621881.760:3530): avc:  denied  { remount } for  pid=681 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.581074][    T9] usb 1-1: Using ep0 maxpacket: 32
[   37.587345][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.598534][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[   37.607761][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.621160][    T9] usb 1-1: config 0 descriptor??
[   37.630211][   T36] audit: type=1400 audit(1759621881.920:3531): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   37.680264][   T36] audit: type=1400 audit(1759621881.970:3532): avc:  denied  { create } for  pid=693 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   37.695744][  T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.699554][  T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[   37.758150][  T700] binder: Unknown parameter 'statsaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   37.786431][  T702] rust_binder: Error while translating object.
[   37.877916][  T702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   37.884504][  T702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:116
[   37.910769][  T704] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[   37.931871][  T705] fuse: Invalid rootmode
[   38.011591][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   38.043490][  T712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'.
[   38.052477][  T712] bridge_slave_1: left allmulticast mode
[   38.058149][  T712] bridge_slave_1: left promiscuous mode
[   38.063828][  T712] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.071691][  T712] bridge_slave_0: left allmulticast mode
[   38.077445][  T712] bridge_slave_0: left promiscuous mode
[   38.083211][  T712] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.092040][    T9] kye 0003:0458:5013.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   38.102912][    T9] kye 0003:0458:5013.0004: unknown main item tag 0x0
[   38.109696][    T9] kye 0003:0458:5013.0004: unknown main item tag 0x0
[   38.116530][    T9] kye 0003:0458:5013.0004: unknown main item tag 0x0
[   38.123383][    T9] kye 0003:0458:5013.0004: unknown main item tag 0x0
[   38.130116][    T9] kye 0003:0458:5013.0004: unknown main item tag 0x0
[   38.137846][    T9] kye 0003:0458:5013.0004: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0
[   38.149782][    T9] kye 0003:0458:5013.0004: tablet-enabling feature report not found
[   38.157927][    T9] kye 0003:0458:5013.0004: tablet enabling failed
[   38.165734][  T713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'.
[   38.183004][   T10] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   38.195965][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[   38.205168][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40
[   38.214326][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.220197][  T718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'.
[   38.222374][   T10] usb 3-1: Product: В
[   38.222415][   T10] usb 3-1: Manufacturer: І
[   38.240042][   T10] usb 3-1: SerialNumber: syz
[   38.294731][    T9] usb 1-1: USB disconnect, device number 9
[   38.649867][   T10] usbhid 3-1:1.0: can't add hid device: -71
[   38.656375][   T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   38.665330][   T10] usb 3-1: USB disconnect, device number 3
[   38.884002][  T730] /dev/sr0: Can't lookup blockdev
[   38.891042][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   38.897127][  T595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.964416][  T740] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   38.972811][  T740] rust_binder: Write failure EINVAL in pid:93
[   39.084948][  T751] __vm_enough_memory: pid: 751, comm: syz.1.134, bytes: 18014402804453376 not enough memory for the allocation
[   39.127404][  T753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.218952][  T775] input: syz1 as /devices/virtual/input/input7
[   39.246519][  T779] 9pnet_fd: Insufficient options for proto=fd
[   39.401327][  T785] rust_binder: Error while translating object.
[   39.401364][  T785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   39.415439][  T785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84
[   39.476151][  T794] kthread_run failed with err -4
[   39.555746][  T803] kvm: emulating exchange as write
[   39.595522][  T806] __vm_enough_memory: pid: 806, comm: syz.0.150, bytes: 18014402804453376 not enough memory for the allocation
[   39.789301][  T812] syz.0.153: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   39.812367][  T812] CPU: 1 UID: 0 PID: 812 Comm: syz.0.153 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[   39.812420][  T812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.812439][  T812] Call Trace:
[   39.812449][  T812]  <TASK>
[   39.812464][  T812]  __dump_stack+0x21/0x30
[   39.812512][  T812]  dump_stack_lvl+0x10c/0x190
[   39.812557][  T812]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.812603][  T812]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   39.812659][  T812]  dump_stack+0x19/0x20
[   39.812701][  T812]  warn_alloc+0x1bc/0x2a0
[   39.812745][  T812]  ? stack_depot_save_flags+0x399/0x800
[   39.812780][  T812]  ? __cfi_warn_alloc+0x10/0x10
[   39.812815][  T812]  ? kasan_save_track+0x4f/0x80
[   39.812845][  T812]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   39.812877][  T812]  ? xskq_create+0x68/0x2a0
[   39.812917][  T812]  ? xsk_init_queue+0xb6/0x120
[   39.812957][  T812]  ? xsk_setsockopt+0x43f/0x6f0
[   39.812990][  T812]  ? do_sock_setsockopt+0x26a/0x400
[   39.813023][  T812]  ? __x64_sys_setsockopt+0x1b8/0x250
[   39.813058][  T812]  ? x64_sys_call+0x2adc/0x2ee0
[   39.813097][  T812]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.813134][  T812]  __vmalloc_node_range_noprof+0x135/0x1420
[   39.813175][  T812]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   39.813210][  T812]  ? avc_has_perm+0x144/0x220
[   39.813247][  T812]  ? kasan_save_alloc_info+0x40/0x50
[   39.813282][  T812]  ? __kasan_kmalloc+0x96/0xb0
[   39.813310][  T812]  vmalloc_user_noprof+0x77/0x90
[   39.813345][  T812]  ? xskq_create+0xdb/0x2a0
[   39.813377][  T812]  xskq_create+0xdb/0x2a0
[   39.813410][  T812]  xsk_init_queue+0xb6/0x120
[   39.813442][  T812]  xsk_setsockopt+0x43f/0x6f0
[   39.813471][  T812]  ? __cfi_xsk_setsockopt+0x10/0x10
[   39.813502][  T812]  ? do_futex+0x309/0x500
[   39.813528][  T812]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   39.813559][  T812]  ? security_socket_setsockopt+0x33/0xd0
[   39.813585][  T812]  ? __cfi_xsk_setsockopt+0x10/0x10
[   39.813632][  T812]  do_sock_setsockopt+0x26a/0x400
[   39.813666][  T812]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   39.813699][  T812]  __x64_sys_setsockopt+0x1b8/0x250
[   39.813733][  T812]  x64_sys_call+0x2adc/0x2ee0
[   39.813767][  T812]  do_syscall_64+0x58/0xf0
[   39.813795][  T812]  ? clear_bhb_loop+0x50/0xa0
[   39.813818][  T812]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.813856][  T812] RIP: 0033:0x7f580bf8eec9
[   39.813875][  T812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.813894][  T812] RSP: 002b:00007f580cef8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   39.813918][  T812] RAX: ffffffffffffffda RBX: 00007f580c1e5fa0 RCX: 00007f580bf8eec9
[   39.813935][  T812] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   39.813949][  T812] RBP: 00007f580c011f91 R08: 0000000000000004 R09: 0000000000000000
[   39.813963][  T812] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.813975][  T812] R13: 00007f580c1e6038 R14: 00007f580c1e5fa0 R15: 00007fff58a590e8
[   39.813995][  T812]  </TASK>
[   39.814047][  T812] Mem-Info:
[   40.071956][  T815] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   40.083770][  T812] active_anon:6313 inactive_anon:0 isolated_anon:0
[   40.083770][  T812]  active_file:17779 inactive_file:2232 isolated_file:0
[   40.083770][  T812]  unevictable:0 dirty:53 writeback:0
[   40.083770][  T812]  slab_reclaimable:4932 slab_unreclaimable:69976
[   40.083770][  T812]  mapped:24127 shmem:163 pagetables:858
[   40.083770][  T812]  sec_pagetables:0 bounce:0
[   40.083770][  T812]  kernel_misc_reclaimable:0
[   40.083770][  T812]  free:1531484 free_pcp:5311 free_cma:0
[   40.181362][  T824] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.181736][  T823] overlayfs: conflicting options: userxattr,verity=require
[   40.196089][  T823] overlayfs: conflicting options: userxattr,verity=require
[   40.203556][  T824] rust_binder: Error while translating object.
[   40.203586][  T824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   40.210258][  T812] Node 0 active_anon:25316kB inactive_anon:0kB active_file:71116kB inactive_file:8928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96528kB dirty:212kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5388kB pagetables:3568kB sec_pagetables:12kB all_unreclaimable? no
[   40.212803][  T820] rust_binder: Error while translating object.
[   40.219760][  T812] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB
[   40.280869][  T824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101
[   40.294110][  T812] lowmem_reserve[]:
[   40.300335][  T820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   40.303764][  T812]  0
[   40.313137][  T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101
[   40.317586][  T812]  3921 3921
[   40.334329][  T812] Normal free:3177088kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25416kB inactive_anon:0kB active_file:71116kB inactive_file:8928kB unevictable:0kB writepending:212kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3796kB local_pcp:1828kB free_cma:0kB
[   40.378526][  T812] lowmem_reserve[]: 0 0 0
[   40.391226][  T812] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   40.407114][  T812] Normal: 33*4kB (E) 636*8kB (UME) 853*16kB (UME) 453*32kB (UME) 395*64kB (UME) 192*128kB (UM) 43*256kB (UM) 19*512kB (UME) 14*1024kB (UME) 7*2048kB (UME) 743*4096kB (M) = 3175956kB
[   40.425465][  T834] overlayfs: failed to clone upperpath
[   40.427439][  T812] 20170 total pagecache pages
[   40.441028][  T812] 0 pages in swap cache
[   40.445226][  T812] Free swap  = 124460kB
[   40.452484][  T812] Total swap = 124996kB
[   40.456684][  T812] 2097051 pages RAM
[   40.460565][  T812] 0 pages HighMem/MovableOnly
[   40.465538][  T812] 351537 pages reserved
[   40.469712][  T812] 0 pages cma reserved
[   40.485337][  T812] Memory allocations:
[   40.489393][  T812]          0 B        0 init/main.c:1370 func:do_initcalls
[   40.496836][  T812]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   40.505035][  T812]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   40.512867][  T812]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   40.532857][  T812]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   40.551199][  T812]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   40.579169][  T812]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   40.612159][  T812]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   40.628363][  T812]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   40.636827][  T812]          0 B        0 init/initramfs.c:101 func:find_link
[   40.725009][  T854] overlayfs: failed to clone lowerpath
[   40.735790][  T855] rust_binder: 847 RLIMIT_NICE not set
[   40.737549][  T847] rust_binder: Write failure EINVAL in pid:92
[   40.758917][   T10] rust_binder: 846: removing orphan mapping 0:1168
[   41.448370][  T384] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[   41.461038][  T384] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[   41.489019][  T384] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[   41.501057][  T864] overlayfs: failed to clone lowerpath
[   41.507355][  T384] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   41.539984][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   41.540003][   T36] audit: type=1400 audit(1759621885.822:3561): avc:  denied  { write } for  pid=867 comm="syz.1.173" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   41.581000][   T36] audit: type=1400 audit(1759621885.862:3562): avc:  denied  { append } for  pid=869 comm="syz.1.174" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   41.618907][   T36] audit: type=1326 audit(1759621885.902:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=875 comm="syz.3.176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x0
[   41.682149][  T881] 9pnet_fd: Insufficient options for proto=fd
[   41.741031][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   41.748685][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   41.901061][   T10] usb 1-1: Using ep0 maxpacket: 8
[   41.907088][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   41.916542][  T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.926674][    T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   41.937022][  T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.945860][    T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   41.956745][    T9] usb 3-1: config 220 has no interface number 2
[   41.967233][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   41.975605][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   41.989024][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[   41.996109][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[   42.003098][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[   42.011291][   T10] usb 1-1: can't read configurations, error -71
[   42.017736][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[   42.026590][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   42.035878][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.043973][    T9] usb 3-1: Product: syz
[   42.048317][    T9] usb 3-1: Manufacturer: syz
[   42.053006][    T9] usb 3-1: SerialNumber: syz
[   42.272184][    T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   42.278636][    T9] usb 3-1: No valid video chain found.
[   42.284276][    T9] usb 3-1: selecting invalid altsetting 0
[   42.298705][    T9] usb 3-1: USB disconnect, device number 4
[   42.485753][  T890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   42.495591][  T890] bridge_slave_1: left allmulticast mode
[   42.501352][  T890] bridge_slave_1: left promiscuous mode
[   42.507254][  T890] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.517684][  T890] bridge_slave_0: left allmulticast mode
[   42.524324][  T890] bridge_slave_0: left promiscuous mode
[   42.530179][  T890] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.540898][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   42.689050][  T903] rust_binder: Error in use_page_slow: ESRCH
[   42.695368][  T903] rust_binder: use_range failure ESRCH
[   42.695396][  T903] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   42.700989][  T903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   42.708971][  T903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:141
[   42.742710][  T905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'.
[   42.780340][   T36] audit: type=1400 audit(1759621887.062:3564): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   42.881453][  T968] rust_binder: Write failure EFAULT in pid:147
[   42.941284][   T36] audit: type=1400 audit(1759621887.232:3565): avc:  denied  { wake_alarm } for  pid=975 comm="syz.1.193" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.152783][   T36] audit: type=1400 audit(1759621887.442:3566): avc:  denied  { read } for  pid=1000 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.252426][ T1008] batadv_slave_1: entered promiscuous mode
[   43.491028][   T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.618217][   T36] audit: type=1400 audit(1759621887.902:3567): avc:  denied  { mount } for  pid=1010 comm="syz.3.202" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   43.624107][ T1011] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   43.651446][   T65] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   43.662548][   T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10
[   43.674153][   T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   43.680581][ T1013] overlayfs: failed to clone lowerpath
[   43.688690][   T65] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[   43.716734][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.727852][   T65] usb 2-1: config 0 descriptor??
[   43.868934][   T36] audit: type=1400 audit(1759621888.152:3568): avc:  denied  { bind } for  pid=1039 comm="syz.2.211" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.889243][   T36] audit: type=1400 audit(1759621888.152:3569): avc:  denied  { name_bind } for  pid=1039 comm="syz.2.211" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   43.910636][   T36] audit: type=1400 audit(1759621888.152:3570): avc:  denied  { node_bind } for  pid=1039 comm="syz.2.211" saddr=10.1.1.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   43.991653][ T1044] tipc: Started in network mode
[   43.996605][ T1044] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[   44.005870][ T1044] tipc: Enabled bearer <udp:syz1>, priority 10
[   44.060601][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   44.060635][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:140
[   44.086567][ T1051] capability: warning: `syz.2.215' uses 32-bit capabilities (legacy support in use)
[   44.108061][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'.
[   44.117113][ T1051] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[   44.139661][   T65] logitech-djreceiver 0003:046D:C513.0006: hidraw0: USB HID v0.00 Device [HID 046d:c513] on usb-dummy_hcd.1-1/input0
[   44.172660][ T1059] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.236181][ T1063] /dev/rnullb0: Can't open blockdev
[   44.279706][ T1069] syz.2.221 uses obsolete (PF_INET,SOCK_PACKET)
[   44.286885][ T1069] rust_binder: Error while translating object.
[   44.286930][ T1069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.293214][ T1069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157
[   44.340107][   T65] usb 2-1: USB disconnect, device number 3
[   44.345085][ T1007] batadv_slave_1: left promiscuous mode
[   44.571053][   T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   44.571114][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   44.578857][  T595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   44.742177][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.752044][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[   44.761281][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.770009][   T10] usb 3-1: config 0 descriptor??
[   44.891523][ T1076] tipc: Started in network mode
[   44.896503][ T1076] tipc: Node identity 3ebbf54b0701, cluster identity 4711
[   44.903961][ T1076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   44.912841][ T1076] tipc: Disabling bearer <eth:syzkaller0>
[   44.977890][ T1078] binder: Unknown parameter '��������'
[   44.984836][ T1078] overlay: ./file0 is not a directory
[   45.011031][   T65] tipc: Node number set to 4269801494
[   45.124024][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100
[   45.185971][   T10] wacom 0003:056A:00E3.0007: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0
[   45.217802][ T1088] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   45.217827][ T1088] rust_binder: Read failure Err(EFAULT) in pid:105
[   45.226926][ T1088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'.
[   45.242418][  T384] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   45.243195][ T1088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'.
[   45.381706][ T1071] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   45.394637][  T384] usb 2-1: unable to read config index 0 descriptor/start: -71
[   45.410409][  T384] usb 2-1: can't read configurations, error -71
[   45.451629][   T65] usb 3-1: USB disconnect, device number 5
[   45.541074][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   45.691012][   T10] usb 1-1: Using ep0 maxpacket: 32
[   45.697338][   T10] usb 1-1: config 0 has no interfaces?
[   45.704332][   T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   45.713440][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.721502][   T10] usb 1-1: Product: syz
[   45.725687][   T10] usb 1-1: Manufacturer: syz
[   45.730281][   T10] usb 1-1: SerialNumber: syz
[   45.735656][   T10] usb 1-1: config 0 descriptor??
[   45.910034][ T1103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.233'.
[   45.919031][ T1103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'.
[   45.927951][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   45.964092][ T1109] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   45.964198][ T1108] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   46.006231][   T65] usb 1-1: USB disconnect, device number 12
[   46.114012][ T1129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'.
[   46.198295][ T1133] rust_binder: Write failure EINVAL in pid:117
[   46.198773][ T1133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[   46.211029][ T1009] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   46.372177][ T1009] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   46.380305][ T1009] usb 3-1: config 0 has no interface number 0
[   46.386456][ T1009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.397439][ T1009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.407229][ T1009] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   46.416349][ T1009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.425032][ T1009] usb 3-1: config 0 descriptor??
[   46.644492][ T1148] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[   46.644586][ T1148] rust_binder: Error while translating object.
[   46.653883][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.660205][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207
[   46.665311][ T1150] overlayfs: missing 'lowerdir'
[   46.685421][ T1150] overlayfs: failed to resolve './file1': -2
[   46.697331][ T1152] rust_binder: 209: no such ref 0
[   46.760221][ T1166] rust_binder: Write failure EINVAL in pid:213
[   46.800660][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'.
[   46.833025][ T1009] prodikeys 0003:041E:2801.0008: ignoring exceeding usage max
[   46.842505][ T1009] prodikeys 0003:041E:2801.0008: item fetching failed at offset 5/7
[   46.850745][ T1009] prodikeys 0003:041E:2801.0008: hid parse failed
[   46.857488][ T1009] prodikeys 0003:041E:2801.0008: probe with driver prodikeys failed with error -22
[   47.031046][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   47.037909][ T1106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.235'.
[   47.047600][ T1106] netlink: 'syz.2.235': attribute type 6 has an invalid length.
[   47.055385][ T1106] netlink: 'syz.2.235': attribute type 5 has an invalid length.
[   47.064064][  T384] usb 3-1: USB disconnect, device number 6
[   47.149306][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   47.149326][   T36] audit: type=1400 audit(1759621891.432:3595): avc:  denied  { ioctl } for  pid=1193 comm="syz.0.265" path="socket:[8659]" dev="sockfs" ino=8659 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   47.189205][   T36] audit: type=1400 audit(1759621891.472:3596): avc:  denied  { map } for  pid=1196 comm="syz.0.266" path="socket:[8009]" dev="sockfs" ino=8009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   47.191161][   T10] usb 2-1: Using ep0 maxpacket: 32
[   47.223694][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.234966][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.244971][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.254397][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.263948][   T10] usb 2-1: config 0 descriptor??
[   47.270928][   T10] hub 2-1:0.0: USB hub found
[   47.305729][ T1207] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   47.305759][ T1207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   47.313875][ T1207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:143
[   47.323899][ T1208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.348001][ T1212] rust_binder: Write failure EFAULT in pid:148
[   47.397129][   T36] audit: type=1326 audit(1759621891.682:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.426703][   T36] audit: type=1326 audit(1759621891.682:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.450749][   T36] audit: type=1326 audit(1759621891.692:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.474423][   T36] audit: type=1326 audit(1759621891.692:3600): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.479459][   T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   47.500799][   T36] audit: type=1326 audit(1759621891.692:3601): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.531244][   T36] audit: type=1326 audit(1759621891.692:3602): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.554938][   T36] audit: type=1326 audit(1759621891.692:3603): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.578625][   T36] audit: type=1326 audit(1759621891.692:3604): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[   47.618957][ T1222] binder: Bad value for 'defcontext'
[   47.697159][ T1225] tmpfs: Unknown parameter 'no'
[   47.712358][   T10] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1
[   47.721001][   T10] hid-generic 0003:046D:C31C.0009: probe with driver hid-generic failed with error -22
[   47.751072][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   47.828039][ T1230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   47.828077][ T1230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:171
[   47.828183][ T1231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   47.846736][ T1231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:171
[   47.881066][    T9] usb 1-1: device descriptor read/64, error -71
[   48.095868][ T1246] overlayfs: failed to resolve './file1:/': -2
[   48.111046][   T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   48.131079][    T9] usb 1-1: device descriptor read/64, error -71
[   48.181387][ T1009] usb 2-1: USB disconnect, device number 6
[   48.261008][   T65] usb 3-1: Using ep0 maxpacket: 8
[   48.267499][   T65] usb 3-1: unable to get BOS descriptor or descriptor too short
[   48.275878][   T65] usb 3-1: config 4 has an invalid interface number: 156 but max is 0
[   48.284111][   T65] usb 3-1: config 4 has no interface number 0
[   48.291574][   T65] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e
[   48.300638][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.308687][   T65] usb 3-1: Product: syz
[   48.312893][   T65] usb 3-1: Manufacturer: syz
[   48.317491][   T65] usb 3-1: SerialNumber: syz
[   48.371064][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   48.501055][    T9] usb 1-1: device descriptor read/64, error -71
[   48.527537][   T65] snd-usb-audio 3-1:4.156: probe with driver snd-usb-audio failed with error -71
[   48.537559][   T65] usb 3-1: USB disconnect, device number 7
[   48.615637][ T1258] rust_binder: 1256 RLIMIT_NICE not set
[   48.621143][ T1009] rust_binder: 0: removing orphan mapping 0:1168
[   48.639147][ T1261] rust_binder: Error while translating object.
[   48.639184][ T1261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   48.645536][ T1261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230
[   48.741101][    T9] usb 1-1: device descriptor read/64, error -71
[   48.861170][    T9] usb usb1-port1: attempt power cycle
[   49.046666][ T1279] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   49.055052][ T1279] rust_binder: Write failure EINVAL in pid:176
[   49.061160][   T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   49.092001][ T1282] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   49.146053][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181
[   49.146797][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181
[   49.169739][ T1288] rust_binder: Write failure EFAULT in pid:185
[   49.201088][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   49.201148][   T65] usb 2-1: device descriptor read/64, error -71
[   49.232269][    T9] usb 1-1: device descriptor read/8, error -71
[   49.362150][    T9] usb 1-1: device descriptor read/8, error -71
[   49.421021][   T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   49.461040][   T65] usb 2-1: device descriptor read/64, error -71
[   49.582099][   T45] usb 3-1: config 0 interface 0 has no altsetting 0
[   49.588885][   T45] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[   49.597997][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.606730][   T45] usb 3-1: config 0 descriptor??
[   49.611040][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   49.632181][    T9] usb 1-1: device descriptor read/8, error -71
[   49.701028][   T65] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   49.762357][    T9] usb 1-1: device descriptor read/8, error -71
[   49.814614][ T1292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.814977][   T45] kye 0003:0458:501B.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   49.825657][ T1292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.835299][   T65] usb 2-1: device descriptor read/64, error -71
[   49.848737][   T45] kye 0003:0458:501B.000A: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0
[   49.860812][   T45] kye 0003:0458:501B.000A: tablet-enabling feature report not found
[   49.869040][   T45] kye 0003:0458:501B.000A: tablet enabling failed
[   49.881123][    T9] usb usb1-port1: unable to enumerate USB device
[   49.921099][   T45] usb 3-1: USB disconnect, device number 8
[   50.081049][   T65] usb 2-1: device descriptor read/64, error -71
[   50.191200][   T65] usb usb2-port1: attempt power cycle
[   50.531093][   T65] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   50.552982][   T65] usb 2-1: device descriptor read/8, error -71
[   50.559832][ T1313] 9pnet_fd: Insufficient options for proto=fd
[   50.601818][ T1318] __nla_validate_parse: 3 callbacks suppressed
[   50.601835][ T1318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.303'.
[   50.682117][   T65] usb 2-1: device descriptor read/8, error -71
[   50.861050][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   50.931041][   T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   50.952039][   T65] usb 2-1: device descriptor read/8, error -71
[   51.012370][    T9] usb 1-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config
[   51.022628][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   51.032406][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   51.041522][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   51.049607][    T9] usb 1-1: SerialNumber: syz
[   51.061007][  T384] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   51.082116][   T65] usb 2-1: device descriptor read/8, error -71
[   51.143924][ T1336] overlayfs: missing 'lowerdir'
[   51.149952][ T1334] overlayfs: failed to clone upperpath
[   51.181574][ T1343] 9pnet_fd: Insufficient options for proto=fd
[   51.191241][   T65] usb usb2-port1: unable to enumerate USB device
[   51.212125][  T384] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[   51.220354][  T384] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   51.231950][  T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   51.242877][  T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   51.254133][  T384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.267143][  T384] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.277048][    T9] usb 1-1: 0:2 : does not exist
[   51.281995][  T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.290280][    T9] usb 1-1: unit 5: unexpected type 0x09
[   51.296712][  T384] usb 3-1: config 0 descriptor??
[   51.304089][    T9] usb 1-1: USB disconnect, device number 17
[   51.310349][ T1330] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   51.325902][  T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.777023][ T1353] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   51.784484][ T1353] rust_binder: Write failure EINVAL in pid:172
[   51.849019][ T1361] netlink: 'syz.3.319': attribute type 25 has an invalid length.
[   51.926007][  T384] usbhid 3-1:0.0: can't add hid device: -71
[   51.935439][  T384] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   51.950415][  T384] usb 3-1: USB disconnect, device number 9
[   52.840738][ T1382] rust_binder: 178: no such ref 1
[   52.845852][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[   52.917476][   T36] kauditd_printk_skb: 48 callbacks suppressed
[   52.917497][   T36] audit: type=1400 audit(1759621897.202:3653): avc:  denied  { ioctl } for  pid=1385 comm="syz.0.328" path="socket:[9777]" dev="sockfs" ino=9777 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.032513][ T1400] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   53.032540][ T1400] rust_binder: Read failure Err(EFAULT) in pid:248
[   53.198269][   T36] audit: type=1400 audit(1759621897.482:3654): avc:  denied  { mounton } for  pid=1423 comm="syz.2.341" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   53.246959][ T1426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'.
[   53.255906][ T1426] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[   53.287193][ T1430] fuse: Unknown parameter 'fg'
[   53.294376][ T1430] fuse: Unknown parameter 'fg'
[   53.299310][ T1430] fuse: Unknown parameter 'fg'
[   53.308140][ T1433] fuseblk: Bad value for 'fd'
[   53.313025][   T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   53.358058][   T36] audit: type=1400 audit(1759621897.642:3655): avc:  denied  { setopt } for  pid=1438 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   53.471032][   T45] usb 1-1: Using ep0 maxpacket: 8
[   53.477455][   T45] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[   53.488802][   T45] usb 1-1: config 0 has no interface number 0
[   53.495011][   T45] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85
[   53.506862][   T45] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   53.518059][   T45] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024
[   53.529591][   T45] usb 1-1: config 0 interface 200 has no altsetting 0
[   53.538015][   T45] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[   53.547282][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.555413][   T45] usb 1-1: Product: syz
[   53.559931][   T45] usb 1-1: Manufacturer: syz
[   53.564881][   T45] usb 1-1: SerialNumber: syz
[   53.570844][   T45] usb 1-1: config 0 descriptor??
[   53.576605][ T1410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   53.788933][   T45] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input12
[   53.800777][    C1] usb 1-1: hanwang_irq - nonzero urb status received: -71
[   53.807966][    C1] usb 1-1: hanwang_irq - usb_submit_urb failed with result -1
[   53.816915][    C0] usb 1-1: hanwang_irq - nonzero urb status received: -71
[   53.817215][   T45] usb 1-1: USB disconnect, device number 18
[   53.824083][    C0] usb 1-1: hanwang_irq - usb_submit_urb failed with result -19
[   53.922423][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'.
[   53.931327][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'.
[   54.347358][ T1479] rust_binder: Error in use_page_slow: ESRCH
[   54.347379][ T1479] rust_binder: use_range failure ESRCH
[   54.353473][ T1479] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   54.359060][ T1479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   54.367137][ T1479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:191
[   54.417111][ T1483] KVM: debugfs: duplicate directory 1483-4
[   54.550941][ T1499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.368'.
[   54.550991][   T36] audit: type=1400 audit(1759621898.832:3656): avc:  denied  { nlmsg_read } for  pid=1498 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   54.570896][ T1499] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   54.580538][ T1499] rust_binder: Error while translating object.
[   54.589308][ T1499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.595718][ T1499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197
[   54.606112][ T1499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.368'.
[   54.624487][ T1500] netlink: 104 bytes leftover after parsing attributes in process `syz.0.368'.
[   54.646822][ T1503] mmap: syz.0.369 (1503): VmData 20951040 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   54.911044][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   55.005119][ T1511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.061012][    T9] usb 1-1: Using ep0 maxpacket: 16
[   55.067558][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.078707][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.088788][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   55.097933][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.106886][    T9] usb 1-1: config 0 descriptor??
[   55.138348][   T36] audit: type=1400 audit(1759621899.422:3657): avc:  denied  { bind } for  pid=1516 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   55.149318][ T1518] fuse: Bad value for 'fd'
[   55.328184][    T9] usbhid 1-1:0.0: can't add hid device: -71
[   55.341372][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   55.350114][    T9] usb 1-1: USB disconnect, device number 19
[   55.366657][   T36] audit: type=1400 audit(1759621899.652:3658): avc:  denied  { map } for  pid=1530 comm="syz.0.378" path="socket:[10365]" dev="sockfs" ino=10365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   55.390627][   T36] audit: type=1400 audit(1759621899.652:3659): avc:  denied  { accept } for  pid=1530 comm="syz.0.378" path="socket:[10365]" dev="sockfs" ino=10365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   55.947102][ T1555] overlayfs: failed to resolve './file1': -2
[   55.968243][ T1557] overlayfs: failed to resolve './file1': -2
[   56.428930][   T36] audit: type=1400 audit(1759621900.712:3660): avc:  denied  { listen } for  pid=1562 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.485843][ T1565] rust_binder: Error while translating object.
[   56.485895][ T1565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.501373][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223
[   56.614893][ T1567] Bluetooth: hci0: Frame reassembly failed (-90)
[   56.651197][  T331] Bluetooth: hci0: Frame reassembly failed (-84)
[   56.821462][ T1594] fuse: Bad value for 'fd'
[   57.061002][  T384] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   57.131144][ T1569] binder: Unknown parameter 'defcontext01777777777777777777777'
[   57.150169][   T36] audit: type=1400 audit(1759621901.432:3661): avc:  denied  { accept } for  pid=1617 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   57.581809][   T36] audit: type=1400 audit(1759621901.872:3662): avc:  denied  { mount } for  pid=1638 comm="syz.2.413" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   57.691242][  T384] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   57.821686][  T384] usb 2-1: device descriptor read/64, error -71
[   58.061028][  T384] usb 2-1: device descriptor read/64, error -71
[   58.171164][  T384] usb usb2-port1: attempt power cycle
[   58.278675][ T1648] netlink: 'syz.3.416': attribute type 4 has an invalid length.
[   58.286448][ T1648] netlink: 'syz.3.416': attribute type 5 has an invalid length.
[   58.294225][ T1648] netlink: 'syz.3.416': attribute type 1 has an invalid length.
[   58.303236][   T36] audit: type=1400 audit(1759621902.592:3663): avc:  denied  { ioctl } for  pid=1647 comm="syz.3.416" path="socket:[10044]" dev="sockfs" ino=10044 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   58.473827][   T36] audit: type=1400 audit(1759621902.762:3664): avc:  denied  { create } for  pid=1659 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   58.511077][  T384] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   58.542032][  T384] usb 2-1: device descriptor read/8, error -71
[   58.651006][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   58.651009][  T595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   58.692004][  T384] usb 2-1: device descriptor read/8, error -71
[   58.720324][ T1680] __vm_enough_memory: pid: 1680, comm: syz.0.429, bytes: 18014402804453376 not enough memory for the allocation
[   58.770992][   T36] audit: type=1400 audit(1759621903.052:3665): avc:  denied  { append } for  pid=1684 comm="syz.0.431" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   58.931005][  T384] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[   58.962065][  T384] usb 2-1: device descriptor read/8, error -71
[   59.010504][ T1710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   59.023817][   T36] audit: type=1400 audit(1759621903.312:3666): avc:  denied  { mount } for  pid=1709 comm="syz.3.440" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   59.057053][ T1713] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   59.065884][ T1713] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   59.077585][ T1713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   59.092079][  T384] usb 2-1: device descriptor read/8, error -71
[   59.134261][ T1719] overlayfs: missing 'workdir'
[   59.211363][  T384] usb usb2-port1: unable to enumerate USB device
[   59.351029][   T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   59.501016][   T45] usb 1-1: Using ep0 maxpacket: 16
[   59.507427][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.518758][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.528722][   T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   59.538113][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.548316][   T45] usb 1-1: config 0 descriptor??
[   59.587144][   T36] audit: type=1400 audit(1759621903.872:3667): avc:  denied  { relabelfrom } for  pid=1734 comm="syz.2.450" name="PPPOL2TP" dev="sockfs" ino=10703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.587164][ T1736] SELinux:  Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped).
[   59.620139][   T36] audit: type=1400 audit(1759621903.872:3668): avc:  denied  { relabelto } for  pid=1734 comm="syz.2.450" name="PPPOL2TP" dev="sockfs" ino=10703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0"
[   59.647927][   T36] audit: type=1400 audit(1759621903.872:3669): avc:  denied  { getopt } for  pid=1734 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.763629][   T45] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000B/input/input13
[   59.781044][   T45] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.000B/input/input14
[   59.786441][   T36] audit: type=1400 audit(1759621904.072:3670): avc:  denied  { write } for  pid=1746 comm="syz.0.453" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.818647][   T45] kye 0003:0458:5012.000B: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[   59.824000][   T36] audit: type=1400 audit(1759621904.072:3671): avc:  denied  { remove_name } for  pid=1746 comm="syz.0.453" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   59.845656][   T45] usb 1-1: USB disconnect, device number 20
[   59.871558][   T36] audit: type=1400 audit(1759621904.092:3672): avc:  denied  { unlink } for  pid=1746 comm="syz.0.453" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   59.905904][ T1751] rust_binder: Got transaction with invalid offset.
[   59.905947][ T1751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.912698][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257
[   60.295255][ T1777] SELinux: security_context_str_to_sid () failed with errno=-22
[   61.277790][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   61.331275][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.331307][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.337813][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.344419][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.351059][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.357582][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.364083][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.370624][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.377261][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.383854][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.390452][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.396799][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.403362][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.410203][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.417060][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.423591][ T1794] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.534556][ T1815] tipc: Can't bind to reserved service type 0
[   61.674036][ T1829] rust_binder: Write failure EFAULT in pid:278
[   61.763516][ T1840] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[   61.777437][ T1840] netlink: 'syz.1.483': attribute type 21 has an invalid length.
[   61.785216][ T1840] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.483'.
[   61.922571][ T1851] rust_binder: 293: no such ref 3
[   61.927735][ T1851] rust_binder: Write failure EINVAL in pid:293
[   61.927847][ T1851] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   61.941123][ T1851] rust_binder: 293: no such ref 3
[   61.946651][ T1853] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.964548][ T1857] binder: Bad value for 'max'
[   61.999267][ T1860] netlink: 'syz.1.489': attribute type 4 has an invalid length.
[   62.007142][ T1860] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.489'.
[   62.114810][ T1867] fuse: Bad value for 'user_id'
[   62.119935][ T1867] fuse: Bad value for 'user_id'
[   62.161160][ T1876] netlink: 68 bytes leftover after parsing attributes in process `syz.3.495'.
[   62.172202][ T1880] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   62.172226][ T1880] rust_binder: Read failure Err(EFAULT) in pid:308
[   62.186093][ T1883] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.202214][ T1886] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.207901][ T1886] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   62.221729][ T1886] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   62.221752][ T1886] rust_binder: Read failure Err(EFAULT) in pid:310
[   62.230144][ T1886] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   63.098226][ T1940] netlink: 57 bytes leftover after parsing attributes in process `syz.2.515'.
[   63.313350][ T1946] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   63.660560][ T1994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=1994 comm=syz.2.530
[   63.682640][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   63.682662][   T36] audit: type=1400 audit(1759621907.972:3679): avc:  denied  { setopt } for  pid=1995 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.683248][ T1996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1996 comm=syz.0.533
[   64.102680][ T2013] netlink: 'syz.0.538': attribute type 11 has an invalid length.
[   64.119785][ T2013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.538'.
[   64.426522][ T2022] netlink: 240 bytes leftover after parsing attributes in process `syz.2.541'.
[   64.457680][ T2026] netlink: 'syz.2.543': attribute type 4 has an invalid length.
[   65.326455][ T2042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.550'.
[   65.530117][ T2067] cgroup: Invalid name
[   65.589712][ T2078] netlink: 3 bytes leftover after parsing attributes in process `syz.0.564'.
[   65.599699][ T2078] netlink: 3 bytes leftover after parsing attributes in process `syz.0.564'.
[   65.608630][ T2078] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   65.966763][   T36] audit: type=1326 audit(1759621910.252:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2092 comm="syz.3.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44578eec9 code=0x0
[   66.298640][ T2102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'.
[   66.307654][ T2102] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[   66.588429][   T36] audit: type=1400 audit(1759621910.872:3681): avc:  denied  { append } for  pid=2109 comm="syz.1.573" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   66.691133][   T36] audit: type=1400 audit(1759621910.982:3682): avc:  denied  { bind } for  pid=2115 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.704191][ T2116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.735046][ T2116] tipc: Disabling bearer <eth:syzkaller0>
[   66.852075][   T36] audit: type=1400 audit(1759621911.132:3683): avc:  denied  { create } for  pid=2133 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   66.880329][ T2138] rust_binder: Write failure EFAULT in pid:343
[   66.897154][   T36] audit: type=1400 audit(1759621911.182:3684): avc:  denied  { map } for  pid=2141 comm="syz.1.585" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   66.927685][   T36] audit: type=1400 audit(1759621911.182:3685): avc:  denied  { execute } for  pid=2141 comm="syz.1.585" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   66.994192][ T2151] mmap: syz.3.589 (2151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.581706][   T36] audit: type=1400 audit(1759621911.872:3686): avc:  denied  { bind } for  pid=2165 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.843009][   T36] audit: type=1400 audit(1759621912.132:3687): avc:  denied  { create } for  pid=2179 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   67.957077][ T2184] can0: slcan on ptm0.
[   67.961284][   T36] audit: type=1400 audit(1759621912.242:3688): avc:  denied  { read } for  pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   67.983081][ T2184] netlink: 76 bytes leftover after parsing attributes in process `syz.1.601'.
[   67.993307][ T2184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'.
[   68.051754][ T2182] can0 (unregistered): slcan off ptm0.
[   68.105392][ T2208] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[   68.391023][ T1328] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   68.531578][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'.
[   68.541006][ T1328] usb 2-1: Using ep0 maxpacket: 16
[   68.541570][ T2240] tipc: Started in network mode
[   68.551116][ T2240] tipc: Node identity 42c9efca30cc, cluster identity 4711
[   68.555129][ T1328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.558374][ T2240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.571225][ T1328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.582847][ T2244] overlayfs: failed to clone upperpath
[   68.586056][ T1328] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   68.600169][ T1328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.610556][ T1328] usb 2-1: config 0 descriptor??
[   68.639318][ T2250] overlayfs: failed to clone upperpath
[   68.727640][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[   68.736953][ T2262] erspan0: default FDB implementation only supports local addresses
[   68.897924][ T2275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'.
[   69.211052][ T1328] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000C/input/input16
[   69.234674][ T1328] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000C/input/input17
[   69.254557][ T1328] kye 0003:0458:5012.000C: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[   69.592983][ T2305] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'.
[   69.672507][   T65] tipc: Node number set to 1912991690
[   69.955124][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   69.955143][   T36] audit: type=1400 audit(1759621914.242:3704): avc:  denied  { execheap } for  pid=2319 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   69.993966][ T2322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'.
[   70.295002][ T2324] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   70.303466][ T2325] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   70.343318][   T36] audit: type=1400 audit(1759621914.632:3705): avc:  denied  { mounton } for  pid=2326 comm="syz.3.643" path="/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   70.376277][ T2332] veth1_macvtap: left promiscuous mode
[   70.381915][ T2332] macsec0: entered promiscuous mode
[   70.389197][ T2332] veth1_macvtap: entered promiscuous mode
[   70.395415][ T2332] macsec0: left promiscuous mode
[   70.442245][ T2342] overlayfs: failed to clone upperpath
[   70.442473][ T2343] overlayfs: failed to clone upperpath
[   70.461067][   T45] usb 2-1: reset high-speed USB device number 15 using dummy_hcd
[   70.591013][   T45] usb 2-1: device descriptor read/64, error -32
[   70.831012][   T45] usb 2-1: device descriptor read/64, error -32
[   71.071006][   T45] usb 2-1: reset high-speed USB device number 15 using dummy_hcd
[   71.092847][ T2367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[   71.111455][ T2368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'.
[   71.204088][ T2374] can: request_module (can-proto-7) failed.
[   71.211033][   T45] usb 2-1: device descriptor read/64, error -32
[   71.321434][ T2398] overlayfs: failed to clone upperpath
[   71.401543][   T36] audit: type=1400 audit(1759621915.692:3706): avc:  denied  { audit_write } for  pid=2406 comm="syz.2.668" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   71.445283][   T36] audit: type=1400 audit(1759621915.722:3707): avc:  denied  { create } for  pid=2408 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   71.504033][   T36] audit: type=1400 audit(1759621915.792:3708): avc:  denied  { unmount } for  pid=2412 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   71.603693][ T2431] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   71.604906][ T2433] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.621044][ T2432] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   71.685759][   T36] audit: type=1400 audit(1759621915.972:3709): avc:  granted  { setsecparam } for  pid=2439 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   71.739358][ T2443] ./cgroup: Can't lookup blockdev
[   71.747262][ T2445] ./cgroup: Can't lookup blockdev
[   71.810041][   T36] audit: type=1400 audit(1759621916.092:3710): avc:  denied  { ioctl } for  pid=2447 comm="syz.1.680" path="socket:[13660]" dev="sockfs" ino=13660 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.862324][   T36] audit: type=1400 audit(1759621916.092:3711): avc:  denied  { write } for  pid=2447 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.899436][   T36] audit: type=1400 audit(1759621916.182:3712): avc:  denied  { setattr } for  pid=2447 comm="syz.1.680" name="PINGv6" dev="sockfs" ino=13660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.079054][   T36] audit: type=1400 audit(1759621916.362:3713): avc:  denied  { map } for  pid=2485 comm="syz.3.691" path="socket:[13735]" dev="sockfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.118130][   T65] usb 2-1: USB disconnect, device number 15
[   72.195029][ T2507] fuseblk: Unknown parameter '0x0000000000000003'
[   72.220200][ T2511] netlink: 328 bytes leftover after parsing attributes in process `syz.2.698'.
[   72.244127][ T2515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'.
[   72.358847][ T2544] 9pnet_fd: Insufficient options for proto=fd
[   72.676154][ T2564] rust_binder: Write failure EFAULT in pid:409
[   72.676213][ T2565] rust_binder: Write failure EFAULT in pid:409
[   72.699087][ T2568] loop0: Can't mount, would change RO state
[   72.840052][ T2577] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[   72.849878][ T2577] 9pnet_fd: p9_fd_create_tcp (2577): problem connecting socket to 127.0.0.1
[   72.880547][ T2578] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   72.880575][ T2578] rust_binder: Read failure Err(EFAULT) in pid:418
[   72.961318][ T2588] netlink: 'syz.2.722': attribute type 1 has an invalid length.
[   72.975779][ T2587] netlink: 'syz.2.722': attribute type 1 has an invalid length.
[   73.056893][ T2603] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.728'.
[   73.236887][ T2637] incfs: Can't find or create .index dir in ./bus
[   73.243479][ T2637] incfs: mount failed -1
[   73.248355][ T2637] incfs: Can't find or create .index dir in ./bus
[   73.255093][ T2637] incfs: mount failed -1
[   73.442571][ T2643] fuse: Unknown parameter '#! 
[   73.442571][ T2643] s'
[   73.450328][ T2643] fuse: Unknown parameter '0xffffffffffffffff'
[   73.471711][ T2646] netlink: 120 bytes leftover after parsing attributes in process `syz.0.741'.
[   73.480772][ T2646] netlink: 96 bytes leftover after parsing attributes in process `syz.0.741'.
[   73.513217][ T2646] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   74.009052][ T2690] 9pnet_fd: Insufficient options for proto=fd
[   74.031236][ T2692] overlayfs: failed to clone upperpath
[   74.250975][ T2718] overlayfs: failed to clone upperpath
[   74.295331][ T2725] netlink: 'syz.0.768': attribute type 13 has an invalid length.
[   74.373723][ T2737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[   74.417796][ T2739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.773'.
[   74.442024][ T2739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.773'.
[   74.482010][ T2751] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.483082][ T2751] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   74.497390][ T2751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429
[   74.512368][ T2756] binder: Binderfs stats mode cannot be changed during a remount
[   74.663087][ T2765] overlayfs: failed to resolve './file1': -2
[   74.903216][ T2795] rust_binder: Got transaction with invalid offset.
[   74.903262][ T2795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   74.909979][ T2795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:455
[   75.261066][   T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   75.401040][   T65] usb 2-1: device descriptor read/64, error -71
[   75.641053][   T65] usb 2-1: device descriptor read/64, error -71
[   75.881028][   T65] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   75.924165][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   75.924185][   T36] audit: type=1400 audit(2000000000.480:3723): avc:  denied  { mounton } for  pid=2849 comm="syz.0.811" path="/file0" dev="bpf" ino=14564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   75.952189][   T36] audit: type=1400 audit(2000000000.480:3724): avc:  denied  { remount } for  pid=2849 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   76.011068][   T65] usb 2-1: device descriptor read/64, error -71
[   76.251033][   T65] usb 2-1: device descriptor read/64, error -71
[   76.283709][   T36] audit: type=1400 audit(2000000000.840:3725): avc:  denied  { write } for  pid=2860 comm="syz.3.814" path="socket:[14569]" dev="sockfs" ino=14569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.361853][   T65] usb usb2-port1: attempt power cycle
[   76.701074][   T65] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   76.722116][   T65] usb 2-1: device descriptor read/8, error -71
[   76.852020][   T65] usb 2-1: device descriptor read/8, error -71
[   77.091092][   T65] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   77.112095][   T65] usb 2-1: device descriptor read/8, error -71
[   77.242195][   T65] usb 2-1: device descriptor read/8, error -71
[   77.351087][   T65] usb usb2-port1: unable to enumerate USB device
[   77.962079][ T2926] fuse: Bad value for 'fd'
[   78.091266][ T2941] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   78.116310][ T2945] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   78.125110][ T2945] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   78.214448][   T36] audit: type=1400 audit(2000000002.770:3726): avc:  denied  { mounton } for  pid=2947 comm="syz.1.843" path="/proc/469/task" dev="proc" ino=15404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   79.058944][ T2961] netlink: 'syz.1.847': attribute type 4 has an invalid length.
[   79.129157][   T36] audit: type=1400 audit(2000000003.680:3727): avc:  denied  { bind } for  pid=2970 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.150355][   T36] audit: type=1400 audit(2000000003.700:3728): avc:  denied  { setopt } for  pid=2970 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.163037][ T2972] can0: slcan on ptm0.
[   79.232662][ T2977] can0 (unregistered): slcan off ptm0.
[   79.361028][   T36] audit: type=1400 audit(2000000003.910:3729): avc:  denied  { setopt } for  pid=2996 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   79.430993][   T65] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   79.490975][   T36] audit: type=1400 audit(2000000004.040:3730): avc:  denied  { getopt } for  pid=3018 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.603990][   T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.627208][   T65] usb 2-1: config 0 has no interfaces?
[   79.637249][   T65] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   79.646939][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.660775][   T65] usb 2-1: config 0 descriptor??
[   79.668228][ T3045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.865'.
[   79.715478][ T3056] fuse: Unknown parameter '00000000000000000003'
[   79.722242][ T3059] fuse: Unknown parameter '00000000000000000003'
[   79.869686][  T384] usb 2-1: USB disconnect, device number 20
[   79.947981][ T3061] overlayfs: failed to clone lowerpath
[   80.243410][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'.
[   80.385778][ T3072] TCP: TCP_TX_DELAY enabled
[   80.514193][ T3082] netlink: 324 bytes leftover after parsing attributes in process `syz.2.875'.
[   80.559938][   T36] audit: type=1400 audit(2000000005.110:3731): avc:  denied  { map } for  pid=3087 comm="syz.2.878" path="socket:[15539]" dev="sockfs" ino=15539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   80.641065][   T65] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   80.771010][   T65] usb 2-1: device descriptor read/64, error -71
[   80.819902][ T3097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'.
[   81.011037][   T65] usb 2-1: device descriptor read/64, error -71
[   81.251069][   T65] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   81.283116][ T3118] syz.0.891 (3118): attempted to duplicate a private mapping with mremap.  This is not supported.
[   81.355043][ T3128] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[   81.376051][ T3132] netlink: 8428 bytes leftover after parsing attributes in process `syz.3.895'.
[   81.385256][   T65] usb 2-1: device descriptor read/64, error -71
[   81.631034][   T65] usb 2-1: device descriptor read/64, error -71
[   81.741195][   T65] usb usb2-port1: attempt power cycle
[   82.081007][   T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   82.102055][   T65] usb 2-1: device descriptor read/8, error -71
[   82.232486][   T65] usb 2-1: device descriptor read/8, error -71
[   82.421676][   T36] audit: type=1400 audit(2000000006.980:3732): avc:  denied  { setattr } for  pid=3172 comm="syz.3.910" name="PACKET" dev="sockfs" ino=14905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   82.445529][ T3173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'.
[   82.471035][   T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   82.492182][   T65] usb 2-1: device descriptor read/8, error -71
[   82.622280][   T65] usb 2-1: device descriptor read/8, error -71
[   82.731123][   T65] usb usb2-port1: unable to enumerate USB device
[   83.076958][ T3205] overlayfs: failed to clone upperpath
[   83.383684][ T3220] incfs: Can't find or create .index dir in ./bus
[   83.390188][ T3220] incfs: mount failed -1
[   83.398668][ T3220] incfs: Can't find or create .index dir in ./bus
[   83.405637][ T3220] incfs: mount failed -1
[   83.791054][   T65] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[   83.942375][   T65] usb 2-1: unable to get BOS descriptor or descriptor too short
[   83.950446][   T65] usb 2-1: not running at top speed; connect to a high speed hub
[   83.959014][   T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.969221][   T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.979673][   T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.988779][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.996811][   T65] usb 2-1: Product: syz
[   84.001042][   T65] usb 2-1: Manufacturer: syz
[   84.005661][   T65] usb 2-1: SerialNumber: syz
[   84.297722][   T65] usb 2-1: 0:2 : does not exist
[   84.306092][   T65] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   84.325897][   T65] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[   84.338831][   T65] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[   84.349024][   T65] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   84.359226][   T65] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   84.369460][   T65] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[   84.385258][   T65] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[   84.401094][   T65] usb 2-1: 5:0: failed to get current value for ch 3 (-22)
[   84.413306][ T3264] overlayfs: failed to clone upperpath
[   84.420363][   T65] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[   84.432640][   T65] usb 2-1: USB disconnect, device number 25
[   84.445430][ T2284] udevd[2284]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.824672][ T3277] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   84.824703][ T3277] rust_binder: Read failure Err(EFAULT) in pid:487
[   84.851354][ T2744] Bluetooth: hci0: Frame reassembly failed (-84)
[   84.937857][   T36] audit: type=1326 audit(2000000009.490:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3287 comm="syz.2.952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x0
[   85.133225][   T36] audit: type=1326 audit(2000000009.690:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3290 comm="syz.3.953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44578eec9 code=0x0
[   85.831400][ T3311] 9pnet_fd: Insufficient options for proto=fd
[   86.120389][   T36] audit: type=1400 audit(2000000010.670:3735): avc:  denied  { append } for  pid=3342 comm="syz.2.973" name="file0" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.188933][ T3351] netlink: 'syz.0.975': attribute type 2 has an invalid length.
[   86.198165][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[   86.891022][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   86.891022][  T595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.934480][ T3379] rust_binder: Error while translating object.
[   86.934520][ T3379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   86.940803][ T3379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496
[   86.986840][ T3390] No source specified
[   87.004213][   T36] audit: type=1400 audit(2000000011.560:3736): avc:  denied  { listen } for  pid=3392 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   87.031917][ T3399] overlay: Unknown parameter 'obj_role'
[   87.064092][   T36] audit: type=1400 audit(2000000011.620:3737): avc:  denied  { sqpoll } for  pid=3402 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   87.321416][ T3428] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1001'.
[   87.331490][ T3428] overlayfs: failed to clone upperpath
[   87.516644][   T36] audit: type=1400 audit(2000000012.070:3738): avc:  denied  { setcurrent } for  pid=3429 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   87.517012][ T3430] tmpfs: Bad value for 'nr_blocks'
[   87.536324][   T36] audit: type=1401 audit(2000000012.070:3739): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[   87.651598][   T36] audit: type=1400 audit(2000000012.210:3740): avc:  denied  { getopt } for  pid=3444 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   87.713460][ T3451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3451 comm=syz.2.1010
[   87.884370][ T3457] overlayfs: failed to resolve './file0': -2
[   88.671038][   T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   88.696401][ T3470] overlayfs: failed to clone upperpath
[   88.822050][   T65] usb 2-1: config 0 has an invalid interface number: 40 but max is 0
[   88.830224][   T65] usb 2-1: config 0 has no interface number 0
[   88.836458][   T65] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=de.fa
[   88.845552][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.854235][   T65] usb 2-1: config 0 descriptor??
[   88.946103][   T36] audit: type=1400 audit(2000000013.500:3741): avc:  denied  { setopt } for  pid=3476 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   89.061242][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.069951][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.081664][   T65] usb 2-1: string descriptor 0 read error: -71
[   89.088708][   T65] ftdi_sio 2-1:0.40: FTDI USB Serial Device converter detected
[   89.101198][   T65] ftdi_sio ttyUSB0: unknown device type: 0xdefa
[   89.111578][   T65] usb 2-1: USB disconnect, device number 26
[   89.117870][   T65] ftdi_sio 2-1:0.40: device disconnected
[   89.233881][ T3509] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.245623][ T3509] overlayfs: missing 'lowerdir'
[   89.252114][ T3509] tipc: New replicast peer: 255.255.255.255
[   89.258196][ T3509] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.277737][ T3511] tmpfs: Bad value for 'nr_blocks'
[   89.297184][ T3516] lo: entered allmulticast mode
[   89.302609][ T3516] lo: left allmulticast mode
[   89.348482][ T3522] overlayfs: failed to clone upperpath
[   89.352058][ T3520] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1032'.
[   89.498228][ T3535] overlayfs: failed to resolve './file0': -2
[   89.504978][ T3535] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1036'.
[   89.529626][ T3537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.189639][ T3575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'.
[   90.281380][ T3587] netlink: 'syz.0.1056': attribute type 11 has an invalid length.
[   90.290630][ T3587] overlayfs: failed to clone upperpath
[   90.316664][ T3589] overlayfs: missing 'lowerdir'
[   90.923158][ T3598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   90.923195][ T3598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:534
[   91.061092][ T3615] binder: Unknown parameter 'csntext����[7�'
[   91.080791][ T3617] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   91.514904][ T3679] veth1_macvtap: left promiscuous mode
[   91.520452][ T3679] macsec0: entered allmulticast mode
[   91.611243][ T3679] veth1_macvtap: entered promiscuous mode
[   91.617347][ T3679] veth1_macvtap: entered allmulticast mode
[   91.623459][ T3679] macsec0: left allmulticast mode
[   91.628677][ T3679] veth1_macvtap: left allmulticast mode
[   92.318393][   T36] audit: type=1400 audit(2000000016.870:3742): avc:  denied  { name_bind } for  pid=3734 comm="syz.3.1105" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   92.347249][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'.
[   92.886918][ T3760] netlink: 'syz.3.1115': attribute type 4 has an invalid length.
[   92.896050][ T3760] netlink: 'syz.3.1115': attribute type 4 has an invalid length.
[   93.086249][ T3767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1117'.
[   93.119510][   T36] audit: type=1400 audit(2000000017.670:3743): avc:  denied  { mounton } for  pid=3773 comm="syz.2.1119" path="/340/file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   93.119523][ T3774] EXT4-fs: Ignoring removed check option
[   93.148499][ T3774] No source specified
[   93.154983][ T3774] overlayfs: missing 'lowerdir'
[   93.271718][ T3795] veth1: entered allmulticast mode
[   93.324256][   T36] audit: type=1400 audit(2000000017.880:3744): avc:  denied  { create } for  pid=3802 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   93.434582][   T36] audit: type=1400 audit(2000000017.990:3745): avc:  denied  { bpf } for  pid=3813 comm="syz.3.1135" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.989177][ T3830] 9pnet_fd: Insufficient options for proto=fd
[   94.103027][ T3794] veth1: left allmulticast mode
[   94.131144][ T3837] overlayfs: conflicting options: userxattr,redirect_dir=on
[   94.167576][ T3846] bpf: Bad value for 'gid'
[   94.195983][   T36] audit: type=1326 audit(2000000018.750:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.1.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dfe38eec9 code=0x0
[   94.290852][   T36] audit: type=1400 audit(2000000018.840:3747): avc:  denied  { create } for  pid=3858 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.310602][   T36] audit: type=1400 audit(2000000018.840:3748): avc:  denied  { create } for  pid=3858 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.643536][ T3870] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   94.697692][ T3875] /dev/loop0: Can't lookup blockdev
[   94.843281][   T36] audit: type=1400 audit(2000000019.400:3749): avc:  denied  { accept } for  pid=3892 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.904507][   T36] audit: type=1400 audit(2000000019.460:3750): avc:  denied  { map } for  pid=3905 comm="syz.3.1167" path="socket:[16878]" dev="sockfs" ino=16878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   95.022447][   T36] audit: type=1400 audit(2000000019.580:3751): avc:  denied  { audit_read } for  pid=3917 comm="syz.3.1171" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   95.694944][ T3959] 8021q: VLANs not supported on lo
[   95.700463][   T36] audit: type=1400 audit(2000000020.250:3752): avc:  denied  { setattr } for  pid=3958 comm="syz.1.1184" name="" dev="pipefs" ino=17815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   96.058585][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'.
[   96.551249][ T4011] netlink: 'syz.3.1203': attribute type 4 has an invalid length.
[   96.560716][ T4013] netlink: 'syz.0.1204': attribute type 32 has an invalid length.
[   96.720734][ T4050] overlay: ./file0 is not a directory
[   96.928647][ T4089] overlayfs: failed to clone upperpath
[   97.102410][ T4131] overlayfs: failed to clone lowerpath
[   97.102410][ T4130] overlayfs: failed to clone lowerpath
[   97.148403][ T4137] warn_alloc: 1 callbacks suppressed
[   97.148426][ T4137] syz.0.1250: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   97.168820][ T4137] CPU: 1 UID: 0 PID: 4137 Comm: syz.0.1250 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[   97.168854][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   97.168877][ T4137] Call Trace:
[   97.168885][ T4137]  <TASK>
[   97.168893][ T4137]  __dump_stack+0x21/0x30
[   97.168946][ T4137]  dump_stack_lvl+0x10c/0x190
[   97.168981][ T4137]  ? __cfi_dump_stack_lvl+0x10/0x10
[   97.169016][ T4137]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   97.169050][ T4137]  dump_stack+0x19/0x20
[   97.169083][ T4137]  warn_alloc+0x1bc/0x2a0
[   97.169117][ T4137]  ? stack_depot_save_flags+0x38/0x800
[   97.169145][ T4137]  ? __cfi_warn_alloc+0x10/0x10
[   97.169177][ T4137]  ? kasan_save_track+0x4f/0x80
[   97.169204][ T4137]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   97.169228][ T4137]  ? xskq_create+0x68/0x2a0
[   97.169261][ T4137]  ? xsk_init_queue+0xb6/0x120
[   97.169295][ T4137]  ? xsk_setsockopt+0x43f/0x6f0
[   97.169327][ T4137]  ? do_sock_setsockopt+0x26a/0x400
[   97.169361][ T4137]  ? __x64_sys_setsockopt+0x1b8/0x250
[   97.169395][ T4137]  ? x64_sys_call+0x2adc/0x2ee0
[   97.169431][ T4137]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   97.169471][ T4137]  __vmalloc_node_range_noprof+0x135/0x1420
[   97.169513][ T4137]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   97.169549][ T4137]  ? avc_has_perm+0x144/0x220
[   97.169584][ T4137]  ? kasan_save_alloc_info+0x40/0x50
[   97.169619][ T4137]  ? __kasan_kmalloc+0x96/0xb0
[   97.169648][ T4137]  vmalloc_user_noprof+0x77/0x90
[   97.169683][ T4137]  ? xskq_create+0xdb/0x2a0
[   97.169716][ T4137]  xskq_create+0xdb/0x2a0
[   97.169750][ T4137]  xsk_init_queue+0xb6/0x120
[   97.169784][ T4137]  xsk_setsockopt+0x43f/0x6f0
[   97.169816][ T4137]  ? __cfi_xsk_setsockopt+0x10/0x10
[   97.169849][ T4137]  ? do_futex+0x309/0x500
[   97.169885][ T4137]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   97.169918][ T4137]  ? security_socket_setsockopt+0x33/0xd0
[   97.169943][ T4137]  ? __cfi_xsk_setsockopt+0x10/0x10
[   97.169975][ T4137]  do_sock_setsockopt+0x26a/0x400
[   97.170009][ T4137]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   97.170045][ T4137]  __x64_sys_setsockopt+0x1b8/0x250
[   97.170080][ T4137]  x64_sys_call+0x2adc/0x2ee0
[   97.170117][ T4137]  do_syscall_64+0x58/0xf0
[   97.170147][ T4137]  ? clear_bhb_loop+0x50/0xa0
[   97.170171][ T4137]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   97.170210][ T4137] RIP: 0033:0x7f580bf8eec9
[   97.170239][ T4137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.170263][ T4137] RSP: 002b:00007f580cef8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   97.170291][ T4137] RAX: ffffffffffffffda RBX: 00007f580c1e5fa0 RCX: 00007f580bf8eec9
[   97.170311][ T4137] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   97.170327][ T4137] RBP: 00007f580c011f91 R08: 0000000000000004 R09: 0000000000000000
[   97.170343][ T4137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.170360][ T4137] R13: 00007f580c1e6038 R14: 00007f580c1e5fa0 R15: 00007fff58a590e8
[   97.170382][ T4137]  </TASK>
[   97.170392][ T4137] Mem-Info:
[   97.476479][ T4137] active_anon:11538 inactive_anon:6 isolated_anon:0
[   97.476479][ T4137]  active_file:21607 inactive_file:2504 isolated_file:0
[   97.476479][ T4137]  unevictable:15417 dirty:40 writeback:3
[   97.476479][ T4137]  slab_reclaimable:6137 slab_unreclaimable:69862
[   97.476479][ T4137]  mapped:26520 shmem:3103 pagetables:1222
[   97.476479][ T4137]  sec_pagetables:0 bounce:0
[   97.476479][ T4137]  kernel_misc_reclaimable:0
[   97.476479][ T4137]  free:1499811 free_pcp:6893 free_cma:0
[   97.522481][ T4137] Node 0 active_anon:46152kB inactive_anon:24kB active_file:86428kB inactive_file:10016kB unevictable:61668kB isolated(anon):0kB isolated(file):0kB mapped:106080kB dirty:160kB writeback:0kB shmem:12412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5952kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no
[   97.569945][ T4137] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB
[   97.605874][ T4137] lowmem_reserve[]: 0 3921 3921
[   97.610904][ T4137] Normal free:3042432kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34436kB inactive_anon:24kB active_file:86428kB inactive_file:10016kB unevictable:61668kB writepending:160kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:30300kB local_pcp:1972kB free_cma:0kB
[   97.643014][ T4137] lowmem_reserve[]: 0 0 0
[   97.647654][ T4137] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   97.666966][ T4137] Normal: 199*4kB (UME) 358*8kB (UME) 451*16kB (UME) 798*32kB (UE) 719*64kB (UME) 84*128kB (UME) 34*256kB (UME) 19*512kB (UME) 8*1024kB (M) 9*2048kB (UME) 709*4096kB (M) = 3042300kB
[   97.696985][ T4137] 39788 total pagecache pages
[   97.701919][ T4137] 10 pages in swap cache
[   97.706325][ T4137] Free swap  = 124444kB
[   97.710788][ T4137] Total swap = 124996kB
[   97.715429][ T4137] 2097051 pages RAM
[   97.719391][ T4137] 0 pages HighMem/MovableOnly
[   97.724403][ T4137] 351537 pages reserved
[   97.728797][ T4137] 0 pages cma reserved
[   97.752353][ T4137] Memory allocations:
[   97.760995][ T4137]          0 B        0 init/main.c:1370 func:do_initcalls
[   97.778409][ T4137]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   97.791062][ T4137]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   97.806417][ T4137]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   97.821007][ T4137]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   97.839124][ T4137]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   97.851006][ T4137]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   97.869241][ T4137]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   97.889231][ T4137]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   97.900992][ T4137]          0 B        0 init/initramfs.c:101 func:find_link
[   98.144960][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'.
[   98.158903][ T4206] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[   98.219557][ T4226] 9pnet_fd: Insufficient options for proto=fd
[   98.279676][ T4245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1284'.
[   98.300625][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   98.300644][   T36] audit: type=1400 audit(2000000022.843:3758): avc:  denied  { execute } for  pid=4248 comm="syz.0.1286" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   98.306034][ T4245] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1284'.
[   98.345011][ T4245] netlink: 'syz.1.1284': attribute type 6 has an invalid length.
[   98.357992][ T4245] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1284'.
[   98.571545][   T36] audit: type=1326 audit(2000000023.123:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.620982][   T36] audit: type=1326 audit(2000000023.123:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.660998][   T36] audit: type=1326 audit(2000000023.153:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.710983][   T36] audit: type=1326 audit(2000000023.153:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.758231][   T36] audit: type=1326 audit(2000000023.153:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.803809][   T36] audit: type=1326 audit(2000000023.153:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.835730][   T36] audit: type=1326 audit(2000000023.373:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.859406][   T36] audit: type=1326 audit(2000000023.383:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7ffc0000
[   98.965203][ T4262] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[   98.975395][ T4263] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[   98.983968][ T4262] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[   98.994355][ T4263] netlink: 'syz.0.1291': attribute type 4 has an invalid length.
[   99.039844][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'.
[   99.269879][   T36] audit: type=1400 audit(2000000023.813:3767): avc:  denied  { create } for  pid=4293 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  100.451565][ T4358] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1323'.
[  102.301117][ T4408] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  102.380467][ T4427] devpts: called with bogus options
[  102.432216][ T4440] fuseblk: Unknown parameter 'fl'
[  102.442334][ T4442] fuse: Bad value for 'group_id'
[  102.447458][ T4442] fuse: Bad value for 'group_id'
[  103.113273][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'.
[  103.122298][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  103.250148][ T4486] /dev/loop0: Can't lookup blockdev
[  103.849925][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'.
[  104.049038][ T4514] x_tables: unsorted underflow at hook 4
[  104.136498][   T36] audit: type=1326 audit(2000000028.683:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4520 comm="syz.1.1381" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dfe38eec9 code=0x0
[  105.014190][ T4542] overlayfs: failed to clone lowerpath
[  105.849764][ T4635] netlink: 'syz.2.1400': attribute type 19 has an invalid length.
[  105.858304][ T4635] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1400'.
[  106.023477][ T4649] cgroup: fork rejected by pids controller in /syz3
[  106.152040][   T36] audit: type=1400 audit(2000000030.703:3769): avc:  denied  { create } for  pid=4786 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  106.260985][ T4798] netlink: 'syz.1.1410': attribute type 4 has an invalid length.
[  106.269319][ T4798] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1410'.
[  106.280476][ T4798] 9pnet_fd: Insufficient options for proto=fd
[  106.322245][ T4804] fuseblk: Unknown parameter 'max_��read'
[  106.392552][ T4812] netlink: 'syz.3.1417': attribute type 16 has an invalid length.
[  106.401609][ T4812] netlink: 'syz.3.1417': attribute type 16 has an invalid length.
[  106.461919][   T36] audit: type=1400 audit(2000000031.013:3770): avc:  denied  { create } for  pid=4811 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.034283][   T36] audit: type=1400 audit(2000000031.583:3771): avc:  denied  { mounton } for  pid=4850 comm="syz.2.1430" path="/434/file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.113923][   T36] audit: type=1400 audit(2000000031.663:3772): avc:  denied  { execute } for  pid=4865 comm="syz.2.1434" path="/dev/rnullb0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.355323][ T4885] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  107.742631][ T4896] fuseblk: Unknown parameter 'sootmode'
[  107.891295][   T36] audit: type=1400 audit(2000000032.443:3773): avc:  denied  { create } for  pid=4899 comm="syz.1.1447" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  107.892150][ T4900] /dev/loop0: Can't lookup blockdev
[  107.912455][   T36] audit: type=1400 audit(2000000032.443:3774): avc:  denied  { mounton } for  pid=4899 comm="syz.1.1447" path="/298/file0" dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  107.980849][ T4915] 9pnet_fd: Insufficient options for proto=fd
[  108.082110][ T4930] cgroup: No subsys list or none specified
[  108.165485][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'.
[  108.186521][ T4955] fuse: Bad value for 'user_id'
[  108.191465][ T4955] fuse: Bad value for 'user_id'
[  108.470611][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'.
[  108.479956][ T4962] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1470'.
[  108.630324][   T36] audit: type=1326 audit(2000000033.173:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7fc00000
[  108.898704][ T5017] overlayfs: failed to clone lowerpath
[  109.002662][ T5036] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  109.012003][ T5036] overlayfs: missing 'lowerdir'
[  109.079150][   T36] audit: type=1400 audit(2000000033.623:3776): avc:  denied  { mount } for  pid=5038 comm="syz.3.1494" name="/" dev="ramfs" ino=19086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  109.083364][ T5039] overlayfs: missing 'lowerdir'
[  109.131129][ T5046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1496'.
[  109.140201][ T5046] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1496'.
[  109.149234][ T5046] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1496'.
[  109.475865][ T5049] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1497'.
[  109.543116][ T5065] raw_sendmsg: syz.1.1502 forgot to set AF_INET. Fix it!
[  109.569506][ T5068] netlink: 'syz.2.1503': attribute type 12 has an invalid length.
[  109.684477][ T5088] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.717223][   T36] audit: type=1400 audit(2000000034.263:3777): avc:  denied  { read } for  pid=5091 comm="syz.2.1512" name="file0" dev="tmpfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  109.911500][ T5119] 9pnet_fd: Insufficient options for proto=fd
[  110.490069][ T5173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5173 comm=syz.2.1538
[  110.845293][   T36] audit: type=1326 audit(2000000035.393:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.1.1547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dfe38eec9 code=0x0
[  110.868430][   T36] audit: type=1326 audit(2000000035.393:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5198 comm="syz.1.1547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dfe38eec9 code=0x0
[  111.314520][ T5215] fuse: Unknown parameter 'g�oup_id'
[  111.334749][   T36] audit: type=1400 audit(2000000035.883:3780): avc:  denied  { getopt } for  pid=5216 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  111.391361][ T5226] netlink: 'syz.2.1556': attribute type 4 has an invalid length.
[  112.280469][   T36] audit: type=1400 audit(2016777481.841:3781): avc:  denied  { listen } for  pid=5257 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  112.926402][ T5307] futex_wake_op: syz.0.1584 tries to shift op by 32; fix this program
[  112.992868][ T5319] /dev/loop0: Can't lookup blockdev
[  113.544588][ T5342] overlay: ./file0 is not a directory
[  113.929727][   T36] audit: type=1326 audit(2016777483.481:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[  113.953323][   T36] audit: type=1326 audit(2016777483.481:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[  113.976849][   T36] audit: type=1326 audit(2016777483.491:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[  114.000260][   T36] audit: type=1326 audit(2016777483.491:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[  114.023836][   T36] audit: type=1326 audit(2016777483.491:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa44578eec9 code=0x7ffc0000
[  114.713226][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1617'.
[  114.758171][   T36] kauditd_printk_skb: 23 callbacks suppressed
[  114.758190][   T36] audit: type=1400 audit(2016777484.311:3810): avc:  denied  { shutdown } for  pid=5415 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  115.081416][ T5441] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  115.411448][ T5468] fuse: Unknown parameter '00000000000000000000004��'
[  115.562428][   T36] audit: type=1400 audit(2016777485.121:3811): avc:  denied  { read } for  pid=5477 comm="syz.0.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.637356][ T5484] veth0: entered promiscuous mode
[  115.642704][ T5484] veth0: left promiscuous mode
[  115.730194][ T5493] overlayfs: failed to clone upperpath
[  116.143729][ T5550] overlayfs: failed to clone upperpath
[  116.150034][ T5550] overlayfs: failed to clone upperpath
[  116.225757][   T36] audit: type=1400 audit(2016777485.781:3812): avc:  denied  { execute_no_trans } for  pid=5563 comm="syz.1.1675" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  116.272950][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  116.315202][ T5577] devpts: called with bogus options
[  116.447769][ T5597] overlayfs: failed to clone lowerpath
[  117.142044][   T36] audit: type=1400 audit(2016777486.701:3813): avc:  denied  { read } for  pid=5637 comm="syz.3.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  117.986685][ T5687] tmpfs: Unknown parameter '�'
[  118.575666][   T36] audit: type=1400 audit(2016777488.131:3814): avc:  denied  { write } for  pid=65 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20865 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  118.769918][   T36] audit: type=1326 audit(2016777488.321:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.2.1729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc117b8eec9 code=0x0
[  119.330678][ T5786] tmpfs: Bad value for 'nr_blocks'
[  119.474153][ T5795] overlayfs: failed to clone upperpath
[  119.670047][ T5802] overlayfs: failed to clone upperpath
[  119.751205][ T5816] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  120.317229][   T36] audit: type=1400 audit(2016777489.871:3816): avc:  denied  { accept } for  pid=5823 comm="syz.2.1760" path="socket:[21004]" dev="sockfs" ino=21004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.795849][ T5838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5838 comm=syz.3.1766
[  120.809195][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'.
[  120.936853][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'.
[  121.526833][ T5863] veth1: entered allmulticast mode
[  121.799870][   T36] audit: type=1326 audit(2016777491.351:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc117b8eec9 code=0x7fc00000
[  122.359728][ T5862] veth1: left allmulticast mode
[  122.394107][   T36] audit: type=1400 audit(2016777491.951:3818): avc:  denied  { ioctl } for  pid=5886 comm="syz.1.1784" path="socket:[22016]" dev="sockfs" ino=22016 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  122.485723][ T5898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1789'.
[  122.776719][   T36] audit: type=1326 audit(2016777492.331:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.3.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44578eec9 code=0x0
[  122.798118][ T5921] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1799'.
[  123.441828][ T5953] overlayfs: conflicting options: nfs_export=on,index=off
[  123.444356][ T5954] ------------[ cut here ]------------
[  123.454727][ T5954] WARNING: CPU: 1 PID: 5954 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  123.464258][ T5954] Modules linked in:
[  123.468201][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.2.1808 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  123.479793][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  123.490034][ T5954] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  123.496129][ T5954] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 22 1f ee 05 00 0f 85 be 00 00 00 c6 05 15 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  123.516261][ T5954] RSP: 0018:ffffc9000134f880 EFLAGS: 00010246
[  123.522420][ T5954] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000
[  123.530427][ T5954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000134f938
[  123.538587][ T5954] RBP: ffffc9000134f9a8 R08: ffffc9000134f937 R09: 0000000000000000
[  123.546706][ T5954] R10: ffffc9000134f920 R11: fffff52000269f27 R12: ffffc9000134f8c0
[  123.554805][ T5954] R13: dffffc0000000000 R14: 1ffff92000269f14 R15: 0000000000000000
[  123.562848][ T5954] FS:  00007fc1165e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  123.571876][ T5954] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.578493][ T5954] CR2: 0000200000005000 CR3: 0000000116dd6000 CR4: 00000000003526b0
[  123.586558][ T5954] Call Trace:
[  123.589863][ T5954]  <TASK>
[  123.592859][ T5954]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  123.598980][ T5954]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  123.604767][ T5954]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  123.610442][ T5954]  ___kmalloc_large_node+0x81/0x220
[  123.615696][ T5954]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  123.621405][ T5954]  __kmalloc_large_node_noprof+0x1e/0xe0
[  123.627068][ T5954]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  123.632779][ T5954]  __kmalloc_noprof+0x26d/0x450
[  123.637665][ T5954]  incfs_realloc_mount_info+0xa7/0x4d0
[  123.643182][ T5954]  ? incfs_add_sysfs_node+0x118/0x240
[  123.648596][ T5954]  incfs_alloc_mount_info+0x479/0x600
[  123.654026][ T5954]  incfs_mount_fs+0x3ca/0x960
[  123.658752][ T5954]  ? __cfi_incfs_mount_fs+0x10/0x10
[  123.664142][ T5954]  ? vfs_parse_fs_string+0x102/0x170
[  123.669472][ T5954]  ? selinux_capable+0x38/0x50
[  123.674313][ T5954]  legacy_get_tree+0x103/0x1b0
[  123.679123][ T5954]  ? __cfi_incfs_mount_fs+0x10/0x10
[  123.684495][ T5954]  vfs_get_tree+0xa1/0x290
[  123.688958][ T5954]  do_new_mount+0x251/0xb40
[  123.693579][ T5954]  ? security_capable+0xcf/0xf0
[  123.698471][ T5954]  path_mount+0x688/0x1050
[  123.702939][ T5954]  ? putname+0x113/0x150
[  123.707209][ T5954]  __se_sys_mount+0x2bd/0x480
[  123.711927][ T5954]  ? __x64_sys_mount+0xf0/0xf0
[  123.716735][ T5954]  ? __kasan_check_write+0x18/0x20
[  123.721911][ T5954]  ? fpregs_restore_userregs+0x11d/0x260
[  123.727580][ T5954]  __x64_sys_mount+0xc3/0xf0
[  123.732303][ T5954]  x64_sys_call+0x2021/0x2ee0
[  123.737022][ T5954]  do_syscall_64+0x58/0xf0
[  123.741485][ T5954]  ? clear_bhb_loop+0x50/0xa0
[  123.746212][ T5954]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  123.752180][ T5954] RIP: 0033:0x7fc117b8eec9
[  123.756628][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.776298][ T5954] RSP: 002b:00007fc1165e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  123.784775][ T5954] RAX: ffffffffffffffda RBX: 00007fc117de5fa0 RCX: 00007fc117b8eec9
[  123.792801][ T5954] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
[  123.800803][ T5954] RBP: 00007fc117c11f91 R08: 0000200000000700 R09: 0000000000000000
[  123.808838][ T5954] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000
[  123.816876][ T5954] R13: 00007fc117de6038 R14: 00007fc117de5fa0 R15: 00007ffdf7c66058
[  123.824927][ T5954]  </TASK>
[  123.827978][ T5954] ---[ end trace 0000000000000000 ]---
[  123.833555][ T5954] incfs: Error allocating mount info. -12
[  123.839593][ T5954] incfs: mount failed -12