last executing test programs:

1m1.765514548s ago: executing program 2 (id=547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f})
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="3801", 0x2}], 0x1, 0x1, 0x7, 0x1f) (async)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async)
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902930003010000000904000000010100000a2401ff0300020102132406040006020000000000000001000000000924030000010000000924050100f8431cfd0924030002030604c006240504000009040100000101"], 0x0) (async)
write$uinput_user_dev(r1, &(0x7f0000001740)={'syz0\x00', {0x400}, 0x0, [0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x40000], [0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x4, 0x0, 0x0, 0xcf79, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x338, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x1ff, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe, 0xfffffffc, 0x0, 0x3, 0x1, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7af7, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1m1.210487714s ago: executing program 2 (id=548):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0)
mmap(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x8fe68000)
futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000fe0e00000000000002000a0014000000000000000000000002000100000004d404e199050000008002282c00000204d40507ba000000006005001a0000000000000000000000ffff0a010102fc0100000000000000000000000000010100040402001300080000002cbd700004d6090ff00000000040"], 0x88}, 0x1, 0x7}, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000040))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040c41090ea0000000000015373b23e01000800000904000001030000000921000000012207000905661635885ea78a8f000000"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000007000000080039ce0c85daa19e770025aa96032cdaab4a73"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100))
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448ca, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3ff, 0xfffe}, {0x5f32, 0x8}]}})
madvise(&(0x7f0000818000/0x1000)=nil, 0x1000, 0xd)

1m0.734145855s ago: executing program 2 (id=552):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x5, 0x4) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)={@private=0xa010102, @loopback, 0x0, 0x7, [@multicast2, @empty, @broadcast, @multicast1, @rand_addr=0x64010102, @empty, @private=0x8]}, 0x2c) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000004c0)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000500)={{0x2, 0x4e23, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x62, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 'xfrm0\x00'}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x8000, 0x1, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x40) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8004) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000900)={0x1350, 0x14, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "fe8c046e92e3555f78ebd391fc73e8f9300d093c946241cde5770c5418cdb84355b6b46b121185bfe850080f376874a435cf9239935415e27c705c8098ce36fa09f747fed9eca7ea2a4dec81441cd2ed508da4951690135db78ba5045585b2962f50d8d63b504b5282339eedca538ba5d7daae201058e109814f0d2299f6307f42f01655e051f8c3a28aca7b744a7c20c11d28fb"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "7c9b9164e8cbcc14a6021068e449a94abef652905161c4ff3bb1fb166ef0c70c6064c8401cff539531f37882f7f44a3df8c58789e3edb05238530f26964dece7699add1446531f08a11a24c0bd6fa40ca589d1789c0fb0fb429ef5794a7efdf9629eaf69b45e0a1e00a3fabb95e776f48962d79927fbaa2a9e58feba5091966c9bf0fcabe14c26323397d5b4359131445a140af9f3ee644d618a87d11de4294d9c1e1395ff1da1bab4d4cdfcaafc8af67bf171adb7954afe9ef48c39f7544f3f6282a2830567484b1f49b394"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "bf9e3e405f15631f7532ea89ce2cc2da89d1a0fdb64b5cce425eef6b191a9db150630b7820df29a01321272a08c83eaed4e471580eab4f1f4f92d06e51a0606fdde3de09bce64faf068d5bc1138d66507ab0435746bd6e08afdab073ddaf8b8959c52e85801c88dcdf74fa4bc9067dcfddfff87101ac72e9de7bcb5f71cdacba0b36e590e35262f3b354189412df03349adefdb4486dbb601d5e6e7c72f192a488d417604004948eca1df9cf782fd6dcb33067d5ad422bf977297732a0bf1a31adb8b35f20eabd02a75b3121cf49b4443fe2edaaf83e14fff82d74aca44769872e790d51"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "cfea6f59abd1ca7642b6224f6d31d8e1986f3f22d05ef68a7c35745287b4acf5"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "b178e293f713807530faf2d3dad63bfa42fe75d5cd4885f02357406bdc759a3580875d147068dd038dbb0c5277f44983cba7d2c1e6b24066af62ef88f9f6a4b6f58f790d5a95bc8b0052dfddf5b27b30a306551b31f4dd7f6091e432c3ead1257f8a4570769771692dd8379cd69481f11a5a20ba8e2aa748974c0f942bee683e1ff401b2a48955725c989ec1dfd0d555c5eb40c1b4831eb6768b4e3588d2555ae5a5d36af6"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "440c71f55d66961d1727e5963b200d76631a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1350}, 0x1, 0x0, 0x0, 0x10}, 0x11)
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001d00), 0x282080, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000001d40)={0xc0, 0x0, 0x4000})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001f00)={'erspan0\x00', &(0x7f0000001e40)={'gre0\x00', <r8=>0x0, 0x7, 0x40, 0x7, 0x0, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x4c, 0xb9, 0x1, 0x7, [{@remote, 0x5af}, {@private=0xa010102, 0x69}, {@multicast1, 0x7}, {@rand_addr=0x64010102, 0x10000}, {@broadcast, 0x4}, {@remote, 0x7ff}, {@local, 0x1}, {@broadcast, 0x9}, {@loopback, 0xfffffff8}]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}]}}}}}) (async)
getsockname$packet(r3, &(0x7f0000001f40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f80)=0x14)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000003600)={&(0x7f0000001dc0), 0xc, &(0x7f00000035c0)={&(0x7f0000001fc0)={0x15d0, r7, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x82, 0x3, "6b1cd81e2240c3bc3c2a48b384ef066ba6bfa0017478be0c6224daeb4abac60f92ee34727bb2302557920296aac14986fb7b2963e84ed7b32e8020dd049835420ee1c038dcde5ef60577ebbde2a88c23f0fe40ca505a56af783da1e0dcedbee4b1acc0b5438079d0c3544148ef272bb8d789078508b8a6254d373aa27917"}, @ETHTOOL_A_WOL_MODES={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_all\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe01}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '/selinux/checkreqprot\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&$*(-\xe7}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "b4ac5ee231e275d0ab6023d87e96d7d8e4611860adf2eb686c68a2adb37d1938d7d3b0e27a9e9a3f8b79bb7a92b08c49cf08336c45e2c2c509cdbfba0b5cb775ab18a528e3279147cf47e2d78f28211eed66183666e82c588e3a590698c70b792bc5bc1223625b918b6c7cba018c9527a66c0fc392759603dcb4860a5905b5404e3e21b4636f4d51fa6da364884c46cb1fe4d39c89451e2e09e4d325236846a8dd5d64492a1db7cb48e21d4484bec58b3507c4b67efb01bedab369ed9011f2164de0683841eb7cc135e4bcd550cffbe0edaf66a222a60421d643bfeddef322a9db34218ce4f714ceb112d1c30c79"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "cd70349865cba9589204c89d2947c68acc0005e484cfc53571d7f6fcb2ad3c7e84e0cb22a1b4541066d828c62406d05b371330f95c219a3bc642db0875a12e80f363f237abd454bb5ad80948f48e87a8b75321cb13afb351c17cdda6f1e344b9bf3312c10201882d6abb8e13e4ad88f97c4b840043ce8a0bc031f2e3f25c88d0378c893a761f9ffd060f8ba77f1d94db09c995116d18a985b05cbcafbea83161e90260be10e4575c057ce0ced73a3a93b069b0e0f3a0a89ff8f27ea960ce2462b64aafeee7ae08201aa9416cccad8d9bf82f983924bea4207573c1575f1a38"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xab, 0x5, "9e507206662b663232236680e2a70a8492c7fd91ee1b5d738df930c6a7c61f945588126e4ff6ceaf56abb8dba02a570c35ee9ca48032d4da78f303c5bc5948f030f454baef396a92534fc6759b3503be2225da07c441937374fd0d36ec67b4f069e67b3e89d96ac9b6a23e036ed2cc14b4329932ae93585bafb389dabdcc8e9edf2dd3b4e268d267c864d115897a493005f2bce685269bcd35f071a17bdcc13e1a4ca74066046c"}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "11db3b5a63690aadb0d1e7d9dc711f108e3375edaac9fe252ab3109581cf9c8e06942f97d7dc8bf7708444bb6dd6e04f6e6c42af4d3bf30da6ddd14afef771fde3b81873591b67e3244d898cfc8fad5366216cf2673df823421c92d0ba8c4013e23f4e8b5b26c3d5610c53e299c68827e7c8e1c852b4db8510c539a7ae8515bdbb94d1a7264b1fe87a2310d18d8a864cd4c2bcd7df462fa948cffe223f7ed0c6c23dccbff52ac591e5361c3f8fcd4b566657a572773640e0ec08b8794559444a1d61111203"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x15d0}, 0x1, 0x0, 0x0, 0x8c1}, 0x20044874) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000003840)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003800)={&(0x7f0000003680)={0x17c, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x79}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x40, 0x6}, {0x8, 0x2}, {0x7, 0x2}, {0x80, 0x3}], "ff5be800e6efe9de"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x6, 0x6}, {0x8, 0x5}, {0x5}, {0x6, 0x3}, {0x6, 0x3}, {0xf5, 0x6}, {0x6e}, {0x0, 0x1}, {0xff, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x8, 0x4}, {0x18}, {0x9, 0x8}], "52385136be5a81b7"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x2}, {0x2}, {0x5, 0x6}, {0x9, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {0x7}, {0x7, 0x5}, {0x7, 0x3}], "4afa02062e3798bb"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8d, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0xb8, 0x1}, {0x4, 0x5}, {0x9, 0x3}, {0x9d, 0x4}, {0x7, 0x3}, {0x54, 0x1}, {0xf8, 0x4}, {0x1, 0x3}, {0x13, 0x5}, {0x5, 0x6}, {0x9, 0x5}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x68, 0x7}, {0x0, 0x7}], "c4d101f2853f9371"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x60, 0x4}, {0xfd}, {0x13, 0x4}, {0x0, 0x2}, {0x8, 0x2}, {0x6, 0x6}, {0xff, 0x5}], "5c46b245e6d41e29"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x8}, {0xd9, 0x7}, {0x4, 0x6}, {0x44, 0x1}, {0xd, 0x4}, {0xff, 0x1}, {0x8, 0x3}, {0x2}, {0x10, 0x5}, {0xf1, 0x7}, {0x9, 0x7}, {0x1, 0x2}, {0x81, 0x7}, {0x8, 0x7}, {0x20, 0x7}, {0x7, 0x1}], "faf31036786797ce"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x1}, {0x1, 0x3}, {0x8, 0x2}, {0x6, 0x6}, {0xbd, 0x6}, {0xfd, 0x2}, {0x9, 0x2}, {0x6, 0x2}, {0x40, 0x7}, {0x2}, {0x5, 0x6}], "5fc9360d56e207d0"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xe, 0x5}, {0x8, 0x5}, {0x6, 0x7}, {0x2}, {0x2, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0xfc, 0x7}, {0x81, 0x2}, {0x6, 0x6}, {0xf, 0x4}, {0xb}, {0x1, 0x2}, {0x3, 0x4}], "e948775346d307c3"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6, 0x3}, {0x10, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0xd, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x3}, {0xb3, 0x1}, {0x6e, 0x3}, {0xef, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x1}, {0x9, 0x7}, {0x7, 0x1}], "1c3fc7c970dae534"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x24001894)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000038c0), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000003a00)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003900)={0x84, r10, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000003a40)={0x1, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000003ac0), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f0000003d80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003b00)={0x210, r12, 0xe02, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0xa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6}, {0x8, 0x15, 0x2a8c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb0}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x4570}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x880) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003f00)={'gre0\x00', &(0x7f0000003e00)={'tunl0\x00', 0x0, 0x40, 0x0, 0x80, 0x2, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x68, 0x0, 0xff, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@generic={0x89, 0xc, "0ab46305810de92e061c"}, @cipso={0x86, 0x5a, 0x0, [{0x2, 0x12, "2421cda8c49ec355af20ac76f9c8b887"}, {0x6, 0x7, "bd7a4352a6"}, {0x2, 0x3, 'e'}, {0x2, 0xd, "89e51c2326f8c0d7e37c5b"}, {0x1, 0x8, "45d947d2fa98"}, {0x2, 0x12, "cf75ce5a6ba80465aeda06f1c14be322"}, {0x0, 0x11, "06c7d5f35e91195e386eed9d9ce3a7"}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x11, "b2e7c7296733c012a34788814c42e0"}, {0x7, 0x12, "5146ad1ba3a6d039cfc4a9f6f42c0a4e"}]}, @generic={0x83, 0x2}]}}}}})

1m0.719777936s ago: executing program 2 (id=553):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async)
shutdown(r1, 0x1) (async)
unshare(0x2040400) (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
setns(r4, 0x2000000) (async)
r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88)
sendfile(r0, r0, 0x0, 0x7ffff000)

1m0.65857292s ago: executing program 2 (id=554):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000480), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000680)=[{{0x2, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x38, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}, @clear_death={0x400c630f, 0x2}, @request_death, @dead_binder_done], 0x0, 0x0, 0x0})

1m0.569842536s ago: executing program 2 (id=556):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0) (async)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r4) (async)
close(r4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) (async)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) (async)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, @private0, 0x1, 0x5, 0x0, 0x0, 0x6, 0x900218, r6}) (async)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, @private0, 0x1, 0x5, 0x0, 0x0, 0x6, 0x900218, r6})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r10 = dup(r0)
sendmmsg$inet(r10, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8604fb6", 0xae}, {&(0x7f0000000240)='~4', 0x2}, {&(0x7f00000005c0)="e26720e16aae858478df03560eb83aac4db01908cbd3140afe5d10120066c607350886ee667c97423f611a438b7a536f19d08b0554e1a6a8d7cd98f8c9888a946b8ee30cd3a38ff56506dbcf581e76981a61f453ac3001bf60d0200e0dcb44e7b012c0b508d54b265fa59502a3e5416269a98178c21fefa4ae2915ba2b14b77fc718f394f9cae62152c0afd5828bbed47223c6ee59a3faab261c981d6c3c657876954dfda6295d55a01db3d100dd7a9daf1db48e6d47e57f1fc4a67569c13b688278f4052fc301ece35b0c9009812b9246e9880bda78f4db6a2c1cbff39167c74c87d2d30af20ea4195468af5e2ed3e2002343aee9d11586d7b47bd8c06ad57dcfad78c271e36507a61f9fdc3e6abb10ac7e954583b9d8913b38b9e7373a0dec53581834ccfdf4ba6603af616c70856c84183a34d8192acb5bbbe6c9f0ca5047c62195692d1de3d636d66f776f6f45f805498bf35e9a27171a9774c980accc4cc759e397dbd5d7eed8753186a580e9d25778abbf1afd7455ae1530e4ee8cc62d5391d4c1e88ffa259700734b1db4647588a54480507a1cb3cff0fcb6200c13a168f93efa6d9dd253240353033ef4702c4b16950a890ecdeaccb477af16fff0c29d4038cd18ae95a0f2651f1bfb8bc625039265de6eb8038e44cbb6b162ad66bd392445e9f89590e59354a7246449ae5f0644ae797107daf5713dfc721146044119147a35b596a8912b879c8971a734035ee41c331732f6e89cd1e8501aaec4e841487cb74a310c94d1df0c16ae6c491f564256d110dc5eb5d8ec4447d3a716734be41fe29527cf11126d3a1abf9d6c967e2cf2fbfc8df64064208b7cf46a2c2860252bf5a2e31ea0f71dee8381ba591afde061af6af0dfd54ce88731ec6c881fdadd66113cb23fb3b7c959bb5f42fce0fede9728a28f37d2f330f93cd3a849d0046cb11724e07082b9aabf54d597a42e025c4dea2a6f5d3224441161ce82db203e0bcb9ee0d4352d8f61b61a945761596c1fb8fbec085243ca07204b30b30b8d3ef6275ea955d9554ef4a1393c2182d9e0ff139f8cf340b7022b711360c9c224f4544155a3ce5c7b13240efd4f8be4b35ecda2e87c9a16c756d1fc054bac0fb67b52ea4bf6191fd944a862f2d245400ad2c954572f3e0d76c1ee9effa7163395a7291660c41e80780a419ba376a78916968e9208b4aaada7c58e46fa85941b3c44f6ee64df61959c5f04fdcae6b07ad8a7f66baeae7b745ad9b00526bd8fa6ad7315152dac5faa46d9fc4af3a272d90c3814123f2b667e9a6f9d924a86b089c2029448c44685656ea963a869ac19a04e198f600fb24bf78a1a2e743f01a1e36c87e6f428bf025e35a855cab7e1b8553398", 0x3d1}], 0x3}}], 0x1, 0x95) (async)
sendmmsg$inet(r10, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8604fb6", 0xae}, {&(0x7f0000000240)='~4', 0x2}, {&(0x7f00000005c0)="e26720e16aae858478df03560eb83aac4db01908cbd3140afe5d10120066c607350886ee667c97423f611a438b7a536f19d08b0554e1a6a8d7cd98f8c9888a946b8ee30cd3a38ff56506dbcf581e76981a61f453ac3001bf60d0200e0dcb44e7b012c0b508d54b265fa59502a3e5416269a98178c21fefa4ae2915ba2b14b77fc718f394f9cae62152c0afd5828bbed47223c6ee59a3faab261c981d6c3c657876954dfda6295d55a01db3d100dd7a9daf1db48e6d47e57f1fc4a67569c13b688278f4052fc301ece35b0c9009812b9246e9880bda78f4db6a2c1cbff39167c74c87d2d30af20ea4195468af5e2ed3e2002343aee9d11586d7b47bd8c06ad57dcfad78c271e36507a61f9fdc3e6abb10ac7e954583b9d8913b38b9e7373a0dec53581834ccfdf4ba6603af616c70856c84183a34d8192acb5bbbe6c9f0ca5047c62195692d1de3d636d66f776f6f45f805498bf35e9a27171a9774c980accc4cc759e397dbd5d7eed8753186a580e9d25778abbf1afd7455ae1530e4ee8cc62d5391d4c1e88ffa259700734b1db4647588a54480507a1cb3cff0fcb6200c13a168f93efa6d9dd253240353033ef4702c4b16950a890ecdeaccb477af16fff0c29d4038cd18ae95a0f2651f1bfb8bc625039265de6eb8038e44cbb6b162ad66bd392445e9f89590e59354a7246449ae5f0644ae797107daf5713dfc721146044119147a35b596a8912b879c8971a734035ee41c331732f6e89cd1e8501aaec4e841487cb74a310c94d1df0c16ae6c491f564256d110dc5eb5d8ec4447d3a716734be41fe29527cf11126d3a1abf9d6c967e2cf2fbfc8df64064208b7cf46a2c2860252bf5a2e31ea0f71dee8381ba591afde061af6af0dfd54ce88731ec6c881fdadd66113cb23fb3b7c959bb5f42fce0fede9728a28f37d2f330f93cd3a849d0046cb11724e07082b9aabf54d597a42e025c4dea2a6f5d3224441161ce82db203e0bcb9ee0d4352d8f61b61a945761596c1fb8fbec085243ca07204b30b30b8d3ef6275ea955d9554ef4a1393c2182d9e0ff139f8cf340b7022b711360c9c224f4544155a3ce5c7b13240efd4f8be4b35ecda2e87c9a16c756d1fc054bac0fb67b52ea4bf6191fd944a862f2d245400ad2c954572f3e0d76c1ee9effa7163395a7291660c41e80780a419ba376a78916968e9208b4aaada7c58e46fa85941b3c44f6ee64df61959c5f04fdcae6b07ad8a7f66baeae7b745ad9b00526bd8fa6ad7315152dac5faa46d9fc4af3a272d90c3814123f2b667e9a6f9d924a86b089c2029448c44685656ea963a869ac19a04e198f600fb24bf78a1a2e743f01a1e36c87e6f428bf025e35a855cab7e1b8553398", 0x3d1}], 0x3}}], 0x1, 0x95)
socket$key(0xf, 0x3, 0x2) (async)
r11 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async)
recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
read$FUSE(r10, &(0x7f00000075c0)={0x2020}, 0x2020)
read$FUSE(r10, &(0x7f0000002a00)={0x2020}, 0x2020)

55.005164209s ago: executing program 1 (id=656):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x27}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x27}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fallocate(r1, 0x40, 0x1d97, 0x1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x5) (async)
listen(r4, 0x5)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r5, &(0x7f0000000680)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xfffffff1, 0x240080d0, 0x0, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0x0, 0x8, 0x1f, 0x0, 0x70bd26, 0x25ffdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xb, 0x34, 0x10}, @sadb_key={0x18, 0x9, 0x588, 0x0, "9404655065e279e14efb1b2f718effb4ffa7d0f7dc28a3bd335b87658a4b80ecdc813d9b37aa9f5f0d821cf56e039b07a6558daef32fbb8d6d003ab37bf597e5c3c9d846e3ed808207000bcd11e5d0d14d5a4554ad985b6bafc697452599103a83ee8aa189dace0a637023fbb3549997edce22e5ac5a800df8942f38c1e4b53756a2708926a00e390440eac56365e6e2d4de15e4745e1a6156b84beec08f7d46a199bef2e7722d039bb6bcf6aae552eb80"}]}, 0xf8}}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}})

54.922710435s ago: executing program 1 (id=657):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
prctl$PR_CAPBSET_READ(0x17, 0xcf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0)
mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48)
linkat(r0, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000100)='./file1\x00', 0x1000)
getdents(r1, &(0x7f0000000180)=""/226, 0xe2)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[], [{@appraise_type}]})

54.922426004s ago: executing program 1 (id=658):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030500006a4eed39822a29a64e92468047e8000000000000e5ff0000000800010001000000"], 0x1c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4})
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x100, 0x9, 0x6, 0x9, 0x5]}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x40090)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

54.889197467s ago: executing program 1 (id=659):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "3d80850c491b39314a25af1b69c4c66f1bada000e1ad5b16a5b00a2b28393ac1da6ad61255f3ce86ebcf6b0c7b168ae5325cfe6eb4ec0982c3e451ffbd03bb62", 0x1c}, 0x48, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x3, 0x3b4, 0xe, 0x2, 0x6, 0x87f}, 0x1c)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000280)=[@out_dx={0xaa, 0x28, {0xad6d, 0x4, 0x1}}, @out_dx={0xaa, 0x28, {0x468d, 0x1, 0x7}}, @code={0xa, 0x48, {"66b8c9000f00d066ba2000ed0f695f99641558a6e6c666ba400066ed3e410fc5e70d66b8df000f00d066450f7648184898c4a178564be0"}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x4, 0x9}}, @code={0xa, 0x57, {"420f01d1460f01cb0f01dff3420fc7b00030000036450f01c465f30f09b9800000c00f3235000800000f30410fc77dfc66baf80cb808afc38fef66bafc0cec66b8fd000f00d0"}}, @wr_drn={0x6e, 0x20, {0x0, 0x1}}, @in_dx={0x82, 0x20, {0xf435, 0x5}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @uexit={0x0, 0x18, 0x100000000}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @out_dx={0xaa, 0x28, {0xd3a9, 0x4, 0x5}}, @wr_drn={0x6e, 0x20, {0x1, 0x1}}], 0x207})
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000540))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000015c0)=@newtfilter={0x24, 0x2c, 0x603, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xffff, 0xa}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
r5 = eventfd(0x5)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder0\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000700)={@local, 0x18})
r7 = eventfd2(0x8, 0x80000)
ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000780))
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5, 0x401, 0x1, r7})
mlockall(0x7)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x411000, 0x100000001, 0x2, 0x1, 0x10000a}, 0x1c)

54.809009132s ago: executing program 1 (id=662):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0\x00', <r2=>0x0}) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) (async)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}, 0x1, 0x0, 0x0, 0x20040002}, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9ce, @dev={0xfe, 0x80, '\x00', 0x36}, 0x5}, 0x1c) (async)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000000)=0x10000) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@private0, 0x1, r2})
sigaltstack(&(0x7f0000000000)={0x0}, 0x0) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@private1, 0x56}) (async)
sendfile(r6, r6, 0x0, 0x7ffff000)

54.808783742s ago: executing program 1 (id=663):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)
sync_file_range(r0, 0xa, 0x7, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x8000, 0x1, 0x1, 0x8000, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xc, [{@local, 0x40}, {@private=0xa010102, 0x7}, {@empty, 0xd}, {@loopback, 0x1}]}, @end]}}}}})

54.808304062s ago: executing program 32 (id=663):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)
sync_file_range(r0, 0xa, 0x7, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x8000, 0x1, 0x1, 0x8000, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xc, [{@local, 0x40}, {@private=0xa010102, 0x7}, {@empty, 0xd}, {@loopback, 0x1}]}, @end]}}}}})

45.49011893s ago: executing program 33 (id=556):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0) (async)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r4) (async)
close(r4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) (async)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) (async)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, @private0, 0x1, 0x5, 0x0, 0x0, 0x6, 0x900218, r6}) (async)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, @private0, 0x1, 0x5, 0x0, 0x0, 0x6, 0x900218, r6})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r10 = dup(r0)
sendmmsg$inet(r10, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8604fb6", 0xae}, {&(0x7f0000000240)='~4', 0x2}, {&(0x7f00000005c0)="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", 0x3d1}], 0x3}}], 0x1, 0x95) (async)
sendmmsg$inet(r10, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8604fb6", 0xae}, {&(0x7f0000000240)='~4', 0x2}, {&(0x7f00000005c0)="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", 0x3d1}], 0x3}}], 0x1, 0x95)
socket$key(0xf, 0x3, 0x2) (async)
r11 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async)
recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
read$FUSE(r10, &(0x7f00000075c0)={0x2020}, 0x2020)
read$FUSE(r10, &(0x7f0000002a00)={0x2020}, 0x2020)

2.009807728s ago: executing program 3 (id=1428):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @empty, 0x3}, 0x1c)

2.009751608s ago: executing program 3 (id=1429):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r2, 0x0)
ftruncate(r2, 0x80796c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

1.99363047s ago: executing program 3 (id=1430):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0)
fchown(0xffffffffffffffff, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.950564242s ago: executing program 3 (id=1432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r3)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r4, 0x400, 0x1)
r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.814409281s ago: executing program 0 (id=1438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}, 0x1, 0x0, 0x0, 0x200c0}, 0x40)

1.814191431s ago: executing program 0 (id=1440):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x25b6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e", 0xd, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240), 0x0, 0x4000800)
socket$igmp(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000001)

1.010718703s ago: executing program 3 (id=1445):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
r2 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_gettime(r1, &(0x7f0000000100))
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

760.91996ms ago: executing program 5 (id=1449):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x141040)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0)

758.6739ms ago: executing program 0 (id=1451):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x40, 0x12, 0x6, "92895cc31925"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

739.564561ms ago: executing program 5 (id=1452):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @local, 0x10000}, 0x1c, 0x0}, 0x44844)

686.636035ms ago: executing program 5 (id=1454):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000440)='P'})

686.599064ms ago: executing program 5 (id=1455):
r0 = socket(0x23, 0x80805, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

668.608606ms ago: executing program 5 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x34}}, 0x80)

640.113817ms ago: executing program 5 (id=1457):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, <r4=>0x0}, 0x2020)
creat(&(0x7f00000000c0)='./file0\x00', 0x4c)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000002380)="d37f438c8ff0a793bb0fd85e80a3add0f8f65f17e46f60227e8b09439e47ae441d91f7c50d52383be1a08cfa58969071ef9251774b2aa82db4b537beb0834e94c9f625097a9fd8ae5d86ccc28ae9a5fbf7a931329d6c0aa28650849abea29afd035f5eb12f8126d5b8c277c8c14f25965396c229226cf8b0c6da769454f1981c1b0a8180b80469005a03d24fee1d6f5543a43d7156a0da6f40f6e4344cdfe5f96f373459fabd8c1fb029f3cbb965f11e04c92468dc54884926996135312816573b5f052907705fb31ed724a8097b4eb9a547bd0a4f9c66421393b19fe59fbc07bc8c6319225509823784428ca5f20741130774b9090811966d1de850ef61c965ba07e2fe52380c4bee79f58db0931b3d0c06cfac96c9e8676eb0e10ddcecb47f17e8c4ea80d3f67a9e04f5edae06ec33863b9fb5edf40c87fbdc5a00936d260eb32c3df5a905d3041a54d0fade7b220027169911111af6142645e771ce84efdff5ef5f3fe5b1efdb67ba83dd9f94008f787ecee2ec9849c34a8699900b3151e799fb1704100f2075cf313f719efba77efdfdf5e37379232785af24729608cf1099a9eeb643813fe492fbd86788f43e231fe0a6f3f0bf302efeaffa32890b1e48818959d7d2aabb83f062e356a81605f55da96df097b11471c46947910bb3e5e40a5a5c92077231d68efaec50b848907d1e37e18d885f5bd95d939ade1852a5e2f516781e1868f0894c8c0872c84d9c80fcfe085ac88e2a8caf63b3444f6d5f63c4582e766f1fb06a204d7b8c266e29bb43e04f42dc241b0f6926ea4b0340f0b3ac232d92677f2ec099b17361d988b72311e5e93d6d93ca3bb711c5fb979684f67f6ba32901b8adb223fea467157c55e8d5540743af46d36e6670fe21254ed91e207044db3424d42a63d780f2269ca3417aeb73632fb93dd42b07eff0f5ed90707423066f834c2881ae5272af5b3c04c6b9cadb8b234d24c5341696960a23f242837d91d6751695e9f07577bb81aea171df43b27c44ca5b815e66f63848403320ffdf2926f500b16e7496b835ae7a09288847cbb232e2e271cd732e38309d41ffb55391dc4a157e0c02505f54430a70a9ac197f5573a0b11722aec13a9adea4d8e0022810ca28414964d40cbcbf9d2704aa82637e13d561c4fed2ed602be375e547a7fa7198e6a75293abb3903d0b8204ba21dd369a79159cdd810162c2a2ee722bf4e43b7679dfb8b4ac9e768fb3d391fc4f1839f2e91f1c62050b8154cafb6dd19a3f8716a5c072725c5dad281281605ac02632d041accf07bed8135f4cab566db7e01c6902be5728fb01cd6b17edb8870e3417897a604ec795c440334b1bf9b6180ac13d13298b80b8f4352b0bb36ac151607d6ebedae06f8a0582ecd3963a6df647c38c64402ab29ed79533efbe311df5c29d9f1928371e99094f3e7d8aa3d277fe0e3471c6746ca5dab72d6ec161e05b46829c7b437cbbfd82e8606153f23205f051002e23a17906056a50a0d402814df2bfc1de9906b2ab651770a482315e06146af144acf0beea22a5a9bc61931d293483d0f3bf04e62e89cce3e3ee781b3340f59f8a026228e6f3cab05f23ea71334eadcaa1068f1b67f1eee3ee1698e92bc68759a3534069de9132ef7d853f4e20dc1cac32b42a995da861ee19c52e8387528db1ff0245807a1fb19c1670bc3c56f44db0333d7568eef79964f00d6d242a3735cf372c844d6cfcd9bd8934f14dbd5cb907108190fb7ed919840429d4da052d95a242e93db7f07c2c1f8f141026e15a767cc9386b31a18ecc82c4603354236446e9c79ad6899049648b4244446dad02225c5837fb8b033ce4db1fb044df7131bc99316434f232b8049701d33235e581341c5bb08208703e4daa83c0d4e1ab73e8c0724d0e9d6be114927acd0b792ab9464dd3b67963ed235243ebbc16e6af057e984fffc2554582cdd6548d9a929a89b39650a12511ea208ea9553703ec994318d50cea6a632724b08b0af3c11a4ca9d95dba675112563fbd166463cde649917402548547d54cede66d711d805060beed06c79be0c682dde2548a899bb121926ac690ecf1220764874c37810abc3c64291fef538f8959ed50a4b9f6058b8c45735fc783f3ec592c022b066583950037fed74e12f0fc8f04db78cae682c706fdc3783a206167336ff9e4707ce741893beec04916626c4ed07db0a73bfa5d786e3f3585e4b7b37f3968f08f8971963fefa07b7311d4bef7b5a5d72d3c40297da80d995d866220e005713d69b5dec9a4481301e9aa6ba8a6bb1f911c1d9f827838edb81348231f3da450c1044c9c722d31a1fadccbbac0d82de32f2a46c0a083ec89e2baf21b2b1655702e7d58b950df5904f76f129d15c93f95550e3b52c72eb79a1e09aa253c35fce97977f881f61acc6268c2596b755f18d1c95be938b390565d780929c4c6ba4c8d417775facfffce5c0bcc1f075913f5477563d06b3583c3bdcc7330bd6d1a8bdcce29f8452668a9f2a613f21d5195ba1a1bf134e80be88ee8fdd994936b1b40a0f2e98723d8bc53aef7b5af884f5fccd3eaf2dda01278be0b26eccd63cf68278e06e59889b8b9327550b615df368d99bd6d19636477c4d592e365b0c8c43a23d434ec3d622184f325d6d1c8b704aeac87359d9c09012deb32db9bc034fbf10b4662d6618b4d849a9546f00ed3265c22807072482b0ea4eacad35e10bded78ddc4e4025c7ba521b709e4923cfa8b6964fff4ef513965c4c71a77447daf08f7ddd10f2319b57c8075046ed4820e135f883fd4358edf30fc9965b16885aeb0f82cef2556f67bd33c44edad1a2e3bafe648f5e3797a62931218a468f637832f7ec481526824ebb8de5c207733c54313add8a24131f6de8eb8ddab462b5ac7693f7b278b38728449c9d595af99ba5b1548fd942b7b8538456a261a3ee3a7d18fb3e6180b6cfc9adc76a1defa797b57bcbcb9cb47fdeb2316fd2d913dd4aa0239638fc5c3d29df965aec2ade1f556ad58c9159c9f1b6e05691f476c5ff73230eb74a891f7b285de923d1cab7cf1fe2c82cc6ebcee9dd0be04bbc4d01b2ba8c2525fc4120ffae3df6bfe44663ee532ceb5a21db4f2204386f84e2f51666af55cda90dba169a9cd1adeadd7c90322af2656c3166fee2dc39b2db56e2e18b6f7a24bb7b0494320d2000d629e93427d224587dedb5c196b1796fec0c526a8a0355951045677733b33cb42ec170f137b934c4c6e141a8f8ebbeb1970797a29225901780f96521939b2edf85b1a456e9f97d02782104583757126159f264d9ed95e801561d63f0ca075543813c732e75deb01e585fb5b7bdbd7311d9f346e512b36e972489988f53f42118bbfefd3a52ff1fb97f47eaab7f8baa8e1f397bf877588c1c898690885273e47c1bdce3f220f80828fb7489283d5529756514842974a55cd95aa5a75a18627897836311486300bde4fec1c312c735e5ba3419028cbeeaef709d97752a12f83650aec7305232f22f90b8718113f06b3cf48cae0b365c456aa17610a78454fb81020c84ab51e27891dfe6e3820bb8c4ce0a5f72c72f2523b10be64a3c05f76e7bcb7b6c9aab9e49bc0c2b6044b66c475988f0a078f53912a9c442a40243da943376c8f75e74eac306c61004f6a88a818e3e992c0ccadf44e48c95472359c79f04462598dd467cc140e665e57b9b98702096750b82f291ee11b80a9064dc4a0c790107ac0aca2166e4a964aeadab9ec1ed1ca686b36ff00f75a3a131c09e3297d0471b689475941d09e09c62d94840a6083b1e8d80c22c9e10f3575cf53fe80702e0ef82f43bb13a1128a4f76a1728da93d86a5c86fe831334442deb1e003c96cc40a65ee721e219c06c01e75176d1035ec855258d3fc565f0d6eb31910c3c4e4450c65755ca563f0d877861df816160dbccce49865e0c6e9dc7cc281481b9f6bb8dee95d6a572421f1b2dc1995e0a3fde00ae6073015ae4176519e586ef434df534667d30ab103b7815f5a992e51004471ecdbbd8d9d464e7c24124a928b5aa925458825024ad03ad526a5b08ba1b30fef04288035749c266612bdd5caf4ed5245f67f5fccaabc6b2d8994c395dc7f8ce00089f4eacefb18e65a2d9d04136cd9172ce5aedad596d11fdd4b599f7f544f92a398042821b7c1e6ffdf053a35f95f9997791bbf6a0ecbc69531d14b2fd6b18dce4267816ef2fc135b24d76be1b59e35fd76796e9fd92dcb38c08968d9be724eb8a22575e7a7e2649f2a27fb3fac57f6aa53917ae27cd8efc4b6469de6155c3b9654a70ca7fa318682d1fbbf7e3e9f85f3fdf91f96eba538c899f3aebb79fa0ff96f122859061c2aca2a2fbac5640807cc7dec2a5f37a84cfe69af9775a703281d271a38ce08adcfe26ad3df7d0a1065393791dcb526634ceb5c33061fd83b4e1c72fa175585e0f839c9651002896fc7a6ced33919105de91d17083c8f6985e24ffd0fb35dd558af58cab9003e1fb7f87075704396ff677ae7a99725ac2c50c3a9edb15cce24de9a734f81f5187099b2ec316c6cf536c628445799bfc13803c6e94fa844de4b294b6f9b7f96ecf666c1088eee0997dc3d925e45fe9157ff86699e68ad786e973468de54ca6c9156c2e30541e97fb7b845ec2acdbfab05a03009de8260b444c48c0e64940a441d56446b33c698631f480dbcd6f8726e4c287c262bbb6de251c930e717797af777283e0575e8e1304af50cdc493f429dcbfa518e592550e980bf4516ff177a725c59ed0f8d9384bf9bbfe024560062eaf58bc6dd4ad29d71a39f02e00f6ca44ea68b9019387add513c767693d5535e46b3ff697aaeaeffe8e85b86ae877586fd706fbdcc492208c1b61556b80af1f80b018391a4d42e030d89e57c8c8c323c23805551954bcfeffb2c08f9043f24db22a9285f9edb6c66e1091b9dd8e51a228dac137df945491c53014a79b3e033305b1678d7664afc79bd04b0c397c0fb4a12fe3116b24e4d42830e3fb611b337f449c1e0e9667b09690b37789e45cc3007f4a56539c782fa41cbc30f8b213f36e03a1bcee413ae9b4706561c5c68e0ad645423eb5e799ca52a0cbb7e9468a7a0e253b5ea76f6a79a5dc9d72d5aab07703a814922f1fbe1eba0336659ae0acc46b46088b895846435a02bbacd4663f652c0e1289411bada43f1335d48d8ca7a021a60c8a19a8a894aa3375758a140bd040e24aabb0736f79ad95f2090a78418360cfba57398dbf3645bd6c964e53923ded0751512e8cadb650ab833ec3167e8bf385bfbbba46e0845e745810d0133cea434ddab18ef066caea680f16604baf0ee56b1f631f5ccf754fc79285af9d17d99346f7bcd7048dcbb3f0fbd6c2aaa415821f73e4ef5c09fffa911a7ecda2961342d0db95a92d597e8755e41fda1e39c65efc82ca82b22172b3e2017ec5bfbbdbecccc318190eca29ca4dfe393afbbaede3fbc53aa54fde14a1d98a3f0e673bd710d73a978cd7b37901915811c1a8478c61c4021792bd07d42a0e4f7f367139fd78ad1b6cc23c94bfc98bf73c8891c5c69c00c0aa4ba3d76472543fd8d2fef44f4fa928906a60f726a7aed2c6435ea80ffa1d91efc4a605b48845a1e66a7a79c92a869549383256e7724f796aa893c3a86c8c501dcef329d79d7ad5836cd41d48d0ddee68cd5dce8e59724bcf7a0d6872deae7dd15939db46b978fdb77158c3076ecc720b3fe3fefff15b28f7f1304c375a435f20c714576dfc8c9f53af9b6dd7d7ba14d8fe4408f8ffbd61aa0f1194e3c57d63519f96e42fdc97e7adfd686fdbef39bdca9a2716b337e406a909f3b2eed19e24408e8dbe91b5aa98fa62b6fb6f9f13dee6a5da24b24cd2cd859029aabb2bace5492de4985a19c508d2062e6b580bac1a55a41aecabf0d63f48315a6497f11a5a09bdfd1649203eedcd03069cac0bde4f7691e57e2a054e1c192f6d78f2647af7cfffc4daad033521b87103c5bbb81eafb0ff72c4cfc7beab3cd7074ed50f23021e917e85a0ea2dec4dd0d7f8efa68f15a1296ca768fac34f630014743eeeed57f80165e268c1cef7d5d385edb955195a3e44b8b388dcab72083fc2dc23d71913bb98ef2a34ad6df1675b936e294ebba47dbd74daa8098fcb627a1e17616d8775cf1fdec8676d57ce31bd4bfbe821a03ef251f651ce97dbae57f99c6755470e9cdd17699c568ada69a64621dd5625d95b0b550c596292b1816b9516cc7d8f02f8be32afda1f4357419b28363ced9bf7429e7687531fb00de4d2e03fe4ca448e66ad17c58d909df244f4f7ed265164b42273187816e0872e6818b8bdf48097d108f4c67ffa10038f7d2a705b4489c9af1284a7b34dec3e5b56f350c880277fca26427e0746eece173de1ae1104b7822a9fd45b262e5f3ce16a64dfa69e84f077296144f0c119bd2aac2251f463b3e8177dc259088c8a1794953b248b95e7c6e6f91ed45a7d3bce7e91ec72b98c06ba6c625bfdefc69c7416d89a0b1f3bcab5aed96370d74c6812ef0338368756f83f4be0331cde6d11d9a917483f25beda96af71882c3d4d1b3785932fa0bc93d611c919dcb116699db1a3d26ad6826937a984fa121fac7a45ff220520f702ee942793dbf7023b98c9cca4f150bccd29f26aff58e2255aa73fb7a7abd24b501bd403f24900d42e88c57494ab5ef8bacc07ff9904b100d709cc9b1018cacfa42d839476b7aeceeb2236e2c1151d441b167036bef84069401d67a1473d5d11cc109bd39a1fca5d5aa347c4fd5f6f3c12a8f5d1ec344dc1717f5e8e1aae6d7b7c42aa633ffdcb46c32ac667d933cb9fdaf6d83eefe77d8733a59fcf394d063efa474df67697f881991a34fa79bb78f3b19e9b29cc7b03ca7390b0ca6064a961f3fed249db4ff2c01840373b6242034cbac645d59743f1a90f372ee0c17efade2cef03e3f0edc640dfb629c6b98dc2f28ce06aff3574a2cbdb4b06fba31b2dfe34bba7e34e02a786fa4473d5ba847f4f1e644c1bad62ebd5ca9306219ad6beacb8a54ba299e1bad887293f1b65ff956ea2a562e290df607a608503afee3ae180d600f1d14a9459cd5a399c7e2c7bbde19c11ac869d34ea5e990a759e346c3d538108a277894d6ec7bc6fcd65862a2d9d0696551a4a37379feafb313a09f2575c52641db9f46f4cc5e851f67ce633572b6ffcea7b7c24b44b40d32e55e4f3b426e464c07741648f30d51fe3eb162cadcecf21b7182cc915ffd887e85c385b5989f87910c5c990d639f8d2cd9234c534400088ef49733c94f39131fd51d784a407a07eae6d5359acfa35994ec3760ca3866404a5faed0fb210ce1b849868a6007c8e839ac7518172928277bf2dc43d163d2a0f6146cca1738ec3526762e8e2caf69606a3980bd08fba42ec7cbf48d315e45b834bfb14221de8259250c4ae9590520288c73bfc7d8076d3fe46b772491173ea0daa76cb5cb40637a038ce734d72c0c020494062843715e762d71a8f8518fa7d837391c06b62c96efc17651158657db8ea9a57634b0b5628b06fd5d568fb02185a63a6beb56013cfb4fd1695b102fb58f39161232af39f6d87c5ff6af247df3d549b7f6f81cddf4e3cb12b18634e69df5af55127f72670a3104ce5aba7877c32ee4b0cfa076247a95750e830a240b092baec2f473e83581e5799d69593247f0e78ad8e44c0e0d09fc55888107c4badcdb20b2c82d5915b3b03060e53d199b20b29ad6742655bf62343421f826daf1a3c0c493c96bf719bdf0a8dc9a4fc3f75bcebec3aebfd898ef161cd4e2e33a142c36f673cd8da72edae4f691a4271881d326d77fca0af396bc1eaf9e9d2a047562f91f0e87972e3ae5abb75e352f28c81351c4be6a34e5a01b8ed8461f14e21d1afc9260d838b43e9e2ae078d64b6c718232bcd2b26d3c57beb3c605e00c6f9c1031a3bae4b1872ba5d6c23199253929f1cf57a2e961d798ca9d315fa6b9855c8e7efcc24ccde498a3f1ba23755360044f024753f886f97016bd45a56d802f3e9e040a84f6c46cd5aa99fd4471b97cdb0bd8d265853fb79c42b4cad7eda49ca08d3cefffee2d3f1b5f083a06ea4be4b0acf84ca27e5a8d579d3135f3e59bd5b823b2bef7708189f54c8f0d576e4c6bdbf932b55bc792bb302cddc5c555e4903eff45b493f9498f7bf184035335ad1ba1547795a443c9afb30f932e7d1b042fe1690cd34d98e2331cbe38108be26f8ed615590e8bd99fd01b700b21e6ed61de92297d8b447c723089cee359ccd4517328d54ebc43a3f9173698c4362a6130508c9a0ea57b9a8a74a997a21e3e2a7223ad3debd80f70aff2eba5a862aa667052462bf6635eca2dd3350ef70fda58f8492d34c5b819c802f97b8765680c39fcab3b92f8a8be88a93b5bfc1dbba3fbfd3051c4443e766f4cc6a9d0f96b66a081e9316a44efe5973479ae74bf13c18711218f75d7f4e6f70b0a34ff2a1aec8d1e3181a65b4d5f21f0c19789a2ff90ae5e1298e707628e97e6a5048ac29d916193577506a7f5a9cfb0c73d16a67a2e1f872c8026891e98df07579877460c845bf967f87d75295ed29ddf626340f313bb35a04f9304e34773eda19650f25a08b2bd603297d9edd7f7d1b88d0b18e7bc35b0593961e7403a03550a20a0eab83cb00e659f5fccc189d14b28f11b8f55db517ab124b3718e70868d2131c74640bc682ee785a75cf960a79fead7965d0798d98e386598efb5ce92b0ceeec4e63e2eee3a15642ac72691517c4197a667de3e57a56e2d6e4ecb5a2bc401f90ec2239baf6a9a418267fe2228f7776c7f932a048cd9aada01c2e6d9466ecc434ba61eb97a0d6eb00e719940b3dca3ae25b94e9040ee238184eeaf46e51b61d855ce476d10dd9cb09df18c585304bc4f9e88060e4bdd6e624dd90d7ae8874c0af1e17e67d3bb27babd15880cc61f22b6a0b24df6d03faa13f0c918a7b960f47d939934d9ae90edc40251fb53c9fde3ee255e49c8541d995a644d35b46ab202e56ad1de3da1c5ee587f167b398392d0fba4a43eedeaccb0ba16f571055381fe3885490c71e0805b1b3186bf2652b9a9df69d8d1232cf704fddfb5e7d3ff78ba5ae3b843f4f9b82161e223343240c33a9cd21eb312806163ebb2e60bc98b68b3d95bdd923f6ea831083c13ca65e4a06e999b2d014d0ed218d72c5b776fd21ae21d14e23e9074de20d6d16520b1061aa4db3b5b8077b1c43aa375c68a6243ad582a148dc6878ceb2ab6792cac38ef21765df51171436a412f60f5dc68fba51aae8c4909efa690340fd8a63cbfa4af6235c1c904a20578f54b9c91b1fb8017d05321e0bb9eda1502c1506f3d2939977af87d1f9329e237c129d5cb65e093396f016eb0c2f0aa5cab92a00259f6056532ef188be500fec4cd4614e29daf5b41da2b4742b02999e651c42d2f405344a232e36278785dc7a681d0ee2014ce3214f44ff9d2c3e083e18c299cd7cc8ddea4b805c673cb7479a553f28349235d37874ae3da878a5b6321e501c2b77470dd15b35ace69b1b8e3ba20cce47acb8350f206d136dfdcea697bf558bf3426bb1e0ebcf2797a1c7a181fad43b8c68633b361d40868c279896eb1c628656a9b57dcde8444ff92f2cc1d2dfa1998054487d8fcf11b852019ac21ae0582b1c8f4ff90f31d862e20740d7b803b0f109a8d1506137ca58167e8be1d13e6a5590e2bf2af5cbb7e79db2f4cdec83983463e1e830f54f8534e4c660039c0d372c7c757be3498f6be9ff6b6d13b88ca0ee07a0fd4df8cb13de0fa094cd3b9eb87032a6aaa757a6391ccf98fa7f9d99065b4f747e70ca497af77fbad520c589445d3401c67972ff7e274571b8c35a17ae78de90c81f791a69d70975208153f94ac7199c45de1ca5746887ec677452fd1a018b7287ac45e14ecdf1876229964153cfe6b39f1d50a9be63a0eb10016607ff338751cf9bb97c917d532be1174d0410e26dcfab873769b71db87758c0ad015b1db4b7565e244925ea0dc24313ac65f0355abcfa96c786b8ab7b32166bbf4c7ddae0d3f63d1aad63a9b105e05825aa012e075ba3e1c20b757e1dce75f6fe14e891a20988d365cb5e69206a1b7d8caf2effc73eb577330cb56495fbeaa6b7aef3467a32f53634e468208a8e55d626f98a2b51d39b48341c27306e59c0fc5c8058719b526eac245ce857288976abdfc9be1d4f220817f879c15cf0a258f89cd8269113821b0a1073165923748c6e8e0331ae9e7df11e62a80bf28559850cce385a98e0f48209ebcf69e8938a7605e96f4ffcf580b6c1df742766458763dc91b34035c12396b06ca5995b8feee35e1a3891cca0402fb9e739d8f8aa1a637b7c8c2c458493a323fbe5a76f866e2d9adf0d1d76950bc527a969f61c8519508eb5a93447d212e209c724aa16a949d8be1b14c8711d4c85e728e9d50b5b78b76242f9d59d866a86da0f129201a5b665611360ab3f4b678746cbba1b47884d2bfe4d3e38bf441fac354654c5077620cdf5870fda1fd5ca2bf4780d474a27cb660dd9d7ea83d423240c7ffe743dbefa3b922ac6d5f9544a7d5477dc44761a1d47633f67fe220f37630d678daeb62360b5f4f5d40493169f6554897c5d05c4909834fb2ef1494f8bbbf9e986761b931a26b0ab76b88d4f9b9bd9a024dc39819e0a139eefba8f617401811b4a7b97212aa82965e6008447979d19bfeacceedd48a24d65b8a1705d686fa8c44100d27dca9bc764b74345e1da71bfd9604e2f5bfdd28097f90e98f91ca81b08e827f7a3e742e6c019691afb612042a375985b01b94b3eb61a484fc2ece84f53ba5738273c80047663ec335d31f1ce43c6205a78fe7712626e8e6ff691b5bb9fe1a41909db60d8644d73936c4eb663bbfef030499c8c7d31f4eacae3cbf736a1eba6f85008139ba7eaf5f1ef8804f617e56c820c24f139b7036887f2ed2de32fd63574d0359ad4026e67c550b4ae960a2ce234a20e076da3f91a7ed60bd59a38e1acd7941a66bf3e755a431cead3f01600c6e47564167340f3f853efae37b036988bf4b30849d9dd5d0d09b1799bf9fadca76c497a1345018c8724065291bd8cc633e06359b72040a7673ffe5e86c240d043963bf2d76a0fbf50243a63d45d7f3358e1b9d1f3cbffd7e60429afee778f305e7d8f07c3e49a104f3a4e92118ce84cd11839f507656757d6e89ff296cf792ca2f1429aa80c8092b970d6f065eda3fb25b6b8a699561f8fe5236bbbc96f15860e29326a5a2671a88545a65e587d986615998a124a97820a65f81779b3101086e6f261177a66858d788c5c66521408a9e70238719614aa6232a3ef7a33e99d3b1dcdc20c33e8124b1dabe50ce9e4eadf34685560039e7d7e08f038f2004da7703bc4a30a28409719092e6640e743ee8a4e75dea106314a26ed5cae5d02bf9c8b0e96020a6b7941db7f0c311476f377a992caccff7f1919062f9db36ba72b29e9dc0880fb8eb24f41e0a6cbaa487058c6fbe6b062b372e0b84c9fcfd64d84724b6cda7fb3f582abaa6757782b20f9c1fad78f98273129caaa9496c1dbbbd167b52bae60dc327d1e18d82450ff9b6b108a0f20cbee5", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x101, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, r2, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

563.933383ms ago: executing program 4 (id=1461):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
socket$igmp(0x2, 0x3, 0x2)
io_setup(0x9, &(0x7f0000000240))

509.671326ms ago: executing program 4 (id=1462):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/174, 0xae}], 0x1, 0x669, 0x2)

450.64205ms ago: executing program 4 (id=1463):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b", 0x8)

450.5519ms ago: executing program 4 (id=1464):
r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
r1 = socket$igmp(0x2, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc)

450.48395ms ago: executing program 4 (id=1465):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203"], 0xfb5)

414.925622ms ago: executing program 4 (id=1466):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0)

193.294837ms ago: executing program 0 (id=1467):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x1, 0x7fffffff, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4004000)

138.67678ms ago: executing program 0 (id=1468):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

138.478291ms ago: executing program 0 (id=1469):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x2, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
sendmsg$netlink(r4, 0x0, 0x0)
epoll_wait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0xffff4fdd)

0s ago: executing program 3 (id=1470):
syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d000000000001090224000100000000090400000103000200092100000001220500090581030014"], 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810200020000000904010000020d00000904010102020d000009058202000200000009050302"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "e956927dfc41ff8a5059859f576fba6e5584308f60c885e33804ea0f84d9ef7e4fbd52e361d379f4c5b4c6daeb220718060f67067143bcc8e26a77e6031419b558a9437bbd3dcd79e0fc7ad83c2a1185c0ca2ddb580b5d40be4213b07827f25464bae40769c15a5c43e6b8238ae724f802354b4977698e6faa6b4b681a49caec0695948c439df9fd6a9e1943cd5c99a4a3c76bd0c079d78099d59037954382a23631838b5a8ccdb508b81d28542c72d1c4684d173aef32ebcd20b65152ca17980756f39f48b30e34b1501f03a905940b1694690c"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="40125b00000062fc1e535455f77e6be19e4ba8a628c7c6cfd5f506e4770f04d2c156f800445b06d1a7a11c730e59e054c78f34b4d73d0b19c6d2688ffe6e46a0231615350d204ee32e489fb2df623324d86f2d61492121af08f253386c"], &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000480000000046c6cfb6c4ba68d0ff286c33670cfe7fd7fd253b8ac6c3854b3cf70cd6aa14a1d6f5f9f6473e3dbf416e1ba6d94ed7ec2c4500bd46858e96487c6f739d9f285c66d52024d8e38ab895fcc363a033c9a50c4b71f91eb70b3921e09e461cb7934d12da11eaa52b53eabfcb3b4f44b474ae4b753c5c811529f8ce2f866b16341fa3c9e97a824338dc285334035692e4ba9091345ecd902840dfc35af914353737c6fa39dbbc970248d12df03f282427301c44e2eb520370a200117dfcf7f148e5b6692862bb8c788850a8a5692c"], 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(0x0, 0x0, 0x14a042)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200)

kernel console output (not intermixed with test programs):

 pid=1511 comm=syz.2.400
[   53.485816][ T1514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156
[   53.517378][ T1520] binder: Bad value for 'max'
[   53.607710][   T36] audit: type=1400 audit(1759938677.478:319): avc:  denied  { ioctl } for  pid=1533 comm="syz.1.408" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   53.725961][ T1542] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   53.760094][ T1549] overlayfs: failed to clone upperpath
[   53.780016][   T36] audit: type=1400 audit(1759938677.648:320): avc:  denied  { mount } for  pid=1550 comm="syz.2.414" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   53.855348][  T394] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   53.895183][   T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   54.006366][  T394] usb 1-1: config index 0 descriptor too short (expected 7768, got 18)
[   54.014788][  T394] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[   54.023159][  T394] usb 1-1: config 0 has no interface number 0
[   54.029362][  T394] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[   54.038551][  T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.047374][  T394] usb 1-1: config 0 descriptor??
[   54.053514][  T394] ftdi_sio 1-1:0.8: FTDI USB Serial Device converter detected
[   54.055155][   T31] usb 2-1: Using ep0 maxpacket: 32
[   54.061836][  T394] ftdi_sio ttyUSB0: unknown device type: 0x524d
[   54.068049][   T31] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[   54.081294][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.092036][   T31] usb 2-1: config 0 has no interface number 0
[   54.099545][   T31] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   54.112746][   T31] usb 2-1: config 0 interface 196 has no altsetting 0
[   54.121112][   T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=97c2, bcdDevice=eb.3a
[   54.130496][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.138746][   T31] usb 2-1: Product: syz
[   54.143013][   T31] usb 2-1: Manufacturer: syz
[   54.147676][   T31] usb 2-1: SerialNumber: syz
[   54.152998][   T31] usb 2-1: config 0 descriptor??
[   54.159386][   T31] ipheth 2-1:0.196: Unable to find endpoints
[   54.255577][ T1532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.264288][ T1532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.272841][ T1532] No source specified
[   54.306473][  T334] usb 1-1: USB disconnect, device number 9
[   54.313828][  T334] ftdi_sio 1-1:0.8: device disconnected
[   54.360879][ T1534] rust_binder: Write failure EINVAL in pid:169
[   54.367070][  T562] usb 2-1: USB disconnect, device number 25
[   54.707478][ T1565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'.
[   54.832863][ T1567] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   54.840299][ T1567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229
[   54.987971][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.000584][ T1574] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.016608][   T36] audit: type=1400 audit(1759938678.888:321): avc:  denied  { mounton } for  pid=1573 comm="syz.0.420" path="/proc/236" dev="proc" ino=9161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   55.045605][   T36] audit: type=1400 audit(1759938678.888:322): avc:  denied  { create } for  pid=1573 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   55.057518][ T1574] rust_binder: Error while translating object.
[   55.068901][ T1574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.075336][ T1574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236
[   55.108596][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239
[   55.140089][ T1579] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.149956][ T1579] rust_binder: Error while translating object.
[   55.156490][ T1579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   55.162845][ T1579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:241
[   55.173156][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[   55.246529][ T1584] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.246993][ T1583] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[   55.256662][ T1583] rust_binder: Error while translating object.
[   55.268997][ T1583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.275553][ T1583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[   55.285259][ T1583] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   55.295369][ T1583] rust_binder: Read failure Err(EFAULT) in pid:178
[   55.312497][ T1581] rust_binder: Write failure EFAULT in pid:243
[   55.322944][ T1587] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   55.416904][ T1591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.438849][   T36] audit: type=1400 audit(1759938679.308:323): avc:  denied  { execute } for  pid=1590 comm="syz.0.427" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   55.509409][ T1602] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   55.595170][  T562] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[   55.746278][  T562] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.756564][  T562] usb 2-1: config 1 interface 0 has no altsetting 0
[   55.770495][  T562] usb 2-1: language id specifier not provided by device, defaulting to English
[   55.780984][  T562] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[   55.784716][   T36] audit: type=1400 audit(1759938679.648:324): avc:  denied  { write } for  pid=1617 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   55.790514][  T562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.817844][  T562] usb 2-1: Product: syz
[   55.822304][  T562] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜
[   55.836452][  T562] usb 2-1: SerialNumber: syz
[   55.897116][ T1621] netlink: 'syz.3.437': attribute type 10 has an invalid length.
[   55.905190][ T1621] netlink: 17 bytes leftover after parsing attributes in process `syz.3.437'.
[   55.917082][ T1621] 9pnet_fd: Insufficient options for proto=fd
[   55.959714][ T1626] 9pnet_fd: Insufficient options for proto=fd
[   55.967140][ T1626] 9pnet_fd: Insufficient options for proto=fd
[   56.049620][ T1589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   56.049674][ T1589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:183
[   56.069658][  T562] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[   56.087600][  T562] usb 2-1: USB disconnect, device number 26
[   56.191239][ T1641] 9pnet_fd: p9_fd_create_tcp (1641): problem connecting socket to 127.0.0.1
[   56.222969][ T1645] fuse: Bad value for 'group_id'
[   56.228100][ T1645] fuse: Bad value for 'group_id'
[   56.244160][   T36] audit: type=1400 audit(1759938680.108:325): avc:  denied  { watch watch_reads } for  pid=1649 comm="syz.2.446" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   56.298187][   T36] audit: type=1326 audit(1759938680.168:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.2.449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42058eec9 code=0x0
[   56.607143][ T1663] tmpfs: Unknown parameter '��O�����Tښy^�3N }�p�7��:�W\���Fh@xAmY��S%��t�-����L?'
[   56.670683][   T36] audit: type=1400 audit(1759938680.538:327): avc:  denied  { lock } for  pid=1670 comm="syz.0.454" path="socket:[9740]" dev="sockfs" ino=9740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   56.699949][ T1674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1674 comm=syz.1.456
[   56.713039][ T1674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1674 comm=syz.1.456
[   56.776795][ T1694] fuse: Bad value for 'fd'
[   56.796260][ T1701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1701 comm=syz.0.465
[   56.810083][ T1701] 9pnet_virtio: no channels available for device /dev/nullb0
[   56.842647][   T36] audit: type=1400 audit(1759938680.708:328): avc:  denied  { mounton } for  pid=1704 comm="syz.0.467" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   56.884079][   T36] audit: type=1400 audit(1759938680.708:329): avc:  denied  { create } for  pid=1703 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   56.937271][ T1716] 9pnet_fd: Insufficient options for proto=fd
[   57.005127][ T1729] fuse: Bad value for 'fd'
[   57.142301][   T36] audit: type=1400 audit(1759938681.008:330): avc:  denied  { accept } for  pid=1737 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   57.560603][ T1763] overlayfs: failed to clone lowerpath
[   57.785323][  T394] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   57.816313][ T1772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.490'.
[   57.933071][ T1782] overlayfs: failed to clone upperpath
[   57.946969][  T394] usb 2-1: config 51 has an invalid interface number: 176 but max is 1
[   57.963037][  T394] usb 2-1: config 51 contains an unexpected descriptor of type 0x2, skipping
[   57.975642][   T36] audit: type=1400 audit(1759938681.848:331): avc:  denied  { create } for  pid=1784 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.984459][  T394] usb 2-1: config 51 has an invalid interface number: 134 but max is 1
[   58.011415][  T394] usb 2-1: config 51 has an invalid descriptor of length 226, skipping remainder of the config
[   58.022179][  T394] usb 2-1: config 51 has no interface number 0
[   58.029171][  T394] usb 2-1: config 51 has no interface number 1
[   58.035860][  T394] usb 2-1: config 51 interface 176 altsetting 142 has an invalid descriptor for endpoint zero, skipping
[   58.048412][  T394] usb 2-1: config 51 interface 176 altsetting 142 has an invalid descriptor for endpoint zero, skipping
[   58.059803][  T394] usb 2-1: config 51 interface 176 altsetting 142 endpoint 0x3 has an invalid bInterval 129, changing to 7
[   58.071437][  T394] usb 2-1: config 51 interface 176 altsetting 142 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[   58.099436][  T394] usb 2-1: config 51 interface 134 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64
[   58.111734][  T394] usb 2-1: config 51 interface 134 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   58.128565][  T394] usb 2-1: config 51 interface 176 has no altsetting 0
[   58.135650][  T394] usb 2-1: config 51 interface 134 has no altsetting 0
[   58.145005][  T394] usb 2-1: New USB device found, idVendor=0bda, idProduct=8177, bcdDevice=5f.1d
[   58.154324][  T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.163834][  T394] usb 2-1: Product: ఊ
[   58.170683][  T394] usb 2-1: Manufacturer: ࡢ
[   58.175394][  T394] usb 2-1: SerialNumber: ̄꾂ꔋ姖᠈㞫꺲↜밧ᯤ覥Ϟ㝥뱮밼ฎ䅛ᕘ톥ᛘ瑁鮷뭇袠ᾑ㜍聰鲪ꄨ㔢뫇驰뿠⩝腋麝쳴쮔つ肭鮟谓ኘ⊗Ⱟ휘⾄左蕕⨽罽㓨㵍뽫궨욐饪픩帋殎閞篩放惩醮샟ꆒ遝ᶽ鈥௩閝갼脫涧⯂欓䲛ʛ趨嶽㪯➹
[   58.408690][ T1765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.417811][ T1765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.631605][  T394] usb 2-1: USB disconnect, device number 27
[   58.693223][   T36] audit: type=1400 audit(1759938682.558:332): avc:  denied  { associate } for  pid=1795 comm="syz.3.498" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   58.715336][ T1794] cgroup: Setting release_agent not allowed
[   58.769431][ T1801] overlayfs: failed to clone upperpath
[   58.795061][   T36] audit: type=1400 audit(1759938682.658:333): avc:  denied  { bind } for  pid=1802 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.147310][ T1814] binder: Unknown parameter 'fscontext?}'
[   60.285215][   T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   60.436347][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   60.446793][   T31] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   60.455964][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.464828][   T31] usb 2-1: config 0 descriptor??
[   61.373977][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   61.373997][   T36] audit: type=1400 audit(1759938685.238:337): avc:  denied  { watch watch_reads } for  pid=1867 comm="syz.1.523" path="/proc/220/task" dev="proc" ino=10582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   61.418910][ T1881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'.
[   61.428866][ T1881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=1881 comm=syz.2.527
[   61.474788][ T1892] netlink: 124 bytes leftover after parsing attributes in process `syz.2.531'.
[   61.504921][   T36] audit: type=1400 audit(1759938685.368:338): avc:  denied  { read } for  pid=1895 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.569160][   T36] audit: type=1400 audit(1759938685.438:339): avc:  denied  { getopt } for  pid=1902 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   62.867569][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.876639][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.885646][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.894834][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.904029][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.913775][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.922860][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   62.932059][ T1940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.550'.
[   63.066477][   T31] usb 2-1: USB disconnect, device number 28
[   63.244959][ T1964] rust_binder: Error while translating object.
[   63.244995][ T1964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.251529][ T1964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[   63.274937][ T1969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:231
[   63.535238][   T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   63.646324][ T1988] VFS: Mount too revealing
[   63.695130][   T31] usb 2-1: Using ep0 maxpacket: 8
[   63.707081][   T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   63.725227][   T31] usb 2-1: config 179 has no interface number 0
[   63.731756][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   63.753561][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   63.769769][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   63.785146][   T31] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   63.798959][   T31] usb 2-1: config 179 interface 65 has no altsetting 0
[   63.806170][   T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   63.815758][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.845502][ T1993] 9p: Unknown Cache mode or invalid value reada?head
[   64.026396][   T31] usb 2-1: USB disconnect, device number 29
[   64.428867][   T36] audit: type=1400 audit(1759938688.298:340): avc:  denied  { create } for  pid=1997 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   64.567843][   T36] audit: type=1400 audit(1759938688.438:341): avc:  denied  { mounton } for  pid=2000 comm="syz.1.571" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[   64.568035][ T2001] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock
[   64.652584][ T2009] rust_binder: Error in use_page_slow: ESRCH
[   64.652605][ T2009] rust_binder: use_range failure ESRCH
[   64.658861][ T2009] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   64.664579][ T2009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   64.672905][ T2009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:244
[   64.696694][ T2012] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   64.713655][ T2012] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   64.917785][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257
[   65.059733][ T2036] 9pnet_fd: Insufficient options for proto=fd
[   65.080194][   T36] audit: type=1400 audit(1759938688.948:342): avc:  denied  { setattr } for  pid=2038 comm="syz.0.583" name="NETLINK" dev="sockfs" ino=11276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.359186][   T36] audit: type=1400 audit(1759938689.228:343): avc:  denied  { getopt } for  pid=2054 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   65.443153][ T2060] /dev/rnullb0: Can't open blockdev
[   65.656062][ T2077] syz.3.599 uses obsolete (PF_INET,SOCK_PACKET)
[   65.673909][ T2083] overlayfs: failed to resolve '/��7�c[�O�7X': -2
[   65.711991][ T2094] futex_wake_op: syz.3.603 tries to shift op by -1; fix this program
[   65.720273][  T394] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[   65.876366][  T394] usb 2-1: No LPM exit latency info found, disabling LPM.
[   65.884481][  T394] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   65.893582][  T394] usb 2-1: config 1 has no interface number 1
[   65.899754][  T394] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   65.912702][  T394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0
[   65.925692][  T394] usb 2-1: string descriptor 0 read error: -22
[   65.931919][  T394] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   65.941044][  T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.951031][  T394] usb 2-1: low speed audio streaming not supported
[   66.158969][   T31] usb 2-1: USB disconnect, device number 30
[   66.455950][ T2146] overlayfs: failed to clone upperpath
[   66.500504][ T2159] 9pnet_fd: Insufficient options for proto=fd
[   66.553783][   T36] audit: type=1400 audit(1759938690.418:344): avc:  denied  { bpf } for  pid=2160 comm="syz.0.626" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.995190][  T395] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[   67.146618][  T395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   67.157888][  T395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   67.170945][  T395] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[   67.180185][  T395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.193256][  T395] usb 2-1: config 0 descriptor??
[   67.198806][ T2168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   67.207106][  T395] usbhid 2-1:0.0: can't add hid device: -22
[   67.213154][  T395] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[   67.409543][  T334] usb 2-1: USB disconnect, device number 31
[   67.635403][ T2201] warn_alloc: 1 callbacks suppressed
[   67.635420][ T2201] syz.3.639: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[   67.655831][ T2201] CPU: 1 UID: 0 PID: 2201 Comm: syz.3.639 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[   67.655865][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   67.655878][ T2201] Call Trace:
[   67.655886][ T2201]  <TASK>
[   67.655894][ T2201]  __dump_stack+0x21/0x30
[   67.655929][ T2201]  dump_stack_lvl+0x10c/0x190
[   67.655961][ T2201]  ? __cfi_dump_stack_lvl+0x10/0x10
[   67.655985][ T2201]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   67.656008][ T2201]  dump_stack+0x19/0x20
[   67.656029][ T2201]  warn_alloc+0x1bc/0x2a0
[   67.656052][ T2201]  ? __cfi_warn_alloc+0x10/0x10
[   67.656073][ T2201]  ? kasan_save_track+0x4f/0x80
[   67.656090][ T2201]  ? __kasan_kmalloc+0x96/0xb0
[   67.656107][ T2201]  ? __kmalloc_cache_noprof+0x24c/0x490
[   67.656124][ T2201]  ? do_sock_setsockopt+0x26d/0x400
[   67.656146][ T2201]  ? __x64_sys_setsockopt+0x1b8/0x250
[   67.656168][ T2201]  ? x64_sys_call+0x2adc/0x2ee0
[   67.656192][ T2201]  ? do_syscall_64+0x58/0xf0
[   67.656212][ T2201]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   67.656240][ T2201]  __vmalloc_node_range_noprof+0x135/0x1420
[   67.656269][ T2201]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   67.656299][ T2201]  ? kasan_save_alloc_info+0x40/0x50
[   67.656331][ T2201]  ? __kasan_kmalloc+0x96/0xb0
[   67.656357][ T2201]  ? __kmalloc_cache_noprof+0x24c/0x490
[   67.656372][ T2201]  ? futex_setup_timer+0xb4/0xd0
[   67.656389][ T2201]  vmalloc_user_noprof+0x77/0x90
[   67.656411][ T2201]  ? xskq_create+0xdb/0x2a0
[   67.656434][ T2201]  xskq_create+0xdb/0x2a0
[   67.656457][ T2201]  xsk_init_queue+0xb6/0x120
[   67.656479][ T2201]  xsk_setsockopt+0x43f/0x6f0
[   67.656501][ T2201]  ? __cfi_xsk_setsockopt+0x10/0x10
[   67.656523][ T2201]  ? do_futex+0x309/0x500
[   67.656540][ T2201]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   67.656561][ T2201]  ? security_socket_setsockopt+0x33/0xd0
[   67.656578][ T2201]  ? __cfi_xsk_setsockopt+0x10/0x10
[   67.656599][ T2201]  do_sock_setsockopt+0x26d/0x400
[   67.656622][ T2201]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   67.656656][ T2201]  __x64_sys_setsockopt+0x1b8/0x250
[   67.656678][ T2201]  x64_sys_call+0x2adc/0x2ee0
[   67.656702][ T2201]  do_syscall_64+0x58/0xf0
[   67.656721][ T2201]  ? clear_bhb_loop+0x50/0xa0
[   67.656738][ T2201]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   67.656764][ T2201] RIP: 0033:0x7fd69018eec9
[   67.656777][ T2201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.656792][ T2201] RSP: 002b:00007fd690fad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   67.656809][ T2201] RAX: ffffffffffffffda RBX: 00007fd6903e5fa0 RCX: 00007fd69018eec9
[   67.656823][ T2201] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   67.656833][ T2201] RBP: 00007fd690211f91 R08: 0000000000000004 R09: 0000000000000000
[   67.656844][ T2201] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.656855][ T2201] R13: 00007fd6903e6038 R14: 00007fd6903e5fa0 R15: 00007ffd50f161b8
[   67.656869][ T2201]  </TASK>
[   67.656876][ T2201] Mem-Info:
[   67.961742][ T2201] active_anon:25506 inactive_anon:715 isolated_anon:0
[   67.961742][ T2201]  active_file:23088 inactive_file:17313 isolated_file:0
[   67.961742][ T2201]  unevictable:16392 dirty:69 writeback:0
[   67.961742][ T2201]  slab_reclaimable:6217 slab_unreclaimable:71388
[   67.961742][ T2201]  mapped:24342 shmem:18936 pagetables:1012
[   67.961742][ T2201]  sec_pagetables:0 bounce:0
[   67.961742][ T2201]  kernel_misc_reclaimable:0
[   67.961742][ T2201]  free:1470824 free_pcp:3298 free_cma:0
[   68.008943][ T2201] Node 0 active_anon:102024kB inactive_anon:2860kB active_file:92352kB inactive_file:69252kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:97368kB dirty:276kB writeback:0kB shmem:75744kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5472kB pagetables:4048kB sec_pagetables:0kB all_unreclaimable? no
[   68.043050][ T2201] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965940kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:5728kB free_cma:0kB
[   68.073748][ T2201] lowmem_reserve[]: 0 3921 3921
[   68.079281][ T2201] Normal free:2928188kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101924kB inactive_anon:2860kB active_file:92352kB inactive_file:69252kB unevictable:65568kB writepending:276kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2924kB local_pcp:1876kB free_cma:0kB
[   68.096482][   T36] audit: type=1400 audit(1759938691.948:345): avc:  denied  { getopt } for  pid=2211 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.111943][ T2201] lowmem_reserve[]: 0 0 0
[   68.136061][ T2201] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   68.152023][ T2201] Normal: 3*4kB (UME) 80*8kB (M) 107*16kB (UM) 148*32kB (UME) 176*64kB (UME) 29*128kB (UME) 22*256kB (ME) 38*512kB (ME) 17*1024kB (ME) 18*2048kB (ME) 690*4096kB (UM) = 2927676kB
[   68.170009][ T2201] 76442 total pagecache pages
[   68.174828][ T2201] 717 pages in swap cache
[   68.179282][ T2201] Free swap  = 121224kB
[   68.183587][ T2201] Total swap = 124996kB
[   68.187925][ T2201] 2097051 pages RAM
[   68.191814][ T2201] 0 pages HighMem/MovableOnly
[   68.196697][ T2201] 351536 pages reserved
[   68.200943][ T2201] 0 pages cma reserved
[   68.207539][ T2201] Memory allocations:
[   68.211704][ T2201]          0 B        0 init/main.c:1370 func:do_initcalls
[   68.218986][ T2201]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   68.227266][ T2201]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   68.235153][ T2201]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   68.243523][ T2201]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   68.252081][ T2201]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   68.261425][ T2201]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   68.270636][ T2201]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   68.279201][ T2201]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   68.287763][ T2201]          0 B        0 init/initramfs.c:101 func:find_link
[   68.311961][ T2218] rust_binder: Write failure EFAULT in pid:293
[   68.319510][   T36] audit: type=1400 audit(1759938692.188:346): avc:  denied  { bind } for  pid=2219 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   68.349241][   T36] audit: type=1400 audit(1759938692.188:347): avc:  denied  { name_bind } for  pid=2219 comm="syz.3.646" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   68.370532][   T36] audit: type=1400 audit(1759938692.188:348): avc:  denied  { node_bind } for  pid=2219 comm="syz.3.646" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   68.392646][   T36] audit: type=1400 audit(1759938692.208:349): avc:  denied  { view } for  pid=2221 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   68.682061][ T2243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=73 sclass=netlink_tcpdiag_socket pid=2243 comm=syz.0.654
[   68.700903][   T36] audit: type=1400 audit(1759938692.568:350): avc:  denied  { write } for  pid=2242 comm="syz.0.654" path="socket:[11550]" dev="sockfs" ino=11550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.734799][   T36] audit: type=1400 audit(1759938692.598:351): avc:  denied  { wake_alarm } for  pid=2246 comm="syz.1.655" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   68.767625][ T2250] 9pnet_fd: Insufficient options for proto=fd
[   68.767625][ T2249] 9pnet_fd: Insufficient options for proto=fd
[   68.804304][ T2252] binder: Unknown parameter 'appraise_type'
[   68.822807][ T2254] __nla_validate_parse: 57 callbacks suppressed
[   68.822829][ T2254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[   69.054556][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.061904][ T2272] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.069160][ T2272] bridge_slave_0: entered allmulticast mode
[   69.075558][ T2272] bridge_slave_0: entered promiscuous mode
[   69.082379][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.090871][ T2272] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.098197][ T2272] bridge_slave_1: entered allmulticast mode
[   69.104633][ T2272] bridge_slave_1: entered promiscuous mode
[   69.156489][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.163671][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.171109][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.178265][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.200554][  T382] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.208268][  T382] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.219650][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.226761][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.243004][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.250483][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.279446][ T2272] veth0_vlan: entered promiscuous mode
[   69.294975][ T2272] veth1_macvtap: entered promiscuous mode
[   69.316515][   T36] audit: type=1400 audit(1759938693.188:352): avc:  denied  { mount } for  pid=2272 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.351434][ T2292] rust_binder: 2: no such ref 0
[   69.356554][ T2292] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   69.363698][ T2292] rust_binder: 2: no such ref 2
[   69.369068][ T2292] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   69.411059][ T2295] rust_binder: inc_ref_done called when no active inc_refs
[   69.419638][ T2296] rust_binder: inc_ref_done called when no active inc_refs
[   69.509663][ T2299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8
[   69.827247][ T2316] mmap: syz.0.676 (2316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.943130][   T36] audit: type=1400 audit(1759938693.808:354): avc:  denied  { unmount } for  pid=2320 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   70.055597][ T2324] netlink: 'syz.4.679': attribute type 46 has an invalid length.
[   70.130903][ T2338] netlink: 68 bytes leftover after parsing attributes in process `syz.3.685'.
[   70.140860][ T2338] netlink: 'syz.3.685': attribute type 27 has an invalid length.
[   70.210733][ T2346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'.
[   70.219668][ T2346] bridge_slave_1: left allmulticast mode
[   70.225460][ T2346] bridge_slave_1: left promiscuous mode
[   70.231196][ T2346] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.240260][ T2346] bridge_slave_0: left allmulticast mode
[   70.246576][ T2346] bridge_slave_0: left promiscuous mode
[   70.252223][ T2346] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.950084][ T2363] rust_binder: Error while translating object.
[   70.950134][ T2363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   70.956598][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21
[   71.016003][ T2372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.700'.
[   71.073194][ T2382] 9pnet_fd: Insufficient options for proto=fd
[   71.079626][ T2382] 9pnet_fd: Insufficient options for proto=fd
[   71.087834][ T2382] 9pnet_fd: Insufficient options for proto=fd
[   71.094130][ T2382] 9pnet_fd: Insufficient options for proto=fd
[   71.245228][  T395] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.395179][  T395] usb 5-1: Using ep0 maxpacket: 32
[   71.401757][  T395] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[   71.410039][  T395] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.420458][  T395] usb 5-1: config 0 has no interface number 0
[   71.426641][  T395] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   71.439859][  T395] usb 5-1: config 0 interface 196 has no altsetting 0
[   71.448367][  T395] usb 5-1: New USB device found, idVendor=05ac, idProduct=97c2, bcdDevice=eb.3a
[   71.457562][  T395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.465625][  T395] usb 5-1: Product: syz
[   71.469841][  T395] usb 5-1: Manufacturer: syz
[   71.474450][  T395] usb 5-1: SerialNumber: syz
[   71.479972][  T395] usb 5-1: config 0 descriptor??
[   71.485950][  T395] ipheth 5-1:0.196: Unable to find endpoints
[   71.691534][  T395] usb 5-1: USB disconnect, device number 2
[   72.258002][ T2425] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   72.259296][ T2425] 
@0�: renamed from bond_slave_1 (while UP)
[   72.352050][ T2427] 9pnet_fd: Insufficient options for proto=fd
[   72.376621][ T2429] fuse: Bad value for 'group_id'
[   72.381627][ T2429] fuse: Bad value for 'group_id'
[   72.432854][ T2437] overlayfs: failed to clone lowerpath
[   72.438999][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   72.439016][   T36] audit: type=1400 audit(1759938696.308:357): avc:  denied  { remount } for  pid=2436 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   72.494931][ T2441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.726'.
[   72.504218][ T2441] tipc: Invalid UDP bearer configuration
[   72.504256][ T2441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   72.685654][ T2459] 9pnet_fd: Insufficient options for proto=fd
[   72.691979][ T2460] 9pnet_fd: Insufficient options for proto=fd
[   73.138584][ T2476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2476 comm=syz.4.736
[   73.198242][   T36] audit: type=1400 audit(1759938697.068:358): avc:  denied  { mounton } for  pid=2481 comm="syz.0.740" path="/file0" dev="ramfs" ino=12071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   73.220508][   T36] audit: type=1400 audit(1759938697.088:359): avc:  denied  { remount } for  pid=2481 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   73.252115][ T2484] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   73.272527][   T36] audit: type=1326 audit(1759938697.138:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2488 comm="syz.0.742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb31578eec9 code=0x0
[   73.295828][ T2495] tipc: Started in network mode
[   73.301262][ T2495] tipc: Node identity ac14140f, cluster identity 4711
[   73.308816][ T2495] tipc: New replicast peer: 255.255.255.255
[   73.314928][ T2495] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.460835][ T2502] 9pnet_fd: Insufficient options for proto=fd
[   73.555262][  T394] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   73.685187][  T394] usb 5-1: device descriptor read/64, error -71
[   73.935200][  T394] usb 5-1: device descriptor read/64, error -71
[   74.003774][ T2509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2509 comm=syz.3.749
[   74.005461][ T2508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2508 comm=syz.3.749
[   74.175171][  T394] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   74.305298][  T394] usb 5-1: device descriptor read/64, error -71
[   74.425249][  T395] tipc: Node number set to 2886997007
[   74.545251][  T394] usb 5-1: device descriptor read/64, error -71
[   74.655393][  T394] usb usb5-port1: attempt power cycle
[   74.995203][  T394] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   75.016633][  T394] usb 5-1: device descriptor read/8, error -71
[   75.146650][  T394] usb 5-1: device descriptor read/8, error -71
[   75.178725][ T2545] new mount options do not match the existing superblock, will be ignored
[   75.385365][  T394] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   75.420711][  T394] usb 5-1: device descriptor read/8, error -71
[   75.556592][  T394] usb 5-1: device descriptor read/8, error -71
[   75.665309][  T394] usb usb5-port1: unable to enumerate USB device
[   75.913494][ T2577] 9pnet_fd: Insufficient options for proto=fd
[   76.376894][ T2596] cgroup: none used incorrectly
[   76.434868][ T2608] rust_binder: Error while translating object.
[   76.434915][ T2608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   76.441479][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   76.478617][ T2616] fuse: Bad value for 'user_id'
[   76.493197][ T2616] fuse: Bad value for 'user_id'
[   76.523313][ T2616] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[   76.705138][  T334] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   76.856468][  T334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   76.869710][  T334] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   76.878845][  T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.888002][  T334] usb 5-1: config 0 descriptor??
[   76.952130][ T2631] fuse: Bad value for 'fd'
[   77.296985][  T334] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0
[   77.304519][  T334] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0
[   77.312035][  T334] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0
[   77.319451][  T334] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0
[   77.326870][  T334] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0
[   77.335166][  T334] dragonrise 0003:0079:0006.0001: hidraw0: USB HID v1.02 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0
[   77.346888][  T334] dragonrise 0003:0079:0006.0001: no inputs found
[   77.353428][  T334] dragonrise 0003:0079:0006.0001: force feedback init failed
[   77.501818][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.518865][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.527470][   T36] audit: type=1400 audit(1759938701.398:361): avc:  denied  { read } for  pid=2613 comm="syz.4.788" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   77.557694][  T334] usb 5-1: USB disconnect, device number 7
[   77.575877][   T36] audit: type=1400 audit(1759938701.398:362): avc:  denied  { open } for  pid=2613 comm="syz.4.788" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   77.601054][   T36] audit: type=1326 audit(1759938701.428:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2642 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69018eec9 code=0x7fc00000
[   77.604192][ T2652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2652 comm=syz.0.801
[   77.675301][ T2660] 9pnet_fd: p9_fd_create_tcp (2660): problem connecting socket to 127.0.0.1
[   77.695904][ T2660] netlink: 'syz.3.804': attribute type 27 has an invalid length.
[   77.730790][   T36] audit: type=1400 audit(1759938701.598:364): avc:  denied  { bind } for  pid=2665 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   78.072693][ T2668] input: syz0 as /devices/virtual/input/input7
[   78.079676][   T36] audit: type=1400 audit(1759938701.948:365): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.105106][ T2668] netlink: 'syz.4.808': attribute type 29 has an invalid length.
[   78.112970][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'.
[   78.136368][   T36] audit: type=1326 audit(1759938702.008:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2670 comm="syz.4.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16878eec9 code=0x0
[   78.399988][ T2679] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.407240][ T2679] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.414578][ T2679] bridge_slave_0: entered allmulticast mode
[   78.421541][ T2679] bridge_slave_0: entered promiscuous mode
[   78.428393][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.435617][ T2679] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.442858][ T2679] bridge_slave_1: entered allmulticast mode
[   78.449758][ T2679] bridge_slave_1: entered promiscuous mode
[   78.536016][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.543168][ T2679] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.551014][ T2679] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.558197][ T2679] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.590065][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.598133][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.613031][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.620178][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.638776][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.646180][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.683149][ T2679] veth0_vlan: entered promiscuous mode
[   78.698136][ T2679] veth1_macvtap: entered promiscuous mode
[   78.736352][ T2703] netlink: 'syz.0.817': attribute type 13 has an invalid length.
[   78.754101][   T36] audit: type=1326 audit(1759938702.618:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.0.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x0
[   78.822995][   T36] audit: type=1326 audit(1759938702.688:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.0.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x0
[   79.045672][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   79.215324][    T9] usb 6-1: Using ep0 maxpacket: 8
[   79.222185][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   79.235850][    T9] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[   79.244264][    T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   79.265162][    T9] usb 6-1: config 4 has no interface number 0
[   79.279874][    T9] usb 6-1: string descriptor 0 read error: -22
[   79.286776][    T9] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   79.305183][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.519619][  T562] usb 6-1: USB disconnect, device number 2
[   79.922057][ T2758] rust_binder: Error while translating object.
[   79.922101][ T2758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   79.930673][ T2758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[   80.307640][   T36] audit: type=1400 audit(1759938704.178:369): avc:  denied  { ioctl } for  pid=2774 comm="syz.5.839" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.394569][   T36] audit: type=1400 audit(1759938704.258:370): avc:  denied  { ioctl } for  pid=2776 comm="syz.4.840" path="socket:[13587]" dev="sockfs" ino=13587 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.420619][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.420653][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.427513][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.434055][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.440879][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.447652][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.454376][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.461175][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.467932][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.475981][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.482732][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.489612][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.497632][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.504285][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.515598][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.522371][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.529282][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   80.659404][  T395] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   80.740864][ T2786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.843'.
[   80.866622][  T395] usb 6-1: unable to get BOS descriptor or descriptor too short
[   80.874743][  T395] usb 6-1: not running at top speed; connect to a high speed hub
[   80.883586][  T395] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.894208][  T395] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.905750][  T395] usb 6-1: string descriptor 0 read error: -22
[   80.912076][  T395] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.915214][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   80.921385][  T395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.938885][  T395] usb 6-1: 0:2 : does not exist
[   81.075203][    T9] usb 5-1: Using ep0 maxpacket: 8
[   81.081515][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   81.089891][    T9] usb 5-1: config 179 has no interface number 0
[   81.096283][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   81.107772][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   81.119279][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   81.129467][    T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   81.143307][    T9] usb 5-1: config 179 interface 65 has no altsetting 0
[   81.150310][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   81.159639][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.372129][    T9] usb 5-1: USB disconnect, device number 8
[   81.967051][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'.
[   81.995940][ T2775] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[   81.995985][ T2775] rust_binder: Error while translating object.
[   82.007170][ T2775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   82.013741][ T2775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[   82.033742][ T2830] incfs: Error accessing: ./file0.
[   82.065240][ T2830] incfs: mount failed -20
[   82.075731][ T2830] cgroup2: Unknown parameter 'nsdelegat�'
[   82.080510][  T395] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[   82.085617][ T2830] 9pnet: Could not find request transport: fdlrfdno=0x0000000000000006
[   82.098557][  T395] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[   82.114412][ T2832] netlink: 'syz.0.862': attribute type 2 has an invalid length.
[   82.127440][  T395] usb 6-1: USB disconnect, device number 3
[   82.675902][ T2866] rust_binder: 2863 RLIMIT_NICE not set
[   82.691991][ T2868] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   82.778057][ T2873] rust_binder: Write failure EFAULT in pid:83
[   82.806521][ T2877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   82.825981][ T2879] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   83.370982][ T2891] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.390154][ T2893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   83.397108][ T2893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23
[   83.452910][ T2903] 9pnet_fd: Insufficient options for proto=fd
[   83.469193][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   83.469212][   T36] audit: type=1400 audit(1759938707.338:375): avc:  denied  { ioctl } for  pid=2902 comm="syz.5.889" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   83.665197][  T334] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   83.785190][  T394] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   83.791770][ T2917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2917 comm=syz.3.894
[   83.806276][ T2916] EXT4-fs: dax option not supported
[   83.815160][  T334] usb 5-1: Using ep0 maxpacket: 8
[   83.824201][  T334] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   83.835185][  T334] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   83.846962][  T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[   83.858451][  T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[   83.869869][  T334] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   83.884446][  T334] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   83.894118][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.902148][  T334] usb 5-1: Product: syz
[   83.906413][  T334] usb 5-1: Manufacturer: syz
[   83.911037][  T334] usb 5-1: SerialNumber: syz
[   83.916403][  T334] usb 5-1: config 0 descriptor??
[   83.922897][  T334] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[   83.946995][  T394] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[   83.955299][  T394] usb 6-1: can't read configurations, error -22
[   84.042724][   T36] audit: type=1400 audit(1759938707.908:376): avc:  denied  { bind } for  pid=2920 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   84.085159][  T394] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   84.236612][  T394] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[   84.244855][  T394] usb 6-1: can't read configurations, error -22
[   84.251882][  T394] usb usb6-port1: attempt power cycle
[   84.587066][   T36] audit: type=1400 audit(1759938708.458:377): avc:  denied  { create } for  pid=2931 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   84.590669][ T2932] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[   84.607681][  T394] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   84.624745][   T36] audit: type=1400 audit(1759938708.488:378): avc:  denied  { relabelto } for  pid=2931 comm="syz.3.900" name="file0" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   84.652322][   T36] audit: type=1400 audit(1759938708.488:379): avc:  denied  { associate } for  pid=2931 comm="syz.3.900" name="file0" dev="tmpfs" ino=1711 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0"
[   84.680058][   T36] audit: type=1400 audit(1759938708.488:380): avc:  denied  { read } for  pid=2931 comm="syz.3.900" name="file0" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   84.707120][   T36] audit: type=1400 audit(1759938708.488:381): avc:  denied  { unlink } for  pid=360 comm="syz-executor" name="file0" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[   84.734325][   T36] audit: type=1400 audit(1759938708.528:382): avc:  denied  { connect } for  pid=2933 comm="syz.3.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   84.757513][  T394] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[   84.759587][ T2937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2937 comm=syz.3.902
[   84.766024][  T394] usb 6-1: can't read configurations, error -22
[   84.796666][   T36] audit: type=1400 audit(1759938708.668:383): avc:  denied  { getopt } for  pid=2938 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.925178][  T394] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   84.948191][  T394] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[   84.959624][  T394] usb 6-1: can't read configurations, error -22
[   84.973238][  T394] usb usb6-port1: unable to enumerate USB device
[   84.996518][   T36] audit: type=1400 audit(1759938708.868:384): avc:  denied  { create } for  pid=2949 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   85.519253][ T2962] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   86.426481][   T10] usb 5-1: USB disconnect, device number 9
[   86.585574][ T3014] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[   86.585601][ T3014] rust_binder: Error while translating object.
[   86.596826][ T3014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   86.603278][ T3014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40
[   86.825270][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   86.945274][  T394] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   86.985187][   T10] usb 5-1: Using ep0 maxpacket: 32
[   86.991588][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   86.999776][   T10] usb 5-1: config 0 has no interface number 0
[   87.007609][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   87.017481][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.025727][   T10] usb 5-1: Product: syz
[   87.029930][   T10] usb 5-1: Manufacturer: syz
[   87.034711][   T10] usb 5-1: SerialNumber: syz
[   87.040396][   T10] usb 5-1: config 0 descriptor??
[   87.046500][   T10] smsc95xx v2.0.0
[   87.106463][  T394] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   87.117630][  T394] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   87.128643][  T394] usb 6-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   87.141901][  T394] usb 6-1: config 0 interface 0 has no altsetting 0
[   87.148817][  T394] usb 6-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[   87.158098][  T394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.167022][  T394] usb 6-1: config 0 descriptor??
[   87.172371][ T3016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   87.581272][  T394] hid (null): invalid report_count 22533
[   87.589713][  T394] wacom 0003:056A:00BB.0002: invalid report_count 22533
[   87.596848][  T394] wacom 0003:056A:00BB.0002: item 0 2 1 9 parsing failed
[   87.604354][  T394] wacom 0003:056A:00BB.0002: parse failed
[   87.610262][  T394] wacom 0003:056A:00BB.0002: probe with driver wacom failed with error -22
[   87.661770][ T3047] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   87.785549][ T3016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.849284][ T3003] syz.4.924 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   87.879455][ T3016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.892105][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   88.093260][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   88.108821][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   88.119044][   T10] usb 5-1: USB disconnect, device number 10
[   88.585284][ T3079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[   88.594450][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'.
[   89.241688][ T3121] netlink: 'syz.0.963': attribute type 4 has an invalid length.
[   89.252104][ T3122] netlink: 'syz.0.963': attribute type 4 has an invalid length.
[   89.260008][ T3120] netlink: 'syz.0.963': attribute type 4 has an invalid length.
[   89.269081][ T3121] netlink: 'syz.0.963': attribute type 4 has an invalid length.
[   89.277073][ T3120] netlink: 'syz.0.963': attribute type 27 has an invalid length.
[   89.582958][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   89.582978][   T36] audit: type=1400 audit(1759938713.441:388): avc:  denied  { read } for  pid=3140 comm="syz.4.969" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   89.614182][   T36] audit: type=1400 audit(1759938713.441:389): avc:  denied  { open } for  pid=3140 comm="syz.4.969" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   89.644505][   T36] audit: type=1400 audit(1759938713.469:390): avc:  denied  { ioctl } for  pid=3140 comm="syz.4.969" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   89.671461][   T46] usb 6-1: USB disconnect, device number 8
[   89.684255][   T36] audit: type=1400 audit(1759938713.526:391): avc:  denied  { search } for  pid=3145 comm="syz.4.970" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   89.723222][ T3151] rust_binder: 122: no such ref 0
[   89.728424][ T3151] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   89.736046][ T3151] rust_binder: 122: no such ref 0
[   89.741727][ T3152] rust_binder: 122: no such ref 0
[   89.746934][ T3151] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   89.754229][ T3151] rust_binder: 122: no such ref 0
[   89.887441][ T3159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3159 comm=syz.4.975
[   90.040087][   T46] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   90.201032][   T46] usb 6-1: No LPM exit latency info found, disabling LPM.
[   90.211226][   T46] usb 6-1: config 207 has an invalid interface number: 183 but max is 2
[   90.231945][   T46] usb 6-1: config 207 has an invalid interface number: 146 but max is 2
[   90.240713][   T46] usb 6-1: config 207 has an invalid interface descriptor of length 2, skipping
[   90.258026][   T46] usb 6-1: config 207 has an invalid interface number: 76 but max is 2
[   90.266516][   T46] usb 6-1: config 207 has no interface number 0
[   90.274634][   T46] usb 6-1: config 207 has no interface number 1
[   90.280958][   T46] usb 6-1: config 207 has no interface number 2
[   90.287581][   T46] usb 6-1: config 207 interface 146 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[   90.299761][   T46] usb 6-1: config 207 interface 146 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[   90.311099][   T46] usb 6-1: config 207 interface 146 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[   90.328866][   T46] usb 6-1: config 207 interface 146 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[   90.340514][   T46] usb 6-1: config 207 interface 76 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   90.354824][ T3204] 9pnet: Unknown protocol version 9
[   90.364683][   T46] usb 6-1: config 207 interface 76 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[   90.375879][   T46] usb 6-1: config 207 interface 183 has no altsetting 0
[   90.382989][   T46] usb 6-1: config 207 interface 146 has no altsetting 0
[   90.391220][   T46] usb 6-1: config 207 interface 76 has no altsetting 0
[   90.399049][ T3206] netlink: 188 bytes leftover after parsing attributes in process `syz.0.991'.
[   90.404242][   T46] usb 6-1: string descriptor 0 read error: -22
[   90.408415][ T3206] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[   90.414359][   T46] usb 6-1: New USB device found, idVendor=19d2, idProduct=1481, bcdDevice=b7.f9
[   90.433601][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.563940][ T3228] netlink: 'syz.0.999': attribute type 4 has an invalid length.
[   90.596626][ T3228] netlink: 'syz.0.999': attribute type 4 has an invalid length.
[   90.647608][ T3232] overlayfs: conflicting options: nfs_export=on,index=off
[   90.674173][ T3237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1001'.
[   90.679520][   T46] usb 6-1: USB disconnect, device number 9
[   90.693096][   T36] audit: type=1400 audit(1759938714.473:392): avc:  denied  { accept } for  pid=3235 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   90.726575][ T3237] netlink: 'syz.3.1001': attribute type 27 has an invalid length.
[   90.736230][ T3242] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1003'.
[   90.909218][   T46] kernel read not supported for file inotify (pid: 46 comm: kworker/1:1)
[   90.910456][ T3266] binder: Bad value for 'stats'
[   90.927168][   T36] audit: type=1400 audit(1759938714.699:393): avc:  denied  { read } for  pid=3256 comm="syz.4.1008" name="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   90.955975][   T36] audit: type=1400 audit(1759938714.699:394): avc:  denied  { open } for  pid=3256 comm="syz.4.1008" path="/" dev="configfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   91.006848][ T3282] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[   91.006887][ T3282] rust_binder: Error while translating object.
[   91.017573][ T3282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   91.024095][ T3282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[   91.046937][ T3288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143
[   91.068336][ T3290] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.119532][ T3300] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   91.442649][ T3316] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[   91.489841][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   91.660001][   T10] usb 6-1: Using ep0 maxpacket: 16
[   91.671829][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[   91.691789][   T36] audit: type=1400 audit(1759938715.402:395): avc:  denied  { mounton } for  pid=3320 comm="syz.4.1030" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   91.738366][   T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   91.747566][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.757259][   T10] usb 6-1: Product: syz
[   91.761472][   T10] usb 6-1: Manufacturer: syz
[   91.766108][   T10] usb 6-1: SerialNumber: syz
[   91.784375][   T10] usb 6-1: config 0 descriptor??
[   91.803158][   T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[   91.811506][ T3323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'.
[   91.835454][   T10] usb 6-1: Detected FT232R
[   91.987160][ T3333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'.
[   92.160308][ T3342] 9pnet_fd: Insufficient options for proto=fd
[   92.240963][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   92.257991][   T10] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[   92.269905][   T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   92.294370][   T10] usb 6-1: USB disconnect, device number 10
[   92.306188][ T3346] netlink: 'syz.0.1040': attribute type 11 has an invalid length.
[   92.315155][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   92.327072][   T10] ftdi_sio 6-1:0.0: device disconnected
[   92.342083][   T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   92.348125][   T36] audit: type=1400 audit(1759938716.031:396): avc:  denied  { map } for  pid=3353 comm="syz.3.1044" path="pipe:[15556]" dev="pipefs" ino=15556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   92.376771][   T36] audit: type=1400 audit(1759938716.031:397): avc:  denied  { execute } for  pid=3353 comm="syz.3.1044" path="pipe:[15556]" dev="pipefs" ino=15556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   92.418092][ T3364] netlink: 'syz.3.1048': attribute type 5 has an invalid length.
[   92.501940][   T31] usb 5-1: Using ep0 maxpacket: 16
[   92.508308][   T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.519127][   T31] usb 5-1: config 0 has no interfaces?
[   92.525784][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.535448][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   92.543517][   T31] usb 5-1: SerialNumber: syz
[   92.545746][ T3376] devtmpfs: Unknown parameter 'fuse'
[   92.553885][   T31] usb 5-1: config 0 descriptor??
[   92.570983][ T3378] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1053'.
[   92.621076][ T3385] overlayfs: failed to clone upperpath
[   92.775399][ T3325] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[   92.784711][   T10] usb 5-1: USB disconnect, device number 11
[   92.805362][ T3387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3387 comm=syz.5.1057
[   92.819173][ T3387] bpf: Bad value for 'mode'
[   92.839955][ T3390] 9p: Unknown Cache mode or invalid value �eadahead
[   92.884220][ T3393] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   92.891459][ T3393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   92.898825][ T3393] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   92.906494][ T3394] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   92.914125][ T3395] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   92.921680][ T3395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   92.959696][ T3399] rust_binder: Write failure EFAULT in pid:60
[   93.214845][ T3415] overlayfs: failed to clone upperpath
[   93.599636][   T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[   93.760673][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   93.772059][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   93.785105][   T31] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[   93.794445][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.803534][   T31] usb 5-1: config 0 descriptor??
[   93.808812][ T3422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   93.817099][   T31] usbhid 5-1:0.0: can't add hid device: -22
[   93.823339][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[   94.153841][   T31] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   94.326117][   T31] usb 6-1: not running at top speed; connect to a high speed hub
[   94.334770][   T31] usb 6-1: config 1 interface 0 has no altsetting 0
[   94.343562][   T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   94.353232][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.361556][   T31] usb 6-1: Product: syz
[   94.365953][   T31] usb 6-1: Manufacturer: syz
[   94.370697][   T31] usb 6-1: SerialNumber: syz
[   94.596972][   T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8
[   94.609877][   T31] usb 6-1: USB disconnect, device number 11
[   94.617113][   T31] usblp0: removed
[   94.706887][ T3441] fuse: Bad value for 'fd'
[   95.726407][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   95.726426][   T36] audit: type=1400 audit(1759938719.203:400): avc:  denied  { setopt } for  pid=3465 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   96.444761][ T3471] SELinux: security_context_str_to_sid () failed with errno=-22
[   96.491413][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'.
[   96.581140][   T36] audit: type=1326 audit(1759938719.995:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.583925][  T334] usb 5-1: USB disconnect, device number 12
[   96.608740][   T36] audit: type=1326 audit(1759938719.995:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.633886][   T36] audit: type=1326 audit(1759938719.995:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.657606][   T36] audit: type=1326 audit(1759938719.995:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.683099][   T36] audit: type=1326 audit(1759938719.995:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.693804][ T3497] SELinux: failed to load policy
[   96.708146][   T36] audit: type=1326 audit(1759938719.995:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.716438][ T3498] SELinux: ebitmap: truncated map
[   96.735348][   T36] audit: type=1326 audit(1759938719.995:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.742758][ T3498] SELinux: failed to load policy
[   96.763402][   T36] audit: type=1326 audit(1759938719.995:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   96.791927][   T36] audit: type=1326 audit(1759938719.995:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.0.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31578eec9 code=0x50000
[   97.002996][ T3519] 9pnet: Could not find request transport: xen
[   97.157912][ T3536] 9pnet_fd: Insufficient options for proto=fd
[   98.092392][ T3562] fuse: Unknown parameter 'fd��W�e���������.@XD�5���C�OkN�?krP��U2���;�0�����
[   98.092392][ T3562] +�*+��4�Ԝ�'�c��y���b'
[   98.262152][ T3566] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1111'.
[   98.278526][ T3568] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1111'.
[   98.299137][ T3566] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   98.299137][ T3568] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   98.299164][ T3566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   98.315388][ T3568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   98.326427][ T3566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:215
[   98.337929][ T3568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:215
[   98.398092][ T3570] rust_binder: Write failure EFAULT in pid:219
[   98.519857][ T3574] futex_wake_op: syz.4.1114 tries to shift op by 32; fix this program
[   98.696224][ T3583] rust_binder: Error while translating object.
[   98.696273][ T3583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   98.713757][ T3583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228
[   98.845728][ T3585] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.865649][ T3585] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   99.022838][ T3595] rust_binder: Error while translating object.
[   99.034036][ T3595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.044938][ T3595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237
[   99.252321][ T3604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.340955][ T3610] rust_binder: Write failure EFAULT in pid:255
[   99.387706][ T3615] overlayfs: failed to resolve './file1': -2
[   99.704836][ T3641] netlink: 'syz.4.1135': attribute type 58 has an invalid length.
[   99.724295][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.731731][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.186582][   T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  100.358276][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  100.366733][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  100.375365][   T10] usb 5-1: config 1 has an invalid interface number: 121 but max is 0
[  100.384074][   T10] usb 5-1: config 1 has no interface number 0
[  100.390227][   T10] usb 5-1: config 1 interface 121 has no altsetting 0
[  100.398592][   T10] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51
[  100.407704][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.415831][   T10] usb 5-1: Product: syz
[  100.420016][   T10] usb 5-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏
[  100.437905][   T10] usb 5-1: SerialNumber: syz
[  100.658590][ T3664] netlink: 'syz.4.1144': attribute type 1 has an invalid length.
[  100.677065][ T3664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  100.677102][ T3664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:284
[  100.689207][   T10] usb_ehset_test 5-1:1.121: probe with driver usb_ehset_test failed with error -32
[  100.711491][   T10] usb 5-1: USB disconnect, device number 13
[  101.267717][ T3735] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1169'.
[  101.316402][ T3735] rust_binder: Write failure EFAULT in pid:286
[  101.355125][ T3740] rust_binder: Error while translating object.
[  101.380602][ T3740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  101.386832][ T3740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288
[  101.819315][ T3776] netlink: 'syz.0.1182': attribute type 27 has an invalid length.
[  101.850895][   T36] kauditd_printk_skb: 23250 callbacks suppressed
[  101.850917][   T36] audit: type=1400 audit(1759938724.948:23660): avc:  denied  { mount } for  pid=3775 comm="syz.0.1182" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  102.062378][ T3730] binder: Bad value for 'stats'
[  102.180399][ T3782] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  102.237467][   T36] audit: type=1400 audit(1759938725.305:23661): avc:  denied  { create } for  pid=3781 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  102.434929][   T36] audit: type=1400 audit(1759938725.483:23662): avc:  denied  { append } for  pid=3788 comm="syz.5.1186" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  102.552809][ T3802] rust_binder: Write failure EFAULT in pid:309
[  102.618608][ T3809] binder: Unknown parameter 'context����[7�'
[  102.688991][ T3811] syz.4.1193: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0
[  102.714305][ T3811] CPU: 0 UID: 0 PID: 3811 Comm: syz.4.1193 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[  102.714342][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  102.714356][ T3811] Call Trace:
[  102.714363][ T3811]  <TASK>
[  102.714371][ T3811]  __dump_stack+0x21/0x30
[  102.714405][ T3811]  dump_stack_lvl+0x10c/0x190
[  102.714434][ T3811]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.714463][ T3811]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  102.714491][ T3811]  dump_stack+0x19/0x20
[  102.714521][ T3811]  warn_alloc+0x1bc/0x2a0
[  102.714551][ T3811]  ? __cfi_warn_alloc+0x10/0x10
[  102.714577][ T3811]  ? kasan_save_track+0x4f/0x80
[  102.714599][ T3811]  ? __kasan_kmalloc+0x96/0xb0
[  102.714621][ T3811]  ? __kmalloc_cache_noprof+0x24c/0x490
[  102.714642][ T3811]  ? do_sock_setsockopt+0x26d/0x400
[  102.714669][ T3811]  ? __x64_sys_setsockopt+0x1b8/0x250
[  102.714697][ T3811]  ? x64_sys_call+0x2adc/0x2ee0
[  102.714728][ T3811]  ? do_syscall_64+0x58/0xf0
[  102.714752][ T3811]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.714787][ T3811]  __vmalloc_node_range_noprof+0x135/0x1420
[  102.714823][ T3811]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  102.714854][ T3811]  ? kasan_save_alloc_info+0x40/0x50
[  102.714887][ T3811]  ? __kasan_kmalloc+0x96/0xb0
[  102.714914][ T3811]  ? __kmalloc_cache_noprof+0x24c/0x490
[  102.714937][ T3811]  ? futex_setup_timer+0xb4/0xd0
[  102.714961][ T3811]  vmalloc_user_noprof+0x77/0x90
[  102.714994][ T3811]  ? xskq_create+0xdb/0x2a0
[  102.715037][ T3811]  xskq_create+0xdb/0x2a0
[  102.715071][ T3811]  xsk_init_queue+0xb6/0x120
[  102.715103][ T3811]  xsk_setsockopt+0x43f/0x6f0
[  102.715135][ T3811]  ? __cfi_xsk_setsockopt+0x10/0x10
[  102.715167][ T3811]  ? do_futex+0x309/0x500
[  102.715193][ T3811]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  102.715224][ T3811]  ? security_socket_setsockopt+0x33/0xd0
[  102.715247][ T3811]  ? __cfi_xsk_setsockopt+0x10/0x10
[  102.715279][ T3811]  do_sock_setsockopt+0x26d/0x400
[  102.715311][ T3811]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  102.715347][ T3811]  __x64_sys_setsockopt+0x1b8/0x250
[  102.715382][ T3811]  x64_sys_call+0x2adc/0x2ee0
[  102.715418][ T3811]  do_syscall_64+0x58/0xf0
[  102.715446][ T3811]  ? clear_bhb_loop+0x50/0xa0
[  102.715470][ T3811]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.715507][ T3811] RIP: 0033:0x7fd16878eec9
[  102.715527][ T3811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.715548][ T3811] RSP: 002b:00007fd16969e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.715574][ T3811] RAX: ffffffffffffffda RBX: 00007fd1689e5fa0 RCX: 00007fd16878eec9
[  102.715593][ T3811] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  102.715608][ T3811] RBP: 00007fd168811f91 R08: 0000000000000004 R09: 0000000000000000
[  102.715624][ T3811] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.715640][ T3811] R13: 00007fd1689e6038 R14: 00007fd1689e5fa0 R15: 00007ffda15f2778
[  102.715662][ T3811]  </TASK>
[  102.715751][ T3811] Mem-Info:
[  102.777463][ T3814] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.784071][ T3811] active_anon:27892 inactive_anon:76720 isolated_anon:0
[  102.784071][ T3811]  active_file:21809 inactive_file:7743 isolated_file:0
[  102.784071][ T3811]  unevictable:16393 dirty:25 writeback:25
[  102.784071][ T3811]  slab_reclaimable:5454 slab_unreclaimable:79397
[  102.784071][ T3811]  mapped:38559 shmem:97440 pagetables:1493
[  102.784071][ T3811]  sec_pagetables:0 bounce:0
[  102.784071][ T3811]  kernel_misc_reclaimable:0
[  102.784071][ T3811]  free:1380204 free_pcp:5500 free_cma:0
[  102.804595][ T3814] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  102.827073][ T3813] rust_binder: 143: no such ref 1
[  102.833229][ T3811] Node 0 active_anon:113368kB inactive_anon:305980kB active_file:87236kB inactive_file:30972kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:154236kB dirty:100kB writeback:100kB shmem:390060kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6532kB pagetables:5972kB sec_pagetables:0kB all_unreclaimable? no
[  102.841039][ T3813] rust_binder: 143: no such ref 0
[  102.862053][ T3811] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965940kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:0kB free_cma:0kB
[  103.014587][ T3813] rust_binder: 143: no such ref 2
[  103.016103][ T3811] lowmem_reserve[]:
[  103.082879][ T3813] rust_binder: 143: no such ref 2
[  103.097246][ T3811]  0
[  103.160132][  T334] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  103.177716][ T3811]  3921 3921
[  103.204915][ T3811] Normal free:2561260kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132316kB inactive_anon:287676kB active_file:87156kB inactive_file:30900kB unevictable:65572kB writepending:160kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15224kB local_pcp:456kB free_cma:0kB
[  103.238165][ T3811] lowmem_reserve[]: 0 0 0
[  103.242585][ T3811] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  103.266690][ T3811] Normal: 2177*4kB (UE) 1942*8kB (UE) 1319*16kB (UE) 708*32kB (UE) 575*64kB (UE) 171*128kB (UE) 46*256kB (UE) 10*512kB (UME) 7*1024kB (UME) 6*2048kB (UME) 585*4096kB (M) = 2559204kB
[  103.286338][ T3813] rust_binder: Read failure Err(EAGAIN) in pid:143
[  103.298658][ T3811] 144308 total pagecache pages
[  103.318584][ T3811] 762 pages in swap cache
[  103.323385][ T3811] Free swap  = 91268kB
[  103.327747][ T3811] Total swap = 124996kB
[  103.332089][ T3811] 2097051 pages RAM
[  103.336920][ T3811] 0 pages HighMem/MovableOnly
[  103.342227][ T3811] 351536 pages reserved
[  103.346769][ T3811] 0 pages cma reserved
[  103.353174][  T334] usb 6-1: Using ep0 maxpacket: 8
[  103.354522][ T3811] Memory allocations:
[  103.362924][ T3811]          0 B        0 init/main.c:1370 func:do_initcalls
[  103.368499][  T334] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  103.370970][ T3811]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  103.397995][  T334] usb 6-1: config 179 has no interface number 0
[  103.399211][ T3811]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  103.410156][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  103.431858][ T3811]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  103.434081][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  103.440869][ T3825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1198'.
[  103.460681][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  103.461949][ T3811]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  103.477326][  T334] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  103.500552][ T3811]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  103.507874][  T334] usb 6-1: config 179 interface 65 has no altsetting 0
[  103.529274][  T334] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  103.544241][ T3811]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  103.546670][  T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.560992][ T3830] fuse: Unknown parameter 'rootk��Zɋ�mod'
[  103.570382][ T3811]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  103.601268][ T3811]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  103.619894][ T3811]          0 B        0 init/initramfs.c:101 func:find_link
[  103.733104][ T3856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1206'.
[  103.748726][ T3856] netlink: 'syz.0.1206': attribute type 27 has an invalid length.
[  103.895905][   T64] usb 6-1: USB disconnect, device number 12
[  104.318185][ T3864] rust_binder: 321: no such ref 0
[  104.334359][ T3864] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  104.341642][ T3864] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  104.863254][ T3695] syz.5.1153 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  104.899009][ T3873] incfs: iterate_incfs_dir / -22
[  104.907474][ T3695] CPU: 1 UID: 0 PID: 3695 Comm: syz.5.1153 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[  104.907517][ T3695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  104.907533][ T3695] Call Trace:
[  104.907541][ T3695]  <TASK>
[  104.907552][ T3695]  __dump_stack+0x21/0x30
[  104.907588][ T3695]  dump_stack_lvl+0x10c/0x190
[  104.907620][ T3695]  ? __cfi_dump_stack_lvl+0x10/0x10
[  104.907652][ T3695]  ? ___ratelimit+0x3f7/0x5a0
[  104.907688][ T3695]  dump_stack+0x19/0x20
[  104.907718][ T3695]  dump_header+0xd7/0x490
[  104.907744][ T3695]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  104.907773][ T3695]  oom_kill_process+0x35d/0x640
[  104.907811][ T3695]  ? sched_clock_cpu+0x75/0x400
[  104.907846][ T3695]  out_of_memory+0x659/0xa80
[  104.907879][ T3695]  ? __cfi_out_of_memory+0x10/0x10
[  104.907908][ T3695]  ? mutex_lock_killable+0x92/0x1c0
[  104.907945][ T3695]  ? __cfi_mutex_lock_killable+0x10/0x10
[  104.907984][ T3695]  mem_cgroup_out_of_memory+0x279/0x350
[  104.908009][ T3695]  ? drain_obj_stock+0xed0/0xed0
[  104.908034][ T3695]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  104.908057][ T3695]  try_charge_memcg+0x8f7/0xde0
[  104.908089][ T3695]  ? __cfi_try_charge_memcg+0x10/0x10
[  104.908120][ T3695]  ? __alloc_pages_noprof+0x31f/0x7b0
[  104.908153][ T3695]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  104.908186][ T3695]  ? __folio_batch_add_and_move+0x2ab/0x370
[  104.908218][ T3695]  __mem_cgroup_charge+0xf6/0x410
[  104.908254][ T3695]  ? _raw_spin_lock+0x8c/0x120
[  104.908283][ T3695]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  104.908320][ T3695]  shmem_alloc_and_add_folio+0x86d/0x1050
[  104.908353][ T3695]  ? put_swap_device+0x130/0x130
[  104.908381][ T3695]  ? shmem_huge_global_enabled+0x2da/0x360
[  104.908409][ T3695]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  104.908437][ T3695]  ? __kasan_check_write+0x18/0x20
[  104.908473][ T3695]  ? _raw_spin_lock+0x8c/0x120
[  104.908503][ T3695]  shmem_get_folio_gfp+0x5f0/0x1380
[  104.908533][ T3695]  ? shmem_get_folio+0xc0/0xc0
[  104.908557][ T3695]  ? follow_page_pte+0xa5c/0xb90
[  104.908590][ T3695]  ? inode_to_bdi+0x6d/0x100
[  104.908629][ T3695]  shmem_write_begin+0xf4/0x270
[  104.908660][ T3695]  generic_perform_write+0x32d/0x960
[  104.908698][ T3695]  ? __cfi_generic_perform_write+0x10/0x10
[  104.908733][ T3695]  ? down_write+0xe9/0x2a0
[  104.908757][ T3695]  ? file_update_time+0xa3/0x220
[  104.908797][ T3695]  shmem_file_write_iter+0x105/0x130
[  104.908831][ T3695]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  104.908863][ T3695]  __kernel_write_iter+0x41a/0x8e0
[  104.908886][ T3695]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  104.908919][ T3695]  ? __cfi___kernel_write_iter+0x10/0x10
[  104.908941][ T3695]  ? get_dump_page+0x160/0x220
[  104.908972][ T3695]  ? __asan_memset+0x39/0x50
[  104.908993][ T3695]  ? iov_iter_bvec+0xc0/0x180
[  104.909023][ T3695]  dump_user_range+0xb06/0xdf0
[  104.909047][ T3695]  ? __cfi_dump_emit+0x10/0x10
[  104.909084][ T3695]  ? __cfi_dump_user_range+0x10/0x10
[  104.909107][ T3695]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  104.909144][ T3695]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  104.909180][ T3695]  ? elf_core_dump+0x2368/0x3800
[  104.909209][ T3695]  elf_core_dump+0x2ccc/0x3800
[  104.909240][ T3695]  ? __cfi_elf_core_dump+0x10/0x10
[  104.909277][ T3695]  ? dump_interrupted+0xf0/0xf0
[  104.909312][ T3695]  ? filp_open+0x182/0x1d0
[  104.909342][ T3695]  ? 0xffffffffff600000
[  104.909359][ T3695]  ? freezing_slow_path+0x12b/0x170
[  104.909394][ T3695]  do_coredump+0x1bfa/0x2bd0
[  104.909433][ T3695]  ? __cfi_do_coredump+0x10/0x10
[  104.909467][ T3695]  ? asm_exc_page_fault+0x2b/0x30
[  104.909499][ T3695]  ? __kasan_slab_free+0x6a/0x80
[  104.909526][ T3695]  ? kmem_cache_free+0x1c1/0x510
[  104.909549][ T3695]  ? get_signal+0xa75/0x14f0
[  104.909577][ T3695]  get_signal+0x11fd/0x14f0
[  104.909610][ T3695]  arch_do_signal_or_restart+0x96/0x720
[  104.909648][ T3695]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  104.909688][ T3695]  irqentry_exit_to_user_mode+0x4e/0xb0
[  104.909714][ T3695]  irqentry_exit+0x16/0x60
[  104.909737][ T3695]  exc_page_fault+0x66/0xc0
[  104.909760][ T3695]  asm_exc_page_fault+0x2b/0x30
[  104.909790][ T3695] RIP: 0033:0x44c4a0dd
[  104.909814][ T3695] Code: Unable to access opcode bytes at 0x44c4a0b3.
[  104.909827][ T3695] RSP: 002b:0000200000000348 EFLAGS: 00010217
[  104.909850][ T3695] RAX: 0000000000000000 RBX: 00007fbfe87e6180 RCX: 00007fbfe858eec9
[  104.909867][ T3695] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000001820080
[  104.909885][ T3695] RBP: 00007fbfe8611f91 R08: 0000200000000400 R09: 0000200000000400
[  104.909904][ T3695] R10: 00002000000003c0 R11: 0000000000000202 R12: 0000000000000000
[  104.909920][ T3695] R13: 00007fbfe87e6218 R14: 00007fbfe87e6180 R15: 00007fffe295aeb8
[  104.909942][ T3695]  </TASK>
[  105.377210][ T3695] memory: usage 307188kB, limit 307200kB, failcnt 30769
[  105.384291][ T3695] memory+swap: usage 431960kB, limit 9007199254740988kB, failcnt 0
[  105.407359][ T3695] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  105.419248][ T3877] /dev/rnullb0: Can't open blockdev
[  105.423813][ T3695] Memory cgroup stats for /syz5:
[  105.424644][ T3695] cache 314269696
[  105.433816][ T3695] rss 221184
[  105.437254][ T3695] rss_huge 0
[  105.440525][ T3695] shmem 314269696
[  105.444303][ T3695] mapped_file 0
[  105.447840][ T3695] dirty 0
[  105.450830][ T3695] writeback 0
[  105.454230][ T3695] workingset_refault_anon 21
[  105.459264][ T3695] workingset_refault_file 0
[  105.463864][ T3695] swap 127889408
[  105.467483][ T3695] swapcached 94208
[  105.471274][ T3695] pgpgin 160239
[  105.474804][ T3695] pgpgout 83446
[  105.478360][ T3695] pgfault 27845
[  105.481995][ T3695] pgmajfault 5
[  105.485575][ T3695] inactive_anon 127582208
[  105.492097][ T3695] active_anon 186855424
[  105.497801][ T3695] inactive_file 0
[  105.501541][ T3695] active_file 0
[  105.505188][ T3695] unevictable 0
[  105.508775][ T3695] hierarchical_memory_limit 314572800
[  105.514264][ T3695] hierarchical_memsw_limit 9223372036854771712
[  105.520947][ T3695] total_cache 314269696
[  105.525238][ T3695] total_rss 221184
[  105.529174][ T3695] total_rss_huge 0
[  105.533145][ T3695] total_shmem 314269696
[  105.537776][ T3695] total_mapped_file 0
[  105.542040][ T3695] total_dirty 0
[  105.545596][ T3695] total_writeback 0
[  105.549602][ T3695] total_workingset_refault_anon 21
[  105.555066][ T3695] total_workingset_refault_file 0
[  105.560355][ T3695] total_swap 127889408
[  105.564542][ T3695] total_swapcached 94208
[  105.569089][ T3695] total_pgpgin 160239
[  105.573206][ T3695] total_pgpgout 83446
[  105.577299][ T3695] total_pgfault 27845
[  105.582356][ T3695] total_pgmajfault 5
[  105.586438][ T3695] total_inactive_anon 127582208
[  105.591462][ T3695] total_active_anon 186855424
[  105.596670][ T3695] total_inactive_file 0
[  105.600981][ T3695] total_active_file 0
[  105.605060][ T3695] total_unevictable 0
[  105.609154][ T3695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1153,pid=3689,uid=0
[  105.628145][ T3695] Memory cgroup out of memory: Killed process 3689 (syz.5.1153) total-vm:90296kB, anon-rss:1140kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  105.706611][ T3883] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1218'.
[  106.088366][ T3696] syz.5.1153 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  106.101921][  T334] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  106.123216][ T3696] CPU: 1 UID: 0 PID: 3696 Comm: syz.5.1153 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[  106.123253][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  106.123265][ T3696] Call Trace:
[  106.123272][ T3696]  <TASK>
[  106.123280][ T3696]  __dump_stack+0x21/0x30
[  106.123313][ T3696]  dump_stack_lvl+0x10c/0x190
[  106.123341][ T3696]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.123370][ T3696]  ? ___ratelimit+0x3f7/0x5a0
[  106.123404][ T3696]  dump_stack+0x19/0x20
[  106.123433][ T3696]  dump_header+0xd7/0x490
[  106.123458][ T3696]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  106.123490][ T3696]  oom_kill_process+0x35d/0x640
[  106.123519][ T3696]  ? sched_clock_cpu+0x75/0x400
[  106.123552][ T3696]  out_of_memory+0x659/0xa80
[  106.123579][ T3696]  ? __cfi_out_of_memory+0x10/0x10
[  106.123607][ T3696]  ? mutex_lock_killable+0x92/0x1c0
[  106.123642][ T3696]  ? __cfi_mutex_lock_killable+0x10/0x10
[  106.123679][ T3696]  mem_cgroup_out_of_memory+0x279/0x350
[  106.123703][ T3696]  ? drain_obj_stock+0xed0/0xed0
[  106.123727][ T3696]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  106.123748][ T3696]  try_charge_memcg+0x8f7/0xde0
[  106.123780][ T3696]  ? __cfi_try_charge_memcg+0x10/0x10
[  106.123810][ T3696]  ? __alloc_pages_noprof+0x31f/0x7b0
[  106.123843][ T3696]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  106.123874][ T3696]  ? __folio_batch_add_and_move+0x2ab/0x370
[  106.123904][ T3696]  __mem_cgroup_charge+0xf6/0x410
[  106.123938][ T3696]  ? _raw_spin_lock+0x8c/0x120
[  106.123965][ T3696]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  106.124010][ T3696]  shmem_alloc_and_add_folio+0x86d/0x1050
[  106.124039][ T3696]  ? finish_task_switch+0x13a/0x780
[  106.124070][ T3696]  ? put_swap_device+0x130/0x130
[  106.124097][ T3696]  ? shmem_huge_global_enabled+0x2da/0x360
[  106.124124][ T3696]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  106.124150][ T3696]  ? __kasan_check_write+0x18/0x20
[  106.124187][ T3696]  ? _raw_spin_lock+0x8c/0x120
[  106.124216][ T3696]  shmem_get_folio_gfp+0x5f0/0x1380
[  106.124246][ T3696]  ? shmem_get_folio+0xc0/0xc0
[  106.124271][ T3696]  ? follow_page_pte+0xa5c/0xb90
[  106.124303][ T3696]  ? inode_to_bdi+0x6d/0x100
[  106.124337][ T3696]  shmem_write_begin+0xf4/0x270
[  106.124364][ T3696]  generic_perform_write+0x32d/0x960
[  106.124402][ T3696]  ? __cfi_generic_perform_write+0x10/0x10
[  106.124435][ T3696]  ? down_write+0xe9/0x2a0
[  106.124458][ T3696]  ? file_update_time+0xa3/0x220
[  106.124490][ T3696]  shmem_file_write_iter+0x105/0x130
[  106.124521][ T3696]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  106.124553][ T3696]  __kernel_write_iter+0x41a/0x8e0
[  106.124575][ T3696]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  106.124607][ T3696]  ? __cfi___kernel_write_iter+0x10/0x10
[  106.124628][ T3696]  ? get_dump_page+0x160/0x220
[  106.124657][ T3696]  ? __asan_memset+0x39/0x50
[  106.124677][ T3696]  ? iov_iter_bvec+0xc0/0x180
[  106.124706][ T3696]  dump_user_range+0xb06/0xdf0
[  106.124730][ T3696]  ? __cfi_dump_emit+0x10/0x10
[  106.124765][ T3696]  ? __cfi_dump_user_range+0x10/0x10
[  106.124786][ T3696]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  106.124822][ T3696]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  106.124856][ T3696]  ? elf_core_dump+0x2368/0x3800
[  106.124884][ T3696]  elf_core_dump+0x2ccc/0x3800
[  106.124915][ T3696]  ? __cfi_elf_core_dump+0x10/0x10
[  106.124949][ T3696]  ? dump_interrupted+0xf0/0xf0
[  106.124983][ T3696]  ? filp_open+0x182/0x1d0
[  106.125019][ T3696]  ? 0xffffffffff600000
[  106.125037][ T3696]  ? freezing_slow_path+0x12b/0x170
[  106.125070][ T3696]  do_coredump+0x1bfa/0x2bd0
[  106.125108][ T3696]  ? __cfi_do_coredump+0x10/0x10
[  106.125142][ T3696]  ? asm_exc_page_fault+0x2b/0x30
[  106.125175][ T3696]  ? __kasan_slab_free+0x6a/0x80
[  106.125201][ T3696]  ? kmem_cache_free+0x1c1/0x510
[  106.125225][ T3696]  ? get_signal+0xa75/0x14f0
[  106.125256][ T3696]  get_signal+0x11fd/0x14f0
[  106.125289][ T3696]  arch_do_signal_or_restart+0x96/0x720
[  106.125326][ T3696]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  106.125364][ T3696]  irqentry_exit_to_user_mode+0x4e/0xb0
[  106.125389][ T3696]  irqentry_exit+0x16/0x60
[  106.125411][ T3696]  exc_page_fault+0x66/0xc0
[  106.125433][ T3696]  asm_exc_page_fault+0x2b/0x30
[  106.125454][ T3696] RIP: 0033:0x44c4a0dd
[  106.125478][ T3696] Code: Unable to access opcode bytes at 0x44c4a0b3.
[  106.125490][ T3696] RSP: 002b:0000200000000348 EFLAGS: 00010217
[  106.125511][ T3696] RAX: 0000000000000000 RBX: 00007fbfe87e6180 RCX: 00007fbfe858eec9
[  106.125529][ T3696] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000001820080
[  106.125546][ T3696] RBP: 00007fbfe8611f91 R08: 0000200000000400 R09: 0000200000000400
[  106.125563][ T3696] R10: 00002000000003c0 R11: 0000000000000202 R12: 0000000000000000
[  106.125579][ T3696] R13: 00007fbfe87e6218 R14: 00007fbfe87e6180 R15: 00007fffe295aeb8
[  106.125599][ T3696]  </TASK>
[  106.126016][ T3696] memory: usage 307192kB, limit 307200kB, failcnt 34258
[  106.284392][  T334] usb 5-1: No LPM exit latency info found, disabling LPM.
[  106.585740][ T3696] memory+swap: usage 396844kB, limit 9007199254740988kB, failcnt 0
[  106.626874][  T334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.637229][  T334] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.662022][ T3696] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  106.669125][ T3696] Memory cgroup stats for /syz5:
[  106.698575][ T3696] cache 276443136
[  106.713428][ T3696] rss 204800
[  106.717580][ T3696] rss_huge 0
[  106.721253][ T3696] shmem 276443136
[  106.725529][ T3696] mapped_file 0
[  106.729190][ T3696] dirty 0
[  106.732567][ T3696] writeback 925696
[  106.737058][ T3696] workingset_refault_anon 21
[  106.742326][ T3696] workingset_refault_file 0
[  106.752511][ T3696] swap 116355072
[  106.756457][ T3696] swapcached 1097728
[  106.760574][ T3696] pgpgin 160248
[  106.764933][ T3696] pgpgout 92443
[  106.768671][ T3696] pgfault 27867
[  106.774175][ T3696] pgmajfault 5
[  106.777768][ T3696] inactive_anon 115712000
[  106.782412][ T3696] active_anon 161935360
[  106.787364][ T3696] inactive_file 0
[  106.798189][ T3696] active_file 0
[  106.806330][ T3696] unevictable 0
[  106.810417][ T3696] hierarchical_memory_limit 314572800
[  106.816599][ T3696] hierarchical_memsw_limit 9223372036854771712
[  106.823791][ T3696] total_cache 276443136
[  106.828523][ T3696] total_rss 204800
[  106.841764][ T3696] total_rss_huge 0
[  106.845609][ T3696] total_shmem 276443136
[  106.855189][ T3696] total_mapped_file 0
[  106.863177][ T3696] total_dirty 0
[  106.866844][ T3696] total_writeback 925696
[  106.872715][ T3696] total_workingset_refault_anon 21
[  106.878539][ T3696] total_workingset_refault_file 0
[  106.884608][ T3696] total_swap 116355072
[  106.890942][ T3696] total_swapcached 1097728
[  106.901827][ T3696] total_pgpgin 160248
[  106.906174][ T3696] total_pgpgout 92443
[  106.912262][ T3696] total_pgfault 27867
[  106.933407][ T3696] total_pgmajfault 5
[  106.937893][ T3696] total_inactive_anon 115712000
[  106.943616][ T3696] total_active_anon 161935360
[  106.949920][ T3696] total_inactive_file 0
[  106.954773][ T3696] total_active_file 0
[  106.958974][ T3696] total_unevictable 0
[  106.963086][ T3696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1153,pid=3696,uid=0
[  106.978629][ T3696] Memory cgroup out of memory: Killed process 3696 (syz.5.1153) total-vm:90296kB, anon-rss:1140kB, file-rss:60096kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  107.005839][ T3886] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1219'.
[  107.170783][ T3898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1215'.
[  107.475683][ T3909] rust_binder: Error in use_page_slow: ESRCH
[  107.475709][ T3909] rust_binder: use_range failure ESRCH
[  107.500345][ T3909] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  107.521997][ T3909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  107.548672][ T3909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153
[  107.778038][ T3925] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  107.808359][ T3926] fuse: Bad value for 'fd'
[  107.841750][ T3925] rust_binder: Error while translating object.
[  107.841832][ T3925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  107.870758][ T3925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161
[  107.954871][ T3930] netlink: 'syz.5.1232': attribute type 3 has an invalid length.
[  107.972388][ T3929] netlink: 'syz.5.1232': attribute type 3 has an invalid length.
[  108.012741][ T3932] raw_sendmsg: syz.5.1233 forgot to set AF_INET. Fix it!
[  108.259209][ T3947] overlayfs: failed to clone lowerpath
[  108.363030][ T3958] netlink: 'syz.3.1240': attribute type 39 has an invalid length.
[  108.394373][  T395] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  108.554543][  T395] usb 6-1: No LPM exit latency info found, disabling LPM.
[  108.563172][  T395] usb 6-1: config 64 has an invalid interface number: 174 but max is 2
[  108.571548][  T395] usb 6-1: config 64 has an invalid interface number: 252 but max is 2
[  108.580085][  T395] usb 6-1: config 64 has an invalid interface descriptor of length 2, skipping
[  108.589114][  T395] usb 6-1: config 64 has an invalid interface number: 140 but max is 2
[  108.597664][  T395] usb 6-1: config 64 has no interface number 0
[  108.603866][  T395] usb 6-1: config 64 has no interface number 1
[  108.607886][   T36] audit: type=1400 audit(1759938732.277:23663): avc:  denied  { accept } for  pid=3959 comm="syz.0.1241" path="socket:[18663]" dev="sockfs" ino=18663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  108.610402][  T395] usb 6-1: config 64 has no interface number 2
[  108.640260][  T395] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  108.651643][  T395] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  108.662972][  T395] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  108.673292][  T395] usb 6-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  108.684526][  T395] usb 6-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  108.695589][  T395] usb 6-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  108.706766][  T395] usb 6-1: config 64 interface 174 has no altsetting 0
[  108.713735][  T395] usb 6-1: config 64 interface 252 has no altsetting 0
[  108.720678][  T395] usb 6-1: config 64 interface 140 has no altsetting 0
[  108.729724][  T395] usb 6-1: string descriptor 0 read error: -22
[  108.736134][  T395] usb 6-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  108.745252][  T395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.756978][  T395] usb-storage 6-1:64.174: USB Mass Storage device detected
[  108.810896][  T395] usb-storage 6-1:64.252: USB Mass Storage device detected
[  108.854389][  T395] usb-storage 6-1:64.140: USB Mass Storage device detected
[  108.904635][  T334] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.913821][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.923627][  T334] usb 5-1: can't set config #1, error -71
[  108.930685][  T334] usb 5-1: USB disconnect, device number 14
[  108.974118][  T395] usb 6-1: USB disconnect, device number 13
[  109.014959][   T36] audit: type=1400 audit(1759938732.671:23664): avc:  denied  { append } for  pid=3969 comm="syz.4.1243" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  109.103794][ T3980] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.104049][ T3980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347
[  109.197965][ T3989] tipc: Started in network mode
[  109.212434][ T3989] tipc: Node identity b6af2da833c5, cluster identity 4711
[  109.214614][   T36] audit: type=1107 audit(1759938732.849:23665): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  109.219908][ T3989] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  109.331772][ T3997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1255'.
[  109.406121][  T334] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  109.568682][  T334] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  109.578006][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.586190][  T334] usb 5-1: Product: syz
[  109.590608][  T334] usb 5-1: Manufacturer: syz
[  109.595241][  T334] usb 5-1: SerialNumber: syz
[  109.789838][  T395] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  109.820266][   T64] usb 5-1: USB disconnect, device number 15
[  109.928714][  T395] usb 6-1: device descriptor read/64, error -71
[  110.004537][ T4037] netlink: 'syz.3.1267': attribute type 12 has an invalid length.
[  110.173546][   T64] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  110.184353][  T395] usb 6-1: device descriptor read/64, error -71
[  110.280267][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.287581][ T4052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.333773][   T64] usb 5-1: Using ep0 maxpacket: 32
[  110.340690][   T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.353666][   T64] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  110.363026][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.371725][   T64] usb 5-1: Product: syz
[  110.376357][   T64] usb 5-1: Manufacturer: syz
[  110.381064][   T64] usb 5-1: SerialNumber: syz
[  110.386626][   T64] usb 5-1: config 0 descriptor??
[  110.395102][   T64] usb 5-1: bad CDC descriptors
[  110.400628][   T64] usb 5-1: unsupported MDLM descriptors
[  110.408037][  T562] tipc: Node number set to 2238328232
[  110.441402][  T395] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  110.589240][  T395] usb 6-1: device descriptor read/64, error -71
[  110.609273][ T4022] rust_binder: Write failure EFAULT in pid:356
[  110.609751][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.625173][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.635166][  T394] usb 5-1: USB disconnect, device number 16
[  110.845095][  T395] usb 6-1: device descriptor read/64, error -71
[  110.963255][  T395] usb usb6-port1: attempt power cycle
[  111.201443][ T4076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1282'.
[  111.335438][  T395] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  111.357943][  T395] usb 6-1: device descriptor read/8, error -71
[  111.496331][  T395] usb 6-1: device descriptor read/8, error -71
[  111.518750][ T4084] overlayfs: failed to clone upperpath
[  111.525632][ T4084] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  111.751045][  T395] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  111.773549][  T395] usb 6-1: device descriptor read/8, error -71
[  111.912156][  T395] usb 6-1: device descriptor read/8, error -71
[  112.028384][  T395] usb usb6-port1: unable to enumerate USB device
[  112.171326][ T4103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  112.171355][ T4103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:368
[  112.593071][  T334] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  112.674088][ T4120] /dev/loop0: Can't lookup blockdev
[  112.681258][ T4120] netlink: 'syz.0.1299': attribute type 10 has an invalid length.
[  112.689194][ T4120] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1299'.
[  112.698664][ T4120] bridge_slave_1: left promiscuous mode
[  112.704584][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.748810][ T4124] devpts: called with bogus options
[  112.764921][  T334] usb 5-1: No LPM exit latency info found, disabling LPM.
[  112.772138][  T334] usb 5-1: too many configurations: 38, using maximum allowed: 8
[  112.781328][  T334] usb 5-1: unable to read config index 0 descriptor/start: -61
[  112.789357][  T334] usb 5-1: can't read configurations, error -61
[  112.945494][  T334] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  113.105903][  T334] usb 5-1: No LPM exit latency info found, disabling LPM.
[  113.113095][  T334] usb 5-1: too many configurations: 38, using maximum allowed: 8
[  113.122246][  T334] usb 5-1: unable to read config index 0 descriptor/start: -61
[  113.129926][  T334] usb 5-1: can't read configurations, error -61
[  113.136502][  T334] usb usb5-port1: attempt power cycle
[  113.189975][  T562] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  113.286968][ T4136] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1306'.
[  113.349844][  T562] usb 6-1: Using ep0 maxpacket: 8
[  113.356166][  T562] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  113.366699][  T562] usb 6-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0
[  113.375823][  T562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.388030][  T562] ftdi_sio 6-1:254.0: Ignoring interface reserved for JTAG
[  113.499098][  T334] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  113.521980][  T334] usb 5-1: No LPM exit latency info found, disabling LPM.
[  113.529385][  T334] usb 5-1: too many configurations: 38, using maximum allowed: 8
[  113.538652][  T334] usb 5-1: unable to read config index 0 descriptor/start: -61
[  113.546434][  T334] usb 5-1: can't read configurations, error -61
[  113.636631][  T562] usb 6-1: USB disconnect, device number 18
[  113.679263][ T4148] rust_binder: Error in use_page_slow: ESRCH
[  113.679294][ T4148] rust_binder: use_range failure ESRCH
[  113.685513][ T4148] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  113.691107][ T4148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  113.699264][ T4148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:200
[  113.701586][  T334] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  113.736673][ T4150] rust_binder: 202: no such ref 1
[  113.741799][ T4150] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  113.745857][  T334] usb 5-1: No LPM exit latency info found, disabling LPM.
[  113.763447][ T4152] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  113.763478][ T4152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  113.768283][  T334] usb 5-1: too many configurations: 38, using maximum allowed: 8
[  113.771535][ T4152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:204
[  113.783374][  T334] usb 5-1: unable to read config index 0 descriptor/start: -61
[  113.813708][  T334] usb 5-1: can't read configurations, error -61
[  113.820440][  T334] usb usb5-port1: unable to enumerate USB device
[  113.835159][   T36] audit: type=1400 audit(1759938737.184:23666): avc:  denied  { write } for  pid=4155 comm="syz.5.1312" name="rt_cache" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  113.876662][ T4158] rust_binder: inc_ref_done called when no active inc_refs
[  113.891909][ T4160] binder: Bad value for 'max'
[  114.090861][ T4172] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1317'.
[  114.192500][ T4182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'.
[  114.202117][ T4182] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1320'.
[  114.211192][ T4182] tipc: Invalid UDP bearer configuration
[  114.211223][ T4182] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  114.900414][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1325'.
[  115.405414][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  115.471114][  T334] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  115.627829][ T4273] netlink: 'syz.0.1352': attribute type 27 has an invalid length.
[  115.641501][  T334] usb 6-1: Using ep0 maxpacket: 8
[  115.649639][  T334] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  115.654385][ T4273] bridge_slave_1: left allmulticast mode
[  115.661686][  T334] usb 6-1: config 179 has no interface number 0
[  115.680627][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  115.698716][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  115.710863][  T334] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  115.721480][  T334] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  115.736212][  T334] usb 6-1: config 179 interface 65 has no altsetting 0
[  115.744089][  T334] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  115.753951][  T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.801132][ T4282] 9pnet: Could not find request transport: u���}7�������r�mO�jiFP	��Q�*�
[  115.861583][ T4295] rust_binder: Write failure EFAULT in pid:386
[  115.977585][   T64] usb 6-1: USB disconnect, device number 19
[  116.568771][   T64] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  116.728689][   T64] usb 5-1: Using ep0 maxpacket: 8
[  116.734976][   T64] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  116.743831][   T64] usb 5-1: config 0 has no interface number 0
[  116.750610][   T64] usb 5-1: config 0 interface 66 has no altsetting 0
[  116.757484][   T64] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87
[  116.767099][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.779543][   T64] usb 5-1: config 0 descriptor??
[  116.813922][  T394] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  116.975009][  T394] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.986167][  T394] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.997875][  T394] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  117.007460][  T394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.016108][  T394] usb 6-1: Product: syz
[  117.021078][  T394] usb 6-1: Manufacturer: syz
[  117.026337][  T394] usb 6-1: SerialNumber: syz
[  117.087500][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.097405][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.126883][  T394] cdc_ncm 6-1:1.0: bind() failure
[  118.139984][  T394] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  118.148117][ T4368] overlayfs: failed to clone lowerpath
[  118.154863][  T394] cdc_ncm 6-1:1.1: bind() failure
[  118.166536][  T394] usb 6-1: USB disconnect, device number 20
[  119.073868][ T4378] overlayfs: failed to clone lowerpath
[  119.383042][   T64] usb 5-1: string descriptor 0 read error: -71
[  119.390358][   T64] usb 5-1: MBOX3: Invalid descriptor size=18.
[  119.413551][   T64] usb 5-1: USB disconnect, device number 21
[  119.622981][ T4412] overlayfs: failed to clone upperpath
[  119.702441][  T562] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  119.819755][   T64] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  119.863445][  T562] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  119.872538][  T562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.881578][  T562] usb 6-1: config 0 descriptor??
[  119.979562][   T64] usb 5-1: Using ep0 maxpacket: 8
[  119.985880][   T64] usb 5-1: config 0 has an invalid interface number: 96 but max is 0
[  119.994699][   T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.004935][   T64] usb 5-1: config 0 has no interface number 0
[  120.011080][   T64] usb 5-1: config 0 interface 96 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  120.024180][   T64] usb 5-1: config 0 interface 96 has no altsetting 0
[  120.032530][   T64] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74
[  120.041784][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.049997][   T64] usb 5-1: Product: syz
[  120.054221][   T64] usb 5-1: Manufacturer: syz
[  120.059061][   T64] usb 5-1: SerialNumber: syz
[  120.064355][   T64] usb 5-1: config 0 descriptor??
[  120.070617][   T64] usbhid 5-1:0.96: couldn't find an input interrupt endpoint
[  120.285626][   T64] usb 5-1: USB disconnect, device number 22
[  120.573446][ T4429] 9pnet: Could not find request transport: rdma
[  121.568735][   T36] audit: type=1400 audit(1759938744.070:23667): avc:  denied  { name_bind } for  pid=4454 comm="syz.4.1424" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  121.717789][   T36] audit: type=1400 audit(1759938744.577:23668): avc:  denied  { execute } for  pid=4467 comm="syz.3.1429" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=19808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  121.755514][ T4470] overlayfs: failed to clone upperpath
[  122.728202][  T334] usb 6-1: USB disconnect, device number 21
[  123.102297][ T4531] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  123.177543][ T4539] loop8: detected capacity change from 0 to 8
[  123.603579][  T334] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  123.764958][  T334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.775189][  T334] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.784344][  T334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  123.795456][  T334] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  123.804865][  T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.814325][ T4553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.822611][  T334] hub 5-1:1.0: bad descriptor, ignoring hub
[  123.828947][  T334] hub 5-1:1.0: probe with driver hub failed with error -5
[  123.836450][  T334] cdc_wdm 5-1:1.0: skipping garbage
[  123.842088][  T334] cdc_wdm 5-1:1.0: skipping garbage
[  123.848107][  T334] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  123.854293][  T334] cdc_wdm 5-1:1.0: Unknown control protocol
[  124.021162][ T4533] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI
[  124.034062][ T4533] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[  124.042485][ T4533] CPU: 1 UID: 0 PID: 4533 Comm: syz.5.1457 Not tainted syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[  124.054039][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  124.064249][ T4533] RIP: 0010:fuse_file_release+0x29e/0x400
[  124.070004][ T4533] Code: 00 74 12 48 89 df e8 31 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 e4 e3 a0 ff 48 ba 00 00 00 00 00 fc
[  124.089900][ T4533] RSP: 0018:ffffc90009eafae0 EFLAGS: 00010202
[  124.095978][ T4533] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[  124.104050][ T4533] RDX: dffffc0000000000 RSI: 00000000000006fe RDI: 00000000000006ff
[  124.112300][ T4533] RBP: ffffc90009eafb28 R08: 0000000000000003 R09: 0000000000000004
[  124.120316][ T4533] R10: dffffc0000000000 R11: fffff520013d5f2c R12: 0000000000109001
[  124.128306][ T4533] R13: ffff888110c63a80 R14: ffff888151172600 R15: 00000000000000c8
[  124.136386][ T4533] FS:  00007fbfe93c26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  124.145326][ T4533] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.152056][ T4533] CR2: 0000000000000000 CR3: 0000000113dca000 CR4: 00000000003526b0
[  124.160213][ T4533] Call Trace:
[  124.163596][ T4533]  <TASK>
[  124.166704][ T4533]  ? kmem_cache_free+0x1c1/0x510
[  124.171653][ T4533]  ? putname+0x113/0x150
[  124.175910][ T4533]  fuse_release+0x13e/0x1b0
[  124.180413][ T4533]  ? __cfi_fuse_release+0x10/0x10
[  124.185515][ T4533]  __fput+0x1fb/0xa00
[  124.189646][ T4533]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  124.195218][ T4533]  ____fput+0x20/0x30
[  124.199229][ T4533]  task_work_run+0x1e0/0x250
[  124.203848][ T4533]  ? __cfi_task_work_run+0x10/0x10
[  124.209072][ T4533]  get_signal+0x1307/0x14f0
[  124.213597][ T4533]  ? __kasan_slab_free+0x6a/0x80
[  124.218585][ T4533]  ? putname+0x113/0x150
[  124.222923][ T4533]  arch_do_signal_or_restart+0x96/0x720
[  124.228643][ T4533]  ? fput+0x1a5/0x240
[  124.232961][ T4533]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  124.239155][ T4533]  ? __kasan_check_write+0x18/0x20
[  124.244364][ T4533]  ? __x64_sys_open+0x120/0x150
[  124.249260][ T4533]  syscall_exit_to_user_mode+0x58/0xb0
[  124.254741][ T4533]  do_syscall_64+0x64/0xf0
[  124.259166][ T4533]  ? clear_bhb_loop+0x50/0xa0
[  124.263849][ T4533]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.269756][ T4533] RIP: 0033:0x7fbfe858eec9
[  124.274189][ T4533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.294068][ T4533] RSP: 002b:00007fbfe93c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  124.302497][ T4533] RAX: ffffffffffffff95 RBX: 00007fbfe87e5fa0 RCX: 00007fbfe858eec9
[  124.310706][ T4533] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0
[  124.318708][ T4533] RBP: 00007fbfe8611f91 R08: 0000000000000000 R09: 0000000000000000
[  124.326795][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.334779][ T4533] R13: 00007fbfe87e6038 R14: 00007fbfe87e5fa0 R15: 00007fffe295aeb8
[  124.342808][ T4533]  </TASK>
[  124.345846][ T4533] Modules linked in:
[  124.349799][ T4540] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#2] PREEMPT SMP KASAN PTI
[  124.350107][ T4533] ---[ end trace 0000000000000000 ]---
[  124.362636][ T4540] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[  124.362667][ T4540] CPU: 0 UID: 0 PID: 4540 Comm: syz.5.1457 Tainted: G      D            syzkaller #0 97490becfeabb4cc0ae0c6facf76d8f03de73808
[  124.362703][ T4540] Tainted: [D]=DIE
[  124.362711][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  124.362724][ T4540] RIP: 0010:fuse_file_release+0x29e/0x400
[  124.362764][ T4540] Code: 00 74 12 48 89 df e8 31 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 e4 e3 a0 ff 48 ba 00 00 00 00 00 fc
[  124.362785][ T4540] RSP: 0018:ffffc90009ebfae0 EFLAGS: 00010202
[  124.373121][   T36] audit: type=1400 audit(1759938747.073:23669): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  124.377285][ T4540] 
[  124.377296][ T4540] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[  124.377317][ T4540] RDX: dffffc0000000000 RSI: 0000000000000354 RDI: 0000000000000355
[  124.390593][ T4533] RIP: 0010:fuse_file_release+0x29e/0x400
[  124.394329][ T4540] RBP: ffffc90009ebfb28 R08: 0000000000000003 R09: 0000000000000004
[  124.394348][ T4540] R10: dffffc0000000000 R11: fffff520013d7f2c R12: 0000000000008001
[  124.394367][ T4540] R13: ffff888110c63a80 R14: ffff88814285f700 R15: 00000000000000c8
[  124.404636][   T36] audit: type=1400 audit(1759938747.073:23670): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.410342][ T4540] FS:  00007fbfe93a16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  124.410372][ T4540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.430647][ T4533] Code: 00 74 12 48 89 df e8 31 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 e4 e3 a0 ff 48 ba 00 00 00 00 00 fc
[  124.436094][ T4540] CR2: 0000200000002300 CR3: 0000000113dca000 CR4: 00000000003526b0
[  124.436120][ T4540] Call Trace:
[  124.436128][ T4540]  <TASK>
[  124.436138][ T4540]  ? kasan_save_track+0x4f/0x80
[  124.459111][ T4533] RSP: 0018:ffffc90009eafae0 EFLAGS: 00010202
[  124.460702][ T4540]  ? kasan_save_track+0x3e/0x80
[  124.469066][   T36] audit: type=1400 audit(1759938747.073:23671): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.476761][ T4540]  fuse_release+0x13e/0x1b0
[  124.476792][ T4540]  ? __cfi_fuse_release+0x10/0x10
[  124.482959][ T4533] 
[  124.490712][ T4540]  __fput+0x1fb/0xa00
[  124.490748][ T4540]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  124.490781][ T4540]  ____fput+0x20/0x30
[  124.506546][   T36] audit: type=1400 audit(1759938747.073:23672): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.506746][ T4540]  task_work_run+0x1e0/0x250
[  124.529052][ T4533] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[  124.538833][ T4540]  ? __cfi_task_work_run+0x10/0x10
[  124.538878][ T4540]  get_signal+0x1307/0x14f0
[  124.538910][ T4540]  ? kmem_cache_free+0x1c1/0x510
[  124.546285][ T4533] RDX: dffffc0000000000 RSI: 00000000000006fe RDI: 00000000000006ff
[  124.567687][ T4540]  ? putname+0x113/0x150
[  124.567733][ T4540]  arch_do_signal_or_restart+0x96/0x720
[  124.567770][ T4540]  ? do_sys_openat2+0x168/0x1c0
[  124.576296][   T36] audit: type=1400 audit(1759938747.073:23673): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.579546][ T4540]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  124.582711][   T36] audit: type=1400 audit(1759938747.073:23674): avc:  denied  { append open } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.587565][ T4540]  ? __kasan_check_write+0x18/0x20
[  124.587616][ T4540]  syscall_exit_to_user_mode+0x58/0xb0
[  124.587642][ T4540]  do_syscall_64+0x64/0xf0
[  124.595736][   T36] audit: type=1400 audit(1759938747.073:23675): avc:  denied  { getattr } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.600139][ T4540]  ? clear_bhb_loop+0x50/0xa0
[  124.622547][ T4533] RBP: ffffc90009eafb28 R08: 0000000000000003 R09: 0000000000000004
[  124.626890][ T4540]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.626938][ T4540] RIP: 0033:0x7fbfe858eec9
[  124.632374][ T4533] R10: dffffc0000000000 R11: fffff520013d5f2c R12: 0000000000109001
[  124.634311][ T4540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.634335][ T4540] RSP: 002b:00007fbfe93a1038 EFLAGS: 00000246
[  124.638802][ T4533] R13: ffff888110c63a80 R14: ffff888151172600 R15: 00000000000000c8
[  124.644062][ T4540]  ORIG_RAX: 0000000000000055
[  124.648578][ T4533] FS:  00007fbfe93c26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  124.668834][ T4540] RAX: ffffffffffffff95 RBX: 00007fbfe87e6090 RCX: 00007fbfe858eec9
[  124.668862][ T4540] RDX: 0000000000000000 RSI: 000000000000004c RDI: 00002000000000c0
[  124.668878][ T4540] RBP: 00007fbfe8611f91 R08: 0000000000000000 R09: 0000000000000000
[  124.668893][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.668907][ T4540] R13: 00007fbfe87e6128 R14: 00007fbfe87e6090 R15: 00007fffe295aeb8
[  124.668930][ T4540]  </TASK>
[  124.674102][ T4533] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.681492][ T4540] Modules linked in:
[  124.681790][ T4540] ---[ end trace 0000000000000000 ]---
[  124.686946][ T4533] CR2: 0000000000000000 CR3: 0000000113dca000 CR4: 00000000003526b0
[  124.691944][ T4540] RIP: 0010:fuse_file_release+0x29e/0x400
[  124.700829][ T4533] Kernel panic - not syncing: Fatal exception
[  124.704719][ T4533] Kernel Offset: disabled