last executing test programs:

3.269932237s ago: executing program 1 (id=293):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000008, 0x80000000}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0xa7f304a0a8525b5d, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x8000, 0xfffffffe})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0x1bbba0000})
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8)
r4 = eventfd2(0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0)
ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3`\x97\xb9b\x85\xe7\xf9:\xdew\x9d\xcc\xb6\x7f\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}, @enter_looper], 0x84, 0x0, &(0x7f0000000680)="2d1b3d20c0ba29bb62c7bafd0b883bdecd4e7c4490253962d53ff410131869d2e28838fabae049d2498fa4b0b2472d3d992b9af99cbab1ee922264eae6a067c0f22c42361e97a1ec06606f34027fa6d792055a30c58110f81cc191ee683e247ba6f0299f0b140e60b8386a6400f8cf3b39e38d2ad7e5376a690df84ff02b4fb7d0615f6d"})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r7, 0x2, 0x200, 0x10001, 0x8})
ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
dup2(r1, r0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r9, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)

2.417950073s ago: executing program 1 (id=302):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00')
pread64(r1, &(0x7f0000000180)=""/208, 0xd0, 0x5)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000059020000000000000000000000005c"])
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000000105000d0000000000000002000008240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000001080003400000000708000240000000091ac853b936b8eb4f9b"], 0x54}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r4, &(0x7f0000000400)="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", 0x1f000)

2.197966025s ago: executing program 1 (id=307):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/153, 0x99, 0x3, 0x23}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x400}, @decrefs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}, @register_looper], 0x0, 0x0, 0x0})

2.158252235s ago: executing program 0 (id=309):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000001b00000d000040"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x14, r5, 0x1, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000dc0)={0x24, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x9, 'X*'}, @main=@item_4={0x3, 0x0, 0xb, "53e85025"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r6, 0x7, 0x13, &(0x7f0000000140)="8b12b982046efcf02af5d1d9ec1d8b99f6eab1")
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x161982, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@initdev}, &(0x7f0000000080)=0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$loop(&(0x7f0000000480), 0x2d76, 0x0)
fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0x8fe69000)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RELEASEINTERFACE(r9, 0x80045510, &(0x7f00000000c0)=0x8)
madvise(&(0x7f00008e7000/0x4000)=nil, 0x4000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.340463291s ago: executing program 1 (id=326):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000001c0)={0x8, "e27f9db66ca720b7"}) (async)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}) (async)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='ip6tnl0\x00', 0x10) (async)
sendto$inet(r6, 0x0, 0x0, 0x800, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x801, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@posixacl}, {@noxattr}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@privport}, {@aname={'aname', 0x3d, '/dev/fuse\x00'}}, {@directio}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/fuse\x00'}}, {@fsname={'fsname', 0x3d, '],]'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfsdef}, {@obj_user={'obj_user', 0x3d, 'fuse\x00'}}, {@uid_gt={'uid>', r7}}, {@fsname={'fsname', 0x3d, '/dev/fuse\x00'}}]}})

1.257544971s ago: executing program 1 (id=327):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="400f01c3650f07470f01cab9800000c02e6726f3400fc7b50000000008040421000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x51}], 0x1, 0xb, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa, 0xf0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x3}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x405, 0x9, 0x6f7, 0x83}, {0x6, 0x24, 0x1a, 0x4, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x16}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x46, 0x12}}}}}}}]}}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000)

541.222276ms ago: executing program 2 (id=339):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f00007ea000/0x2000)=nil, 0x2000})
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xa, 0x1}, 0xffffff36, 0x0, &(0x7f0000000040)="d727f7397f4cc83b81e013b0e5edee730e6c769b69cd7be489213e947eda8208383c7cd5bd57db3708a52a4f729676e05ce47afddd417fcce1c57324f432ec164d4725b1e88bd4fe23a73be7beba", 0x4e, 0x3d8, 0x8, 0x2b, 0x0, 0x9, &(0x7f0000000200)="0644a614f06a323b9ef5f9ef9c1e874b54982cc8150c62a325d2513a3c1830a9793d36895e3bf0acddfbf5d092e0c2b0c0ebcf7ee1e8a8f9629eb6db2127f765aee86cc1d2082f96876b49507a25bbe0785c32f07aeba15594712d69ff1fc48b74cb2a13200fcc850f886a68d4aca6dc85f2e870b30794ed88a1878845077ba708934f6b8b26f2a705ead38ed87b0d417b8ec077d9b43a58079f85545a09d5a73de8cca5c2013a1774424c958e858eea5a086f3de66dc29bde6b9e6353eb142921", [{0x1000, 0x4, 0x3}, {0x7fff, 0x2}, {0xe95a, 0x3, 0x6}, {0x6, 0xffff3bcd, 0x6}, {0x4, 0x3, 0xfffffc00}, {0x2, 0x6, 0x5}, {0x8, 0x81, 0xd}, {0x1, 0xffffffff, 0x4}, {0x4, 0x9, 0x7}, {0x1, 0x5, 0x7}, {0x4, 0xa01, 0x100}, {0x5, 0x200, 0x2}, {0x10001, 0x7f, 0x6}, {0x7fff, 0xff, 0x10001}, {0x9, 0x5}, {0x10000000, 0x0, 0x1000}, {0x1, 0xc, 0x54}, {0x6, 0x5, 0x6}, {0x3, 0xfffffe00, 0x3}, {0x5, 0x5, 0x7}, {0x969, 0x7, 0x5721a1fc}, {0x8, 0x6, 0x7fffffff}, {0x7, 0xa8, 0x4}, {0x4, 0x5, 0xab}, {0x1, 0x8, 0x3}, {0x5dd9, 0x0, 0xa}, {0xfffffffe, 0x2, 0xe580}, {0x2, 0xdfef, 0x9009}, {0x8001, 0x78, 0x1a}, {0x2, 0x2, 0x6}, {0xaa, 0x7, 0x92ea}, {0x9, 0x101, 0x5}, {0xca42, 0x100, 0x101}, {0xe000, 0x8, 0xe}, {0x4, 0x0, 0x4}, {0x7, 0x9, 0x6}, {0xffff, 0x9, 0x2}, {0x10001, 0x0, 0x401}, {0x3, 0xf0000000, 0x4}, {0x4, 0x5, 0x7}, {0x6, 0x1, 0x81}, {0x10000, 0x5, 0x9}, {0x7a, 0xa1d3, 0x10001}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

475.906647ms ago: executing program 2 (id=341):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x5, 0x4}, 0x2)
write(r1, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000000c0))
close(0x3)

472.988427ms ago: executing program 2 (id=343):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8)

472.708307ms ago: executing program 2 (id=344):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
fcntl$getown(r1, 0x9)
syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9")
write(r1, &(0x7f0000000400)="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", 0xfffffcf1)

444.293437ms ago: executing program 2 (id=346):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000480))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x4000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x7000000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$setpipe(r3, 0x407, 0x10ae)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

442.724647ms ago: executing program 2 (id=348):
r0 = syz_open_procfs(0x0, &(0x7f0000001a80)='mounts\x00')
finit_module(r0, 0x0, 0x3) (async)
finit_module(r0, 0x0, 0x3)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0xa)
poll(&(0x7f0000000140)=[{r0, 0x40}], 0x1, 0x10000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
ioctl$TUNSETOWNER(r0, 0x400454cc, r2) (async)
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000100)) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000100))

390.034457ms ago: executing program 3 (id=349):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4)
r3 = socket(0xa, 0xa, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1)
recvfrom$packet(r2, 0x0, 0x0, 0x2, 0x0, 0x0)
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xffffffffffffffa2, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0xfffffffd}, @decrefs], 0xfffffffffffffe4b, 0x0, 0x0})
fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x1)

363.194338ms ago: executing program 0 (id=350):
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r0, 0x45809000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7)
write(r4, &(0x7f0000000400)="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", 0xfffffcf1)

361.675088ms ago: executing program 3 (id=351):
setresgid(0xee00, 0xee01, 0x0)
mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) (async)
lseek(0xffffffffffffffff, 0xfffd, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)

345.683098ms ago: executing program 3 (id=352):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0)
r1 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000001100)={0x4e, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"})
write$binfmt_aout(r3, 0x0, 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_pts(r3, 0xc0000)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x16)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
unshare(0x8000600)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xa9101, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000})
ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012)
getuid()
socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
epoll_create(0x3)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000)

262.149828ms ago: executing program 3 (id=353):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x22020600)
r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x8, r1)
r2 = syz_pidfd_open(r1, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x90000, &(0x7f0000000100)='/dev/rnullb0\x00')
readv(r0, &(0x7f0000000000), 0xf)

261.772179ms ago: executing program 3 (id=354):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0xb, 0x8)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x1, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

244.050908ms ago: executing program 0 (id=355):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x12b143, 0x0) (async)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x501001, 0x0) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 64)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00006fe000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="0f01df66baf80cb8857eef8def66bafc0cb000eeb9b10100000f32f20f7cbe00680000c4e3f9172700d06f00c4c1fc524ca406b9800000c00f3235004000000f30b10082730400", 0x47}], 0x1, 0x30, &(0x7f0000000200)=[@cr4={0x1, 0x4104}], 0x1) (async)
r3 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) (async, rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) (async, rerun: 32)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r0, 0x0) (async)
prctl$PR_SET_KEEPCAPS(0x8, 0x3) (async)
read(r0, &(0x7f0000000000)=""/183, 0xb7)

217.882909ms ago: executing program 0 (id=356):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x206102, 0x0)
fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000)

162.125839ms ago: executing program 0 (id=357):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x111840, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR<nB\r2v\x1f\xa2u\xc0I\xd6\xb4\xa3\xac\x90\x9d)\\\x94o\x8d\xed\'\xa2Js\xd7t{\xa3pvn^&\x0e%\xda-,sI\xc4\x95h\xa6\xe5Z\x7f#\xc0\x94\xcd\xf2) p\xf3\x94\xda*\xdb\x82O\xc1G\xf18\x16dl\xde\xf8\x8b\xf0\x8c\xa8\x89\xf9~$\x1c\x04\x14AN\x84\x9f\x83Q\xadB\xbb+w\xc1\xebEF\xb0J\t\xa5\xfa8\xb60)\xbc\x11\xbd9\xad\xc6\x17[\xb5\x9fD\x82 \xf9\xf9\xfdfnh@\xa7\xa4\xab\xe4\xe5\xc7\xaa\r\x1e\\\xa4\xd1\xfcHT\x8a\xb1R[\xf9\xe2+\xc2\x8f\xa9\xceS\xbao\x0e\x98W\xf6dMK\xd4\xbdSe\xd4\x9a\xdb\xd4o&\xc9Akd\xfc\x01\xa6$\xd6-\xe6I\xea\xc1 c!,\xf3l\x98\'\xb1\'\xe7F\xfa\x058\xcdD\x1e4#L\x14\xd9{L\x94\xe6^\x1c4ir4`@\xf9\x11:\'6P_~\xca\xe8Fr\x0eZ\xcd\xe6u\xd3K\xbc<\x94R\x80\x7f\x86\x95+\x87J\xebB\xcb\xb5\x97\xf1tg|dOp\xc0vvV\"\xc6B\xd2\xca\xf2\xa6|\a\\^[\'\xb0 \x88ij\x01gB\t\xd2\xf9\xd7\x16\x9b\xc2jTa}\xba\xdf\xb2\xd8\xd0`\x0fl\xcfv@[\f\x05+\xb6\x9f9\xa5\x10\xb1{\xc4\x89.H\xe5\x17\xe9\xe2\xab\x1f\x1a~\xe5\xc8\xf4\xc9\xdb\xae.`x%\x8e\xb1`\x90\x88H\'\xdes\rW\x9c\xb9\xf3\xcb\xd2P+z\xac\xfa\x8d\x8a\xaeY+\x01]\xe7\x1c\x01\xfcU\x1b_3\xad\"\nr`\x85\xe9\xeaC}\x9d\x8c\xf7\xd6`\x8a\'\x1d\xd4kT\xb8rS2z\xfc\x00\x00\x00\x00\xb56\x99\x94\x82&m\x17\b\xe5\x19\x10\x86\xb9\xc5\x85\x98\xdb\x11\xc321\x1d\x83\x90\x92\xf1\x94\x8c\x13n\xb4\x16\x1d&\x04\x9cs`\x9e\xe5U\xa7\xd4\xa6\b\xdd0\xb0\xe4[AC\x9b\a\xeb\xb2E0n\xa0\xd0\xcfz\x9e6\xa7\xcf\xbf\x19\xacQT\x172wbh\x849O\xd1\x87\xe1V\x8ff\xc9\xbfA.X\xfa\xa0\x92?\xb4AIk\xb7\x8e\xe4\x0f\xd3Ac\xb8>4\xebh\xe2\xd4')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000)

161.502309ms ago: executing program 0 (id=358):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/225)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x118)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x9)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"})
syz_open_pts(r0, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100000000001)
socket$tipc(0x1e, 0x2, 0x0)
eventfd(0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r1], 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x0)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100b, 0x2})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x6, [0x5, 0x80000000, 0xe287, 0xc27a, 0x9, 0x6]}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

31.55415ms ago: executing program 3 (id=359):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (rerun: 64)

0s ago: executing program 1 (id=360):
unshare(0x22020600)
r0 = socket$unix(0x1, 0x2, 0x0)
flistxattr(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = openat2$dir(0xffffff9c, &(0x7f0000000280)='./file2\x00', &(0x7f0000000140)={0x200c0, 0x11c, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000080030000000000000000000000fbffffff0000000000"])
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x6)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_interrupt={0x1, {0x7}, 0x7, 0x42, &(0x7f0000000200)="566e7cdcb61fa16b39493763f1f039bac54192d5917582ff11a0f3276dbdb2d42c6fa9ff5139046ba8a39efd0584f3235f5a5302e15159318bdb3122c2e179c39934721ff03fa9d62594864473bca9d7da54791244351fed86b0ef19951671a8f4c2b5", 0x63, 0x2, 0xc, 0x0, 0x10000, 0xee, &(0x7f0000000040)="20976468654395151e123c94eea4f87f51a560f855266b5c7314832221020c9d16b6e08fc3606c6fe2"})
r3 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x0, 0x130)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000040)={0x2, 0x10000, 0x5, 0xc18aaa7c744b6fd8, 0x47e15ce3})
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0))
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts.
[   26.009772][   T36] audit: type=1400 audit(1762587103.320:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.011101][  T282] cgroup: Unknown subsys name 'net'
[   26.032514][   T36] audit: type=1400 audit(1762587103.320:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.059772][   T36] audit: type=1400 audit(1762587103.350:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.060019][  T282] cgroup: Unknown subsys name 'devices'
[   26.244051][  T282] cgroup: Unknown subsys name 'hugetlb'
[   26.249664][  T282] cgroup: Unknown subsys name 'rlimit'
[   26.344852][   T36] audit: type=1400 audit(1762587103.660:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.368430][   T36] audit: type=1400 audit(1762587103.660:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.393287][   T36] audit: type=1400 audit(1762587103.660:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.423523][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   26.432368][   T36] audit: type=1400 audit(1762587103.750:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.457810][   T36] audit: type=1400 audit(1762587103.750:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.476010][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.483646][   T36] audit: type=1400 audit(1762587103.790:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.517879][   T36] audit: type=1400 audit(1762587103.790:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.877286][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.884509][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.891591][  T291] bridge_slave_0: entered allmulticast mode
[   27.898195][  T291] bridge_slave_0: entered promiscuous mode
[   27.904772][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.911956][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.919031][  T291] bridge_slave_1: entered allmulticast mode
[   27.925338][  T291] bridge_slave_1: entered promiscuous mode
[   27.934611][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.941718][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.948904][  T289] bridge_slave_0: entered allmulticast mode
[   27.955348][  T289] bridge_slave_0: entered promiscuous mode
[   27.971540][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.978609][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.985713][  T289] bridge_slave_1: entered allmulticast mode
[   27.992071][  T289] bridge_slave_1: entered promiscuous mode
[   28.015751][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.022933][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.030006][  T290] bridge_slave_0: entered allmulticast mode
[   28.036415][  T290] bridge_slave_0: entered promiscuous mode
[   28.052199][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.059252][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.066453][  T290] bridge_slave_1: entered allmulticast mode
[   28.072717][  T290] bridge_slave_1: entered promiscuous mode
[   28.111287][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.118379][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.125601][  T292] bridge_slave_0: entered allmulticast mode
[   28.132010][  T292] bridge_slave_0: entered promiscuous mode
[   28.150274][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.157399][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.164560][  T292] bridge_slave_1: entered allmulticast mode
[   28.170833][  T292] bridge_slave_1: entered promiscuous mode
[   28.304395][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.311488][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.318836][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.325905][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.348618][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.355802][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.363151][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.370192][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.379772][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.386870][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.394218][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.401262][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.419977][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.427074][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.434376][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.441421][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.475670][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.483942][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.491157][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.498380][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.506130][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.513483][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.520717][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.528164][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.544277][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.551322][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.559053][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.566116][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.575446][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.582519][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.595735][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.602805][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.627948][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.635026][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.643046][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.650085][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.692514][  T291] veth0_vlan: entered promiscuous mode
[   28.702995][  T290] veth0_vlan: entered promiscuous mode
[   28.711071][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.718238][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.725798][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.732880][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.758516][  T291] veth1_macvtap: entered promiscuous mode
[   28.767234][  T292] veth0_vlan: entered promiscuous mode
[   28.779457][  T290] veth1_macvtap: entered promiscuous mode
[   28.806984][  T292] veth1_macvtap: entered promiscuous mode
[   28.838922][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.859115][  T289] veth0_vlan: entered promiscuous mode
[   28.889967][  T289] veth1_macvtap: entered promiscuous mode
[   28.903699][  T336] =======================================================
[   28.903699][  T336] WARNING: The mand mount option has been deprecated and
[   28.903699][  T336]          and is ignored by this kernel. Remove the mand
[   28.903699][  T336]          option from the mount to silence this warning.
[   28.903699][  T336] =======================================================
[   28.959725][  T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.231887][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   29.261729][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.382940][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   29.393967][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   29.407105][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   29.416387][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.425566][   T10] usb 3-1: config 0 descriptor??
[   29.430846][  T336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   29.439105][   T31] usb 4-1: Using ep0 maxpacket: 16
[   29.445627][   T31] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[   29.455096][   T31] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[   29.463625][   T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   29.472748][   T31] usb 4-1: config 0 has no interface number 0
[   29.478863][   T31] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[   29.490034][   T31] usb 4-1: config 0 interface 104 has no altsetting 1
[   29.502901][   T31] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[   29.518631][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.526737][   T31] usb 4-1: Product: syz
[   29.530929][   T31] usb 4-1: Manufacturer: syz
[   29.535599][   T31] usb 4-1: SerialNumber: syz
[   29.544643][   T31] usb 4-1: config 0 descriptor??
[   29.759595][  T346] fuse: Bad value for 'group_id'
[   29.764665][  T346] fuse: Bad value for 'group_id'
[   29.823575][   T31] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   29.833904][   T31] asix 4-1:0.104: probe with driver asix failed with error -71
[   29.844076][   T31] usb 4-1: USB disconnect, device number 2
[   29.901855][   T10] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found
[   29.909573][   T10] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found
[   30.042036][   T31] usb 3-1: USB disconnect, device number 2
[   43.816799][   T36] kauditd_printk_skb: 51 callbacks suppressed
[   43.816818][   T36] audit: type=1400 audit(1762587121.130:125): avc:  denied  { ioctl } for  pid=353 comm="syz.0.7" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   43.854257][   T36] audit: type=1400 audit(1762587121.130:126): avc:  denied  { set_context_mgr } for  pid=353 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   43.985419][   T36] audit: type=1400 audit(1762587121.300:127): avc:  denied  { read write } for  pid=381 comm="syz.1.19" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   44.010772][   T36] audit: type=1400 audit(1762587121.310:128): avc:  denied  { open } for  pid=381 comm="syz.1.19" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   44.044309][   T36] audit: type=1400 audit(1762587121.320:129): avc:  denied  { write } for  pid=385 comm="syz.1.21" name="ip_tables_targets" dev="proc" ino=4026532423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   44.071310][  T384] fuse: Unknown parameter 'f'
[   44.075765][   T36] audit: type=1400 audit(1762587121.390:130): avc:  denied  { read write } for  pid=383 comm="syz.3.20" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   44.098340][   T36] audit: type=1400 audit(1762587121.390:131): avc:  denied  { open } for  pid=383 comm="syz.3.20" path="/4/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   44.131712][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   44.165342][   T36] audit: type=1400 audit(1762587121.480:132): avc:  denied  { create } for  pid=394 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.184803][   T36] audit: type=1400 audit(1762587121.480:133): avc:  denied  { connect } for  pid=394 comm="syz.1.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.245951][   T36] audit: type=1400 audit(1762587121.560:134): avc:  denied  { mounton } for  pid=399 comm="syz.1.27" path="/proc/27/task" dev="proc" ino=4542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   44.291678][   T45] usb 1-1: Using ep0 maxpacket: 8
[   44.297943][   T45] usb 1-1: config 0 has an invalid interface number: 96 but max is 0
[   44.306235][   T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   44.316537][   T45] usb 1-1: config 0 has no interface number 0
[   44.322735][   T45] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   44.333869][   T45] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0
[   44.343836][   T45] usb 1-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.356850][   T45] usb 1-1: config 0 interface 96 has no altsetting 0
[   44.365131][   T45] usb 1-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f
[   44.374277][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.382321][   T45] usb 1-1: Product: syz
[   44.386513][   T45] usb 1-1: Manufacturer: syz
[   44.391126][   T45] usb 1-1: SerialNumber: syz
[   44.396445][   T45] usb 1-1: config 0 descriptor??
[   44.705841][   T45] usb 1-1: USB disconnect, device number 2
[   44.889657][  T417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'.
[   45.243741][  T442] netlink: 'syz.0.46': attribute type 44 has an invalid length.
[   45.964820][  T512] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure
[   48.739932][  T595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.917187][   T36] kauditd_printk_skb: 56 callbacks suppressed
[   48.917204][   T36] audit: type=1400 audit(1762587126.230:191): avc:  denied  { write } for  pid=608 comm="syz.2.119" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.946544][   T36] audit: type=1400 audit(1762587126.230:192): avc:  denied  { open } for  pid=608 comm="syz.2.119" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.970939][   T36] audit: type=1400 audit(1762587126.250:193): avc:  denied  { ioctl } for  pid=608 comm="syz.2.119" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   49.146210][   T36] audit: type=1400 audit(1762587126.460:194): avc:  denied  { read } for  pid=619 comm="syz.2.124" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   49.169539][   T36] audit: type=1400 audit(1762587126.460:195): avc:  denied  { open } for  pid=619 comm="syz.2.124" path="/40/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   49.198280][  T625] kvm: user requested TSC rate below hardware speed
[   49.518389][   T36] audit: type=1400 audit(1762587126.830:196): avc:  denied  { write } for  pid=658 comm="syz.0.138" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   49.623431][   T36] audit: type=1400 audit(1762587126.940:197): avc:  denied  { relabelfrom } for  pid=664 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   49.655861][   T36] audit: type=1400 audit(1762587126.940:198): avc:  denied  { relabelto } for  pid=664 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   49.687192][  T669] mmap: syz.3.143 (669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.758546][   T36] audit: type=1400 audit(1762587127.070:199): avc:  denied  { mounton } for  pid=674 comm="syz.3.146" path="/proc/113/cgroup" dev="proc" ino=5627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   49.889313][  T687] process 'syz.3.151' launched '/dev/fd/5' with NULL argv: empty string added
[   49.901388][   T36] audit: type=1400 audit(1762587127.210:200): avc:  denied  { execute_no_trans } for  pid=685 comm="syz.3.151" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   51.194025][  T745] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.928339][   T36] kauditd_printk_skb: 42 callbacks suppressed
[   53.935165][   T36] audit: type=1400 audit(1762587131.240:243): avc:  denied  { create } for  pid=905 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   54.271754][   T36] audit: type=1400 audit(1762587131.580:244): avc:  denied  { read } for  pid=915 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.817653][  T957] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   55.250691][   T36] audit: type=1400 audit(1762587132.560:245): avc:  denied  { bind } for  pid=972 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.278993][   T36] audit: type=1400 audit(1762587132.560:246): avc:  denied  { name_bind } for  pid=972 comm="syz.1.271" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   55.300018][   T36] audit: type=1400 audit(1762587132.560:247): avc:  denied  { node_bind } for  pid=972 comm="syz.1.271" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   55.323014][   T36] audit: type=1400 audit(1762587132.590:248): avc:  denied  { read } for  pid=972 comm="syz.1.271" path="socket:[8639]" dev="sockfs" ino=8639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.497170][   T36] audit: type=1400 audit(1762587132.810:249): avc:  denied  { unlink } for  pid=977 comm="syz.1.273" name="#3" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.532566][   T36] audit: type=1400 audit(1762587132.810:250): avc:  denied  { mount } for  pid=977 comm="syz.1.273" name="/" dev="overlay" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   55.554442][   T36] audit: type=1400 audit(1762587132.840:251): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   55.634327][  T984] capability: warning: `syz.3.276' uses 32-bit capabilities (legacy support in use)
[   55.977064][   T36] audit: type=1400 audit(1762587133.290:252): avc:  denied  { create } for  pid=1017 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   56.009639][ T1025] Zero length message leads to an empty skb
[   56.029259][ T1029] rust_binder: 173: no such ref 0
[   56.085159][ T1040] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   56.092563][ T1040] rust_binder: Write failure EINVAL in pid:173
[   56.741747][ T1046] /dev/nbd3: Can't lookup blockdev
[   57.153223][ T1072] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   57.161461][ T1072] rust_binder: Write failure EINVAL in pid:164
[   57.201095][ T1077] rust_binder: Error while translating object.
[   57.201977][ T1074] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   57.211736][ T1077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   57.220859][ T1077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179
[   57.232997][ T1074] rust_binder: Write failure EINVAL in pid:171
[   57.245277][ T1076] kvm: kvm [1075]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d)
[   57.394524][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.394552][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.401024][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.407998][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.414900][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.421380][ T1081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.501736][  T349] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   57.672719][  T349] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 253, using maximum allowed: 30
[   57.683563][  T349] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.693352][  T349] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   57.706329][  T349] usb 1-1: config 0 interface 0 has no altsetting 0
[   57.712957][  T349] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[   57.722009][  T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.730564][  T349] usb 1-1: config 0 descriptor??
[   57.995942][ T1131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[   58.009982][ T1130] 9pnet_fd: p9_fd_create_tcp (1130): problem connecting socket to 127.0.0.1
[   58.139323][  T349] wacom 0003:056A:0003.0002: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[   58.149510][  T349] wacom 0003:056A:0003.0002: hidraw0: USB HID v0.04 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0
[   58.161247][  T349] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.0002/input/input5
[   58.321711][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   58.472241][   T10] usb 2-1: Using ep0 maxpacket: 32
[   58.478912][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   58.488698][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.501478][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   58.510418][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   58.525124][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   58.529607][ T1142] rust_binder: Write failure EFAULT in pid:197
[   58.534658][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.549573][   T10] usb 2-1: Product: syz
[   58.554213][   T10] usb 2-1: Manufacturer: syz
[   58.558839][   T10] usb 2-1: SerialNumber: syz
[   58.722412][ T1160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   58.748724][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   58.759226][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   58.772721][   T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[   58.779516][   T10] cdc_ncm 2-1:1.0: bind() failure
[   58.792073][   T10] usb 2-1: USB disconnect, device number 2
[   58.901687][ T1203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.926753][  T350] usb 1-1: USB disconnect, device number 3
[   58.943387][ T1203] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[   58.954165][ T1203] rust_binder: Write failure EINVAL in pid:224
[   59.212472][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   59.212490][   T36] audit: type=1400 audit(1762587136.530:281): avc:  denied  { setopt } for  pid=1215 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   59.244431][   T36] audit: type=1400 audit(1762587136.530:282): avc:  denied  { ioctl } for  pid=1215 comm="syz.3.354" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   59.303371][ T1230] rust_binder: 236: no such ref 0
[   59.303389][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.303407][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.314947][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.321433][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.329771][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.336530][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.343431][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.350202][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.352026][ T1233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'.
[   59.357330][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.372227][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.378844][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.385404][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.392029][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.398469][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.405124][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.411592][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.411687][  T350] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   59.418125][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.432149][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.438598][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.445114][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.451810][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.458262][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.464728][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.471164][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.477623][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.484124][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.490573][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.497092][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.503929][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.510518][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.517054][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.523574][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.530003][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.536451][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.542962][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.549421][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.550035][ T1233] ------------[ cut here ]------------
[   59.555896][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.555914][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.562371][ T1233] WARNING: CPU: 1 PID: 1233 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   59.567840][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.574251][ T1233] Modules linked in:
[   59.580675][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.590061][ T1233] CPU: 1 UID: 0 PID: 1233 Comm: syz.1.360 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   59.596475][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.600348][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   59.607632][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.618249][ T1233] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   59.624853][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.634786][ T1233] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   59.634810][ T1233] RSP: 0018:ffffc9000f067768 EFLAGS: 00010293
[   59.641402][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.646874][ T1233] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888119f44c00
[   59.646895][ T1233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.653579][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.672930][ T1233] RBP: ffffc9000f067790 R08: ffff88811b9540bf R09: 1ffff1102372a817
[   59.672955][ T1233] R10: dffffc0000000000 R11: ffffed102372a818 R12: 0000000000000000
[   59.679166][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.685469][ T1233] R13: dffffc0000000000 R14: ffff88811b954020 R15: ffff8881136f4110
[   59.693630][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.701475][ T1233] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   59.701498][ T1233] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.708054][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.715990][ T1233] CR2: 000000110c2b1bd8 CR3: 000000011581e000 CR4: 00000000003526b0
[   59.716015][ T1233] DR0: 0000000000000000 DR1: 0000800000000000 DR2: 0000000000000000
[   59.726714][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.730400][ T1233] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   59.730421][ T1233] Call Trace:
[   59.730429][ T1233]  <TASK>
[   59.738799][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.745449][ T1233]  ovl_do_remove+0x7b8/0xcf0
[   59.764186][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.767295][ T1233]  ? ovl_set_redirect+0x780/0x780
[   59.775637][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.783310][ T1233]  ? down_write+0xe9/0x2a0
[   59.783340][ T1233]  ? __cfi_down_write+0x10/0x10
[   59.790198][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.797835][ T1233]  ovl_rmdir+0x1e/0x30
[   59.801409][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.804085][ T1233]  vfs_rmdir+0x3dd/0x560
[   59.810733][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.815097][ T1233]  incfs_kill_sb+0x109/0x230
[   59.815132][ T1233]  deactivate_locked_super+0xd5/0x2a0
[   59.821883][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.826591][ T1233]  deactivate_super+0xb8/0xe0
[   59.833278][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.837414][ T1233]  cleanup_mnt+0x3f1/0x480
[   59.842533][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.848721][ T1233]  __cleanup_mnt+0x1d/0x40
[   59.848751][ T1233]  task_work_run+0x1e0/0x250
[   59.853166][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.859251][ T1233]  ? __cfi_task_work_run+0x10/0x10
[   59.863789][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.869926][ T1233]  ? free_nsproxy+0x223/0x290
[   59.874834][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.879892][ T1233]  do_exit+0x9bc/0x2630
[   59.886564][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.891010][ T1233]  ? __cfi_do_exit+0x10/0x10
[   59.898660][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.901905][ T1233]  ? futex_wake+0x5fb/0x900
[   59.901938][ T1233]  ? futex_setup_timer+0xb4/0xd0
[   59.908683][ T1231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.912762][ T1233]  ? __kasan_check_write+0x18/0x20
[   59.988970][ T1233]  ? _raw_spin_lock_irq+0x8d/0x120
[   59.994114][ T1233]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   59.999694][ T1233]  do_group_exit+0x22a/0x300
[   60.004334][ T1233]  ? __kasan_check_write+0x18/0x20
[   60.009475][ T1233]  get_signal+0x139d/0x14f0
[   60.014030][ T1233]  arch_do_signal_or_restart+0x96/0x720
[   60.019610][ T1233]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   60.025806][ T1233]  syscall_exit_to_user_mode+0x58/0xb0
[   60.031284][ T1233]  do_syscall_64+0x64/0xf0
[   60.035737][ T1233]  ? clear_bhb_loop+0x50/0xa0
[   60.040429][ T1233]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   60.046438][ T1233] RIP: 0033:0x7f5645b8f6c9
[   60.050887][ T1233] Code: Unable to access opcode bytes at 0x7f5645b8f69f.
[   60.057927][ T1233] RSP: 002b:00007f5646a190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   60.066400][ T1233] RAX: fffffffffffffe00 RBX: 00007f5645de5fa8 RCX: 00007f5645b8f6c9
[   60.074415][ T1233] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5645de5fa8
[   60.082465][ T1233] RBP: 00007f5645de5fa0 R08: 0000000000000000 R09: 0000000000000000
[   60.090442][ T1233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.098445][ T1233] R13: 00007f5645de6038 R14: 00007ffd9066c600 R15: 00007ffd9066c6e8
[   60.106462][ T1233]  </TASK>
[   60.109500][ T1233] ---[ end trace 0000000000000000 ]---
[   60.115692][ T1233] ------------[ cut here ]------------
[   60.121207][ T1233] WARNING: CPU: 0 PID: 1233 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   60.130669][ T1233] Modules linked in:
[   60.131689][  T350] usb 1-1: Using ep0 maxpacket: 16
[   60.134621][ T1233] CPU: 0 UID: 0 PID: 1233 Comm: syz.1.360 Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   60.141551][  T350] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.153305][ T1233] Tainted: [W]=WARN
[   60.153317][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   60.153331][ T1233] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   60.163454][  T350] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.167273][ T1233] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   60.185258][  T350] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   60.191954][ T1233] RSP: 0018:ffffc9000f067768 EFLAGS: 00010293
[   60.211913][  T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.220642][ T1233] 
[   60.220653][ T1233] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888119f44c00
[   60.220672][ T1233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   60.227242][  T350] usb 1-1: Product: syz
[   60.234802][ T1233] RBP: ffffc9000f067790 R08: ffff88811b9540bf R09: 1ffff1102372a817
[   60.237455][  T350] usb 1-1: Manufacturer: syz
[   60.245122][ T1233] R10: dffffc0000000000 R11: ffffed102372a818 R12: 0000000000000000
[   60.253426][  T350] usb 1-1: SerialNumber: syz
[   60.257262][ T1233] R13: dffffc0000000000 R14: ffff88811b954020 R15: ffff8881136f4110
[   60.257282][ T1233] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   60.299441][ T1233] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   60.306060][ T1233] CR2: 00007ff170bb4198 CR3: 000000010b3be000 CR4: 00000000003526b0
[   60.314171][ T1233] DR0: 0000000000000000 DR1: 0000800000000000 DR2: 0000000000000000
[   60.322189][ T1233] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   60.330356][ T1233] Call Trace:
[   60.333856][ T1233]  <TASK>
[   60.336825][ T1233]  ovl_do_remove+0x7b8/0xcf0
[   60.341453][ T1233]  ? ovl_set_redirect+0x780/0x780
[   60.346584][ T1233]  ? down_write+0x159/0x2a0
[   60.351114][ T1233]  ? __cfi_down_write+0x10/0x10
[   60.356028][ T1233]  ovl_rmdir+0x1e/0x30
[   60.360126][ T1233]  vfs_rmdir+0x3dd/0x560
[   60.364889][ T1233]  incfs_kill_sb+0x1a0/0x230
[   60.369525][ T1233]  deactivate_locked_super+0xd5/0x2a0
[   60.375181][ T1233]  deactivate_super+0xb8/0xe0
[   60.379906][ T1233]  cleanup_mnt+0x3f1/0x480
[   60.384378][ T1233]  __cleanup_mnt+0x1d/0x40
[   60.388860][ T1233]  task_work_run+0x1e0/0x250
[   60.393518][ T1233]  ? __cfi_task_work_run+0x10/0x10
[   60.398659][ T1233]  ? free_nsproxy+0x223/0x290
[   60.403403][ T1233]  do_exit+0x9bc/0x2630
[   60.407599][ T1233]  ? __cfi_do_exit+0x10/0x10
[   60.412245][ T1233]  ? futex_wake+0x5fb/0x900
[   60.416777][ T1233]  ? futex_setup_timer+0xb4/0xd0
[   60.421760][ T1233]  ? __kasan_check_write+0x18/0x20
[   60.426907][ T1233]  ? _raw_spin_lock_irq+0x8d/0x120
[   60.432165][ T1233]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   60.437746][ T1233]  do_group_exit+0x22a/0x300
[   60.442392][ T1233]  ? __kasan_check_write+0x18/0x20
[   60.447554][ T1233]  get_signal+0x139d/0x14f0
[   60.452121][ T1233]  arch_do_signal_or_restart+0x96/0x720
[   60.457705][ T1233]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   60.464376][ T1233]  syscall_exit_to_user_mode+0x58/0xb0
[   60.469908][ T1233]  do_syscall_64+0x64/0xf0
[   60.474372][ T1233]  ? clear_bhb_loop+0x50/0xa0
[   60.479120][ T1233]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   60.485065][ T1233] RIP: 0033:0x7f5645b8f6c9
[   60.489566][ T1233] Code: Unable to access opcode bytes at 0x7f5645b8f69f.
[   60.496649][ T1233] RSP: 002b:00007f5646a190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   60.505172][ T1233] RAX: fffffffffffffe00 RBX: 00007f5645de5fa8 RCX: 00007f5645b8f6c9
[   60.513207][ T1233] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5645de5fa8
[   60.521194][ T1233] RBP: 00007f5645de5fa0 R08: 0000000000000000 R09: 0000000000000000
[   60.529228][ T1233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.537268][ T1233] R13: 00007f5645de6038 R14: 00007ffd9066c600 R15: 00007ffd9066c6e8
[   60.545321][ T1233]  </TASK>
[   60.548370][ T1233] ---[ end trace 0000000000000000 ]---
[   62.159541][  T350] usb 1-1: 0:2 : does not exist
[   62.166399][  T350] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   62.178484][  T350] usb 1-1: USB disconnect, device number 4
[   62.189063][ T1175] udevd[1175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory