last executing test programs:

2m6.653464303s ago: executing program 3 (id=175):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)="34dc8da38d373ac5073999ba57d8794e8c4976c92ff6754fca67ea6b31102ec8d9583a2cdd423966b609cfa596817ad807f3641baea99c59c8e83efbe7960e88af3e94a9069ad728eb8e6a4b46aabccf91b7c83653158fbad1442c4fb74e82c8317413123cb34acf7bc1d2eb9f73e49084b021031221d0395e6ece962f6d507418f608fa6f20f08b1f238a0abb00373a1b6a4e72211d4be8d831851bd8f95f5b1b882b71000a8e60f27f09630ca5bb8d471ea52995a2ba8de96c054b3f10", 0xbe)

2m6.563830735s ago: executing program 3 (id=176):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000002000000040000000000600000000000000010000400000000007"])
r4 = inotify_init1(0x800)
r5 = fcntl$dupfd(r0, 0x406, r4)
ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) (async)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0)
syz_open_dev$hidraw(0x0, 0x80000001, 0x410480)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x65, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x7f, 0xea, 0xd2, 0x8, 0x1d2a, 0x801, 0x72c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x8, 0x60, 0x80, 0x64, [{{0x9, 0x4, 0x70, 0xf, 0x5, 0x7b, 0x6, 0x72, 0xf7, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x49, 0x1}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x6, 0x7, 0x0, [@generic={0x9, 0x4, "7016158ef74fc4"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x2, 0x9, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x7}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x3ff, 0x9, 0x90, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xc, 0x3, 0x67, [@generic={0x4, 0x9, "63f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x1, 0x40, 0x40, 0x86}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
ioctl$ASHMEM_GET_NAME(r6, 0x81007702, 0x0)

2m5.269916401s ago: executing program 3 (id=190):
chmod(&(0x7f0000000280)='./cgroup\x00', 0xea)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb4000040"])
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500))
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0})

2m3.965001698s ago: executing program 3 (id=203):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0) (async)
listen(r0, 0x0) (async)
connect$vsock_stream(r0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x24000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x4000, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe5441000) (async)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480), &(0x7f0000000700)={[0x0, &(0x7f0000000580)='!(,,\x00', &(0x7f00000005c0)='}\x00', 0x0, 0x0]}) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r4, 0x400455c8, 0x20000000008) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000, 0x5000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0fc7b20760660fc77097bad104ed66b98408000066b80000000066ba000000000f300f00540066b9220800000f32640f0d51392e36670fc75b002681a9003000800f015ef0", 0x45}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
recvmmsg(r2, &(0x7f00000052c0)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/187, 0xbb}], 0x2, &(0x7f0000000300)=""/36, 0x24}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005700)=""/206, 0xce}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f00000006c0)=""/30, 0x1e}], 0x8, &(0x7f0000001180)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000009c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/82, 0x52}, {&(0x7f0000000ac0)=""/65, 0x41}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/191, 0xbf}], 0x4, &(0x7f0000000c40)=""/215, 0xd7}}, {{&(0x7f0000000d40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/174, 0xae}], 0x1, &(0x7f0000000ec0)=""/191, 0xbf}, 0x6}, {{&(0x7f0000000f80)=@qipcrtr, 0x80, &(0x7f0000001000)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1, &(0x7f0000001040)=""/5, 0x5}, 0x8}, {{&(0x7f0000001080)=@generic, 0x80, &(0x7f0000001100)=[{&(0x7f0000004180)=""/205, 0xcd}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x2, &(0x7f0000005280)=""/57, 0x39}, 0x3}], 0x6, 0x63, &(0x7f0000005440))

2m3.807018671s ago: executing program 3 (id=206):
r0 = getpid()
r1 = syz_open_procfs$userns(r0, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80000, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
r2 = syz_pidfd_open(r0, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2m3.703124742s ago: executing program 3 (id=210):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x66053000)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x7ff}, 0x16, 0x2)

2m3.608186184s ago: executing program 32 (id=210):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x66053000)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x7ff}, 0x16, 0x2)

1m30.1672614s ago: executing program 4 (id=405):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8100) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000500)={{0x2, 0x4e20, @loopback}, {0x1, @remote}, 0x4, {0x2, 0x4e20, @multicast1}, 'veth1_to_bridge\x00'}) (async, rerun: 64)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xff, 0x8, 0x4, 0x4, "c4be55263cb75ca7a8b3e56381e78d865afa66ade4b2bb742ad1d162d4d364df"}) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xedb46000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64)
mremap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005f3000/0x2000)=nil) (async, rerun: 64)
listen(0xffffffffffffffff, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
socket$key(0xf, 0x3, 0x2) (async, rerun: 32)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}, {0x0}], 0x2) (rerun: 32)

1m30.131984311s ago: executing program 4 (id=407):
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async, rerun: 64)
futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000000)=0xd, 0x80}, {0x7, &(0x7f0000000040)=0x3cb6, 0x2}, {0x101, &(0x7f0000000080)=0x5, 0x2}, {0xf9, &(0x7f00000000c0)=0x4, 0x2}, {0x7, &(0x7f0000000100)=0x8, 0x2}, {0x2, &(0x7f0000000140)=0x9, 0x2}, {0x0, &(0x7f0000000180)=0xb9, 0x2}, {0x0, &(0x7f00000001c0)=0xfffffffffffffffb, 0x82}, {0x6, &(0x7f0000000200)=0xfffffffffffff583, 0x2}, {0x4, &(0x7f0000000240)=0x9, 0x82}, {0x6, &(0x7f0000000280)=0x2}, {0x400, &(0x7f00000002c0)=0x3576, 0x2}, {0x6764, &(0x7f0000000300)=0xb, 0x2}, {0x80000000, &(0x7f0000000340)=0x5, 0x82}, {0x3, &(0x7f0000000380)=0x7, 0x82}, {0x8, &(0x7f00000003c0)=0x4, 0x2}, {0x9, &(0x7f0000000400)=0x6, 0x2}, {0x2, &(0x7f0000000440)=0x100000001, 0x82}, {0x0, &(0x7f0000000480)=0x7, 0x82}, {0x2, &(0x7f00000004c0)=0x6, 0x82}, {0xd, &(0x7f0000000500)=0x9, 0x2}, {0x4, &(0x7f0000000540)=0x3, 0x80}, {0x6, &(0x7f0000000580)=0x2, 0x2}, {0x4, &(0x7f00000005c0)=0x8, 0x82}, {0x2, &(0x7f0000000600)=0x5, 0x82}, {0x392d2ec5, &(0x7f0000000640)=0x8000000000000000, 0x82}, {0xc79, &(0x7f0000000680)=0x2, 0x2f410e343a163f56}, {0x10, &(0x7f00000006c0)=0x9, 0x2}, {0x800, &(0x7f0000000700)=0x1, 0x2}, {0x7, &(0x7f0000000740)=0x8, 0x82}, {0x81, &(0x7f0000000780)=0xb2d, 0x82}, {0x1, &(0x7f00000007c0)=0x2, 0x82}, {0x578, &(0x7f0000000800), 0x82}, {0x1, &(0x7f0000000840)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000880)=0xfff, 0x82}, {0x81, &(0x7f00000008c0)=0x100000001, 0x2}, {0x2879416d, &(0x7f0000000900)=0x7, 0x82}, {0x1, &(0x7f0000000940)=0x5, 0x82}, {0x2, &(0x7f0000000980)=0xc7, 0x82}, {0x9, &(0x7f00000009c0)=0x9, 0x82}, {0x9, &(0x7f0000000a00)=0x9, 0x2}, {0x8, &(0x7f0000000a40)=0x6, 0x2}, {0x3, &(0x7f0000000a80)=0xfff, 0x82}, {0x1, &(0x7f0000000ac0)=0x10000, 0x82}, {0x7, &(0x7f0000000b00), 0x82}, {0x0, &(0x7f0000000b40)=0xefe2, 0x2}, {0x1ec, &(0x7f0000000b80), 0x82}, {0x3, &(0x7f0000000bc0)=0x20000000000, 0x82}, {0x3, &(0x7f0000000c00)=0xa7d, 0x2}, {0x8, &(0x7f0000000c40)=0x4f609b04, 0x2}, {0xe, &(0x7f0000000c80)=0xf06b, 0x2}, {0x2, &(0x7f0000000cc0)=0x8, 0x2}, {0xc000000000, &(0x7f0000000d00)=0x4, 0x2}, {0x0, &(0x7f0000000d40)=0x8, 0x82}, {0x1000, &(0x7f0000000d80)=0x1, 0x2}, {0xffffffffffffffc0, &(0x7f0000000dc0)=0x4, 0x2}, {0x3, &(0x7f0000000e00), 0x82}, {0x1d, &(0x7f0000000e40)=0x1ff, 0x2}, {0xac7, &(0x7f0000000e80)=0x1, 0x2}], 0x3b, 0x0, &(0x7f0000001480), 0x0) (rerun: 64)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) (async, rerun: 32)
r0 = syz_io_uring_complete(0x0) (rerun: 32)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x777e0000) (async)
madvise(&(0x7f0000245000/0x1000)=nil, 0x1000, 0xe)

1m30.088647592s ago: executing program 4 (id=410):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000))
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000780)=""/97, &(0x7f0000000940)=""/95})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x368, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x304, 0x5, 0x0, 0x1, [@nested={0x300, 0x124, 0x0, 0x1, [@generic="e52cfdc68ae361504fb4c62b8d9ac5e3dbef730cb2cf00eac243342b13b4b2783e39f91b", @nested={0xc1, 0x95, 0x0, 0x1, [@nested={0x4, 0x151}, @generic="9f04e2e04c5e100d9e58807b0096f337701f7abd7496b5b3ca4cc3c940ca62110404496d613fb09e1b288a498db87682d4352c7b0bdf2c65590cd71a73eb0e7784562bf1f677c65ddb15175cb931cab7a37a62f6e4c9c52327f48dd9952d429bb2a199dc6ddee341de7a400bdd0e6928657e2de5a6d05869fb6773ae19db71894e2711b8864a9b1d9178a18d0e0329ae717bc4892619efe6e32e57f3b248aab32dbf6abddece7fa450210297ee", @typed={0x8, 0xac, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}]}, @typed={0x4, 0x138}, @nested={0x20d, 0x110, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast1}, @generic="11277c096e5b2d7552ca4f113df5e2b9cb2c8a2aedb1ac80f4027491f90f75b0286a2340c5a0f49430ed6ffe7c03ece4148486d5976f0ae19577fbfc7a8d2ca4f725832d", @generic="037e1ee9f7b0a4220dd524d682cc8cbbbdea4835ea4084f3a42b8263beaacbb438155fb626b5605be64b919ff93802c1e5e24c6193c4198fee8b119e011113f8920122e3b4fffc8efce6031d349a3848fc3126e8aeb1d282b47c74f6e6648e6179a4be3bd11a2c4b84623e4129c26e0c4a7b9293fb5b2598cd45c43ab1910968bb4aff9c74ad264076f3134d86dc36948a4daa60062b27cb2fefcf86572d37bcd40a7ed907bb11a98cea45381165f55a6fe6bd1897874865ab2987ae36390edcc29f987d98c534e2", @generic="081b173ca8c2c3138757b83f4768f5a0e07d1416eb8cc8d0fac2af900348d0587fd3d18489f4d44c5fd6f5a340322156f395402e880b7def364e3d08298d018b6e2a2eacfb0fe275314f07c051c112b70523e0dd9a59166bc4358134bb63c4a540d8545f7f7f85d829", @nested={0x4, 0x53}, @generic="95ee4c3a9c6424b78ca9e13d79519fd93d569f0e73125311f414ab609624114982a1df7b89262ede6bdab02ab1886d3197d0ff5dc7fd26fc1baf07a6b0eac5bb9d7109c54efe4c72aae082e9726422bdaeb64f1eb08e9d04ccd4d078542502ee386e0955d63dabb459ad711c1d", @nested={0x4, 0x1e}, @generic="e0e599aa90e954075c89b6"]}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x804)
setns(r1, 0x24020000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x2, 0x0, 0xc, 0x6109, 0xc3}, 0x20)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, 0x0)

1m30.061574482s ago: executing program 4 (id=411):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x401, 0x8001, 0x1, 0x4, 0x9, 0x5, 0xffb, 0x7, 0xb69, 0x80c1, 0x4, 0x80005, 0x3, 0x2, 0x2, 0xfff, 0x3, 0x3, 0x3, 0x1, 0xfffffffa, 0x2, 0x6, 0xe8b, 0x4, 0x7, 0x5, 0x100000, 0xea7, 0x7, 0x70cb, 0xe, 0x2b12, 0x100, 0x6, 0x1bfc, 0x0, 0x7, 0x3ff, 0x6, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xffffffff, 0x7, 0xfffffffb, 0x101, 0xd7, 0x1fa0860a, 0xbd, 0xac, 0x81, 0x0, 0x180000, 0xfefffe00, 0x8b, 0x5, 0x2ac, 0xf4, 0x80000000, 0x2, 0x6, 0x9, 0x4, 0x1060, 0x4009, 0x0, 0x3, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdfffffb, 0x3, 0x1, 0x84, 0x100, 0x5, 0x252, 0x69a2, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x1e, 0x2, 0xd9d, 0xd, 0x40002a2, 0xfffffffd, 0x59f, 0x2, 0x8a, 0x5, 0x37fe, 0x4, 0x1, 0x40, 0x8, 0x80004, 0x10006, 0x411, 0x66cd, 0x8, 0x5, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000008249116d052d6bc98a22cc585341a8f59d6e6730379e744a3079b639516a37a5ed4388f59bb8c3c1f38e757f2baca68f112f2ac2872edad524825c2b80571d4b4bfd26bc9feb1b3448ae7a46547035180aadbe04b91b85", @ANYRES16=r1, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000040)="2ae05a4d", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f6ff"])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0, 0x0)
sendfile(r2, r4, 0x0, 0xa26)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x121095, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00')
fstat(r6, &(0x7f0000000780))
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$peekuser(0x3, r7, 0xa99)

1m29.893120135s ago: executing program 4 (id=413):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6003)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140))
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2}]}, 0x20}}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=<r3=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000180)=r3)
close(r1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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")
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffb000)
creat(&(0x7f0000000000)='./file0\x00', 0xc1)

1m29.64898818s ago: executing program 4 (id=417):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
unshare(0x62040200) (async, rerun: 32)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) (async)
openat$rnullb(0xffffffffffffff9c, 0x0, 0xa6402, 0x0) (async)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (rerun: 32)
accept4$inet6(r1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x6, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x4, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x6, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0x3, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0x1}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0xb, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0x9, 0xf, '\x00', 0x1}, {0x98, 0xfe, 0x4, '\x00', 0x3}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0x7, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3c}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x2, 0xc, 0xb, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0x4}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x0, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.64803518s ago: executing program 33 (id=417):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
unshare(0x62040200) (async, rerun: 32)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) (async)
openat$rnullb(0xffffffffffffff9c, 0x0, 0xa6402, 0x0) (async)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (rerun: 32)
accept4$inet6(r1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x6, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x4, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x6, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0x3, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0x1}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0xb, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0x9, 0xf, '\x00', 0x1}, {0x98, 0xfe, 0x4, '\x00', 0x3}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0x7, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3c}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x2, 0xc, 0xb, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0x4}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x0, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

23.178504472s ago: executing program 2 (id=1207):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0xffffff15, &(0x7f0000000040)="b5a577363120ef7895797a8df662beb545547c43c9ad213115706e37aeeb8a4a30ea1d31"})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00')
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x0, 0x800, 0x8, 0x0})
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="eaf20000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25020000000c0001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000894)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[])
setreuid(0x0, r7)
fcntl$setpipe(r3, 0x407, 0xffffffff80000000)
r13 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)

23.119262263s ago: executing program 2 (id=1209):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x103}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r3, 0x0, 0xfffffe8b, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f00000000c0), 0x4)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, 0x0)
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000d40)={{0x3, 0xffffffff, 0x9, 0x3, 0x8, 0x5}, 0x0, [0x2, 0x6, 0x10001, 0xff, 0xb8, 0x0, 0x15, 0x2, 0x5, 0x3, 0x9, 0xb, 0x5, 0x10, 0x5, 0x1, 0x0, 0xffffff55, 0x10, 0x6, 0x81, 0x100, 0x4a8, 0x1, 0x5, 0x6c, 0xe9af, 0xfffffffd, 0xff, 0x2, 0x8, 0x42, 0x183, 0x8, 0xde17, 0x4, 0x4, 0x5, 0xffff, 0x80000001, 0x8001, 0x5, 0xfffffffd, 0xac, 0xfff, 0x9, 0x6, 0x1, 0x0, 0xa737, 0x37f, 0x4, 0xfffff000, 0x0, 0x23fb, 0x607, 0xc, 0xb5, 0x4, 0x2, 0x4, 0x1, 0x3, 0x7, 0x2, 0x4, 0x40, 0x1, 0x3, 0x8, 0x2, 0x4, 0x8, 0x96, 0x2, 0x9, 0x5, 0xfffffff7, 0x5, 0xb, 0x7624, 0x8, 0x4, 0x4, 0x8, 0x6, 0x40, 0x61, 0x6, 0x3, 0x8000, 0x2, 0x401, 0x5, 0x4, 0x1, 0x626, 0xfffffe00, 0x1, 0x6, 0x8, 0x3, 0xc000, 0x7, 0x80000000, 0x0, 0xe91, 0xfbec, 0x101, 0x5, 0x1, 0x401, 0x44, 0x84e7, 0x832, 0x5, 0x7ff, 0x2, 0xfff, 0x5284b96c, 0xb, 0x1, 0x6, 0x9, 0x7f, 0x0, 0x6, 0x9, 0xe, 0x9, 0x80, 0x2c51, 0x7, 0x5, 0x76863adb, 0x1, 0x4800000, 0x10001, 0x6, 0x9, 0x9, 0x4, 0x3, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5503206e, 0x3, 0x1000, 0x5, 0x10001, 0x1, 0x6, 0x5, 0x8, 0x7, 0x2, 0x2, 0x0, 0x0, 0x4, 0x9, 0x2, 0x2, 0xfff, 0x401, 0x2, 0x3, 0x213c38a6, 0x0, 0x9, 0x800, 0x7fffffff, 0x9, 0x9, 0x9, 0x8, 0x0, 0xf, 0x3ba, 0xffffff58, 0x8a, 0x7, 0x2, 0x8, 0x7, 0x1a0000, 0x5, 0x3, 0x1, 0x6, 0x9, 0xfffeffff, 0x89f, 0x4, 0xfffffffc, 0x3, 0x4, 0xfe59, 0x2, 0x1a, 0x9, 0x5, 0x1, 0x81, 0x10000, 0x280000, 0x4, 0xbd17, 0x400, 0x6, 0x4, 0x9, 0x2, 0x4, 0x800, 0x1fce, 0x1, 0x3, 0x6, 0xd, 0x4, 0x4, 0xfffffff7, 0x3, 0x401, 0x8f9, 0x8, 0x5, 0x101, 0x7fa, 0x101, 0x3, 0x6, 0xf3, 0xea, 0x9, 0x3, 0x4, 0x4, 0x1, 0x4, 0x4, 0x7f, 0x1, 0x0, 0x2, 0x9, 0xe0fc, 0x7, 0x0, 0x0, 0x6, 0x5, 0x8, 0x7f, 0x6, 0x8, 0x4, 0x200, 0xf3, 0x8, 0x9, 0x7, 0x6, 0xa, 0x200, 0x3, 0x2, 0x5d9a, 0x6, 0x1, 0x806b9a7c, 0x2, 0x3, 0x7fff, 0x1359, 0x8000, 0x8, 0x401, 0x4, 0x8000, 0x5, 0x6fe0, 0x0, 0xf, 0x80, 0x5, 0xffffd9ec, 0xb8, 0x5, 0x3, 0x511a1841, 0x9, 0x81, 0x3f4f, 0x0, 0xffffffff, 0xfffffff7, 0x7, 0x10000, 0x2, 0x5, 0x7f, 0x2, 0x9, 0x1, 0x4, 0x3, 0x8, 0xbd, 0xa3, 0x3, 0xdd9, 0x0, 0x5, 0x3fc0000, 0x7f, 0xfffffff7, 0x3, 0x28b8, 0xc, 0x4, 0x7, 0xd6af, 0x1, 0x5, 0x7fffffff, 0x4, 0x2, 0x6, 0x9, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x8, 0x9, 0x33, 0x8001, 0x9, 0x6, 0x80000000, 0x9, 0x0, 0x4dd6, 0x5, 0x8, 0x3ff, 0x8000, 0xf8, 0x7, 0x4, 0x2e, 0xf, 0x7, 0x3, 0x9, 0x200, 0x8, 0x80, 0xc8b6, 0x80, 0xa, 0x9, 0xbf7, 0x8, 0x1, 0x80, 0x5, 0x7, 0x2, 0x8001, 0x6, 0x5, 0xc, 0x1, 0x8000, 0x2, 0x5, 0x2, 0x5, 0x8, 0x1ff, 0x5, 0x7, 0x3ff, 0x1, 0x1, 0x0, 0x10, 0x36d2, 0xf0c00000, 0x8001, 0x1, 0x4, 0x9, 0x0, 0x14c00000, 0xd, 0x200, 0xffffffff, 0x0, 0xa, 0x0, 0x4, 0x9, 0x6, 0x919f, 0x9374, 0x8001, 0x5, 0x0, 0x7, 0x1, 0xbc, 0x7, 0x3ff, 0x80000000, 0x0, 0x1, 0x1, 0x8001, 0x49e5, 0x0, 0x6c, 0xfffffff7, 0x4, 0x6, 0x32f1, 0xdbe, 0x0, 0xfffffffa, 0x200, 0x9, 0x2, 0x5, 0x3, 0x8, 0x2, 0x6, 0x6c, 0x5, 0x20b680ae, 0x7, 0x7, 0x0, 0x400, 0x0, 0x2, 0x9, 0x7, 0x81, 0x5, 0x8000, 0x101, 0x10001, 0x6, 0xe3, 0x7f, 0x2, 0x0, 0x2, 0x2, 0x200, 0x4, 0x6, 0x1, 0x8, 0x8, 0x7f, 0x50e, 0x6, 0x0, 0x9, 0xb, 0xb2, 0x1, 0x0, 0xbf, 0x2e7, 0x8001, 0x2, 0xee8, 0x400, 0x2, 0x6, 0x7fff, 0x1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x5, 0x81bc, 0x6, 0xc, 0x8, 0x2, 0x2e, 0x2, 0xffff, 0x0, 0xea, 0xe3, 0x4, 0x2, 0x9, 0x26731f41, 0xfffffffc, 0x81, 0x81, 0x400, 0x6c0, 0x4, 0x7, 0x1, 0x1, 0x9, 0x89f, 0x8, 0x2, 0xc5, 0x200, 0xf, 0x0, 0x7, 0xd, 0x6, 0x0, 0x80, 0x80000001, 0xc44d, 0x7fff, 0x2, 0x81, 0x8, 0x0, 0xffff0001, 0x3, 0x5c40, 0x4, 0x0, 0x1ff, 0x1, 0x7, 0x10, 0x132, 0x1, 0x4b6, 0x3, 0x9a0, 0xf4a9, 0x6, 0x2, 0x2, 0xc3f, 0x6, 0xfffffff7, 0x80000001, 0x8, 0x5, 0x94, 0x10000, 0x7, 0x8, 0x5, 0x8, 0x5f8, 0x8, 0x1, 0x1, 0x3, 0x401, 0x6, 0x2, 0x0, 0xfb, 0x2, 0x1a2cca5, 0x100, 0xc, 0xff, 0xd, 0x7, 0xf0a, 0x0, 0x6, 0x0, 0x8, 0x7, 0x800, 0x1000, 0x800, 0xfffffd14, 0x0, 0x55718000, 0x6, 0x2, 0xfffffeff, 0x6, 0x8, 0x4, 0x3, 0x137, 0xfffffff7, 0x5, 0xfffffffb, 0x1ff, 0xa, 0x8, 0x2800, 0xff, 0x0, 0x6, 0x80000000, 0x1, 0xb, 0xa, 0x200, 0x4, 0x6, 0xfffffff9, 0x8000, 0x6, 0x6, 0x529, 0x800, 0x8, 0x8, 0x4a, 0x0, 0x3, 0x2, 0x10000, 0xfffffff7, 0x400, 0xfffffffd, 0x80000000, 0x351, 0xb, 0x81, 0x0, 0x5, 0xfffffffe, 0x9, 0x95, 0x7, 0xe40, 0x10000, 0x8, 0xf1, 0x800, 0xc, 0x9, 0xfff, 0x8, 0x4, 0x1, 0x5, 0x7d16, 0xf, 0x0, 0xff, 0x7fffffff, 0x2c, 0x3, 0x6, 0x3ff, 0x7, 0x4, 0x1, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1721, 0x7, 0x5, 0xfff, 0x6, 0x7, 0x1, 0x9, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3ff, 0x80000000, 0x1, 0xbcb, 0x8, 0x3ff, 0x9, 0x8, 0x6, 0xffffffff, 0x8, 0xb644, 0x6, 0x9, 0x0, 0x8, 0x7, 0x3, 0x7ff, 0xb9, 0x7, 0x6, 0xb, 0x2, 0x80000000, 0x8, 0x80000001, 0x3, 0x7, 0x4d745606, 0x401, 0x400000, 0xb1d9, 0x81, 0xc75, 0x1, 0xfffffe00, 0x2, 0x0, 0x400, 0x4, 0x7fff, 0x9, 0x7, 0x5, 0x81, 0x80000001, 0x2, 0x100, 0x5, 0x5, 0x8, 0x40, 0x9, 0x7, 0xec98, 0x91a1, 0x80000000, 0x4, 0x7a07, 0x9, 0x9, 0xffffffb9, 0xe, 0x11a, 0x7, 0x6, 0x8, 0x93, 0x30, 0xe, 0x28b, 0x77, 0x1, 0x8, 0x3, 0x1, 0xfffffff3, 0x100, 0x4, 0xfffffebb, 0x2, 0x8e0e, 0x3, 0xffffff00, 0x9, 0xec, 0x33b, 0x3, 0x0, 0x7, 0x100, 0x5, 0xe3, 0xb1e, 0x0, 0x4, 0x4, 0x0, 0x5, 0x7, 0x1, 0x1ff, 0xf62, 0x1, 0x4, 0x2, 0x2, 0x3, 0x0, 0x2, 0x37, 0x0, 0x0, 0x6, 0x3, 0x7fff, 0x8, 0x1ff, 0x8c9, 0x3, 0x3, 0x400, 0x3, 0xfc3, 0x80, 0xf20, 0x9, 0x3ab, 0x53, 0xc, 0xffffffff, 0x800, 0x86, 0x1, 0x5, 0x9, 0x5, 0x4, 0x3, 0x6, 0x4, 0x8000, 0x4, 0x100, 0x8f97, 0xbcf, 0x6, 0x8, 0x78, 0x6, 0xac, 0x0, 0x1, 0x68, 0x1000, 0x1, 0x1, 0x1, 0x2, 0x4, 0x9, 0x9, 0xe, 0x8, 0x6, 0x5, 0x1, 0x9, 0xf21, 0x3, 0x1, 0x8, 0x8000, 0x9, 0xe, 0x48, 0x1000, 0x1, 0xae, 0x4, 0x401, 0x0, 0xc8, 0x3, 0x1ad820, 0x101, 0x9, 0x7, 0xd, 0xffffb645, 0x2, 0x709, 0x10001, 0x3ff, 0x5, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x8000, 0x100, 0x7, 0x1, 0xc7, 0x1b, 0x6a3, 0x3ff, 0x5, 0x1000, 0x10, 0x7, 0x7ff, 0x37, 0x7fffffff, 0x3, 0x3, 0x1, 0x1c, 0x9, 0x1, 0x3, 0xd, 0xd4da, 0x7, 0x5, 0x2, 0xf, 0xb11, 0x1, 0x3, 0x2, 0x9, 0x8, 0x4, 0x7fff, 0x9, 0x2, 0x3c5, 0x10, 0x10, 0x8, 0x2, 0x8, 0x0, 0x5, 0xe527, 0x7f, 0x539b, 0x4, 0x6, 0x15454870, 0x3, 0x75a, 0x80000000, 0x4, 0x7fff, 0x4, 0x5, 0x1ff, 0x7, 0xe5e, 0x1, 0x7fffffff, 0xb1, 0x0, 0x9, 0xf, 0x16, 0x7, 0x1, 0x8fdb, 0xffffffff, 0x5, 0x7ff, 0x3, 0x7, 0x1, 0xfffffa08, 0x2, 0x8000, 0x5, 0x1, 0x1, 0x7, 0x10, 0x3, 0xd3f, 0x6, 0xffff, 0x10000, 0x0, 0x5, 0x4, 0xa, 0xb9b4, 0x800, 0x518b, 0x9, 0x3dac1e79, 0x5, 0x0, 0x1, 0x2, 0x54, 0x6, 0x2, 0x7f, 0x3, 0x0, 0x4, 0x5, 0xf16, 0x2, 0x3, 0x401, 0x3d3, 0xbb80, 0x9, 0x5, 0xff, 0x9, 0x6, 0x4, 0x5, 0x253f4904, 0x2, 0x7, 0x7, 0x7fffffff, 0x100]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x2804cdc, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0x6, 0x6, 0xbb, 0x2}, {0x4, 0x7, 0x3, 0x2}, {0x9a6a, 0x1, 0x39, 0xc}, {0x5, 0x9, 0x4, 0x1}, {0xff01, 0xd, 0x3, 0x8}, {0x0, 0x1, 0x7, 0x7f}]}, 0x10)
read(r7, &(0x7f0000000040)=""/141, 0x8d)
sendfile(r7, r7, 0x0, 0x7ffff000)

21.2948513s ago: executing program 2 (id=1235):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) (async)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000004c0)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74616e7313bae118282539ef95e2e6", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

21.204730732s ago: executing program 2 (id=1236):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x25]}, 0x8, 0x80000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100027bd780002c9df2501000000000000000c2093d896afb407de8a67268b9ec3140014b4ef6f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0xc1)
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x8000, 0x40480)
ioctl$EVIOCSABS20(r3, 0x40044591, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000680015"], 0x1c}], 0x1}, 0x4000080)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f293bd5b8f7a896692f404278f4f", @ANYRES16=r4, @ANYBLOB="10002cbd7000fedbdf253d00000008000300", @ANYRES32=r6, @ANYBLOB="08005d000100000008005d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
read(r7, &(0x7f0000000240)=""/184, 0xb8)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
rt_sigaction(0x40000022, &(0x7f0000000080)={0x0, 0x80000000, 0x0, {[0x400fff]}}, 0x0, 0x8, &(0x7f0000000180))
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1)
r9 = openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x40106726, &(0x7f00000000c0))
close_range(r0, 0xffffffffffffffff, 0x0)

21.093063544s ago: executing program 2 (id=1237):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
unshare(0x62040200)
socket$can_raw(0x1d, 0x3, 0x1) (async)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

20.989018046s ago: executing program 2 (id=1240):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x5, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x1, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x73, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0xf075, 0x3, 0x7, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x90, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x7, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0x8]}, 0x45c)
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x20, 0x205, 0x70bd2c, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000010)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @random="ed98e6a17953"}, 0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r3, 0xea76b0f406ab3ad3, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008082}, 0x1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r7 = timerfd_create(0x0, 0x0)
timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000400)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x1081, 0x3}, @fd={0x66642a85, 0x0, r7}, @fd}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0x0, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x1d}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f00000003c0)}, 0x1000}], 0x0, 0x0, 0x0})

20.968562916s ago: executing program 34 (id=1240):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x5, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x1, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x73, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0xf075, 0x3, 0x7, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x90, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x7, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0x8]}, 0x45c)
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x20, 0x205, 0x70bd2c, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000010)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @random="ed98e6a17953"}, 0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r3, 0xea76b0f406ab3ad3, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008082}, 0x1)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r7 = timerfd_create(0x0, 0x0)
timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000400)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x1081, 0x3}, @fd={0x66642a85, 0x0, r7}, @fd}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0x0, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x1d}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f00000003c0)}, 0x1000}], 0x0, 0x0, 0x0})

5.069140748s ago: executing program 5 (id=1500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

5.069004248s ago: executing program 5 (id=1501):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00>\x00\t'], 0x34}}, 0x84)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834)

5.013210279s ago: executing program 5 (id=1503):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x41032, 0xffffffffffffffff, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0)

4.901142161s ago: executing program 5 (id=1504):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

4.864299532s ago: executing program 5 (id=1505):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES32], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
close(0x4)

3.353052312s ago: executing program 6 (id=1520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f0000000380)="25d7fe75fa3496bb8e75411fe8ffffffffffffff00000000008c2c54df4cf9dba5d6f74035c5137fe77324ee1d93eef463eda4300be8d693d6ad67f7b579c94087b3ca17c36f7428bc0740a3e0b77004ca5a95e6524eea2380203181361010d704d6d834babc38aaa30f4347f5017afaa5582e4a585b8309a2a35d2f6c3baefca2488f33fe8d24ec6e51fe2de73ef27a1c07002202eef84d9511e8511235e89d5ec54ce7cb8248a633d6efbfeae63ed259df43a4848bf15cbf9272bf65fa4b65f116ff", 0xc3, 0x4000041, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

3.340633032s ago: executing program 5 (id=1521):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0xffe7)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

3.288121473s ago: executing program 6 (id=1522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="98000000070a01040000000000000000010000000c000340fffffffffffffffe6b00074041cb2bff61f54846120c88209cc9205a4cfbf5fd759d5b520fea35c5268a7fc62af1c158e701b5800ba348207e69fd494b4bbf61896cd3156c3db32be25b2ce8ef03a83c169c824ed52e13413df4eaa4f3cdd5f99ca71ca48b1e91538c0e750ce73475cc88a26a00090001"], 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

3.193104826s ago: executing program 6 (id=1523):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000, 0x1140})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.034505068s ago: executing program 6 (id=1525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d03000000000000000013"], 0x30}}, 0x0)

2.94114873s ago: executing program 6 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d0001"], 0xcc}}, 0x0)

2.94103711s ago: executing program 6 (id=1527):
r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa940"], 0x0)

2.165101116s ago: executing program 0 (id=1534):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1)

1.284742584s ago: executing program 0 (id=1536):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
wait4(r0, 0x0, 0x40000000, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200))

973.11923ms ago: executing program 0 (id=1540):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

684.579736ms ago: executing program 1 (id=1547):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
write(r0, &(0x7f0000000100)="4591", 0x2)

617.044667ms ago: executing program 1 (id=1548):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x21, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x814}}}, 0x0)

100.483178ms ago: executing program 1 (id=1549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="3aae1baf930b4569b9ddef9797ffd9350000000066b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f32f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e633d2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdce7d3e851583ba1cf53a90a7f7bce5703de57ce9faca72aa60503d91dc0d82c23ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248fe56246ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8993c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410cc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aafdb20d5570ebf24b30bbc6dfc3f70f85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429ff012edfeffbf34d6e7c7cf4aa73c002000000000000000071f1c2b66458ca4d96b58765363a5d7b8dfe5b768174cdd94fc595c28c1520646ce5b740695e9182ab5d57bbce9df2c03b0c1548ab67aad34ec0a756991619b4de5bdf5e8f1d379bf34ade81f8956dd859b8c66a834b0886b92c1af990e60b545116a351a21e823933fbb36be0ee6d5410362c7e5e21d8b3dafd9e13277f83e3df309433cbf4a608d9faca6ab01586eb38796800136e711d7858d67751cb89e53687ec8b7545c346405c52379879b7f1cb7170f652e0ecf6e7a950729f4395191166547eecebdf352ca5f6fec571e543b82935bda2c45afa8d0b22b9394cd727c7de3b83ff97dd37b0c818af6a0a3d9456526ee46387c32c2e508cd80c2634c560b2199a5de837ebf2517eec4e3e64082a44c38ef8b930f5277d7552a43805ae791f83c7904a83a9ea9ecc1480cbe468c69f23eb3f94006ead0d77252bfbc8cdb4ab2e700d77b19b4335606e643cec3835c0c2d1e7cbcf262ec524c7ac6e90e2e89fb665d60ea9d6", 0x444}, {&(0x7f00000002c0)="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", 0x13d}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

70.418548ms ago: executing program 0 (id=1550):
r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

21.08765ms ago: executing program 1 (id=1551):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)

20.97839ms ago: executing program 0 (id=1552):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)='x/Z', 0x3}], 0x1}}], 0x1, 0x4404c880)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

20.903099ms ago: executing program 1 (id=1553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x24, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x118, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

1.65052ms ago: executing program 0 (id=1554):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0xf8, 0x0)

0s ago: executing program 1 (id=1555):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a0, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000640)}], 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

BR_FAILED_REPLY { source: ESRCH }
[   85.291239][ T1887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:445
[   85.323058][ T1893] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.332600][ T1893] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   85.352433][ T1895] rust_binder: 450: no such ref 3
[   85.365667][ T1895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450
[   85.486575][  T533] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   85.600959][   T36] audit: type=1400 audit(1758577539.983:376): avc:  denied  { read } for  pid=1902 comm="syz.0.454" name="file2" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   85.601319][ T1904] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.623238][   T36] audit: type=1400 audit(1758577539.983:377): avc:  denied  { ioctl } for  pid=1902 comm="syz.0.454" path="/144/file2" dev="tmpfs" ino=789 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   85.628382][ T1904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458
[   85.651330][   T36] audit: type=1400 audit(1758577540.029:378): avc:  denied  { unlink } for  pid=1905 comm="syz.5.455" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   85.688156][  T533] usb 2-1: config 0 has no interfaces?
[   85.695180][  T533] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[   85.704506][  T533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.714088][  T533] usb 2-1: SerialNumber: syz
[   85.722072][  T533] usb 2-1: config 0 descriptor??
[   85.778466][ T1910] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.778499][ T1910] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.946062][ T1890] rust_binder: Write failure EFAULT in pid:356
[   85.953093][   T10] usb 2-1: USB disconnect, device number 18
[   86.085506][  T533] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   86.224533][  T533] usb 6-1: device descriptor read/64, error -71
[   86.481200][  T533] usb 6-1: device descriptor read/64, error -71
[   86.737892][  T533] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   86.759287][   T45] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   86.877100][  T533] usb 6-1: device descriptor read/64, error -71
[   86.920793][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.931834][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[   86.942673][   T45] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[   86.951762][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.960441][   T45] usb 2-1: config 0 descriptor??
[   86.966256][ T1920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.133592][  T533] usb 6-1: device descriptor read/64, error -71
[   87.192625][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.201200][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.220685][   T45] usbhid 2-1:0.0: can't add hid device: -71
[   87.226736][   T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   87.237121][   T45] usb 2-1: USB disconnect, device number 19
[   87.247638][ T1931] rust_binder: Error while translating object.
[   87.247678][ T1931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   87.251468][  T533] usb usb6-port1: attempt power cycle
[   87.254174][ T1931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:472
[   87.282351][ T1933] devpts: called with bogus options
[   87.455689][ T1941] rust_binder: Error in use_page_slow: ESRCH
[   87.455710][ T1941] rust_binder: use_range failure ESRCH
[   87.461743][ T1941] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   87.467273][ T1941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   87.475288][ T1941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:482
[   87.625610][  T533] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   87.658627][  T533] usb 6-1: device descriptor read/8, error -71
[   87.797778][  T533] usb 6-1: device descriptor read/8, error -71
[   88.032009][   T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   88.053399][  T533] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   88.054692][ T1947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   88.060919][ T1947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:484
[   88.060955][   T36] audit: type=1400 audit(1758577542.283:379): avc:  denied  { remount } for  pid=1946 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   88.118601][  T533] usb 6-1: device descriptor read/8, error -71
[   88.193557][   T45] usb 2-1: too many configurations: 211, using maximum allowed: 8
[   88.202506][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   88.210146][   T45] usb 2-1: can't read configurations, error -61
[   88.257636][  T533] usb 6-1: device descriptor read/8, error -71
[   88.352890][   T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   88.385028][  T533] usb usb6-port1: unable to enumerate USB device
[   88.511373][   T36] audit: type=1400 audit(1758577542.703:380): avc:  denied  { listen } for  pid=1965 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.522927][   T45] usb 2-1: too many configurations: 211, using maximum allowed: 8
[   88.550035][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   88.557701][   T45] usb 2-1: can't read configurations, error -61
[   88.562999][ T1970] rust_binder: Write failure EFAULT in pid:507
[   88.564126][   T45] usb usb2-port1: attempt power cycle
[   88.605567][ T1972] rust_binder: Write failure EFAULT in pid:509
[   88.607215][ T1972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.475'.
[   88.757509][   T36] audit: type=1400 audit(1758577542.928:381): avc:  denied  { bind } for  pid=1981 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   88.777299][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   88.777432][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519
[   88.844198][   T36] audit: type=1400 audit(1758577543.012:382): avc:  denied  { mount } for  pid=1989 comm="syz.0.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   88.930461][   T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   88.953339][   T45] usb 2-1: too many configurations: 211, using maximum allowed: 8
[   88.962298][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   88.970307][   T45] usb 2-1: can't read configurations, error -61
[   89.039777][   T36] audit: type=1400 audit(1758577543.199:383): avc:  denied  { execute } for  pid=2001 comm="syz.5.485" path="/dev/rnullb0" dev="devtmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1
[   89.063581][ T2004] tipc: Started in network mode
[   89.068446][ T2004] tipc: Node identity 1, cluster identity 4711
[   89.074685][ T2004] tipc: Node number set to 1
[   89.079347][ T2004] tipc: Cannot configure node identity twice
[   89.123064][   T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   89.145744][   T45] usb 2-1: too many configurations: 211, using maximum allowed: 8
[   89.154656][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   89.162315][  T533] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[   89.169859][   T45] usb 2-1: can't read configurations, error -61
[   89.176222][   T45] usb usb2-port1: unable to enumerate USB device
[   89.195414][ T2014] rust_binder: 2013 RLIMIT_NICE not set
[   89.195899][ T2013] rust_binder: 56: no such ref 2
[   89.206541][ T2013] rust_binder: 56: no such ref 2
[   89.211551][ T2013] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   89.250317][ T2014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[   89.250883][   T36] audit: type=1400 audit(1758577543.395:384): avc:  denied  { connect } for  pid=2012 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   89.359319][  T533] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[   89.367546][  T533] usb 1-1: config 0 has no interface number 0
[   89.373680][  T533] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[   89.384852][  T533] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   89.398256][  T533] usb 1-1: config 0 interface 255 has no altsetting 0
[   89.405076][  T533] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   89.414134][  T533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.422892][  T533] usb 1-1: config 0 descriptor??
[   90.003608][   T36] audit: type=1400 audit(1758577544.097:385): avc:  denied  { getopt } for  pid=2019 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.070990][  T533] asix 1-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   90.081184][  T533] asix 1-1:0.255: probe with driver asix failed with error -61
[   90.288681][   T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   90.450220][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.461161][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.470949][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   90.480026][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.488734][   T45] usb 3-1: config 0 descriptor??
[   90.730290][   T36] audit: type=1400 audit(1758577544.779:386): avc:  denied  { ioctl } for  pid=2029 comm="syz.5.496" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.730584][ T2032] rust_binder: Error while translating object.
[   90.768257][ T2032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   90.774553][ T2032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65
[   90.926684][   T45] logitech 0003:046D:C29C.000F: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[   91.012738][ T2040] /dev/rnullb0: Can't lookup blockdev
[   91.019290][   T36] audit: type=1400 audit(1758577545.050:387): avc:  denied  { write } for  pid=2039 comm="syz.1.498" path="socket:[14210]" dev="sockfs" ino=14210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.020261][ T2044] binder: Unknown parameter 'N�R����V�F3e��+��_�s�㡸
[   91.020261][ T2044] �a�D$���h�^s��Vlo�� bQcp7ra�������}_�
[   91.020261][ T2044] v(X`o�'
[   91.353431][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.366765][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.377189][   T45] logitech 0003:046D:C29C.000F: no inputs found
[   91.393969][   T45] usb 3-1: USB disconnect, device number 18
[   91.485398][   T36] audit: type=1400 audit(1758577545.480:388): avc:  denied  { mounton } for  pid=2060 comm="syz.1.503" path="/125/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   91.986396][ T2069] rust_binder: Write failure EFAULT in pid:252
[   92.082138][ T2096] binder: Unknown parameter 'defcontext01777777777777777777777'
[   92.118114][   T10] usb 1-1: USB disconnect, device number 19
[   92.184466][ T2101] netlink: 'syz.5.509': attribute type 12 has an invalid length.
[   92.207868][  T533] rust_binder: 2060: removing orphan mapping 0:24
[   92.221003][ T2105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.231170][ T2107] tipc: Disabling bearer <eth:syzkaller0>
[   92.240088][ T2114] binder: Unknown parameter '%'
[   92.256622][   T45] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[   92.279008][ T2116] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   92.419882][   T45] usb 3-1: not running at top speed; connect to a high speed hub
[   92.428408][   T45] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   92.439406][   T45] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   92.452332][   T45] usb 3-1: config 1 interface 0 has no altsetting 0
[   92.464202][   T45] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.40
[   92.473305][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   92.473345][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.486085][ T2125] rust_binder: Write failure EFAULT in pid:95
[   92.489103][   T45] usb 3-1: Product: 襂뢞飆劉蚢큎纰퉞瞒鯄셐ḣ芧彙蟮犆눐푕齎蒟䊬粡飏䥑븆
[   92.506848][   T45] usb 3-1: Manufacturer: ℕ칰妙༿笊䚂⒢愯в蘉뇜刴袑탉뎚욱錽趯뀎叒踼삩窡ቖ筞鿍ⲛ嘯뛎韲⵻Ꝯ毡螋縩⤂瘙ꊽ་쪁柕ᮟⳖ괮㜵竷ꎡ骺ᘫ⁦힇䋣볪藆ၣㄪ⁼霊ﷱ꓈슮෱䋹戽
[   92.514632][ T2127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   92.529201][   T45] usb 3-1: SerialNumber: 諂窇㎒불ಫ䱹鐺ͥ欛拙䫔ወꇔ撁駁뾄鮶㿧﫠퐛뫖驪〠半뵙ᑩ֚话銥맥ᾚ퉘踲╽얷ᘔ뻗◲空ȝ넙಑䜴꯲幷긎洊웺﬋ྲ쨼ႇ⢔쩾늬Ⅾᨦ夹ᦝ뽰ᦣ㜩읐없䞱멂ᗆ艷࡫幌ޭ䓍頂漺䜅눗诸鼍앙灴贼毇됥⃓䍂ቛ셈豸㿀럴ㅓ
[   92.538907][ T2127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:97
[   92.570977][ T2071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   92.625320][ T2131] rust_binder: Write failure EFAULT in pid:398
[   92.674797][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.691995][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.702456][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   92.711562][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.720566][   T10] usb 1-1: config 0 descriptor??
[   92.855534][  T425] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   92.994554][  T425] usb 6-1: device descriptor read/64, error -71
[   93.021535][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.030135][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.039279][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.047936][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.061729][   T45] usbhid 3-1:1.0: can't add hid device: -71
[   93.067702][   T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   93.077186][   T45] usb 3-1: USB disconnect, device number 19
[   93.155673][   T10] arvo 0003:1E7D:30D4.0010: item fetching failed at offset 5/7
[   93.163423][   T10] arvo 0003:1E7D:30D4.0010: parse failed
[   93.169318][   T10] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -22
[   93.251287][  T425] usb 6-1: device descriptor read/64, error -71
[   93.466606][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   93.466626][   T36] audit: type=1400 audit(1758577547.341:399): avc:  denied  { associate } for  pid=2139 comm="syz.1.524" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   93.496001][   T36] audit: type=1400 audit(1758577547.360:400): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   93.507956][  T425] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[   93.520047][   T36] audit: type=1400 audit(1758577547.360:401): avc:  denied  { open } for  pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   93.551232][   T36] audit: type=1400 audit(1758577547.360:402): avc:  denied  { ioctl } for  pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   93.576613][   T36] audit: type=1400 audit(1758577547.369:403): avc:  denied  { create } for  pid=2144 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   93.597795][   T36] audit: type=1400 audit(1758577547.397:404): avc:  denied  { ioctl } for  pid=2128 comm="syz.5.519" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.625554][   T36] audit: type=1400 audit(1758577547.406:405): avc:  denied  { create } for  pid=2146 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   93.684784][   T45] usb 1-1: USB disconnect, device number 20
[   93.694785][   T36] audit: type=1400 audit(1758577547.406:406): avc:  denied  { write } for  pid=2146 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   93.712708][  T425] usb 6-1: device descriptor read/64, error -71
[   93.719847][   T36] audit: type=1400 audit(1758577547.425:407): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   93.755766][   T36] audit: type=1400 audit(1758577547.425:408): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   93.796217][ T2155] can0: slcan on ptm0.
[   93.864496][ T2155] can0 (unregistered): slcan off ptm0.
[   94.000266][  T425] usb 6-1: device descriptor read/64, error -71
[   94.128736][  T425] usb usb6-port1: attempt power cycle
[   94.331451][  T533] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   94.491925][  T425] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   94.495393][  T533] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.509476][  T533] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.516665][  T425] usb 6-1: device descriptor read/8, error -71
[   94.522025][  T533] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   94.533583][  T533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   94.541630][   T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   94.549250][  T533] usb 3-1: SerialNumber: syz
[   94.665681][  T425] usb 6-1: device descriptor read/8, error -71
[   94.708235][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.719268][   T45] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[   94.728425][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.738334][   T45] usb 1-1: config 0 descriptor??
[   94.775767][  T533] usb 3-1: 0:2 : does not exist
[   94.782603][  T533] usb 3-1: unit 4 not found!
[   94.793340][  T533] usb 3-1: USB disconnect, device number 20
[   94.873684][ T2172] netlink: 'syz.1.535': attribute type 30 has an invalid length.
[   94.878294][ T1748] udevd[1748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   94.919826][  T425] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[   94.964028][  T425] usb 6-1: device descriptor read/8, error -71
[   95.104249][  T425] usb 6-1: device descriptor read/8, error -71
[   95.181483][   T45] elecom 0003:056E:00FE.0011: hidraw0: USB HID v0.04 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0
[   95.208457][   T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   95.240547][  T425] usb usb6-port1: unable to enumerate USB device
[   95.368892][   T65] usb 2-1: Using ep0 maxpacket: 16
[   95.390895][   T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.415239][  T425] usb 1-1: USB disconnect, device number 21
[   95.416110][   T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.444878][   T65] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   95.454010][   T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.466711][   T65] usb 2-1: config 0 descriptor??
[   95.710568][ T2186] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[   95.925615][   T65] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[   96.171018][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   96.195815][  T425] usb 2-1: USB disconnect, device number 24
[   96.248969][ T2201] fido_id[2201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   96.330517][ T2204] netlink: 'syz.5.545': attribute type 4 has an invalid length.
[   96.348568][   T10] usb 3-1: device descriptor read/64, error -71
[   96.362156][ T2204] netlink: 'syz.5.545': attribute type 2 has an invalid length.
[   96.414336][ T2207] can0: slcan on ptm0.
[   96.472934][ T2207] can0 (unregistered): slcan off ptm0.
[   96.511051][ T2209] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[   96.511080][ T2209] rust_binder: Error while translating object.
[   96.532859][ T2209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   96.543703][ T2209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[   96.620232][   T10] usb 3-1: device descriptor read/64, error -71
[   96.821031][ T2214] rust_binder: Error while translating object.
[   96.821065][ T2214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   96.827390][ T2214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434
[   96.877201][ T2216] pim6reg1: entered promiscuous mode
[   96.892121][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   96.892530][ T2216] pim6reg1: entered allmulticast mode
[   96.913865][ T2216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[   97.037386][   T10] usb 3-1: device descriptor read/64, error -71
[   97.198211][ T2204] 9pnet_fd: p9_fd_create_tcp (2204): problem connecting socket to 127.0.0.1
[   97.283631][ T2232] rust_binder: Write failure EFAULT in pid:107
[   97.294015][   T10] usb 3-1: device descriptor read/64, error -71
[   97.422833][   T10] usb usb3-port1: attempt power cycle
[   97.508364][ T2246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:550
[   97.684050][   T45] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   97.807436][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   97.837369][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.851405][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.861940][   T10] usb 3-1: device descriptor read/8, error -71
[   97.872437][   T45] usb 6-1: Using ep0 maxpacket: 16
[   97.890242][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.912040][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.934803][   T45] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   97.950383][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.962926][   T45] usb 6-1: config 0 descriptor??
[   98.004853][   T10] usb 3-1: device descriptor read/8, error -71
[   98.085631][  T559] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   98.123914][ T2277] rust_binder: 573: no such ref 3
[   98.130021][ T2277] rust_binder: 573: no such ref 1
[   98.135112][ T2277] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   98.142293][ T2277] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   98.149391][ T2277] rust_binder: 573: no such ref 0
[   98.256661][  T559] usb 2-1: Using ep0 maxpacket: 8
[   98.264442][  T559] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.275406][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   98.283031][  T559] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.293022][  T559] usb 2-1: config 0 interface 0 has no altsetting 0
[   98.299761][  T559] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[   98.308821][  T559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.318858][  T559] usb 2-1: config 0 descriptor??
[   98.327589][   T10] usb 3-1: device descriptor read/8, error -71
[   98.417050][   T45] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[   98.459825][  T336] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   98.475515][   T10] usb 3-1: device descriptor read/8, error -71
[   98.544156][  T559] usbhid 2-1:0.0: can't add hid device: -71
[   98.558817][  T559] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   98.568516][  T559] usb 2-1: USB disconnect, device number 25
[   98.599399][   T10] usb usb3-port1: unable to enumerate USB device
[   98.620278][  T336] usb 1-1: device descriptor read/64, error -71
[   98.635760][   T10] usb 6-1: USB disconnect, device number 11
[   98.876916][  T336] usb 1-1: device descriptor read/64, error -71
[   98.995058][   T36] kauditd_printk_skb: 777 callbacks suppressed
[   98.995077][   T36] audit: type=1400 audit(1758577552.512:1186): avc:  denied  { ioctl } for  pid=2278 comm="syz.0.568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.026229][   T36] audit: type=1400 audit(1758577552.512:1187): avc:  denied  { ioctl } for  pid=2278 comm="syz.0.568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.069878][   T36] audit: type=1400 audit(1758577552.577:1188): avc:  denied  { ioctl } for  pid=2278 comm="syz.0.568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.105557][   T36] audit: type=1400 audit(1758577552.605:1189): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.129618][   T36] audit: type=1400 audit(1758577552.605:1190): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.131488][ T2284] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   99.156765][  T336] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   99.171171][   T36] audit: type=1400 audit(1758577552.605:1191): avc:  denied  { ioctl } for  pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.173703][ T2284] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   99.230689][   T36] audit: type=1400 audit(1758577552.633:1192): avc:  denied  { remount } for  pid=2283 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   99.294600][   T36] audit: type=1400 audit(1758577552.670:1193): avc:  denied  { remount } for  pid=2283 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   99.352584][   T36] audit: type=1400 audit(1758577552.699:1194): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.377075][  T336] usb 1-1: device descriptor read/64, error -71
[   99.385528][   T36] audit: type=1400 audit(1758577552.699:1195): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.456158][ T2292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'.
[   99.466762][ T2292] __vm_enough_memory: 55 callbacks suppressed
[   99.466782][ T2292] __vm_enough_memory: pid: 2292, comm: syz.2.572, bytes: 18014402804453376 not enough memory for the allocation
[   99.596080][ T2300] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   99.605542][ T2300] rust_binder: Write failure EFAULT in pid:290
[   99.636270][  T336] usb 1-1: device descriptor read/64, error -71
[   99.718129][ T2304] rust_binder: Error while translating object.
[   99.718172][ T2304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.724588][ T2304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292
[   99.775392][  T336] usb usb1-port1: attempt power cycle
[  100.149656][  T336] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  100.173504][  T336] usb 1-1: device descriptor read/8, error -71
[  100.312953][  T336] usb 1-1: device descriptor read/8, error -71
[  100.354664][ T2306] input: syz1 as /devices/virtual/input/input16
[  100.367726][ T2306] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614)
[  100.367751][ T2306] rust_binder: Error while translating object.
[  100.380436][ T2306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  100.387295][ T2306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478
[  100.566743][  T336] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  100.610551][  T336] usb 1-1: device descriptor read/8, error -71
[  100.624102][ T2310] rust_binder: Write failure EINVAL in pid:296
[  100.751366][  T336] usb 1-1: device descriptor read/8, error -71
[  100.882587][  T336] usb usb1-port1: unable to enumerate USB device
[  101.144286][  T336] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  101.165824][ T2328] netlink: 88 bytes leftover after parsing attributes in process `syz.1.585'.
[  101.174772][ T2328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[  101.304704][  T336] usb 6-1: Using ep0 maxpacket: 16
[  101.312168][  T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.323329][  T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.333540][  T336] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  101.342719][  T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.352277][  T336] usb 6-1: config 0 descriptor??
[  101.448664][ T2334] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  101.501969][ T2336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'.
[  101.513677][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[  101.582891][ T2337] overlayfs: failed to resolve './file0': -2
[  101.796867][  T336] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  101.892940][   T65] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  102.013174][   T45] usb 6-1: USB disconnect, device number 12
[  102.070638][   T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.092373][   T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.113973][   T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  102.128364][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  102.138745][   T65] usb 3-1: SerialNumber: syz
[  102.368251][   T65] usb 3-1: 0:2 : does not exist
[  102.385024][   T65] usb 3-1: USB disconnect, device number 25
[  102.433939][ T1748] udevd[1748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.032692][ T2370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2370 comm=syz.2.600
[  103.080140][  T559] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  103.167428][ T2379] rust_binder: 309: no such ref 3
[  103.172575][ T2379] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  103.179674][ T2379] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  103.186773][ T2379] rust_binder: Write failure EFAULT in pid:309
[  103.256432][  T559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.276024][  T559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.289746][  T559] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  103.300440][  T559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  103.309653][  T559] usb 6-1: SerialNumber: syz
[  103.339827][  T559] usb 6-1: 0:2 : does not exist
[  103.732526][  T884] Bluetooth: hci0: command 0x1003 tx timeout
[  103.738652][  T472] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  104.352877][   T36] kauditd_printk_skb: 1017 callbacks suppressed
[  104.352898][   T36] audit: type=1400 audit(1758577557.504:2213): avc:  denied  { read write } for  pid=2418 comm="syz.0.617" name="binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  104.395807][  T336] usb 6-1: USB disconnect, device number 13
[  104.426958][   T36] audit: type=1400 audit(1758577557.523:2214): avc:  denied  { read write open } for  pid=2418 comm="syz.0.617" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  104.498262][   T36] audit: type=1400 audit(1758577557.551:2215): avc:  denied  { read write } for  pid=1782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.577501][   T36] audit: type=1400 audit(1758577557.551:2216): avc:  denied  { read write open } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.630418][   T36] audit: type=1400 audit(1758577557.551:2217): avc:  denied  { ioctl } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.667002][   T36] audit: type=1400 audit(1758577557.570:2218): avc:  denied  { read write } for  pid=2418 comm="syz.0.617" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  104.687412][ T2430] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  104.696207][   T36] audit: type=1400 audit(1758577557.570:2219): avc:  denied  { read write open } for  pid=2418 comm="syz.0.617" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  104.752632][   T36] audit: type=1400 audit(1758577557.579:2220): avc:  denied  { ioctl } for  pid=2418 comm="syz.0.617" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  104.838494][   T36] audit: type=1400 audit(1758577557.589:2221): avc:  denied  { ioctl } for  pid=2418 comm="syz.0.617" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  104.867484][ T2448] audit: audit_backlog=65 > audit_backlog_limit=64
[  104.920245][ T2446] fuse: Bad value for 'fd'
[  105.205675][ T2466] netlink: 76 bytes leftover after parsing attributes in process `syz.2.627'.
[  105.417937][ T2483] netlink: 104 bytes leftover after parsing attributes in process `syz.0.634'.
[  105.475846][  T336] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  105.646939][  T336] usb 6-1: Using ep0 maxpacket: 16
[  105.658672][  T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.670151][  T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.691896][  T336] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  105.701921][  T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.712877][  T336] usb 6-1: config 0 descriptor??
[  105.914344][   T65] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  106.074764][   T65] usb 1-1: Using ep0 maxpacket: 8
[  106.097854][   T65] usb 1-1: unable to get BOS descriptor or descriptor too short
[  106.119433][   T65] usb 1-1: config 6 has an invalid interface number: 248 but max is 0
[  106.127670][   T65] usb 1-1: config 6 has no interface number 0
[  106.145101][   T65] usb 1-1: config 6 interface 248 has no altsetting 0
[  106.157212][   T65] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  106.163918][  T336] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  106.178214][   T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.189602][   T65] usb 1-1: Product: syz
[  106.207883][   T65] usb 1-1: Manufacturer: syz
[  106.218649][   T65] usb 1-1: SerialNumber: syz
[  106.322354][ T2514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'.
[  106.340901][ T2515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'.
[  106.401943][   T45] usb 6-1: USB disconnect, device number 14
[  106.506227][   T65] ums-karma 1-1:6.248: USB Mass Storage device detected
[  106.567729][   T65] usb 1-1: USB disconnect, device number 26
[  106.706884][  T559] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  106.741546][  T559] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.175505][ T2559] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  107.228439][ T2565] rust_binder: Error in use_page_slow: ESRCH
[  107.228465][ T2565] rust_binder: use_range failure ESRCH
[  107.236422][ T2566] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  107.243003][ T2566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  107.252410][ T2565] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  107.256524][ T2566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:359
[  107.263171][ T2565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  107.278984][ T2565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:359
[  107.331814][ T2569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[  107.550706][   T45] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  107.725966][   T45] usb 6-1: config index 0 descriptor too short (expected 1051, got 27)
[  107.734797][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  107.746376][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  107.760508][   T45] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[  107.770067][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.782376][   T45] usb 6-1: Product: syz
[  107.790490][   T45] usb 6-1: Manufacturer: syz
[  107.795119][   T45] usb 6-1: SerialNumber: syz
[  107.807466][   T45] usb 6-1: config 0 descriptor??
[  107.930628][ T2592] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.058259][   T45] usb 6-1: USB disconnect, device number 15
[  108.236642][ T2601] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 4294967272. macoff=96
[  108.360877][ T2606] rust_binder: Error while translating object.
[  108.360932][ T2606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  108.367205][ T2606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:374
[  108.611211][ T2624] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  108.628412][ T2625] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  108.737923][  T559] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  108.898298][  T559] usb 3-1: Using ep0 maxpacket: 16
[  108.911355][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.924643][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.941197][  T336] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  108.949215][  T559] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  108.962852][  T336] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.973330][  T559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.986918][  T559] usb 3-1: config 0 descriptor??
[  109.111018][ T2644] fido_id[2644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.429713][  T559] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  109.443734][   T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  109.607721][   T65] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.618234][   T65] usb 1-1: config 0 interface 0 has no altsetting 0
[  109.624914][   T65] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  109.634121][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.645118][   T65] usb 1-1: config 0 descriptor??
[  109.653364][  T559] usb 3-1: USB disconnect, device number 26
[  109.879835][   T36] kauditd_printk_skb: 718 callbacks suppressed
[  109.879854][   T36] audit: type=1400 audit(1758577562.675:2914): avc:  denied  { ioctl } for  pid=2650 comm="syz.0.688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.910908][   T36] audit: type=1400 audit(1758577562.675:2915): avc:  denied  { ioctl } for  pid=2650 comm="syz.0.688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.095080][   T36] audit: type=1400 audit(1758577562.881:2916): avc:  denied  { ioctl } for  pid=2650 comm="syz.0.688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.120245][   T36] audit: type=1400 audit(1758577562.881:2917): avc:  denied  { ioctl } for  pid=2650 comm="syz.0.688" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.121651][   T65] ryos 0003:1E7D:3138.0019: collection stack underflow
[  110.154152][   T65] ryos 0003:1E7D:3138.0019: item 0 4 0 12 parsing failed
[  110.162057][   T65] ryos 0003:1E7D:3138.0019: parse failed
[  110.167750][   T65] ryos 0003:1E7D:3138.0019: probe with driver ryos failed with error -22
[  110.271707][   T36] audit: type=1400 audit(1758577563.049:2918): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.321818][   T36] audit: type=1400 audit(1758577563.049:2919): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.342202][ T2651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  110.367484][   T36] audit: type=1400 audit(1758577563.049:2920): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.386184][ T2651] rust_binder: 652: no such ref 3
[  110.409463][ T2651] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  110.427682][ T2651] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  110.449099][ T2651] rust_binder: Write failure EFAULT in pid:652
[  110.452111][  T559] usb 1-1: USB disconnect, device number 27
[  110.466907][   T36] audit: type=1400 audit(1758577563.077:2921): avc:  denied  { read } for  pid=2661 comm="syz.2.692" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.525693][ T2664] netlink: 'syz.2.693': attribute type 12 has an invalid length.
[  110.537135][   T36] audit: type=1400 audit(1758577563.077:2922): avc:  denied  { read open } for  pid=2661 comm="syz.2.692" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.588565][ T2664] rust_binder: Read failure Err(EAGAIN) in pid:383
[  110.596498][   T36] audit: type=1400 audit(1758577563.086:2923): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.596850][ T2664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383
[  110.649253][ T2670] can0: slcan on ptm0.
[  110.724421][ T2670] can0 (unregistered): slcan off ptm0.
[  110.733549][ T2675] netlink: 'syz.5.695': attribute type 4 has an invalid length.
[  110.771539][ T2682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.698'.
[  110.782604][ T2670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143
[  110.966411][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  111.028751][ T2696] bridge_slave_1: left allmulticast mode
[  111.056308][ T2696] bridge_slave_1: left promiscuous mode
[  111.072059][ T2696] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.091291][ T2696] bridge_slave_0: left allmulticast mode
[  111.101637][ T2696] bridge_slave_0: left promiscuous mode
[  111.105724][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[  111.121342][ T2701] tmpfs: Unknown parameter ')�I���v��Fض��܊�j���4�:T����**~�n��+�P���!V|s9�cXd��]O�Ov�s��Ǣ���߁4�X��j��e�;���L�~|��c0���G��7����
[  111.121342][ T2701] ���Ө����dəD&�b}!Z+��u5v�l����B��r^�:5A�����y'
[  111.161448][ T2696] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.231496][  T293] Bluetooth: hci1: Frame reassembly failed (-84)
[  111.403224][ T2713] x_tables: duplicate underflow at hook 1
[  111.456610][ T2716] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  111.458908][ T2715] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  112.012853][ T2723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160
[  112.829659][ T2772] tipc: Started in network mode
[  112.843696][ T2772] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  112.852894][ T2772] tipc: Enabled bearer <udp:syz1>, priority 10
[  113.163398][ T2783] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 200, size: 226)
[  113.163425][ T2783] rust_binder: Error while translating object.
[  113.174869][ T2783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  113.176948][ T2782] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  113.182368][ T2783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177
[  113.281664][ T2785] rust_binder: Error in use_page_slow: ESRCH
[  113.290885][ T2785] rust_binder: use_range failure ESRCH
[  113.297026][ T2785] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  113.302541][ T2785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  113.310652][ T2785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:181
[  113.326100][  T471] Bluetooth: hci0: command 0x1003 tx timeout
[  113.326110][  T472] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  113.400986][  T884] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  113.407180][  T472] Bluetooth: hci1: command 0x1003 tx timeout
[  113.691523][ T2804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'.
[  113.743401][ T2282] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  113.762689][ T2811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  113.762725][ T2811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:191
[  113.807133][ T2813] rust_binder: Read failure Err(EAGAIN) in pid:191
[  113.914582][ T2282] usb 1-1: Using ep0 maxpacket: 16
[  113.940602][ T2282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.955855][ T2282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.976121][ T2282] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  114.009475][ T2282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.042694][  T559] tipc: Node number set to 4269801494
[  114.051896][ T2282] usb 1-1: config 0 descriptor??
[  114.225357][ T2840] netlink: 'syz.2.748': attribute type 3 has an invalid length.
[  114.440500][ T2852] sit0: entered promiscuous mode
[  114.469664][ T2852] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[  114.497756][ T2852] netlink: 1 bytes leftover after parsing attributes in process `syz.2.752'.
[  114.506756][ T2282] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  114.551127][ T2852] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  114.568081][ T2852] rust_binder: Write failure EINVAL in pid:401
[  114.717817][ T2282] usb 1-1: USB disconnect, device number 28
[  114.992734][ T2879] rust_binder: Write failure EFAULT in pid:409
[  115.261936][   T45] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  115.276637][   T36] kauditd_printk_skb: 624 callbacks suppressed
[  115.276655][   T36] audit: type=1400 audit(1758577567.733:3548): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.308090][   T36] audit: type=1400 audit(1758577567.733:3549): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.333099][   T36] audit: type=1400 audit(1758577567.733:3550): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.358758][   T36] audit: type=1400 audit(1758577567.808:3551): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.401239][   T36] audit: type=1400 audit(1758577567.846:3552): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.425582][   T36] audit: type=1400 audit(1758577567.846:3553): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.451779][   T36] audit: type=1400 audit(1758577567.846:3554): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.482350][   T36] audit: type=1400 audit(1758577567.892:3555): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.507703][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  115.519643][   T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  115.540624][   T36] audit: type=1400 audit(1758577567.920:3556): avc:  denied  { create } for  pid=2883 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  115.561074][   T45] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  115.570972][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.579820][   T36] audit: type=1400 audit(1758577567.920:3557): avc:  denied  { ioctl } for  pid=2878 comm="syz.2.759" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.608528][   T45] usb 3-1: config 0 descriptor??
[  115.615128][ T2879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  115.768414][ T2900] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.072313][   T45] usbhid 3-1:0.0: can't add hid device: -71
[  116.095203][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  116.112696][   T45] usb 3-1: USB disconnect, device number 27
[  116.203170][ T2282] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  116.374244][ T2282] usb 6-1: Using ep0 maxpacket: 16
[  116.383615][ T2282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.394748][ T2282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.404838][ T2282] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  116.414037][ T2282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.424274][ T2282] usb 6-1: config 0 descriptor??
[  116.872861][ T2282] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  116.973159][  T559] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  117.085780][   T45] usb 6-1: USB disconnect, device number 16
[  117.123053][  T559] usb 3-1: device descriptor read/64, error -71
[  117.379569][  T559] usb 3-1: device descriptor read/64, error -71
[  117.461253][ T2971] overlayfs: failed to clone upperpath
[  117.636267][  T559] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  117.722333][ T2978] rust_binder: Write failure EFAULT in pid:232
[  117.775326][  T559] usb 3-1: device descriptor read/64, error -71
[  117.900663][   T45] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  117.915998][   T45] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  118.074803][  T559] usb 3-1: device descriptor read/64, error -71
[  118.192704][  T559] usb usb3-port1: attempt power cycle
[  118.513282][  T336] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  118.556051][  T559] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  118.579407][  T559] usb 3-1: device descriptor read/8, error -71
[  118.673688][  T336] usb 6-1: Using ep0 maxpacket: 32
[  118.681017][  T336] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  118.689981][  T336] usb 6-1: config 0 has no interface number 0
[  118.699193][  T336] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  118.708315][  T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.716331][  T336] usb 6-1: Product: syz
[  118.720573][  T336] usb 6-1: Manufacturer: syz
[  118.725223][  T336] usb 6-1: SerialNumber: syz
[  118.733934][  T336] usb 6-1: config 0 descriptor??
[  118.739739][  T559] usb 3-1: device descriptor read/8, error -71
[  118.748106][  T336] smsc95xx v2.0.0
[  118.807427][ T3005] netlink: 1504 bytes leftover after parsing attributes in process `syz.1.803'.
[  118.869095][ T3006] netlink: 'syz.0.802': attribute type 11 has an invalid length.
[  118.994561][  T559] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  119.028031][  T559] usb 3-1: device descriptor read/8, error -71
[  119.168748][  T559] usb 3-1: device descriptor read/8, error -71
[  119.183234][  T336] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  119.194062][  T336] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  119.283430][  T559] usb usb3-port1: unable to enumerate USB device
[  119.924489][ T3036] fuse: Bad value for 'fd'
[  119.930414][ T3036] overlayfs: failed to resolve 'uid<00000000000000000000': -2
[  120.069990][  T336] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  120.100700][  T336] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  120.113290][  T336] usb 6-1: USB disconnect, device number 17
[  120.205957][ T3052] rust_binder: Write failure EFAULT in pid:423
[  120.523946][  T559] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  120.645176][   T36] kauditd_printk_skb: 1257 callbacks suppressed
[  120.645196][   T36] audit: type=1400 audit(1758577572.745:4815): avc:  denied  { map } for  pid=3064 comm="syz.5.824" path="/proc/sys/net/ipv4/tcp_wmem" dev="proc" ino=19731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[  120.705004][   T36] audit: type=1400 audit(1758577572.792:4816): avc:  denied  { read write } for  pid=1782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.737755][   T36] audit: type=1400 audit(1758577572.792:4817): avc:  denied  { read write open } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.737855][  T559] usb 3-1: Using ep0 maxpacket: 16
[  120.763195][   T36] audit: type=1400 audit(1758577572.792:4818): avc:  denied  { ioctl } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.806198][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.818447][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.844823][  T559] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  120.855516][   T36] audit: type=1400 audit(1758577572.895:4819): avc:  denied  { create } for  pid=3066 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  120.864081][  T559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.883250][   T36] audit: type=1400 audit(1758577572.895:4820): avc:  denied  { create } for  pid=3066 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  120.916404][  T559] usb 3-1: config 0 descriptor??
[  120.923916][   T36] audit: type=1400 audit(1758577572.895:4821): avc:  denied  { setopt } for  pid=3066 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  120.983838][   T36] audit: type=1400 audit(1758577572.895:4822): avc:  denied  { ioctl } for  pid=3066 comm="syz.5.825" path="socket:[19738]" dev="sockfs" ino=19738 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  121.022174][ T3078] futex_wake_op: syz.0.829 tries to shift op by -1; fix this program
[  121.036977][   T36] audit: type=1400 audit(1758577572.895:4823): avc:  denied  { write } for  pid=3066 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  121.062499][   T36] audit: type=1400 audit(1758577572.895:4824): avc:  denied  { ioctl } for  pid=3053 comm="syz.2.820" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.317229][ T3096] syz.5.835 uses obsolete (PF_INET,SOCK_PACKET)
[  121.380612][  T559] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  121.434073][ T3096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  121.434106][ T3096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:259
[  121.611603][  T559] usb 3-1: USB disconnect, device number 32
[  121.998177][ T3118] netlink: 'syz.0.841': attribute type 27 has an invalid length.
[  122.032171][   T65] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  122.181699][   T65] usb 6-1: device descriptor read/64, error -71
[  122.438430][   T65] usb 6-1: device descriptor read/64, error -71
[  122.581783][ T3145] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  122.582378][ T3145] rust_binder: 436: no such ref 1
[  122.695067][   T65] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  122.834452][ T3155] random: crng reseeded on system resumption
[  122.844812][   T65] usb 6-1: device descriptor read/64, error -71
[  123.006884][ T3162] rust_binder: Error while translating object.
[  123.006918][ T3162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  123.013144][ T3162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447
[  123.112223][   T65] usb 6-1: device descriptor read/64, error -71
[  123.251231][   T65] usb usb6-port1: attempt power cycle
[  123.614856][   T65] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  123.649751][   T65] usb 6-1: device descriptor read/8, error -71
[  123.666866][ T3183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  123.666903][ T3183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:463
[  123.799428][   T65] usb 6-1: device descriptor read/8, error -71
[  123.976287][ T3194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.064117][   T65] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  124.085482][  T336] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  124.088581][   T65] usb 6-1: device descriptor read/8, error -71
[  124.237246][   T65] usb 6-1: device descriptor read/8, error -71
[  124.248510][  T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.258729][  T336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.269643][  T336] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  124.279038][  T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  124.287050][  T336] usb 3-1: SerialNumber: syz
[  124.352933][   T65] usb usb6-port1: unable to enumerate USB device
[  124.518687][  T336] usb 3-1: 0:2 : does not exist
[  124.539326][  T336] usb 3-1: USB disconnect, device number 33
[  124.674707][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'.
[  124.713792][ T2477] udevd[2477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  124.748992][ T3217] overlayfs: failed to clone upperpath
[  124.760813][ T3218] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238)
[  124.760837][ T3218] rust_binder: Error while translating object.
[  124.772898][ T3218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  124.779264][ T3218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481
[  124.837634][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  124.917932][ T3223] rust_binder: 3223 RLIMIT_NICE not set
[  124.919730][ T3223] rust_binder: Read failure Err(EFAULT) in pid:484
[  125.433055][   T65] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  125.454437][ T2282] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  125.604191][   T65] usb 6-1: Using ep0 maxpacket: 16
[  125.611862][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.622811][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.632619][   T65] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  125.639403][ T2282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.641692][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.654868][ T2282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.663760][   T65] usb 6-1: config 0 descriptor??
[  125.670707][ T2282] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  125.686273][ T2282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.696613][ T2282] usb 3-1: config 0 descriptor??
[  126.041102][   T36] kauditd_printk_skb: 681 callbacks suppressed
[  126.041121][   T36] audit: type=1400 audit(1758577577.785:5506): avc:  denied  { mounton } for  pid=3240 comm="syz.1.886" path="/286/file0" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  126.117304][   T36] audit: type=1400 audit(1758577577.859:5507): avc:  denied  { ioctl } for  pid=3226 comm="syz.5.881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.144063][   T36] audit: type=1400 audit(1758577577.869:5508): avc:  denied  { ioctl } for  pid=3226 comm="syz.5.881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.171141][   T65] hid-multitouch 0003:1FD2:6007.001E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  126.219906][   T36] audit: type=1400 audit(1758577577.906:5509): avc:  denied  { ioctl } for  pid=3230 comm="syz.2.882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.266703][   T36] audit: type=1400 audit(1758577577.906:5510): avc:  denied  { ioctl } for  pid=3230 comm="syz.2.882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.313156][   T36] audit: type=1400 audit(1758577578.046:5511): avc:  denied  { create } for  pid=3252 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  126.335327][   T36] audit: type=1400 audit(1758577578.046:5512): avc:  denied  { write } for  pid=3252 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  126.356654][   T36] audit: type=1400 audit(1758577578.046:5513): avc:  denied  { nlmsg_write } for  pid=3252 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  126.393899][   T45] usb 6-1: USB disconnect, device number 22
[  126.435081][   T36] audit: type=1400 audit(1758577578.112:5514): avc:  denied  { create } for  pid=3254 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  126.497405][   T36] audit: type=1400 audit(1758577578.112:5515): avc:  denied  { write } for  pid=3254 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  126.606873][ T2282] hid-led 0003:27B8:01ED.001F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0
[  126.633386][ T2282] hid-led 0003:27B8:01ED.001F: ThingM blink(1) v1 initialized
[  126.898749][ T2282] usb 3-1: USB disconnect, device number 34
[  127.175563][ T3280] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  127.175592][ T3280] rust_binder: Error while translating object.
[  127.186400][ T3280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  127.192626][ T3280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277
[  127.208461][ T3282] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  127.274941][ T3287] __vm_enough_memory: pid: 3287, comm: syz.5.902, bytes: 18014402804453376 not enough memory for the allocation
[  127.785998][ T2282] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  127.861019][  T559] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  127.960202][ T2282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.970367][ T2282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.981882][ T2282] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.991839][ T2282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.000767][ T2282] usb 3-1: SerialNumber: syz
[  128.021288][  T559] usb 6-1: device descriptor read/64, error -71
[  128.237332][ T3302] rust_binder: Write failure EINVAL in pid:492
[  128.246070][ T2282] usb 3-1: 0:2 : does not exist
[  128.277978][ T2282] usb 3-1: unit 5 not found!
[  128.283297][  T559] usb 6-1: device descriptor read/64, error -71
[  128.294745][ T2282] usb 3-1: USB disconnect, device number 35
[  128.332611][ T3333] rust_binder: Failed copying into alloc: EFAULT
[  128.332638][ T3333] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  128.342291][ T3333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  128.350596][ T3333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:497
[  128.386260][ T2477] udevd[2477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.460193][ T3335] /selinux/policy calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  128.566777][  T559] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  128.716485][  T559] usb 6-1: device descriptor read/64, error -71
[  128.878343][ T3355] cgroup: Unknown subsys name 'appraise_type'
[  128.885468][ T3355] overlayfs: failed to resolve './file1': -2
[  128.983866][  T559] usb 6-1: device descriptor read/64, error -71
[  129.025770][ T3361] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.035882][ T3361] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  129.043421][ T3361] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  129.050755][ T3361] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  129.060056][ T3361] tipc: Enabled bearer <udp:syz0>, priority 9
[  129.080136][  T336] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  129.103193][  T559] usb usb6-port1: attempt power cycle
[  129.255050][  T336] usb 3-1: config 0 has an invalid interface number: 189 but max is 0
[  129.263759][  T336] usb 3-1: config 0 has no interface number 0
[  129.269886][  T336] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.281337][  T336] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  129.293057][  T336] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  129.304903][  T336] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  129.314762][  T336] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.333883][  T336] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  129.344068][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.353449][  T336] usb 3-1: Product: syz
[  129.357645][  T336] usb 3-1: Manufacturer: syz
[  129.363206][  T336] usb 3-1: SerialNumber: syz
[  129.379822][  T336] usb 3-1: config 0 descriptor??
[  129.391710][ T3338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  129.475837][  T559] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  129.500036][  T559] usb 6-1: device descriptor read/8, error -71
[  129.627262][  T336] ums-alauda 3-1:0.189: USB Mass Storage device detected
[  129.646824][  T559] usb 6-1: device descriptor read/8, error -71
[  129.660139][  T336] scsi host1: usb-storage 3-1:0.189
[  129.667645][  T336] usb 3-1: USB disconnect, device number 36
[  129.914338][  T559] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  129.938484][  T559] usb 6-1: device descriptor read/8, error -71
[  130.055092][ T3432] netlink: 'syz.0.947': attribute type 16 has an invalid length.
[  130.077683][  T559] usb 6-1: device descriptor read/8, error -71
[  130.192623][  T559] usb usb6-port1: unable to enumerate USB device
[  130.221417][ T3443] netlink: 'syz.1.951': attribute type 12 has an invalid length.
[  130.239112][ T3445] fuse: Unknown parameter 'rootmode500000000000000000040000'
[  130.343481][ T3449] rust_binder: Error in use_page_slow: ESRCH
[  130.343508][ T3449] rust_binder: use_range failure ESRCH
[  130.352239][ T3449] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  130.358013][ T3449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  130.366187][ T3449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:505
[  130.573165][ T3459] netlink: 'syz.0.956': attribute type 1 has an invalid length.
[  130.590007][ T3459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.956'.
[  130.610497][ T3459] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.956'.
[  130.627869][ T3459] overlayfs: failed to clone upperpath
[  130.759271][  T559] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  130.857924][ T3478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  130.865033][ T3478] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  130.873927][ T3479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288
[  130.876396][ T3480] netlink: 'syz.1.965': attribute type 3 has an invalid length.
[  130.908978][  T559] usb 3-1: device descriptor read/64, error -71
[  131.165649][  T559] usb 3-1: device descriptor read/64, error -71
[  131.201298][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'.
[  131.277119][ T3493] /dev/rnullb0: Can't lookup blockdev
[  131.394221][   T36] kauditd_printk_skb: 545 callbacks suppressed
[  131.394235][   T36] audit: type=1400 audit(2000000001.645:6061): avc:  denied  { read write } for  pid=1782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  131.433088][  T559] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  131.459435][   T36] audit: type=1400 audit(2000000001.654:6062): avc:  denied  { read write open } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  131.498360][   T36] audit: type=1400 audit(2000000001.654:6063): avc:  denied  { ioctl } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  131.525610][   T36] audit: type=1400 audit(2000000001.701:6064): avc:  denied  { read write } for  pid=3497 comm="syz.5.972" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  131.558764][   T36] audit: type=1400 audit(2000000001.701:6065): avc:  denied  { read write open } for  pid=3497 comm="syz.5.972" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  131.584920][   T36] audit: type=1400 audit(2000000001.729:6066): avc:  denied  { mounton } for  pid=3497 comm="syz.5.972" path="/100/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  131.613075][   T36] audit: type=1400 audit(2000000001.729:6067): avc:  denied  { ioctl } for  pid=3453 comm="syz.2.955" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.627722][ T3504] fuse: Bad value for 'fd'
[  131.640984][   T36] audit: type=1400 audit(2000000001.729:6068): avc:  denied  { ioctl } for  pid=3453 comm="syz.2.955" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.668126][   T36] audit: type=1400 audit(2000000001.729:6069): avc:  denied  { ioctl } for  pid=3453 comm="syz.2.955" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.674770][  T559] usb 3-1: device descriptor read/64, error -71
[  131.695513][   T36] audit: type=1400 audit(2000000001.729:6070): avc:  denied  { ioctl } for  pid=3453 comm="syz.2.955" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.869591][ T3512] SELinux: security_context_str_to_sid (�����������) failed with errno=-22
[  131.967827][  T559] usb 3-1: device descriptor read/64, error -71
[  132.085524][  T559] usb usb3-port1: attempt power cycle
[  132.267280][ T2282] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  132.440994][ T2282] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  132.449348][  T559] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  132.456867][ T2282] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  132.465840][ T2282] usb 6-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  132.476212][ T2282] usb 6-1: config 220 has no interface number 2
[  132.482660][ T2282] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  132.495850][ T2282] usb 6-1: config 220 interface 0 has no altsetting 0
[  132.502734][ T2282] usb 6-1: config 220 interface 76 has no altsetting 0
[  132.509648][ T2282] usb 6-1: config 220 interface 1 has no altsetting 0
[  132.518222][  T559] usb 3-1: device descriptor read/8, error -71
[  132.525939][ T2282] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  132.535028][ T2282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.543062][ T2282] usb 6-1: Product: syz
[  132.547263][ T2282] usb 6-1: Manufacturer: syz
[  132.551868][ T2282] usb 6-1: SerialNumber: syz
[  132.665666][  T559] usb 3-1: device descriptor read/8, error -71
[  132.780287][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.790519][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.801729][ T2282] usb 6-1: selecting invalid altsetting 0
[  132.807596][ T2282] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  132.818495][ T2282] usb 6-1: No valid video chain found.
[  132.827042][ T2282] usb 6-1: USB disconnect, device number 27
[  132.835497][ T2477] udevd[2477]: setting owner of /dev/bus/usb/006/027 to uid=0, gid=0 failed: No such file or directory
[  132.919689][  T559] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  132.946777][  T559] usb 3-1: device descriptor read/8, error -71
[  132.949762][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.988'.
[  133.093258][  T559] usb 3-1: device descriptor read/8, error -71
[  133.208545][  T559] usb usb3-port1: unable to enumerate USB device
[  133.419724][ T3553] rust_binder: Write failure EFAULT in pid:319
[  133.419725][ T3554] rust_binder: Write failure EFAULT in pid:319
[  133.513043][ T3562] rust_binder: Error in use_page_slow: ESRCH
[  133.513070][ T3562] rust_binder: use_range failure ESRCH
[  133.519702][ T3562] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  133.525256][ T3562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  133.533256][ T3562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:327
[  133.965413][ T3583] binder: Binderfs stats mode cannot be changed during a remount
[  133.983723][ T3583] binder: Binderfs stats mode cannot be changed during a remount
[  134.067312][ T3587] mmap: syz.2.1007 (3587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  134.117217][ T3589] netlink: 'syz.2.1008': attribute type 3 has an invalid length.
[  134.125192][ T3589] netlink: 944 bytes leftover after parsing attributes in process `syz.2.1008'.
[  134.534645][ T2007] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  134.695064][ T2007] usb 3-1: Using ep0 maxpacket: 16
[  134.706873][ T2007] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  134.715259][ T2007] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  134.726668][ T2007] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  134.735748][ T2007] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  134.744773][ T2007] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  134.754359][ T2007] usb 3-1: config 0 has no interface number 0
[  134.760494][ T2007] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  134.771560][ T2007] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  134.781430][ T2007] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.791259][ T2007] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  134.804380][ T2007] usb 3-1: config 0 interface 125 has no altsetting 0
[  134.811155][ T2007] usb 3-1: config 0 interface 125 has no altsetting 2
[  134.821612][ T2007] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  134.830703][ T2007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.838724][ T2007] usb 3-1: Product: syz
[  134.842997][ T2007] usb 3-1: Manufacturer: syz
[  134.847614][ T2007] usb 3-1: SerialNumber: syz
[  134.853865][ T2007] usb 3-1: config 0 descriptor??
[  134.866183][  T559] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  135.039825][  T559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.050198][  T559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.061135][  T559] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.070402][  T559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.078422][  T559] usb 6-1: SerialNumber: syz
[  135.087240][ T3596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.109778][ T3596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.317963][  T559] usb 6-1: 0:2 : does not exist
[  135.340003][  T559] usb 6-1: USB disconnect, device number 28
[  135.430093][ T2477] udevd[2477]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  135.668350][  T559] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  135.831137][  T559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.841387][  T559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.852086][  T559] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.861283][  T559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.870168][  T559] usb 6-1: SerialNumber: syz
[  136.094416][  T559] usb 6-1: 0:2 : does not exist
[  136.112304][  T559] usb 6-1: USB disconnect, device number 29
[  136.161417][ T2477] udevd[2477]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  136.627260][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.640760][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.651906][ T3632] rust_binder: Write failure EFAULT in pid:530
[  136.813249][   T36] kauditd_printk_skb: 478 callbacks suppressed
[  136.813270][   T36] audit: type=1400 audit(2000000006.713:6549): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.888006][   T36] audit: type=1400 audit(2000000006.788:6550): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.951749][   T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  136.960049][   T36] audit: type=1400 audit(2000000006.844:6551): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.985041][   T36] audit: type=1400 audit(2000000006.844:6552): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.009969][   T36] audit: type=1400 audit(2000000006.844:6553): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.034990][   T36] audit: type=1400 audit(2000000006.844:6554): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.060108][   T36] audit: type=1400 audit(2000000006.844:6555): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.085007][   T36] audit: type=1400 audit(2000000006.853:6556): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.110103][   T36] audit: type=1400 audit(2000000006.853:6557): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.135083][   T36] audit: type=1400 audit(2000000006.947:6558): avc:  denied  { ioctl } for  pid=3635 comm="syz.5.1023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  137.144296][   T45] usb 6-1: device descriptor read/64, error -71
[  137.422371][   T45] usb 6-1: device descriptor read/64, error -71
[  137.441666][ T3654] netlink: 'syz.0.1028': attribute type 46 has an invalid length.
[  137.679084][   T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  137.736456][ T3673] 9pnet_fd: Insufficient options for proto=fd
[  137.742878][  T336] usb 3-1: USB disconnect, device number 41
[  137.839464][   T45] usb 6-1: device descriptor read/64, error -71
[  137.918679][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  137.938550][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.106849][   T45] usb 6-1: device descriptor read/64, error -71
[  138.224606][   T45] usb usb6-port1: attempt power cycle
[  138.588125][   T45] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  138.611906][   T45] usb 6-1: device descriptor read/8, error -71
[  138.758471][   T45] usb 6-1: device descriptor read/8, error -71
[  138.997604][ T3704] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.006555][ T3705] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.015949][   T45] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  139.040082][   T45] usb 6-1: device descriptor read/8, error -71
[  139.178739][   T45] usb 6-1: device descriptor read/8, error -71
[  139.294106][   T45] usb usb6-port1: unable to enumerate USB device
[  139.756274][ T3729] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1056'.
[  140.096335][  T884] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  140.097679][  T472] Bluetooth: hci0: command 0x1003 tx timeout
[  140.310055][  T336] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  140.470460][  T336] usb 6-1: Using ep0 maxpacket: 8
[  140.479087][  T336] usb 6-1: unable to get BOS descriptor or descriptor too short
[  140.491157][  T336] usb 6-1: config 6 has an invalid interface number: 248 but max is 0
[  140.500523][  T336] usb 6-1: config 6 has no interface number 0
[  140.507433][  T336] usb 6-1: config 6 interface 248 has no altsetting 0
[  140.519057][  T336] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  140.538506][  T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.547360][  T336] usb 6-1: Product: syz
[  140.551756][  T336] usb 6-1: Manufacturer: syz
[  140.557595][  T336] usb 6-1: SerialNumber: syz
[  140.614100][ T3766] overlayfs: failed to clone lowerpath
[  140.785871][  T336] ums-karma 6-1:6.248: USB Mass Storage device detected
[  140.885992][  T336] usb 6-1: USB disconnect, device number 34
[  141.381516][ T3827] overlayfs: failed to clone upperpath
[  141.629014][ T3844] overlayfs: failed to clone lowerpath
[  142.057062][ T3878] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  142.057104][ T3878] rust_binder: Error while translating object.
[  142.067846][ T3878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  142.074040][ T3878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348
[  142.184724][   T36] kauditd_printk_skb: 454 callbacks suppressed
[  142.184745][   T36] audit: type=1400 audit(2000000011.734:7013): avc:  denied  { read } for  pid=3883 comm="syz.5.1114" name="binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  142.203772][ T3887] netlink: 'syz.0.1115': attribute type 30 has an invalid length.
[  142.278264][   T36] audit: type=1400 audit(2000000011.734:7014): avc:  denied  { read open } for  pid=3883 comm="syz.5.1114" path="/dev/binderfs/binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  142.324232][   T36] audit: type=1400 audit(2000000011.734:7015): avc:  denied  { create } for  pid=3882 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  142.384892][   T36] audit: type=1400 audit(2000000011.734:7016): avc:  denied  { ioctl } for  pid=3883 comm="syz.5.1114" path="/dev/binderfs/binder1" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  142.402512][ T3896] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.410848][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.428031][   T36] audit: type=1400 audit(2000000011.734:7017): avc:  denied  { read write } for  pid=3883 comm="syz.5.1114" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  142.518042][   T36] audit: type=1400 audit(2000000011.734:7018): avc:  denied  { read write open } for  pid=3883 comm="syz.5.1114" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  142.527863][ T3905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=3905 comm=syz.0.1119
[  142.588698][   T36] audit: type=1400 audit(2000000011.734:7019): avc:  denied  { ioctl } for  pid=3883 comm="syz.5.1114" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  142.642337][   T36] audit: type=1400 audit(2000000011.781:7020): avc:  denied  { ioctl } for  pid=3882 comm="syz.2.1113" path="socket:[22795]" dev="sockfs" ino=22795 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  142.670364][   T36] audit: type=1400 audit(2000000011.781:7021): avc:  denied  { sys_module } for  pid=3882 comm="syz.2.1113" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  142.749849][   T36] audit: type=1400 audit(2000000011.809:7022): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  142.856909][ T3911] __vm_enough_memory: pid: 3911, comm: syz.2.1122, bytes: 18014402804453376 not enough memory for the allocation
[  142.871275][ T3916] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1124'.
[  143.087375][ T3925] /dev/rnullb0: Can't lookup blockdev
[  143.185539][ T3932] netlink: 'syz.1.1129': attribute type 46 has an invalid length.
[  143.194077][ T3932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1129'.
[  143.224503][ T3937] __vm_enough_memory: pid: 3937, comm: syz.2.1130, bytes: 18014402804453376 not enough memory for the allocation
[  143.229843][  T559] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  143.400951][  T559] usb 6-1: device descriptor read/64, error -71
[  143.511825][ T3956] veth1: entered allmulticast mode
[  143.529355][ T3956] rust_binder: Read failure Err(EAGAIN) in pid:587
[  143.657654][  T559] usb 6-1: device descriptor read/64, error -71
[  143.914033][ T3973] fuse: Unknown parameter '�0x0000000000000004'
[  143.925062][  T559] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  144.074769][  T559] usb 6-1: device descriptor read/64, error -71
[  144.143323][ T3984] fuse: Unknown parameter 'rootmod0000000000040000'
[  144.288707][ T3949] veth1: left allmulticast mode
[  144.342130][  T559] usb 6-1: device descriptor read/64, error -71
[  144.459843][  T559] usb usb6-port1: attempt power cycle
[  144.788295][ T4040] tipc: Started in network mode
[  144.793262][ T4040] tipc: Node identity ac14140f, cluster identity 4711
[  144.800432][ T4040] tipc: New replicast peer: 255.255.255.255
[  144.806725][ T4040] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.813690][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'.
[  144.822632][ T4040] tipc: Disabling bearer <udp:syz2>
[  144.834099][  T559] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  144.857770][  T559] usb 6-1: device descriptor read/8, error -71
[  144.996965][  T559] usb 6-1: device descriptor read/8, error -71
[  145.227145][ T4045] rust_binder: Error in use_page_slow: ESRCH
[  145.227170][ T4045] rust_binder: use_range failure ESRCH
[  145.233884][ T4045] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  145.239389][ T4045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  145.247482][ T4045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:597
[  145.261905][  T559] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  145.297068][  T559] usb 6-1: device descriptor read/8, error -71
[  145.435338][  T559] usb 6-1: device descriptor read/8, error -71
[  145.507909][   T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  145.550757][  T559] usb usb6-port1: unable to enumerate USB device
[  145.668346][   T10] usb 3-1: Using ep0 maxpacket: 8
[  145.681363][   T10] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 53, changing to 9
[  145.701070][   T10] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 487
[  145.712206][   T10] usb 3-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  145.725902][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  145.738243][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.749910][ T4055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1172'.
[  145.753976][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.767413][   T10] usb 3-1: Product: 
[  145.771647][   T10] usb 3-1: Manufacturer: 맪᠉ᬾ೗頋び䕩࿫ꟲ㊼宝跊缰⢎漕퉟홭䅛
[  145.773743][ T4056] 9pnet: Could not find request transport: xen
[  145.781441][   T10] usb 3-1: SerialNumber: 츐䧯ᚁ捀᥅ল螹搈䫟
[  145.799133][ T4045] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  146.246680][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  146.257875][   T10] usb 3-1: USB disconnect, device number 42
[  146.624824][ T4095] __vm_enough_memory: pid: 4095, comm: syz.5.1185, bytes: 18014402804453376 not enough memory for the allocation
[  146.699885][ T4101] SELinux: security_context_str_to_sid (syste_u�G
) failed with errno=-22
[  146.728128][ T4103] netlink: 'syz.1.1190': attribute type 46 has an invalid length.
[  147.168725][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'.
[  147.200217][ T4134] /dev/rnullb0: Can't lookup blockdev
[  147.506913][ T4154] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[  147.555957][   T36] kauditd_printk_skb: 1527 callbacks suppressed
[  147.555987][   T36] audit: type=1400 audit(2000000016.755:8550): avc:  denied  { create } for  pid=4155 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  147.592977][   T36] audit: type=1400 audit(2000000016.783:8551): avc:  denied  { setopt } for  pid=4155 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  147.622740][   T36] audit: type=1400 audit(2000000016.783:8552): avc:  denied  { ioctl } for  pid=4155 comm="syz.2.1209" path="socket:[24595]" dev="sockfs" ino=24595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  147.644610][ T4162] overlayfs: failed to resolve './file0': -2
[  147.649144][   T36] audit: type=1400 audit(2000000016.783:8553): avc:  denied  { write } for  pid=4155 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  147.673469][   T36] audit: type=1400 audit(2000000016.783:8554): avc:  denied  { read write } for  pid=4155 comm="syz.2.1209" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.698774][   T36] audit: type=1400 audit(2000000016.783:8555): avc:  denied  { read write open } for  pid=4155 comm="syz.2.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.726944][   T36] audit: type=1400 audit(2000000016.783:8556): avc:  denied  { ioctl } for  pid=4155 comm="syz.2.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.753250][   T36] audit: type=1400 audit(2000000016.783:8557): avc:  denied  { ioctl } for  pid=4155 comm="syz.2.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.778645][   T36] audit: type=1400 audit(2000000016.783:8558): avc:  denied  { ioctl } for  pid=4155 comm="syz.2.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.804219][   T36] audit: type=1400 audit(2000000016.783:8559): avc:  denied  { ioctl } for  pid=4155 comm="syz.2.1209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.860836][  T559] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  148.024249][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.037531][ T4137] incfs: Can't find or create .index dir in ./file0
[  148.038061][  T559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.053472][ T4137] incfs: mount failed -103
[  148.056081][  T559] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  148.076640][  T559] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  148.085805][  T559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.095892][  T559] usb 3-1: config 0 descriptor??
[  148.183390][ T4176] 9pnet_fd: Insufficient options for proto=fd
[  148.325464][ T4189] tmpfs: Unknown parameter ''
[  148.772909][  T559] usbhid 3-1:0.0: can't add hid device: -71
[  148.786278][  T559] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  148.799075][  T559] usb 3-1: USB disconnect, device number 43
[  149.007835][ T4227] overlayfs: failed to clone upperpath
[  149.455457][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'.
[  149.525847][ T2007] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  149.662178][  T293] tipc: Left network mode
[  149.679637][  T293] veth1_macvtap: left promiscuous mode
[  149.685217][  T293] veth0_vlan: left promiscuous mode
[  149.695806][ T2007] usb 6-1: unable to get BOS descriptor or descriptor too short
[  149.725773][ T2007] usb 6-1: not running at top speed; connect to a high speed hub
[  149.758623][ T2007] usb 6-1: config 6 has an invalid interface number: 27 but max is 0
[  149.776302][ T2007] usb 6-1: config 6 has no interface number 0
[  149.787984][ T4247] netlink: 'syz.0.1243': attribute type 6 has an invalid length.
[  149.795695][ T2007] usb 6-1: config 6 interface 27 has no altsetting 0
[  149.799351][ T4247] netlink: 'syz.0.1243': attribute type 4 has an invalid length.
[  149.816505][ T4247] netlink: 'syz.0.1243': attribute type 6 has an invalid length.
[  149.828792][ T4247] netlink: 'syz.0.1243': attribute type 13 has an invalid length.
[  149.830021][ T2007] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0128, bcdDevice=e0.bb
[  149.847369][ T4247] netlink: 'syz.0.1243': attribute type 15 has an invalid length.
[  149.860821][ T2007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.862949][ T4247] netlink: 'syz.0.1243': attribute type 19 has an invalid length.
[  149.876761][ T2007] usb 6-1: Product: syz
[  149.882761][ T2007] usb 6-1: Manufacturer: syz
[  149.887604][ T2007] usb 6-1: SerialNumber: syz
[  149.893556][ T4247] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.1243'.
[  150.065927][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.073008][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.081350][ T4250] bridge_slave_0: entered allmulticast mode
[  150.088475][ T4250] bridge_slave_0: entered promiscuous mode
[  150.107775][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.127177][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.149596][ T2007] usb 6-1: USB disconnect, device number 39
[  150.159575][ T4250] bridge_slave_1: entered allmulticast mode
[  150.183405][ T4250] bridge_slave_1: entered promiscuous mode
[  150.257598][ T4265] .N: renamed from veth0_to_bond (while UP)
[  150.392146][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.399271][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.406624][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.413680][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.479827][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.487734][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.504881][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.511975][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.524648][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.531722][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.640701][ T4250] veth0_vlan: entered promiscuous mode
[  150.678266][ T4250] veth1_macvtap: entered promiscuous mode
[  150.847411][ T4298] binder: Bad value for 'max'
[  151.133760][ T2007] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  151.294006][ T2007] usb 6-1: Using ep0 maxpacket: 16
[  151.320232][ T2007] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  151.335346][ T2007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.349225][   T65] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  151.362139][ T2007] usb 6-1: Product: syz
[  151.366346][ T2007] usb 6-1: Manufacturer: syz
[  151.371156][   T65] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  151.380805][ T2007] usb 6-1: SerialNumber: syz
[  151.387326][ T2007] usb 6-1: config 0 descriptor??
[  151.404229][ T2007] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  151.419561][ T2007] usb 6-1: Detected FT-X
[  151.477673][ T4337] fido_id[4337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  151.524093][ T4341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17
[  151.627839][ T2007] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  151.868015][ T2007] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  151.886168][ T2007] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  151.909408][ T2007] usb 6-1: USB disconnect, device number 40
[  151.928935][ T2007] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  151.938843][ T2007] ftdi_sio 6-1:0.0: device disconnected
[  152.479040][ T4370] netlink: 'syz.5.1282': attribute type 27 has an invalid length.
[  152.866196][  T336] usb 6-1: new low-speed USB device number 41 using dummy_hcd
[  152.941545][   T36] kauditd_printk_skb: 726 callbacks suppressed
[  152.941564][   T36] audit: type=1400 audit(2000000021.794:9286): avc:  denied  { ioctl } for  pid=4382 comm="syz.5.1288" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  153.005253][  T336] usb 6-1: device descriptor read/64, error -71
[  153.065147][   T36] audit: type=1400 audit(2000000021.907:9287): avc:  denied  { read write } for  pid=4250 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.114739][   T36] audit: type=1400 audit(2000000021.907:9288): avc:  denied  { read write open } for  pid=4250 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.159445][   T36] audit: type=1400 audit(2000000021.907:9289): avc:  denied  { ioctl } for  pid=4250 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  153.185059][   T36] audit: type=1400 audit(2000000021.935:9290): avc:  denied  { read } for  pid=4390 comm="syz.6.1291" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  153.206320][   T36] audit: type=1400 audit(2000000021.935:9291): avc:  denied  { read open } for  pid=4390 comm="syz.6.1291" path="net:[4026532548]" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  153.231023][   T36] audit: type=1400 audit(2000000021.935:9292): avc:  denied  { create } for  pid=4390 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.252698][   T36] audit: type=1400 audit(2000000021.935:9293): avc:  denied  { getopt } for  pid=4390 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.274098][   T36] audit: type=1400 audit(2000000021.935:9294): avc:  denied  { read } for  pid=4390 comm="syz.6.1291" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  153.302754][   T36] audit: type=1400 audit(2000000021.935:9295): avc:  denied  { read open } for  pid=4390 comm="syz.6.1291" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  153.327255][  T336] usb 6-1: device descriptor read/64, error -71
[  153.582786][  T336] usb 6-1: new low-speed USB device number 42 using dummy_hcd
[  153.609592][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.624593][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.643357][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.657331][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.678728][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.692069][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.706003][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.1305
[  153.743189][  T336] usb 6-1: device descriptor read/64, error -71
[  153.999896][  T336] usb 6-1: device descriptor read/64, error -71
[  154.091957][ T4478] netlink: 'syz.1.1320': attribute type 2 has an invalid length.
[  154.117980][  T336] usb usb6-port1: attempt power cycle
[  154.264518][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  154.481204][  T336] usb 6-1: new low-speed USB device number 43 using dummy_hcd
[  154.506092][  T336] usb 6-1: device descriptor read/8, error -71
[  154.643959][  T336] usb 6-1: device descriptor read/8, error -71
[  154.898322][  T336] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[  154.921978][  T336] usb 6-1: device descriptor read/8, error -71
[  155.061589][  T336] usb 6-1: device descriptor read/8, error -71
[  155.157286][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'.
[  155.197782][  T336] usb usb6-port1: unable to enumerate USB device
[  155.419935][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  156.120907][ T4550] can: request_module (can-proto-0) failed.
[  156.492910][ T4582] devpts: called with bogus options
[  157.160056][ T4607] tipc: Started in network mode
[  157.165071][ T4607] tipc: Node identity 8a6c2d0572fb, cluster identity 4711
[  157.174039][ T4607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.185619][ T4607] tipc: Disabling bearer <eth:syzkaller0>
[  157.287737][ T4613] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  157.379706][ T4615] rust_binder: Error while translating object.
[  157.379751][ T4615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  157.416922][ T4615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:34
[  157.625568][  T336] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  157.800614][  T336] usb 6-1: unable to get BOS descriptor or descriptor too short
[  157.809978][  T336] usb 6-1: not running at top speed; connect to a high speed hub
[  157.813151][ T4636] /dev/sg0: Can't lookup blockdev
[  157.822657][  T336] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.826184][ T4636] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1378'.
[  157.837256][  T336] usb 6-1: config 1 interface 0 has no altsetting 0
[  157.861664][  T336] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  157.870866][  T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.879961][  T336] usb 6-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡
[  157.887628][  T336] usb 6-1: SerialNumber: syz
[  157.913485][ T4638] __vm_enough_memory: pid: 4638, comm: syz.6.1379, bytes: 18014402804453376 not enough memory for the allocation
[  158.134570][ T4652] rust_binder: Write failure EFAULT in pid:49
[  158.368344][   T36] kauditd_printk_skb: 546 callbacks suppressed
[  158.368365][   T36] audit: type=1400 audit(2000000026.862:9842): avc:  denied  { mounton } for  pid=4665 comm="syz.1.1388" path="/485/file0" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  158.428421][   T36] audit: type=1400 audit(2000000026.862:9843): avc:  denied  { mount } for  pid=4665 comm="syz.1.1388" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  158.451520][   T36] audit: type=1400 audit(2000000026.899:9844): avc:  denied  { create } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.472712][   T36] audit: type=1400 audit(2000000026.909:9845): avc:  denied  { write } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.496391][   T36] audit: type=1400 audit(2000000026.909:9846): avc:  denied  { read } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.517425][   T36] audit: type=1400 audit(2000000026.909:9847): avc:  denied  { read } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.538467][   T36] audit: type=1400 audit(2000000026.918:9848): avc:  denied  { create } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  158.559152][   T36] audit: type=1400 audit(2000000026.918:9849): avc:  denied  { create } for  pid=4665 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  158.608868][   T36] audit: type=1400 audit(2000000027.086:9850): avc:  denied  { execmem } for  pid=4672 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  158.778368][   T36] audit: type=1400 audit(2000000027.245:9851): avc:  denied  { create } for  pid=4672 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  158.998413][ T4676] incfs: Options parsing error. -22
[  159.003696][ T4676] incfs: mount failed -22
[  159.607423][ T4716] usb usb8: usbfs: process 4716 (syz.6.1406) did not claim interface 0 before use
[  159.747792][ T4720] /dev/rnullb0: Can't lookup blockdev
[  160.005618][ T4731] overlayfs: failed to clone lowerpath
[  160.592435][  T336] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[  160.615913][  T336] usb 6-1: USB disconnect, device number 45
[  160.643335][  T336] usblp0: removed
[  162.791042][ T4803] input: syz1 as /devices/virtual/input/input19
[  163.622938][ T4846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4846 comm=syz.0.1458
[  163.732236][   T36] kauditd_printk_skb: 409 callbacks suppressed
[  163.732267][   T36] audit: type=1400 audit(2000000031.874:10261): avc:  denied  { create } for  pid=4851 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  163.820802][   T36] audit: type=1400 audit(2000000031.883:10262): avc:  denied  { write } for  pid=4851 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  163.871522][   T36] audit: type=1400 audit(2000000031.939:10263): avc:  denied  { read write } for  pid=1782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  163.899544][   T36] audit: type=1400 audit(2000000031.939:10264): avc:  denied  { read write open } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  163.959656][   T36] audit: type=1400 audit(2000000031.939:10265): avc:  denied  { ioctl } for  pid=1782 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.032947][   T36] audit: type=1400 audit(2000000031.967:10266): avc:  denied  { read write } for  pid=4856 comm="syz.5.1464" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  164.063388][   T36] audit: type=1400 audit(2000000031.967:10267): avc:  denied  { read write open } for  pid=4856 comm="syz.5.1464" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  164.119816][   T36] audit: type=1400 audit(2000000031.967:10268): avc:  denied  { mounton } for  pid=4856 comm="syz.5.1464" path="/155/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  164.159556][   T36] audit: type=1400 audit(2000000031.967:10269): avc:  denied  { mount } for  pid=4856 comm="syz.5.1464" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  164.188136][   T36] audit: type=1400 audit(2000000032.023:10270): avc:  denied  { read } for  pid=4856 comm="syz.5.1464" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  166.074740][   T65] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  166.256559][   T65] usb 6-1: Using ep0 maxpacket: 8
[  166.268528][   T65] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  166.280242][   T65] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  166.295865][   T65] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  166.312310][   T65] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  166.332200][   T65] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  166.352805][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  166.374179][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  166.386278][   T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  166.423032][   T65] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  166.433369][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.442235][   T65] usb 6-1: Product: syz
[  166.446499][   T65] usb 6-1: Manufacturer: syz
[  166.452292][   T65] usb 6-1: SerialNumber: syz
[  166.460002][   T65] usb 6-1: config 0 descriptor??
[  166.469356][ T4948] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  166.482658][   T65] hub 6-1:0.0: bad descriptor, ignoring hub
[  166.488605][   T65] hub 6-1:0.0: probe with driver hub failed with error -5
[  166.497475][   T65] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20
[  166.714011][   T65] usb 6-1: USB disconnect, device number 46
[  166.749564][ T4959] input: syz1 as /devices/virtual/input/input21
[  167.616572][ T4996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1525'.
[  169.354351][   T36] kauditd_printk_skb: 364 callbacks suppressed
[  169.354369][   T36] audit: type=1400 audit(2000000037.138:10635): avc:  denied  { execmem } for  pid=5020 comm="syz.0.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  169.435068][   T36] audit: type=1400 audit(2000000037.213:10636): avc:  denied  { create } for  pid=5024 comm="syz.1.1537" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  169.457003][   T36] audit: type=1400 audit(2000000037.213:10637): avc:  denied  { map } for  pid=5024 comm="syz.1.1537" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  169.481403][   T36] audit: type=1400 audit(2000000037.213:10638): avc:  denied  { read write } for  pid=5024 comm="syz.1.1537" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  169.506474][   T36] audit: type=1400 audit(2000000037.213:10639): avc:  denied  { map } for  pid=5024 comm="syz.1.1537" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  169.538633][   T36] audit: type=1400 audit(2000000037.213:10640): avc:  denied  { read write } for  pid=5024 comm="syz.1.1537" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  169.603004][   T36] audit: type=1400 audit(2000000037.362:10641): avc:  denied  { mounton } for  pid=5028 comm="syz.1.1539" path="/528/bus" dev="tmpfs" ino=2830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  169.604253][ T5029] overlayfs: failed to clone upperpath
[  169.705083][   T36] audit: type=1400 audit(2000000037.465:10642): avc:  denied  { create } for  pid=5030 comm="syz.0.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  169.731145][   T36] audit: type=1400 audit(2000000037.484:10643): avc:  denied  { node_bind } for  pid=5037 comm="syz.1.1543" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  169.772019][   T36] audit: type=1400 audit(2000000037.521:10644): avc:  denied  { create } for  pid=5039 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  169.896349][ T5044] netlink: 'syz.1.1546': attribute type 4 has an invalid length.
[  170.657328][ T4983] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI
[  170.670096][ T4983] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[  170.678555][ T4983] CPU: 0 UID: 0 PID: 4983 Comm: syz.5.1521 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461
[  170.690134][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.700230][ T4983] RIP: 0010:fuse_file_release+0x29e/0x400
[  170.705999][ T4983] Code: 00 74 12 48 89 df e8 61 e4 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 14 e3 a0 ff 48 ba 00 00 00 00 00 fc
[  170.725632][ T4983] RSP: 0018:ffffc90004947ae0 EFLAGS: 00010202
[  170.731738][ T4983] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811a485f00
[  170.739745][ T4983] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888130db0778
[  170.747750][ T4983] RBP: ffffc90004947b28 R08: 0000000000000003 R09: 0000000000000004
[  170.755811][ T4983] R10: dffffc0000000000 R11: fffff52000928f2c R12: 0000000000048002
[  170.763832][ T4983] R13: ffff888136484480 R14: ffff888130db0700 R15: 00000000000000c8
[  170.771843][ T4983] FS:  00005555556e3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  170.780805][ T4983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.787446][ T4983] CR2: 00005555556fe4a8 CR3: 0000000113926000 CR4: 00000000003526b0
[  170.795449][ T4983] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[  170.803450][ T4983] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  170.811453][ T4983] Call Trace:
[  170.814751][ T4983]  <TASK>
[  170.817713][ T4983]  fuse_release+0x13e/0x1b0
[  170.822263][ T4983]  ? __cfi_fuse_release+0x10/0x10
[  170.827315][ T4983]  __fput+0x1fe/0xa00
[  170.831335][ T4983]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  170.836916][ T4983]  ____fput+0x20/0x30
[  170.840937][ T4983]  task_work_run+0x1e3/0x250
[  170.845567][ T4983]  ? __cfi_task_work_run+0x10/0x10
[  170.850711][ T4983]  ? __kasan_check_write+0x18/0x20
[  170.855864][ T4983]  ? task_work_add+0x258/0x3f0
[  170.860665][ T4983]  get_signal+0x1307/0x14f0
[  170.865208][ T4983]  ? __kasan_check_write+0x18/0x20
[  170.870367][ T4983]  ? _raw_spin_lock+0x8c/0x120
[  170.875167][ T4983]  ? __cfi__raw_spin_lock+0x10/0x10
[  170.880400][ T4983]  ? fput+0x1ac/0x240
[  170.884435][ T4983]  arch_do_signal_or_restart+0x96/0x720
[  170.890028][ T4983]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  170.896226][ T4983]  ? __kasan_check_write+0x18/0x20
[  170.901386][ T4983]  syscall_exit_to_user_mode+0x58/0xb0
[  170.906888][ T4983]  do_syscall_64+0x64/0xf0
[  170.911339][ T4983]  ? clear_bhb_loop+0x50/0xa0
[  170.916055][ T4983]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  170.921992][ T4983] RIP: 0033:0x7fa68478eec9
[  170.926445][ T4983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.946082][ T4983] RSP: 002b:00007ffcd2c11858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  170.954532][ T4983] RAX: 0000000000000000 RBX: 0000000000027263 RCX: 00007fa68478eec9
[  170.962534][ T4983] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  170.970534][ T4983] RBP: 00007fa6849e7da0 R08: 0000000000000001 R09: 00000007d2c11b4f
[  170.978536][ T4983] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007fa6849e609c
[  170.986534][ T4983] R13: 00007fa6849e6090 R14: ffffffffffffffff R15: 00007ffcd2c11970
[  170.994538][ T4983]  </TASK>
[  170.997581][ T4983] Modules linked in:
[  171.001695][ T4983] ---[ end trace 0000000000000000 ]---
[  171.038821][ T4983] RIP: 0010:fuse_file_release+0x29e/0x400
[  171.044942][ T4983] Code: 00 74 12 48 89 df e8 61 e4 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 14 e3 a0 ff 48 ba 00 00 00 00 00 fc
[  171.066540][ T4983] RSP: 0018:ffffc90004947ae0 EFLAGS: 00010202
[  171.073565][ T4983] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88811a485f00
[  171.082542][ T4983] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888130db0778
[  171.090620][ T4983] RBP: ffffc90004947b28 R08: 0000000000000003 R09: 0000000000000004
[  171.099876][ T4983] R10: dffffc0000000000 R11: fffff52000928f2c R12: 0000000000048002
[  171.107930][ T4983] R13: ffff888136484480 R14: ffff888130db0700 R15: 00000000000000c8
[  171.116163][ T4983] FS:  00005555556e3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  171.125177][ T4983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  171.131981][ T4983] CR2: 000000110c2c7587 CR3: 0000000113926000 CR4: 00000000003526b0
[  171.140050][ T4983] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081
[  171.148271][ T4983] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  171.156333][ T4983] Kernel panic - not syncing: Fatal exception
[  171.162797][ T4983] Kernel Offset: disabled
[  171.167157][ T4983] Rebooting in 86400 seconds..