last executing test programs:

2m12.187381963s ago: executing program 3 (id=495):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4000076, 0x560040)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x44903bf5)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x5)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0)
read(r3, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f00000002c0)={{0x8080000, 0x100000, 0x9, 0x10, 0x5, 0x2, 0xd, 0xa, 0x7f, 0x4, 0x10, 0x7}, {0x1ddcc0000, 0x5000, 0xc, 0x1, 0x9, 0x1, 0x9, 0x7, 0xfb, 0x0, 0x4, 0x81}, {0x100000, 0xdddd0000, 0x1a, 0x7, 0x1, 0xe, 0x9, 0x1, 0xb8, 0x8, 0x6, 0xff}, {0x1000, 0x2000, 0x8, 0x7f, 0x2, 0x0, 0x80, 0x14, 0x18, 0x4, 0x9, 0x9}, {0xdddd1000, 0x8000000, 0xb, 0x2, 0x5, 0x2, 0x40, 0xfa, 0x5, 0x7, 0xb9, 0x9}, {0x2, 0x3000, 0xd, 0x2, 0x7, 0x5, 0x5b, 0x8, 0xb3, 0xfa, 0x4, 0x18}, {0xffff1000, 0xdddd1000, 0x10, 0xd, 0x0, 0x0, 0xc, 0x4, 0x9, 0xc, 0x7, 0x2}, {0x2, 0x1000, 0xe, 0x2, 0x6, 0xfe, 0x5, 0x40, 0x1, 0x9, 0x3}, {0x10000, 0xf}, {0xeeee8000}, 0x8000002a, 0x0, 0x2, 0x412e, 0xc, 0x900, 0xeeef0000, 0x1, [0x1, 0x60, 0x9, 0x5]})
readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f0000000080), 0x4000076, 0x560040) (async)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x44903bf5) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x5) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async)
fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) (async)
read(r3, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f00000002c0)={{0x8080000, 0x100000, 0x9, 0x10, 0x5, 0x2, 0xd, 0xa, 0x7f, 0x4, 0x10, 0x7}, {0x1ddcc0000, 0x5000, 0xc, 0x1, 0x9, 0x1, 0x9, 0x7, 0xfb, 0x0, 0x4, 0x81}, {0x100000, 0xdddd0000, 0x1a, 0x7, 0x1, 0xe, 0x9, 0x1, 0xb8, 0x8, 0x6, 0xff}, {0x1000, 0x2000, 0x8, 0x7f, 0x2, 0x0, 0x80, 0x14, 0x18, 0x4, 0x9, 0x9}, {0xdddd1000, 0x8000000, 0xb, 0x2, 0x5, 0x2, 0x40, 0xfa, 0x5, 0x7, 0xb9, 0x9}, {0x2, 0x3000, 0xd, 0x2, 0x7, 0x5, 0x5b, 0x8, 0xb3, 0xfa, 0x4, 0x18}, {0xffff1000, 0xdddd1000, 0x10, 0xd, 0x0, 0x0, 0xc, 0x4, 0x9, 0xc, 0x7, 0x2}, {0x2, 0x1000, 0xe, 0x2, 0x6, 0xfe, 0x5, 0x40, 0x1, 0x9, 0x3}, {0x10000, 0xf}, {0xeeee8000}, 0x8000002a, 0x0, 0x2, 0x412e, 0xc, 0x900, 0xeeef0000, 0x1, [0x1, 0x60, 0x9, 0x5]}) (async)
readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {0x0}], 0x2) (async)

2m11.520406986s ago: executing program 3 (id=502):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6})
dup(r0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

2m11.519184256s ago: executing program 3 (id=504):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x4, 0x3a)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x440, 0x3f4, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0xd, [0x0, 0x14, 0xe, 0x4, 0x6, 0x3, 0x5, 0x800, 0x0, 0x5982, 0x7, 0xbd, 0xc4, 0x1, 0x80, 0x4, 0x6, 0x6, 0xfffffffc, 0x153, 0x9, 0x4, 0x101, 0x7, 0x8, 0x0, 0x5, 0x4e, 0x2c6a, 0xfffffffe, 0xfffff800, 0xfdf, 0x0, 0x4, 0x2, 0x1, 0x5, 0x751, 0x3, 0xe, 0x4, 0x0, 0x7, 0x10000, 0x2000000, 0x9, 0x6, 0x0, 0xfffffffc, 0x2, 0x7, 0x4c, 0xffffffff, 0x5, 0x8, 0x3, 0x7d8999d1, 0x2, 0xfffffffe, 0x1, 0xfffffff5, 0x1, 0xb, 0xad6], [0x800, 0x9, 0x7, 0x5e, 0x2, 0x80000000, 0x6, 0x5, 0x9, 0x80000000, 0x9, 0x8, 0x8, 0x8d6, 0xa99, 0x0, 0x2, 0x1, 0x7, 0x0, 0x2, 0x4, 0xbb2, 0x0, 0xfffffff9, 0xe3, 0x10, 0xffffffff, 0x2939, 0x9e9, 0xb, 0x95c, 0xe, 0x7, 0x1, 0x800, 0xfffffff5, 0x10000, 0x7fff, 0x6e0, 0x3, 0x1ff, 0x7, 0x7, 0x4, 0x3, 0xb2f, 0xc, 0x8, 0x129b, 0x4, 0x40, 0x8, 0x4, 0x6, 0x8, 0x7f, 0x1, 0x1, 0x2, 0x38a0, 0x4, 0x10000, 0x9], [0xe, 0x1, 0x2, 0xe33d, 0x29, 0x9, 0x3ff, 0x2, 0x7, 0x3, 0xfff, 0x0, 0xfffffffd, 0x9, 0x6, 0x200, 0xf, 0x9, 0x11c, 0x1, 0xaa1, 0x2, 0xcd00, 0x8, 0x2078723, 0x86, 0x30, 0xc000, 0x7, 0x2000000, 0xfffffffb, 0xfffffffc, 0xd, 0x3ff, 0x401, 0x1, 0xae9, 0x2, 0x1000, 0x2, 0xa1, 0x80000001, 0x1, 0xffffffff, 0xa, 0x0, 0x2800000, 0xcb7a, 0x6, 0x8, 0x1, 0xe, 0xe, 0x3, 0x0, 0x0, 0x80000001, 0x1, 0x6, 0x9, 0x1000, 0x212, 0xf, 0xe2], [0x5, 0x0, 0xe1bf8fd6, 0x2, 0x3, 0x9, 0x1, 0xf68, 0x6, 0xf1e, 0x94, 0x3, 0x4, 0x0, 0x400, 0x1, 0x5, 0x3e, 0x7, 0x5, 0x33, 0x80000001, 0x6, 0x0, 0x81, 0xf, 0x3, 0x74e4, 0x7, 0x4, 0x8, 0x1a9, 0x9, 0x1, 0x8080000, 0x7, 0x7, 0x1, 0x2, 0x1, 0x7, 0x2, 0x2, 0x998, 0x2, 0x2e, 0x5, 0xfffffffa, 0x0, 0x6, 0x6, 0x7, 0x39, 0x400, 0x4, 0x3, 0x979, 0x8, 0x7, 0x0, 0x5, 0xd20f, 0x3, 0x2], 0x20, ['-@-{+\x00', '/dev/rnullb0\x00', '/dev/rnullb0\x00']}, ["", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x20004885}, 0x10)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x7)
unshare(0x20000400)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000000)=@abs={0x1}, 0x6e)
bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r6, 0xf648e000)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000009c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)

2m11.222791451s ago: executing program 3 (id=505):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x194)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x194) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) (async)

2m10.925351867s ago: executing program 3 (id=510):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2c000, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x395b7a0214e8daea)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

2m6.440225843s ago: executing program 3 (id=540):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000100)='./file0/../file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast2, 0x62})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x700, 0x80, 0x8, 0xfffffff1}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2}, {@in6=@remote, 0xfffffffc, 0x3c}, @in=@local, {0x0, 0x0, 0x200000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2004000}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/202, 0xca, 0x1, 0x31}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x10}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1000}, @dead_binder_done], 0x0, 0x0, 0x0})

2m6.394881194s ago: executing program 32 (id=540):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000100)='./file0/../file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast2, 0x62})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x700, 0x80, 0x8, 0xfffffff1}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2}, {@in6=@remote, 0xfffffffc, 0x3c}, @in=@local, {0x0, 0x0, 0x200000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2004000}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/202, 0xca, 0x1, 0x31}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x10}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1000}, @dead_binder_done], 0x0, 0x0, 0x0})

7.083919904s ago: executing program 4 (id=2384):
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x7f})
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x0, 0x1, 0x41f, 0x4})
r0 = syz_clone(0x12802080, &(0x7f00000000c0)="023cf179289d02c623c18f", 0xb, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="911a22f6a2c5fe2ead67a1955ad9abe1ca32beebcd")
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x53, {"3ef2410f0013440f01c266471357616766440f38000666baf80cb86ea25181ef66bafc0c66ed660fdc5507c443796dd9fcc4417d7fe966460f3a20430b040f794800"}}, @uexit={0x0, 0x18, 0x10000}, @rdmsr={0x32, 0x18, {0xbe7}}, @wr_drn={0x6e, 0x20, {0x3, 0x7}}, @code={0xa, 0x4b, {"450fc77296670f015d6e0f062666430f7cb800700000420fc7310fc7ad03e20000653ef30fc7350000c0fe66ba200066ed26440f0636410f01c8"}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @wr_drn={0x6e, 0x20, {0x6, 0x4}}, @out_dx={0xaa, 0x28, {0xf53d, 0x0, 0xdd17}}, @in_dx={0x82, 0x20, {0xd1ef}}, @rdmsr={0x32, 0x18, {0xbf0}}, @wr_crn={0x46, 0x20, {0x0, 0xaf55}}, @code={0xa, 0x84, {"c74424000e000000c744240207000000c7442406000000000f011424c74424001f010000c744240200000000ff1c24c44215b8a6bd6d000066440f38dfd90f3548b867017d1e408154170f23c00f21f83500000a000f23f8f240afb805000000b93b0000000f01c1c48295aa2fc423b15e3956"}}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x73, {"b94b0b00000f322e66410f3a22a98f7000001cb9800000c00f3235000100000f30b9270300000f32b976020000b801000000ba000000000f3066400f50f3c461fe2c2ab805000000b967e000000f01d98fc9b802885e730000f00fb19c3907000000"}}, @rdmsr={0x32, 0x18, {0x3ff}}, @wrmsr={0x1e, 0x20, {0xb06, 0x6}}, @uexit={0x0, 0x18, 0x5a4}, @in_dx={0x82, 0x20, {0xc204, 0x3}}, @in_dx={0x82, 0x20, {0xa6, 0x1}}, @uexit={0x0, 0x18, 0x2852}, @in_dx={0x82, 0x20, {0x74d7, 0x1}}, @wr_crn={0x46, 0x20, {0x8, 0x80000001}}, @in_dx={0x82, 0x20, {0x5fde, 0x1}}, @rdmsr={0x32, 0x18, {0x9b}}, @in_dx={0x82, 0x20, {0xf9a4, 0x1}}, @wr_drn={0x6e, 0x20, {0x3, 0x7066}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @rdmsr={0x32, 0x18, {0xb83}}, @rdmsr={0x32, 0x18, {0xce0}}, @out_dx={0xaa, 0x28, {0x613e, 0x1, 0xff}}, @rdmsr={0x32, 0x18, {0x871}}], 0x4ad})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
readv(r1, &(0x7f00000029c0)=[{&(0x7f0000002740)=""/70, 0x46}, {&(0x7f00000027c0)=""/85, 0x55}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/84, 0x54}, {&(0x7f0000002940)=""/32, 0x20}, {&(0x7f0000002980)=""/64, 0x40}], 0x6)
r6 = getpgrp(r5)
kcmp(r6, r5, 0x4, 0xffffffffffffffff, r2)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002f00)={0x0, &(0x7f0000002a40)=[@code={0xa, 0x42, {"66ba4300ed470f06c4a17ff04000c44271389eab84000066b81c008ed8f341add3c4c481f852704767430f01ca450f6e36"}}, @wrmsr={0x1e, 0x20, {0xb54, 0x2}}, @out_dx={0xaa, 0x28, {0x2e40, 0x5, 0x7f}}, @wrmsr={0x1e, 0x20, {0xb92, 0x80000000}}, @rdmsr={0x32, 0x18, {0xb6f}}, @code={0xa, 0x5a, {"36260fc7b67b0000002e66f083360bc4c2f941d1a80066ba4100ec440f01c9c4c199f9aff96f0000430f01f866baf80cb86edd6787ef66bafc0c66b8260066ef420f0fa9896aa068a4"}}, @wr_crn={0x46, 0x20, {0x0, 0xd}}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x58, {"0f01c30f20d835200000000f22d88f6a2812cf1d501a18480fc75d00c4e155f3100f001bc744240037000000c744240200400000ff2c24b93f0900000f32263e420f01cb450f35"}}, @out_dx={0xaa, 0x28, {0x3448, 0x0, 0x5}}, @uexit={0x0, 0x18, 0x1000}, @in_dx={0x82, 0x20, {0x8067, 0x1}}, @cpuid={0x14, 0x18, {0x0, 0x800}}, @rdmsr={0x32, 0x18, {0x403}}, @code={0xa, 0x5e, {"0f23313e420f00d62664f3410fc777f167420f1a5b00470f782eb96b0b00000f32c74424001b500000c744240213030000c7442406000000000f011c24f3ded966ba4300b040eec423fd7ac000"}}, @in_dx={0x82, 0x20, {0x2786, 0x1}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @wrmsr={0x1e, 0x20, {0x932, 0x344}}, @uexit={0x0, 0x18, 0x2a}, @wr_drn={0x6e, 0x20, {0x7, 0x86}}, @code={0xa, 0x59, {"0f01c8b9800000c00f3235010000000f30673e64660f3882880b000000642ef2470f0836410f01dff3366647e30366baa100ed66ba4000b8c31da54cef66440f388123400fae4f3d"}}, @out_dx={0xaa, 0x28, {0x32a, 0x0, 0x8}}, @rdmsr={0x32, 0x18, {0x9b3}}, @wr_drn={0x6e, 0x20, {0x7}}, @cpuid={0x14, 0x18, {0x2, 0x3}}, @wr_drn={0x6e, 0x20, {0x6, 0x9}}, @wr_drn={0x6e, 0x20, {0x1, 0x768}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @wrmsr={0x1e, 0x20, {0xb56, 0x3}}, @cpuid={0x14, 0x18, {0x2, 0x3}}], 0x49b})
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000002f40))
ptrace$cont(0x7, r6, 0x7, 0x8)
sendto$packet(0xffffffffffffffff, &(0x7f0000002fc0)="edeba016be33b7db65a9fae866d4d1b9cf11e941939e6cd39495816664aa1482a304f6456d4e37802e1d68c9944e2582a2e5ad15eb6d7d4615f50f", 0x3b, 0xc050, &(0x7f0000003000)={0x11, 0x15, 0x0, 0x1, 0x81, 0x6, @multicast}, 0x14)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003080)={0x0, &(0x7f0000003040)=[@uexit={0x0, 0x18, 0x5}], 0x18})
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000030c0)={{0x0, 0x3000, 0x3, 0x6, 0x7, 0x9, 0xb, 0x8, 0x9, 0xdf, 0x8e, 0x2}, {0xeeef0000, 0x2, 0x4, 0x80, 0x9, 0x9, 0x5, 0x40, 0x3, 0x8, 0x6}, {0xf000, 0xeeef0000, 0xe, 0xf, 0x29, 0xfd, 0x5, 0xfb, 0x7, 0x7, 0xd, 0x6}, {0x80a0000, 0x8080000, 0x9, 0x0, 0x17, 0xcf, 0x1, 0x81, 0xa, 0x6, 0x0, 0x5}, {0x1ffff2000, 0x0, 0x4, 0x5, 0x7f, 0x6, 0x6, 0x3, 0x8, 0xb, 0x4, 0xfc}, {0x2, 0x1000, 0xc, 0x2, 0x7, 0x7, 0x98, 0x8, 0x1, 0xf1, 0x6, 0x6}, {0x1000, 0x3000, 0xf, 0x2, 0x4b, 0x8, 0x7f, 0x6, 0x0, 0x6, 0xf, 0x40}, {0xeeee8000, 0xd000, 0x8, 0xff, 0x1, 0x7, 0x40, 0x1, 0xd1, 0x3, 0x7f, 0x2}, {0x5000, 0xbe}, {0xdddd0000, 0x9}, 0xc0000004, 0x0, 0xf000, 0x240000, 0x2, 0x2500, 0x10000, [0x2, 0x6b34d9e0, 0x3, 0x3]})
r9 = openat2(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', &(0x7f0000003240)={0x100, 0x100, 0x1}, 0x18)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x1000, 0x3})
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f00000032c0), &(0x7f0000003300)=0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000003380)={0x2, &(0x7f0000003340)=[{0xc, 0x0, 0x3, 0xfffffff5}, {0x8000, 0x3, 0xc, 0x1}]})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004400)={0x40, 0x0, &(0x7f00000033c0)=[@request_death={0x400c630e, 0x7}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x3}, @request_death, @register_looper, @release={0x40046306, 0x3}, @register_looper], 0x1000, 0x0, &(0x7f0000003400)="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"})
r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000004440), 0x2000, 0x0)
r11 = dup(r10)
write$P9_RGETLOCK(r11, &(0x7f0000004480)={0x1f, 0x37, 0x2, {0x1, 0x85a, 0x8, r5, 0x1, '\x00'}}, 0x1f)
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000044c0))
getresgid(&(0x7f0000006940), &(0x7f0000006980)=<r12=>0x0, &(0x7f00000069c0))
syz_fuse_handle_req(r11, &(0x7f00000045c0)="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", 0x2000, &(0x7f0000006f80)={&(0x7f00000065c0)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x2b, 0x8, 0x40, 0xdde1, 0xd, 0xffff, 0x3, 0x0, 0x0, 0x10, 0x9}}, &(0x7f0000006640)={0x18, 0x0, 0x4, {0x8000000000000000}}, &(0x7f0000006680)={0x18, 0x0, 0x6, {0x835}}, &(0x7f00000066c0)={0x18, 0x0, 0x7, {0xffff}}, &(0x7f0000006700)={0x18, 0x0, 0x7fffffff, {0x5}}, &(0x7f0000006740)={0x28, 0x0, 0x1000, {{0x12, 0x5, 0x0, r0}}}, &(0x7f0000006780)={0x60, 0x0, 0x3, {{0x5, 0x10000, 0x5, 0x5, 0x4, 0x2, 0x1}}}, &(0x7f0000006800)={0x18, 0x0, 0xb33, {0xc5}}, &(0x7f0000006840)={0x12, 0x0, 0x0, {'\'\x00'}}, &(0x7f0000006880)={0x20, 0x0, 0xffffffffffffff7f, {0x0, 0x4}}, &(0x7f00000068c0)={0x78, 0x0, 0x2, {0x0, 0x3d, 0x0, {0x5, 0x8, 0x5, 0x5b, 0x8, 0x8, 0x7, 0x4, 0x8, 0x1000, 0x1, r3, r4, 0x8}}}, &(0x7f0000006a00)={0x90, 0x0, 0x6, {0x0, 0x2, 0xe69, 0x1, 0x0, 0x36df, {0x0, 0xffffffff, 0x10, 0x2, 0x7, 0x7, 0x9, 0xd1, 0xf097, 0x4000, 0x0, r3, r12, 0x400, 0x8001}}}, &(0x7f0000006ac0)={0x50, 0x0, 0x42fe, [{0x4, 0x0, 0x6, 0x401, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x3, 0x10000, 0x6, 0xf, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, &(0x7f0000006b40)={0x1e8, 0x0, 0x4, [{{0x0, 0x2, 0x8, 0x2, 0x7ff, 0x40, {0x6, 0x3, 0x5, 0x5, 0x7, 0x7, 0x1, 0x8, 0x7, 0x4000, 0x80000001, r3, r4, 0x8, 0x7}}, {0x0, 0x1, 0xa, 0x2, '/dev/fuse\x00'}}, {{0x2, 0x2, 0xca, 0x400, 0x194, 0x9, {0x5, 0xf65, 0x2, 0x8000000000000001, 0x8, 0xb6, 0x5, 0x2, 0x4fe, 0x8000, 0xb8, r3, r4, 0x5}}, {0x6, 0x5, 0x0, 0x8}}, {{0x2, 0x0, 0x1, 0x6, 0x21, 0x2, {0x6, 0x29, 0x5, 0x5, 0x2, 0x1, 0x5, 0x7, 0x8, 0x2000, 0x8000, r3, 0xee01, 0x4000, 0x6}}, {0x6, 0x5, 0x0, 0x1}}]}, &(0x7f0000006d40)={0xa0, 0xfffffffffffffffe, 0x7, {{0x4, 0x2, 0x1, 0x4, 0x7, 0x5, {0x6, 0x9, 0x8000000000000001, 0x82, 0x401, 0x753, 0x0, 0x3, 0x7, 0x8800, 0x0, r3, r4, 0xc0000000, 0xffffff80}}, {0x0, 0x5}}}, &(0x7f0000006e00)={0x20, 0x0, 0x4, {0x1, 0x4, 0x1f96}}, &(0x7f0000006e40)={0x130, 0x0, 0x10000, {0x9, 0x7f, 0x0, '\x00', {0x100, 0x7, 0x0, 0x9, r3, r4, 0x2000, '\x00', 0x7, 0x100000000, 0x7fffffffffffffff, 0x0, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x8}, {0xfff, 0x7}, 0x0, 0x999, 0x9, 0x3}}}})
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x4, 0x2002)

7.083527144s ago: executing program 4 (id=2385):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async)
syz_io_uring_setup(0xbab, &(0x7f0000000140)={0x0, 0xb206, 0x200, 0x3, 0x229}, 0x0, 0x0) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x8) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @flat=@handle={0x73682a85, 0x3, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

7.083127694s ago: executing program 4 (id=2386):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)=[@request_death, @enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r2, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)=[@request_death, @enter_looper], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)

7.036675075s ago: executing program 4 (id=2388):
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x50002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x14, 0x6, "34da8fbd1584"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x20, 0x15, 0x46, "dbc0a7b54efac29a38110837e62573cde380f7c75cd2063dd70f2c0c012f965c4a293281ea9e31c4f24a557e7d4a6ee33ba8949bb6ddd7d1822907ab78812ccdad06352095be"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0xd4, "0593f0924a8aba438eb410eb6ff75ddc5e000de1d9a0c20ff06a9f09a74043737d579c9868ab98bb3a1a67e008e60e28184331599404dbf62c184277c940f365fff476eadfba76af4e88d94133123c8c9d3e61e997a37cb5a9baec3e2899fe6c6406df9e8a348fba08cf92a01e35be4fee730929c196d091d25d86d9a3019b4bac7f129ebc77e88dc14e61fb3135cd12a14fd2d8ded5424bf1ed8f409d4f883d05aed213827d7ac2c6776081186e7459b239ed429f8b281a76ff1b6eace93be5c59e4d4f31c6bf957041ddb27e61c379b0547798"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x3}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000002202090002000000fddbdf250100000041875a24f61b2e055b4df20c6b54374b866956fab43918e0862f1e7467ad24a9b5ab9c220fb0c1ef2c9965e789f24b1f6822654a1e6921afe4a69dba86d7e37cda52de6e5f088da528c4850ddebe42393407b84ba2f6aa4a8112d6eaca8731d77ca5ef3b23370800"], 0x7c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}})

6.450375876s ago: executing program 4 (id=2397):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={<r2=>0x0, 0x1, 0x2, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={r2, 0x4, 0x1, [0x400, 0x0, 0x7, 0x1, 0x4], [0x25327b4c, 0x8, 0x401, 0x4, 0x5, 0x9, 0x6a, 0x1, 0xfffffffffffffffc, 0x100000001, 0xfffffffffffffff7, 0x8, 0x2, 0x7, 0xfffffffffffffffe, 0x5, 0xffffffffffffffff, 0x8, 0x2, 0x9, 0x8, 0xe7a, 0xd6f7, 0x5, 0xfffffffffffffffd, 0x4, 0x6000000000000000, 0x8, 0xfd9, 0x9000000000000, 0x7, 0x6, 0x10001, 0xadb, 0x0, 0x9, 0x7, 0x7ff, 0x80000000, 0x800, 0x8000000000000000, 0x7ff, 0x7f, 0x1ff, 0x0, 0x3, 0x2978, 0x0, 0x8, 0xc, 0xbcbc, 0x6, 0x6, 0x2, 0x9, 0x0, 0x8, 0x5, 0x3, 0x4, 0xfffffffffffffff7, 0x7ff, 0x2, 0xfffffffffffffff9, 0x10, 0x9, 0xffffffffffffffff, 0x9, 0x8, 0x81, 0xd3, 0x2, 0x9, 0x64, 0x4, 0x4, 0x7, 0x2b5, 0x7, 0x3ff, 0x2e, 0x3, 0x2, 0x101, 0x9, 0xdb6, 0x6, 0x4c, 0xffffffffffffffff, 0x3, 0x8001, 0xcb, 0xfffffffffffff800, 0x416, 0x3, 0x9, 0x7, 0xbb, 0xfffffffffffffffa, 0x9, 0x7e79, 0x7, 0xcb, 0x2, 0x3, 0x7fffffffffffffff, 0x6, 0xff, 0x5, 0xe31, 0x401, 0x1000, 0x2, 0xfffffffffffffffc, 0x6a, 0x6, 0xfffffffffffffffc, 0x80200000000, 0x8, 0xfffffffffffffff1, 0x2]})
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}, {{0xa, 0x4e21, 0x0, @remote, 0xfffff}}}, 0x108) (async)
sendto$inet6(r1, &(0x7f0000000180)="a3fd562f686fb4dd72651bcd99fb658e62b46b2594930b740539a04840a070caed2308745db955eb26dc8b2306ad3973f86f6c18611eb88fbc67171248dcbbda5b86b519355a192d9d25", 0x4a, 0x40021, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) (async, rerun: 32)
close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async)
syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (rerun: 32)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)=""/37, &(0x7f0000000040)=0x25) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000402000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r7, &(0x7f0000000140)="8269b6", 0x3, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000002c0)={0xf000, 0x1000}) (async, rerun: 32)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2200402, &(0x7f0000000d00)={[{@subsystem='rdma'}]}) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x1}) (async)
socket$inet_udp(0x2, 0x2, 0x0)

6.392251537s ago: executing program 4 (id=2398):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "6271be4d"}]}}, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
unshare(0x2a020480)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000540))
mkdir(&(0x7f0000000080)='./file0\x00', 0x20)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x14, 0x0, &(0x7f0000000300))
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, @dev, @dev, 0x80, 0x0, 0x1, 0x2}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r7, 0x0, 0x31, 0x0, &(0x7f00000000c0))
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cacIe=loose,nodevmap'])
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r8, &(0x7f0000003800)={0x2020}, 0x2020)

4.562966912s ago: executing program 1 (id=2422):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffd}, 0x10)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x119)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)=ANY=[], 0x28}}, 0x0)
clock_gettime(0x0, &(0x7f0000002c80))
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1}, 0xa}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/69, 0x45}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/244, 0xf4}], 0x1}, 0x5}], 0x3, 0x40002000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x7}, 0x50)
r7 = socket$netlink(0x10, 0x3, 0xf)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release], 0x0, 0x0, 0x0})
r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x800)
ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, &(0x7f0000000600)={{0x2, 0xfffffffe, 0x3ff, 0x0, 0x3, 0x9}, 0x322, [0x5fc, 0x9, 0xa9d2, 0x3efd, 0xb, 0xc, 0x49b, 0x3, 0x7, 0x0, 0x5, 0xf3a, 0x0, 0x8, 0x3, 0x3, 0xfffffff6, 0xd49, 0x1ff, 0x5, 0x800, 0x0, 0x4, 0x9, 0x4, 0x2, 0xff, 0x8001, 0x7f, 0x79, 0xb, 0xba, 0x3, 0x2, 0x101, 0x1, 0x9b50, 0x7ff, 0x6, 0x0, 0x4, 0x7, 0x0, 0x8, 0x10, 0x266, 0x2, 0x0, 0x6, 0x6, 0x6, 0x7fffffff, 0x1, 0x3ff, 0xffffffff, 0x16a6, 0x7ff, 0x6546, 0x2, 0x6, 0x8, 0x101, 0x1, 0x30a, 0x2, 0x800, 0x3, 0x4, 0x0, 0x9, 0x0, 0x5, 0x8, 0xfffffff8, 0x5, 0xe, 0xcf, 0x4, 0x1000, 0x341, 0x8, 0x9, 0x7, 0x4, 0x3, 0x3, 0xc, 0x5, 0x7f, 0x0, 0x45, 0xb7, 0xfffffffb, 0xfffffffb, 0x0, 0x10001, 0x6, 0xc, 0xfff, 0x5, 0x8, 0x8, 0x400, 0x1, 0x0, 0x5, 0xf7, 0x4, 0x3, 0xe, 0x2, 0x55, 0x3, 0x2, 0x1, 0x3, 0x12b5, 0x9, 0x4, 0x0, 0xff, 0x7f, 0x8, 0x2, 0x1, 0xb663, 0x6, 0x1b1a541e, 0xc, 0x2, 0x4000000, 0x9, 0x8, 0x4, 0x8000, 0x1, 0xba, 0x85a, 0x2, 0x1, 0x219, 0x3, 0x1, 0x2, 0x6, 0xfffffc00, 0x2e6, 0xbd, 0x1, 0x1285, 0x6, 0x18000000, 0x9, 0x6b8d, 0x1, 0x180, 0x8763, 0x1, 0x7, 0x5, 0x7, 0x80000000, 0x469, 0x3, 0xd, 0x9, 0x10, 0x4, 0x80000000, 0x9, 0x6, 0x7, 0xfff, 0x5, 0x3279, 0x3, 0x10, 0x6, 0x731c, 0x400, 0x9b, 0x7, 0xfffffff7, 0x9, 0x1, 0xfffffbff, 0xf, 0x2, 0x7, 0x5, 0x0, 0x5, 0xfffffff6, 0x4, 0x9, 0x10001, 0x4, 0xbcfb, 0x3, 0x9, 0xa1a0, 0xfffffff9, 0x1000, 0x1, 0x1, 0xffffffff, 0x1, 0xf3, 0x80000001, 0x2, 0x9, 0xc7, 0xa28f, 0xfff, 0x1, 0x7fffffff, 0x8, 0x9, 0x8, 0xfc7, 0x3, 0x8000, 0x81, 0x0, 0x1, 0x9, 0x1170, 0xffff, 0x7, 0x8, 0x3, 0x6, 0x4, 0x7, 0x9, 0xd, 0x8, 0x8, 0x8746, 0xb61c, 0xa, 0x4, 0x7f, 0xebd9, 0x7f, 0x3, 0x8, 0x2, 0x7, 0x31a, 0x0, 0x756, 0xed9, 0x4, 0xe, 0x4, 0x3ff, 0x5, 0x3, 0x3, 0x8001, 0x9, 0x8, 0x4, 0xc3, 0x1, 0x7, 0xf, 0x1, 0x6, 0x1, 0x2, 0xfffffffd, 0x63712385, 0x5, 0x7, 0x1, 0x7, 0x4800000, 0x7, 0x9, 0x80000001, 0x7, 0x0, 0x4, 0x2, 0x1, 0x8000, 0x400, 0x0, 0x7, 0x9, 0x3, 0x6, 0x3, 0x28000, 0x38000000, 0x40, 0x5, 0x9, 0x0, 0x80000000, 0x2, 0x3, 0x2, 0xb4c, 0x8, 0x10000, 0x7, 0xa23, 0x5840, 0x3, 0x4, 0x3f3, 0x3, 0x3, 0x10, 0x2, 0xf, 0x7e, 0x4, 0x7, 0x0, 0x79d8476e, 0x7, 0x7, 0x4, 0xffff2936, 0xbe, 0xc4, 0xffff9dff, 0x3, 0x81, 0x9, 0x9, 0x8, 0x101, 0xf5bf, 0x5, 0xfff, 0x6d, 0xfffff061, 0x0, 0x9, 0x1, 0xd, 0x10, 0x6c, 0x5, 0x0, 0x5, 0x3, 0x7, 0x800, 0x9, 0x7fff, 0x3, 0x1, 0xff, 0x2, 0xfffffffa, 0x0, 0x9, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0x0, 0x2, 0x2, 0x2, 0x7fff, 0x5, 0x9, 0x2, 0x8, 0x1, 0x0, 0x8, 0xfffffffd, 0x2, 0xfffffffb, 0x80000001, 0x5, 0x5, 0x64000000, 0x9, 0x7, 0x9, 0x2, 0xa, 0x4e, 0x0, 0x7, 0x5, 0x2, 0x5, 0x781, 0x7, 0xe, 0xa, 0x40, 0x69f1, 0x6, 0x5, 0x1, 0x4, 0xba4, 0x5, 0x229e9d49, 0x7fffffff, 0x2, 0x81, 0x10, 0x2, 0x0, 0x10001, 0xdeb, 0x81cf, 0x3, 0x80000001, 0x7, 0xb8000000, 0x0, 0x7fffffff, 0x3, 0x9, 0x2, 0x10000, 0xfffffff8, 0xb, 0x1ff, 0x8, 0x73, 0x3, 0x8000, 0x2, 0x3, 0x71, 0xfffffff8, 0x8, 0x6, 0x9, 0x54c3dfaa, 0x5, 0x9, 0x1, 0x401, 0x7ff, 0x7, 0xfffffff2, 0x2, 0x3, 0xec05, 0x16, 0xcb, 0x7, 0x81, 0x6, 0x80000001, 0x299, 0xffffffff, 0x0, 0x10000, 0x1, 0x8, 0x9, 0x9, 0xcc3f, 0x8, 0x8000, 0xfffffff9, 0x200, 0x2, 0x8, 0x2, 0xfffffffa, 0xce, 0x8, 0x4, 0x1, 0x3, 0x2d6a7afd, 0x2b8873e0, 0x2, 0x7, 0x4000, 0x1, 0xd, 0x6, 0xdd, 0x4, 0x4a4, 0x4, 0x0, 0x7, 0x0, 0x9, 0x480, 0x8, 0x800, 0x9, 0x10001, 0x5, 0x5, 0x401, 0x1, 0x0, 0x9, 0x6, 0x8, 0x6, 0x9, 0xe5, 0x5, 0x18f, 0x7f, 0x9, 0xffff, 0x1f, 0x8, 0x9, 0x2, 0xfff, 0x9, 0x5, 0x2, 0x5, 0x8, 0x400, 0x81, 0xf, 0x8, 0x7, 0x0, 0x5, 0x13a, 0xc5, 0x8, 0x9, 0x7, 0x10, 0x1, 0x5a1c76bd, 0x3, 0x2, 0x1, 0x4e9, 0xfffffffa, 0x9, 0x4, 0x8, 0x6, 0x1, 0x9, 0x7, 0x8, 0x8, 0x2, 0x7, 0xf, 0xaac, 0x9, 0x2, 0x748fc764, 0x0, 0x1000, 0x8, 0x8, 0x0, 0xff, 0x401, 0x0, 0x2, 0x6, 0x200, 0x22d, 0xf, 0x4, 0x6, 0x1ff, 0x7, 0x3, 0x4c7, 0x4, 0x101, 0xfffffffa, 0x0, 0xd8cc, 0x3, 0x3, 0x4, 0x0, 0xb56, 0xa404, 0xfffffffd, 0xc, 0x80000000, 0x5, 0xc02, 0x424c, 0x7, 0x615, 0x3, 0x2, 0x5, 0x401, 0x84d4013, 0x9, 0x83, 0x1, 0x55, 0x7, 0x9, 0x7f, 0x2, 0x7, 0x1, 0x8000, 0x4, 0x400, 0xffffcddb, 0xb, 0xe0, 0x0, 0x6, 0x35, 0x4, 0xfffffff8, 0x0, 0x9, 0x3, 0x9, 0x81, 0x9, 0x4, 0x1, 0x8a8, 0x4, 0x2000000, 0x2, 0x7fff, 0x7fffffff, 0x8, 0x985c, 0xe2b5, 0x2a14, 0x7, 0x3, 0x401, 0x400, 0x35, 0x10000000, 0x9, 0x50, 0x7, 0x5, 0x7, 0xffff69c7, 0xb49a, 0x9, 0x43, 0xfff, 0x1, 0xfffffff4, 0x2, 0x0, 0xa, 0x2, 0xa, 0x313d, 0x4, 0x230b, 0x9, 0xb35, 0x3, 0x9, 0x1, 0x5, 0x100, 0xffffffff, 0x4, 0xf9, 0x0, 0xd69, 0x2, 0x3, 0x9, 0x2, 0x4, 0x800, 0x101, 0x0, 0x6, 0xf, 0xffffffe0, 0x3, 0x6, 0x6, 0x800, 0x101, 0x8, 0x8, 0x1, 0x7, 0xfa09, 0xc, 0x0, 0x7, 0x80000001, 0x5, 0x1, 0x0, 0x80, 0x6c9e, 0x1, 0x101, 0x1000, 0x7f, 0x9, 0x8, 0x1000, 0x1ff, 0x7ee6, 0x8, 0x1, 0x4, 0x1, 0x7, 0x7, 0x4, 0x0, 0x3, 0x0, 0x4, 0x8001, 0xc, 0x4, 0xb, 0x6, 0xffffffff, 0x7, 0x0, 0x7, 0x9, 0xffffffff, 0x3, 0x1, 0x4, 0x1ff, 0x2, 0x0, 0x7, 0xffffffff, 0xfffff801, 0x3, 0x1, 0x0, 0x0, 0x81, 0x1, 0x7, 0x1000, 0x8e, 0x21045099, 0x2, 0x8001, 0x8, 0x80000000, 0x1, 0x6, 0x0, 0x80000000, 0x8, 0x80000001, 0x5, 0x1, 0xcd98, 0x8, 0x80000000, 0x0, 0xb6aa, 0x5bf, 0x5, 0x800, 0x3, 0x6, 0x40, 0x1ff, 0x6, 0x4, 0x7fff, 0x3, 0x4, 0x3, 0xc, 0x93, 0x5, 0x10, 0x9, 0x5a5f, 0x7, 0x1000, 0x8, 0x0, 0x0, 0x9, 0x3, 0x7, 0x6, 0x9, 0x0, 0x6, 0x3ff, 0x80, 0x7, 0x1, 0x6, 0x60000000, 0xd, 0x2, 0x2, 0x80, 0x5, 0x200, 0xfffffff3, 0x4, 0xf, 0x3, 0xd, 0xd176, 0x1, 0x3, 0x3ff, 0x2, 0x8, 0xfdb, 0x1e0a, 0x401, 0x1, 0xe225, 0xfff, 0x7f, 0x2, 0x8, 0x9b86, 0xb81, 0x0, 0x491f, 0x1c00, 0x3, 0x9def, 0xfffffff4, 0x9, 0x1, 0x6, 0x0, 0x1, 0x4, 0x5f1f, 0x0, 0x4, 0x3, 0x6, 0x7fffffff, 0x0, 0x487a1f7b, 0xfffffffb, 0x4, 0x6, 0x7f, 0x101, 0xffff76aa, 0xb, 0x6, 0x3, 0x10, 0x0, 0x7, 0x29c, 0x0, 0x7, 0x2, 0x1, 0x6, 0x81, 0xd302, 0x1, 0xd, 0x1, 0x3, 0xffff7fff, 0x8, 0xe3f, 0x0, 0x8, 0xc, 0x80, 0x9, 0xf6d4, 0x5, 0x8, 0x80000000, 0xc60, 0x3, 0x6, 0xfffffffb, 0x6, 0xd54, 0x1, 0x2, 0x0, 0x169, 0x54000000, 0xf, 0x3, 0xfffffff5, 0x40, 0x7, 0x8, 0xaac, 0x4, 0x5, 0x0, 0x5, 0xfffff5ae, 0x4, 0x4, 0x9b, 0x3ff, 0x2, 0x8, 0xfff, 0x80, 0x8, 0x8e0, 0xd0d, 0x1, 0x710, 0xf01f, 0xcba000, 0xffffff80, 0x5, 0x5, 0x0, 0x6, 0xa, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4a19f7c6, 0xe5d, 0x0, 0xdef8, 0x7ff, 0x0, 0x4, 0x4, 0x1, 0x1, 0x2, 0xfdc9, 0x2, 0x5, 0x7, 0x3, 0xc6e, 0x3ff, 0xd, 0xf5, 0x9, 0x1, 0x40, 0x8, 0xfffffffb, 0x4, 0x3, 0x1ff, 0x9, 0xfffffff7, 0x3e48, 0x2, 0x8000, 0xb, 0x935f, 0x428, 0x7, 0x0, 0x6c, 0xcb, 0xd, 0x1, 0x6, 0x1000, 0x2, 0x6f1, 0x800, 0x4, 0x6, 0x206, 0xfffffffb, 0x401, 0x7, 0x73, 0x6, 0x40000000, 0x9, 0x2, 0x0, 0xfffffa0a, 0x5, 0x101, 0x2, 0x0, 0x9, 0x3, 0x802, 0x4, 0x400, 0xfffffff7]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

4.391815546s ago: executing program 1 (id=2431):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/154, 0x9a, 0x2, 0x23}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

4.390968735s ago: executing program 1 (id=2433):
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002006, 0x0) (async)
recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002006, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
fcntl$getown(r1, 0x9) (async)
fcntl$getown(r1, 0x9)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x100)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xdeb4, 0x7, 0x6}}) (async)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000140)={0xdeb4, 0x7, 0x6}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
syz_usb_connect(0x1, 0x789, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0xbc, 0x15, 0x76, 0x20, 0x2001, 0x3311, 0xb098, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x777, 0x4, 0x3, 0x4, 0x60, 0x25, [{{0x9, 0x4, 0x11, 0x8, 0x1, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "71894507da7a"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x1, 0x6000, 0x40}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x14ec, 0x5, 0x1, 0xa, 0x2aa, 0x59}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "b4c5f8e507"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x8001, 0x7}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x0, 0x7, 0x3, 0x9, 0x3}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ef, 0xd, 0x4, 0x24, [@generic={0x22, 0x23, "fb5770dcdaf003fe5c86449013657787cb76ef69a987c31cec14c1d94ed6dfad"}]}}]}}, {{0x9, 0x4, 0x59, 0x3b, 0x8, 0xa3, 0xd8, 0xed, 0x6, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "712edafc"}, {0x5, 0x24, 0x0, 0xd6e7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x38}, [@acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mdlm_detail={0xeb, 0x24, 0x13, 0x9, "f4d35369eac4dafa40fc0f005609a4173451b9823955fe43c1960835f56f794fd7d24c6471ac13528e3129fdbec600f783b3a75085c6e67ff3f34c57258ee4ce754b2af58bf97cf24775901f71b62e10597e34c91ce354e62f1590a0efbee2215f2d186f5a480c4828a2a4fcaf7873674496b0eb1c534ef1996da411d8c442c6e8dc44ec8ddeafce02246fa110f41a556bf1bf4933b735f614278af44485d8845f2d5ae29939145c43533daafd07be35c65995a07ba23577c126395a74079ccda3c72d5c2669dc193a6d100da9f65b55e578061b60acbdd49928fbd95e5790b0b8da470657ab2a"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4e}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0x1}]}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xc}]}}, {{0x9, 0x5, 0xb, 0x0, 0x408, 0x1, 0x9, 0x10}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x7, 0x58, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd4, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x7, 0xc, 0xb1, [@generic={0x62, 0x4, "c3019fc8fb370a37166ddb76c1b2a0210e6ee3215c6770c4e86fdac1aee9d42735373e3cfeab244d6ecde88d1404fa85fb43e849efb895d5e26d066625ea4e16d235ae6ea26710b7641d617af9ce8987193fa3bb891c2cc995fda0e737de2ce4"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xf5, 0x19, 0xd2}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x40}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7, 0x0, 0x1}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x0, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0xf, 0x24, "afbd56562cef36f30ae4766276"}]}}]}}, {{0x9, 0x4, 0x81, 0xf, 0xa, 0x89, 0xc1, 0xc0, 0x1, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9a27f9de"}, {0x5, 0x24, 0x0, 0xbc79}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1ff, 0xf}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x29}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x8b4e, [0x5, 0xb5, 0x3, 0x8, 0x0]}, @acm={0x4, 0x24, 0x2, 0x8}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "3792"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2c57, 0x6, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe2, 0xb7, 0x2, 0x98}, @obex={0x5, 0x24, 0x15, 0xf33}, @mbim={0xc, 0x24, 0x1b, 0xe, 0x8001, 0x6, 0x6, 0x7, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9, 0x4, 0x4}, @dmm={0x7, 0x24, 0x14, 0x8, 0x3}]}], [{{0x9, 0x5, 0x0, 0x0, 0x418, 0x1, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3ff}, @generic={0x29, 0x24, "2a2786eec690828232686548602b45b2b73972bbb36ebdbaae4f70b55798f8c7ccb6a06473a425"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x2}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x4, 0xf2}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xd, 0x5, 0x5, [@generic={0xe0, 0x12, "6b1e717c4361d1b90aa450ee256cc5fa6436568358723830d2581850905b9c393cb6c76178f720915392076ad5b547e2087ba7bd38e025474d63b19f3c40acf95c5a01517177655b05846015145af6446b6b9a0d3269c96872819dfb9053d52b8c6688df99d3379b210984c9e740a12bab41ce76bc718e1e88566eda7c45bf62ebc89c71291d5a6243cc6277e9e111382c521e059dfe0bb13ac69363b8cacefbd16db583b517d7169cf3b09e86f0968121bbdb55cc3235ccc21f689762a8eab6e6a863f1dfa71264058b18357982244016a99ce45ed839ccd6500bd86151"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7f, 0x8, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x400}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x81, 0x5, 0x4}}, {{0x9, 0x5, 0xb, 0x1e, 0x40, 0x9, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x3, 0x81, 0x9, [@generic={0x4a, 0xa, "968190af021c55c8934d8ac1ac89b42300fa1884f5c918b96c9dc46f837e5b923c36665fcb988377f35e6016004931642449aba75bf67bdd3b12edd38a9089fb03d61c3bb738eac1"}, @generic={0xd3, 0x31, "480d5ac530d1cbecb2f4e0f385665692ae48ef246f49d3a417f13d00d693007d926cf9d886d1ab48a484d3d72da123a7c8d8d6c4a3954252dccc8301f48bf57cb5b2fa7b4edf20f195a96816ed281fd6ef3f0c42f36d0daf4d844d961d31174cbe6ccdd4e955cde359d7e8c9a6791b7c30207c731c40c7c5c007aa5fff5985a7eab60a37cb3a2afc78dd02a0ebe4464929e095554afb8527b85c9b373de2994066f4122658f46ebeb8c56306f4475e6f855fbc444392b9fc723aa150bc779118b8ddcff361a15995758ca9e4c3fdfa2c88"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x7, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @generic={0x7e, 0xa, "92b43081ec1aa218e954037eaa512727a7bbacfeeb2132118a04559d6083b5b7d3029d7213c2abb659491754a909ed8925579cde25a58fb3836e56dc949af62d3af7ea3d92b32c64e56b9d8e19b786938358a316d5c012b2d187f710bb155d4ecccf5f88dab6bbb2fab8408113f399eef02bd0d4cb4bbc489209af8b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x80, 0x1, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x7f, 0x4, 0x30, 0x6d, 0x37, 0xe, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0xda, 0x3, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9655}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x6, 0x2, 0x81}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x44, 0xa4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}, @generic={0xee, 0x4, "c3f5e7bd6d60005064e3040292aeccf930203c7f712df8cf522e18fb811a170f2b574a09b3aae9dfe8585f700b97f6c845780963353fffe085a72170e750c6db8d4eb2774bac7aeb7a6a9939cf55a8a3785e6c39d1876220594bc75725e9487cbf8620bee650a8900060320d9a99e2195df7094867faf667c140c4f093b68cf3c5ae9ff98982ef9fb0a16bddecf5e60ad2498887b49a92bd8f7fdc11fd76b272049248fdd26de6b39760e3c060992f96f3f62ef47f024c8fa00883c7b49c46e8d5490a18266818503e41331e9a7a61a440180b87c90f2a913e26526ec271f6a438ef1af24bc04c0d3203e895"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x9, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x6, 0x6, 0xff, 0x1}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x800f9497e5653eea, 0x4, 0x3, 0xe, 0x1}]}, 0x9, [{0xcf, &(0x7f00000004c0)=@string={0xcf, 0x3, "166522584e9443b295b89d74e0a5f2bd4d00072e2484b9d5247059f4cc2e7e0058231053b58d0f23796e6d47a5c067e07b9c76898ea1cc3cb1b840a352655237131051484293c9f9d77742ad9d46c3e6abe81f68c5b465d33a6309fd80646ee8dea4cf1e45e14eb5051144c3708213213af13063ef37d3511cdaa530114c9b869d128269a68a64c276d5772f678ed6d1cec78c72c6f7eca4c1c6db39d71e1a48b0cf050b32b44d0e5fc270b9633cf5d638a3ca81b11df72b0f3660b749e2e7885ba7275f4eefd9f815d574e484"}}, {0x100, &(0x7f00000006c0)=@string={0x100, 0x3, "63eefa78402bc6881dfbe5f521004c1e8e420247f13b5532515eda47edbdea05551102d2a39fbbb724d66779a4052acc451a4b79a255e5e4ed2a57937b3df00e3574876690c5ccacc7c8cc2baea56837dff08784f4c46d1a389e6dd592b340570395fad7fdf6744049fa965837b28df688f0f327da9b91595bb901bf9f24bf7531ab9409ebefe320f30234bd05aa36547920c9f8c1006d1c7c66f589acd5e3d40b905f09d2e26c91040971107c9da42a91e0055b15c04602e478799ad4502130d011e8839c613828487cc1b08ba93eb47a23d3aab84d3df05dce2f05129a4bfc5ea614b67c02aaa5ab46036e541c3f51f408c3e53b92a570dba0cf556ab0"}}, {0x57, &(0x7f00000005c0)=ANY=[@ANYBLOB="5703a15d9b6a0b79add39f680f10003096f2e30d1000ed7890c00ceeb6b14a53a393d1fb0000a825b5953c7a66a21ff2122778e33cb3a153ee793f66fe32f681c2a40d39234e52e0895bc4cb84d07d7aae596aaf0d3400"]}, {0x9f, &(0x7f0000001080)=@string={0x9f, 0x3, "36046448e6809a8f63bb2644136eea349348030c9beea496e1f187b2dbe12e2204a7435efc90b55ef2908c91b3b5cd83b58ae2cd7f3fd8bb80a78094d4a7267b52aa3e839ea482cde570c7114895738a05f8f327c11d6f2c4c50dad9aacad9f1f8391ab31f81d198c67987a537ddccd2e761737912a5b27c73d97bd6e5c3859637915e1d40d7387df2b046eedd339eeef13e1a1ba388636b8114ee681c"}}, {0xf4, &(0x7f0000001140)=@string={0xf4, 0x3, "6fb5e4409736586d4ba1eded6bdb07c31aefdff0ea63d371e13ae03baa7036d69d72f78ede87cfd7dc264faedb549f85b7568658e1df5ac6846189f28a13b30a6da1a32f1ea3f37313599cd060c7c2a55a55d0b17d064ff8c33665ff1f1580a7346b75269996769552fc4be4fd79c65592a64b2d71d6e5960c851e5a5ca81f999e150e6e92435298165d1a5585344dd0ec5eaa75320a43d67eb7e947300b73c4bf5654e6cf9d872c6e48600056cce389892e0a2298473b00a9667e1e2727ca5dfc8922991b66a08d9ad46f02028b7eeec10ba6475c6d2920d540a7f77cf0915c921e0d1c90a16093cd7d0aa2c82fcc8b0b7e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42f}}, {0x58, &(0x7f00000007c0)=@string={0x58, 0x3, "73d1c54aab7bad5a45d81318f8da2d46b434b99e50ba3f55577d5b52c31b87c1bcfd37932cd7628c4c9cfcb95dfc90c653afeb51c046a1462bc5bf34ab5655c1769f9ce45d6b3cd4e38a0071cb65f847a75304ff7564"}}, {0xdc, &(0x7f0000001240)=@string={0xdc, 0x3, "4fb429f13a115f47debfdc710f19715b71700904672e2580d8ca5e5834a997630de2bc57d2b42a10a9353a1c2974e98dbbc21a5bd5c34b3f8bb03c8651cef6f3eb04d75abc84664352af02b8af555995b60712ad12b5dbf13e6db0bf96dcd288925d25d97a8cd047d26faea4b2fc026244bcd56953ba70ce699777c730fd57284076b69e250632c14dbe9c5ca54efdb6b188f5747a327b742a125de6d71148e028a225311e1bd90a0ea92369067fa9b220764357f1e56cc5ed0cc9ead9a796b2ecc3c2b31e3eee4f6cbed18bd71cd004008aa1e85aa81d70b0a6"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x421}}]})
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f0000000880)={0x20, 0x12, 0xc9222ec23c9a640f, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x14e, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="17ad583718"]}, 0x20}], 0x2}, 0x800)
r8 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
setns(r8, 0x0) (async)
setns(r8, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r9, @ANYBLOB="00022bbd7000fcdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
close_range(0xffffffffffffffff, r6, 0x2) (async)
close_range(0xffffffffffffffff, r6, 0x2)
r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

3.08100801s ago: executing program 1 (id=2454):
pipe2$9p(&(0x7f0000000240), 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) (async)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13)
write$P9_RSYMLINK(r1, &(0x7f00000001c0)={0x14, 0x11, 0x1, {0x1, 0x4, 0x6}}, 0x14)
dup(r1) (async)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}})
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async)
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x3, "1424"}, @global=@item_4={0x3, 0x1, 0x6, "d803aa2f"}]}}, 0x0}, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000002980), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0)
pipe2$9p(&(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r7 = dup(r6)
lsetxattr$security_selinux(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r7)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r8, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc085}, 0x81)
write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'syztnl2\x00', <r11=>0x0, 0x2f, 0x1, 0x1, 0x1, 0x76, @private0, @mcast2, 0x40, 0x80, 0x0, 0x52800000}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000015c0)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040855}, 0x4000894)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
ioctl$IOC_PR_PREEMPT_ABORT(r12, 0x401870cc, &(0x7f0000000000)={0x4, 0x3, 0x8, 0x6}) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r12, 0x401870cc, &(0x7f0000000000)={0x4, 0x3, 0x8, 0x6})
pread64(r12, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

1.618078669s ago: executing program 1 (id=2469):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6)

1.605335519s ago: executing program 1 (id=2470):
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x50002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x14, 0x6, "34da8fbd1584"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x20, 0x15, 0x57, "dbc0a7b54efac29a38110837e62573cde380f7c75cd2063dd70f2c0c012f965c4a293281ea9e31c4f24a557e7d4a6ee33ba8949bb6ddd7d1822907ab78812ccdad06352095be8b0ef3b00de606ec4c848b762f541916a8"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0xd4, "0593f0924a8aba438eb410eb6ff75ddc5e000de1d9a0c20ff06a9f09a74043737d579c9868ab98bb3a1a67e008e60e28184331599404dbf62c184277c940f365fff476eadfba76af4e88d94133123c8c9d3e61e997a37cb5a9baec3e2899fe6c6406df9e8a348fba08cf92a01e35be4fee730929c196d091d25d86d9a3019b4bac7f129ebc77e88dc14e61fb3135cd12a14fd2d8ded5424bf1ed8f409d4f883d05aed213827d7ac2c6776081186e7459b239ed429f8b281a76ff1b6eace93be5c59e4d4f31c6bf957041ddb27e61c379b0547798"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x3}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000002202090002000000fddbdf250100000041875a24f61b2e055b4df20c6b54374b866956fab43918e0862f1e7467ad24a9b5ab9c220fb0c1ef2c9965e789f24b1f6822654a1e6921afe4a69dba86d7e37cda52de6e5f088da528c4850ddebe42393407b84ba2f6aa4a8112d6eaca8731d77ca5ef3b23370800"], 0x7c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}})

1.468303751s ago: executing program 0 (id=2471):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000c4010000"])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})

1.437932532s ago: executing program 0 (id=2472):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'pim6reg1\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0xc6, "9f2cdb51efda66bb3fa32aa7efba234e2b9fb9fd0fb29ac5dc1213e1e64c778eeb3c1902cb0d9ffbe5214bd4d82d54af5897074936edb15502261613df27da62926bfdd24ea64095677cdf5d6e51bb642332c6ea18c309abe9a37e7f940ca340f1ddf21646c878b23eb1baa676ded188eabafe8ed7fe14b3e7d6ffa563aa17f14217f92220a9af7b361d8ba32fa6dc4d9ca07417cc93f58a26d9a8d6e245453d25c624ea55c144197ddf56bc6f32498f33293735f3685fc896f7dd9847ff0ef3711145fe591f"}})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x363042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff95, {0xeeef0000, 0xf000}}, "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", "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"})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"])
syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYRES8=r0], 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendto$packet(r1, &(0x7f00000007c0)="0b0312002e9b97cf5db4d0d010f6a12f", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc8282, 0x10)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0xc1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x80800, &(0x7f0000000140))
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
r10 = socket$xdp(0x2c, 0x3, 0x0)
accept(r10, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

800.277194ms ago: executing program 0 (id=2481):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000400)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) (async)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001a0001002abd7000000000000a00fc003a2a5e247b000000080019"], 0x24}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x3c9182, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x200, 0x4, 0x0, 0x0, @adapter={0x4, 0x64, 0x5, 0x1, 0xab7c}}]})
syz_open_dev$hiddev(&(0x7f0000000880), 0x1f8814cb, 0x28482)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
write$UHID_INPUT(r7, &(0x7f0000002280)={0x8, {"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", 0x1000}}, 0x1006) (async)
socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x20, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0xa, 0x4d, 0x39cc191a, 0x59, 0x6, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2000004, 0x7, 0x4, 0x3c57, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xf, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x80, 0x0, 0x7, 0x7ff, 0x8, 0x8, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x8000005, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8003, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0x2, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x20000009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xd, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x70135429, 0xffffffff, 0x7, 0x40, 0x9, 0x48c93690, 0x42, 0x400001], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f2, 0x0, 0x2, 0x86, 0x1, 0x9, 0x4, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x2, 0x4000cc53, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0xff], [0x0, 0xea, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x8, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x8a20, 0x6, 0x4, 0x3, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async)
mount$9p_fd(0x0, &(0x7f0000000900)='./cgroup\x00', &(0x7f0000004380), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd.o=', @ANYRESDEC=r0, @ANYBLOB=',k']) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10008, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_in\x00Da\x00\x00%,\x00']) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x78, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd, @flat=@weak_handle={0x77682a85, 0x80, 0x3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}, @decrefs, @increfs_done={0x40106308, 0x3}, @clear_death], 0x8c, 0x0, &(0x7f0000000600)="eed1dd6e88578042931d3da2d92dc197895a4a00afaa5dfa419c0b9d10310e20e5dfd294cdb0631e1432f5ef3e43ba23d7b6406a63b67a88a29c70f4b6d739dd28aff9e36a020f2376fc8465a65e2066425459fb9adc19e0daf7d4098c4df90a40f617d63a79334bc1edb6babb82f07c6470f1ff62c1abcb84e7663f093d5615a0c3b04c12b7bda30fd5ffe0"})

784.548194ms ago: executing program 0 (id=2482):
syz_io_uring_setup(0x5716, &(0x7f0000000040)={0x0, 0x860f, 0x2, 0x0, 0x3dc}, &(0x7f00000000c0), 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000b0100"])
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x900, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x8fe69000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x10)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17)

640.242287ms ago: executing program 0 (id=2483):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000380)={@void, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x1, 0x5, 0x55, 0x64, 0x0, 0xfc, 0x21, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x94, [@multicast2, @local, @empty, @private=0xa010102]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x0, "54c7ef", 0x2, "7642df"}, "b616e943a5bc96ae199102a5fb9ba30070e2463427eb13ab1f70389def"}}}}}}, 0x63)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8953, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
setuid(r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
set_tid_address(0x0)
bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"})

617.554298ms ago: executing program 0 (id=2484):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xbdd887f17ac1ce75, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0)
write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
read$FUSE(r1, &(0x7f0000009080)={0x2020, 0x0, <r5=>0x0}, 0x2020)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000380)='erofs\x00', 0xa0c000, &(0x7f0000000180)='dax=always')
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10)
syz_fuse_handle_req(r1, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x4, 0x9, 0x3, 0x8, 0xe96, 0x8000, 0x555, r3, r4, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x1000007fd)

248.257495ms ago: executing program 2 (id=2489):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000001300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) (async, rerun: 32)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, 0x0, 0x15)
r6 = dup(r5)
write(r6, &(0x7f0000008840)="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", 0x1001) (async, rerun: 32)
r7 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800) (rerun: 32)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000180)) (async, rerun: 64)
splice(r3, &(0x7f0000001500)=0x140000000000000, r4, 0x0, 0x9614, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x78, 0x183281)
socket$inet(0x2, 0x5, 0x106) (async)
ioctl$USBDEVFS_CONNECTINFO(r8, 0x8108551b, &(0x7f0000002a40)) (async)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast1, 0x0, 0x40, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00004500c4c32c30edb92a7d69cd0c0701bf0002002d5cf30e00c5ee7d92631db688bc5376a3bd023e2b434a3342136a308c340b92ccddd612d101b58e7a73f59ad55b4e4260384e2570db1f7b865b0436ec40ae58eb21f468c6d954bb13ab5e2857a6ccc8d7d3dd5cd106089a557e921c042ec1b4fd6fdd8b24c84ead62b7b9eab52373efbdaf36970bf2267df46171c63a9e8897f2efc25fad527c179dd0cc073ab7d858247ecd03ec1f01f39e6312fa4a34459c39d7545cff86ea61d390b76d816f3a4e516f1067f684d65ade47eb1a4244d95a6786778f4dd95d2672dca7823aa2e87f6597a34d0078c966b6a2b483702a0f0b"], 0xf) (rerun: 32)

192.269046ms ago: executing program 2 (id=2490):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
pwrite64(r0, &(0x7f0000000180)="1e0b34f44293c32d51dc1936f0fe669f3c8d78c0688d463e329cc337b8f0", 0x1e, 0x7)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1c, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
fchdir(r1)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0)
write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x5) (async)
socket$inet(0x2, 0x3, 0x4) (async)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
pwrite64(r0, &(0x7f0000000180)="1e0b34f44293c32d51dc1936f0fe669f3c8d78c0688d463e329cc337b8f0", 0x1e, 0x7) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1c, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async)
fchdir(r1) (async)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) (async)
write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)

191.995076ms ago: executing program 2 (id=2491):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async, rerun: 64)
pipe2$9p(&(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000) (rerun: 64)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async, rerun: 64)
r4 = dup(r3) (rerun: 64)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 32)
r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x1b>l\xf6\x1d\\(\x95\xa5\xe0\xd0`]\xc3\x14&\xc3\x82;2zW\x8d\xadE\xa4B\x16Kq\x12\xf9T\xcb\xd5\xad\xe8%\x99HnJ.\xca\x15;\x05\x83YYa\xbbhEL\xd8\xa3\xaa\x15\xb7\xaf\xb2\xaa\xb4\xff6L\x90\x056\xdb\xf4\xeaI=\xa4\'\xc3<\xb0\xcc\xcb\x86\aFA\xef\x97|\xe3!\xeb\x82s*\\Y\xb9\xd3\x9dW\xce\xea\xc3\xdb\xc7\xa2by\xba\x97\xb2\x1aop\x04$/b*x\x87\x11;yN\\6\xa3\x8al\x06}\xadXw\xda\v\xeb\x97\x86,Z\x91\xce\xe21\x16%9\xbf\xbb\x9f3JO\x1cE\x92\xb5\xcaO\xcb\xe72\xc1\xc6@T\x10\xac\x9b\xabZGU`s\xdd\xb6\xe9^S\xf8n\xcf;\xb7\ahR\xe0{X\x90C}\xf9B\xa8\xe0-3P\a\x10Y(%\v%,L\xf4\x97\x96)\x85U8M\x89O', 0x0) (rerun: 32)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) (async, rerun: 64)
write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18}, 0x18) (rerun: 64)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '-}%/'}}]}}) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r7, &(0x7f00000042c0)={0x2020}, 0x2020) (async)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000240)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

141.448397ms ago: executing program 2 (id=2492):
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
write$P9_RREADDIR(r0, &(0x7f0000000080)={0x87, 0x29, 0x1, {0x7, [{{0x20, 0x2, 0x3}, 0x0, 0x4, 0x7, './file0'}, {{0x8, 0x2, 0x7}, 0x50, 0xff, 0x7, './file0'}, {{0x80, 0x4}, 0x150f, 0x5, 0x7, './file0'}, {{0xa0, 0x4, 0x1}, 0x6b2dfb5e, 0x2, 0x7, './file0'}]}}, 0x87)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0xc02, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close_range(r1, r2, 0x0)

128.029927ms ago: executing program 2 (id=2493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cacIe=loose,nodevmap'])
r3 = syz_clone(0x40000000, &(0x7f0000000080)="728ee03a10e2e4883a619af8f1d412750ff13f65844b5abf19c5204beb76cb08d0af8f560bbe7cfa93df85ea", 0x2c, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000300)="070f")
r4 = syz_open_procfs(r3, &(0x7f0000000040)='sessionid\x00')
read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020)

0s ago: executing program 2 (id=2494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5) (async)
fchdir(r5)
syz_usb_disconnect(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000040)='pagemap\x00')
close_range(r3, 0xffffffffffffffff, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001100)={[0x1, 0x7, 0x80000000, 0x3, 0x9779, 0x1, 0xfffffffc, 0x7, 0x9, 0xe2, 0xacde, 0x5, 0x4, 0x1, 0x4, 0x8, 0x3, 0x6, 0x8, 0xfa8, 0x1, 0x0, 0xfff, 0xa8, 0x6, 0x1, 0x5, 0x40000000, 0x5, 0x800, 0x3ff, 0x6d1, 0x7, 0x5, 0x4, 0xfffffff8, 0x7fffffff, 0x7fffffff, 0x96e, 0x53, 0x4, 0xff, 0x87, 0x3, 0xef, 0x1a, 0x5, 0x9, 0x7, 0x7, 0xfffffff8, 0x5, 0x1, 0x10, 0x19e1, 0x3, 0xfffffffc, 0x7, 0x7, 0x3, 0x9d18, 0x7fffffff, 0x2, 0x3eef, 0x81, 0x3, 0xd, 0x800, 0x7000000, 0x6, 0x7, 0x101, 0x1, 0x5, 0x4, 0x7, 0x16, 0x0, 0x6, 0x7, 0x7, 0x80000000, 0x3, 0x7, 0xfffffff9, 0xfffffffe, 0x9, 0x5d, 0x9, 0x1, 0xe9, 0x0, 0xfff, 0x7, 0xe, 0x3ff, 0x1, 0x5, 0x3, 0xc59, 0xe, 0x5, 0x4a, 0xf0, 0x1, 0x81, 0xe, 0x8000, 0x8, 0x3, 0x3d1f, 0x7, 0x5, 0xa, 0x9, 0x80, 0x0, 0x81, 0x10, 0x3, 0x7, 0xc, 0x0, 0x1, 0x1ff, 0x6, 0x7, 0x9, 0x1, 0x6, 0x9, 0xf33d, 0x8, 0x80, 0x5, 0x3, 0x2, 0x0, 0x1, 0x3ff, 0x30, 0x0, 0x18, 0x1, 0xd, 0xfffffff9, 0x5, 0x1, 0xf8a, 0x7f, 0x8e, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0x1, 0x3, 0x7, 0x3, 0x27800000, 0x1ff, 0x4, 0x48, 0x99b, 0x8, 0x1, 0x2, 0x9, 0x5, 0x3, 0x8, 0xd7d, 0x3ff, 0xf, 0x6, 0xfffffffe, 0x8, 0xcef, 0xc, 0x4, 0x4, 0xf4, 0x9, 0x5, 0x101, 0x7389, 0x0, 0x7f, 0x5, 0x803, 0x5, 0x6, 0xcf8, 0x401, 0x3, 0x5, 0x8000, 0x8, 0x8, 0x8, 0x2, 0xfff, 0x7, 0x2, 0x8, 0x8a7, 0x0, 0xf480, 0x10001, 0x7, 0xfff, 0xd650, 0x200000, 0x3, 0x6b9, 0xe, 0x4, 0x5590, 0x6, 0x4, 0x8, 0x400, 0x6b7, 0x6, 0x2, 0x2, 0x10001, 0xc, 0xe, 0xffffffff, 0x400, 0xff, 0xfffffffd, 0x6, 0x8000, 0x23, 0xffffffff, 0x6, 0x92, 0x4, 0x6, 0x7, 0x6, 0x6, 0xa9e, 0x61, 0x8, 0x8, 0x5, 0xfffffffe, 0x10, 0x2, 0x8, 0x5, 0x2, 0x6, 0x1f2, 0x400, 0x2, 0x2, 0x4, 0x4, 0x5, 0xf9, 0x2e8c, 0x3ff, 0x8, 0x10, 0x6c, 0x2, 0x513, 0xffffffff, 0x5, 0x9, 0x5e16, 0x5, 0x2, 0xb, 0x4, 0x4, 0x9, 0x10000, 0xe5, 0x6, 0x0, 0x1, 0x423, 0x5, 0x40, 0x9, 0xfffffffe, 0x8001, 0x1000, 0x0, 0x6, 0x7, 0x8, 0xc00, 0x6, 0x9, 0x1ff, 0x1410, 0xd7, 0xfffffff9, 0x7, 0xffff, 0x10, 0x1, 0x1, 0x4, 0x1, 0x3e000000, 0x1, 0xfffffffd, 0x4, 0x3ef, 0x2, 0x7, 0x2, 0x5, 0x80000001, 0x80000000, 0x1, 0x101, 0x3, 0x8000, 0x9, 0xff, 0xed2, 0x5, 0xd930, 0x2, 0x2, 0x1bc, 0x5, 0x5, 0x0, 0x5, 0x2, 0x4, 0x0, 0xa79, 0x5, 0x2, 0x3, 0x4, 0x10000, 0x8, 0xa, 0xf, 0x8, 0x8, 0x9, 0x9, 0x40, 0xc, 0x1, 0x2, 0x4, 0xefdb, 0xe4, 0xb38, 0x400, 0xc00, 0x8, 0x9, 0x4, 0x200, 0x261a9112, 0x401, 0x3, 0x8, 0xf32, 0xf, 0x4, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x1, 0x9, 0x4, 0x9, 0x8f21, 0x4, 0x59, 0x5, 0x7, 0x0, 0x10000, 0x9, 0x0, 0xd, 0x100, 0x6, 0x1, 0x9, 0x8001, 0xd, 0x55, 0x1, 0x9, 0x8, 0x40, 0x3b4c5288, 0xfffffffd, 0x0, 0x29d0, 0x3, 0x7, 0x8, 0xffffffd6, 0x4, 0x9, 0x40000000, 0xf, 0x5, 0xffffff7f, 0x80000001, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfb3b, 0x0, 0x200, 0xfffffff7, 0x2, 0x4, 0xf42, 0x6, 0xf2cc, 0x3, 0x81, 0x9, 0xb, 0xe10a, 0xd, 0x40, 0xb36c, 0x0, 0x7, 0x3, 0x4, 0x3ff, 0xfffffffc, 0x1, 0x3, 0xfffffff8, 0x3, 0xfffffffb, 0x2, 0x4, 0x9, 0x5, 0x7, 0x40, 0x7f, 0x8, 0x0, 0x1000, 0x8001, 0xfffffffe, 0x0, 0x200, 0x0, 0x4, 0x8, 0x3, 0x3, 0x8, 0x1, 0x7, 0x7ff, 0x9b5, 0x3, 0x2, 0xfffffe00, 0x7, 0x3, 0x9, 0x8, 0x1, 0x10, 0xff, 0x7f, 0x8, 0x0, 0x6, 0x7fffffff, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0xb88, 0x3, 0x1, 0x1, 0x4, 0x9, 0x0, 0x7, 0x1ff, 0x1f57, 0xfc1, 0x5, 0x7, 0x1, 0x400000, 0x650, 0x7ba, 0x6, 0xc5, 0x9, 0xf, 0x7f, 0x0, 0x98d, 0xffff, 0x1, 0xffff, 0xffff, 0x0, 0x80000001, 0x7, 0x0, 0x6, 0x36, 0x8, 0x2, 0xa, 0x1, 0x6, 0xfffffffd, 0x800, 0xc6, 0xc4, 0x3, 0x0, 0x5, 0xd, 0x2, 0xfffffffc, 0x6, 0x4, 0x1, 0xffff, 0x6, 0x75, 0x6, 0x7, 0x47, 0x8, 0x9, 0x0, 0x5, 0x8, 0x8, 0x2, 0x7, 0x7ff, 0x8, 0x4da7, 0x1ff, 0x779, 0x8, 0x4, 0x81, 0x8, 0x7, 0xa4, 0x0, 0x0, 0x9, 0x5, 0x6, 0xb1f7, 0x800, 0x5, 0x9, 0x8, 0x100, 0x3, 0x4, 0xff, 0xffffffff, 0x532d, 0x36, 0x9, 0x6, 0xe7e5, 0x400, 0x8, 0x7, 0x7fff, 0x0, 0xf, 0x5, 0x7fff, 0x5, 0x1, 0xa88d, 0x7, 0xffff, 0x1a1, 0x8, 0x9, 0xb1, 0x7, 0x2, 0x8, 0x9, 0x2, 0xffffffc0, 0x4, 0x6, 0x3, 0x2, 0x6, 0x40, 0x3d2, 0x80000002, 0x282, 0x9, 0x6, 0x0, 0x6, 0x7, 0x200, 0x8, 0x8, 0x92, 0xfff, 0x3ff, 0x6, 0xfc22, 0xa41, 0xffff7fff, 0x3, 0x2, 0x4, 0x64400, 0xaaf, 0x3, 0x7, 0x6, 0x4, 0x10001, 0xda18, 0x1, 0x9, 0x4, 0x7, 0x2, 0x800, 0x2, 0x7, 0x200, 0x0, 0x5, 0x1, 0x8def, 0x40, 0x1, 0x6, 0x3, 0x8d, 0xffffffff, 0x2, 0xffff4331, 0x5, 0x4, 0x8, 0x80, 0x5, 0x9, 0x4, 0x6, 0x7, 0x9ce6, 0x80000001, 0x5, 0x3, 0x5, 0xcf0, 0x8, 0x7, 0xfffffffd, 0xf6, 0x8, 0x52d, 0x9, 0x38fa, 0x0, 0x8, 0x2, 0xa, 0x100, 0xa, 0x1, 0x7, 0x10000, 0x4, 0xe38, 0x1, 0xa1, 0x8, 0x1, 0x5, 0x1d6f, 0x80, 0x6, 0xd, 0x1, 0x70000000, 0x9fba, 0x81, 0x7f, 0x2, 0x3, 0x6, 0xfffffff8, 0xf, 0x40, 0xa, 0x4c8, 0x5, 0x7a6a, 0x81, 0x7, 0x2, 0x7, 0x9bc00, 0x100, 0x1, 0x9, 0x1, 0x70cd, 0x0, 0x1, 0x40, 0x4, 0x4, 0x2, 0x1, 0x1, 0x7, 0x7, 0x6, 0xcd2, 0xfffff18d, 0x1000, 0x6, 0x90, 0x0, 0xfffeffff, 0xbde8, 0x7f, 0x4, 0x8ae, 0xe7b0, 0x100, 0x1, 0x8000, 0x3, 0x401, 0x8001, 0x9, 0xfffffff9, 0xfffff801, 0x1, 0x21, 0xd, 0x6, 0xffffffc0, 0x3b, 0x3, 0x6, 0x4624, 0x9, 0x3, 0x3, 0x1ff, 0xb, 0x800, 0x7f, 0x6b69, 0x3, 0x3, 0xfffff001, 0x2d, 0xfff, 0x800, 0x6, 0xff, 0x0, 0x18b, 0x15, 0x5, 0x9, 0x0, 0x2, 0x0, 0x80, 0x10, 0x4, 0x1, 0xfffffffb, 0x5, 0x1000, 0xea6, 0x4, 0xe8b, 0x8, 0x8, 0x1, 0x7, 0x7d, 0x7, 0x1, 0x1, 0x4, 0x9, 0x4, 0xa, 0x5, 0x2, 0xa, 0xc41, 0x81, 0x80000000, 0x3ff, 0x4, 0x7f, 0x0, 0x4, 0x8, 0xe, 0x3, 0x7f, 0xffff, 0x51e1, 0x8001, 0x2, 0xf5, 0x7, 0x1, 0x4, 0x9, 0x6, 0x0, 0x9321, 0x7, 0xffff, 0xfffffffc, 0x9, 0x5, 0x7, 0x400, 0x8, 0x1000, 0x5, 0x7, 0x101, 0x0, 0x3, 0xdefd, 0x5, 0xb8, 0xffff, 0x2012, 0x5, 0x9, 0xb82, 0x9, 0x20d5d2ae, 0x5, 0x7, 0x5d, 0x2, 0x81, 0x0, 0x4, 0x80000001, 0x2, 0xbc9, 0x9, 0x101, 0x1, 0x6, 0x3, 0x6, 0x6, 0x1, 0x2d9f, 0x0, 0x81, 0x3, 0x4, 0x9, 0xffff, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x1000, 0x5, 0x7f8000, 0x800, 0xfffffff7, 0xdfe, 0x40, 0x1, 0xfffffff7, 0x5, 0xd, 0xa, 0x5f, 0x7, 0x7fff, 0x9, 0x6, 0x0, 0xfb, 0x5, 0x40, 0x2d471b3, 0x5, 0x4, 0x1ff, 0x7f, 0x10, 0x5, 0xe657, 0x4, 0x40, 0x5, 0x3ff, 0x6, 0xf59, 0xac2, 0xfffffce5, 0xc6, 0x1, 0xf30, 0x4, 0x80000000, 0x5, 0x4, 0xff, 0x100, 0x3, 0x400, 0x4fb7, 0x9, 0x5, 0x14000000, 0x7, 0x7f, 0x0, 0x1, 0x5, 0x2, 0x80, 0x8, 0x774, 0x8001, 0x4, 0x66, 0x9, 0x100004, 0x6, 0x5b, 0xffffffff, 0x3, 0x6, 0x40000000, 0xfffffe01, 0xffffffff, 0x4, 0x4, 0x6, 0x6, 0x8e, 0x4, 0x8, 0xe4f, 0x66, 0x2123, 0x1, 0xf60, 0x10, 0x3, 0x7ff, 0x5, 0xd, 0x2, 0xf0, 0xe20, 0x7, 0x0, 0x5, 0x9, 0x5, 0x7, 0x3, 0xf48f, 0x0, 0x2, 0x6, 0x8, 0x3, 0xced9, 0xfffffffb, 0xf46d, 0x4, 0x6, 0x7]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async)
write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x0) (async)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r10, &(0x7f00000000c0)=""/55, 0x37)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r11, 0x3, 0x1)

kernel console output (not intermixed with test programs):

inder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  130.495425][ T5057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:729
[  130.505855][  T474] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  130.526104][  T474] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71
[  130.535095][  T474] usb 1-1: USB disconnect, device number 59
[  130.853012][  T386] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd
[  130.861736][  T386] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  130.870622][  T386] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  131.135577][ T5073] /dev/rnullb0: Can't open blockdev
[  131.142863][   T64] usb 5-1: USB disconnect, device number 23
[  131.478564][ T5131] rust_binder: Write failure EFAULT in pid:746
[  131.493815][ T5133] fuse: Unknown parameter 'ËWØuV÷¡eû„~7ÖÔÃÚêü\£æ5FSÂtȬ'
[  131.511125][ T5133] 9pnet_fd: Insufficient options for proto=fd
[  131.619366][ T5147] kvm: apic: phys broadcast and lowest prio
[  131.679512][ T5152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  131.679546][ T5152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:767
[  131.760006][   T36] audit: type=1400 audit(2000000059.367:607): avc:  denied  { bind } for  pid=5161 comm="syz.0.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  131.902678][ T5188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5188 comm=syz.4.1578
[  132.009172][  T386] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  132.179668][   T64] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  132.340856][   T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.351023][   T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.360657][   T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  132.369783][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  132.377823][   T64] usb 5-1: SerialNumber: syz
[  132.386205][   T64] usb 5-1: 0:2 : does not exist
[  132.585910][ T5202] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  132.585934][ T5202] rust_binder: Read failure Err(EFAULT) in pid:779
[  132.609166][   T36] audit: type=1400 audit(2000000060.164:608): avc:  denied  { create } for  pid=5203 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  132.690324][ T5206] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.796691][ T5211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:784
[  132.818938][  T710] usb 5-1: USB disconnect, device number 24
[  133.195507][ T5220] overlayfs: failed to clone upperpath
[  133.425211][   T36] audit: type=1326 audit(2000000060.924:609): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5238 comm="syz.4.1594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16f38eec9 code=0x0
[  133.450624][   T36] audit: type=1400 audit(2000000060.962:610): avc:  denied  { map } for  pid=5243 comm="syz.1.1596" path="socket:[27307]" dev="sockfs" ino=27307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  133.935759][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.944527][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.312120][ T5288] veth0_to_team: entered promiscuous mode
[  134.317970][ T5288] veth0_to_team: entered allmulticast mode
[  134.325146][   T36] audit: type=1400 audit(2000000061.778:611): avc:  denied  { compute_member } for  pid=5286 comm="syz.4.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  134.560232][ T5314] rust_binder: 5307 RLIMIT_NICE not set
[  134.561165][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.576383][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.609547][   T64] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  134.770490][   T64] usb 5-1: config 127 has an invalid interface number: 238 but max is 0
[  134.778882][   T64] usb 5-1: config 127 has no interface number 0
[  134.785206][   T64] usb 5-1: config 127 interface 238 has no altsetting 0
[  134.793786][   T64] usb 5-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=7a.5a
[  134.802923][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.810948][   T64] usb 5-1: Product: syz
[  134.815149][   T64] usb 5-1: Manufacturer: syz
[  134.819756][   T64] usb 5-1: SerialNumber: syz
[  134.951998][ T5329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'.
[  135.045889][ T5292] /dev/rnullb0: Can't open blockdev
[  135.091521][   T64] cdc_subset 5-1:127.238: probe with driver cdc_subset failed with error -22
[  135.101487][   T64] usb 5-1: USB disconnect, device number 25
[  135.136464][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.145124][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.154984][ T5332] fuse: Bad value for 'fd'
[  135.163603][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.172696][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.227310][ T5339] /dev/loop0: Can't lookup blockdev
[  135.641705][ T5369] /dev/rnullb0: Can't open blockdev
[  135.667922][   T36] audit: type=1400 audit(2000000063.036:612): avc:  denied  { mounton } for  pid=5370 comm="syz.4.1644" path="/166/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[  135.730171][ T5367] 9pnet_fd: Insufficient options for proto=fd
[  135.835228][ T5382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.843816][ T5382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.519952][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  136.657434][ T5411] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1659'.
[  136.755033][ T5427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1665'.
[  136.851333][ T5440] /dev/rnullb0: Can't lookup blockdev
[  136.957190][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.966583][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.273353][ T5465] xt_NFQUEUE: number of total queues is 0
[  137.508332][  T386] usb 1-1: device descriptor read/64, error -110
[  137.528722][   T36] audit: type=1326 audit(2000000064.781:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.535837][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.554470][   T36] audit: type=1326 audit(2000000064.781:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.561042][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.592813][   T36] audit: type=1326 audit(2000000064.790:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.616427][   T36] audit: type=1326 audit(2000000064.790:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.640055][   T36] audit: type=1326 audit(2000000064.790:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.663638][   T36] audit: type=1326 audit(2000000064.790:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  137.764137][  T386] usb 1-1: device descriptor read/64, error -32
[  138.020875][  T386] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  138.158433][  T386] usb 1-1: device descriptor read/64, error -32
[  138.261113][ T5499] 9pnet_fd: Insufficient options for proto=fd
[  138.396031][ T5512] rust_binder: Write failure EFAULT in pid:827
[  138.418632][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.433267][  T386] usb 1-1: device descriptor read/64, error -32
[  138.433553][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.552865][  T386] usb usb1-port1: attempt power cycle
[  138.627376][  T386] raw-gadget.0 gadget.0: failed to queue resume event
[  138.634378][  T386] raw-gadget.0 gadget.0: failed to queue reset event
[  138.733916][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  138.733921][  T365] Bluetooth: hci0: command 0x1003 tx timeout
[  138.861869][  T386] raw-gadget.0 gadget.0: failed to queue resume event
[  138.925788][  T386] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  138.947512][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  138.954791][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  138.962087][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  138.969205][  T386] usb 1-1: device descriptor read/8, error -32
[  139.107143][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.114488][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.121767][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.128909][  T386] usb 1-1: device descriptor read/8, error -32
[  139.170058][ T5553] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  139.181198][ T5555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5555 comm=syz.0.1714
[  139.233499][ T5559] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  139.245483][  T386] raw-gadget.0 gadget.0: failed to queue suspend event
[  139.258972][  T386] raw-gadget.0 gadget.0: failed to queue reset event
[  139.293887][ T5562] rust_binder: Write failure EINVAL in pid:554
[  139.304938][   T36] kauditd_printk_skb: 103 callbacks suppressed
[  139.304959][   T36] audit: type=1326 audit(2000000066.451:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.340994][  T386] raw-gadget.0 gadget.0: failed to queue resume event
[  139.341130][   T36] audit: type=1326 audit(2000000066.451:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.371208][   T36] audit: type=1326 audit(2000000066.451:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.394451][   T36] audit: type=1326 audit(2000000066.451:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.417818][   T36] audit: type=1326 audit(2000000066.451:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.441142][  T386] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  139.441160][   T36] audit: type=1326 audit(2000000066.461:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.469469][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.472709][   T36] audit: type=1326 audit(2000000066.461:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.479385][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.502334][   T36] audit: type=1326 audit(2000000066.461:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.509797][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.532694][   T36] audit: type=1326 audit(2000000066.461:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.539794][  T386] usb 1-1: device descriptor read/8, error -32
[  139.563455][   T36] audit: type=1326 audit(2000000066.461:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.4.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb16f38eec9 code=0x7ffc0000
[  139.618479][   T64] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  139.703932][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.711326][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.718578][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  139.725836][  T386] usb 1-1: device descriptor read/8, error -32
[  139.790380][   T64] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.802744][   T64] usb 5-1: config 0 interface 0 has no altsetting 0
[  139.809371][   T64] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  139.818468][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.828178][   T64] usb 5-1: config 0 descriptor??
[  139.842318][  T386] raw-gadget.0 gadget.0: failed to queue suspend event
[  139.849383][  T386] usb usb1-port1: unable to enumerate USB device
[  140.128742][ T5574] overlayfs: failed to clone lowerpath
[  140.210361][ T5581] fuse: Bad value for 'fd'
[  140.267795][   T64] wacom 0003:056A:00FA.000E: hidraw0: USB HID v0.01 Device [HID 056a:00fa] on usb-dummy_hcd.4-1/input0
[  140.365200][ T5591] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1728'.
[  140.433344][ T5599] can0: slcan on ptm0.
[  140.442347][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.459329][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.483427][  T386] usb 5-1: USB disconnect, device number 27
[  140.532073][ T5599] can0 (unregistered): slcan off ptm0.
[  140.928381][ T5640] 9pnet_fd: Insufficient options for proto=fd
[  140.994043][ T5644] overlayfs: missing 'lowerdir'
[  141.031066][ T5648] devpts: called with bogus options
[  141.084871][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.093510][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.102994][ T5655] syz.0.1744: attempt to access beyond end of device
[  141.102994][ T5655] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  141.116190][ T5655] FAT-fs (loop0): unable to read boot sector
[  141.124883][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.133481][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.386606][ T5673] netlink: 'syz.1.1749': attribute type 58 has an invalid length.
[  141.394571][ T5673] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  141.410439][ T5673] /dev/rnullb0: Can't lookup blockdev
[  141.464772][ T5682] overlayfs: failed to clone upperpath
[  141.688546][ T5687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.697164][ T5687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.018242][ T5694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  142.018281][ T5694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565
[  142.255685][ T5703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:880
[  142.304140][   T64] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  142.408717][ T5707] overlayfs: failed to clone upperpath
[  142.453370][   T64] usb 5-1: device descriptor read/64, error -71
[  142.548084][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.557355][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.709183][   T64] usb 5-1: device descriptor read/64, error -71
[  142.925925][ T5727] devpts: called with bogus options
[  142.964970][   T64] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  143.104621][   T64] usb 5-1: device descriptor read/64, error -71
[  143.118957][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.127702][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.136671][ T5729] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  143.136690][ T5729] rust_binder: Read failure Err(EFAULT) in pid:885
[  143.187411][ T5733] overlayfs: cannot append lower layer
[  143.199856][ T5733] /dev/rnullb0: Can't lookup blockdev
[  143.369894][   T64] usb 5-1: device descriptor read/64, error -71
[  143.487220][   T64] usb usb5-port1: attempt power cycle
[  143.849836][   T64] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  143.871872][   T64] usb 5-1: device descriptor read/8, error -71
[  144.010599][   T64] usb 5-1: device descriptor read/8, error -71
[  144.043405][ T5770] No source specified
[  144.069260][ T5779] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  144.122463][ T5785] overlayfs: failed to clone upperpath
[  144.184730][ T5792] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4232, limit: 4256, size: 126)
[  144.184758][ T5792] rust_binder: Error while translating object.
[  144.195590][ T5792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  144.201845][ T5792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921
[  144.211654][ T5796] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.227554][ T5797] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4232, limit: 4256, size: 126)
[  144.227580][ T5797] rust_binder: Error while translating object.
[  144.238347][ T5797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  144.244585][ T5797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921
[  144.286432][   T64] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  144.290160][ T5803] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.303446][ T5804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.308809][   T64] usb 5-1: device descriptor read/8, error -71
[  144.310913][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.331086][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.447638][   T64] usb 5-1: device descriptor read/8, error -71
[  144.563605][   T64] usb usb5-port1: unable to enumerate USB device
[  144.838751][ T5822] overlayfs: failed to clone upperpath
[  144.845271][ T5822] overlayfs: failed to clone upperpath
[  144.893514][ T5831] sock: sock_timestamping_bind_phc: sock not bind to device
[  144.935742][ T5836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5836 comm=syz.0.1808
[  145.010765][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.019932][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.023210][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  145.029011][ T5851] netlink: 'syz.0.1812': attribute type 32 has an invalid length.
[  145.443922][ T5859] overlay: ./file0 is not a directory
[  145.599337][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'.
[  145.599956][ T5869] overlayfs: failed to clone upperpath
[  145.665600][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  146.228518][ T5889] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  146.228667][ T5889] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  146.258371][   T36] kauditd_printk_skb: 64 callbacks suppressed
[  146.258393][   T36] audit: type=1400 audit(2000000072.982:796): avc:  denied  { associate } for  pid=5892 comm="syz.4.1826" name=7F454C460503080803 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  146.318358][ T5902] fuseblk: Unknown parameter 'fÞ´0x0000000000000004'
[  146.577937][   T64] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  146.740221][   T64] usb 5-1: Using ep0 maxpacket: 16
[  146.746695][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.757840][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.767643][   T64] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  146.776834][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.785579][   T64] usb 5-1: config 0 descriptor??
[  147.107075][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.114273][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.122022][ T5934] bridge_slave_0: entered allmulticast mode
[  147.128625][ T5934] bridge_slave_0: entered promiscuous mode
[  147.137750][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.145144][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.152351][ T5934] bridge_slave_1: entered allmulticast mode
[  147.158827][ T5934] bridge_slave_1: entered promiscuous mode
[  147.219597][   T64] pantherlord 0003:0F30:0111.000F: unknown main item tag 0x1
[  147.227128][   T64] pantherlord 0003:0F30:0111.000F: unknown main item tag 0x2
[  147.244076][   T64] pantherlord 0003:0F30:0111.000F: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.4-1/input0
[  147.256781][ T5958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5958 comm=syz.2.1847
[  147.270982][   T64] pantherlord 0003:0F30:0111.000F: no output reports found
[  147.292066][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1847'.
[  147.317412][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.324526][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.331863][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.338977][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.364370][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.374162][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.384554][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.387348][ T5976] overlayfs: failed to resolve './file0': -2
[  147.391652][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.395143][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.412009][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.483865][   T13] veth1_macvtap: left promiscuous mode
[  147.489418][   T13] veth0_vlan: left promiscuous mode
[  147.519355][  T710] usb 5-1: USB disconnect, device number 32
[  147.541360][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1851'.
[  147.542472][ T5934] veth0_vlan: entered promiscuous mode
[  147.557085][ T5981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5981 comm=syz.2.1851
[  147.567442][ T5934] veth1_macvtap: entered promiscuous mode
[  147.762095][ T5994] fuse: Unknown parameter 'rootýmode'
[  147.827972][ T5997] netlink: 'syz.1.1858': attribute type 6 has an invalid length.
[  147.838636][ T5997] netlink: 'syz.1.1858': attribute type 4 has an invalid length.
[  147.846917][ T5997] netlink: 'syz.1.1858': attribute type 6 has an invalid length.
[  147.854946][ T5997] netlink: 'syz.1.1858': attribute type 13 has an invalid length.
[  147.863127][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.863290][ T5997] netlink: 'syz.1.1858': attribute type 15 has an invalid length.
[  147.877106][ T5997] netlink: 'syz.1.1858': attribute type 19 has an invalid length.
[  147.882050][ T5998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  147.885040][ T5998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[  147.885080][ T5997] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.1858'.
[  147.951010][   T36] audit: type=1400 audit(2000000074.558:797): avc:  denied  { read } for  pid=5999 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  148.011734][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.018883][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.025948][ T5995] bridge_slave_0: entered allmulticast mode
[  148.032489][ T5995] bridge_slave_0: entered promiscuous mode
[  148.039450][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.046695][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.054167][ T5995] bridge_slave_1: entered allmulticast mode
[  148.061153][ T5995] bridge_slave_1: entered promiscuous mode
[  148.067669][   T13] veth1_macvtap: left promiscuous mode
[  148.073188][   T13] veth0_vlan: left promiscuous mode
[  148.093890][ T6005] rust_binder: Write failure EINVAL in pid:597
[  148.109146][ T6007] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  148.122560][ T6007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  148.186242][ T6020] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.253511][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.269614][  T330] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.270670][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.276690][  T330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.293114][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.300181][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.329316][ T5995] veth0_vlan: entered promiscuous mode
[  148.344331][ T5995] veth1_macvtap: entered promiscuous mode
[  148.413724][ T6042] can0: slcan on ptm0.
[  148.741256][   T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  148.924054][   T64] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.934793][   T64] usb 2-1: config 0 has no interfaces?
[  148.940332][   T64] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  148.949725][   T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.958733][   T64] usb 2-1: config 0 descriptor??
[  149.046656][   T36] audit: type=1400 audit(2000000075.590:798): avc:  denied  { unmount } for  pid=2042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  149.119644][ T6063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605
[  149.178658][  T386] usb 2-1: USB disconnect, device number 11
[  149.254063][ T6043] can0 (unregistered): slcan off ptm0.
[  149.363863][ T6087] rust_binder: Write failure EFAULT in pid:8
[  149.635541][ T6101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1874'.
[  149.810975][   T36] audit: type=1400 audit(2000000076.304:799): avc:  denied  { write } for  pid=6103 comm="syz.1.1875" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  149.822918][ T6104] rust_binder: Error while translating object.
[  149.839097][ T6104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  149.845368][ T6104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:40
[  149.917616][ T6108] deleting an unspecified loop device is not supported.
[  149.917629][   T36] audit: type=1400 audit(2000000076.407:800): avc:  denied  { ioctl } for  pid=6107 comm="syz.1.1877" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  149.960452][ T6108] rust_binder: Error in use_page_slow: ESRCH
[  149.960480][ T6108] rust_binder: use_range failure ESRCH
[  149.966639][ T6108] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  149.972448][ T6108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  149.977105][   T64] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=64 comm=kworker/0:2
[  149.980818][ T6108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:44
[  150.199898][ T6122] new mount options do not match the existing superblock, will be ignored
[  150.298113][ T6122] kvm_intel: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x46d7
[  150.305974][ T6124] veth1: entered allmulticast mode
[  150.310077][ T6122] kvm: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x24d7
[  150.321360][ T6122] kvm: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x55c2
[  150.333552][ T6122] kvm: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x825b
[  150.345195][ T6122] kvm: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1946
[  150.354136][ T6122] kvm: kvm [6121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xba32
[  150.495525][ T6138] 9p: Unknown access argument 18446744073709551615: -34
[  150.503304][ T6143] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.510148][ T6142] rust_binder: Error in use_page_slow: ESRCH
[  150.510173][ T6142] rust_binder: use_range failure ESRCH
[  150.516625][ T6142] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  150.522309][ T6142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  150.530383][ T6142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23
[  150.552161][ T6145] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.562324][ T6145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26
[  150.583253][ T6147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.600557][ T6149] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  150.600908][ T6149] rust_binder: Read failure Err(EAGAIN) in pid:28
[  150.610362][   T36] audit: type=1326 audit(2000000077.054:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  150.640854][   T36] audit: type=1326 audit(2000000077.054:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  150.664690][   T36] audit: type=1326 audit(2000000077.054:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  150.666076][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[  150.688929][   T36] audit: type=1326 audit(2000000077.054:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  150.718806][   T36] audit: type=1326 audit(2000000077.054:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  150.720548][ T6156] netlink: 'syz.2.1891': attribute type 11 has an invalid length.
[  150.752628][ T6156] 9pnet_fd: Insufficient options for proto=fd
[  150.760372][ T6156] 9pnet_fd: Insufficient options for proto=fd
[  150.841750][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.850582][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.950366][ T6177] binder: Unknown parameter 's {2bel'
[  150.955991][ T6178] binder: Unknown parameter 's {2bel'
[  150.971670][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.971699][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.978264][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.984711][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.991351][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.997649][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.004173][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.010561][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.017407][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.023805][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.030312][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.036866][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.043678][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.050000][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.056707][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  151.082586][ T6121] veth1: left allmulticast mode
[  151.349046][ T6199] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526
[  151.409578][ T6206] overlay: ./file0 is not a directory
[  151.458756][   T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  151.619783][   T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  151.630901][   T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.643963][   T45] usb 2-1: config 0 interface 0 has no altsetting 0
[  151.650754][   T45] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  151.659847][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.669213][   T45] usb 2-1: config 0 descriptor??
[  151.674694][  T386] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  151.853177][  T386] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  151.862601][  T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.874313][  T386] usb 3-1: config 0 descriptor??
[  151.970225][ T6217] /dev/rnullb0: Can't open blockdev
[  152.117051][   T45] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0
[  152.136495][   T45] acrux 0003:1A34:0802.0010: no inputs found
[  152.142836][   T45] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19
[  152.583475][ T6224] rust_binder: 977: no such ref 3
[  152.588819][ T6224] rust_binder: 977: no such ref 0
[  152.593894][ T6224] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  152.601088][ T6224] rust_binder: 977: no such ref 0
[  152.635322][   T36] kauditd_printk_skb: 80 callbacks suppressed
[  152.635386][   T36] audit: type=1400 audit(2000000338.956:886): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  152.658854][ T6228] netlink: 'syz.0.1913': attribute type 13 has an invalid length.
[  152.669533][ T6228] erspan0: refused to change device tx_queue_len
[  152.737871][ T6229] fuse: Bad value for 'fd'
[  152.909807][   T36] audit: type=1326 audit(2000000339.220:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  152.921553][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.933282][   T36] audit: type=1326 audit(2000000339.220:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  152.943608][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.973126][   T36] audit: type=1326 audit(2000000339.229:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  152.996850][   T36] audit: type=1326 audit(2000000339.229:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.020843][   T36] audit: type=1326 audit(2000000339.229:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.044530][   T36] audit: type=1326 audit(2000000339.229:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.044984][   T31] usb 2-1: USB disconnect, device number 12
[  153.068395][   T36] audit: type=1326 audit(2000000339.229:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.098935][   T36] audit: type=1326 audit(2000000339.229:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.122942][   T36] audit: type=1326 audit(2000000339.229:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6233 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  153.208127][  T386] usb 3-1: Cannot set autoneg
[  153.212966][  T386] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  153.226165][  T386] usb 3-1: USB disconnect, device number 16
[  153.252376][   T45] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  153.412887][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.423893][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.433717][   T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  153.442786][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.451456][   T45] usb 5-1: config 0 descriptor??
[  153.528213][  T456] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  153.617800][ T6247] rust_binder: Error while translating object.
[  153.617854][ T6247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.624266][ T6247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:989
[  153.697941][  T456] usb 2-1: Using ep0 maxpacket: 16
[  153.713788][  T456] usb 2-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.725330][  T456] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023
[  153.736172][  T456] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 8
[  153.751349][  T456] usb 2-1: config 1 interface 0 has no altsetting 0
[  153.760786][  T456] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.770846][  T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.781083][  T456] usb 2-1: Product: syz
[  153.785545][  T456] usb 2-1: Manufacturer: syz
[  153.791329][  T456] usb 2-1: SerialNumber: syz
[  153.799589][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.811272][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.886001][   T45] arvo 0003:1E7D:30D4.0011: item fetching failed at offset 5/7
[  153.895119][   T45] arvo 0003:1E7D:30D4.0011: parse failed
[  153.901897][   T45] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -22
[  153.964642][ T6259] rust_binder: Write failure EFAULT in pid:56
[  154.039705][  T456] usb 2-1: bad CDC descriptors
[  154.062102][  T456] usb 2-1: USB disconnect, device number 13
[  154.098094][   T31] usb 5-1: USB disconnect, device number 33
[  154.471154][ T6272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:996
[  154.471380][ T6272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  154.480633][ T6272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:996
[  154.573319][ T6283] fuseblk: Bad value for 'group_id'
[  154.578985][ T6283] fuseblk: Bad value for 'group_id'
[  154.608403][ T6289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67
[  154.640387][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.665695][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.676182][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.685139][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.886639][   T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  154.899142][ T6308] __vm_enough_memory: pid: 6308, comm: syz.2.1943, bytes: 18014402804453376 not enough memory for the allocation
[  155.047576][   T31] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.058539][   T31] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.068309][   T31] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  155.081138][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.087752][   T31] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  155.096808][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.105498][   T31] usb 2-1: config 0 descriptor??
[  155.249358][ T6314] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.263670][ T6318] futex_wake_op: syz.0.1945 tries to shift op by -1; fix this program
[  155.279049][ T6318] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.299577][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.314899][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.323568][ T6323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1021
[  155.408450][ T6333] binder: Binderfs stats mode cannot be changed during a remount
[  155.471140][ T6342] rust_binder: Error while translating object.
[  155.471186][ T6342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  155.477476][ T6342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:673
[  155.501414][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'.
[  155.521921][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  155.750099][ T6346] netlink: 'syz.2.1954': attribute type 4 has an invalid length.
[  155.758154][   T31] usb 2-1: string descriptor 0 read error: -71
[  155.764630][   T31] uclogic 0003:256C:006E.0012: failed retrieving string descriptor #200: -71
[  155.773514][   T31] uclogic 0003:256C:006E.0012: failed retrieving pen parameters: -71
[  155.785279][   T31] uclogic 0003:256C:006E.0012: failed probing pen v2 parameters: -71
[  155.793478][   T31] uclogic 0003:256C:006E.0012: failed probing parameters: -71
[  155.801017][   T31] uclogic 0003:256C:006E.0012: probe with driver uclogic failed with error -71
[  155.802813][  T456] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  155.811464][   T31] usb 2-1: USB disconnect, device number 14
[  155.857118][ T6349] rust_binder: Error in use_page_slow: ESRCH
[  155.857136][ T6349] rust_binder: use_range failure ESRCH
[  155.863150][ T6349] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  155.870599][ T6349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  155.878863][ T6349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:85
[  155.972698][ T6364] rust_binder: 97: no such ref 0
[  155.986753][ T6364] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  155.993834][ T6364] rust_binder: 97: no such ref 2
[  155.999102][ T6364] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  156.037177][  T456] usb 5-1: Using ep0 maxpacket: 32
[  156.052416][  T456] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32
[  156.062287][  T456] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.075795][  T456] usb 5-1: config 1 interface 0 has no altsetting 0
[  156.087069][  T456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  156.096350][  T456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.104623][  T456] usb 5-1: Product: 
[  156.108883][  T456] usb 5-1: Manufacturer: à ‰
[  156.114120][  T456] usb 5-1: SerialNumber: �걜賊六�没ᭃ�ꎔ�衡룩ꛮ瀳燱鎄טּؚ祶ቿ齖펗䤳�甆튙ꮢᤔ肀럕ؔ薘蕺楧耜儗⶟㥉�暓웒�ᙵ
[  156.135101][ T6344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  156.184105][ T6380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1029
[  156.184387][ T6380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  156.193796][ T6380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1029
[  156.222552][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.240341][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.339745][ T6386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75
[  156.361086][ T6388] rust_binder: Got transaction with invalid offset.
[  156.363524][  T456] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8
[  156.370206][ T6388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  156.378842][  T456] usb 5-1: USB disconnect, device number 34
[  156.398041][ T6388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111
[  156.404087][  T456] usblp0: removed
[  156.476207][ T6394] rust_binder: Error in use_page_slow: ESRCH
[  156.476232][ T6394] rust_binder: use_range failure ESRCH
[  156.482511][ T6394] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  156.488117][ T6394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  156.496210][ T6394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:77
[  156.573019][ T6404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  156.582027][ T6404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1031
[  156.782865][  T386] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  156.889406][  T456] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  156.942691][  T386] usb 2-1: device descriptor read/64, error -71
[  157.049242][  T456] usb 3-1: Using ep0 maxpacket: 16
[  157.055664][  T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.066662][  T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.076467][  T456] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  157.085565][  T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.094393][  T456] usb 3-1: config 0 descriptor??
[  157.209046][  T386] usb 2-1: device descriptor read/64, error -71
[  157.464708][  T386] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  157.530403][  T456] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0
[  157.537637][  T456] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0
[  157.544867][  T456] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0
[  157.552093][  T456] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0
[  157.559912][  T456] konepure 0003:1E7D:2DB4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0
[  157.603240][  T386] usb 2-1: device descriptor read/64, error -71
[  157.741697][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  157.741698][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  157.751594][ T6409] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  157.763617][  T335] usb 3-1: USB disconnect, device number 17
[  157.858870][  T386] usb 2-1: device descriptor read/64, error -71
[  157.976137][  T386] usb usb2-port1: attempt power cycle
[  158.338765][  T386] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  158.383357][  T386] usb 2-1: device descriptor read/8, error -71
[  158.492532][ T6416] rust_binder: Error in use_page_slow: ESRCH
[  158.492559][ T6416] rust_binder: use_range failure ESRCH
[  158.499071][ T6416] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  158.504565][ T6416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  158.512680][ T6416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:127
[  158.531060][  T386] usb 2-1: device descriptor read/8, error -71
[  158.686570][   T36] kauditd_printk_skb: 38 callbacks suppressed
[  158.686590][   T36] audit: type=1400 audit(2000000344.652:934): avc:  denied  { accept } for  pid=6411 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.737235][ T6437] 9pnet_fd: Insufficient options for proto=fd
[  158.791413][ T6441] netlink: 'syz.2.1984': attribute type 46 has an invalid length.
[  158.817651][  T386] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  158.844072][  T386] usb 2-1: device descriptor read/8, error -71
[  158.871814][ T6443] fuse: Unknown parameter '017777777777777777777770x0000000000000004'
[  158.935986][ T6453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683
[  158.991964][  T386] usb 2-1: device descriptor read/8, error -71
[  159.020642][   T36] audit: type=1400 audit(2000000344.963:935): avc:  denied  { accept } for  pid=6464 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  159.050312][   T36] audit: type=1400 audit(2000000344.992:936): avc:  denied  { create } for  pid=6466 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  159.059745][ T6467] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.1993'.
[  159.116137][  T386] usb usb2-port1: unable to enumerate USB device
[  159.201338][  T335] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  159.362285][  T335] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  159.373112][  T335] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  159.384126][  T335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  159.398342][  T335] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  159.407414][  T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.415450][  T335] usb 5-1: Product: syz
[  159.419635][  T335] usb 5-1: Manufacturer: syz
[  159.424246][  T335] usb 5-1: SerialNumber: syz
[  159.435928][  T335] usb 5-1: config 0 descriptor??
[  159.441009][ T6469] netlink: 'syz.0.1994': attribute type 1 has an invalid length.
[  159.449172][ T6469] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1994'.
[  159.460182][ T6469] 9pnet_fd: Insufficient options for proto=fd
[  159.639729][ T6476] netlink: 'syz.2.1996': attribute type 27 has an invalid length.
[  159.663818][  T386] usb 5-1: USB disconnect, device number 35
[  159.720712][ T6485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6485 comm=syz.0.1999
[  159.764956][ T6489] tipc: Started in network mode
[  159.769951][ T6489] tipc: Node identity 1e23d7c784b, cluster identity 4711
[  159.778003][ T6489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.786565][ T6488] tipc: Disabling bearer <eth:syzkaller0>
[  159.802868][ T6491] binder: Unknown parameter 'contextÌðÔð[7’'
[  159.910620][ T6497] rust_binder: 6497 RLIMIT_NICE not set
[  159.912079][ T6499] rust_binder: 86: no such ref 0
[  159.923484][ T6497] rust_binder: 86: no such ref 0
[  160.491038][  T456] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  160.629571][  T456] usb 5-1: device descriptor read/64, error -71
[  160.752239][   T36] audit: type=1326 audit(2000000346.587:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.2.2007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x0
[  160.806069][   T31] rust_binder: 6495: removing orphan mapping 0:1048
[  160.871285][   T36] audit: type=1326 audit(2000000346.699:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  160.894917][  T456] usb 5-1: device descriptor read/64, error -71
[  160.899933][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.902358][   T36] audit: type=1326 audit(2000000346.699:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  160.911056][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.934394][   T36] audit: type=1326 audit(2000000346.727:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  160.963906][   T36] audit: type=1326 audit(2000000346.727:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  160.987688][   T36] audit: type=1326 audit(2000000346.727:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  161.011155][   T36] audit: type=1326 audit(2000000346.727:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.0.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1992f8eec9 code=0x7ffc0000
[  161.098592][  T335] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  161.173244][  T456] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  161.258464][  T335] usb 2-1: Using ep0 maxpacket: 16
[  161.265026][  T335] usb 2-1: config 7 has an invalid interface number: 162 but max is 0
[  161.273422][  T335] usb 2-1: config 7 has no interface number 0
[  161.279520][  T335] usb 2-1: config 7 interface 162 has no altsetting 0
[  161.287815][  T335] usb 2-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=24.38
[  161.296917][  T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.304985][  T335] usb 2-1: Product: syz
[  161.309157][  T335] usb 2-1: Manufacturer: syz
[  161.313822][  T456] usb 5-1: device descriptor read/64, error -71
[  161.320127][  T335] usb 2-1: SerialNumber: syz
[  161.539927][ T6509] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 34)
[  161.539948][ T6509] rust_binder: Error while translating object.
[  161.550515][ T6509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  161.556754][ T6509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91
[  161.572576][  T335] asix 2-1:7.162 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  161.582990][ T6526] rust_binder: 6525 RLIMIT_NICE not set
[  161.593555][  T456] usb 5-1: device descriptor read/64, error -71
[  161.606784][  T335] asix 2-1:7.162: probe with driver asix failed with error -71
[  161.617457][  T335] usb 2-1: USB disconnect, device number 19
[  161.716836][  T456] usb usb5-port1: attempt power cycle
[  161.780880][ T6545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1075
[  162.079179][  T456] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  162.112212][  T456] usb 5-1: device descriptor read/8, error -71
[  162.125814][ T6556] binder: Binderfs stats mode cannot be changed during a remount
[  162.146517][ T6558] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2024'.
[  162.155649][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'.
[  162.167336][ T6558] binder: Bad value for 'max'
[  162.185359][ T6560] overlayfs: maximum fs stacking depth exceeded
[  162.251396][  T456] usb 5-1: device descriptor read/8, error -71
[  162.265467][ T6574] rust_binder: Error while translating object.
[  162.265515][ T6574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  162.273144][ T6574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111
[  162.397827][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.415529][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.489662][ T6595] netlink: 'syz.0.2037': attribute type 29 has an invalid length.
[  162.497549][ T6595] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2037'.
[  162.516226][  T456] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  162.538543][  T456] usb 5-1: device descriptor read/8, error -71
[  162.677181][  T456] usb 5-1: device descriptor read/8, error -71
[  162.793381][  T456] usb usb5-port1: unable to enumerate USB device
[  163.097354][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.106011][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.298308][ T6606] netlink: 'syz.1.2042': attribute type 4 has an invalid length.
[  163.306218][ T6606] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2042'.
[  163.317203][ T6606] SELinux:  policydb string  does not match my string SE Linux
[  163.324782][ T6606] SELinux: failed to load policy
[  163.330877][ T6606] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  163.330902][ T6606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  163.338857][ T6606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:118
[  163.560126][ T6628] rust_binder: Error while translating object.
[  163.569443][ T6628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  163.575719][ T6628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:700
[  163.713991][ T6632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  163.809017][ T6634] __vm_enough_memory: pid: 6634, comm: syz.0.2052, bytes: 18014402804453376 not enough memory for the allocation
[  163.869851][  T335] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  163.904665][ T6639] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  163.905921][ T6639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  163.912527][ T6639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1111
[  163.938748][ T6643] overlayfs: missing 'lowerdir'
[  163.960146][ T6646] rust_binder: Error while translating object.
[  163.960178][ T6646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  163.966641][ T6646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116
[  163.988822][ T6648] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true
[  163.998118][ T6648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  164.006051][ T6648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1118
[  164.031868][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.049790][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.052227][  T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  164.068713][  T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  164.081751][  T335] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  164.090853][  T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.099462][  T335] usb 2-1: config 0 descriptor??
[  164.106960][ T6630] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  164.115044][  T335] usbhid 2-1:0.0: can't add hid device: -22
[  164.120994][  T335] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  164.330488][ T6654] netlink: 'syz.1.2050': attribute type 4 has an invalid length.
[  164.339600][ T6630] netlink: 'syz.1.2050': attribute type 4 has an invalid length.
[  164.341538][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.356745][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.425812][  T386] usb 2-1: USB disconnect, device number 20
[  164.473837][ T6660] rust_binder: Error in use_page_slow: ESRCH
[  164.473853][ T6660] rust_binder: use_range failure ESRCH
[  164.480183][ T6659] rust_binder: Error in use_page_slow: ESRCH
[  164.485646][ T6659] rust_binder: use_range failure ESRCH
[  164.488395][ T6660] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  164.492123][ T6659] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  164.497407][ T6660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  164.505976][ T6659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  164.513296][ T6660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:706
[  164.523312][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:706
[  164.608054][ T6664] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  164.989607][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  164.998762][ T6673] rust_binder: 127: no such ref 2
[  165.004691][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  165.089405][ T6680] rust_binder: Write failure EFAULT in pid:134
[  165.121111][ T6685] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  165.181257][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  165.453144][ T6697] rust_binder: 6697 RLIMIT_NICE not set
[  165.453715][ T6697] incfs: Error accessing: ./file1.
[  165.464735][ T6697] incfs: mount failed -2
[  165.724459][  T710] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  165.884325][  T710] usb 5-1: Using ep0 maxpacket: 32
[  165.890686][  T710] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  165.899970][  T710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.908745][  T710] usb 5-1: config 0 descriptor??
[  166.342190][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.349433][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.356641][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.363795][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.370953][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.378124][  T710] logitech 0003:046D:C29C.0014: unknown main item tag 0x0
[  166.385990][  T710] logitech 0003:046D:C29C.0014: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  166.555195][  T710] logitech 0003:046D:C29C.0014: no inputs found
[  166.563917][  T710] usb 5-1: USB disconnect, device number 40
[  167.096322][  T386] rust_binder: 6696: removing orphan mapping 0:1048
[  167.110110][ T6715] fuseblk: Bad value for 'rootmode'
[  167.324395][ T6735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2090'.
[  167.366014][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  167.366183][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  167.440493][  T386] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  167.599362][ T6739] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  167.599388][ T6739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  167.607456][ T6739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1128
[  167.617456][  T386] usb 5-1: unable to get BOS descriptor or descriptor too short
[  167.639610][  T386] usb 5-1: not running at top speed; connect to a high speed hub
[  167.644290][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.649024][  T386] usb 5-1: config 9 has an invalid interface number: 49 but max is 0
[  167.656456][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.664589][  T386] usb 5-1: config 9 has no interface number 0
[  167.678759][  T386] usb 5-1: config 9 interface 49 has no altsetting 0
[  167.686891][  T386] usb 5-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00
[  167.696023][  T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.704180][  T386] usb 5-1: Product: syz
[  167.709152][  T386] usb 5-1: Manufacturer: syz
[  167.713740][  T386] usb 5-1: SerialNumber: syz
[  167.798956][   T36] kauditd_printk_skb: 114 callbacks suppressed
[  167.798976][   T36] audit: type=1400 audit(2000000353.201:1058): avc:  denied  { nlmsg_tty_audit } for  pid=6742 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  167.936517][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'.
[  167.941569][ T6729] rust_binder: Error while translating object.
[  167.945507][ T6729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  167.945544][ T6755] bridge_slave_1: left allmulticast mode
[  167.951715][ T6729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:729
[  167.967526][  T386] usb-storage 5-1:9.49: USB Mass Storage device detected
[  167.971092][ T6755] bridge_slave_1: left promiscuous mode
[  167.979206][  T386] usb-storage 5-1:9.49: Quirks match for vid c251 pid 4003: 80
[  167.983897][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.004669][ T6755] bridge_slave_0: left allmulticast mode
[  168.009258][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  168.010452][ T6755] bridge_slave_0: left promiscuous mode
[  168.022536][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.028289][  T386] usb 5-1: USB disconnect, device number 41
[  168.129467][ T6767] overlayfs: failed to clone upperpath
[  168.230156][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.238716][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.260026][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.268635][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.490647][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.499716][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.515163][   T36] audit: type=1400 audit(2000000353.867:1059): avc:  denied  { write } for  pid=6785 comm="syz.4.2107" name="stat" dev="proc" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  168.530775][ T6786] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  168.537697][ T6786] rust_binder: Error while translating object.
[  168.537745][   T36] audit: type=1400 audit(2000000353.867:1060): avc:  denied  { add_name } for  pid=6785 comm="syz.4.2107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  168.546469][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.553439][   T36] audit: type=1400 audit(2000000353.867:1061): avc:  denied  { create } for  pid=6785 comm="syz.4.2107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1
[  168.573203][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731
[  168.583010][   T36] audit: type=1400 audit(2000000353.867:1062): avc:  denied  { associate } for  pid=6785 comm="syz.4.2107" name="file0" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  168.731050][ T6791] rust_binder: Read failure Err(EAGAIN) in pid:733
[  168.732206][ T6792] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.007336][  T456] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  169.468567][   T36] audit: type=1400 audit(2000000354.768:1063): avc:  denied  { shutdown } for  pid=6799 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  169.488950][   T36] audit: type=1400 audit(2000000354.786:1064): avc:  denied  { connect } for  pid=6799 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  169.544059][   T36] audit: type=1400 audit(2000000354.833:1065): avc:  denied  { setattr } for  pid=6801 comm="syz.4.2111" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  169.576423][ T6803] random: crng reseeded on system resumption
[  169.614990][   T36] audit: type=1400 audit(2000000354.908:1066): avc:  denied  { read write } for  pid=6805 comm="syz.4.2112" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  169.638408][   T36] audit: type=1400 audit(2000000354.908:1067): avc:  denied  { open } for  pid=6805 comm="syz.4.2112" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  169.650621][ T6809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  169.661746][ T6809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:751
[  169.874358][ T6817] binder: Unknown parameter 'Žüÿ
'
[  170.003222][  T330] Bluetooth: hci1: Frame reassembly failed (-84)
[  170.179793][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  170.179790][ T1960] Bluetooth: hci0: command 0x1003 tx timeout
[  171.287299][ T6823] can0: slcan on ptm0.
[  171.475537][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.484145][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.492367][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.500856][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.508943][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.517494][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.525624][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.534127][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.542178][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.550674][  T386] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  171.552234][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.566528][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.575038][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.586822][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  171.715730][  T386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.725907][  T386] usb 2-1: config 0 has no interfaces?
[  171.731403][  T386] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  171.740478][  T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.749498][  T386] usb 2-1: config 0 descriptor??
[  171.969753][  T386] usb 2-1: USB disconnect, device number 21
[  172.018679][ T6823] can0 (unregistered): slcan off ptm0.
[  172.140995][ T1960] Bluetooth: hci1: command 0x1003 tx timeout
[  172.147078][   T54] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  172.169016][ T6880] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2127'.
[  172.169393][ T6882] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  172.363774][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'.
[  172.461225][ T6914] rust_binder: Error in use_page_slow: ESRCH
[  172.461253][ T6914] rust_binder: use_range failure ESRCH
[  172.467331][ T6914] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  172.468070][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'.
[  172.503424][ T6914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  172.503468][ T6914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:765
[  172.509168][ T6930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2133'.
[  172.536432][ T6930] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2133'.
[  172.545867][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2133'.
[  172.558199][  T330] Bluetooth: hci1: Frame reassembly failed (-84)
[  173.173388][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.173418][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.180018][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.186474][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.209632][ T6963] rust_binder: Error in use_page_slow: ESRCH
[  173.209655][ T6963] rust_binder: use_range failure ESRCH
[  173.215765][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.221482][ T6963] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  173.229814][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.230435][ T6965] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2141'.
[  173.238253][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.255323][ T6963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  173.261867][ T6963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:769
[  173.270110][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.280591][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.297532][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.304357][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.310858][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.317785][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.324451][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.330929][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.339187][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.345706][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.362934][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.369772][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.376319][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.384652][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.392060][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.398583][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.408169][ T6990] overlay: ./file0 is not a directory
[  173.408649][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.415878][ T6992] SELinux: security_context_str_to_sid () failed with errno=-22
[  173.420532][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.434490][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.440990][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.449389][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.456034][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.464756][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.473206][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.479786][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.486279][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.492751][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.499238][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.506067][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.512595][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.519084][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.525517][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.532018][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.538483][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.544915][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.551440][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.557891][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.564359][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.570810][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.577241][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.583995][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.590456][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.596956][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.603441][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.609867][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.616340][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.622808][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.629297][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.635797][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.642240][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.648703][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.655230][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.661750][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.668341][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.674846][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.681417][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.687939][ T6960] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.718470][  T710] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  173.761140][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  173.767202][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  173.776346][ T6849] Bluetooth: hci0: Opcode 0x1003 failed: -4
[  173.776967][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  173.846891][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.855409][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.889052][  T710] usb 2-1: Using ep0 maxpacket: 16
[  173.894639][  T710] usb 2-1: too many configurations: 112, using maximum allowed: 8
[  173.906106][ T7003] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  173.917306][  T710] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  173.926565][  T710] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  173.935129][  T710] usb 2-1: Product: syz
[  173.939439][  T710] usb 2-1: Manufacturer: syz
[  173.947751][  T710] r8152-cfgselector 2-1: Unknown version 0x0000
[  173.954273][  T710] r8152-cfgselector 2-1: config 0 descriptor??
[  173.961824][  T710] cdc_acm 2-1:0.0: Zero length descriptor references
[  173.968750][  T710] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22
[  174.075401][ T7018] tipc: Started in network mode
[  174.078125][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.081038][ T7018] tipc: Node identity ac14142f, cluster identity 4711
[  174.091020][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.095789][ T7018] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  174.163802][ T7030] netlink: 'syz.2.2163': attribute type 29 has an invalid length.
[  174.171807][ T7030] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2163'.
[  174.177375][ T6994] rust_binder: 187: no such ref 1
[  174.186155][ T6994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187
[  174.187260][  T386] r8152-cfgselector 2-1: USB disconnect, device number 22
[  174.209055][ T7032] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2164'.
[  174.496584][  T456] usb 5-1: device descriptor read/64, error -110
[  174.699055][ T1960] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  174.699070][  T365] Bluetooth: hci1: command 0x1003 tx timeout
[  174.752546][  T456] usb 5-1: device descriptor read/64, error -32
[  174.776020][ T7043] rust_binder: Error while translating object.
[  174.776063][ T7043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  174.782273][ T7043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1157
[  174.810239][ T7047] rust_binder: Write failure EFAULT in pid:191
[  174.837541][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.850986][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.857302][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.875420][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.883776][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.889546][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.898451][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.899763][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.915061][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.924915][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.932749][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.939015][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.945312][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.951594][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.958094][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.964311][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.970582][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.976792][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.983048][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.989303][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  174.995592][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.001843][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.008073][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.014292][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.020539][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.026723][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.032917][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.039078][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.040158][  T456] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  175.045358][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.058881][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.065059][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.071236][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.077434][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.083710][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.089863][ T7049] 9pnet_fd: Insufficient options for proto=fd
[  175.157738][ T7069] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.174793][ T7071] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  175.190662][ T7071] overlayfs: failed to get uuid (390/file1, err=-13); falling back to uuid=null.
[  175.200265][  T456] usb 5-1: device descriptor read/64, error -32
[  175.206674][   T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  175.329700][ T7073] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.330923][ T7073] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.337697][ T7073] rust_binder: Error while translating object.
[  175.344247][ T7073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  175.350729][ T7073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1170
[  175.370579][   T64] usb 2-1: Using ep0 maxpacket: 8
[  175.386061][   T64] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  175.396805][   T64] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  175.408505][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  175.419833][   T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  175.430955][   T64] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  175.449280][   T64] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  175.460609][ T7075] kvm: kvm [7074]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0
[  175.462649][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.477683][  T456] usb 5-1: device descriptor read/64, error -32
[  175.493991][ T7080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790
[  175.495002][   T64] usb 2-1: Product: syz
[  175.508399][   T64] usb 2-1: Manufacturer: syz
[  175.513057][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  175.513071][   T36] audit: type=1400 audit(2000000360.434:1069): avc:  denied  { append } for  pid=7081 comm="syz.4.2182" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  175.541887][   T64] usb 2-1: SerialNumber: syz
[  175.547552][   T36] audit: type=1400 audit(2000000360.434:1070): avc:  denied  { ioctl } for  pid=7081 comm="syz.4.2182" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  175.571025][   T64] usb 2-1: config 0 descriptor??
[  175.578425][   T64] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26
[  175.588955][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.594492][  T456] usb usb5-port1: attempt power cycle
[  175.606191][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.669028][  T456] raw-gadget.3 gadget.4: failed to queue resume event
[  175.676105][  T456] raw-gadget.3 gadget.4: failed to queue reset event
[  175.714783][   T36] audit: type=1400 audit(2000000360.631:1071): avc:  denied  { ioctl } for  pid=7093 comm="syz.4.2186" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  175.802952][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.812309][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.827230][   T31] usb 2-1: USB disconnect, device number 23
[  175.859373][ T7106] rust_binder: Write failure EFAULT in pid:806
[  175.874007][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'.
[  175.874735][ T7110] rust_binder: 7110 RLIMIT_NICE not set
[  175.880761][   T36] audit: type=1400 audit(2000000360.781:1072): avc:  denied  { read } for  pid=7109 comm="syz.1.2190" path="socket:[36419]" dev="sockfs" ino=36419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  175.898184][   T64] rust_binder: 7108: removing orphan mapping 0:1144
[  175.925139][  T456] raw-gadget.3 gadget.4: failed to queue resume event
[  175.950463][ T7118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  175.950499][ T7118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:813
[  175.988868][  T456] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  176.020917][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.028271][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.035537][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.042641][  T456] usb 5-1: device descriptor read/8, error -32
[  176.180821][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.188088][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.195403][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.202592][  T456] usb 5-1: device descriptor read/8, error -32
[  176.295747][ T7129] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  176.307290][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.319277][  T456] raw-gadget.3 gadget.4: failed to queue suspend event
[  176.324025][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.331846][  T456] raw-gadget.3 gadget.4: failed to queue reset event
[  176.348614][ T7133] binder: Unknown parameter 'contextÌðÔð[7’'
[  176.415166][  T456] raw-gadget.3 gadget.4: failed to queue resume event
[  176.479071][  T456] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  176.504804][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.512121][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.519366][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.526512][  T456] usb 5-1: device descriptor read/8, error -32
[  176.599240][   T36] audit: type=1400 audit(2000000361.457:1073): avc:  granted  { setsecparam } for  pid=7138 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  176.671161][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.678494][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.685834][    C0] raw-gadget.3 gadget.4: ignoring, device is not running
[  176.693067][  T456] usb 5-1: device descriptor read/8, error -32
[  176.809523][  T456] raw-gadget.3 gadget.4: failed to queue suspend event
[  176.816539][  T456] usb usb5-port1: unable to enumerate USB device
[  176.843853][ T7150] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  176.845429][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.861004][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.978576][   T36] audit: type=1400 audit(2000000361.804:1074): avc:  denied  { map } for  pid=7157 comm="syz.0.2205" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  177.001895][   T36] audit: type=1400 audit(2000000361.804:1075): avc:  denied  { execute } for  pid=7157 comm="syz.0.2205" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  177.025541][  T710] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  177.031306][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.033793][   T36] audit: type=1400 audit(2000000361.860:1076): avc:  denied  { map } for  pid=7162 comm="syz.0.2206" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  177.042533][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.064721][   T36] audit: type=1400 audit(2000000361.860:1077): avc:  denied  { execute } for  pid=7162 comm="syz.0.2206" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  177.095483][   T36] audit: type=1400 audit(2000000361.907:1078): avc:  denied  { listen } for  pid=7162 comm="syz.0.2206" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  177.182528][  T710] usb 2-1: Using ep0 maxpacket: 8
[  177.188623][  T710] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  177.198652][  T710] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  177.207735][  T710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.430832][ T7147] rust_binder: 230: no such ref 0
[  177.442118][ T7147] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  177.457931][ T7147] rust_binder: 230: no such ref 2
[  177.463594][ T7147] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  177.470805][ T7175] IPv6: syztnl0: Disabled Multicast RS
[  177.486510][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2212'.
[  177.496212][ T7175] binder: Bad value for 'defcontext'
[  177.629159][ T7191] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock
[  177.711100][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.720469][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.731162][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.740862][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.791260][ T7205] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  177.791464][ T7205] rust_binder: Error while translating object.
[  177.797970][ T7205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  177.804212][ T7205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1213
[  177.832064][ T7208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  177.963364][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.981062][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.993934][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.002472][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.031556][ T7222] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  178.031580][ T7222] rust_binder: Error while translating object.
[  178.043803][ T7222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  178.050165][ T7222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1230
[  178.166372][ T7226] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  178.295771][ T7238] xt_NFQUEUE: number of total queues is 0
[  178.552861][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.561525][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.581676][ T7247] fuse: Unknown parameter 'fÎF0x0000000000000004'
[  178.637886][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'.
[  178.697872][ T7258] binder: Bad value for 'stats'
[  178.707625][ T7262] kvm: Disabled LAPIC found during irq injection
[  178.714400][ T7262] /dev/rnullb0: Can't open blockdev
[  178.783248][ T7264] rust_binder: Write failure EFAULT in pid:857
[  178.908024][ T7289] binder: Bad value for 'max'
[  178.940652][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.949243][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.571314][ T7306] netlink: 'syz.2.2257': attribute type 1 has an invalid length.
[  179.969748][  T710] usb 2-1: string descriptor 0 read error: -71
[  179.976371][  T710] hub 2-1:32.0: bad descriptor, ignoring hub
[  179.983077][  T710] hub 2-1:32.0: probe with driver hub failed with error -5
[  179.997740][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'.
[  180.015201][  T710] usb 2-1: USB disconnect, device number 24
[  180.022041][ T7359] rust_binder: 7354 RLIMIT_NICE not set
[  180.022264][ T7354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  180.043495][  T386] rust_binder: 7353: removing orphan mapping 0:1136
[  180.057015][ T7365] rust_binder: Error while translating object.
[  180.057047][ T7365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  180.063304][ T7365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1264
[  180.143341][ T7369] binder: Bad value for 'max'
[  180.456661][   T64] rust_binder: 7370: removing orphan mapping 0:4120
[  180.472607][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.481145][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.764748][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'.
[  180.778112][ T7389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=7389 comm=syz.4.2285
[  180.790903][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  180.815529][ T7394] fuse: Unknown parameter '00000000000000000003ÿÿÿÿÿÿÿÿ'
[  180.868116][ T7409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7409 comm=syz.2.2291
[  180.986179][ T7412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  180.986205][ T7412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238
[  181.036602][   T36] kauditd_printk_skb: 107 callbacks suppressed
[  181.036624][   T36] audit: type=1400 audit(2000000625.629:1186): avc:  denied  { setattr } for  pid=7413 comm="syz.0.2293" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  181.036897][ T7414] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  181.078216][ T7414] rust_binder: 1276: no such ref 2
[  181.089944][ T7414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1276
[  181.128176][ T7418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2295'.
[  181.169174][ T7422] rust_binder: Write failure EFAULT in pid:1284
[  181.183719][ T7426] rust_binder: Write failure EINVAL in pid:1286
[  181.295495][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.311870][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.320639][ T7437] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  181.439827][   T36] audit: type=1326 audit(2000000625.995:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.475150][   T36] audit: type=1326 audit(2000000626.023:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.500132][   T36] audit: type=1326 audit(2000000626.023:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.523975][   T36] audit: type=1326 audit(2000000626.023:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.550837][   T36] audit: type=1326 audit(2000000626.023:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.574677][   T36] audit: type=1326 audit(2000000626.023:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.599613][   T36] audit: type=1326 audit(2000000626.023:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.623660][   T36] audit: type=1326 audit(2000000626.023:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  181.647383][   T36] audit: type=1326 audit(2000000626.023:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.2.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de4d8eec9 code=0x7ffc0000
[  182.091133][   T64] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[  182.252732][   T64] usb 2-1: config 9 has an invalid interface number: 51 but max is 0
[  182.260852][   T64] usb 2-1: config 9 has no interface number 0
[  182.284990][   T64] usb 2-1: string descriptor 0 read error: -22
[  182.291217][   T64] usb 2-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12
[  182.314828][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.607494][ T7461] rust_binder: Write failure EINVAL in pid:900
[  182.607532][ T7461] rust_binder: Write failure EINVAL in pid:900
[  182.964713][ T1960] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  182.977151][  T365] Bluetooth: hci0: command 0x1003 tx timeout
[  183.572814][ T7471] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  183.595541][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.611636][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.682605][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.691276][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.272426][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.281227][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.290150][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.298964][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.456890][ T7487] rust_binder: Error in use_page_slow: ESRCH
[  184.456911][ T7487] rust_binder: use_range failure ESRCH
[  184.463005][ T7487] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  184.468631][ T7487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  184.476848][ T7487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1301
[  184.500587][ T7490] input: syz0 as /devices/virtual/input/input27
[  184.546323][ T7495] rust_binder: 1309: no such ref 1
[  184.551507][ T7495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1309
[  184.567029][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.585424][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.807428][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.816112][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.825254][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.833851][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.853096][ T7499] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  184.853205][ T7499] rust_binder: 924: no such ref 0
[  184.865125][ T7499] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  184.872230][ T7499] rust_binder: 924: no such ref 2
[  184.877436][ T7500] rust_binder: 924: no such ref 0
[  184.882580][ T7500] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  184.889696][ T7499] rust_binder: Error while translating object.
[  184.889730][ T7499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  184.889748][ T7500] rust_binder: 924: no such ref 2
[  184.896291][ T7499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:924
[  184.905501][ T7500] rust_binder: Error while translating object.
[  184.919565][ T7500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  184.925781][ T7500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:924
[  184.950572][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.968268][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.047812][  T456] usb 2-1: USB disconnect, device number 25
[  185.057471][ T7506] binder: Unknown parameter ''
[  185.440159][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.449153][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.500141][  T456] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  185.530192][ T7526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  185.640797][ T7534] IPv6: NLM_F_CREATE should be specified when creating new route
[  185.660051][  T456] usb 2-1: Using ep0 maxpacket: 16
[  185.666056][  T456] usb 2-1: unable to get BOS descriptor or descriptor too short
[  185.674515][  T456] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.687357][  T456] usb 2-1: config 1 interface 0 has no altsetting 0
[  185.695473][  T456] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40
[  185.704588][  T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.712590][  T456] usb 2-1: Product: syz
[  185.716777][  T456] usb 2-1: Manufacturer: syz
[  185.721395][  T456] usb 2-1: SerialNumber: syz
[  185.942122][ T7513] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  185.942324][ T7513] rust_binder: Failed to allocate buffer. len:200, is_oneway:true
[  185.950303][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.966907][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.990062][  T456] usbhid 2-1:1.0: can't add hid device: -71
[  185.996146][  T456] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  186.005321][  T456] usb 2-1: USB disconnect, device number 26
[  186.053047][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.062159][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.320428][  T456] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  186.417951][ T7552] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.419853][ T7552] rust_binder: Error in use_page_slow: ESRCH
[  186.426430][ T7552] rust_binder: use_range failure ESRCH
[  186.432548][ T7552] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  186.438128][ T7552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  186.446228][ T7552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:943
[  186.468949][   T36] kauditd_printk_skb: 38 callbacks suppressed
[  186.468968][   T36] audit: type=1326 audit(2000000630.717:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.4.2338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb16f38eec9 code=0x0
[  186.490863][  T456] usb 2-1: Using ep0 maxpacket: 16
[  186.513628][  T456] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  186.521647][  T456] usb 2-1: config 0 has no interface number 0
[  186.527828][  T456] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.538859][  T456] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.548667][  T456] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  186.557775][  T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.566798][  T456] usb 2-1: config 0 descriptor??
[  186.622228][ T7562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.634183][ T7564] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.642912][ T7564] rust_binder: Error in use_page_slow: ESRCH
[  186.649509][ T7564] rust_binder: use_range failure ESRCH
[  186.651045][ T7568] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.655660][ T7564] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  186.668096][ T7564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  186.679020][ T7564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:955
[  186.679429][ T7568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1330
[  186.734960][ T7577] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.827269][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.842979][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.851315][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.860078][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.878578][ T7595] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  186.879168][ T7595] rust_binder: 1334: no such ref 2
[  186.912379][ T7597] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  186.912406][ T7597] rust_binder: Error while translating object.
[  186.923161][ T7597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  186.929878][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.934488][ T7597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1336
[  186.944382][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.947802][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.973799][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.022719][ T7610] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2357'.
[  187.048541][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.057157][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.074123][  T456] usbhid 2-1:0.1: can't add hid device: -71
[  187.080358][  T456] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  187.090018][  T456] usb 2-1: USB disconnect, device number 27
[  187.145241][ T7624] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  187.152606][ T7624] rust_binder: Write failure EINVAL in pid:1345
[  187.166799][ T7626] overlay: Bad value for 'verity'
[  187.442622][   T36] audit: type=1400 audit(2000000631.637:1235): avc:  denied  { sqpoll } for  pid=7652 comm="syz.2.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  187.591670][ T7663] veth1: entered allmulticast mode
[  187.633374][ T7665] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2373'.
[  187.643095][ T7667] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2373'.
[  187.652560][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'.
[  187.661851][ T7670] usb usb9: usbfs: process 7670 (syz.0.2372) did not claim interface 6 before use
[  187.662967][ T7665] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  187.671583][ T7661] devpts: called with bogus options
[  187.671707][ T7670] veth1: left allmulticast mode
[  187.688943][ T7661] netlink: 'syz.2.2371': attribute type 4 has an invalid length.
[  187.701498][   T36] audit: type=1400 audit(2000000631.881:1237): avc:  denied  { shutdown } for  pid=7664 comm="syz.4.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  187.721571][ T7665] rust_binder: Error while translating object.
[  187.721616][ T7665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  187.727937][   T36] audit: type=1400 audit(2000000631.881:1236): avc:  denied  { shutdown } for  pid=7664 comm="syz.4.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  187.729723][ T7665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:992
[  187.747997][   T36] audit: type=1400 audit(2000000631.899:1238): avc:  denied  { read write } for  pid=7664 comm="syz.4.2373" path="socket:[39226]" dev="sockfs" ino=39226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  187.825216][ T7681] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  187.825726][ T7681] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  187.832463][ T7681] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0
[  187.838958][ T7681] rust_binder: Error while translating object.
[  187.847642][ T7681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  187.853904][ T7681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:996
[  187.886372][ T7686] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.357170][ T7689] x_tables: unsorted entry at hook 2
[  188.362058][ T7690] x_tables: unsorted entry at hook 2
[  188.878147][ T7706] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.878241][ T7706] rust_binder: Error in use_page_slow: ESRCH
[  188.884794][ T7706] rust_binder: use_range failure ESRCH
[  188.890894][ T7706] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  188.896474][ T7706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  188.904814][ T7706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1012
[  188.943509][ T7712] overlayfs: failed to clone lowerpath
[  188.949691][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.967144][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.976754][ T7712] overlayfs: failed to clone lowerpath
[  189.540374][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.549242][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.611847][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.621351][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.712583][ T7762] __vm_enough_memory: pid: 7762, comm: syz.0.2403, bytes: 18014402804453376 not enough memory for the allocation
[  189.752737][ T7765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  189.752769][ T7765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1388
[  189.798471][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.816468][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.867953][  T365] Bluetooth: hci0: command 0x1003 tx timeout
[  189.874036][ T1960] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  190.461355][   T31] rust_binder: 7769: removing orphan mapping 0:4120
[  190.524926][ T7781] 9pnet_fd: Insufficient options for proto=fd
[  190.531154][   T31] kernel write not supported for file 264/net/vlan/vlan1 (pid: 31 comm: kworker/1:0)
[  190.542391][ T7776] __vm_enough_memory: pid: 7776, comm: syz.1.2408, bytes: 18014402804453376 not enough memory for the allocation
[  190.661584][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.670198][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.826722][  T474] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  190.986497][  T474] usb 2-1: Using ep0 maxpacket: 16
[  190.992060][  T474] usb 2-1: too many configurations: 97, using maximum allowed: 8
[  191.000750][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.010910][  T474] usb 2-1: config 0 has no interfaces?
[  191.017135][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.027256][  T474] usb 2-1: config 0 has no interfaces?
[  191.033451][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.043590][  T474] usb 2-1: config 0 has no interfaces?
[  191.049895][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.060048][  T474] usb 2-1: config 0 has no interfaces?
[  191.066436][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.076608][  T474] usb 2-1: config 0 has no interfaces?
[  191.083056][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.093187][  T474] usb 2-1: config 0 has no interfaces?
[  191.099340][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.109533][  T474] usb 2-1: config 0 has no interfaces?
[  191.115758][  T474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.126006][  T474] usb 2-1: config 0 has no interfaces?
[  191.193754][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.202473][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.227536][  T474] usb 2-1: string descriptor 0 read error: -71
[  191.234751][  T474] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  191.253734][  T474] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  191.262776][ T7796] overlayfs: failed to clone lowerpath
[  191.269383][   T36] audit: type=1400 audit(2000000635.232:1239): avc:  denied  { write } for  pid=7801 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  191.271161][  T474] usb 2-1: config 0 descriptor??
[  191.290082][ T7804] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  191.296056][  T474] usb 2-1: can't set config #0, error -71
[  191.307338][ T7805] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  191.317642][ T7804] rust_binder: Write failure EINVAL in pid:270
[  191.324176][  T474] usb 2-1: USB disconnect, device number 28
[  191.327074][ T7805] rust_binder: Write failure EINVAL in pid:270
[  191.341611][ T7807] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2419'.
[  191.366291][ T7807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7807 comm=syz.0.2419
[  191.408728][ T7820] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.409496][ T7820] rust_binder: Error while translating object.
[  191.416309][ T7820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  191.422570][ T7820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1412
[  191.462777][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.484011][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.490542][ T7830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7830 comm=syz.2.2428
[  191.507039][ T7816] rust_binder: 278: no such ref 0
[  191.512664][ T7816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278
[  191.523410][   T31] rust_binder: 7815: removing orphan mapping 0:24
[  191.577324][ T7847] can0: slcan on ptm1.
[  191.585861][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.594927][   T36] audit: type=1400 audit(2000000635.532:1240): avc:  denied  { nlmsg_write } for  pid=7851 comm="syz.2.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  191.621998][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.838802][  T386] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  192.000469][  T386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.010717][  T386] usb 2-1: config 0 has no interfaces?
[  192.016200][  T386] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  192.025262][  T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.034237][  T386] usb 2-1: config 0 descriptor??
[  192.062495][ T7868] syz.0.2436: attempt to access beyond end of device
[  192.062495][ T7868] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  192.075416][ T7868] exFAT-fs (loop0): unable to read boot sector
[  192.081661][ T7868] exFAT-fs (loop0): failed to read boot sector
[  192.088180][ T7868] exFAT-fs (loop0): failed to recognize exfat type
[  192.096365][ T7868] syz.0.2436: attempt to access beyond end of device
[  192.096365][ T7868] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  192.109326][ T7868] exFAT-fs (loop0): unable to read boot sector
[  192.115528][ T7868] exFAT-fs (loop0): failed to read boot sector
[  192.126406][ T7868] exFAT-fs (loop0): failed to recognize exfat type
[  192.164934][ T7876] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  192.168928][   T36] audit: type=1400 audit(2000000636.067:1241): avc:  denied  { map } for  pid=7875 comm="syz.2.2439" path="/195/file0" dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  192.205701][ T7880] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.256211][  T386] usb 2-1: USB disconnect, device number 29
[  192.303257][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.322045][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.342589][ T7849] can0 (unregistered): slcan off ptm1.
[  193.041126][ T7971] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  193.159781][  T386] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  193.320647][  T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  193.331631][  T386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  193.344513][  T386] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  193.353588][  T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.362418][  T386] usb 2-1: config 0 descriptor??
[  193.367733][ T7958] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  193.589921][  T386] smartjoyplus 0003:0925:8866.0015: item fetching failed at offset 3/7
[  193.598398][  T386] smartjoyplus 0003:0925:8866.0015: parse failed
[  193.604793][  T386] smartjoyplus 0003:0925:8866.0015: probe with driver smartjoyplus failed with error -22
[  193.777106][ T7981] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.777137][ T7981] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.802480][   T36] audit: type=1400 audit(2000000637.607:1242): avc:  denied  { ioctl } for  pid=7957 comm="syz.1.2454" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  193.804759][  T386] usb 2-1: USB disconnect, device number 30
[  193.868846][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.877427][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.543750][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.552848][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.562835][   T36] audit: type=1400 audit(2000000638.320:1243): avc:  denied  { accept } for  pid=8006 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  194.619273][  T456] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  194.780228][  T456] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  194.789401][  T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.798664][  T456] usb 2-1: config 0 descriptor??
[  194.807646][ T8009] overlayfs: failed to clone upperpath
[  194.845420][ T8011] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  195.001337][ T8020] /dev/loop0: Can't lookup blockdev
[  195.032112][ T8024] fuse: Bad value for 'group_id'
[  195.037149][ T8024] fuse: Bad value for 'group_id'
[  195.195061][   T36] audit: type=1400 audit(2000000638.921:1244): avc:  denied  { audit_read } for  pid=8034 comm="syz.0.2482" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  195.415123][ T8041] erofs: dax options not supported
[  196.091422][  T456] usb 2-1: Cannot set autoneg
[  196.100099][  T456] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  196.117423][  T456] usb 2-1: USB disconnect, device number 31
[  196.247837][ T8040] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI
[  196.260481][ T8040] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[  196.268927][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: syz.0.2484 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609
[  196.280494][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  196.290568][ T8040] RIP: 0010:fuse_file_release+0x29e/0x400
[  196.296329][ T8040] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc
[  196.315992][ T8040] RSP: 0018:ffffc9000764fae0 EFLAGS: 00010202
[  196.322110][ T8040] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[  196.330112][ T8040] RDX: dffffc0000000000 RSI: 000000000000039b RDI: 000000000000039c
[  196.338120][ T8040] RBP: ffffc9000764fb28 R08: 0000000000000003 R09: 0000000000000004
[  196.346112][ T8040] R10: dffffc0000000000 R11: fffff52000ec9f2c R12: 0000000000109001
[  196.354101][ T8040] R13: ffff8881152e4000 R14: ffff888131650f00 R15: 00000000000000c8
[  196.362092][ T8040] FS:  00007f1993ee56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  196.371053][ T8040] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.377655][ T8040] CR2: 00007f5de5c489c8 CR3: 0000000133bce000 CR4: 00000000003526b0
[  196.385647][ T8040] Call Trace:
[  196.388947][ T8040]  <TASK>
[  196.391874][ T8040]  ? kmem_cache_free+0x1c1/0x510
[  196.396813][ T8040]  ? putname+0x113/0x150
[  196.401060][ T8040]  fuse_release+0x13e/0x1b0
[  196.405564][ T8040]  ? __cfi_fuse_release+0x10/0x10
[  196.410600][ T8040]  __fput+0x1fe/0xa00
[  196.414590][ T8040]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  196.420143][ T8040]  ____fput+0x20/0x30
[  196.424154][ T8040]  task_work_run+0x1e0/0x250
[  196.428746][ T8040]  ? __cfi_task_work_run+0x10/0x10
[  196.433997][ T8040]  get_signal+0x1307/0x14f0
[  196.438516][ T8040]  ? __kasan_slab_free+0x6a/0x80
[  196.443492][ T8040]  ? putname+0x113/0x150
[  196.447738][ T8040]  arch_do_signal_or_restart+0x96/0x720
[  196.453298][ T8040]  ? fput+0x1a5/0x240
[  196.457310][ T8040]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  196.463476][ T8040]  ? __kasan_check_write+0x18/0x20
[  196.468611][ T8040]  ? __x64_sys_open+0x120/0x150
[  196.473474][ T8040]  syscall_exit_to_user_mode+0x58/0xb0
[  196.478946][ T8040]  do_syscall_64+0x64/0xf0
[  196.483396][ T8040]  ? clear_bhb_loop+0x50/0xa0
[  196.488091][ T8040]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  196.494023][ T8040] RIP: 0033:0x7f1992f8eec9
[  196.498448][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.518147][ T8040] RSP: 002b:00007f1993ee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  196.526566][ T8040] RAX: ffffffffffffff95 RBX: 00007f19931e5fa0 RCX: 00007f1992f8eec9
[  196.534559][ T8040] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0
[  196.542533][ T8040] RBP: 00007f1993011f91 R08: 0000000000000000 R09: 0000000000000000
[  196.550504][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.558487][ T8040] R13: 00007f19931e6038 R14: 00007f19931e5fa0 R15: 00007ffc55b26d38
[  196.566469][ T8040]  </TASK>
[  196.569495][ T8040] Modules linked in:
[  196.573522][ T8040] ---[ end trace 0000000000000000 ]---
[  196.577888][   T36] audit: type=1400 audit(2000000640.207:1245): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  196.579188][ T8040] RIP: 0010:fuse_file_release+0x29e/0x400
[  196.601318][   T36] audit: type=1400 audit(2000000640.207:1246): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.607477][ T8040] Code: 00 74 12 48 89 df e8 c1 e5 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 74 e4 a0 ff 48 ba 00 00 00 00 00 fc
[  196.650076][ T8040] RSP: 0018:ffffc9000764fae0 EFLAGS: 00010202
[  196.651856][   T36] audit: type=1400 audit(2000000640.207:1247): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.656224][ T8040] RAX: 0000000000000019 RBX: 0000000000000000 RCX: 0000000000080000
[  196.678046][   T36] audit: type=1400 audit(2000000640.207:1248): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.685491][ T8040] RDX: dffffc0000000000 RSI: 000000000000039b RDI: 000000000000039c
[  196.706507][   T36] audit: type=1400 audit(2000000640.207:1249): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  196.714394][ T8040] RBP: ffffc9000764fb28 R08: 0000000000000003 R09: 0000000000000004
[  196.734845][   T36] audit: type=1400 audit(2000000640.207:1250): avc:  denied  { append open } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  196.752401][ T8040] R10: dffffc0000000000 R11: fffff52000ec9f2c R12: 0000000000109001
[  196.774708][ T8040] R13: ffff8881152e4000 R14: ffff888131650f00 R15: 00000000000000c8
[  196.782788][ T8040] FS:  00007f1993ee56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  196.791799][ T8040] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.798437][ T8040] CR2: 00007f5de4fb4198 CR3: 0000000133bce000 CR4: 00000000003526b0
[  196.806460][ T8040] Kernel panic - not syncing: Fatal exception
[  196.812911][ T8040] Kernel Offset: disabled
[  196.817239][ T8040] Rebooting in 86400 seconds..