last executing test programs:

1m41.620387076s ago: executing program 0 (id=1167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x2}], 0xfffffffffffffe67, 0x0, &(0x7f00000001c0)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})

1m41.524887558s ago: executing program 0 (id=1168):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') (async)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup2(r2, r2)
read$FUSE(r3, 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x3, r3}) (async)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c0, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x340a}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee93}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6acd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7891}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff9d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "4052d5d3c3e7f8405176efd3921f53887aad8444c1eb4bc53d1848cf94d8e7df49f589dc02c804fd753558ea30b15c2799d87ad013e2f611d5ad80281e8b7f3bfa2bbf0b371c3f03ad45e21a5eb3fb233b222edf6ba9655551a02624c3bc1882c5b3a18c665d88b46d1478f55bfb978b62b547cd3c76be762c3e5acda734ffd978c626def557be21f047f4c7adadf204040a5cc8fdb4313d1ad66d2146fdca5edbf00f8da420252fab99e57c46953777e9b762563ba5a56c91a57fcddcf9269ec4476c0cf19c82f06be282c2885764ea0638"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "cc47ed052ef462e92ea37d401b7bb2cb4967b43c5f571938ed35452ff74418a7c519eda3d7408ada85ae2871cca5a2f094cbdfbe6062e5f39fdacb9b068ef4d4cf184c2b0a277c326c8903190fc1999f30d216339b4fd5218d58ff6f03369b1c3a7f2e49f6b8a64d83d4560ad57b603f8486148718e32b1ed944606f2befb4f8d2b235f9f542c2f9ab3b5aa7de52834383c77f197f17a26e643f3964bad9116aaf8455698a7e5738045aa4728c44f53671429e4b4b00c67612b1b06ae9bce7f7f44c9b5560ed4873693b881ef0d9c87f0a108a17d78bbcb9158b87a6629f3506b0cd21d7ab355b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "42084057c37abcd489017acf07a4b137ace75e3165d85a27f1b5406d5509"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "54688ba6c7b56c71ae1824572330056ec285c71949ca3ca7307f1b922917c05ccb96"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) (async)
mprotect(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) (rerun: 32)

1m41.4301283s ago: executing program 0 (id=1169):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x1000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x4, 0x1, 0x2, 0x0, 0x10001, 0x697, 0xa}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003100)=""/4086, 0xff6}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000400)=""/19, 0x13}], 0x4}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
open(&(0x7f00000002c0)='./file0\x00', 0x141840, 0x42)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0)
mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x12, 0xffffffffffffffff, 0x5405000)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00')
getdents64(r4, &(0x7f0000001fc0)=""/4079, 0xfef)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, &(0x7f0000000080), &(0x7f0000000200)=0x14)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2)
shutdown(r2, 0x0)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

1m41.42247661s ago: executing program 0 (id=1170):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x9, 0x4c, {0x4c, 0xbcfd5ea04c22d6fa, "8294d4fb1cf6423220914eb85103d343051070ccd91f6ba637ba844ad07003006b5e25f1ab839467a351e59ed5a349b1ab37c62d9a82fcc9adcb49d687e85763f53b0e5a2ca18c98fd0e"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200))
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) (async)
sendmmsg$inet6(r4, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1, &(0x7f0000001680)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xc}}}], 0x18}}], 0x1, 0x4001c00)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) (async, rerun: 32)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) (rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) (rerun: 64)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffd0d, &(0x7f0000002540)={&(0x7f0000000340)={0x14, r6, 0x4, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x24008014}, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000001c0)={0x2})

1m40.489130507s ago: executing program 0 (id=1177):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002e00030500000000000000001c000080080000000000000008000000", @ANYRES32, @ANYBLOB="08000f009b00"], 0x30}], 0x1}, 0x4080) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002e00030500000000000000001c000080080000000000000008000000", @ANYRES32, @ANYBLOB="08000f009b00"], 0x30}], 0x1}, 0x4080)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x2}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000051c0)="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", 0x5a8}], 0x1, &(0x7f0000001680)=ANY=[@ANYRESHEX=r0], 0x50}}], 0x1, 0x4000840) (async)
sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x2}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000051c0)="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", 0x5a8}], 0x1, &(0x7f0000001680)=ANY=[@ANYRESHEX=r0], 0x50}}], 0x1, 0x4000840)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) (async)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r5 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@mcast1}, &(0x7f0000000180)=0x14)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

1m40.319478371s ago: executing program 3 (id=1180):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r0)
ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0xfffffff9)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5401000010000100000000000000000064010101000000000000000000000000624960bd0000000000000000000000000000fff920000001008000203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000002000000000000000100000000000000bdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000027bd7000000000000a0000010000000000000000480003006465666c61746500"/212], 0x154}, 0x1, 0x0, 0x0, 0xc000}, 0x4810)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x800003a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xb, 0x5, 0x3e, 0x8f, 0x4006, 0x7, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x20000007, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xac45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x8, 0x4, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0x200bf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x1, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r8, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x3be49d2d})
close_range(r0, 0xffffffffffffffff, 0x0)

1m40.066021056s ago: executing program 3 (id=1182):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r3, r2, 0x0, 0x80000000) (async, rerun: 32)
syz_usb_control_io$hid(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_4={0x3, 0x2, 0xa, "ba2ad90c"}]}}, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x67, &(0x7f00000002c0)="070042424242425fc4a223a91e691e5f27c9eb45e4a7521f18861fdd69187a9dfc8c6958fc6b8289b90c566e7458284e175a9d1dac4a6c806a42a54cf2e7b5b3ef8856ba3a0b75154b28fbf9952fbecf258e2d837173574e805513a77498adb51ed67e49ce57f7")
syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async, rerun: 32)
syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1002, 0x0) (async)
r6 = socket(0x27, 0x80000, 0xfffffffe) (async)
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) (async)
sendto$inet6(r7, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) (async)
setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) (async, rerun: 64)
close_range(r5, 0xffffffffffffffff, 0x0) (rerun: 64)
connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)

1m39.352921969s ago: executing program 0 (id=1186):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r0)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async)
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
dup(r0) (async)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}]}}) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f) (async)

1m38.849672379s ago: executing program 3 (id=1193):
timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x80000001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x400000000000a, 0x5, 0x180, 0x0, 0x200000000, 0xf4, 0x1, 0x8, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0))
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00Clarel,\x00'])

1m38.634069713s ago: executing program 3 (id=1194):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x70, 0xeb, 0xf3, 0x20, 0x1bc7, 0x36, 0x1c31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x28, 0xf8, 0x10, 0x5, [{{0x9, 0x4, 0x1e, 0xfa, 0x0, 0x2, 0xd}}]}}]}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
shutdown(r4, 0x1)
shutdown(r4, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @private0, 0x7}}, 0x0, 0x0, 0xb, 0x0, "09be2271b78506e6dd938d09000000cd403a4480bd1afa34432bcdfaccd957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d4e0a5748900"}, 0xd8)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendmmsg$inet6(r2, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002600)="ba15557c5afc2e0855d9e9c300146db733b3865c1d26a127ba1825be1ae3a2959daeb2b5bc60ee75e7923d947dd4187a86f2e7f3f256b0110f1d6b68757d27ee1d432b3e8d4db029f64cf39287ea28ad48aa6fa7606adb7ba23e88713117c1216aab617fae4c1d8d141b9229cf4dcd255f9d8eac14f81c5d270df9b6d5cf1e0e8c3903a66115182ad1cf2f6e54601b52c9b3bd05b12c0a8ab2662e1a6c75034ca452e92962fd119037c0e70d894c68a3cf04b6c04e2413d2ba57479f2012537083b6ffbcc9df3537b83e9dc6a52b9ee08ffe5b6fd9e588cf87bcb974736ba30da641c16c7f4e9823ece94d6806269e85ffd8d41493570ae9c5678569e90bfb59c7f065d6f5f2cb756402bd199d6c1e0f7c44db8add837d5bda9ada5a8656760e282948154fbc5a1bd6b22fae93aace277ad54d41cc24f2a2a5b16d6bbf03fbe87e1523a2c31e884a857de0c0d9207ad81bdaee52e352738d2d200b3443d6c9c4592e9cd71da6a1506befe6495333cc383d8cff6266c0599a0f6811daeedb2d652804aca683f260141ec4e824dfe1b1e3b2fca2b21f68ca30c78b81fd1d47ca115e816b8244a01aac22ac34298a98597fd0b5eee2ba0b6290c60be0cc00ece8e829cb1e360eb41aebafda13dacd3862289d4402b075911b1f4aefc7d22d01f2fcbbe4a26d72443a33eaa1165316c41fc435bb4d7435a91b8d0958f295d641bde799745a24a57c8a6a9cf5da9178ce85017442aaf2a5e7ad6edfd203bc38c437561a6f97122bb1699e06664bfad3b1dd02b7e6d7aeef9d9604085d5c33262f10f8eeded8c5c1ae185d7455b04ec3e12c38280c39afacb37c7dd00af16b5856d934ee7157494f125bc86616e30b48b18dfd78e08bbafebecd5b6991ad012df6c869e7ef41bcc35536402d4dfd8eaf0755b35710f79efc33037032892d5da106d0ce26dd3a2fffd092c17dbb1e09e846f513bcce29cbec1f1cbdeaab1d66414cb9c42a31349d2fd89876ac5935b01acd124886b778322e2a1142f8a891e8a9ec47ef62a1ea63c68ebbedef7a5d1c334853bbb078ea53997dcfec9a18bc83c91a10c4171ee4b0724739524ef1667be23fe48cec5034a848b94e45c1e494faa4cb3e08b773ff74d2da1f66ad7d98a8e8d7a5c75575de71f7b481f15ac0dbbf6677bf8343785357fc87c183ee56c66259c5b50fd0c3f36c1dcb97dec4fabe9a5abe3af3298de22fa17728e17f8e238ed776655679c9fb34cdcc6e356340716a62bebfb626c0f6db7659d9a30e993f40acfb1d423f34310de1b6f7dbf29ab9bc92aaefd4c97bb2bbbc847e89ee1249077e1cdfeca9152f1e82735dbfe188ef61dfb10b4e4259a546718e7087acd0f571990d85f7502a949b5e8872a8dfbd34238b48323b4d325dfb248f3e2f07e1cd70ca5bcff9eb045409cc91bf837870787b64fd5ab23d1bfa2ef3b429f298ce41471b2399e17905019fbcd4d7005d2fbe6668cb270d580a86425c63a4fd20d4be623306f4dc4cb9247505eefa6a557550c5aadad460acf7e251b631e86b927114f284863cf43e91ed88001715cadbe0eb9ca316ad4f842ae899e8a73534d39e8b3668dfbfae36d48088174fe508b3824a5c530fcd7fc510db27e6376a749caf3b451c3fc0779cfe6fe5790d5de2016acc6670bcf30c2118faf2bcf9136c31a2e97c9ebfe317e1032b5f6e39014e93df7da25d5751ce5d005e7e31dd3bc4d6c59338136daf832fcd13a4043fe9da195ad2226762776ce691e658f194c89ff5dc4ce32ae1fb8a4b44d05a2f28ff71b8343f6f779a2af6d6263453da5e523c3f967960c25911168166e7e74e0f72149eb6348293d4e7c412aea23077544b835a93dfd9347b13adc4d03db56d6da59da6b1bd674e7af5567e371dea03c1dbe9e5b391830efd9585d9964b7cce861e82834ff4dd0c954a531323425fcf3a6a64bc425ccedb87a3999fb9d2315336edf61868993002a7e877223648526336b592854c2b3233f9d723f4a482d3db6728c435776fa2bcdbc304f0ef556b6d3a904c38c7cd262c25cbc3cf158417bd54d7d767f03c433ad9b30ca4c432ccd6971a81dcb66e5519c2adca9758352c4b9f139f05482ff5f6d323d64425a98afddee3f873599b7e1d85a4b6a1189fc70ee970ba3aae99df8e1ab6c506fe008ddfaeb2ed83023cbd8c5686d30b0545b7c7381e34c42ef85911cda8537027ad5975be971ee59328ce9018cb37eea74a01b9e9fd2a418eb66b2167b660df22cc6244ac9cad7e732187c31e73e15bd241e97bc245535a5d2ef68168b0d2a0d4c43f30f878b750c5970f01a576c35814c2fe34a73ac8937ba8c5990294fba425fb2f94f7330dcad6cbcc36f683353147ab4e405ea10b07d511d50c085a831bd7f53905c4d2bb364969f328f8cf0196de78568382056c2d2464703cd97450eeb7ae6cbff388ab76f227a523fa88e9e0244d491cbc9fce042713c265e74173db73801b63b514b04e418d4b35b74ac0d4b30a22975bc0e46340bf0b3a1191c6cf9b0a5bc12155a25d232b379e723297c8315d6fc6e1fc45cd01a49914dd24e4d46a84769502fcf5f957670bc7c150d72183cbb2985f98b078b7b590300785b2c8d5ff3b968189f3068e72e14c1df202a5b07cfb8a441d55e2bde39922ed14490790261b48cefe84ead4bdf04f927f313988bc134ea20c166e85482ae4e8698971fb4539537f2a945b7254dd40adb059cce1db699c3a95d9be883e1a462c4d016c4e31af101c4787be995820d3a28d341a6653c4bf2446560a2a277589724be325d93d4791eee6c1ae89f23ff7e0731309c1e802a3ace9a1140f23294c0b71ab202977b080d14e241a2f5a46bc3c0a36175e475c828c7a4928bee34a26f8bc3baf2a1f775c28a7f9ac3066ec3006d561db54b2c8af99f9bc9299666511517ed75cfafe3406e162d9fc3c57be5cc2a8bc3d0996cf16a8a2023d294d5ddeea9794fcca0dc8917c580c091335d315d5be26ca679d0d24063cc3a29f6d01fc03e2f900a63d5ca93d31a1571e7b6fefa8c1204f4d47ed536603c3b3e22dcfbef8e6ef58e7e231d1e6c1f2aa9654d943b0205830bbfcfe2351aa6c2312de7645f60e907b98441f1539e7144de00f0138b90ea9d3ad38ad72556fa2e4ed8fda8884752e08dfa584bc37db971ca13a281b0036a4f8e7d772eecbb77a3d574f8c428cdc173905f07dfad6b9b478dfdb5920cf40a3f2cb78b80e21dc56fa2c05674f16c0250e0c974d205547b09391b20b42f6fa53192880a2fa6194d51d11a1a3c5a556c3188ac071bb384470afba3f8960993b5ffca9431af0a5af66010fffbca59e358430bd24fa842a59f143cb74831529aa6b4707eca5235160bb4dc91f6fe4a79b8dc1d5c35f2f7aa999e7cdd70b732e9baa2a5e15043da683ffa3fcb8904d148c958ad3c3dcf0505bfd1b1aeef4900ecf077323997b916a973aa95f2684e0c963e82e30f79280ad44b0fb95f42a9337f9b440f893ce64338fc9d2307931ef4d021539fac8807c71d95976a2dedf6c08b5aeb6c4f2f427c94e491d65cc1f10848aa8a03d212bf1196012ed91358f39f3e5a8f9146e8db78fb0783cb6f922866ed1acf1247b88d456a99bf0534cd909dc4bdb8c61d0567167ac52daba073b7e8eda1f2c57701291e123435e1050988338b95f84018c641ea5d9587fd2e48b95d1455b88745ac4ec3ecaca965c56bbf9b0d44ce27719a786ff7481af27159b7bd1645a95667f49cdcb4b0decb3b65075b90977e2749d73f828363b334d33e85df106f7a529921be69f80803bfaba1452f5d0ca9e21a3d985925299266877cddf27a3ccd181eb2af7e977a14ede333c599eef2e50cb3d1b99bc71e6506896f02e7630fa5a7e543d0c96d4e6e84d9f69dab06d526381e71ce77f348c3ca4729cd752f70d9599f6c4dae9bbf8e0713e10cf30ddba649c3c457c9b868425cb087a86488361403d3484c69fa3fd584cb832db9417a55929d2eddd44f88d88802dd45d7e0a53bb31e68d8d4cfec8f415e2223cb433d20703c95edd485b609aad9c93255f50f364757e863ad75952375b2c045bd5743727002c68e6c995c4f69cc3a5d2bad5e25979c43afdceaf07136132589275247e82160979ab62a0691e8d567bf5cb7d2102a3e559ab3c98e6f672d79382985002a1e94382c1960682903ab660b388790087c31c2704de8396649aec8df68a93ebd4be270f7c58a5c46a6d4e18e4f52cb103142b6c95425658b42874091fc9215b59708392e48f9577e3a0ddec7d6745f825265dd76c427d4fa62b9902aba75a6b312f14882e7223655806f61ed933190beb5b2fbcf2c04c811919f69cb27ffcc45ad40c99b75569762dd27da77fdeaa519f22aa4f5eb69e6f3066609adc122dc118ad250d56dc961c2ec134f3a7c65dd310282fbb783e5b48f2cf3dd6870b084a08d3023616eb4f9609317db2722c82665ca28801bf8f6486184276cd821d96614429cf35a1a9208ac11b9cb1e66c9551d5f3289a5bcea5ff796f26dab4ae2b02238f0703fe859518b8dafe6c65c7f3d976fbad2fc18b609ddee6f6b01087d55c78a16ba227786032bd7a36675f5be529525307f5dac765927820bdc4d2ed6c0e25a1872395cc7e8aa5e711d1fb25c1c784eb8b6931640fd1729db530e24d31e419c800e36abfdca3b81ef8782a4e742cec1d590b71a61371448b4350bdc9616ad72876c97963a79deab00a2412e37a5742af11182f8b3c51c3cd3b5858ec300dd2863f91cf9343db13a20338edd420c35a0f7100f612d4768e6cd104238481c1704c6dab56ffc28013fa4ac31f0a6d49873c57c9d5bae8a8e2c26359478ad2dc902e8f6646b81ced064517d34c8c7151932bb75d82a072159fa33ed966193f9c549e5206e2b62f40ad16034b3a05a18f77a11542db58d8cc74e5df5942d9ff1ad9a36493f957505639a28cc96ae56a2ed53cdb6871d67f7493f0d2c9dd84da683f5bcdb2577a30831fcf9cb3904f0f6eb20bfa335f2eb274fc7d7b936a4c2762b0c86e4dff38e69f0c29fd68b95c4eb9a835f005c2ed56413ea4abef03bd3948ea132cd664176a7ede92a42745ea7a657f02950c0bd0bb5bc55fba29ed343ed3c7c641f6a7c4031ff1a1b9b8bf9de45634305eacd44ce3e906ada5aedf473f52f26f97a0721a772d7d848bab373d8f6c1c9f09606ba381dc9a0997fc431bcfc71d94d50e1e3e30167b6069e237f1db71ff3a7eee1de4274d5466dff4e6794e8afeb8380d3a18bca0d6d496e59fc3ed4fc58459ca453dff2210eaed8a57434fa96379d72c2d2beee1fef2985286c4405bbc62a423225edd6899b06f0fe60047af58a5727c129161418f30a1b93572d5af5b68f62881fd79aaf346a95161bb5232feb90ff8b9f4476b4efbeae05b5d259e5d5ef830d960d5c58603d90df08eb8c65a13d8177d222013bb740c0b4be8e78b9bf208079ec9a9e29f9c567615b2f99f0606252bd9895a6143d630b54faffbc3be532f735ab79675bda6d29c06f182fe1f3513c86cb0ef9b08fe26d0fc54732c6f4c7b0947868bbbb9c0d4487498a86795936883c413406c8ca42ea9dfbd7312772fac059a5b90f4e3b6b9c1cf68ffaef83ecb4d8160c03bef579eccc9073ca89970b92f200e8f4a0ca8d8ba6a20845d9c322fb0ca08be131d5aae0c94c48cd7e6ba42ade616d4d1a3614bdfdc58a1d08a4cc9ebdc3f4be3aeb183bb9c5851dada0f03f51c84a601e4cd0a07d2750f2a4ead6fd9dfb13d26c0f692e456034bc9", 0x1000}], 0x1, &(0x7f0000000400)=[@rthdr={{0x48, 0x29, 0x39, {0x4, 0x6, 0x1, 0x5, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}]}}}], 0x48}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x4, @empty, 0x2}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000000480)="2fab4156a39eba0f8bf855aa2a340f3ad6b6c2f12d40b4ee298e369c5d409c22df20b1046a4e5de81933effd27692aa07453806e05cb47cd1cdd1e903ad8b82554ca9e7a82969d6f785fb4bf33de57ea9f99654ac6e894057e1408592f1830112c4a973c0cce98530ff8fa8da1fca5939b544be4581db456f128648ba96bbcc861ec172c4f320d4483d1b8caa00a083be6d0048c9f4a8ea56a35eae25093131d", 0xa0}, {&(0x7f0000003600)="257dd57bb3a9cbc0c4d4aea878b516dfd34e11ae80e927a6adae43ab4028163f73c0ade980daf1fab63562e6e5144f649250bfd722b2453b0a153376b28edb4f3e26e5a546735c65d5ab8fde90265dfb7941105b8db1a218571f64bafaf37aa0f74d52c99ec4f827156f09835d798f8106dca678c8ff1ab01c043e0d27b7f8d6d5aca14dbf391175c2385048a3c0a8ca94a306a5d4fecc2c8f042e8e5579feade2b1dcfcfc1dcbd9e14f8d072c800c6014382969397669e2b3de68f21f5650880152c50f6401d28735c97b933958b2d553f5cda3e0c8a8a0", 0xd8}, {&(0x7f0000000540)="652958ae95b771fc4b5e36af9b7602d918c262bc7c0c1006ebcf14ecd166c2ded655bc4790407cf6e85a6e7171937bc14d433d4c", 0x34}, {&(0x7f0000003700)="25ae361eca501d6107dd5942bdd4f2f0a8bfba15adb37d94688559273eea111621f9c95d3292ca40822bd1c1549a48410243", 0x32}, {&(0x7f0000003740)="9616e524366bce128250", 0xa}, {&(0x7f0000003780)="ad19e86b8f2358ffb770d79b223a37a23fe4b4ede22b335fa44b853c5c487ba6f6581f71265630fb74e4a347916ef072bcbc5ad63e1f39ba5616b58f8ad93adf374e5e629ba9a0f4a92590f69346df558c9a22edd73a066814af04fc04c16f4697fe94dd846c7c2e37d7c16203b3f238f531cb130de7eea3c8d51841b54106b338f3386fe575659e725a0ab640a152b6bd13b7a6c8ca4cd4d97cd81c9a83b8ca683b553fd54ebbfe6c8c0137ffa2ae75642fc8ab054519c975ef2292562811fc676e77cba0abacd2798dd588aaf2ca78bd2e1857f11a079a78ad8ea22d10a5ffb0e279395de85131e7463e6b394324", 0xef}, {&(0x7f0000003880)="15fd32d449bd12a2c6e13a92cfa7adc7a8ede7aaf841747aa737ff269ea79978d9ad3f3ecbd0b4cd4faae933e8b88b678a629c25d77388ba8bf8fc0932fc81e752d5a6883d1610c34936985045122401f765ec7296eb483265f3b56f7e805293b3340d2b87311a06210937a4a26c062eb27a0c3cf4005c8e50fc4a578b0e0a8f25a94c8ef0daa7c759c83faa2bbb370fe2e7184bf4155ac1aceeee", 0x9b}, {&(0x7f0000003940)="ec4a68faa735be095f1b249f5a464726b4894046aaf659a24dd729bace777fb5e73315368f6356e77f78ed1570280be7ebce117b896e37391fc57723e51c3876fe3af6ac941c3ee62b2b63287d7795aa4165cf7a7a267f30f327424614295c0336607df03b36001394a4c34b7b3f2ff37a686c7cbf11ab9f7a5a32065d317b2a161f393c68a8f73c7fc017ca6a24d4d5c564c8f60e471b251371a2429b92f3a3cd391a08f605ab309ac6a59c0f1e03fb59b47a1c1628b40fd8645e91789a94d8d12f980d4a10", 0xc6}, {&(0x7f0000003a40)="5bb4b616a95f2b993bff4357662a3ea1f1a244446f46e251bb1c95a53f9b984be1caac44c5fd81662a014b007d8a64be4b0eea372f1ce77792e6200752064b2b105036c82837c6144bac03a4482a672fef12b8e6399cd3c1d7761781b15e6d5252d42e7c3ebd16b37b1099a30c918ebf40dbf1c862600019b6e21f637711000f38072d65eccf706936aadc22fabab14136e2a3cad02e53bef80c9745c7fa59accb43ddc9cdf4c43f8ba0533ff7356d9f95dcc2ed2ab593234214", 0xba}, {&(0x7f0000003b00)="da208e9cec892f6e2de3998deadae7157b70ca5449c2bd349d9203debcba1015e194d2a214d0524092a486477278f148369276d932dfe033847f966fb1adf160e6c7b19e459823474142a0791c80b743521d7b6193b4ddb551f8a473e83f812337de0cf19c8c782d27d249db1eb9ba7cb32453d7dac6b676c27f69b9ffa8d43e939a280782a63b7c4241e96ef7d2939d3d4f7e910306a646a9895ac87fba2f2c7a456e50f9495c88a6a3017451835375b1bafca34f1e85074cc8a6d9255d2893e6395518091b9bf31e9810fb9efa6b588d6cc1bb27f685f4b2", 0xd9}], 0xa, &(0x7f0000003cc0)=[@dstopts={{0x28, 0x29, 0x37, {0x16, 0x2, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @jumbo={0xc2, 0x4, 0xb}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5f4}}], 0x70}}, {{&(0x7f0000003d40)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f0000004000)=[{&(0x7f0000003d80)="f9ae43c8040338adaef25bca373a24ae1f0f27fee803ec71be9c006021e3a4a2c99f725761dab685", 0x28}, {&(0x7f0000003dc0)="d2de932cfdd9b18a165c6d69f7869d484b50af33371e6bd0f50b64e414be65ad4eebf873eae5b9721b33e4d516d0894d6cfe8799fa41cf551370817c41e23c9ff8aa334819b0067242c4590cd720596b1c3610953db8a36af75e1e09f6c3ef0efd9cc65093e48389b3f2a72425dab2f8a5856303404ab7db952af61ca54c71", 0x7f}, {&(0x7f0000003e40)="12f1ef1ebcbac70867d5d49a3b483309b8ba5316c068ec0dbc9b05040350115f365709ee653c48239df5c17d72af4afa2b5744532215f1fa2233ee3424be75d74d61c76c5c79b1d83dde7ed1479768a69dd7046b9efddbe9f1a0fff3b2f6ee738253a45777a4e45ffa5f13fc12d8d4a34a41fc75ae4b", 0x76}, {&(0x7f0000003ec0)="fc0d6dd311f7820be54cb49e9ba41f4a262755ea3176438ef518277a0c68321bed657f8578b00f563d7ddcd55cf4f824281dd8531e6939098ae591c776b650fe0a4420bc428311f58d8d01338535591a5a3ee725cf01fe17b5ad988dfa5838770dd39c0d6ae075b3d37cd7c373761361d4778d060aa602f36cf14ff9636e4c21ad070a3ebd8cf8c50421c8af428a", 0x8e}, {&(0x7f0000003f80)="7f199836c8461490872104011480b68302297b441d29e62c0bd6693619a7095fea248a0b9dd9050f7c6616f9238279b6ffdc1866cde20a27f53fbf7aa25dbcdd5ae4b9197031921e9219", 0x4a}], 0x5, &(0x7f0000004080)=[@dstopts_2292={{0x60, 0x29, 0x4, {0x73, 0x8, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xb, 0x15, "d40e0d839945870a60e60cea75057f009a55a85e93"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x78}}, {{&(0x7f0000004100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000004280)=[{&(0x7f0000004140)="5e4dcbf7624568220c77565064761771e2aee7ea5bb4db73cf43132ae2040738ae863bc0d759185b841fa41f2a43a3", 0x2f}, {&(0x7f0000004180)="0bbb783ad58018b791952820c5fe5a486173c07cc136d742082082b0da4ba846014b0e13a069468063abebe1826b559399c99ea80a0b6e9c5f425e6c30b7c619", 0x40}, {&(0x7f00000041c0)="ae15880535029959441744d0b07e080d9451ccac34a241c8f2c807dcb940", 0x1e}, {&(0x7f0000004200)="630c00439b8b301e5bd9cecf4a0376d33839faf467b3b985b0d585c27032413d4604d6b2d722e54b24bf20cc2a63595ab02175c57b105730208e07047d0f310715cc", 0x42}], 0x4}}], 0x4, 0x4000)
read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m37.463324386s ago: executing program 3 (id=1208):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x37, @local, 0x4e22, 0x3, 'rr\x00', 0x0, 0x0, 0x2a}, 0x2c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1m37.261252049s ago: executing program 3 (id=1209):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "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"})
close_range(r0, 0xffffffffffffffff, 0x0)

1m37.199892671s ago: executing program 32 (id=1209):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd4ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25a1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6a4ee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a6fffffffffffffe3be6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938ec40762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f646ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb3f9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182099b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
close_range(r0, 0xffffffffffffffff, 0x0)

1m36.21593241s ago: executing program 4 (id=1210):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x268}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"])
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

1m36.129650741s ago: executing program 4 (id=1215):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x529281, 0x0) (async)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x529281, 0x0)
write$rfkill(r2, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8) (async)
write$rfkill(r2, &(0x7f0000000100)={0x80000001, 0x2, 0x0, 0x0, 0x1}, 0x8)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r7=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="3c65b9d50859"}, 0x14) (async)
sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="3c65b9d50859"}, 0x14)
fallocate(r3, 0x10, 0x7fffffffffffffff, 0x1000)
lseek(r1, 0xffffff7f00000000, 0x1) (async)
lseek(r1, 0xffffff7f00000000, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x1) (async)
sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x1)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000))
syz_open_dev$usbfs(0x0, 0x206, 0x3601) (async)
syz_open_dev$usbfs(0x0, 0x206, 0x3601)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
pread64(r11, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="09030000000000fdff072000adce040002"], 0x18}, 0x1, 0xf000000}, 0x0)
r12 = openat$cgroup_ro(r0, &(0x7f0000001040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000000), 0x208e24b)

1m35.937981575s ago: executing program 4 (id=1216):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20)
fcntl$setstatus(r3, 0x4, 0x40000)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000180)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba00", "2809e8dbe108598948224b084afbc11d87313c5240f45f819e01177d3d458dd4192c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d26c00000000000000000000000000ffffac1414150000000000000000e805000000000000faffffffffffffff06000000000000000800000000000000000100000000000001000000000000000008000000000000d931a06800000000810000000000000001800000000000007cf000000000000002000000ba0b00000100000029bd700000000000020003f201000000000000000900000002000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x2, 0x29}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180))

1m35.225548959s ago: executing program 4 (id=1219):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
read$FUSE(r3, &(0x7f0000008fc0)={0x2020}, 0x2020)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0) (async)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0)

1m35.002312083s ago: executing program 4 (id=1220):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1800000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af25, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0)

1m34.832009686s ago: executing program 4 (id=1221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0})

1m34.686101449s ago: executing program 33 (id=1221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x957acd2f5556811e}], 0x0, 0x0, 0x0})

1m23.832686458s ago: executing program 34 (id=1186):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r0)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') (async)
readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
dup(r0) (async)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}]}}) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async)
read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f) (async)

1m4.96612312s ago: executing program 1 (id=1683):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a)
ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000e00)={0x0, [{0x2, 0x638, 0xfffffffa, &(0x7f00000002c0)="3816a0169834a42d12eee78ff00df3d42d3e7c2b1fed68d5ebf8e2137c40baff467af95ca048b9dbc461dbc15886b3bcad7c15711cc1be910aa066b4073faafe3f5841482397b07079a41514facbc8f87f3e7a3c92b3597d0023c8fd44871c06447070bfbebe6600fbbf9b84e3977a5137ac3a9ad879de0c5da2cecd05e9cf4d92c1bf8200efcd8dbfabafb7f2209e53ae5bff292347b5c4a6fc1c80d923b779b9340589068f0895fe87eb51de8105be3773250989f25b5e9378612b430b5e321eba2032cb5aba"}, {0x0, 0x410, 0x4, &(0x7f00000003c0)="37b3d0f1f2dee587f077af196a506c70c276b8a5357870c53a9285b8c99ed43efc271ba10fd191daecee6823839176d244ac1f97dad679feabfff663168bda4398e52ca26d7c1739e346a088d81864b836352b935c35d3a4a039e08e9371a88b5f47e75ea53405e46f29da270ce7846fbaebe784c95a02c9f21f83e601fd24d1d0a7"}, {0x0, 0x378, 0x80000000, &(0x7f0000000480)="eb3789d615bc2feda4fc52de50c2cfb6c37e0e10a22e1fb19339a009e831d871a594fb8e4c786cb8b1f21e5aad62677c387b894994265d8894f7e9fb9ca60161d2bb74ecdd6b174462eef58618ab5b1edbe3273b9a8650632b566980c6639f0b61c20708d38f26966c9228cefb233d"}, {0x2, 0x7d8, 0x0, &(0x7f0000000500)="58c7c130e7b1b66eac84b2a8f67c263b216d373ac54a1e66e8e8b1c93eecd326b29edda9e6c4a13ec3e4b5836371ae76e0ab5dd5510a2bb74f6808bf108bbb15dc2c61ce0d51b25c95cf7144d1d1fc9fc9ceed39106d6c506b3e2087791872346d514886a6364cd732fc520894e63bcf944393f44ba3ce13e51b5fac9eaf6348a74b3360c8353a72e73fa81b224d6f7f393e3ec0441876060235aa97c38ff535f1cd038ab50af8076c4276d98c579b7ccb40b88c2e5310110068392a4abc93840fb5a1127a78d4cb91b8be0ef80d9cfe109771ca5a51f9ef29701e70c16211be845c327824205498fb5844b66426160404a9fb195c996e42a2ac09"}, {0x3, 0x0, 0xd, 0xffffffffffffffff}, {0x0, 0x480, 0x5, &(0x7f0000000600)="1fe2681e38c6484dd710e1f7e910a123b6bc076fc54cea1bc3c2ef7c9ab8bd2aed77308f89662c86c14f2a58c1744ee2383da5812fe308107499f83e5304b9261ae75ae43273f3d30c239a6ed22a37b7c6246b1de87b327df536269d5a633f0a62be3b0ccd1f9f89ad25335c30b620c1175625fc4eab329691e06b67302e157f607433416a40efcae7abdf71c7c556f2"}, {0x1, 0x570, 0x3, &(0x7f00000006c0)="b308f5b69f364c497b3f08adf98f90b7ea30dd065c01e3280fac585dc26d144062805312f6f63330f7c61b09d8f00530fe36dd1ba0ad5828baba0f64baf7c024e25a027d45888d3d5a8508db4576fe94c317b4abb91bf882ea21ae142d55622391ed171a6dd2dcbb18aa3f53a311c8bd3a22179b81a56f260b566ee343a20ac5e534dfda18c0a797170d9ba29c3eb177f2807e5bd529e6fd36eade2eb8cc5093e3e2851dfe88c4e718cbbadab385"}, {0x2, 0x6a8, 0xe, &(0x7f0000000780)="38e43a3c06c2e1b23690a0d86f10ee6862ef10cd7ff630fbf9840dfb27c4924cbaea531e0bf9dd9c9d805e0507aa7f189c3c41d37c911a405b08e9e79843e0b1f3175832d043905b55ff3b567fd571bf30bbe724cf47ff10f0286e9e4a7578ea2b4557f020526349313083ddc800ef3b9c3a3df496308b81fb3fee6a49f4be6a2822f33aaf768b453397fc14f8bd5d58cf124416d35312fda45b897e050b14e8ac5a3f1fd6906721a7ed208f3f8d2774b671eff6b7ca27ccc2e31e30f81a13b1c9b75f72860dd70160e741ecde0c8606426abe1ab7"}, {0x3, 0x228, 0xffffffff, &(0x7f0000000880)="924fde7374d17e06e8d708447438f0f98add95c27a3720e4c26b432fb938677f5986d68c519487f5e2bf53a8fd2b825c996f617d1709fe9a5495e9b160f7d7b8a449dcbc4a"}, {0x0, 0x620, 0xf74, &(0x7f0000000900)="9b4560ecddf30b7049646deb64457812cf0e52b62c5ce3710d8e586d9df39b6061fa918ca3915fb9680c572c77b530b23fc5c447c3231dc1d6375b8882915eb191f711096a2f2a6622e8d308f750d7ee8d8e7ce802ba62ad548767c2253e4e284e9b4b4506d897d7bf3da6640bfd2d8261e680e933239405b8028cead0caa1fa00168672bd1f3ad17ac7e6bdfa2603a0febfde5142ce6bd91c1a6a4731ba5b626586756b4ae08c4a450491b6c8293adfe820f9d8ee20be441be49cfe78d68066f9e047ad"}, {0x1, 0x468, 0xa52, &(0x7f0000000a00)="66b1a5123b1e0cf05af5443bddfa4f19eebc5241effcd03e7417692d486b9b86cff9bad265900d410fa41272e1af5185ee939df15c0fd34bb4c7b9fab6d0171b0d9fe73ee98b64401ead13503920d4833b39d00b80f506806f87e803882770393ead668957937e0e70dfe23039242012bcb798a29022076c6c3a9e7aee485359c1d526d25c99f6d1bbe024caf7"}, {0x3, 0x528, 0x2, &(0x7f0000000ac0)="74fb259b21ac5bf8d45e68ebf5d954f03302fa25d8c81775ad595977c511f7713ef665f10a48b39cbb6bf15f13cb90f58d645257775e44d2c419f3d0611957a4b36d84c45eee2c0dc09a7bfd64f174041f1fc4a0f6386d6f21ef90830c14b2aecd6f17cb252a5e335810a8774cad8134438c4cce528fb298426177af75ad79a0ff258c81cc9cbe778c92d6f5bbb3be72daba7afa44cb38d94e67168584dd026c6c8ce74768"}, {0x1, 0x2b8, 0x2, &(0x7f0000000b80)="eea75f346f33cc4ab7e81bd995add38f36015342cfa5d48bef31d07ebfbb2c714df6894f0f7ecde8486d5df62c7c1b7be4ad0217847f832e78b5d1a78ade33c06628d028dcfeb87d67de4a389168ebb9db9e84115b144d"}, {0x0, 0x570, 0x9, &(0x7f0000000c00)="6460e5f31f1cf1203f235061d78192b38b1de9d281a5d8c07b609919efc216e4f2808730b5571e1945e77a8eb633db8da1f3c2a34bab5cf0b30e077d62a1e0f0e5aadfd85f3155a034fff1db44cec11ac5b67caa2a8e5cc10b4bf3d1acd4d010168a037ca001c3e9c492b6f4b2ee9feeb255c8fbfc79ceabbdb3076341ca3a0575a2c574ac984bd7f1d957b137495b2073da8b7872f9e27e726d0adeaf9f1980198b887104c537533eefc9414cde"}, {0x2, 0x3a8, 0x7, &(0x7f0000000cc0)="1300079afdc62a57b34047b15cb49f8b0ff7ed7fd0d8dbcea169784af3749353cfe23f6ecb5d5bf64fce05100e126862f99b14f29a71b13d6ff5146f8f91511acdd477e48fdce26d95e35ccbea3c869d2b62ff21548a86f7944f6a24bf79f4891244fa1ada8862421bd8b91852e3caab29d9f969b1"}, {0x1, 0x560, 0xbbb, &(0x7f0000000d40)="be9a41950d54e10f46c9e6f28dcdf25884e8d4871d42640fa339c21b5e3da0370bf323fd9022ab821741f66610999bbf156d9e0dd70aab16af4efe6463ced3354713483be34d5cd1560dfb17ab47fb9a628a658a861fb8ac1fb7e4a644e9bcc9146eafa0eb70fd85d82b6a102f000ab2efb86b1b5ba6f8b6b6896e4a8f120cbf5f4c08bbba5970a1e4d1ad8412ea360306a1947ccb813c4467b5e8d14307c9920e6a4a503f8f456cb2e4f72d"}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}], 0xf9, 0x0, &(0x7f00000001c0)="e80b71e308f6af673c486bceb440fe7b1630ed8c19cced0205ec4c08abc8fe65b460d1b20d6fd113ac994437e77e1c31fabe79d2914e322ed1a3d02730a91bb8741f6e9157d742f25af0a3d5dd2df9d1713c6207cb31be60f3d4d3a00d2896548e0e19aa57a03dd1e0381411fd0b949a764fab3cb7d267da87a52a5b3cf1f6496fb11d203e826bed201a3931df1b8edb44b82cad816581c65c9b4ed4823e784d2ce0bd48d0606a1c0c7a36ca3a83c1127357a66d0997a07fbc7dc1908f49c919e1279b54ec74d0e1b7039e40b431f588205bfab1f52671f92408736260770c58f01d26cc00c6bd99e254a01d9cf4bdf5b2cd79b4e50bbbe927"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m4.942596931s ago: executing program 1 (id=1685):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x10) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in6=@empty}, {@in=@local, 0xfffffffe, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4309(aegis256-aesni)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'crc32c-generic\x00'}, 0x0, 0x60}}]}, 0x188}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0xb, 0x1}, @flat=@binder={0x73622a85, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x22}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1m4.822130063s ago: executing program 1 (id=1687):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats})
mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32'])
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, 0x0, 0x0, 0xffffffff)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
pipe(&(0x7f0000019480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, r7, &(0x7f0000000280))
splice(r4, 0x0, r5, 0x0, 0x10500, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000)
memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
socket$tipc(0x1e, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
waitid(0x1, r1, &(0x7f0000000340), 0x8, &(0x7f00000003c0))

1m4.299519983s ago: executing program 1 (id=1698):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x90b981, 0x0)
lseek(r0, 0x7, 0x3) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\\\xf1\x00')

1m4.149172676s ago: executing program 1 (id=1701):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0xffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004880)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002480)={0x3, [{<r6=>0x0, <r7=>0x0}, {<r8=>0x0}, {<r9=>0x0, <r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {<r13=>0x0, <r14=>0x0}, {}, {<r15=>0x0, <r16=>0x0}, {}, {}, {<r17=>0x0, <r18=>0x0}, {<r19=>0x0, <r20=>0x0}, {0x0, <r21=>0x0}, {<r22=>0x0}, {<r23=>0x0}, {0x0, <r24=>0x0}, {}, {}, {}, {}, {r3, <r25=>0x0}, {r4, <r26=>0x0}, {<r27=>0x0, <r28=>0x0}, {0x0, <r29=>0x0}, {}, {<r30=>0x0, <r31=>0x0}, {0x0, <r32=>0x0}, {<r33=>0x0, <r34=>0x0}, {<r35=>0x0, <r36=>0x0}, {<r37=>0x0}, {<r38=>0x0}, {}, {<r39=>0x0, <r40=>0x0}, {<r41=>0x0, <r42=>0x0}, {<r43=>0x0}, {<r44=>0x0, <r45=>0x0}, {<r46=>0x0, <r47=>0x0}, {<r48=>0x0, <r49=>0x0}, {0x0, <r50=>0x0}, {0x0, <r51=>0x0}, {<r52=>0x0, <r53=>0x0}, {}, {<r54=>0x0, <r55=>r5}, {<r56=>0x0, <r57=>0x0}, {<r58=>0x0, <r59=>0x0}, {<r60=>0x0, <r61=>0x0}, {<r62=>0x0, <r63=>0x0}, {<r64=>0x0, <r65=>0x0}, {}, {<r66=>0x0, <r67=>0x0}, {<r68=>0x0}, {0x0, <r69=>0x0}, {0x0, <r70=>0x0}, {r3}, {}, {0x0, <r71=>0x0}, {0x0, <r72=>0x0}, {<r73=>0x0}, {}, {0x0, <r74=>0x0}, {<r75=>0x0, <r76=>0x0}, {<r77=>0x0}, {}, {<r78=>0x0, <r79=>0x0}, {<r80=>0x0, <r81=>0x0}, {<r82=>0x0, <r83=>0x0}, {<r84=>0x0, <r85=>0x0}, {<r86=>0x0, <r87=>0x0}, {<r88=>0x0, <r89=>0x0}, {<r90=>0x0}, {<r91=>0x0}, {0x0, <r92=>0x0}, {<r93=>0x0, <r94=>0x0}, {<r95=>0x0}, {0x0, <r96=>0x0}, {<r97=>0x0, <r98=>0x0}, {<r99=>0x0}, {<r100=>0x0, <r101=>0x0}, {0x0, <r102=>0x0}, {<r103=>0x0, <r104=>0x0}, {0x0, <r105=>0x0}, {}, {}, {<r106=>0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {<r109=>0x0, <r110=>0x0}, {<r111=>0x0, <r112=>0x0}, {}, {<r113=>0x0}, {0x0, <r114=>0x0}, {<r115=>0x0, <r116=>0x0}, {<r117=>0x0, <r118=>0x0}, {<r119=>0x0, <r120=>0x0}, {<r121=>0x0, <r122=>0x0}, {}, {<r123=>0x0, <r124=>0x0}, {<r125=>0x0, <r126=>0x0}, {<r127=>0x0, <r128=>0x0}, {0x0, <r129=>0x0}, {<r130=>0x0, <r131=>0x0}, {0x0, <r132=>0x0}, {<r133=>0x0}, {0x0, <r134=>0x0}, {<r135=>0x0, <r136=>0x0}, {<r137=>0x0, <r138=>0x0}, {<r139=>0x0, <r140=>0x0}, {0x0, <r141=>0x0}, {}, {<r142=>0x0, <r143=>0x0}, {0x0, <r144=>0x0}, {<r145=>0x0, <r146=>0x0}, {0x0, <r147=>0x0}, {}, {0x0, <r148=>0x0}, {<r149=>0x0}, {<r150=>0x0, <r151=>0x0}, {0x0, <r152=>0x0}, {<r153=>0x0}, {<r154=>0x0, <r155=>0x0}, {}, {<r156=>0x0}, {0x0, <r157=>0x0}, {<r158=>0x0}, {<r159=>0x0, <r160=>0x0}, {<r161=>0x0}, {<r162=>0x0, <r163=>0x0}, {<r164=>0x0, <r165=>0x0}, {<r166=>0x0, <r167=>0x0}, {<r168=>0x0, <r169=>0x0}, {0x0, <r170=>0x0}, {<r171=>r4, <r172=>0x0}, {}, {}, {<r173=>0x0, <r174=>0x0}, {<r175=>0x0, <r176=>0x0}, {<r177=>0x0, <r178=>0x0}, {<r179=>0x0, <r180=>0x0}, {}, {<r181=>0x0}, {<r182=>0x0}, {}, {<r183=>0x0, <r184=>0x0}, {<r185=>0x0}, {<r186=>0x0, <r187=>0x0}, {<r188=>0x0}, {<r189=>0x0}, {<r190=>0x0}, {<r191=>0x0, <r192=>r5}, {}, {<r193=>0x0, <r194=>0x0}, {<r195=>0x0, <r196=>0x0}, {<r197=>0x0, <r198=>0x0}, {0x0, <r199=>0x0}, {}, {}, {}, {<r200=>0x0}, {0x0, <r201=>0x0}, {0x0, <r202=>0x0}, {<r203=>0x0, <r204=>0x0}, {<r205=>0x0}, {}, {}, {}, {}, {<r206=>0x0}, {<r207=>0x0}, {}, {r4, <r208=>0x0}, {<r209=>0x0, <r210=>0x0}, {<r211=>0x0}, {<r212=>0x0, <r213=>0x0}, {0x0, <r214=>0x0}, {}, {<r215=>0x0, <r216=>0x0}, {<r217=>0x0, <r218=>0x0}, {<r219=>0x0, <r220=>0x0}, {<r221=>0x0, <r222=>0x0}, {0x0, <r223=>0x0}, {}, {}, {0x0, <r224=>0x0}, {}, {0x0, <r225=>0x0}, {0x0, <r226=>0x0}, {<r227=>0x0, <r228=>0x0}, {<r229=>0x0, <r230=>0x0}, {0x0, <r231=>0x0}, {<r232=>0x0}, {0x0, <r233=>0x0}, {<r234=>0x0}, {<r235=>0x0, <r236=>0x0}, {<r237=>0x0, <r238=>0x0}, {<r239=>0x0, <r240=>0x0}, {}, {0x0, <r241=>0x0}, {<r242=>0x0, <r243=>0x0}, {<r244=>0x0}, {<r245=>0x0, <r246=>0x0}, {<r247=>0x0}, {0x0, <r248=>0x0}, {}, {<r249=>0x0, <r250=>0x0}, {<r251=>0x0, <r252=>0x0}, {<r253=>0x0, <r254=>0x0}, {<r255=>0x0, <r256=>0x0}, {0x0, <r257=>0x0}, {<r258=>0x0, <r259=>0x0}, {<r260=>0x0, <r261=>0x0}, {<r262=>0x0}, {<r263=>0x0, <r264=>0x0}, {0x0, <r265=>0x0}, {<r266=>0x0, <r267=>0x0}, {<r268=>0x0}, {<r269=>0x0, <r270=>0x0}, {}, {}, {<r271=>0x0}, {0x0, <r272=>0x0}, {0x0, <r273=>0x0}, {<r274=>0x0}, {0x0, <r275=>0x0}, {<r276=>0x0, <r277=>0x0}, {<r278=>0x0}, {}, {<r279=>0x0, <r280=>r5}, {}, {<r281=>0x0, <r282=>0x0}, {0x0, <r283=>0x0}, {<r284=>0x0}, {0x0, <r285=>0x0}, {}, {<r286=>0x0, <r287=>0x0}, {<r288=>0x0, <r289=>0x0}, {0x0, <r290=>0x0}, {}, {<r291=>0x0, <r292=>0x0}, {<r293=>0x0, <r294=>0x0}, {<r295=>0x0, <r296=>0x0}, {<r297=>0x0, <r298=>0x0}, {<r299=>0x0, <r300=>0x0}, {}, {<r301=>0x0, <r302=>0x0}, {0x0, <r303=>0x0}, {<r304=>0x0}, {<r305=>0x0}, {<r306=>0x0, <r307=>0x0}, {<r308=>0x0, <r309=>0x0}, {0x0, <r310=>r5}, {0x0, <r311=>0x0}, {<r312=>0x0, <r313=>0x0}, {0x0, <r314=>0x0}, {0x0, <r315=>0x0}, {<r316=>0x0}, {0x0, <r317=>0x0}], 0x40, "45e7619b0978b4"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000003480)={0x5, [{r185, r16}, {r60, r184}, {r106, r53}, {r58, r124}, {r234, r287}, {r205, r172}, {r58, r259}, {r106, r225}, {r56, r270}, {r207, r49}, {r253}, {r27, r290}, {r164, r216}, {r153, r76}, {r130, r226}, {r115, r213}, {r125, r81}, {r278, r233}, {r308, r107}, {r189, r101}, {r73, r89}, {r75, r47}, {r179, r32}, {r22, r169}, {r293, r76}, {r38, r199}, {r245, r138}, {r304, r89}, {r109, r296}, {r177, r71}, {0x0, r273}, {r301}, {r119, r228}, {r279}, {r188}, {r279, r202}, {r308, r29}, {r175, r74}, {r173, r292}, {r156, r302}, {r97, r254}, {r52, <r318=>r96}, {r221, r240}, {r249}, {r113, r25}, {r288, r282}, {r23, r194}, {r6, r280}, {r33, r107}, {r162, r294}, {r171, r47}, {0x0, r72}, {r17, r12}, {r244, r220}, {r149}, {r260, r165}, {r8, r148}, {r183, r292}, {r242, r170}, {r161, r218}, {r271, r34}, {r266, r178}, {0x0, r57}, {0x0, r265}, {r103, r42}, {r191, r65}, {r44}, {r41, r126}, {r190, r289}, {r211, r55}, {r162, r107}, {r206, r192}, {r127, r241}, {r305, r83}, {r235, r285}, {r135, r303}, {r13, r300}, {0x0, r167}, {r278, r220}, {r185, r29}, {r90, r18}, {r239, r92}, {r207, r213}, {r23, r132}, {0x0, r289}, {r73}, {r284, r151}, {r215, r157}, {r251, r230}, {r93, r257}, {r189, r108}, {r33, r40}, {r117, r118}, {r158, r176}, {r91, r256}, {r185, r264}, {r38, r160}, {r203, r122}, {r106, r118}, {r316, r184}, {r166, r178}, {r99, r315}, {r266, r178}, {r308, r176}, {r306, r277}, {r158, r147}, {r247, r307}, {r269, r172}, {r171, r138}, {0x0, r296}, {r82, r317}, {r95, r141}, {r299, r198}, {r255, r34}, {r95}, {r304, r272}, {r149, r313}, {r75, r7}, {r200, r280}, {r54, r296}, {r90, r238}, {r23, r134}, {r13, r152}, {r260, r292}, {r188, r289}, {r95, r167}, {r227, r226}, {r219, r310}, {r100, r141}, {r142, r45}, {r123, r311}, {r93, r267}, {r9, r72}, {r99, r282}, {r276, r20}, {r154, r292}, {r260, r105}, {r66, r210}, {r161, r202}, {r271, r110}, {r195, r134}, {r111, r131}, {r281, r105}, {0x0, r163}, {r159, r112}, {r295, r76}, {r139, r92}, {r119, r102}, {r262}, {r103, r224}, {r242, r70}, {r135, r65}, {r209, r155}, {r30}, {r133, r128}, {r46, r61}, {r91}, {r68, r222}, {r78, r223}, {r43, r50}, {r150, r214}, {r86, r129}, {r115, r246}, {0x0, r70}, {r205, r87}, {r308, r257}, {r181, r169}, {r106, r120}, {r80, r277}, {r207, r70}, {r306, r79}, {r168, r96}, {r247, r298}, {r35, r302}, {r185, r141}, {r206, r63}, {0x0, r169}, {r182, r36}, {0x0, r204}, {r19, r59}, {r239, r231}, {r35, r51}, {r291, r122}, {0x0, r230}, {0x0, r283}, {r293, r94}, {0x0, r201}, {r161}, {r164, r236}, {r97, r285}, {r8, r116}, {r212, r36}, {r130, r176}, {r253, r223}, {r197, r309}, {r15, r144}, {r84, r272}, {r244, r61}, {r62, r20}, {r244, r198}, {r39}, {r186, r132}, {r153, r14}, {r189, r28}, {r288, r208}, {r271, r49}, {r64, r85}, {r125, r42}, {r145, r250}, {r262, r265}, {0x0, r180}, {r237, r267}, {r121, r307}, {r229, r26}, {r217, r51}, {r235, r151}, {r227, r280}, {r117, r248}, {r190, r31}, {r95, r174}, {r232, r143}, {r258, r233}, {r130, r69}, {r276, r243}, {r263, r98}, {r77, r261}, {r8, r174}, {r35, r65}, {r168, r252}, {r137, r141}, {r312, r290}, {r297, r275}, {r115, r63}, {r11, r282}, {r171, r140}, {r173, r167}, {r203, r24}, {r193, r252}, {r274, r67}, {r88, r296}, {r239, r187}, {r179, r94}, {r286, r114}, {r13, r105}, {r46, r21}, {r22, r98}, {r268, r194}, {r109, r104}, {r268, r196}, {r154, r169}, {r19, r220}, {r37, r146}, {r33, r118}, {r171, r314}, {r52, r10}], 0x8, "3ecafd01d4fbb7"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000004480)={0x0, ""/256, 0x0, <r319=>0x0})
r320 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r320, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, <r321=>0x0})
setreuid(r321, r321)
mount$binderfs(&(0x7f0000000080), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000300)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x405}}, {@stats}, {@max={'max', 0x3d, 0x5}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x9}}, {}, {@stats}, {@stats}], [{@dont_hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r321}}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000004680)={<r322=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000480)={0xe811, [{r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r319}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r172}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r318}, {0x0, r241}, {r322}, {}, {}, {}, {}, {}, {}, {0x0, r136}, {}, {}, {<r323=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r48}], 0xe, "b97efadb4e9230"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001480)={r323, 0x6453})
fcntl$addseals(r2, 0x409, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r324=>0xffffffffffffffff})
getpid()
sendmsg$unix(r324, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r324, @ANYBLOB="efff0000"], 0x18}, 0x8841)
r325 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r326 = ioctl$KVM_CREATE_VM(r325, 0xae01, 0x0)
r327 = ioctl$KVM_CREATE_VCPU(r326, 0xae41, 0x0)
r328 = dup(r327)
ioctl$KVM_SET_MSRS(r328, 0xc008ae88, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r328, 0x4018aee1, &(0x7f0000002580)=@attr_other={0x0, 0xa3dd, 0x4, 0x0})
r329 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r329, 0xc0086202, &(0x7f0000000440)=0x1)

1m3.650099156s ago: executing program 1 (id=1705):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)

48.593625965s ago: executing program 35 (id=1705):
r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)

3.671684309s ago: executing program 5 (id=2363):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w=\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',aname=!%()-\\)*,debug=0x0000000000000004,\x00'])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
dup(r1) (async)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w=\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',aname=!%()-\\)*,debug=0x0000000000000004,\x00']) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) (async)

3.62748163s ago: executing program 5 (id=2364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0xa, &(0x7f0000000200)={0x7, 0x6}, &(0x7f0000000240))
setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x806, 0x0)
getrlimit(0x5, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x2}], 0x50, 0x0, &(0x7f0000000180)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.542098032s ago: executing program 5 (id=2365):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x3, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0xc484, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x4, 0x400, 0x8002, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0xb61d, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x4, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2, 0x7, 0x4, 0x0, 0xb, 0x0, 0x0, 0xfffffffc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x1, @remote, 0x5}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}]}, 0x58}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
signalfd4(r3, &(0x7f00000002c0)={[0x8]}, 0x8, 0x800)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.222228348s ago: executing program 5 (id=2368):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = fcntl$dupfd(r1, 0x406, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040)={0x20000000}) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x3, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
r6 = accept$packet(r3, 0x0, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', <r7=>0x0, 0x29, 0xc, 0x3, 0x9, 0x10, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0xffffffff}})
recvfrom$packet(r6, &(0x7f0000000240)=""/135, 0x87, 0x20000020, &(0x7f00000003c0)={0x11, 0x9, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14)
pwrite64(r6, &(0x7f0000000400)="85517dbd7d22925627b8ac762a5ccfb96ef1e4b68b3e7446ae74f75b8bd6f0b277220251b28709000000b20be4b2033925d0f2eac9d1486ad308e4d463eb86e4adbea26777ffa663cb86e7f5a9e9a721c42da9113befc54a222c2eac8cda1bd5045efb39683978edbe033b71b95e534d94929b8c493019dab5e651b122b5030606", 0x81, 0xffffffffcea39a5d) (async)
write(r2, &(0x7f0000000080)="b1ac9f335bf56c9393c104ef782ee1ca0324c5de2fda0f7373094d1d36605cb1a3c7f3770dcbd46ffce93c8f4624a1e2c704b6f127202b4ae3366331a860f5d702d666d13a9954bc89756388d45370c60a5f42777095deefe33346588d43f4446fee5d6b9121cf699438f9e7921e14846b4d6ecf0753c50364a63725a1111093524c7e8c229fa53fb238ee107d41f179c59f27ba609461d0475c77261b445bf92a6c1ba7ac7465ae5de0ad244e54ec5b7fa01b535ff63b764a7193cc16a81084951b773ac7fd963f52e8355e0fec2a8d4b8aeafc513c7735eb", 0xd9)

2.190208877s ago: executing program 7 (id=2384):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
exit(0xfe)
exit(0x9)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080))
getdents64(r0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)={[{@max={'max', 0x3d, 0x1}}]})

2.011455341s ago: executing program 6 (id=2385):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
write$vga_arbiter(r0, &(0x7f0000000100)=@other={'trylock', ' ', 'io+mem'}, 0xf)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0) (async)
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1001, 0x40}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1.837646354s ago: executing program 6 (id=2387):
openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async, rerun: 64)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010002000"/36], 0x24, 0x0) (async, rerun: 64)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x7, {0x3, 0x9, 0x5, 0xffffffffffff7fff, 0xf, 0x9, 0x2, 0x200, 0x8, 0xa000, 0x6, 0xee00, 0x0, 0x4, 0x8}}}}, 0xa0) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 32)
mkdirat(r2, &(0x7f0000000040)='./control\x00', 0x84)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00') (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) (async)
quotactl$Q_SETQUOTA(0xffffffff80000803, 0x0, 0x0, 0x0) (async)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x3d, 0x4, 0x0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
r6 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x1, @private1, 0x3}}, 0x0, 0x0, 0x11, 0x0, "ffeb0e2e588cdf76c39e8005f7efa6dfebb2e2b33f097787f66a655fc2591f88c5bbe0573e9faabb2b1681796b7f397e70fc5605eb2817bf2c0419127a496dca1d12ce5bd0f0ae9323dbab0f4de87546"}, 0xd8) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f00000025c0)={0xf9d, 0xb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
socket(0x1e, 0x4, 0x0) (async, rerun: 64)
close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 64)

1.817293015s ago: executing program 5 (id=2389):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1.698153557s ago: executing program 5 (id=2391):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0x5, 0x2e, {0x2e, 0x5, "6215331b09b7e09f5f6b0a0969bc1cfe7976e2d2375c9bef966e9ab1eb1fa085b7975d18e683335b1ee0d9a1"}}, &(0x7f0000000180)={0x0, 0x3, 0xab, @string={0xab, 0x3, "4033da75dd8e3ff18f99c95cc58f73edf5fa42bdadf7a7941e55ab192c3fa03fbff82ac18942b68a84897982e7f604f5246b6a0cfe2d638a96163572c052b30a11696ed62ada4befc55cacdd30a748cb3cef85e91951e0285fe50b4c6dc6712d435471b26fa482e8ff0135329f94f63d97898102291ec665d71843ebc565ddaccb091e2f4519ac2b50f4a86224bd4f9eaffeda632eaea88c404ed512d6486e8961a78bf95f72d96aca"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xc, "c6146c37"}, @local=@item_012={0x2, 0x2, 0x1, '.y'}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0xc, "6ba0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x839, 0x2, 0x1, {0x22, 0xd70}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x30, 0xa8, "64e4f78b11c9694e19d4e82d56d17bd02ebf2aeb69e886875554527c810570f396d0dadb233d1df9af8ee7f9786e756ba8da7872f0d5fa127ec7a3bbb31053f245fe5c8bbc3faa3435cc9fa6a1b8cbb012ac34e337a59630c210305801ad86eafecd4b130948eea6d09d47d36ae48aad9b444bc5da5982e9d648b1f8314e06fad8deaf8862f5c59eda73d3c5e4236b06c4d1c3e415a83526cad742bed67dcc803c0c744994990f7a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x1, 0x67, "f78f1d5fbbf5a345315733737851c943d88206012437683eff6fa05e1b342d23122ef7f1386c2843e4d71c22b20b3ad21f50c3da55f50f54fc2f4cd89bc2cff74927379382069da809b9fc87335b72f44684adb7e0ec9ab832ca85ed9fee37d97c2c67804b38c2"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}})

1.697914237s ago: executing program 6 (id=2392):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

1.650914208s ago: executing program 2 (id=2393):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x2042, 0x1, 0xc3}, 0x0, 0x0)
getrlimit(0x18, &(0x7f0000000280))
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="eb", 0x1}, {&(0x7f0000000580)="85dbb61008daba099459e29b9a49bc010ac8a8a6c1e6ebcfab20edbea0da499426c1eacfc964887ed59945cb61ab0028261fcb2ad0c56a77abe7993f54f053c3e2a2b0c99e3372f5d10c8ed89f3e6b18b9779567b4c0ad53e0c83dea7125d5497c1ee084b3fe753be2266a4d1c935c38f8181fec1843cb08c58ea038933cdd1420b5ad7dba24cdbe9a6dd039c06ad52e19063b1d1568d9357b8211a41ca41fb3df816b5083c1ff6dd3a2099b9383ac091d486644a12bac5818ab0c2a1fc0b7498745", 0xc2}], 0x2, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
unshare(0x62040200)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x33}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

1.599431489s ago: executing program 6 (id=2394):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x12, 0xa2, 0xea, 0x8, 0x3285, 0x6b3, 0x643f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0xd0, 0x2, [{{0x9, 0x4, 0x5d, 0x4, 0x0, 0xff, 0x5d, 0x1, 0x3}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="7103503a2edc330c4745eb2258d3913744c2c2220427f8dffda9f5392aaab54010d50e43e8b62c4112793afa3e02a8e83781357fbe4729ca5b2f12315411ff265b576004dee6e2e73a3222ac914aeabfb088443136d6232b611c92ee1f37b2a4624d905300"/113]}]})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x50, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
socket$inet6(0xa, 0x80002, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x3, 0xac, {0xac, 0x4, "218366e700c971c909401b6c8bdd8b1e7e53292295a2e93924b6e636f10fbd50e3b5dcd16513b3e2e89f080f718bfccbbb962e08806472858ab7ea3688da2edcd035c1c420769503a0b8f72347f8bc6f8cdaf918f4dac86bb1d8df77ff7cb84b26019c6bf9c92daaf14aa77de4f7854dbc42e9da28b1bb2a35e7cc05335cf41183c6e3b0c9c46d13be34b37287ba7405bd6d85e58a5ce8eb97ddfebd9db48fc6871161c1f201ea045f6e"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00ca9c270f98554ef5edebfc9548d6d27dcf75107ac8743d45fc7ee4176a41d7efc803f7a6c1359e5ed473fedeb386eaaac82b5eb25bec2bf070d353480adab1620c123e0acb051527a21cd51e0c5877b2d6352c0645eef481505dff0f0454f9ef27af8657065ead2af0283e6a8b8b435af28df0229f06b02b896faf4cc035ef4ce1c20929081f61645c8b4bbb94c351d8e6292572932a2da2f14bec5b49163becf78b453994c921cf930884e7ba02df9476"], 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffd000)

1.289989045s ago: executing program 2 (id=2395):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = dup(r1)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
r3 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
keyctl$unlink(0x9, r3, r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x8)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000001c0)={0x5, 0x0, &(0x7f00007c2000/0x1000)=nil})
r7 = socket(0x10, 0x2, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6070000009332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r8, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000005c0)=0x1, 0x4)
close_range(r7, r8, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000000c0)={0xb})

1.212742116s ago: executing program 7 (id=2396):
syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0)
madvise(&(0x7f0000002000/0x6000)=nil, 0x6000, 0x15)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x8000000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r1, &(0x7f0000000400)="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", 0x1f000)

1.211833876s ago: executing program 2 (id=2397):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18)
ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0xdc}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x48, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.091406399s ago: executing program 7 (id=2398):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

974.668171ms ago: executing program 6 (id=2399):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x80422, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=gl0000000000000002,stats=global,max=00000000000000000000400,\x00'/83])
mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x3}}], [{@seclabel}, {@audit}, {@audit}, {@fsname={'fsname', 0x3d, '{&)^%\\'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]})

965.590591ms ago: executing program 2 (id=2400):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x7, 0x5, {0x5, 0x22, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80200)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)=0xe2e)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c40)={"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"})
close_range(r1, 0xffffffffffffffff, 0x0)

943.868292ms ago: executing program 6 (id=2401):
r0 = syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="060000000c0100000008000000000000d4ec73386cd244ca0103d8f8fc92a0a060795600a2f4529e31289e0f26ba7e634af96ba49af59b6b9bb68a579bb3a7c4ac94", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000400100000004000020010100004c60d68d02a6a234"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

866.112713ms ago: executing program 7 (id=2402):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000000, 0x1001290, 0x55ea, 0x5, 0x98a, 0x7, 0x0, 0x0, 0x8, 0x2}}, 0x50)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = openat(r4, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35)
read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x2020)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'wg2\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100800}})
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcb)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9})
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000080)=0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

572.580929ms ago: executing program 7 (id=2403):
r0 = creat(&(0x7f0000000380)='./bus\x00', 0xbc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"})
io_setup(0x202, &(0x7f0000000480)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x4, r0, 0x0, 0x0, 0x3000}])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f00000033c0)=@ethtool_eeprom={0xc, 0xffff, 0x10001}})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

193.487466ms ago: executing program 2 (id=2404):
prlimit64(0x0, 0xe, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r0=>0x0) (async)
r1 = eventfd2(0x6, 0x80000)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x2, 0x0, 0x0, r1}])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
dup(r3) (async)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x3d)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x50d, @link_local}, 0x60, {0x2, 0x4e22, @local}, 'pim6reg1\x00'}) (async)
syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x2000, 0x1, 0xc3}, 0x0, 0x0) (async)
sendfile(r5, r4, 0x0, 0x7ffff000) (async)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x9, 0x6})

54.161369ms ago: executing program 7 (id=2405):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x2040400)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)
unshare(0x62040200)
unshare(0x20200)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c"], 0xdd12}], 0x1}, 0x20040051)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x6}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000040, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=2406):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_submit(r1, 0x5a, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r2, 0x0, 0x52}])
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_int(r3, 0x1, 0x45, 0x0, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r4, 0x45809000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BLKRRPART(r5, 0x125f, 0x0)

kernel console output (not intermixed with test programs):

ontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.718688][  T328] bridge_slave_1: left promiscuous mode
[  113.728688][ T4003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  113.760896][   T36] audit: type=1400 audit(1756970630.980:10643): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.771683][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.788236][   T36] audit: type=1400 audit(1756970630.980:10644): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.839941][  T328] bridge_slave_0: left allmulticast mode
[  113.845834][  T328] bridge_slave_0: left promiscuous mode
[  113.852001][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.873744][   T36] audit: type=1400 audit(1756970630.980:10645): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.907006][   T36] audit: type=1400 audit(1756970630.980:10646): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.968053][   T36] audit: type=1400 audit(1756970630.980:10647): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.995555][   T36] audit: type=1400 audit(1756970630.990:10648): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.045236][  T328] veth1_macvtap: left promiscuous mode
[  114.050861][  T328] veth0_vlan: left promiscuous mode
[  114.056279][   T36] audit: type=1400 audit(1756970630.990:10649): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.081662][   T36] audit: type=1400 audit(1756970630.990:10650): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.107310][   T36] audit: type=1400 audit(1756970630.990:10651): avc:  denied  { ioctl } for  pid=4002 comm="syz.1.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.133485][  T363] ftdi_sio 2-1:2.47: FTDI USB Serial Device converter detected
[  114.145201][  T363] ftdi_sio ttyUSB0: unknown device type: 0xb13e
[  114.158964][  T363] ftdi_sio 2-1:2.253: FTDI USB Serial Device converter detected
[  114.167228][  T363] ftdi_sio ttyUSB1: unknown device type: 0xb13e
[  114.182313][  T363] usb 2-1: USB disconnect, device number 30
[  114.200911][  T363] ftdi_sio 2-1:2.47: device disconnected
[  114.212588][  T363] ftdi_sio 2-1:2.253: device disconnected
[  114.315550][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.331175][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.339506][ T4013] bridge_slave_0: entered allmulticast mode
[  114.347727][ T4013] bridge_slave_0: entered promiscuous mode
[  114.354935][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.362086][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.369363][ T4013] bridge_slave_1: entered allmulticast mode
[  114.375642][ T4013] bridge_slave_1: entered promiscuous mode
[  114.396087][ T4027] tmpfs: Unknown parameter '@'
[  114.440517][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.447705][ T4013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.455183][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.462231][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.498031][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.505408][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.517310][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.524396][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.535419][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.542537][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.595741][ T4013] veth0_vlan: entered promiscuous mode
[  114.669760][ T4013] veth1_macvtap: entered promiscuous mode
[  114.791996][ T4041] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  114.792318][ T4041] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  114.880315][ T4048] netlink: 'syz.1.1231': attribute type 28 has an invalid length.
[  114.916617][ T4048] binder: Unknown parameter 'sY/\Ÿûd9B�Lo'
[  115.009838][ T4052] 9pnet_fd: Insufficient options for proto=fd
[  115.461580][  T363] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  115.551469][ T4083] xfrm0: entered promiscuous mode
[  115.556800][ T4083] xfrm0: entered allmulticast mode
[  115.624585][  T363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.639366][  T363] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  115.655952][  T363] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.665864][  T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.674142][  T363] usb 2-1: Product: syz
[  115.678359][  T363] usb 2-1: Manufacturer: syz
[  115.683165][  T363] usb 2-1: SerialNumber: syz
[  115.797528][ T4099] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1248'.
[  115.898503][ T4067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  116.479741][ T4111] 9pnet_fd: Insufficient options for proto=fd
[  116.487666][ T4111] 9pnet_fd: Insufficient options for proto=fd
[  116.510830][ T4067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  116.612399][ T4120] raw_sendmsg: syz.2.1255 forgot to set AF_INET. Fix it!
[  116.721502][    C1] Adjusting tsc more than 11% (6672763 vs 8464875)
[  116.733014][  T363] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  116.739956][  T363] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  116.776734][  T363] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  116.926608][ T4137] overlayfs: failed to clone upperpath
[  117.020542][  T363] cdc_ncm 2-1:1.0: setting tx_max = 88
[  117.037762][  T363] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  117.059700][  T363] usb 2-1: USB disconnect, device number 31
[  117.066684][  T363] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  117.098364][ T4147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1262'.
[  117.114375][  T364] udevd[364]: setting mode of /dev/bus/usb/002/031 to 020664 failed: No such file or directory
[  117.126044][  T364] udevd[364]: setting owner of /dev/bus/usb/002/031 to uid=0, gid=0 failed: No such file or directory
[  117.193305][ T4151] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1264'.
[  117.205530][ T4151] 9pnet_fd: Insufficient options for proto=fd
[  117.908144][ T4173] /dev/rnullb0: Can't lookup blockdev
[  118.048935][ T4186] tmpfs: Unknown parameter 'ÿÿÿÿ'
[  118.252530][ T4195] .N: renamed from veth0_to_bond (while UP)
[  118.316696][ T4197] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  118.556299][ T4203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.556334][ T4203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769
[  118.828124][ T4224] 8021q: VLANs not supported on ip_vti0
[  118.969972][   T36] kauditd_printk_skb: 739 callbacks suppressed
[  118.969991][   T36] audit: type=1400 audit(1756970636.004:11391): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.002399][   T36] audit: type=1400 audit(1756970636.004:11392): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.028421][   T36] audit: type=1400 audit(1756970636.004:11393): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.055594][   T36] audit: type=1400 audit(1756970636.023:11394): avc:  denied  { create } for  pid=4229 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.075700][   T36] audit: type=1400 audit(1756970636.023:11395): avc:  denied  { read write } for  pid=4229 comm="syz.5.1294" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  119.099043][   T36] audit: type=1400 audit(1756970636.023:11396): avc:  denied  { read write open } for  pid=4229 comm="syz.5.1294" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  119.123745][   T36] audit: type=1400 audit(1756970636.023:11397): avc:  denied  { read append } for  pid=4229 comm="syz.5.1294" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  119.156578][   T36] audit: type=1400 audit(1756970636.023:11398): avc:  denied  { read append open } for  pid=4229 comm="syz.5.1294" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  119.181370][   T36] audit: type=1400 audit(1756970636.023:11399): avc:  denied  { ioctl } for  pid=4229 comm="syz.5.1294" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  119.206272][   T36] audit: type=1400 audit(1756970636.023:11400): avc:  denied  { ioctl } for  pid=4229 comm="syz.5.1294" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  119.266930][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'.
[  119.281393][ T4234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4234 comm=syz.2.1296
[  120.297495][ T4293] overlayfs: failed to clone upperpath
[  120.864352][ T4304] netlink: 'syz.5.1319': attribute type 4 has an invalid length.
[  120.890153][ T4304] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1319'.
[  120.900035][ T4304] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1319'.
[  120.911483][ T4304] rust_binder: Error while translating object.
[  120.911517][ T4304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  120.917791][ T4304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58
[  121.019619][ T4308] cgroup: none used incorrectly
[  121.080812][ T4312] cgroup: none used incorrectly
[  121.151666][ T4320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4320 comm=syz.5.1323
[  121.172341][ T4320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4320 comm=syz.5.1323
[  121.184797][ T4323] fuse: Bad value for 'group_id'
[  121.196634][ T4323] fuse: Bad value for 'group_id'
[  121.417924][ T4337] can0: slcan on ttyS3.
[  121.485275][ T4337] can0 (unregistered): slcan off ttyS3.
[  121.712230][ T4340] pim6reg1: entered promiscuous mode
[  121.724430][ T4340] pim6reg1: entered allmulticast mode
[  121.988783][  T329] rust_binder: 4345: removing orphan mapping 0:4216
[  122.512231][ T4368] rust_binder: 4365 RLIMIT_NICE not set
[  122.522266][ T4368] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.549150][   T31] rust_binder: 4364: removing orphan mapping 0:4248
[  122.716891][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'.
[  123.412077][ T4403] overlayfs: missing 'workdir'
[  123.856780][  T437] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  123.978826][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'.
[  123.988977][ T4436] erspan0: entered promiscuous mode
[  124.013013][  T437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  124.051073][  T437] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.075072][  T437] usb 6-1: New USB device found, idVendor=046d, idProduct=c121, bcdDevice= 0.00
[  124.087264][  T437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.105832][  T437] usb 6-1: config 0 descriptor??
[  124.112435][ T4416] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  124.212287][   T36] kauditd_printk_skb: 558 callbacks suppressed
[  124.212307][   T36] audit: type=1400 audit(1756970641.008:11959): avc:  denied  { create } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.247607][   T36] audit: type=1400 audit(1756970641.037:11960): avc:  denied  { create } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.269379][   T36] audit: type=1400 audit(1756970641.037:11961): avc:  denied  { write } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.290963][   T36] audit: type=1400 audit(1756970641.037:11962): avc:  denied  { read } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.312288][   T36] audit: type=1400 audit(1756970641.047:11963): avc:  denied  { write } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.347047][   T36] audit: type=1400 audit(1756970641.047:11964): avc:  denied  { setopt } for  pid=4449 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.368650][   T36] audit: type=1400 audit(1756970641.145:11965): avc:  denied  { ioctl } for  pid=4415 comm="syz.5.1358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.395053][   T36] audit: type=1400 audit(1756970641.165:11966): avc:  denied  { create } for  pid=4451 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  124.415799][   T36] audit: type=1400 audit(1756970641.165:11967): avc:  denied  { setopt } for  pid=4451 comm="syz.1.1373" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  124.439005][   T36] audit: type=1400 audit(1756970641.165:11968): avc:  denied  { mounton } for  pid=4451 comm="syz.1.1373" path="/295/file0" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  124.923180][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.930488][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.938552][ T4475] bridge_slave_0: entered allmulticast mode
[  124.944981][ T4475] bridge_slave_0: entered promiscuous mode
[  124.952397][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.959458][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.966600][ T4475] bridge_slave_1: entered allmulticast mode
[  124.973204][ T4475] bridge_slave_1: entered promiscuous mode
[  125.029412][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.036774][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.044077][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.051331][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.089515][  T588] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.097070][  T588] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.110906][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.118211][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.128775][  T588] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.135967][  T588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.233556][ T4475] veth0_vlan: entered promiscuous mode
[  125.260151][ T4475] veth1_macvtap: entered promiscuous mode
[  125.418303][ T4497] rust_binder: Error while translating object.
[  125.418337][ T4497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  125.424670][ T4497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  126.072115][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  126.234086][   T10] usb 7-1: Using ep0 maxpacket: 16
[  126.245454][   T10] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  126.258502][   T10] usb 7-1: config 0 has no interface number 0
[  126.265849][   T10] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  126.279020][   T10] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  126.295521][   T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  126.305202][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.313752][   T10] usb 7-1: Product: syz
[  126.319873][   T10] usb 7-1: Manufacturer: syz
[  126.324496][   T10] usb 7-1: SerialNumber: syz
[  126.332095][   T10] usb 7-1: config 0 descriptor??
[  126.340843][ T4513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  126.348536][ T4513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  126.400361][ T4531] overlayfs: failed to clone upperpath
[  126.440216][ T4533] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  126.566839][ T4513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  126.575407][ T4513] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  126.664970][  T363] usb 6-1: USB disconnect, device number 2
[  127.169642][ T4575] syz.2.1412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  127.210910][   T10] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  127.228651][   T10] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  127.241727][   T10] asix 7-1:0.251: probe with driver asix failed with error -71
[  127.244447][ T4581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118
[  127.252942][   T10] usb 7-1: USB disconnect, device number 2
[  127.622516][ T4602] overlayfs: failed to clone upperpath
[  127.706840][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  127.867934][   T10] usb 6-1: Using ep0 maxpacket: 32
[  127.882181][   T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  127.898229][   T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  127.915404][ T4609] rust_binder: Error while translating object.
[  127.915458][ T4609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  127.921766][ T4609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:18
[  127.937115][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  127.956468][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.966646][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.976571][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  127.996022][   T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  128.009140][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.020175][   T10] usb 6-1: config 0 descriptor??
[  128.234111][   T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  128.268733][ T4639] __vm_enough_memory: pid: 4639, comm: syz.6.1436, bytes: 18014402804453376 not enough memory for the allocation
[  128.280206][   T10] usb 6-1: USB disconnect, device number 3
[  128.294222][   T10] usblp0: removed
[  128.743299][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  128.873966][   T10] usb 6-1: device descriptor read/64, error -71
[  129.045360][ T4657] incfs: Options parsing error. -22
[  129.050841][ T4657] incfs: mount failed -22
[  129.057160][ T4657] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  129.115196][   T10] usb 6-1: device descriptor read/64, error -71
[  129.207883][ T4664] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1447'.
[  129.287733][   T36] kauditd_printk_skb: 525 callbacks suppressed
[  129.287752][   T36] audit: type=1400 audit(1756970646.046:12494): avc:  denied  { read write } for  pid=4675 comm="syz.6.1450" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.319854][   T36] audit: type=1400 audit(1756970646.046:12495): avc:  denied  { read write open } for  pid=4675 comm="syz.6.1450" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.357963][   T36] audit: type=1400 audit(1756970646.076:12496): avc:  denied  { ioctl } for  pid=4590 comm="syz.5.1418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.364289][ T4676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4676 comm=syz.6.1450
[  129.386466][   T36] audit: type=1400 audit(1756970646.076:12497): avc:  denied  { read write } for  pid=4675 comm="syz.6.1450" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  129.395633][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  129.420201][   T36] audit: type=1400 audit(1756970646.076:12498): avc:  denied  { read write open } for  pid=4675 comm="syz.6.1450" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  129.451843][   T36] audit: type=1400 audit(1756970646.086:12499): avc:  denied  { ioctl } for  pid=4675 comm="syz.6.1450" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  129.478179][   T36] audit: type=1400 audit(1756970646.186:12500): avc:  denied  { read write } for  pid=4675 comm="syz.6.1450" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.502155][   T36] audit: type=1400 audit(1756970646.186:12501): avc:  denied  { read write open } for  pid=4675 comm="syz.6.1450" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.527358][   T36] audit: type=1400 audit(1756970646.186:12502): avc:  denied  { map } for  pid=4675 comm="syz.6.1450" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.551303][   T36] audit: type=1400 audit(1756970646.186:12503): avc:  denied  { read } for  pid=4675 comm="syz.6.1450" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  129.585933][   T10] usb 6-1: device descriptor read/64, error -71
[  129.714246][ T4681] rust_binder: Write failure EFAULT in pid:41
[  129.825922][   T10] usb 6-1: device descriptor read/64, error -71
[  129.946319][   T10] usb usb6-port1: attempt power cycle
[  129.987503][  T329] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  130.112124][ T4691] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.145898][  T329] usb 7-1: Using ep0 maxpacket: 16
[  130.169347][  T329] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  130.182769][  T329] usb 7-1: config 0 has no interface number 0
[  130.200311][  T329] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.227677][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'.
[  130.252992][  T329] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.287894][  T329] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  130.308013][  T329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.326471][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  130.328481][  T329] usb 7-1: config 0 descriptor??
[  130.459985][   T10] usb 6-1: device descriptor read/8, error -71
[  130.617388][   T10] usb 6-1: device descriptor read/8, error -71
[  131.080076][ T4726] fuseblk: Unknown parameter '000000000000000000000040x0000000000000004'
[  131.201330][ T4729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'.
[  131.268203][  T329] uclogic 0003:28BD:0071.000B: failed retrieving string descriptor #100: -71
[  131.286771][  T329] uclogic 0003:28BD:0071.000B: failed retrieving pen parameters: -71
[  131.295897][  T329] uclogic 0003:28BD:0071.000B: pen probing failed: -71
[  131.304246][  T329] uclogic 0003:28BD:0071.000B: failed probing parameters: -71
[  131.312843][  T329] uclogic 0003:28BD:0071.000B: probe with driver uclogic failed with error -71
[  131.330260][  T329] usb 7-1: USB disconnect, device number 3
[  131.467113][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  131.513109][   T10] usb 6-1: Using ep0 maxpacket: 32
[  131.522097][   T10] usb 6-1: config 127 has an invalid interface number: 179 but max is 1
[  131.532876][   T10] usb 6-1: config 127 has an invalid interface number: 89 but max is 1
[  131.541732][   T10] usb 6-1: config 127 has no interface number 0
[  131.548550][   T10] usb 6-1: config 127 has no interface number 1
[  131.555078][   T10] usb 6-1: config 127 interface 179 altsetting 5 endpoint 0x2 has invalid maxpacket 8011, setting to 64
[  131.567329][   T10] usb 6-1: config 127 interface 179 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.579049][   T10] usb 6-1: config 127 interface 179 has no altsetting 0
[  131.586645][   T10] usb 6-1: config 127 interface 89 has no altsetting 0
[  131.598938][   T10] usb 6-1: New USB device found, idVendor=c049, idProduct=fec8, bcdDevice=fb.18
[  131.609001][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.619309][   T10] usb 6-1: Product: syz
[  131.623593][   T10] usb 6-1: Manufacturer: syz
[  131.629601][   T10] usb 6-1: SerialNumber: syz
[  131.855205][   T10] cdc_acm 6-1:127.179: invalid descriptor buffer length
[  131.896026][   T10] usb 6-1: USB disconnect, device number 7
[  132.544106][ T4813] overlayfs: failed to resolve './file0': -2
[  132.835122][ T4807] binder: Bad value for 'stats'
[  133.054147][ T4841] rust_binder: Error while translating object.
[  133.054188][ T4841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  133.065357][ T4841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[  133.120850][ T4844] /dev/loop0: Can't lookup blockdev
[  134.205913][  T437] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  134.325396][   T36] kauditd_printk_skb: 769 callbacks suppressed
[  134.325411][   T36] audit: type=1400 audit(1756970651.076:13273): avc:  denied  { create } for  pid=4888 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  134.362871][   T36] audit: type=1400 audit(1756970651.116:13274): avc:  denied  { write } for  pid=4888 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  134.363724][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'.
[  134.389400][   T36] audit: type=1400 audit(1756970651.116:13275): avc:  denied  { nlmsg_write } for  pid=4888 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  134.424666][  T437] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  134.436748][  T437] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  134.450009][   T36] audit: type=1400 audit(1756970651.146:13276): avc:  denied  { ioctl } for  pid=4886 comm="syz.6.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.452277][ T4891] rust_binder: Write failure EFAULT in pid:166
[  134.480042][  T437] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  134.515912][  T437] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  134.536655][   T36] audit: type=1400 audit(1756970651.146:13277): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  134.562771][  T437] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.572739][  T437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.580833][   T36] audit: type=1400 audit(1756970651.146:13278): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  134.634314][  T437] usb 7-1: config 0 descriptor??
[  134.641110][   T36] audit: type=1400 audit(1756970651.146:13279): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  134.699978][   T36] audit: type=1400 audit(1756970651.166:13280): avc:  denied  { ioctl } for  pid=4886 comm="syz.6.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.742350][   T36] audit: type=1400 audit(1756970651.176:13281): avc:  denied  { ioctl } for  pid=4886 comm="syz.6.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.785863][   T36] audit: type=1400 audit(1756970651.176:13282): avc:  denied  { ioctl } for  pid=4886 comm="syz.6.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  135.053860][  T437] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  135.069354][  T437] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  135.598194][ T4937] overlayfs: failed to clone upperpath
[  135.651651][ T4940] usb usb8: usbfs: process 4940 (syz.5.1542) did not claim interface 63 before use
[  135.715799][ T4938] support for the xor transformation has been removed.
[  135.802283][ T4952] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  135.845975][ T4957] __vm_enough_memory: pid: 4957, comm: syz.5.1549, bytes: 18014402804453376 not enough memory for the allocation
[  135.957824][   T10] usb 7-1: USB disconnect, device number 4
[  136.038029][ T4965] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  136.129300][ T4974] 9pnet_fd: Insufficient options for proto=fd
[  136.137666][ T4975] IPv6: NLM_F_CREATE should be specified when creating new route
[  136.148424][ T4975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.156247][ T4975] IPv6: NLM_F_CREATE should be set when creating new route
[  136.565448][ T4994] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  136.596977][ T4998] overlayfs: failed to clone upperpath
[  136.645894][  T329] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  136.786103][  T329] usb 6-1: device descriptor read/64, error -71
[  136.827442][ T5019] overlayfs: failed to clone lowerpath
[  136.860718][ T5021] overlayfs: failed to clone upperpath
[  137.025904][  T329] usb 6-1: device descriptor read/64, error -71
[  137.040538][ T5029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  137.049295][ T5029] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  137.057613][ T5029] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  137.069816][ T5029] overlayfs: missing 'lowerdir'
[  137.095019][ T5031] /dev/loop0: Can't lookup blockdev
[  137.265896][  T329] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  137.395877][  T329] usb 6-1: device descriptor read/64, error -71
[  137.489358][ T5044] fuse: Bad value for 'fd'
[  137.619611][ T5050] overlayfs: failed to clone upperpath
[  137.635888][  T329] usb 6-1: device descriptor read/64, error -71
[  137.746292][  T329] usb usb6-port1: attempt power cycle
[  137.820407][ T5063] overlayfs: failed to clone upperpath
[  138.085926][  T329] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  138.107919][  T329] usb 6-1: device descriptor read/8, error -71
[  138.237957][  T329] usb 6-1: device descriptor read/8, error -71
[  138.475918][  T329] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  138.497859][  T329] usb 6-1: device descriptor read/8, error -71
[  138.605542][ T5092] /dev/loop0: Can't lookup blockdev
[  138.611717][ T5092] veth1: entered allmulticast mode
[  138.617758][ T5091] veth1: left allmulticast mode
[  138.637179][  T329] usb 6-1: device descriptor read/8, error -71
[  138.767722][  T329] usb usb6-port1: unable to enumerate USB device
[  138.933529][ T5104] overlayfs: failed to clone upperpath
[  138.991837][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.006958][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.025956][ T5098] bridge_slave_0: entered allmulticast mode
[  139.034631][ T5098] bridge_slave_0: entered promiscuous mode
[  139.048160][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.056711][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.063855][ T5098] bridge_slave_1: entered allmulticast mode
[  139.071582][ T5098] bridge_slave_1: entered promiscuous mode
[  139.247089][ T5122] netlink: 'syz.1.1610': attribute type 2 has an invalid length.
[  139.297013][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.304282][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.312019][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.319103][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.331652][   T36] kauditd_printk_skb: 561 callbacks suppressed
[  139.331671][   T36] audit: type=1400 audit(1756970656.086:13844): avc:  denied  { mount } for  pid=5132 comm="syz.1.1612" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  139.369552][ T5133] overlayfs: failed to clone upperpath
[  139.375522][   T36] audit: type=1400 audit(1756970656.116:13845): avc:  denied  { create } for  pid=5132 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.416520][  T588] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.424119][   T36] audit: type=1400 audit(1756970656.116:13846): avc:  denied  { write } for  pid=5132 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.458455][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.466105][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.474873][   T36] audit: type=1400 audit(1756970656.116:13847): avc:  denied  { read } for  pid=5132 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.518076][   T36] audit: type=1400 audit(1756970656.126:13848): avc:  denied  { read } for  pid=5132 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.545908][   T36] audit: type=1400 audit(1756970656.126:13849): avc:  denied  { write } for  pid=5132 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  139.566471][   T36] audit: type=1400 audit(1756970656.126:13850): avc:  denied  { mounton } for  pid=5132 comm="syz.1.1612" path="/384/bus" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  139.589648][   T36] audit: type=1400 audit(1756970656.126:13851): avc:  denied  { sys_module } for  pid=5098 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  139.630952][ T5135] rust_binder: Error while translating object.
[  139.631009][ T5135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  139.645894][   T36] audit: type=1400 audit(1756970656.126:13852): avc:  denied  { sys_module } for  pid=5098 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  139.664275][ T5135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193
[  139.704117][ T5098] veth0_vlan: entered promiscuous mode
[  139.708002][   T36] audit: type=1400 audit(1756970656.126:13853): avc:  denied  { sys_module } for  pid=5098 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  139.803542][ T5098] veth1_macvtap: entered promiscuous mode
[  139.972781][ T5151] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1601'.
[  140.363251][ T5173] rust_binder: Write failure EFAULT in pid:214
[  140.402129][ T5175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216
[  140.485131][ T5181] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  140.599669][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1631'.
[  140.691583][ T5189] rust_binder: Read failure Err(EAGAIN) in pid:227
[  140.732882][ T5193] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  140.746565][ T5193] rust_binder: 229: no such ref 1
[  141.106148][ T5202] 9pnet_fd: Insufficient options for proto=fd
[  141.189709][ T5207] veth1_macvtap: left promiscuous mode
[  141.247382][ T5207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5207 comm=syz.2.1638
[  141.517159][ T5235] tipc: Can't bind to reserved service type 0
[  141.530485][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1650'.
[  141.539789][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1650'.
[  141.881099][ T5245] rust_binder: 24: no such ref 1
[  141.895402][ T5245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24
[  142.118496][ T5268] binder: Bad value for 'max'
[  142.446819][ T5287] rust_binder: Error while translating object.
[  142.446855][ T5287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  142.453752][ T5287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:44
[  142.796827][ T5296] binder: Unknown parameter 'dont_hash'
[  143.168435][ T5323] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1677'.
[  143.245704][ T5325] netlink: 'syz.6.1678': attribute type 19 has an invalid length.
[  143.494937][ T5329] fuse: Bad value for 'rootmode'
[  143.716075][ T5337] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  144.197328][ T5380] rust_binder: Error while translating object.
[  144.197366][ T5380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  144.203672][ T5380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270
[  144.340987][   T36] kauditd_printk_skb: 724 callbacks suppressed
[  144.341008][   T36] audit: type=1400 audit(1756970661.096:14578): avc:  denied  { read write } for  pid=5098 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.468831][   T36] audit: type=1400 audit(1756970661.106:14579): avc:  denied  { create } for  pid=5386 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.515882][   T36] audit: type=1400 audit(1756970661.106:14580): avc:  denied  { read append } for  pid=5386 comm="syz.5.1699" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.555884][   T36] audit: type=1400 audit(1756970661.106:14581): avc:  denied  { read open } for  pid=5386 comm="syz.5.1699" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.605865][   T36] audit: type=1400 audit(1756970661.106:14582): avc:  denied  { read append } for  pid=5386 comm="syz.5.1699" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.685855][   T36] audit: type=1400 audit(1756970661.106:14583): avc:  denied  { read open } for  pid=5386 comm="syz.5.1699" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.733180][   T36] audit: type=1400 audit(1756970661.106:14584): avc:  denied  { create } for  pid=5386 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.766127][   T36] audit: type=1400 audit(1756970661.106:14585): avc:  denied  { setopt } for  pid=5386 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.786717][   T36] audit: type=1400 audit(1756970661.116:14586): avc:  denied  { create } for  pid=5386 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  144.807175][   T36] audit: type=1400 audit(1756970661.116:14587): avc:  denied  { create } for  pid=5386 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  145.256269][ T5416] rtc_cmos 00:00: Alarms can be up to one day in the future
[  146.105872][   T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.174606][   T31] rtc_cmos 00:00: Alarms can be up to one day in the future
[  146.182351][   T31] rtc_cmos 00:00: Alarms can be up to one day in the future
[  146.189993][   T31] rtc_cmos 00:00: Alarms can be up to one day in the future
[  146.197658][   T31] rtc_cmos 00:00: Alarms can be up to one day in the future
[  146.205461][   T31] rtc rtc0: __rtc_set_alarm: err=-22
[  146.255884][   T65] usb 3-1: Using ep0 maxpacket: 8
[  146.264349][   T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.277400][   T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.288125][   T65] usb 3-1: config 0 interface 0 has no altsetting 0
[  146.294865][   T65] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  146.305761][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.316977][   T65] usb 3-1: config 0 descriptor??
[  146.539334][   T65] smartjoyplus 0003:0B43:0003.000D: ignoring exceeding usage max
[  146.557833][   T65] smartjoyplus 0003:0B43:0003.000D: unknown main item tag 0x0
[  146.578097][   T65] smartjoyplus 0003:0B43:0003.000D: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.2-1/input0
[  146.600434][   T65] smartjoyplus 0003:0B43:0003.000D: no output reports found
[  147.119256][ T5433] overlayfs: failed to clone upperpath
[  148.800789][ T5462] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  148.884543][  T363] usb 3-1: USB disconnect, device number 5
[  148.961399][ T5464] netlink: 'syz.5.1723': attribute type 27 has an invalid length.
[  149.049545][ T5470] x_tables: duplicate underflow at hook 2
[  149.060572][ T5470] rust_binder: Write failure EFAULT in pid:83
[  149.191858][ T5476] rust_binder: Write failure EFAULT in pid:87
[  149.258008][ T5478] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  149.298644][ T5480] SELinux:  Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped).
[  149.362072][   T36] kauditd_printk_skb: 271 callbacks suppressed
[  149.362087][   T36] audit: type=1400 audit(1756970666.116:14859): avc:  denied  { read write } for  pid=5098 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.394749][   T36] audit: type=1400 audit(1756970666.116:14860): avc:  denied  { read write open } for  pid=5098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.421616][   T36] audit: type=1400 audit(1756970666.116:14861): avc:  denied  { ioctl } for  pid=5098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.447528][   T36] audit: type=1400 audit(1756970666.136:14862): avc:  denied  { read write } for  pid=5481 comm="syz.2.1730" name="binder1" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  149.472027][   T36] audit: type=1400 audit(1756970666.136:14863): avc:  denied  { read write open } for  pid=5481 comm="syz.2.1730" path="/dev/binderfs/binder1" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  149.499275][   T36] audit: type=1400 audit(1756970666.226:14864): avc:  denied  { read write } for  pid=5098 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.524752][   T36] audit: type=1400 audit(1756970666.226:14865): avc:  denied  { read write open } for  pid=5098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.563599][   T36] audit: type=1400 audit(1756970666.226:14866): avc:  denied  { ioctl } for  pid=5098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.617529][ T5486] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  149.629511][   T36] audit: type=1400 audit(1756970666.256:14867): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.655695][   T36] audit: type=1400 audit(1756970666.256:14868): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.716190][ T5489] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  149.721030][ T5489] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  149.821083][ T5496] pim6reg1: entered promiscuous mode
[  149.834553][ T5496] pim6reg1: entered allmulticast mode
[  150.185917][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  150.335869][   T10] usb 3-1: Using ep0 maxpacket: 16
[  150.349289][   T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  150.359142][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.368292][   T10] usb 3-1: Product: syz
[  150.372864][   T10] usb 3-1: Manufacturer: syz
[  150.377551][   T10] usb 3-1: SerialNumber: syz
[  150.383166][   T10] usb 3-1: config 0 descriptor??
[  150.390497][   T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  150.398351][   T10] usb 3-1: Detected FT232H
[  150.592907][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  150.614581][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  150.624001][   T10] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  150.632206][   T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  150.642012][   T10] usb 3-1: USB disconnect, device number 6
[  150.652147][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  150.661734][   T10] ftdi_sio 3-1:0.0: device disconnected
[  150.745936][   T31] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  150.898618][   T31] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  150.907358][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.908898][ T5513] overlayfs: failed to clone upperpath
[  150.919053][   T31] usb 6-1: config 0 has no interface number 0
[  150.934275][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  150.945079][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.953736][   T31] usb 6-1: Product: syz
[  150.957964][   T31] usb 6-1: Manufacturer: syz
[  150.962661][   T31] usb 6-1: SerialNumber: syz
[  150.969253][   T31] usb 6-1: config 0 descriptor??
[  150.977870][   T31] hub 6-1:0.31: bad descriptor, ignoring hub
[  150.983907][   T31] hub 6-1:0.31: probe with driver hub failed with error -5
[  151.002294][   T31] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  151.009052][   T31] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized!
[  151.017995][   T31] usb 6-1: Failed to create links for entity 6
[  151.024329][   T31] usb 6-1: Failed to register entities (-22).
[  151.295964][   T31] usb 6-1: USB disconnect, device number 13
[  151.341166][ T5524] rust_binder: 114: no such ref 0
[  151.616281][ T5537] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  151.998598][ T5574] overlayfs: failed to clone upperpath
[  152.124203][ T5585] 9p: Unknown Cache mode or invalid value mbinderfs/binder1
[  152.166121][ T5585] rust_binder: Write failure EFAULT in pid:140
[  152.361544][ T5599] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  152.578875][ T5605] usb usb8: usbfs: process 5605 (syz.5.1773) did not claim interface 0 before use
[  152.596063][ T5605] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  152.656006][ T5607] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  153.745721][ T5632] overlayfs: failed to resolve './file1': -2
[  154.459520][   T36] kauditd_printk_skb: 532 callbacks suppressed
[  154.459536][   T36] audit: type=1400 audit(1756970671.216:15401): avc:  denied  { execmem } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  154.485703][   T36] audit: type=1400 audit(1756970671.216:15402): avc:  denied  { create } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.505977][   T36] audit: type=1400 audit(1756970671.216:15403): avc:  denied  { create } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.526267][   T36] audit: type=1400 audit(1756970671.216:15404): avc:  denied  { setopt } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.546721][   T36] audit: type=1400 audit(1756970671.216:15405): avc:  denied  { create } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  154.567582][   T36] audit: type=1400 audit(1756970671.216:15406): avc:  denied  { setopt } for  pid=5653 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.678569][   T36] audit: type=1400 audit(1756970671.436:15407): avc:  denied  { mounton } for  pid=5660 comm="syz.6.1792" path="/91/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  154.680918][ T5661] overlayfs: failed to resolve './file1': -2
[  154.701467][   T36] audit: type=1400 audit(1756970671.436:15408): avc:  denied  { mount } for  pid=5660 comm="syz.6.1792" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  154.729497][   T36] audit: type=1400 audit(1756970671.436:15409): avc:  denied  { mounton } for  pid=5660 comm="syz.6.1792" path="/91/bus" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  154.754517][   T36] audit: type=1400 audit(1756970671.506:15410): avc:  denied  { unmount } for  pid=5098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  154.974514][ T5676] 9p: Unknown access argument 00000000004294967295.: -22
[  155.155897][  T363] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  155.293444][ T5689] overlayfs: failed to resolve './file1': -2
[  155.328842][  T363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.353262][  T363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.386441][  T363] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  155.415884][  T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  155.434344][  T363] usb 3-1: SerialNumber: syz
[  155.458538][ T5698] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.462256][ T5698] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  155.478096][ T5698] rust_binder: 349: no such ref 3
[  155.501079][ T5698] rust_binder: 349: no such ref 3
[  155.506236][ T5698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:349
[  155.775874][  T437] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  155.937900][  T437] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[  155.945365][  T437] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  155.961658][  T437] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  155.971046][  T437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.979220][  T437] usb 6-1: Product: syz
[  155.983770][  T437] usb 6-1: Manufacturer: syz
[  155.988459][  T437] usb 6-1: SerialNumber: syz
[  156.115585][ T5711] overlayfs: failed to resolve './file0': -2
[  157.681505][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'.
[  157.719042][ T5732] overlayfs: failed to resolve './file0': -2
[  157.908987][  T363] usb 3-1: 0:2 : does not exist
[  157.922545][  T363] usb 3-1: unit 5: unexpected type 0x0b
[  157.945980][  T363] usb 3-1: USB disconnect, device number 7
[  158.019245][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  158.407705][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  158.542497][   T31] usb 6-1: USB disconnect, device number 14
[  158.589218][ T5771] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  158.643212][ T5773] overlayfs: failed to resolve './file0': -2
[  159.030453][ T5799] overlayfs: failed to clone upperpath
[  159.636394][   T36] kauditd_printk_skb: 648 callbacks suppressed
[  159.636410][   T36] audit: type=1400 audit(1756970676.396:16059): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  159.670137][   T36] audit: type=1400 audit(1756970676.396:16060): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  159.716144][   T36] audit: type=1400 audit(1756970676.396:16061): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  159.744744][   T36] audit: type=1400 audit(1756970676.476:16062): avc:  denied  { create } for  pid=5807 comm="syz.6.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  159.766080][   T36] audit: type=1400 audit(1756970676.476:16063): avc:  denied  { setattr } for  pid=5807 comm="syz.6.1842" name="XDP" dev="sockfs" ino=35811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  159.791156][   T36] audit: type=1400 audit(1756970676.476:16064): avc:  denied  { create } for  pid=5807 comm="syz.6.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  159.817556][   T36] audit: type=1400 audit(1756970676.496:16065): avc:  denied  { read write } for  pid=5805 comm="syz.5.1841" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  159.847291][   T36] audit: type=1400 audit(1756970676.496:16066): avc:  denied  { read open } for  pid=5805 comm="syz.5.1841" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  159.918462][   T36] audit: type=1400 audit(1756970676.516:16067): avc:  denied  { read write } for  pid=5805 comm="syz.5.1841" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  160.024376][   T36] audit: type=1400 audit(1756970676.526:16068): avc:  denied  { read write open } for  pid=5805 comm="syz.5.1841" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  160.027550][ T5822] overlayfs: failed to clone upperpath
[  160.349911][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.357561][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.364806][ T5825] bridge_slave_0: entered allmulticast mode
[  160.372751][ T5825] bridge_slave_0: entered promiscuous mode
[  160.387911][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.395108][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.403607][ T5825] bridge_slave_1: entered allmulticast mode
[  160.410215][ T5825] bridge_slave_1: entered promiscuous mode
[  160.437372][  T329] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  160.445051][  T408] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  160.561420][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.568648][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.576155][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.583472][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.609609][  T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.633459][  T329] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  160.652291][  T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.673264][  T329] usb 6-1: config 0 descriptor??
[  160.705092][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.714695][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.721672][ T5857] overlayfs: failed to clone upperpath
[  160.744796][  T588] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.752024][  T588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.765511][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.772632][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.880974][ T5825] veth0_vlan: entered promiscuous mode
[  160.929665][ T5825] veth1_macvtap: entered promiscuous mode
[  161.107390][  T329] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  161.114604][  T329] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  161.135362][ T5875] 9pnet_fd: Insufficient options for proto=fd
[  161.158112][  T329] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  161.165126][  T329] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  161.188107][ T5881] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  161.195921][  T329] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  161.209534][  T329] holtek 0003:1241:5015.000E: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0
[  161.226726][  T329] holtek 0003:1241:5015.000E: no inputs found
[  161.232281][ T5883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5883 comm=syz.7.1866
[  161.332285][  T329] usb 6-1: USB disconnect, device number 15
[  161.503664][ T1101] rust_binder: 5888: removing orphan mapping 0:4120
[  161.560943][ T5893] rust_binder: Error while translating object.
[  161.560992][ T5893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  161.567410][ T5893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[  161.960635][ T5912] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  162.423244][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1887'.
[  162.596464][ T5956] __vm_enough_memory: pid: 5956, comm: syz.5.1889, bytes: 18014402804453376 not enough memory for the allocation
[  162.806261][ T5976] rust_binder: 212: no such ref 3
[  162.825892][ T5976] rust_binder: Write failure EINVAL in pid:212
[  162.883204][ T5979] rust_binder: Write failure EFAULT in pid:37
[  163.278749][ T5996] rust_binder: Write failure EFAULT in pid:224
[  163.285923][ T1101] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  163.359659][ T5998] loop7: detected capacity change from 0 to 7
[  163.465904][ T1101] usb 6-1: Using ep0 maxpacket: 8
[  163.469195][ T6002] overlayfs: failed to clone upperpath
[  163.480896][ T1101] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  163.489126][ T1101] usb 6-1: config 0 has no interface number 0
[  163.499845][ T1101] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  163.509505][ T1101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.518588][ T1101] usb 6-1: Product: syz
[  163.522991][ T1101] usb 6-1: Manufacturer: syz
[  163.528621][ T1101] usb 6-1: SerialNumber: syz
[  163.533640][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  163.543652][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  163.554415][ T1101] usb 6-1: config 0 descriptor??
[  163.771771][ T1101] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  163.778254][ T1101] usb 6-1: Failed to initialize entity for entity 6
[  163.784841][ T1101] usb 6-1: Failed to register entities (-22).
[  163.982447][ T5987] pim6reg1: entered promiscuous mode
[  163.987877][ T5987] pim6reg1: entered allmulticast mode
[  163.997351][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.006145][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.057008][  T329] usb 6-1: USB disconnect, device number 16
[  164.286875][ T6008] rust_binder: Write failure EFAULT in pid:233
[  164.407673][ T6018] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1909'.
[  164.496101][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  164.664456][   T36] kauditd_printk_skb: 705 callbacks suppressed
[  164.664477][   T36] audit: type=1400 audit(1756970681.416:16774): avc:  denied  { write } for  pid=6034 comm="syz.5.1913" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.694548][   T36] audit: type=1400 audit(1756970681.416:16775): avc:  denied  { remove_name } for  pid=6034 comm="syz.5.1913" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.726324][   T36] audit: type=1400 audit(1756970681.416:16776): avc:  denied  { unlink } for  pid=6034 comm="syz.5.1913" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  164.750070][   T36] audit: type=1400 audit(1756970681.426:16777): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.781692][  T437] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  164.796804][   T36] audit: type=1400 audit(1756970681.426:16778): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.829721][   T36] audit: type=1400 audit(1756970681.426:16779): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.856202][   T36] audit: type=1400 audit(1756970681.476:16780): avc:  denied  { ioctl } for  pid=6022 comm="syz.2.1911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  164.881332][   T36] audit: type=1400 audit(1756970681.486:16781): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.905703][   T36] audit: type=1400 audit(1756970681.486:16782): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.931085][   T36] audit: type=1400 audit(1756970681.486:16783): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.955935][  T437] usb 3-1: Using ep0 maxpacket: 8
[  164.964409][  T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.974493][  T437] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  164.984302][  T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.994127][  T437] usb 3-1: config 0 descriptor??
[  165.035894][  T329] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  165.188255][  T329] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  165.197465][  T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.207872][  T329] usb 6-1: config 0 descriptor??
[  165.408616][  T437] kye 0003:0458:501A.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  165.434698][  T437] kye 0003:0458:501A.000F: unknown main item tag 0x7
[  165.442008][  T437] kye 0003:0458:501A.000F: item fetching failed at offset 6/7
[  165.452267][  T437] kye 0003:0458:501A.000F: parse failed
[  165.458464][  T437] kye 0003:0458:501A.000F: probe with driver kye failed with error -22
[  165.617113][ T1101] usb 3-1: USB disconnect, device number 8
[  165.652395][ T6049] rust_binder: Error in use_page_slow: ESRCH
[  165.652422][ T6049] rust_binder: use_range failure ESRCH
[  165.671700][ T6049] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  165.678190][ T6049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  165.686265][ T6049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:388
[  166.515916][  T408] Bluetooth: hci0: command 0x1003 tx timeout
[  166.516046][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  167.345692][ T6080] overlay: Unknown parameter 'audit'
[  167.522467][ T6087] binder: Bad value for 'max'
[  167.768012][  T329] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  167.783926][  T329] asix 6-1:0.0: probe with driver asix failed with error -71
[  167.800810][  T329] usb 6-1: USB disconnect, device number 17
[  168.385854][   T10] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  168.535927][   T10] usb 3-1: device descriptor read/64, error -71
[  168.804080][   T10] usb 3-1: device descriptor read/64, error -71
[  168.903575][ T6136] /dev/rnullb0: Can't open blockdev
[  169.069519][   T10] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  169.205888][   T10] usb 3-1: device descriptor read/64, error -71
[  169.275857][  T437] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  169.303061][ T6148] /dev/rnullb0: Can't open blockdev
[  169.431064][  T437] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  169.447645][   T10] usb 3-1: device descriptor read/64, error -71
[  169.455870][  T437] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  169.475041][  T437] usb 6-1: config 8 has no interface number 0
[  169.481690][  T437] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  169.501323][  T437] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  169.511103][  T437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.538370][  T437] usb 6-1: Product: syz
[  169.543009][  T437] usb 6-1: Manufacturer: syz
[  169.549366][  T437] usb 6-1: SerialNumber: syz
[  169.576370][   T10] usb usb3-port1: attempt power cycle
[  169.686749][   T36] kauditd_printk_skb: 515 callbacks suppressed
[  169.686767][   T36] audit: type=1400 audit(1756970686.446:17299): avc:  denied  { ioctl } for  pid=5825 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  169.763450][ T6144] rust_binder: Write failure EFAULT in pid:408
[  169.765964][   T36] audit: type=1400 audit(1756970686.516:17300): avc:  denied  { ioctl } for  pid=6141 comm="syz.5.1951" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  169.809969][   T36] audit: type=1400 audit(1756970686.516:17301): avc:  denied  { read append } for  pid=6141 comm="syz.5.1951" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  169.833509][   T36] audit: type=1400 audit(1756970686.516:17302): avc:  denied  { read open } for  pid=6141 comm="syz.5.1951" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  169.867549][   T36] audit: type=1400 audit(1756970686.556:17303): avc:  denied  { read } for  pid=6141 comm="syz.5.1951" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  169.891452][   T36] audit: type=1400 audit(1756970686.556:17304): avc:  denied  { read open } for  pid=6141 comm="syz.5.1951" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  169.917825][   T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  169.928564][   T36] audit: type=1400 audit(1756970686.556:17305): avc:  denied  { ioctl } for  pid=6141 comm="syz.5.1951" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  169.953511][   T36] audit: type=1400 audit(1756970686.616:17306): avc:  denied  { ioctl } for  pid=6104 comm="syz.2.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  170.005914][  T437] usb 6-1: USB disconnect, device number 18
[  170.018852][   T10] usb 3-1: device descriptor read/8, error -71
[  170.030550][   T36] audit: type=1400 audit(1756970686.766:17307): avc:  denied  { ioctl } for  pid=6104 comm="syz.2.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  170.062902][   T36] audit: type=1400 audit(1756970686.776:17308): avc:  denied  { ioctl } for  pid=6104 comm="syz.2.1938" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  170.147742][   T10] usb 3-1: device descriptor read/8, error -71
[  170.385865][   T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  170.407807][   T10] usb 3-1: device descriptor read/8, error -71
[  170.554940][   T10] usb 3-1: device descriptor read/8, error -71
[  170.685979][   T10] usb usb3-port1: unable to enumerate USB device
[  170.865148][ T6192] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  171.039080][ T6195] fuse: Unknown parameter 'øe'
[  171.055418][ T6195] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.244378][ T6200] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  171.621775][ T6211] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[  171.626262][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.1972
[  171.692522][ T6211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  171.692552][ T6211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:259
[  171.786601][ T6222] netlink: 'syz.5.1975': attribute type 58 has an invalid length.
[  171.938503][ T6240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  171.938539][ T6240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:270
[  171.974149][ T6243] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.179345][ T6257] binder: Unknown parameter '18446744073709551615'
[  172.183869][ T6254] binder: Unknown parameter '18446744073709551615'
[  172.495657][ T6273] overlayfs: missing 'lowerdir'
[  172.776109][  T602] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  172.957687][  T602] usb 3-1: Using ep0 maxpacket: 16
[  172.983360][  T602] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  173.002690][  T602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.011261][  T602] usb 3-1: Product: syz
[  173.015488][  T602] usb 3-1: Manufacturer: syz
[  173.020129][  T602] usb 3-1: SerialNumber: syz
[  173.034201][  T602] r8152-cfgselector 3-1: Unknown version 0x0000
[  173.049309][  T602] r8152-cfgselector 3-1: config 0 descriptor??
[  173.098137][ T6298] overlayfs: missing 'lowerdir'
[  173.262493][ T6307] overlayfs: failed to clone upperpath
[  173.325845][   T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  173.381954][ T6316] overlayfs: failed to clone upperpath
[  173.485855][   T31] usb 6-1: Using ep0 maxpacket: 16
[  173.492727][   T31] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  173.501009][   T31] usb 6-1: config 1 has no interface number 0
[  173.507123][   T31] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  173.517125][   T31] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  173.527115][   T31] usb 6-1: config 1 interface 105 has no altsetting 0
[  173.536914][   T31] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  173.546013][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.554009][   T31] usb 6-1: Product: syz
[  173.558214][   T31] usb 6-1: Manufacturer: syz
[  173.562821][   T31] usb 6-1: SerialNumber: syz
[  173.571981][ T6296] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  173.579711][ T6296] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  173.832340][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.842083][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.852349][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.862102][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.877274][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.886018][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.938334][ T6323] overlayfs: missing 'lowerdir'
[  174.275482][ T6329] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  174.284296][ T6329] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  174.373663][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.389100][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.415909][   T31] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  174.433504][   T31] usb 6-1: USB disconnect, device number 19
[  174.640181][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2012'.
[  174.732041][   T36] kauditd_printk_skb: 579 callbacks suppressed
[  174.732062][   T36] audit: type=1400 audit(1756970691.486:17888): avc:  denied  { ioctl } for  pid=5825 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  174.752824][ T6337] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  174.781426][   T36] audit: type=1400 audit(1756970691.506:17889): avc:  denied  { read write } for  pid=6336 comm="syz.7.2013" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  174.816553][   T36] audit: type=1400 audit(1756970691.506:17890): avc:  denied  { read write open } for  pid=6336 comm="syz.7.2013" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  174.846724][ T6337] overlayfs: missing 'lowerdir'
[  174.863482][   T36] audit: type=1400 audit(1756970691.506:17891): avc:  denied  { mounton } for  pid=6336 comm="syz.7.2013" path="/36/bus" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  174.892065][   T36] audit: type=1400 audit(1756970691.536:17892): avc:  denied  { ioctl } for  pid=6331 comm="syz.5.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.905836][   T31] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  174.919988][   T36] audit: type=1400 audit(1756970691.606:17893): avc:  denied  { ioctl } for  pid=6331 comm="syz.5.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.950992][   T36] audit: type=1400 audit(1756970691.616:17894): avc:  denied  { read write } for  pid=6336 comm="syz.7.2013" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  174.975946][   T36] audit: type=1400 audit(1756970691.616:17895): avc:  denied  { read write open } for  pid=6336 comm="syz.7.2013" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  174.976468][ T6342] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2014'.
[  175.002466][   T36] audit: type=1400 audit(1756970691.616:17896): avc:  denied  { ioctl } for  pid=6336 comm="syz.7.2013" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  175.039019][   T36] audit: type=1400 audit(1756970691.616:17897): avc:  denied  { create } for  pid=6336 comm="syz.7.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  175.107674][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.118359][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.134058][ T1101] r8152-cfgselector 3-1: USB disconnect, device number 13
[  175.141998][   T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.153722][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.162690][   T31] usb 6-1: Product: syz
[  175.167486][   T31] usb 6-1: Manufacturer: syz
[  175.172120][   T31] usb 6-1: SerialNumber: syz
[  175.515845][ T1101] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  175.587644][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.596311][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.644097][   T31] usb 6-1: cannot find UAC_HEADER
[  175.662088][   T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  175.677439][   T31] usb 6-1: USB disconnect, device number 20
[  175.695650][ T1101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  175.709194][ T6347] overlayfs: missing 'lowerdir'
[  175.714236][ T1101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.733041][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  175.748931][ T1101] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  175.758257][ T1101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.769547][ T1101] usb 3-1: config 0 descriptor??
[  176.188638][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.202944][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.215862][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.222695][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.233662][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.243537][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.251110][ T1101] isku 0003:1E7D:319C.0010: unknown main item tag 0x0
[  176.260769][ T1101] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[  176.469650][ T6374] overlayfs: missing 'lowerdir'
[  176.597569][   T65] usb 3-1: USB disconnect, device number 14
[  177.135984][ T6390] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2031'.
[  177.196215][ T6392] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  177.322016][ T6398] overlayfs: missing 'lowerdir'
[  177.442580][ T6405] rtc_cmos 00:00: Alarms can be up to one day in the future
[  177.546470][ T6412] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  177.554579][ T6412] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  177.556214][ T6412] rust_binder: Error while translating object.
[  177.562658][ T6412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  177.568896][ T6412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463
[  177.741766][ T6419] /dev/rnullb0: Can't open blockdev
[  177.795710][ T6426] rust_binder: Error while translating object.
[  177.795760][ T6426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  177.802100][ T6426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295
[  177.818854][ T6428] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  177.836963][ T6428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  177.949272][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.824323][ T6456] veth0: mtu greater than device maximum
[  178.866140][ T6456] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  178.937237][ T6463] /dev/loop0: Can't lookup blockdev
[  179.356697][ T6483] overlayfs: missing 'workdir'
[  179.754538][   T36] kauditd_printk_skb: 993 callbacks suppressed
[  179.754558][   T36] audit: type=1400 audit(1756970696.506:18891): avc:  denied  { read append } for  pid=6500 comm="syz.5.2068" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.787109][   T36] audit: type=1400 audit(1756970696.516:18892): avc:  denied  { read } for  pid=6499 comm="syz.2.2067" name="binder1" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.847694][   T36] audit: type=1400 audit(1756970696.516:18893): avc:  denied  { read open } for  pid=6499 comm="syz.2.2067" path="/dev/binderfs/binder1" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.913322][   T36] audit: type=1400 audit(1756970696.546:18894): avc:  denied  { read append open } for  pid=6500 comm="syz.5.2068" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.940020][ T6506] veth1: entered allmulticast mode
[  179.946055][ T6510] netlink: 'syz.2.2070': attribute type 1 has an invalid length.
[  179.960693][ T6506] veth1: left allmulticast mode
[  179.967634][   T36] audit: type=1400 audit(1756970696.546:18895): avc:  denied  { read append } for  pid=6499 comm="syz.2.2067" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  180.003728][   T36] audit: type=1400 audit(1756970696.546:18896): avc:  denied  { read append open } for  pid=6499 comm="syz.2.2067" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  180.038032][   T36] audit: type=1400 audit(1756970696.566:18897): avc:  denied  { write } for  pid=6500 comm="syz.5.2068" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  180.072581][   T36] audit: type=1400 audit(1756970696.566:18898): avc:  denied  { write open } for  pid=6500 comm="syz.5.2068" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0"
[  180.171189][   T36] audit: type=1400 audit(1756970696.566:18899): avc:  denied  { ioctl } for  pid=6499 comm="syz.2.2067" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  180.255871][   T36] audit: type=1400 audit(1756970696.566:18900): avc:  denied  { mounton } for  pid=6500 comm="syz.5.2068" path="/169/file0" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  180.356144][   T31] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  180.518744][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.557907][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.592825][   T31] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  180.620291][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.647708][   T31] usb 6-1: config 0 descriptor??
[  180.804606][ T6554] __vm_enough_memory: pid: 6554, comm: syz.2.2087, bytes: 18014402804453376 not enough memory for the allocation
[  180.865754][ T6557] pim6reg1: entered promiscuous mode
[  180.871206][ T6557] pim6reg1: entered allmulticast mode
[  181.064703][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.078521][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.114963][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.128436][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.151351][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.156154][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2091'.
[  181.168379][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.175464][   T31] isku 0003:1E7D:319C.0011: unknown main item tag 0x0
[  181.221274][   T31] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  181.272395][   T31] isku 0003:1E7D:319C.0011: couldn't init struct isku_device
[  181.303910][   T31] isku 0003:1E7D:319C.0011: couldn't install keyboard
[  181.339509][   T31] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -71
[  181.372212][   T31] usb 6-1: USB disconnect, device number 21
[  181.447693][ T6579] fido_id[6579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  182.409305][ T6629] netlink: 'syz.6.2109': attribute type 11 has an invalid length.
[  182.430048][   T31] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  182.587295][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  182.598555][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.608322][   T31] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  182.617379][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.626684][   T31] usb 6-1: config 0 descriptor??
[  182.725852][ T1101] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  182.878442][ T1101] usb 3-1: not running at top speed; connect to a high speed hub
[  182.887872][ T1101] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  183.038242][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.045127][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.052031][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.058885][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.065704][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.072620][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.079472][   T31] isku 0003:1E7D:319C.0012: unknown main item tag 0x0
[  183.088010][   T31] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  183.241032][   T31] isku 0003:1E7D:319C.0012: couldn't init struct isku_device
[  183.252984][   T31] isku 0003:1E7D:319C.0012: couldn't install keyboard
[  183.261152][   T31] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -71
[  183.271042][   T31] usb 6-1: USB disconnect, device number 22
[  183.521547][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'.
[  184.323307][ T6665] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  184.331078][ T6664] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  184.665959][   T31] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  184.793756][   T36] kauditd_printk_skb: 488 callbacks suppressed
[  184.793771][   T36] audit: type=1400 audit(1756970701.546:19389): avc:  denied  { ioctl } for  pid=5825 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  184.842488][   T36] audit: type=1400 audit(1756970701.596:19390): avc:  denied  { read write } for  pid=6671 comm="syz.7.2125" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  184.866711][   T36] audit: type=1400 audit(1756970701.596:19391): avc:  denied  { read write open } for  pid=6671 comm="syz.7.2125" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  184.895702][   T36] audit: type=1400 audit(1756970701.596:19392): avc:  denied  { create } for  pid=6671 comm="syz.7.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  184.916891][   T36] audit: type=1400 audit(1756970701.596:19393): avc:  denied  { write } for  pid=6671 comm="syz.7.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  184.918528][   T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.937905][   T36] audit: type=1400 audit(1756970701.606:19394): avc:  denied  { read } for  pid=6671 comm="syz.7.2125" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  184.956996][   T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.972037][   T36] audit: type=1400 audit(1756970701.606:19395): avc:  denied  { read open } for  pid=6671 comm="syz.7.2125" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  184.986870][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  185.018914][   T31] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  185.038005][   T36] audit: type=1400 audit(1756970701.606:19396): avc:  denied  { ioctl } for  pid=6671 comm="syz.7.2125" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  185.045828][   T31] usb 6-1: Product: syz
[  185.065413][   T36] audit: type=1400 audit(1756970701.646:19397): avc:  denied  { ioctl } for  pid=6666 comm="syz.5.2123" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.107109][   T31] usb 6-1: Manufacturer: syz
[  185.123829][   T31] hub 6-1:4.0: USB hub found
[  185.187759][   T36] audit: type=1400 audit(1756970701.646:19398): avc:  denied  { ioctl } for  pid=6666 comm="syz.5.2123" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.331973][   T31] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[  185.437426][ T1101] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.474929][ T6689] cgroup: fork rejected by pids controller in /syz6
[  185.475684][ T1101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.491220][ T1101] usb 3-1: Product: Њ
[  185.495871][   T10] rust_binder: 0: removing orphan mapping 0:24
[  185.528186][ T1101] usb 3-1: can't set config #1, error -71
[  185.538591][ T1101] usb 3-1: USB disconnect, device number 15
[  185.576619][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2134'.
[  185.625907][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2134'.
[  186.202898][ T6760] netlink: 'syz.6.2144': attribute type 25 has an invalid length.
[  186.205855][  T528] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  186.378249][  T528] usb 3-1: config 0 has no interfaces?
[  186.388776][  T528] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  186.398440][  T528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  186.407016][  T528] usb 3-1: SerialNumber: syz
[  186.416100][  T528] usb 3-1: config 0 descriptor??
[  186.629713][  T528] usb 3-1: USB disconnect, device number 16
[  186.905824][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2150'.
[  186.915542][ T6783] veth0_vlan: entered allmulticast mode
[  187.165544][ T6804] rust_binder: Write failure EFAULT in pid:380
[  187.254162][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'.
[  187.438377][ T6815] binder: Binderfs stats mode cannot be changed during a remount
[  187.484951][ T6817] rust_binder: Error in use_page_slow: ESRCH
[  187.484968][ T6818] rust_binder: Error in use_page_slow: ESRCH
[  187.484982][ T6818] rust_binder: use_range failure ESRCH
[  187.491945][ T6817] rust_binder: use_range failure ESRCH
[  187.497970][ T6818] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false
[  187.505072][ T6817] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false
[  187.509264][ T6818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  187.516951][ T6817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  187.525068][ T1101] usb 6-1: USB disconnect, device number 23
[  187.535038][ T6817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:547
[  187.544488][ T6818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:547
[  187.558662][  T528] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  187.746654][  T528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  187.757708][  T528] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[  187.766826][  T528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.776000][  T528] usb 3-1: config 0 descriptor??
[  187.783078][ T6813] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  187.965864][ T1101] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  188.118180][ T1101] usb 6-1: not running at top speed; connect to a high speed hub
[  188.128636][ T1101] usb 6-1: config 8 has an invalid interface number: 247 but max is 0
[  188.139335][ T1101] usb 6-1: config 8 has no interface number 0
[  188.145523][ T1101] usb 6-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64
[  188.156892][ T6837] veth0: entered promiscuous mode
[  188.158319][ T1101] usb 6-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  188.167971][ T6836] veth0: left promiscuous mode
[  188.174038][ T1101] usb 6-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping
[  188.189294][ T1101] usb 6-1: config 8 interface 247 altsetting 54 has an invalid descriptor for endpoint zero, skipping
[  188.200694][ T1101] usb 6-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  188.217724][  T528] ntrig 0003:1B96:0003.0013: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.2-1/input0
[  188.229070][ T1101] usb 6-1: config 8 interface 247 has no altsetting 0
[  188.241118][ T1101] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d
[  188.250822][ T1101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.259065][ T1101] usb 6-1: Product: syz
[  188.263342][ T1101] usb 6-1: Manufacturer: syz
[  188.268383][ T1101] usb 6-1: SerialNumber: syz
[  188.279039][ T6832] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  188.526510][ T1101] usb 6-1: USB disconnect, device number 24
[  188.623912][  T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.247/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  188.735981][  T528] usb 3-1: USB disconnect, device number 17
[  188.846937][ T6847] rust_binder: 6844 RLIMIT_NICE not set
[  188.850545][ T6848] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  188.895070][ T1101] rust_binder: 0: removing orphan mapping 0:4232
[  189.065611][ T6861] !@ÿ: renamed from xfrm0 (while UP)
[  189.425884][ T1101] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  189.579092][ T1101] usb 6-1: config 0 has an invalid interface number: 199 but max is 1
[  189.587920][ T1101] usb 6-1: config 0 has no interface number 1
[  189.594314][ T1101] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  189.604503][ T1101] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  189.617930][ T1101] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  189.628051][ T1101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  189.645867][ T1101] usb 6-1: SerialNumber: syz
[  189.657025][ T1101] usb 6-1: config 0 descriptor??
[  189.904604][   T36] kauditd_printk_skb: 483 callbacks suppressed
[  189.904627][   T36] audit: type=1400 audit(1756970706.656:19882): avc:  denied  { ioctl } for  pid=6862 comm="syz.5.2177" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  189.945874][ T1101] usb 6-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  189.952788][ T1101] usb 6-1: No valid video chain found.
[  189.988304][   T36] audit: type=1400 audit(1756970706.656:19883): avc:  denied  { call } for  pid=6862 comm="syz.5.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  189.992198][ T1101] usb 6-1: USB disconnect, device number 25
[  190.020714][   T36] audit: type=1400 audit(1756970706.696:19884): avc:  denied  { read } for  pid=6862 comm="syz.5.2177" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  190.069802][   T36] audit: type=1400 audit(1756970706.736:19885): avc:  denied  { execmem } for  pid=6882 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  190.102687][   T36] audit: type=1400 audit(1756970706.736:19886): avc:  denied  { create } for  pid=6882 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  190.127225][   T36] audit: type=1400 audit(1756970706.747:19887): avc:  denied  { create } for  pid=6882 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  190.147992][   T36] audit: type=1400 audit(1756970706.847:19888): avc:  denied  { create } for  pid=6884 comm="syz.6.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  190.169836][   T36] audit: type=1400 audit(1756970706.847:19889): avc:  denied  { create } for  pid=6884 comm="syz.6.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  190.191736][   T36] audit: type=1400 audit(1756970706.847:19890): avc:  denied  { write } for  pid=6884 comm="syz.6.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  190.212940][   T36] audit: type=1400 audit(1756970706.847:19891): avc:  denied  { read } for  pid=6884 comm="syz.6.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  190.275924][ T6887] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  190.449532][ T1101] rust_binder: 6862: removing orphan mapping 0:4232
[  190.666808][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2190'.
[  191.329921][ T6916] rust_binder: Write failure EFAULT in pid:207
[  191.547498][ T6922] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  191.555639][ T6924] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  191.576423][ T6922] overlayfs: failed to set xattr on upper
[  191.582202][ T6922] overlayfs: ...falling back to redirect_dir=nofollow.
[  191.591744][ T6922] overlayfs: ...falling back to uuid=null.
[  191.687798][ T6931] netlink: 3529 bytes leftover after parsing attributes in process `syz.5.2197'.
[  192.412435][ T6953] cgroup: fork rejected by pids controller in /syz5
[  192.439528][ T6977] rust_binder: 403: no such ref 3
[  192.457156][ T6974] rust_binder: 403: no such ref 3
[  192.567953][ T6987] netlink: 'syz.2.2205': attribute type 16 has an invalid length.
[  192.591688][ T6987] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2205'.
[  193.075275][ T7039] rust_binder: Error while translating object.
[  193.075314][ T7039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  193.081596][ T7039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422
[  193.297674][ T7055] rust_binder: Error while translating object.
[  193.307005][ T7055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  193.313197][ T7055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424
[  193.404879][ T7062] /dev/nullb0: Can't lookup blockdev
[  193.725875][ T1101] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  193.876061][ T1101] usb 6-1: Using ep0 maxpacket: 8
[  193.883936][ T1101] usb 6-1: config 0 has no interfaces?
[  193.894381][ T1101] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  193.905832][ T1101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.915587][ T1101] usb 6-1: Product: syz
[  193.919837][ T1101] usb 6-1: Manufacturer: syz
[  193.924428][ T1101] usb 6-1: SerialNumber: syz
[  193.930400][ T1101] usb 6-1: config 0 descriptor??
[  194.192326][ T7105] rust_binder: Failed to allocate buffer. len:120, is_oneway:true
[  194.212874][ T1101] usb 6-1: USB disconnect, device number 26
[  194.244420][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2234'.
[  194.614457][ T7130] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  194.833924][ T7132] overlayfs: failed to clone upperpath
[  194.923139][   T36] kauditd_printk_skb: 797 callbacks suppressed
[  194.923157][   T36] audit: type=1400 audit(1756970711.667:20689): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.973923][   T36] audit: type=1400 audit(1756970711.667:20690): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  194.999529][   T36] audit: type=1400 audit(1756970711.667:20691): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  195.025929][   T36] audit: type=1400 audit(1756970711.717:20692): avc:  denied  { create } for  pid=7138 comm="syz.5.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  195.046396][   T36] audit: type=1400 audit(1756970711.717:20693): avc:  denied  { ioctl } for  pid=7138 comm="syz.5.2243" path="socket:[42676]" dev="sockfs" ino=42676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  195.074177][   T36] audit: type=1400 audit(1756970711.717:20694): avc:  denied  { setopt } for  pid=7138 comm="syz.5.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  195.098750][   T36] audit: type=1400 audit(1756970711.717:20695): avc:  denied  { write } for  pid=7138 comm="syz.5.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  195.119194][   T36] audit: type=1400 audit(1756970711.727:20696): avc:  denied  { read write } for  pid=7138 comm="syz.5.2243" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.142887][   T36] audit: type=1400 audit(1756970711.727:20697): avc:  denied  { read write open } for  pid=7138 comm="syz.5.2243" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.168652][   T36] audit: type=1400 audit(1756970711.737:20698): avc:  denied  { read } for  pid=7138 comm="syz.5.2243" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  195.535128][ T7154] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  195.544464][ T7154] rust_binder: Write failure EINVAL in pid:438
[  195.580189][ T7156] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2250'.
[  195.726572][ T7165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7165 comm=syz.6.2252
[  195.895837][  T437] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  196.048136][  T437] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.058442][  T437] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  196.073206][  T437] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  196.083379][  T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  196.091680][  T437] usb 3-1: SerialNumber: syz
[  196.161736][ T7173] FAULT_INJECTION: forcing a failure.
[  196.161736][ T7173] name failslab, interval 1, probability 0, space 0, times 1
[  196.175024][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.5.2255 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9
[  196.175057][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  196.175074][ T7173] Call Trace:
[  196.175080][ T7173]  <TASK>
[  196.175087][ T7173]  __dump_stack+0x21/0x30
[  196.175109][ T7173]  dump_stack_lvl+0x10c/0x190
[  196.175124][ T7173]  ? __cfi_dump_stack_lvl+0x10/0x10
[  196.175138][ T7173]  ? avc_has_perm_noaudit+0x21c/0x360
[  196.175155][ T7173]  dump_stack+0x19/0x20
[  196.175168][ T7173]  should_fail_ex+0x3d9/0x530
[  196.175185][ T7173]  should_failslab+0xac/0x100
[  196.175198][ T7173]  kmem_cache_alloc_noprof+0x42/0x3a0
[  196.175214][ T7173]  ? alloc_empty_file+0xbf/0x280
[  196.175228][ T7173]  ? generic_permission+0x1e7/0x580
[  196.175240][ T7173]  alloc_empty_file+0xbf/0x280
[  196.175252][ T7173]  ? make_vfsuid+0x4d/0xa0
[  196.175267][ T7173]  dentry_open+0x4b/0xb0
[  196.175280][ T7173]  ovl_path_open+0x173/0x1a0
[  196.175297][ T7173]  ovl_dir_read+0x29/0x560
[  196.175311][ T7173]  ? ovl_path_next+0x392/0x430
[  196.175324][ T7173]  ovl_dir_read_merged+0x197/0x350
[  196.175339][ T7173]  ? ovl_check_empty_dir+0x460/0x460
[  196.175353][ T7173]  ? __cfi_ovl_fill_merge+0x10/0x10
[  196.175369][ T7173]  ? __kasan_kmalloc+0x96/0xb0
[  196.175380][ T7173]  ? ovl_iterate+0xf22/0x1f00
[  196.175395][ T7173]  ovl_iterate+0xfe8/0x1f00
[  196.175410][ T7173]  ? _parse_integer+0x2e/0x40
[  196.175426][ T7173]  ? __cfi_ovl_iterate+0x10/0x10
[  196.175440][ T7173]  ? kstrtouint+0x78/0xf0
[  196.175454][ T7173]  ? kstrtouint_from_user+0xfb/0x150
[  196.175469][ T7173]  ? __x64_sys_openat+0x13a/0x170
[  196.175480][ T7173]  ? x64_sys_call+0xe69/0x2ee0
[  196.175492][ T7173]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  196.175504][ T7173]  ? selinux_file_permission+0x309/0xb30
[  196.175515][ T7173]  ? __kasan_check_write+0x18/0x20
[  196.175527][ T7173]  ? rwsem_read_trylock+0x2b1/0x660
[  196.175538][ T7173]  ? __kasan_check_write+0x18/0x20
[  196.175549][ T7173]  ? down_write+0xe9/0x2a0
[  196.175559][ T7173]  ? __cfi_down_write+0x10/0x10
[  196.175568][ T7173]  ? vfs_write+0x8ba/0xe80
[  196.175576][ T7173]  ? __kasan_check_write+0x18/0x20
[  196.175587][ T7173]  wrap_directory_iterator+0xa7/0xf0
[  196.175597][ T7173]  ? __cfi_ovl_iterate+0x10/0x10
[  196.175608][ T7173]  shared_ovl_iterate+0x28/0x40
[  196.175619][ T7173]  iterate_dir+0x200/0x5e0
[  196.175628][ T7173]  __se_sys_getdents+0xe9/0x240
[  196.175638][ T7173]  ? fput+0x1a5/0x240
[  196.175647][ T7173]  ? __x64_sys_getdents+0xa0/0xa0
[  196.175657][ T7173]  ? ksys_write+0x1ef/0x250
[  196.175664][ T7173]  ? __cfi_filldir+0x10/0x10
[  196.175673][ T7173]  ? __cfi_ksys_write+0x10/0x10
[  196.175682][ T7173]  ? __kasan_check_read+0x15/0x20
[  196.175693][ T7173]  __x64_sys_getdents+0x7f/0xa0
[  196.175702][ T7173]  x64_sys_call+0x26e0/0x2ee0
[  196.175714][ T7173]  do_syscall_64+0x58/0xf0
[  196.175725][ T7173]  ? clear_bhb_loop+0x50/0xa0
[  196.175735][ T7173]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  196.175745][ T7173] RIP: 0033:0x7f3fb5f8ebe9
[  196.175754][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.175764][ T7173] RSP: 002b:00007f3fb49e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  196.175776][ T7173] RAX: ffffffffffffffda RBX: 00007f3fb61c5fa0 RCX: 00007f3fb5f8ebe9
[  196.175783][ T7173] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003
[  196.175789][ T7173] RBP: 00007f3fb49e3090 R08: 0000000000000000 R09: 0000000000000000
[  196.175796][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.175802][ T7173] R13: 00007f3fb61c6038 R14: 00007f3fb61c5fa0 R15: 00007fff7dfcc4b8
[  196.175810][ T7173]  </TASK>
[  196.841322][ T7203] 9pnet_fd: Insufficient options for proto=fd
[  196.883984][ T7206] overlayfs: failed to clone upperpath
[  196.951339][ T7211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:678
[  198.737104][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2291'.
[  199.056360][ T7313] /dev/rnullb0: Can't open blockdev
[  199.065944][ T7313] /dev/rnullb0: Can't open blockdev
[  199.230370][ T7320] random: crng reseeded on system resumption
[  199.443924][ T7331] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  199.507594][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'.
[  199.925979][   T36] kauditd_printk_skb: 595 callbacks suppressed
[  199.925999][   T36] audit: type=1400 audit(1756970716.677:21294): avc:  denied  { ioctl } for  pid=7347 comm="syz.6.2313" path="socket:[44317]" dev="sockfs" ino=44317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  199.960863][   T36] audit: type=1400 audit(1756970716.677:21295): avc:  denied  { bind } for  pid=7347 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  199.981328][   T36] audit: type=1400 audit(1756970716.677:21296): avc:  denied  { bind } for  pid=7347 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  200.006861][   T36] audit: type=1400 audit(1756970716.677:21297): avc:  denied  { create } for  pid=7347 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  200.055887][   T36] audit: type=1400 audit(1756970716.677:21298): avc:  denied  { create } for  pid=7347 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.087383][   T36] audit: type=1400 audit(1756970716.677:21299): avc:  denied  { execmem } for  pid=7347 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  200.116275][   T36] audit: type=1400 audit(1756970716.677:21300): avc:  denied  { execute } for  pid=7347 comm="syz.6.2313" path="/dev/rnullb0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  200.149807][   T36] audit: type=1400 audit(1756970716.897:21301): avc:  denied  { create } for  pid=7355 comm="syz.6.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.180065][   T36] audit: type=1400 audit(1756970716.917:21302): avc:  denied  { write } for  pid=7355 comm="syz.6.2315" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.202486][   T36] audit: type=1400 audit(1756970716.917:21303): avc:  denied  { connect } for  pid=7355 comm="syz.6.2315" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.674213][ T7371] SELinux: security_context_str_to_sid () failed with errno=-22
[  201.157683][  T437] usb 3-1: 0:2 : does not exist
[  201.332004][ T7377] binder: Bad value for 'stats'
[  201.338744][ T7376] binder: Bad value for 'stats'
[  201.641115][ T7392] incfs: Error accessing: /dev/rnullb0.
[  201.647201][ T7392] incfs: mount failed -20
[  202.752444][ T7431] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2339'.
[  202.945903][ T7447] can: request_module (can-proto-6) failed.
[  202.952114][ T7446] can: request_module (can-proto-6) failed.
[  202.977402][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.998367][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.099691][ T7454] x_tables: duplicate entry at hook 1
[  203.712249][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.726235][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.739760][ T7479] veth0_to_team: entered promiscuous mode
[  203.745560][ T7479] veth0_to_team: entered allmulticast mode
[  204.185359][ T7489] 9pnet_fd: Insufficient options for proto=fd
[  204.496974][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.511166][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.900300][ T7504] 9pnet_fd: Insufficient options for proto=fd
[  204.962323][   T36] kauditd_printk_skb: 471 callbacks suppressed
[  204.962340][   T36] audit: type=1400 audit(1756970721.707:21775): avc:  denied  { read write } for  pid=4013 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  204.997602][   T36] audit: type=1400 audit(1756970721.707:21776): avc:  denied  { read write open } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  205.025756][   T36] audit: type=1400 audit(1756970721.707:21777): avc:  denied  { ioctl } for  pid=4013 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  205.051757][   T36] audit: type=1400 audit(1756970721.747:21778): avc:  denied  { create } for  pid=7510 comm="syz.5.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  205.076703][   T36] audit: type=1400 audit(1756970721.747:21779): avc:  denied  { create } for  pid=7510 comm="syz.5.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  205.135835][   T36] audit: type=1400 audit(1756970721.747:21780): avc:  denied  { getopt } for  pid=7510 comm="syz.5.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  205.187856][   T36] audit: type=1400 audit(1756970721.747:21781): avc:  denied  { read } for  pid=7510 comm="syz.5.2365" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  205.212137][   T36] audit: type=1400 audit(1756970721.747:21782): avc:  denied  { read open } for  pid=7510 comm="syz.5.2365" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  205.238466][   T36] audit: type=1400 audit(1756970721.747:21783): avc:  denied  { read } for  pid=7510 comm="syz.5.2365" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  205.279492][   T36] audit: type=1400 audit(1756970721.747:21784): avc:  denied  { read open } for  pid=7510 comm="syz.5.2365" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  205.635854][  T437] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  205.807172][  T437] usb 6-1: Using ep0 maxpacket: 8
[  205.829307][  T437] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  205.845824][  T437] usb 6-1: config 179 has no interface number 0
[  205.852232][  T437] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  205.870369][  T437] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  205.884843][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.893478][  T437] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  205.903958][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.909977][  T437] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  205.926694][  T437] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  205.941037][  T437] usb 6-1: config 179 interface 65 has no altsetting 0
[  205.944290][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.949198][  T437] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  205.966633][  T437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.973671][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.998343][  T437] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input17
[  206.015666][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.036079][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.201652][ T7523] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  206.220329][ T1101] usb 6-1: USB disconnect, device number 27
[  206.240773][ T1101] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  207.115832][ T1101] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  207.272545][ T1101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  207.291021][ T1101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.300965][ T1101] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  207.310074][ T1101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.350593][ T1101] usb 6-1: config 0 descriptor??
[  207.562103][ T7617] netlink: 57 bytes leftover after parsing attributes in process `syz.7.2398'.
[  207.616410][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.625172][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.667756][ T7623] overlayfs: failed to clone upperpath
[  207.764049][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.797241][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.804129][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.846898][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.853737][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.893585][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.915915][ T1101] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[  207.937226][ T1101] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  208.167282][  T528] usb 6-1: USB disconnect, device number 28
[  208.507579][ T7631] fido_id[7631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  208.666534][ T7637] ------------[ cut here ]------------
[  208.672243][ T7637] WARNING: CPU: 1 PID: 7637 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  208.681711][ T7637] Modules linked in:
[  208.685642][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.7.2405 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9
[  208.697242][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.707380][ T7637] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  208.713330][ T7637] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 43 ee 05 00 0f 85 be 00 00 00 c6 05 cc 43 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  208.733009][ T7637] RSP: 0018:ffffc9000d167660 EFLAGS: 00010246
[  208.739240][ T7637] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000
[  208.747698][ T7637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d167718
[  208.756012][ T7637] RBP: ffffc9000d1677a0 R08: ffffc9000d167717 R09: 0000000000000000
[  208.764210][ T7637] R10: ffffc9000d167700 R11: fffff52001a2cee3 R12: ffffc9000d1676a0
[  208.772521][ T7637] R13: dffffc0000000000 R14: 1ffff92001a2ced0 R15: 0000000000000000
[  208.780559][ T7637] FS:  00007f00461e56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  208.789575][ T7637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.796210][ T7637] CR2: 0000200000002ac0 CR3: 000000014347e000 CR4: 00000000003526b0
[  208.804291][ T7637] Call Trace:
[  208.807618][ T7637]  <TASK>
[  208.810560][ T7637]  ? ksys_write+0x141/0x250
[  208.815079][ T7637]  ? __x64_sys_write+0x7f/0x90
[  208.819978][ T7637]  ? do_syscall_64+0x58/0xf0
[  208.824598][ T7637]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  208.830499][ T7637]  ? hashtab_init+0xdb/0x1f0
[  208.835117][ T7637]  ___kmalloc_large_node+0xb5/0x250
[  208.840392][ T7637]  ? hashtab_init+0xdb/0x1f0
[  208.845093][ T7637]  __kmalloc_large_node_noprof+0x1e/0xe0
[  208.850818][ T7637]  ? hashtab_init+0xdb/0x1f0
[  208.855438][ T7637]  __kmalloc_noprof+0x26d/0x450
[  208.860555][ T7637]  hashtab_init+0xdb/0x1f0
[  208.864996][ T7637]  ? policydb_read+0x86f/0x28c0
[  208.869900][ T7637]  symtab_init+0x44/0x70
[  208.874155][ T7637]  policydb_read+0x8fe/0x28c0
[  208.878877][ T7637]  ? kasan_save_alloc_info+0x40/0x50
[  208.884353][ T7637]  ? __cfi_policydb_read+0x10/0x10
[  208.889545][ T7637]  ? security_load_policy+0x128/0x12f0
[  208.895042][ T7637]  security_load_policy+0x162/0x12f0
[  208.900390][ T7637]  ? avc_has_perm_noaudit+0x21c/0x360
[  208.905886][ T7637]  ? _raw_spin_unlock+0x45/0x60
[  208.910761][ T7637]  ? __check_object_size+0x50a/0x810
[  208.916124][ T7637]  ? __cfi_security_load_policy+0x10/0x10
[  208.921859][ T7637]  ? __kasan_check_write+0x18/0x20
[  208.927022][ T7637]  sel_write_load+0x298/0x5e0
[  208.931744][ T7637]  ? futex_wait+0x29a/0x7a0
[  208.936318][ T7637]  ? __cfi_sel_write_load+0x10/0x10
[  208.941571][ T7637]  ? __cfi_futex_wait+0x10/0x10
[  208.946545][ T7637]  ? bpf_lsm_file_permission+0xd/0x20
[  208.951963][ T7637]  ? __cfi_sel_write_load+0x10/0x10
[  208.957223][ T7637]  vfs_write+0x3c0/0xe80
[  208.961500][ T7637]  ? __cfi_vfs_write+0x10/0x10
[  208.966328][ T7637]  ? do_futex+0x309/0x500
[  208.970710][ T7637]  ? __cfi_do_futex+0x10/0x10
[  208.975434][ T7637]  ? __kasan_check_read+0x15/0x20
[  208.980589][ T7637]  ksys_write+0x141/0x250
[  208.984954][ T7637]  ? xfd_validate_state+0x68/0x150
[  208.990140][ T7637]  ? __cfi_ksys_write+0x10/0x10
[  208.995029][ T7637]  ? __kasan_check_write+0x18/0x20
[  209.000225][ T7637]  ? fpregs_restore_userregs+0x11d/0x260
[  209.005927][ T7637]  __x64_sys_write+0x7f/0x90
[  209.010551][ T7637]  x64_sys_call+0x271c/0x2ee0
[  209.015266][ T7637]  do_syscall_64+0x58/0xf0
[  209.019742][ T7637]  ? clear_bhb_loop+0x50/0xa0
[  209.024617][ T7637]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  209.030565][ T7637] RIP: 0033:0x7f004538ebe9
[  209.035011][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.054671][ T7637] RSP: 002b:00007f00461e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  209.063232][ T7637] RAX: ffffffffffffffda RBX: 00007f00455c5fa0 RCX: 00007f004538ebe9
[  209.071254][ T7637] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000007
[  209.079260][ T7637] RBP: 00007f0045411e19 R08: 0000000000000000 R09: 0000000000000000
[  209.087265][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.095262][ T7637] R13: 00007f00455c6038 R14: 00007f00455c5fa0 R15: 00007ffe2a256338
[  209.103290][ T7637]  </TASK>
[  209.106348][ T7637] ---[ end trace 0000000000000000 ]---
[  209.137213][ T7637] SELinux: failed to load policy