last executing test programs:

26.974848885s ago: executing program 3 (id=218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

26.964536575s ago: executing program 3 (id=219):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, &(0x7f00000002c0)=""/157, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=""/82, 0x1})
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000180)={0x3})
write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2020, @empty}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x4ba, 0x4)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x2})

26.803306397s ago: executing program 3 (id=222):
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x7}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
splice(r3, 0x0, r4, &(0x7f0000001580)=0x3, 0x9614, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

26.763974658s ago: executing program 3 (id=224):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
r1 = gettid()
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/183, 0xb7}], 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETPERSIST(r2, 0x400454cc, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r4=>0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4)
timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async)
timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b46a2c10b4070a010b01010203010902240001010000000904d602022b57330009050402100000fa00090581024000003d01"], 0x0) (async)
r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b46a2c10b4070a010b01010203010902240001010000000904d602022b57330009050402100000fa00090581024000003d01"], 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000380)={0xdb, 0x0, 0x8})
syz_usb_control_io$printer(r8, 0x0, &(0x7f00000007c0)={0x34, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5e}, &(0x7f0000000800)=ANY=[], &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xad}})
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x7fff], 0x4}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socketpair(0x21, 0x6, 0x4021, &(0x7f00000002c0)) (async)
socketpair(0x21, 0x6, 0x4021, &(0x7f00000002c0))

26.588175981s ago: executing program 3 (id=231):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0)

26.452170803s ago: executing program 3 (id=236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

26.393660234s ago: executing program 32 (id=236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

7.265862711s ago: executing program 4 (id=403):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')

7.259962681s ago: executing program 4 (id=405):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r0}, r1, 0x12, @inherit={0x58, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x2, {0x18, 0x200, 0x30, 0x2d8, 0x5}, [0x1, 0x3]}}, @subvolid=0x80})

7.242882281s ago: executing program 4 (id=406):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
accept4$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) (async)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000)
getsockopt$packet_int(r5, 0x107, 0x18, 0x0, &(0x7f0000000100)) (async)
bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)=']}%!:\xb9+\x00\x99\n\x00\x00\x00\x00\x00c\x86\xbaq\xbd\xf1\f\xfc\xfa?\xcb(e\xe5\xf7a\xf9\v\x8e\xa2\xb6\x9f\xbd~\xc4\xa1n\x94\xa8\xad\x19\xcf\x13\xb9\xe3\xc2/L\xb3{\xcd[\x10ooP\xae\x98\x86\xef') (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) (async)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7)
fcntl$getownex(r7, 0x10, &(0x7f0000003640)) (async)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x8050000)
write$rfkill(r6, 0x0, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x2)

7.087757913s ago: executing program 4 (id=409):
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket(0x11, 0x3, 0x4000000)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x40}, 0x18)
r8 = socket$inet6(0xa, 0x3, 0x3a)
dup3(r6, r8, 0x80000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.917618786s ago: executing program 4 (id=410):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x90000, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r2, 0x293f000)

6.815826607s ago: executing program 4 (id=411):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async)
r0 = userfaultfd(0x80001) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40087705, 0x7)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000856000/0x1000)=nil, 0x1000}, 0x3}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = dup3(r4, r5, 0x80000)
read$usbmon(r6, &(0x7f0000000000)=""/100, 0x64)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e439478dcfbdc7bac69d78e52958f50599389a6006ce6d32d38987c66d5b1f3c6af2441682a121bb459996c0b05e8a6d80d3cbe4cae63bdf79a8968a9f38bc94880af4a0a40fb527a9ed838d02e49c8f15ba339eb4bb3e3c278179043e707c5117957a1c555d06ff09407d4d2a77fe793ce4b222e69edab1b23ea01c18fc093571ea100a37b4decaf3dc9094254c709617f7c4a8456af30939a028affae20fb6337b3051d24a", @ANYRESHEX=r3, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYRES64=r3, @ANYBLOB="58aa1a2c4ea520cc6943cf12c1b5475d32e60029b0d9dd0a67b0a894b800957162be078ae00648700776106dfc9d1f3429bef39a670b4e4c1e35f5910f8d9a0c06bf5ab60c16a04001af9b40b7731d077c45af603c36506c5d3094190122ec08053f2c787074f5521acf302184a20c2bc583fa004bcf21cd7c535769b53dd2b4aa0d35f529953be4b93873900e89533db0b8cb6292b5a7f63fa923adcd98c9c8d708150413408657f4d6c63ce7ced93ef75d716bc47fd9dffb012fa7d0fce59327abf96f59b3ceab8c1a8147c64de73c8f7a99973244de7c98c10044de641be59ecf14abf4c8374821570f"])

6.710657849s ago: executing program 33 (id=411):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async)
r0 = userfaultfd(0x80001) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40087705, 0x7)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000856000/0x1000)=nil, 0x1000}, 0x3}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = dup3(r4, r5, 0x80000)
read$usbmon(r6, &(0x7f0000000000)=""/100, 0x64)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e439478dcfbdc7bac69d78e52958f50599389a6006ce6d32d38987c66d5b1f3c6af2441682a121bb459996c0b05e8a6d80d3cbe4cae63bdf79a8968a9f38bc94880af4a0a40fb527a9ed838d02e49c8f15ba339eb4bb3e3c278179043e707c5117957a1c555d06ff09407d4d2a77fe793ce4b222e69edab1b23ea01c18fc093571ea100a37b4decaf3dc9094254c709617f7c4a8456af30939a028affae20fb6337b3051d24a", @ANYRESHEX=r3, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYRES64=r3, @ANYBLOB="58aa1a2c4ea520cc6943cf12c1b5475d32e60029b0d9dd0a67b0a894b800957162be078ae00648700776106dfc9d1f3429bef39a670b4e4c1e35f5910f8d9a0c06bf5ab60c16a04001af9b40b7731d077c45af603c36506c5d3094190122ec08053f2c787074f5521acf302184a20c2bc583fa004bcf21cd7c535769b53dd2b4aa0d35f529953be4b93873900e89533db0b8cb6292b5a7f63fa923adcd98c9c8d708150413408657f4d6c63ce7ced93ef75d716bc47fd9dffb012fa7d0fce59327abf96f59b3ceab8c1a8147c64de73c8f7a99973244de7c98c10044de641be59ecf14abf4c8374821570f"])

4.371064824s ago: executing program 1 (id=419):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) (async)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r4, 0x0, 0x0, 0x1001f0) (async)
read$FUSE(r4, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

4.325905475s ago: executing program 1 (id=420):
io_setup(0x59d8, &(0x7f0000000100)=<r0=>0x0)
r1 = timerfd_create(0x7, 0x80400)
io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfeff, r1, &(0x7f0000000140)="6fb986f8d4c8d4c8bae3d469306506657d76e32263fc39c5e8b9e1c29407974216fcf5d22ba42f29990cc80e3c1b510df813dc6b8182a3caa1242813072473c843754ff05a743c07b503dee428bd340c83df8a40ba29b785015c84ce16bf3657b09d59c95f4de8f06801929a75b7cfdc63c4fbc570fee1f8d7f95bfbfe0a213f", 0x80, 0x0, 0x0, 0x3}, &(0x7f0000000200))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
close(r4)
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r2, 0x4d75d000)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000240)={0x6, 0x5})

4.112096148s ago: executing program 1 (id=421):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
keyctl$set_reqkey_keyring(0xe, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x0, 0x1000000})

4.110189678s ago: executing program 1 (id=422):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@exit_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

3.620128865s ago: executing program 5 (id=431):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x81, 0x1, 0x1, 0x7, 0x16, "019840ba11f09fe84100f431de0434f397ab72"})
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TIOCGICOUNT(r0, 0x5409, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xffffffffeed6b53c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)

3.206694411s ago: executing program 1 (id=440):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) (async)

3.193497892s ago: executing program 1 (id=441):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1002, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[@cpuid={0x2, 0x18, {0x9, 0x9}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x80, 0x2}}, @uexit={0x0, 0x18, 0x54}, @uexit={0x0, 0x18, 0x7ff}, @cpuid={0x2, 0x18, {0x1000}}, @code={0x1, 0x67, {"66bad104b071eec7442400fdffffffc74424020a000000c7442406000000000f011424420f32660f2b9c7afe660000c441b2588300800000f3420fc7b487f89c000066baa000ec45f40f20138fa848ee8d3200000010"}}, @cpuid={0x2, 0x18, {0x101, 0xa4}}, @code={0x1, 0x49, {"f3460f234bc4231d7a0398660f5d1db280000066430fdb2066b821018ee0c16a275a66ba6100ed66450f153f66b82c000f00d864410f01c8"}}], 0x158})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000240)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000200)=0xc})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0xc1da, 0x804a080, 0x0, 0x3, 0x1, 0xfffffffc, 0x0, 0x0, 0x20, 0x3}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_IOCTL(r5, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x3, 0x4, 0x101, 0xe}}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

3.095773843s ago: executing program 5 (id=443):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e00000010000000058000000000000000000000007000000441c7910000000020000023200070000000c00000001442c6d73e0000002"], 0xb0}, 0x408b0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = getpid()
sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1028bd7000fddf25"], 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, r6, r7}}}], 0x20, 0x4}, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r6, &(0x7f00000003c0))
process_vm_writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/152, 0x98}, {&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000280)=""/219, 0xdb}], 0x3, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}, {0x0}], 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x16, 0x0, 0x101}})
r13 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r13, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r13, 0x1, 0x12, &(0x7f00000000c0)=0x1000005, 0x4)
sendmmsg$inet(r13, &(0x7f00000031c0), 0x0, 0x8001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r11, 0x2000)

3.052414224s ago: executing program 5 (id=444):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x1100, 0x2})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
sched_setscheduler(r1, 0x6, &(0x7f00000002c0)=0xfffffffd)
getpid() (async)
r2 = getpid()
capget(&(0x7f00000005c0)={0x20080522, r2}, &(0x7f00000025c0)={0x3ff, 0x2, 0x0, 0x4, 0xfffffffe, 0x101})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c3) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c3)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x200036, 0x4)
ioctl$TCGETS(r3, 0x5401, &(0x7f0000000300))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x32600)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r4, 0x0)
cachestat(r4, &(0x7f0000000200)={0xffffffffffffffff, 0x80000000}, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x30, &(0x7f0000000580))
syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
lseek(r6, 0x40008, 0x0) (async)
lseek(r6, 0x40008, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0) (async)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x26c080)
syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00030400000004032484191660dbc9af4cacf39b22d1572374a0397523b373f503d0542061aa5010eac33df8d5cff75220843b2d32ce937f20f45c1199147c548ad95d40169628e911f1e2486f4b1a7d045abd95d4faae4e16a390b64298372881be234162df5598604e57c8"], 0x0, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x613}}}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

2.890789806s ago: executing program 5 (id=445):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x2c, 0x6b, 0x8}, {0x34, 0x2, 0x9, 0xf}]})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x9)
r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x101, 0x7, 0x9}, {0x68, 0x2, 0x2, 0x3}, {0x6, 0x81, 0x2, 0x100}, {0x800, 0xff, 0x6, 0x3}, {0x9, 0xcc, 0x0, 0x4915e6ab}, {0x708b, 0x6, 0x39, 0x10}, {0xd798, 0x1, 0xb, 0x10000}, {0x6, 0x6, 0xc, 0x6}, {0x0, 0x5, 0xff, 0x9}]}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x303102, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000240))
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000280)={{0x3, 0x0, 0x80, {0xeeee8000, 0xd000, 0x3}}, "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", "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"})
r4 = syz_open_dev$usbfs(&(0x7f0000002300), 0x4, 0x1)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000002340)={0x4, 0x5, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
connect$inet6(r4, &(0x7f0000002380)={0xa, 0x4e20, 0x552, @rand_addr=' \x01\x00', 0x7}, 0x1c)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000023c0), 0x2840c0, 0x0)
r8 = creat(&(0x7f0000002400)='./file0\x00', 0x82)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000002440)={0x10000, 0x1, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
mknodat(r8, &(0x7f0000002480)='./file0\x00', 0x8000, 0x2)
ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000002500)={0x7, &(0x7f00000024c0)=[{0x8001, 0x2, 0x85, 0x1}, {0x8, 0x6, 0xe, 0x6}, {0x1000, 0x6d, 0xfa, 0x1}, {0xd, 0x3, 0x1, 0x80000000}, {0x7, 0x2, 0xe, 0xd}, {0x81, 0xa, 0x9}, {0x8, 0x33, 0x7, 0x200}]})
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000002540)={0x5, 0x0, @ioapic={0xdddd0000, 0xffffffff, 0x3, 0x1, 0x0, [{0x7a, 0x2, 0xf4, '\x00', 0xc}, {0x8, 0x3, 0x0, '\x00', 0x3}, {0xc, 0x9, 0x6, '\x00', 0x52}, {0x9, 0x3, 0x2, '\x00', 0x7}, {0x7, 0x5, 0x6, '\x00', 0x29}, {0xe, 0x9, 0x3, '\x00', 0x2}, {0x62, 0x5, 0x0, '\x00', 0xf7}, {0xcf, 0xfe, 0x1, '\x00', 0x79}, {0x2, 0x5, 0x4, '\x00', 0x70}, {0x2, 0x2, 0x9, '\x00', 0xff}, {0x1, 0x0, 0x3, '\x00', 0x7}, {0x0, 0x7, 0x5, '\x00', 0x3}, {0x8, 0xd, 0x2, '\x00', 0xe3}, {0xdb, 0x8, 0x77, '\x00', 0x3}, {0x4, 0x0, 0x32, '\x00', 0x8}, {0x3, 0x80, 0x18, '\x00', 0xb}, {0xfc, 0x0, 0x1, '\x00', 0xd}, {0x1, 0x4, 0x6, '\x00', 0x17}, {0x10, 0x7, 0x5, '\x00', 0x40}, {0x4, 0x9, 0xfa}, {0xfa, 0xb, 0x3, '\x00', 0x6}, {0x0, 0x2, 0xe, '\x00', 0x1}, {0xd, 0xf, 0x5}, {0x8, 0xe, 0x1, '\x00', 0x4}]}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x5800600}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x20, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7a, 0x4e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
getdents64(r8, &(0x7f0000002880)=""/7, 0x7)
ioctl$TCSBRKP(r7, 0x5425, 0x7e31)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000028c0), 0x280, 0x0)
sendmsg$OSF_MSG_REMOVE(r10, &(0x7f00000037c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003780)={&(0x7f0000002940)={0xe0c, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x3}, 0xe2, 0xb, 0x1, 0x6, 0x1d, 'syz0\x00', "72857d0646cbe65b13d1c0fcaf2b0f7dca1d0bb5d58a4066731cb60caf5dd56c", "f817a9f8c3f56563a3a83744ff080b5b41149d7c8d6560a1e18302c207764811", [{0xf, 0x5, {0x1, 0x5}}, {0x8, 0x7, {0x1}}, {0x5, 0x0, {0x2, 0x2}}, {0x7973, 0x1, {0x19cd194711c60e04, 0x6}}, {0x0, 0x7fff, {0x1, 0xac}}, {0xfffa, 0x101, {0x1, 0x1}}, {0xff, 0x5, {0x1}}, {0x4, 0x4, {0x3, 0xfffffff7}}, {0x4, 0x6, {0x0, 0x80000001}}, {0x1ff, 0x4, {0x3, 0x7}}, {0x8001, 0xaae, {0x1, 0x9}}, {0xe2c, 0x7, {0x0, 0x4}}, {0xe, 0x7fff, {0x1, 0x10}}, {0x6, 0xd55, {0x0, 0x7}}, {0x5, 0x6, {0x1, 0x6}}, {0x4, 0x100, {0x0, 0x4}}, {0x4, 0x10}, {0xff80, 0x36, {0x1, 0x8}}, {0xcdb, 0x8, {0x3, 0xffff}}, {0xe, 0xcd88, {0x0, 0x6}}, {0x4, 0x1000, {0x2, 0x8db}}, {0x8, 0x0, {0x0, 0x18}}, {0x5d8e, 0x7fff, {0x3, 0xe}}, {0x338, 0x5, {0x0, 0x5}}, {0x81, 0x1, {0x2, 0x7}}, {0x0, 0xa24d, {0x2}}, {0x2, 0x0, {0x0, 0x8}}, {0x8a80, 0x5, {0x0, 0x6}}, {0xc305, 0x2, {0x1, 0x1}}, {0x9a, 0x8, {0x2}}, {0x40, 0x2, {0x0, 0xfffffff7}}, {0x4, 0xff, {0x2, 0x10}}, {0x81, 0x5, {0x0, 0x101}}, {0xff63, 0x9, {0x3, 0x1}}, {0x1, 0x8, {0x1, 0x2}}, {0xfc3, 0xf825, {0x2, 0xa207}}, {0xc, 0xfffb, {0x0, 0x4}}, {0x7, 0x7391, {0x2, 0xffff}}, {0x8, 0x3246, {0x1, 0x8}}, {0x1, 0x4, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x4, 0x0, 0x3, 0x5, 0x15, 'syz1\x00', "7191b76277fca83bd30eef9fb6a7167311faa23c0e3c654a381821b41828a7f5", "147495e49b9c301b6a2f44fa58540a318941db0d89fe2e9ebfb6a61bff50d206", [{0x2, 0x6, {0x0, 0xa}}, {0x8001, 0x800, {0x1, 0x9}}, {0x10, 0x2, {0x0, 0x1000}}, {0x4000, 0x2, {0x2, 0x3}}, {0x2b3f, 0x1, {0x3, 0x3}}, {0xffff, 0x4, {0x2, 0xffffe907}}, {0x8, 0xdb6d, {0x0, 0x1000}}, {0x3, 0x4, {0x3, 0x7}}, {0x0, 0x0, {0x1, 0x4}}, {0x2, 0x3, {0x2, 0x8}}, {0x1000, 0x924, {0x0, 0x3}}, {0x2, 0x2e0, {0x0, 0x3}}, {0xd, 0x5, {0x3, 0xb}}, {0x5, 0x6, {0x3, 0xfffffffd}}, {0x80, 0x725, {0x0, 0x7ff}}, {0x9, 0x9, {0x0, 0x10000}}, {0x8, 0x6, {0x3, 0x4e}}, {0xa, 0x10, {0x0, 0x8}}, {0x400, 0x4, {0x3, 0x2}}, {0x8a7d, 0x5, {0x1, 0x4}}, {0x515a, 0x3, {0x3, 0x2}}, {0x6, 0x730, {0x3, 0x4}}, {0x4, 0x6, {0x3, 0x4}}, {0x1, 0x6, {0x2, 0xffff2943}}, {0x6, 0xf000, {0x0, 0xfffffffd}}, {0xd, 0x2459, {0x88e5056f5ab05184, 0x7}}, {0x2, 0xfff7, {0x2, 0x7}}, {0x4, 0x0, {0x0, 0x7f3c924a}}, {0x4, 0x9, {0x2, 0x101}}, {0x8, 0x1, {0x0, 0x80}}, {0x5, 0x9, {0x1, 0x454}}, {0xb000, 0x6, {0x2, 0x101}}, {0x9, 0x4, {0x3, 0xdb}}, {0x7, 0x400, {0x0, 0x7}}, {0x40, 0x5, {0x3, 0x87b}}, {0x5, 0xd44e, {0x1, 0x480}}, {0x4, 0xfff9, {0x1, 0x10000}}, {0xe, 0x8, {0x3, 0x7ff}}, {0x3, 0x4, {0x2, 0xd6}}, {0x7, 0x33f9, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xe9, 0x7, 0x3, 0x4, 0x1f, 'syz0\x00', "ebc984e47c9c991e21147c53ebc9aa77861d139f66c9f6bc202ac2c39dfa8bde", "37afb430509183123e4b69373b887d5fb66f24508d4b235c5fbf717afe4dce80", [{0x3, 0x3ff, {0x0, 0x7}}, {0x23, 0x2f9f, {0x6, 0x10000}}, {0x8, 0x6, {0x2, 0x8}}, {0x190, 0x5, {0x3, 0x2}}, {0x2, 0x7a81, {0x1, 0x5}}, {0x1, 0x8, {0x2, 0x52ae}}, {0x1, 0xc0, {0x1, 0x4}}, {0x7, 0xcb1, {0x3, 0x7fffffff}}, {0x0, 0x6, {0x3, 0xffffff7f}}, {0x7, 0x2, {0x0, 0x1573}}, {0x101, 0x5, {0x0, 0xd}}, {0x1, 0x65, {0x2, 0x1}}, {0x0, 0x1f, {0x0, 0x4}}, {0xc000, 0x1, {0x1, 0x401}}, {0x4, 0xc, {0x1}}, {0xa2, 0x3, {0x0, 0x7}}, {0x9, 0x280, {0x1, 0x8}}, {0x7f, 0x8, {0x3, 0xeb02}}, {0x79e, 0x4, {0x3, 0x200}}, {0x3, 0x301, {0x0, 0x8}}, {0x7, 0x11, {0x3, 0x1ff}}, {0xd, 0xf550, {0x1, 0x8}}, {0xfffc, 0x4, {0x2, 0x80000001}}, {0x7, 0x8, {0x3, 0x9}}, {0x4a, 0x6, {0x2, 0x80}}, {0x81, 0x1000, {0x0, 0x4}}, {0x4b, 0xbcc0, {0x1, 0x1000}}, {0x5, 0x5, {0x3}}, {0x8, 0x5dc, {0x0, 0x3}}, {0x1e, 0xca, {0x3, 0x80000000}}, {0x1, 0x2, {0x3, 0xa}}, {0x3, 0x4, {0x2, 0x5}}, {0x8, 0x400, {0x1, 0x30}}, {0x6, 0x1, {0x1, 0x81}}, {0x4, 0x2, {0x728b48904942a3a0, 0x9ea}}, {0xfffb, 0x2, {0x0, 0x4}}, {0x280f, 0x6, {0x1, 0x9}}, {0x94e, 0xffff, {0x1, 0x100}}, {0x10, 0x28f8, {0x1, 0xfffffff3}}, {0xf7, 0x9, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x1, 0x5, 0xf000, 0x5, 0x18, 'syz1\x00', "f2b052178dcc66a2388519bfa7599f174c8f025060d79bf6deb43a1b6b13b357", "7f0a2fba1826811a05b1abd1accbb71f8e610be6166d753b6445cac960bad382", [{0x9, 0x2, {0x3, 0x3}}, {0x8, 0x2, {0x2, 0xfffffc01}}, {0x81, 0x6af, {0x3, 0xdc165400}}, {0x0, 0x5, {0x1, 0x9}}, {0x7, 0x2, {0x0, 0xe}}, {0x5, 0x3, {0x2, 0xf4}}, {0x6, 0x8000, {0x0, 0x200}}, {0x4, 0x9, {0x3, 0x2}}, {0x1, 0x9, {0x2, 0x2}}, {0x2, 0x5, {0x0, 0x10}}, {0x1, 0x9, {0x2, 0x2}}, {0x400, 0x1e61, {0x1, 0x1000}}, {0x8, 0x2, {0x2, 0x4}}, {0x0, 0x3ff, {0x1, 0x6}}, {0x0, 0x5, {0x3, 0x3}}, {0x9, 0x21, {0x0, 0x4}}, {0x8001, 0xffff, {0x2, 0x6}}, {0xf164, 0x3, {0x1, 0x6}}, {0x6, 0x6, {0x2, 0x5}}, {0x2, 0x8, {0x1, 0xb}}, {0x0, 0x8d3, {0x3, 0x6}}, {0x9, 0x6, {0x0, 0x3}}, {0x100, 0xc, {0x0, 0x5d}}, {0x7, 0x29, {0x2, 0x8}}, {0x1, 0x4, {0x2, 0x80000000}}, {0x4, 0x8, {0x0, 0x3}}, {0x3ff, 0xfffc, {0x3, 0x5}}, {0x1, 0x8, {0x0, 0x1}}, {0x0, 0xb4, {0x3, 0xfffffff7}}, {0x5, 0x3, {0x0, 0x18}}, {0x8, 0x6ec7, {0x1, 0x10001}}, {0x4, 0x94d8, {0x2, 0x6}}, {0x7f, 0x7, {0x0, 0x8}}, {0x2cb3, 0x605f}, {0x80, 0x9, {0x3, 0x400}}, {0xe3, 0x2, {0x1, 0x1}}, {0x8, 0x4, {0x3, 0x6}}, {0xfff7, 0xc, {0x0, 0x7}}, {0xb, 0x1000, {0x0, 0x80000000}}, {0xe, 0x1, {0x0, 0x8ce}}]}}}, {{0x254, 0x1, {{0x1, 0xfbd}, 0x6, 0xc, 0xa9, 0x81, 0x3, 'syz1\x00', "75c98a2e5cd271b418ff120156431e01f462472d858491b14c66b05160b976bd", "2cac04f6d8968a4a3c2ea49205470648abe6b2d80d10d5e01c07398239f05a60", [{0x7f, 0x7fff, {0x2, 0xd6f9}}, {0x5, 0x0, {0x1, 0x23a}}, {0x7, 0x0, {0x1, 0x4}}, {0x2, 0xb3, {0x1, 0x2}}, {0x1, 0xf, {0x3, 0x1}}, {0x5, 0x6, {0x2, 0x3}}, {0x81, 0x9, {0x2, 0x82}}, {0xb, 0x6, {0x3, 0x45d}}, {0x7, 0x2, {0x3, 0x5}}, {0x52d5, 0x8, {0x3, 0xb4}}, {0x8, 0x6, {0x3, 0x5}}, {0x4, 0x9, {0x2, 0x80}}, {0x32, 0x1, {0x2, 0xc2}}, {0x8001, 0x2, {0x1, 0x9}}, {0x81, 0x6, {0x1, 0xbaa2}}, {0x9, 0x2, {0x1, 0xb}}, {0xc, 0x8, {0x1, 0x8000}}, {0x6, 0x4, {0x2, 0x1ca1}}, {0x4370, 0x3, {0x3, 0x4}}, {0x3766, 0x800, {0x3, 0x9ff1}}, {0x400, 0x7, {0x3, 0x1}}, {0x3, 0x8, {0x1, 0x6}}, {0xe, 0x400, {0x1, 0x7}}, {0x3, 0xa92, {0x2, 0x38c}}, {0x2, 0x800, {0x1, 0x2}}, {0xfff7, 0x8000, {0x2, 0xfff}}, {0xff00, 0x9d56, {0x1, 0x6}}, {0xfff, 0x9e97, {0x2, 0x6}}, {0x7, 0xe4c9, {0x0, 0x5f00}}, {0x0, 0xfffe, {0x2, 0x2}}, {0x2, 0xff, {0x2, 0x3}}, {0x7, 0x7f, {0x1, 0x7}}, {0x75, 0x101, {0x2, 0xfffffff9}}, {0x1, 0x8e2, {0xd43a84163e9bc561, 0x5}}, {0xff, 0x1, {0x0, 0x6}}, {0x6, 0x4, {0x2, 0x8}}, {0x8, 0xf000, {0x0, 0x3}}, {0xd, 0x5, {0x4e6ce1eba6be1538, 0x6}}, {0xd, 0x3, {0x1, 0x8}}, {0x0, 0x3, {0x2, 0x80000000}}]}}}, {{0x254, 0x1, {{0x3, 0x4f0}, 0x3, 0xe6, 0x9, 0x1, 0x4, 'syz0\x00', "cd1c7ce90bdf5b533ca1b0229eeec29259a5febc79a320bcac4852b8d8778937", "fae6352a9cc2cf51c78a3a1c3b4d4206941270e3363a24d2adbf89eb8ee1de22", [{0xd56, 0xf, {0x0, 0x8000}}, {0x4, 0x1, {0x3, 0x6}}, {0x29d3, 0x40, {0x3}}, {0x401, 0x44c, {0x0, 0x3ff}}, {0xfff9, 0x7, {0x3, 0x7}}, {0x3, 0xf, {0x3, 0xbfd3}}, {0x2, 0x8, {0x1, 0x6}}, {0x4, 0x1000, {0x0, 0x9}}, {0x1, 0x8, {0x3, 0x2}}, {0x1000, 0x3, {0x1, 0x9}}, {0x300, 0x7fff, {0x2, 0x38}}, {0xd3f7, 0xfd, {0x2, 0x628}}, {0x81, 0x2, {0x3, 0x3}}, {0x0, 0x1000, {0x619abdee30b90e92, 0xe}}, {0xfff7, 0xf000, {0x1, 0x47fc}}, {0x7, 0x800}, {0x0, 0xffff, {0x0, 0x490f}}, {0x0, 0xfffd, {0x3, 0x5}}, {0x2, 0x101, {0x3, 0x7}}, {0xb, 0x8, {0x2, 0x3}}, {0xec, 0x0, {0x3, 0x6}}, {0x41, 0x1, {0x3, 0x5}}, {0xf, 0x1, {0x3, 0xffffffff}}, {0x7, 0x5, {0x2, 0x3}}, {0x66fb, 0x6, {0x2, 0x8}}, {0x0, 0x2, {0x2, 0xd}}, {0x6, 0x9, {0x0, 0xfffffffa}}, {0x7, 0xffff, {0x3, 0x8001}}, {0x4, 0x4, {0x2, 0x6}}, {0x0, 0x3, {0x3, 0x1}}, {0x5, 0x1, {0x2, 0x4}}, {0x0, 0x5, {0x2, 0x1}}, {0x6, 0x3, {0x0, 0x200}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x2}}, {0x0, 0x2, {0x1, 0x5}}, {0x0, 0x1, {0x2, 0xb77145b}}, {0x8000, 0x9, {0x3, 0x4}}, {0x7ff, 0x8000, {0x1, 0x6fe}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x20000800}, 0xa8f2aae12a121c22)

2.890274236s ago: executing program 5 (id=446):
prctl$PR_SET_IO_FLUSHER(0x39, 0x4)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x90)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='pimreg0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='pimreg0\x00', 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

2.843704687s ago: executing program 5 (id=448):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902820002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000c241b070005008e0118000f05240103010724140200090006240700794008241c09000408000905810300040100000904010000020d00000904010102020d00cc10"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xd, 0x10, 0x10, 0x10, 0x6, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r5 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x7, 0x4e24, 0x6, 0xa, 0x20, 0x20, 0x2f, r6}, {0x0, 0x1, 0x4, 0x4, 0x757, 0x1ff, 0x11}, {0x5, 0x8, 0x7, 0x84}, 0xff99, 0x6e6bb3, 0x2, 0x0, 0x3, 0x2}, {{@in=@local, 0x4d3, 0xff}, 0x2, @in=@remote, 0x3502, 0x1, 0x0, 0xfc, 0xfffffffd, 0x8, 0x96e}}, 0xe8)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.859267772s ago: executing program 0 (id=461):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)='e\x00', 0x10)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.846477492s ago: executing program 0 (id=462):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0x3, 0x9, 0x5, 0x81, 0x7, 0x9})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000140)=0x8000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000001c0)=0x86)
preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1, 0xe, 0xffffffff, 0x1)
r3 = syz_open_dev$rtc(&(0x7f0000000340), 0x5, 0x212002)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0xc, 0x24, 0x13, 0x6, 0x3, 0x2, 0x2, 0x9c, 0x1})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x844800, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000400))
socket(0x25, 0x1, 0x9)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a00)={0xc8, 0x0, &(0x7f0000000840)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x5, 0x0, 0x15}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f00000006c0)={0x0, 0x18, 0x38}}}, @acquire_done, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x7, 0x0, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f0000000700), 0x0, 0x1, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/33, 0x21, 0x2, 0x11}}, &(0x7f0000000800)={0x0, 0x20, 0x48}}}], 0xbc, 0x0, &(0x7f0000000940)="b8952a15acd72c1c124de58e9967588a1ea60eeee514f4215d42820f78c41db1be1f716e1ca76f94982ed45721b219437fb41243880ef2cbd5520d5be05dc43d643d5c23ad377ee6e7b31f7a7d04d0213e9711c38cf78f79cb0347b8a1b3055516f263ff1b936022b165fcc395284ca133def4df90760a081b7d6da5e4840cd6a731701a2d0dea4aebaa54ebe9e74744023e266a6792dff8937691706160c2bd167262cf9ae869fe549715bd73d21e5d90660a426eb84dc2915c9061"})
capget(&(0x7f0000000a40)={0x20080522, r0}, &(0x7f0000000a80)={0x9, 0xc30000, 0x9, 0x7, 0x9, 0x2})
r6 = fsmount(0xffffffffffffffff, 0x1, 0x70)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000ac0)={0x101ff, 0x4, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r7 = accept4$unix(r6, &(0x7f0000000b00)=@abs, &(0x7f0000000b80)=0x6e, 0x800)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000c80)={'veth0_to_team\x00', &(0x7f0000000bc0)=@ethtool_perm_addr={0x20, 0x9e, "8ae850a678fecb369581b7dd780e29d144214d8bb57f233019bf573e84b57be3491f0d62c029c73c853650f97fe25701a4f3e9f38ff7d2db5d6fce584605393532ac2271e3cb474140673e6eed4629b993b55a7ad22f30ed967ea15b9e583359a5440cd40303e11d09ce8b0b7e499521d7f3489bf8c0c2a6855d7b553977a28e98b38ea1fe9d23b63335b7e71c8dcc396b03d302f93c8a246215096d86ca"}})
write$rfkill(r6, &(0x7f0000000cc0)={0xff, 0x2, 0x2, 0x0, 0x1}, 0x8)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d00), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f0000000d40))
r9 = syz_open_dev$evdev(&(0x7f0000000d80), 0xfffffffffffffe01, 0x10000)
ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000000dc0)={0x2, 0x1, 0xc000000, 0x3, 0x6})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
capset(&(0x7f0000000e00)={0x20071026, r0}, &(0x7f0000000e40)={0x7, 0x7, 0x8, 0x6, 0x1, 0x4})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000e80))
mount$9p_fd(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x1000002, &(0x7f0000001140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@afid={'afid', 0x3d, 0x2}}], [{@uid_eq}, {@appraise}, {@appraise}, {@uid_gt}]}})

1.764134073s ago: executing program 0 (id=463):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)

1.763867913s ago: executing program 0 (id=464):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000020603000000000000000000000000001e70a8a566"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) (async)
sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xe26}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x400000000) (async)
r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x400000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0})

1.648044165s ago: executing program 0 (id=467):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000525000/0x800000)=nil, 0x800000}, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x80000)
sendfile(r4, r4, &(0x7f0000000000)=0x9, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = getuid()
r9 = getegid()
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2500a0, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}], [{@smackfstransmute={'smackfstransmute', 0x3d, './binderfs/binder1\x00'}}, {@obj_role={'obj_role', 0x3d, 'vlan0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'vlan0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'vlan0\x00'}}]}})
getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000040))
write$hidraw(r5, 0x0, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
userfaultfd(0x80001) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000525000/0x800000)=nil, 0x800000}, 0x4}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
pipe(&(0x7f0000000100)) (async)
dup3(r3, r2, 0x80000) (async)
sendfile(r4, r4, &(0x7f0000000000)=0x9, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
getuid() (async)
getegid() (async)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2500a0, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}], [{@smackfstransmute={'smackfstransmute', 0x3d, './binderfs/binder1\x00'}}, {@obj_role={'obj_role', 0x3d, 'vlan0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'vlan0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'vlan0\x00'}}]}}) (async)
getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000040)) (async)
write$hidraw(r5, 0x0, 0x0) (async)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)

1.647086015s ago: executing program 0 (id=468):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="6b4313672b26edfe72ee552128f4c7b046803464efb9cf0b3a22eb642ef480a7cff87351badefbe4b7af931b71b334cfbad92d7bb7aca5d7f2a1f75122ed52a54def48a01a77e96b09677ae36463d9de985b465d30f582f0d3fc564b8a1ef9c10419870aa305239aade23a199b52edfdc31466e2dbae9c5515cddc52390d9d4682dbe263207b1f97e8edf8daeaab3ba9ca826abd706887fe7393930e0f706ee3e65a0dac5d655dfcb7aabd422ce3421dd971dcb67c0442734efa00dd53b2a6061bb5cdde1d0974add0fc12fe7633ad8461fc244fcf072c1e36c63613c0037530ca8034856a20e3de26841f37d5d48838e1c1882bee5cb7435c6118bd75a8cb972684a55d8c56cddcb941ee449fc940f4c8e839ed6fffa616664a3d58dc17142e0c7f4a256b724c46100a484e17ef733da946d754d326094d7d6550fbebebdc6dfc20623a1d44ccbb840c408c0dd79ee837a92fd1cca8d1861bfe2fcf7c1cd44dadbc956865569b68874dd9d78c2e0fff97e6fd000fd339ca0fa654ff6bcc85ae08d06547939b3f3fc07655ad1de8dcde472bac4a6086e73a3b8f80b6c8afb663a6747e259504b3daa9c477ff8f6801f3faaa2ebcbf22cce17c7c9e1f76e10a0bffa4266232231201fae91b28caf43adc4142a0225519adb22de58c3bbc5de1d98fd7c923690dc7b78a0d792556c2c49f36e514ebe24118319f23bcd99e009c124760fde15eb9d7c347a5f6d429e400fc635d9b9940e9b59b04f9307006d233cbb421627c61774bc866d8b3a435339f0465ebc1ccbce250f608f9403bdb9cfa71de67af4815f4587becda020713babd7428d401d5311f252d6131b677153a62092c4a105bf7b9a64475701f57c344cd1acde12185223562d68b73b108cc0dd5def80b38b8de0ab8f179a2c2c5b3a09c3f87354c1df4387331e1b8c8789a6f8e29ce90cbc6c14af1f0a2b672e51aa18d4fbfedd1ae1b18f586d7ff0f021e8929050c82b4d1c1e2bd79c3b7953a7264dece1f66860110ce7927cfd73b5535683abdb824a6c09e74b196a025c076e7f806ac5bf9943a8cf00b3a4b1d1b8895c4a5abfa449172503f3dd0dc5c66e8bce01e7583241779e6a02d26be48824986cfea1bb2303cb9a2b596859717f8a6a3b45795c7d87032838e96818f9dec73a7aa6369849a702bec9fc1777b2731161064d5db3367929ea5cd37b5dd049878afdf52e4f8cd328e2bfefbdf6e50755540562e2bf165387f5a9dcf0c8eb2c8fc6fd872da9a17078cf86f7b72e0d4c1c9f83f4a7f24d05f0bdfe7583556ca9eaeb08f0d995fe96f6961c0f4f83e2145d6503958c5d2fd61986e93d00ceed186ef02eeef3b0b54563705b6817cd4b1d79c302d89c1ec0982c4a5faadcd2017b60007f712e69e85ad199d4f0d3a9e2584583d114782e9646e074685afed2521dc88259e5cad20d91f2a3e3fcab5fec31dabf196b7a055280051951c20ba4c7b7bdccac7eb1d19a986499df8a2280fd9714d3ec1ac2b5e525391d35067c46b2453b503848de66c91fbd93f4b46208e08c242366c4a9a4e9985526d04d1609a3700d016ac761c3c3148f0577d907f5ad3d9c15cb0dbb64194667277e19a00d99fc07c287422e24c54e299f6a66636e54257fe2f0edcd8c65be3c36f4865836c21109c66f2b129e6d41875ff3863441059d1b2696e04356d60bfa18987ed5629f4985a10b3438410e358595115d8457d0e294933cf09bc1c2dda796d678c0def86b9a3a9060b81cc24c260ce5deb276fe2dd6aa0a3369a1ceaa2a1521181eef2679d1fc8cb3b1513b42b3051387551a39706f62ab3ed1b9af2883a4333c5a2b40ec53b351b9cc3230afac2345295e472e1b5ee41a9950a84a0ab9717161f71ff4a2ea7b5787e644f0512f10684e708e92b9a3aad0a30e8e001cb87c94b85913daa915806dc1744dee00cd592abd4adbd0020bdb03421fa4153ab2e9185a34ec8dc1d5f9047cc8ee67e4e09270e673117d14663308009e9bbbc8766288c28f5d3d1b6fea9937761723687d06331bfe1ab9e3820013bcee5907872be4237ed4049a8d28191bc52fc039feeeb9f85675ca69f4ad9b03fde34ea4862b3f7212267f8460b9822a6aaa3d424bad2e8e8da6de1b04fb1e3f48530512c30a148269342f10e918dfaae3c95838c5404624609c010373dee5820910e12754d9ac421456423298608e519eef870f12a8ef1c5b09a538caaf568bedc89cda5cea0bde120b5fb29e2bce55490349031b949e72550be9684a36cb9fdfb67c9be0c5976b5710c29c6b4c0d80ab751c2002b0ac6940084555a5682efbe7c6d6ddf31a2f2b266202839ddea849c523ba3c79d482733adb2283a295b213c732ae03a10215a8fd2d2556b864ae8be67757bb796c6b16eadb7fe9614ec6af32dc6fbf889f4d534925918ab6e4ecc78580a16d969ca3bd3b7481322692f316d7294916a1266cc398540fc661b724dd2222b89cce259595d5807aa4f443aa6ff7f70ffb8e7291a4e6c468ff14db6a3951e6b046aa12fd9ab6ba49cc3c0fafcfee4aaf6432ddd8b4f9c33b4a9914ea19ba4a1f16bce9faf9c67c2724c73b9d8efd60b264a6a97f57dd2a0200c2f54fc7440a8ae8f069cfda9089098d893835f1ceeac1e32d30c5b6914432534a36b38f4120e1cf5ee5d91ec0715a32fbddf73c52652434a3a6f3e8c36b5921a968b9e8c81a07767a265f58896d802dd271f9319a7d6dc4f5fb45f47a5acfd57e1dfd49fa1c32ff32b16a64197bcfef0a6345418a64876463e5f113700ea618fef1bc982380ca708cd1ca0a9e14f5a39681f83ee72995ec208fa4fde217f253082fa76fdfb5913df743974336b9d1142c94cf357bcdde810330ae682532cd9604eedce1d61f1a786884b5ad92f18e5c7124ff1717aafe37729e467c7ebb44c6f4552b64efae749e52ecd62f2ac43d2fe82428d80d08fe9531fc6c1d10460097de496608293ab2fe01c5280d0ebb35170be134881a592d5de314fc391ebfa9e29668d319cb17238733735536529247a6223fc8cc90225846a8fb27fd7502a3f2a37a2f961be96436dd82b34ee278a413d10ff4a7a164f4646075f47153e9201e5990d73234d3708969946dab0053c31a1c39adccf076b813b4da2cc184dc183b2b07e3e0c696848a25105f412bb5545b812dfd945efa6ecd8aac0ce06ca0a893824ecbcd62a1660fb0b302efd914ab94f8ca337e928dc932301cec94706c108978cb20b5acd38947ed7e479933951c3ed4db9e1fce45dea307a5e80ec3348c35316dec74a7c91884c4164b81e10ffd7b69e77c029e38b525b4bfa07e833a8a9ee71d015afab5a5ccbad792319d8aeaf4db88a96dff29263170a37a0ec177aa59f2661a866eca9fd770e0bfa2e3588bd5f24638b1646a8b56650c385f098dece0cb0c497316af49153093e4fe799c277b3e40f92d06de5e1ad04cea9068e479770910c738a23c4df4ce3050850a5d66b9468f92962d06c6adca2f4afeef32b71d40cfb8fefde24607099de8ed42df1f040922344645eadb383128f922ac74e70db44b06c5be6670d8f3e9f4865decde7b058b70663ac0665c0b06a77d3aa8fa19b2e6043d9ac58d0be3aa710610304b1aecce1cab2a3447fd3dee91b797e9be1b209163b1a098b66b74c1a07613c8e812c739acd39e3da5391479143da9e35305ab11475bc82f66bc695bf2e728544eb733b6528d28d936a8fd694fb7646b20efd3b86a8f7d19918ec636510d005fc42b7ee18d32215d021265b76d3e6e282f703b2dbb186fd908de333b2b631336bdd514f3e4468c05448b019ca0f5347a2405b494491257b9cc5fe00849e94badfb75583da8e181df8a3109ca697f44a4300d2229996dad409dfa111f559d9136d8d94d099c59114638fef2218b6deff6d1b28e38b8503fba21a8bae467db9b4088c81db8e2b82ab2cae15ef86b586f8dfb281bdcbdb549bb59cfe068a1a7d10db3064350b2f4b452e941d6007c05e2286b7622d0aed341bebe7d0d9d2fbd7cfc453f392e25c2bc0f66410771b20d26cc5c7a5192f70f84f44d65ec1758ed5245784bcfee8fe9d9915196c945f0635348edc782546bff50a221142734f2734c8099f5cb61c838d55bbca924ae3524418c8505896b6624fb49e1d628b1494e3e5ba38967a7304951250ecd8de3b9be9dadc5a4e2165eef0c21c20f5293de4e801f6f0f8e6df2384b7dfb4cf35a171b50f5f7fddb72b417bc21a6fb21b96d4cc7d08a32435adafdd838970306496e5f2b7e17a3e5968ca3086a5b6982e71ff50a17620ff38755bf2e8dc501f5a584d0c014b791d8e4e194e468a79911bf7d65a5d63741b7be62dacc105913ff3b6790da881af3d60c4fa0e70a59e2dfcefdbee4f13c64986726f4ce1ce6ef95f6cfdc3263fa097a4fe3e4293ce85a3b0c081ffa053761f5d1f921dfeb50487c838493964c5f3b31c42c1abf669d45414a4c10a39e63da859f0f862398af6f02b8fc9a6cfa9bca872f2368c18bb7317ad52458ed29af4c3f364ef452a072f65f4ceee32181515e9abef2f878b7d1682980dad212ec55095b34a377c832dabf68924b42a9a10f42b7f8fd7f51dcfcc1735457176b151176df58a4e564be340cb28ee7cb74e750b56ffe733ad6d106da3e31ac8195e9432ca7c9ed08a84ce55d0633ec547f2e1d16a44ca9ad78faeda50a3f8ed07ecb8a1fcf71c673647ea9a1538b2ec209e5d3696b411c102b6a1a7a3344d908c7b361680d625560e71ff95c146b2ceda5b6b3caad50b766aeefc5a1d3fdd26b2cbb2c07b26cf80e96e41e37429654679de53d533ea39742ed29bb40b11e3b55914942a28bf4c8e07d98a86345bd503e391f1486bb34725134e205ad0c22667986a229c4e8bce1ef6837dcceb33ce25b15499400df3635c3f8a0066f0db83a4128a9dd113d2a98dc89ca5eaaae19e42e2b00a3d76dc733f429e956f1f46b1597c343a6cab48031c2db0e86217fa878a8a3f02aaad2358da03f56946cbdfbcd26272870b86c9047c46fd5ae84bde7e04a2f5b8e3542f6b8e92a7a5c37f0d4727c73ee3dab849684e52b7437e0ff215aefc666b96582838972a50b79cb6ab0d7f6a2941826b4464ee458b26d10c3a1a3f476df6746fe8a055dcb42798c33346026f507c6b741f31fe5e463f1bb4768cea27fe44d04eca3f1ec773e7d3ff6c00c0a4dd536e501a18e6363364daa7c18bf15edbc4d28bedb95afeac78b8822436c352f7583acfde229407e2bd19ba3cc0e98dd70aba414cca11b1c508207cabb4cdc605cab89e2d86805af48e872f2924bc08d87d51ee559455843170f9fe4fa2a97cc8edb39766d5d679cc95859aaf0f572825f0e3df9e7f9035e824ff10693f165d2433c59d12139d040a25ce3b9acdefeb788771b676f98b07c314dc80588c9f3267464d979e67e712bf529b4da3c172c2d7320f5a47215d6c21835bb355638c604e7ed98ce2778fe30e9082c4a528c5cddf3498825277125c55f9cab52602339ddca0c0f10eb92bdaaa09f8fb01f88df55122e6af3fba098e0d2090bfad6394d6e09f41c86b317565b10efd0cb159215e0213e92361dc1b9cd7da070ff451176d94f144a8b043c8cbfe4239fe34f2111fbe330210db548c82033cda59986373b5409885e010cdb37ff3a87d4ae2f22eac19dafea3d8a2b453f6a8999912df7ed09d02a6113ae39b2f0eb8a554d352863a6d115966de8be8259a276548c116a7c14bc23e6fadbc7613b3b40f32de8ff06af76541b9016e53280571", 0x1000}, {&(0x7f0000001040)="3ee07989499a436003c128acadbfbe1f9b6f4f3ca5bc290bdea986a72f72e2fefc3ea6fc44de575e644e0e54849a553bdfeecb62f92cfce4bc7a854c555c6281778b3755eaba6187cebe10b63e44a9332ba42955c0f4f05c9d4bd27f6e88054329bfcbd82cda30188d0cc0d28b3082d55b60fb4277f86a01025cc61d4dc4a91930c34aa0847f2d885021a7c3a9e741293499856308612d4906207df397066c453661629b29a82141d9b3d3c21ff150e6828a71fa10e74f1f2f942767c7a7", 0xbe}, {&(0x7f0000001100)="970cff882a19bcbed8e8b7d0505b25043d5a95708d93cb94e248a7c73ac98b97a57e93a8e037897292cbe2b4e1a209aba47fcc05038b39be6d3b1bd431bbe7ac56f535af036f3f81c948b68da040ce7a47b8f7da38f0d7b687f398a5ac0f60c917383df03c23fee257761b2dc921f156256396e0237cd6ee9a373254940495513d12ff28973e1082c185ab1a90f630706203bfc6a1315a12d6812593be9d36d35d0c", 0xa2}], 0x3)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
write$UHID_INPUT2(r1, &(0x7f0000001240)={0xc, {0xe7, "87225175fa2d442d3f85e661bcaf791b03dae191e56a56a0116ad1defea27e3807d1a59bad77a08d5e0e445dd2762524fa6fe674e0cb87eb930864d22cb38481d9e7db4a68c0f452df9fb47a586b113bd853819595453664d359436b009920e9ab8cf5d75bb0c2bfe044ad3c71d14bda183ed79460e18ae0c66ebb9db664b295b8bb8c16f59608bd0d79057c60e51752e61459ed3e61e4981e14ae16596fd03353db11f4d5bff05027b31f4c4be5bb9dec72d473e596ab3efa8062e703844996571bafe707f19d81768b3898187126d54fd1384d014dec4287739485bb347740e198ac63aac6f6"}}, 0xed)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup/syz0\x00', 0x200002, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001380)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000023c0)={<r2=>0x0, 0x5e3c})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000027c0)={r2, 0x2, 0xbc})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002e00)={0x2, 0x0, &(0x7f0000002bc0)=""/173, &(0x7f0000002c80)=""/245, &(0x7f0000002d80)=""/107, 0x8080000})
openat$uinput(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002e80))
unshare(0x2000000)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000002ec0), 0x4900, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000002f40)=0x1)
r5 = socket$packet(0x11, 0x1, 0x300)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000002f80)={0x0, 0x5}, 0x8)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_open_dev$hiddev(&(0x7f0000002fc0), 0x9, 0x44000)
r7 = memfd_secret(0x80000)
ioctl$HIDIOCGREPORT(r7, 0x400c4807, &(0x7f0000003000)={0x2, 0x3, 0x1})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0)
r8 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000003040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc058, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xf0, 0xda, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x10, {0x9, 0x21, 0x200, 0x7, 0x1, {0x22, 0x523}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xdd, 0x3, 0xf8}}]}}}]}}]}}, &(0x7f0000003380)={0xa, &(0x7f0000003080)={0xa, 0x6, 0x110, 0x1d, 0x0, 0xdd, 0x20, 0x9}, 0xc, &(0x7f00000030c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xd, 0x7f}]}, 0x5, [{0xb5, &(0x7f0000003100)=@string={0xb5, 0x3, "7a47470496712b972a132e04cdbe890959fd0a2cb3446e23c43c88a704248b1e1d1db7c91397a3e8f52aa1ea88753593346f0f74f072bd1c3d50c108322ba06d0b98d715309627edf08545e2c4fc88b3ca6f1b3967fb4328eb20c8ad86a300fcaec2a19dd31ceb94a52fd00c45e6cb7c6155938a877360989d724624cc83c997253cfbf6585ccbfa11b8bba98847fb94b8eb52b864b318113bdf02138de879ec3931e4db197b5ffbc5042937206a30817467f2"}}, {0xc5, &(0x7f00000031c0)=@string={0xc5, 0x3, "8c73a96450d37537bad88e71636f6bea41fda9892ef90e8058e3e3b48dcbc88eb967a71bdd5c7843af375cc5c021c7a1239fae4790118f1c129351f046e7481504b01247c3ac136884f94132b5fd3c089a237d3d6a77264e8473fa1ca166d92146e52a96c744d53be94fc213acb2dcfa7147faf240a57f7b27db6b6009413732a595a17292363bd5876e50e2cc96d292d70093323e5d4d774629e0d3db1913641d7f7f0e799f300aa59c88355b4901cca210ddbfcdf60125378408f2b8c726094c88b4"}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x3b, &(0x7f0000003300)=@string={0x3b, 0x3, "9a9217e49c77448b9ee8f6c30ad7c3016a3f3c15756a4c3517d7cb534de76218a243d88a2a9c28dd524b4565cd5b33e81e0c2789b759a1b8f2"}}, {0x27, &(0x7f0000003340)=@string={0x27, 0x3, "b51e2ae038321e79a1ecc3c931699c4289ec46cc98e896cd94c3b6c5e52dc2cd87ab45019c"}}]})
syz_usb_disconnect(r8)
ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000003400)={{r7}, "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"})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000004440)=@attr_other={0x0, 0x7ff, 0xb, &(0x7f0000004400)=0x4})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000004480), 0x202, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f00000048c0)={0x3, 0x0, 0x12, 0x1c, 0xaf, &(0x7f00000044c0)})
getpgid(0x0)

1.444558968s ago: executing program 2 (id=473):
openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

1.424030228s ago: executing program 2 (id=474):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fcntl$getflags(r2, 0xb)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
fstat(r3, &(0x7f0000000000))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0xa, 0x0, 0xa0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x4, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000001c0)={0x7, "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"})

1.224776471s ago: executing program 2 (id=475):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x100002)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000200))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = epoll_create(0x5)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r0, &(0x7f00000002c0)={r3, r4, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

359.267384ms ago: executing program 2 (id=476):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
mount$incfs(&(0x7f0000000100)='./mnt\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240), 0x40000, &(0x7f0000000280)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x4}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x449}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x38, 0x66, 0x34, 0x65, 0x32, 0x66, 0x32], 0x2d, [0x61, 0x62, 0x32, 0x61], 0x2d, [0x33, 0x38, 0x34, 0x65], 0x2d, [0x39, 0x35, 0x63, 0x65], 0x2d, [0x33, 0x64, 0x33, 0x35, 0x66, 0x63, 0x31, 0x31]}}}, {@obj_role={'obj_role', 0x3d, 'b#@%*+'}}]}) (async)
readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

279.658195ms ago: executing program 2 (id=477):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x6) (async)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pipe2$watch_queue(&(0x7f0000000340), 0x80)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, r2, {0x5, 0x0, 0x5, 0x6bc}}, 0x20)
epoll_create1(0x0) (async)
epoll_create1(0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_create(0x4, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r4, 0x0, 0x5)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x1fe0000, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
move_mount(r7, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x100000000})

0s ago: executing program 2 (id=478):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {0xf8, 0x100, 0x8, 0x3}, 0x20, [0x8000003, 0x4, 0x80, 0x143b4048, 0x5, 0x7, 0xa, 0x3000000, 0xea1, 0x0, 0x589f, 0x1000, 0x1e, 0x81, 0x0, 0xffffff80, 0x1, 0x2, 0x1000, 0x3, 0x40000000, 0xfffffff9, 0x2, 0xc, 0x3, 0x394d, 0x9, 0x0, 0x5, 0x53987b9e, 0xc, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0xffffce2d, 0x2, 0x8, 0x5, 0x1004, 0x1, 0x81, 0xfffffff8, 0x4, 0x40, 0x7ff, 0x7c2c0bf, 0x5, 0x5, 0x3, 0x8001, 0x1, 0xc2000000, 0xa560, 0xfffff801, 0x8, 0xd809, 0x395, 0x9, 0x8, 0x1, 0x5], [0x76, 0x100, 0x1, 0x7, 0x0, 0x8e8, 0x5, 0xe, 0xfffffffe, 0xf, 0xb16, 0x2, 0x9061, 0x8, 0x8, 0x5, 0xb3f, 0x3, 0x7, 0x4c, 0xff, 0x4557, 0x1, 0x8, 0x7, 0x5d01, 0x5, 0x3, 0x7, 0x4, 0x5, 0x9114, 0x3, 0x7, 0xda0f, 0xac, 0x9, 0xc, 0x2, 0x400, 0x4, 0x2, 0x3, 0x8, 0xd, 0x8e6, 0x1, 0x7, 0x200, 0xd4a, 0x10, 0x8, 0xf1c, 0x8, 0x27, 0x6, 0x9, 0x5, 0x6, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x1, 0x2, 0x9, 0x872d, 0xfffffffb, 0x75cb, 0x4b, 0x1000, 0x3, 0x1, 0x0, 0x4, 0x9, 0x3a7d, 0x3, 0x1000, 0x2, 0x7, 0x0, 0xfff, 0x22, 0x6, 0x7, 0x432c, 0x20000, 0xd, 0x3, 0x1020, 0x4, 0x2, 0x9, 0x100, 0x1, 0x5, 0x8001, 0x4, 0x1, 0x7f, 0xffff2840, 0x1e0000, 0x8000, 0x80000001, 0x5, 0x3, 0x3, 0x9, 0x4, 0x7, 0x7, 0x0, 0x1, 0x2, 0xd4b, 0x2a, 0x3, 0x9, 0x9, 0x22f, 0x7, 0x80, 0x400, 0x2, 0x3, 0x5], [0xef, 0x8000000, 0xfffffffe, 0x8001, 0x4da1, 0x4, 0x1000, 0x200, 0x7, 0x80, 0x8, 0x6, 0x3, 0x80000001, 0x4, 0x0, 0x10c5, 0x324, 0x0, 0x3, 0xcf, 0x8, 0x9, 0x3, 0x40009b33, 0x1, 0x2, 0x3b, 0x2, 0x37fe, 0xff6f, 0x9, 0x0, 0xc, 0x0, 0x3, 0x8, 0x3, 0x7ffffeff, 0x2, 0xff, 0x74, 0x8, 0xc3f, 0x4, 0x7, 0x9, 0x7ff, 0x7, 0x5, 0x4, 0x5, 0xdc, 0x8, 0x7ff, 0x6, 0x5, 0x9, 0x200000, 0x93e7, 0xad7, 0x2, 0x3, 0x1ff]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_DEV_CREATE(r0, 0x5501)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) (async)
write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00', {0x3ff, 0x5, 0x0, 0x4}, 0x20, [0x8, 0x8, 0x7, 0x8e, 0x1e69, 0x3, 0x3, 0x10, 0x7f, 0x7d, 0xa, 0xffffffff, 0x7, 0x81, 0x4, 0xc, 0x9, 0x8, 0x9, 0x401, 0x3, 0x80, 0x10, 0x10000, 0x4ab, 0x200, 0x80bb, 0x3, 0x6, 0xfffffffb, 0x1002, 0x3, 0x6, 0x5, 0x20000007, 0x34, 0x7, 0x2, 0x3d4e23a4, 0x9, 0x5, 0x8, 0x9, 0x0, 0x73060f7a, 0xffffffff, 0x494f5a75, 0x2, 0x100, 0x93fc, 0x9, 0xa, 0xb, 0x7ff7ffff, 0x8, 0x2, 0x1000001, 0x20000000, 0x1, 0x2, 0x1, 0x2, 0x1, 0x8001], [0x433, 0xe, 0xfffffffe, 0x659, 0xffffffff, 0x6, 0x401, 0x5, 0x101, 0x3, 0x8, 0x8, 0x6, 0x4a9, 0x6, 0x10000, 0x7f, 0x2, 0x99d0, 0x404, 0x200, 0x1, 0xa2e, 0x9, 0xffff95a0, 0x3, 0x4, 0x4, 0x0, 0xcb6, 0x6, 0x9, 0x9, 0x9, 0x7, 0x0, 0x4, 0x29800000, 0x6, 0xa, 0x23, 0xe756, 0xffff934e, 0x6, 0xc, 0x2d, 0x7, 0x45, 0x80, 0x4, 0x80, 0xa4c, 0xffffff0e, 0x1, 0x1000, 0xff, 0x67ac, 0x171680f8, 0x3, 0x6, 0x754b, 0x9, 0xffffffff, 0x5], [0x7a9, 0xfffffffe, 0x7fffffff, 0x2430, 0x220, 0x9, 0x7, 0xc0d, 0x5, 0x2b, 0xfff, 0x2, 0x7, 0x42b2, 0x4, 0x5, 0x4c, 0x7, 0x5, 0x101, 0x6, 0x4, 0x1, 0x101, 0x9, 0x1, 0x7f, 0x1, 0x3, 0xd0, 0x0, 0xfffffffa, 0x9, 0x8, 0x100, 0x6, 0x7, 0x1004, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x8, 0x3fd, 0x8, 0x80000001, 0xe29, 0x6, 0x7, 0x7fff, 0xe0000000, 0x101, 0x3, 0x5, 0x6d4, 0xb, 0x9, 0x7, 0x9, 0xc, 0xc, 0x9, 0x4000000c], [0xfffff001, 0xc3c7, 0x3ff, 0x2, 0x2, 0x4, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0x5, 0x1, 0xe65, 0xe25, 0xffffb705, 0x8, 0x5db45c26, 0x80, 0xa14, 0x1, 0x80, 0xfbf, 0xf, 0x5, 0x4, 0x2, 0x3e5fc7b7, 0x20000002, 0x780, 0xc, 0x8, 0x9, 0x4b2, 0x101, 0x2, 0x7, 0x2, 0xa328, 0x7ff, 0x0, 0x8, 0x0, 0x80000001, 0xffffffff, 0x0, 0x8, 0x2, 0x70e8, 0x1, 0x3, 0x7, 0x2, 0x207, 0x3, 0x104, 0x0, 0x10000700, 0x2, 0x80, 0xf, 0xa]}, 0x45c) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000019c0), 0x2c4000, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.15.210' (ED25519) to the list of known hosts.
[   25.106458][   T36] audit: type=1400 audit(1750572158.380:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.107951][  T281] cgroup: Unknown subsys name 'net'
[   25.129149][   T36] audit: type=1400 audit(1750572158.380:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.156545][   T36] audit: type=1400 audit(1750572158.410:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.156987][  T281] cgroup: Unknown subsys name 'devices'
[   25.299455][  T281] cgroup: Unknown subsys name 'hugetlb'
[   25.305119][  T281] cgroup: Unknown subsys name 'rlimit'
[   25.461330][   T36] audit: type=1400 audit(1750572158.740:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.484533][   T36] audit: type=1400 audit(1750572158.740:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.509459][   T36] audit: type=1400 audit(1750572158.740:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.513673][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   25.541383][   T36] audit: type=1400 audit(1750572158.820:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.566812][   T36] audit: type=1400 audit(1750572158.820:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.595730][   T36] audit: type=1400 audit(1750572158.870:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.621363][   T36] audit: type=1400 audit(1750572158.870:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.621442][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.494927][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.502082][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.509214][  T289] bridge_slave_0: entered allmulticast mode
[   26.515527][  T289] bridge_slave_0: entered promiscuous mode
[   26.523296][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.530385][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.537481][  T289] bridge_slave_1: entered allmulticast mode
[   26.543773][  T289] bridge_slave_1: entered promiscuous mode
[   26.562766][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.569841][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.576912][  T290] bridge_slave_0: entered allmulticast mode
[   26.583214][  T290] bridge_slave_0: entered promiscuous mode
[   26.589747][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.596793][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.603901][  T290] bridge_slave_1: entered allmulticast mode
[   26.610231][  T290] bridge_slave_1: entered promiscuous mode
[   26.616530][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.623726][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.630861][  T288] bridge_slave_0: entered allmulticast mode
[   26.637248][  T288] bridge_slave_0: entered promiscuous mode
[   26.653795][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.660875][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.668127][  T288] bridge_slave_1: entered allmulticast mode
[   26.674385][  T288] bridge_slave_1: entered promiscuous mode
[   26.728504][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.735572][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.743033][  T291] bridge_slave_0: entered allmulticast mode
[   26.749513][  T291] bridge_slave_0: entered promiscuous mode
[   26.767219][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.774331][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.781713][  T291] bridge_slave_1: entered allmulticast mode
[   26.788158][  T291] bridge_slave_1: entered promiscuous mode
[   26.916314][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.923407][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.930731][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.937789][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.946479][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.953581][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.960911][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.967963][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.983047][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.990141][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.997456][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.004495][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.032244][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.039342][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.046622][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.053745][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.074362][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.082125][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.089748][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.097127][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.104345][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.111691][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.118974][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.126155][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.137589][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.144658][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.159679][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.166730][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.205274][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.212366][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.220882][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.227963][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.256705][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.263782][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.271613][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.278690][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.287982][  T291] veth0_vlan: entered promiscuous mode
[   27.309175][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.316249][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.330835][  T288] veth0_vlan: entered promiscuous mode
[   27.342501][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.349578][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.369563][  T291] veth1_macvtap: entered promiscuous mode
[   27.382604][  T290] veth0_vlan: entered promiscuous mode
[   27.412263][  T288] veth1_macvtap: entered promiscuous mode
[   27.423515][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.432499][  T290] veth1_macvtap: entered promiscuous mode
[   27.467603][  T289] veth0_vlan: entered promiscuous mode
[   27.475302][  T308] =======================================================
[   27.475302][  T308] WARNING: The mand mount option has been deprecated and
[   27.475302][  T308]          and is ignored by this kernel. Remove the mand
[   27.475302][  T308]          option from the mount to silence this warning.
[   27.475302][  T308] =======================================================
[   27.490448][  T289] veth1_macvtap: entered promiscuous mode
[   27.620242][  T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.620309][  T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   27.630385][  T319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   27.641373][  T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2
[   27.674698][  T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.755224][  T332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   27.806546][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   27.846680][  T344] process 'syz.1.11' launched './file0' with NULL argv: empty string added
[   27.857210][   T62] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   27.933885][  T347] rust_binder: Error while translating object.
[   27.933925][  T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   27.940357][  T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:13
[   28.017093][   T62] usb 1-1: Using ep0 maxpacket: 16
[   28.041782][   T62] usb 1-1: unable to get BOS descriptor or descriptor too short
[   28.050506][   T62] usb 1-1: config 0 has an invalid interface number: 46 but max is 3
[   28.059214][   T62] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   28.072420][   T62] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4
[   28.081763][  T352] cgroup: Bad value for 'name'
[   28.081949][   T62] usb 1-1: config 0 has no interface number 0
[   28.092770][   T62] usb 1-1: config 0 interface 46 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[   28.107142][   T62] usb 1-1: config 0 interface 46 has no altsetting 0
[   28.115458][   T62] usb 1-1: New USB device found, idVendor=2537, idProduct=1068, bcdDevice=52.ff
[   28.124765][   T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.132966][   T62] usb 1-1: Product: syz
[   28.137375][   T62] usb 1-1: Manufacturer: syz
[   28.142025][   T62] usb 1-1: SerialNumber: syz
[   28.149051][   T62] usb 1-1: config 0 descriptor??
[   28.457022][  T328] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.505060][  T361] pim6reg1: entered promiscuous mode
[   28.511892][  T361] pim6reg1: entered allmulticast mode
[   28.525262][  T360] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   28.525305][  T360] rust_binder: Error while translating object.
[   28.534471][  T360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.540950][  T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[   28.632575][  T328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.652380][  T328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.662409][  T328] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   28.674368][  T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   28.689869][  T328] usb 2-1: SerialNumber: syz
[   28.900424][  T356] rust_binder: Write failure EINVAL in pid:22
[   29.408271][  T328] usb 2-1: 0:2 : does not exist
[   29.436531][  T328] usb 2-1: USB disconnect, device number 2
[   29.827030][  T337] Bluetooth: hci0: command 0x1003 tx timeout
[   29.827064][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   29.906991][  T328] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   30.017574][  T387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[   30.065834][  T392] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   30.087753][  T328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.099613][  T328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.126024][  T328] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.151607][  T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   30.160799][  T328] usb 2-1: SerialNumber: syz
[   30.252646][   T36] kauditd_printk_skb: 88 callbacks suppressed
[   30.252664][   T36] audit: type=1400 audit(1750572163.530:162): avc:  denied  { read } for  pid=391 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   30.384906][   T36] audit: type=1400 audit(1750572163.660:163): avc:  denied  { map } for  pid=373 comm="syz.1.21" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   30.389687][  T328] usb 2-1: 0:2 : does not exist
[   30.412799][  T328] usb 2-1: unit 7 not found!
[   30.418216][   T36] audit: type=1400 audit(1750572163.660:164): avc:  denied  { ioctl } for  pid=373 comm="syz.1.21" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.447570][  T328] usb 2-1: USB disconnect, device number 3
[   30.453855][   T36] audit: type=1400 audit(1750572163.660:165): avc:  denied  { setopt } for  pid=373 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   30.553124][   T36] audit: type=1400 audit(1750572163.830:166): avc:  denied  { ioctl } for  pid=403 comm="syz.3.29" path="socket:[3702]" dev="sockfs" ino=3702 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   30.607129][   T36] audit: type=1400 audit(1750572163.880:167): avc:  denied  { append } for  pid=406 comm="syz.3.30" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   30.635415][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.645820][   T62] usb-storage 1-1:0.46: USB Mass Storage device detected
[   30.684392][   T62] usb-storage 1-1:0.46: Quirks match for vid 2537 pid 1068: 800000
[   30.694518][  T375] udevd[375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.715100][  T410] kvm: pic: non byte write
[   30.719733][   T36] audit: type=1400 audit(1750572163.990:168): avc:  denied  { read write } for  pid=415 comm="syz.0.33" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   30.766138][   T36] audit: type=1400 audit(1750572163.990:169): avc:  denied  { open } for  pid=415 comm="syz.0.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   30.774575][   T62] usb 1-1: USB disconnect, device number 2
[   30.790080][   T36] audit: type=1400 audit(1750572163.990:170): avc:  denied  { ioctl } for  pid=415 comm="syz.0.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   30.832232][   T36] audit: type=1400 audit(1750572163.990:171): avc:  denied  { getopt } for  pid=415 comm="syz.0.33" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.172658][  T459] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   35.172684][  T459] rust_binder: Error while translating object.
[   35.181811][  T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.188270][  T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[   35.367016][  T328] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   35.399989][   T36] kauditd_printk_skb: 32 callbacks suppressed
[   35.400006][   T36] audit: type=1400 audit(1750572168.680:204): avc:  denied  { setopt } for  pid=464 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   35.530353][  T328] usb 4-1: Using ep0 maxpacket: 32
[   35.537820][  T328] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   35.546063][  T328] usb 4-1: config 0 has no interface number 0
[   35.558038][  T328] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   35.567963][  T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.576444][  T328] usb 4-1: Product: syz
[   35.580881][  T328] usb 4-1: Manufacturer: syz
[   35.585734][  T328] usb 4-1: SerialNumber: syz
[   35.591587][  T328] usb 4-1: config 0 descriptor??
[   35.600833][  T328] smsc95xx v2.0.0
[   35.620371][   T36] audit: type=1400 audit(1750572168.900:205): avc:  denied  { append } for  pid=473 comm="syz.2.48" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.657045][  T474] kvm: user requested TSC rate below hardware speed
[   35.723778][   T36] audit: type=1400 audit(1750572169.000:206): avc:  denied  { create } for  pid=475 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   35.804373][  T328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   35.815249][  T328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   35.826344][  T328] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   35.843825][  T328] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   35.853852][   T36] audit: type=1326 audit(1750572169.130:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.3.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984418e929 code=0x0
[   35.877033][  T328] usb 4-1: USB disconnect, device number 2
[   35.885965][   T36] audit: type=1326 audit(1750572169.130:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.3.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984418e929 code=0x0
[   36.055915][   T36] audit: type=1400 audit(1750572169.330:209): avc:  denied  { bind } for  pid=495 comm="syz.3.56" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.058319][  T496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   36.079400][   T36] audit: type=1400 audit(1750572169.330:210): avc:  denied  { name_bind } for  pid=495 comm="syz.3.56" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   36.085437][  T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:57
[   36.101150][   T36] audit: type=1400 audit(1750572169.330:211): avc:  denied  { node_bind } for  pid=495 comm="syz.3.56" saddr=::ffff:224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   36.161460][   T36] audit: type=1400 audit(1750572169.370:212): avc:  denied  { unlink } for  pid=499 comm="syz.0.57" name="#1" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   36.194983][   T36] audit: type=1400 audit(1750572169.370:213): avc:  denied  { mount } for  pid=499 comm="syz.0.57" name="/" dev="overlay" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.209152][  T510] overlayfs: missing 'lowerdir'
[   36.259100][  T515] rust_binder: Error while translating object.
[   36.259136][  T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   36.265443][  T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:31
[   36.345187][  T523] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   36.360740][  T519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47
[   36.454419][  T531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   36.740784][  T547] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   36.740803][  T547] rust_binder: Error while translating object.
[   36.749623][  T547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.755862][  T547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   36.897019][  T544] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   37.002451][  T556] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   37.002477][  T556] rust_binder: Error while translating object.
[   37.013444][  T558] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   37.019690][  T558] rust_binder: Error while translating object.
[   37.023443][  T556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.030706][  T558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.037572][  T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[   37.046465][  T558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76
[   37.065820][  T544] usb 2-1: config 4 has an invalid interface number: 95 but max is 0
[   37.076999][   T62] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   37.083080][  T544] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   37.100782][  T544] usb 2-1: config 4 has no interface number 0
[   37.107016][  T544] usb 2-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   37.116864][  T544] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   37.128980][  T544] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[   37.138278][  T544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.146306][  T544] usb 2-1: Product: syz
[   37.150705][  T544] usb 2-1: Manufacturer: syz
[   37.155333][  T544] usb 2-1: SerialNumber: syz
[   37.241724][  T567] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.242143][  T567] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   37.257011][   T62] usb 1-1: device descriptor read/64, error -71
[   37.368279][  T544] usb 2-1: MIDIStreaming interface descriptor not found
[   37.387010][  T544] usb 2-1: USB disconnect, device number 4
[   37.436849][  T579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.476741][  T581] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   37.476765][  T581] rust_binder: Read failure Err(EFAULT) in pid:68
[   37.529563][   T62] usb 1-1: device descriptor read/64, error -71
[   37.570878][  T456] udevd[456]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.711750][  T596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   37.720936][  T595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   37.777071][   T62] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   37.920883][   T62] usb 1-1: device descriptor read/64, error -71
[   37.991663][  T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.003899][  T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.061928][  T602] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.062341][  T602] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   38.167031][   T62] usb 1-1: device descriptor read/64, error -71
[   38.186657][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   38.193120][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   38.217044][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   38.272635][  T626] tipc: Started in network mode
[   38.277646][  T626] tipc: Node identity 06000000000000006068, cluster identity 4711
[   38.285967][  T626] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   38.285988][  T626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   38.294792][  T626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:95
[   38.304371][   T62] usb usb1-port1: attempt power cycle
[   38.357045][   T10] usb 2-1: device descriptor read/64, error -71
[   38.587025][  T613] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   38.597128][   T10] usb 2-1: device descriptor read/64, error -71
[   38.657150][   T62] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   38.678107][   T62] usb 1-1: device descriptor read/8, error -71
[   38.737047][  T613] usb 4-1: Using ep0 maxpacket: 16
[   38.744405][  T613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.754740][  T613] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   38.765543][  T613] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   38.774721][  T613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.782968][  T613] usb 4-1: Product: syz
[   38.787196][  T613] usb 4-1: Manufacturer: syz
[   38.791809][  T613] usb 4-1: SerialNumber: syz
[   38.808120][   T62] usb 1-1: device descriptor read/8, error -71
[   38.837040][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   38.967068][   T10] usb 2-1: device descriptor read/64, error -71
[   39.047068][   T62] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   39.068323][   T62] usb 1-1: device descriptor read/8, error -71
[   39.197971][   T62] usb 1-1: device descriptor read/8, error -71
[   39.205402][  T613] usb 4-1: cannot find UAC_HEADER
[   39.211421][   T10] usb 2-1: device descriptor read/64, error -71
[   39.219003][  T613] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   39.231145][  T613] usb 4-1: USB disconnect, device number 3
[   39.307185][   T62] usb usb1-port1: unable to enumerate USB device
[   39.327237][   T10] usb usb2-port1: attempt power cycle
[   39.397443][  T454] udevd[454]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.667052][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   39.688124][   T10] usb 2-1: device descriptor read/8, error -71
[   39.818330][   T10] usb 2-1: device descriptor read/8, error -71
[   39.873915][  T638] SELinux: security_context_str_to_sid () failed with errno=-22
[   40.057130][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   40.078257][   T10] usb 2-1: device descriptor read/8, error -71
[   40.208015][   T10] usb 2-1: device descriptor read/8, error -71
[   40.227001][  T337] Bluetooth: hci0: command 0x1003 tx timeout
[   40.227005][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   40.239298][  T613] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   40.262114][  T643] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.262437][  T643] rust_binder: Failed to allocate buffer. len:144, is_oneway:true
[   40.317331][   T10] usb usb2-port1: unable to enumerate USB device
[   40.398159][  T613] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   40.417284][  T613] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   40.429171][  T613] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   40.435582][  T652] binder: Unknown parameter '00000000000000000000003'
[   40.440978][  T613] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   40.456824][  T613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.466783][  T640] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   40.478821][  T654] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   40.656217][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   40.656252][   T36] audit: type=1400 audit(1750572173.930:242): avc:  denied  { read write } for  pid=659 comm="syz.3.115" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.692249][   T36] audit: type=1400 audit(1750572173.930:243): avc:  denied  { open } for  pid=659 comm="syz.3.115" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.748353][  T665] input: syz1 as /devices/virtual/input/input7
[   40.757864][   T36] audit: type=1400 audit(1750572174.040:244): avc:  denied  { append } for  pid=666 comm="syz.2.118" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   40.792681][   T36] audit: type=1400 audit(1750572174.060:245): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=453 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.845212][   T36] audit: type=1400 audit(1750572174.060:246): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=453 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.871450][   T36] audit: type=1400 audit(1750572174.060:247): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=453 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.919891][   T36] audit: type=1400 audit(1750572174.200:248): avc:  denied  { execute } for  pid=664 comm="syz.3.117" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   41.029454][   T36] audit: type=1400 audit(1750572174.310:249): avc:  denied  { map } for  pid=677 comm="syz.3.121" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.054266][   T36] audit: type=1400 audit(1750572174.310:250): avc:  denied  { write } for  pid=677 comm="syz.3.121" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.160473][  T681] netlink: 84 bytes leftover after parsing attributes in process `syz.1.122'.
[   41.307352][  T613] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[   41.315087][  T613] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6
[   41.443892][  T690] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.558268][  T693] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   41.575444][  T693] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   41.576185][  T693] rust_binder: Failed to allocate buffer. len:8, is_oneway:false
[   42.100510][  T695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.152675][   T36] audit: type=1326 audit(1750572175.430:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefe78e929 code=0x7ffc0000
[   42.387041][  T613] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   42.432998][  T730] Zero length message leads to an empty skb
[   42.482698][  T738] SELinux:  Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped).
[   42.512783][  T742] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.537037][  T613] usb 2-1: Using ep0 maxpacket: 16
[   42.551337][  T613] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   42.559855][  T613] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.576309][  T613] usb 2-1: config 0 has no interface number 0
[   42.592107][  T613] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   42.601562][  T613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.609688][  T613] usb 2-1: Product: syz
[   42.613919][  T613] usb 2-1: Manufacturer: syz
[   42.618780][  T613] usb 2-1: SerialNumber: syz
[   42.627909][  T613] usb 2-1: config 0 descriptor??
[   42.847668][  T613] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[   42.865153][  T613] usb 2-1: No valid video chain found.
[   42.906739][  T613] usb 1-1: USB disconnect, device number 7
[   42.906759][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   42.944397][  T772] rust_binder: Failed to allocate buffer. len:4294966992, is_oneway:false
[   42.956747][  T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.965388][  T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64
[   42.975531][  T774] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.006534][  T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[   43.078440][   T10] usb 2-1: USB disconnect, device number 9
[   43.181586][  T544] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   43.353722][  T544] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   43.362931][  T544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.385273][  T544] usb 3-1: config 0 descriptor??
[   43.985980][  T544] usb 3-1: Cannot set MAC address
[   43.993482][  T544] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   44.009004][  T544] usb 3-1: USB disconnect, device number 2
[   44.306455][  T805] rust_binder: Write failure EFAULT in pid:87
[   44.420699][  T811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:118
[   44.555434][  T818] 9pnet_fd: Insufficient options for proto=fd
[   44.827971][  T544] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   45.033591][  T544] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   45.043532][  T544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.055835][  T544] usb 2-1: Product: syz
[   45.060047][  T544] usb 2-1: Manufacturer: syz
[   45.073145][  T544] usb 2-1: SerialNumber: syz
[   45.080624][  T833] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.084445][  T544] r8152-cfgselector 2-1: Unknown version 0x0000
[   45.111251][  T544] r8152-cfgselector 2-1: config 0 descriptor??
[   45.118916][  T840] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   45.118938][  T840] rust_binder: Error while translating object.
[   45.132343][  T840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.138872][  T840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[   45.142297][  T842] binder: Unknown parameter 'sec� ª„¹label'
[   45.184659][  T848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137
[   45.325984][  T875] binder: Bad value for 'stats'
[   45.357148][  T877] rust_binder: Error in use_page_slow: ESRCH
[   45.357187][  T877] rust_binder: use_range failure ESRCH
[   45.363289][  T877] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   45.370046][  T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   45.377979][  T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:122
[   45.507426][  T883] binder: Unknown parameter 'contexp'
[   45.554935][  T328] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   45.556118][  T544] r8152-cfgselector 2-1: USB disconnect, device number 10
[   45.716419][  T328] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[   45.724681][  T328] usb 4-1: config 0 has no interface number 0
[   45.730844][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   45.738471][  T328] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   45.749354][  T328] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   45.760321][  T328] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   45.771947][  T328] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   45.781833][  T328] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   45.794846][  T328] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   45.803956][  T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.812673][  T328] usb 4-1: config 0 descriptor??
[   45.817984][  T861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   45.920229][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   45.928342][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   45.937186][   T10] usb 1-1: config 1 interface 0 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.950215][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[   45.959062][   T10] usb 1-1: string descriptor 0 read error: -22
[   45.965318][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40
[   45.974377][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.040012][  T861] rust_binder: Error while translating object.
[   46.040055][  T861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.046348][  T861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[   46.139414][  T305] usb 4-1: USB disconnect, device number 4
[   46.177418][   T36] kauditd_printk_skb: 71 callbacks suppressed
[   46.177437][   T36] audit: type=1400 audit(1750572179.242:323): avc:  denied  { nlmsg_write } for  pid=895 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   46.229066][  T901] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   46.229315][   T36] audit: type=1400 audit(1750572179.288:324): avc:  denied  { setopt } for  pid=890 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   46.260654][  T891] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.267945][  T891] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.363236][   T10] usbhid 1-1:1.0: can't add hid device: -71
[   46.376165][   T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   46.390432][   T10] usb 1-1: USB disconnect, device number 8
[   46.454876][   T36] audit: type=1400 audit(1750572179.504:325): avc:  denied  { create } for  pid=927 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   46.699379][  T305] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   46.714590][  T941] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   46.722015][  T941] rust_binder: Write failure EINVAL in pid:170
[   46.773653][  T328] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   46.823763][  T950] binder: Bad value for 'stats'
[   46.860220][  T305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.870393][  T305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   46.880425][  T305] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   46.889670][  T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   46.898048][  T305] usb 3-1: SerialNumber: syz
[   46.956138][  T328] usb 2-1: config 0 has an invalid interface number: 104 but max is 0
[   46.964370][  T328] usb 2-1: config 0 has no interface number 0
[   46.972511][  T328] usb 2-1: config 0 interface 104 has no altsetting 0
[   46.982194][  T328] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[   46.991708][  T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.999903][  T328] usb 2-1: Product: syz
[   47.004093][  T328] usb 2-1: Manufacturer: syz
[   47.008703][  T328] usb 2-1: SerialNumber: syz
[   47.014370][  T328] usb 2-1: config 0 descriptor??
[   47.122907][  T926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.134142][  T926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.195285][  T305] usb 3-1: 0:2 : does not exist
[   47.203328][  T305] usb 3-1: USB disconnect, device number 3
[   47.238213][  T906] netlink: 'syz.1.189': attribute type 3 has an invalid length.
[   47.310406][  T902] usb 2-1: USB disconnect, device number 11
[   47.323958][  T969] rust_binder: Write failure EINVAL in pid:190
[   47.344643][   T36] audit: type=1400 audit(1750572180.327:326): avc:  denied  { ioctl } for  pid=975 comm="syz.3.213" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.383477][  T454] udevd[454]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.405044][   T36] audit: type=1400 audit(1750572180.383:327): avc:  denied  { ioctl } for  pid=979 comm="syz.3.215" path="socket:[8046]" dev="sockfs" ino=8046 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   47.430578][   T36] audit: type=1400 audit(1750572180.383:328): avc:  denied  { write } for  pid=979 comm="syz.3.215" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.452617][   T36] audit: type=1400 audit(1750572180.392:329): avc:  denied  { remove_name } for  pid=979 comm="syz.3.215" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.478016][   T36] audit: type=1400 audit(1750572180.392:330): avc:  denied  { unlink } for  pid=979 comm="syz.3.215" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   47.512076][  T982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   47.656428][   T36] audit: type=1400 audit(1750572180.617:331): avc:  denied  { add_name } for  pid=990 comm="syz.3.219" name="binder0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.677506][   T36] audit: type=1400 audit(1750572180.617:332): avc:  denied  { create } for  pid=990 comm="syz.3.219" name="binder0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.834882][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   47.948850][ T1022] rust_binder: Read failure Err(EAGAIN) in pid:106
[   47.948937][ T1023] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   47.955553][ T1023] rust_binder: Error while translating object.
[   47.964937][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.971273][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106
[   48.010453][ T1027] rust_binder: Read failure Err(EAGAIN) in pid:109
[   48.100045][   T46] bridge_slave_1: left allmulticast mode
[   48.112852][   T46] bridge_slave_1: left promiscuous mode
[   48.118511][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.126358][   T46] bridge_slave_0: left allmulticast mode
[   48.132266][   T46] bridge_slave_0: left promiscuous mode
[   48.137922][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.295407][   T46] tipc: Left network mode
[   48.317517][   T46] veth1_macvtap: left promiscuous mode
[   48.323089][   T46] veth0_vlan: left promiscuous mode
[   48.490343][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.505555][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.513281][ T1049] bridge_slave_0: entered allmulticast mode
[   48.527631][ T1049] bridge_slave_0: entered promiscuous mode
[   48.534137][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.542141][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.559046][ T1049] bridge_slave_1: entered allmulticast mode
[   48.565536][ T1049] bridge_slave_1: entered promiscuous mode
[   48.690495][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.697569][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.704920][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.712007][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.786754][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.794540][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.820323][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.827438][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.849851][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.856944][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.896652][ T1049] veth0_vlan: entered promiscuous mode
[   48.909799][ T1049] veth1_macvtap: entered promiscuous mode
[   48.954180][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123
[   48.954307][ T1056] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   48.965414][ T1056] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[   48.976260][ T1056] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[   49.294190][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   49.313431][   T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   49.339956][ T1092] @: renamed from vlan0 (while UP)
[   49.346244][ T1092] binder: Bad value for 'max'
[   49.457348][   T45] usb 5-1: device descriptor read/64, error -71
[   49.553211][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   49.715948][   T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   49.724597][   T45] usb 5-1: device descriptor read/64, error -71
[   49.745688][   T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   49.766997][   T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   49.778375][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   49.787453][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.811744][ T1090] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   49.980838][   T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.058256][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.130482][   T45] usb 5-1: device descriptor read/64, error -71
[   50.159247][ T1106] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.214891][ T1107] rust_binder: Failed to allocate buffer. len:16, is_oneway:true
[   50.398773][   T45] usb 5-1: device descriptor read/64, error -71
[   50.426151][ T1109] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 206)
[   50.426175][ T1109] rust_binder: Error while translating object.
[   50.436780][ T1109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.443415][ T1109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147
[   50.492335][ T1114] rust_binder: Error in use_page_slow: ESRCH
[   50.492361][ T1114] rust_binder: use_range failure ESRCH
[   50.498417][ T1114] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   50.503914][ T1114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   50.511894][ T1114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:152
[   50.536899][   T45] usb usb5-port1: attempt power cycle
[   50.744647][ T1117] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   50.744686][ T1117] rust_binder: Error in use_page_slow: EBUSY
[   50.755196][ T1117] rust_binder: use_range failure EBUSY
[   50.761329][ T1117] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   50.766822][ T1117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   50.774587][ T1117] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   50.783959][ T1117] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:155
[   50.810773][ T1120] rust_binder: Write failure EINVAL in pid:158
[   50.819529][ T1121] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.910932][   T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   50.944166][   T45] usb 5-1: device descriptor read/8, error -71
[   51.060288][ T1130] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   51.060446][ T1130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   51.069168][ T1130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:214
[   51.083277][   T45] usb 5-1: device descriptor read/8, error -71
[   51.100772][ T1132] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.101715][ T1132] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   51.208590][ T1141] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.349285][   T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   51.382542][   T45] usb 5-1: device descriptor read/8, error -71
[   51.432819][ T1125] rust_binder: Write failure EFAULT in pid:164
[   51.490889][   T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[   51.506604][   T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input11
[   51.521442][   T45] usb 5-1: device descriptor read/8, error -71
[   51.522341][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   51.531195][  T902] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   51.542606][   T10] usb 1-1: USB disconnect, device number 9
[   51.638608][   T45] usb usb5-port1: unable to enumerate USB device
[   51.712686][  T902] usb 3-1: Using ep0 maxpacket: 16
[   51.719092][  T902] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   51.728210][  T902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.738217][  T902] usb 3-1: config 0 descriptor??
[   51.744885][  T902] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   51.958157][  T902] usb 3-1: Detected FT232B
[   52.104123][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   52.104142][   T36] audit: type=1400 audit(1750572184.779:346): avc:  denied  { ioctl } for  pid=1159 comm="syz.0.273" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   52.305162][   T36] audit: type=1400 audit(3501144371.862:347): avc:  denied  { shutdown } for  pid=1168 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.387922][  T902] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   52.536035][  T614] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   52.607330][ T1147] binder: Unknown parameter 'ÿÿ'
[   52.633260][   T10] usb 3-1: USB disconnect, device number 4
[   52.641173][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   52.651494][   T10] ftdi_sio 3-1:0.0: device disconnected
[   52.696225][  T614] usb 1-1: Using ep0 maxpacket: 32
[   52.703000][  T614] usb 1-1: unable to get BOS descriptor or descriptor too short
[   52.712211][  T614] usb 1-1: config 0 has no interfaces?
[   52.719408][  T614] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   52.728545][  T614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.737033][  T614] usb 1-1: Product: syz
[   52.742301][  T614] usb 1-1: Manufacturer: syz
[   52.747873][  T614] usb 1-1: SerialNumber: syz
[   52.753947][  T614] usb 1-1: config 0 descriptor??
[   52.975622][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.984161][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.003270][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.011844][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.020944][   T31] usb 1-1: USB disconnect, device number 10
[   53.196171][ T1178] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.196492][ T1178] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   53.266055][   T36] audit: type=1400 audit(3501144372.760:348): avc:  denied  { connect } for  pid=1185 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   53.299038][ T1186] rust_binder: Error in use_page_slow: ESRCH
[   53.299060][ T1186] rust_binder: use_range failure ESRCH
[   53.305825][ T1186] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[   53.311320][ T1186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   53.319250][ T1186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16
[   53.405590][ T1191] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.415108][ T1192] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   53.465975][ T1199] can: request_module (can-proto-0) failed.
[   53.487329][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.546375][ T1204] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.601647][ T1205] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   53.611317][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20
[   53.637013][   T31] usb 1-1: device descriptor read/64, error -71
[   53.711877][ T1211] rust_binder: Write failure EFAULT in pid:179
[   53.735632][ T1213] rust_binder: Error while translating object.
[   53.742091][ T1213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.748386][ T1213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181
[   53.893595][   T36] audit: type=1400 audit(3501144373.340:349): avc:  denied  { ioctl } for  pid=1215 comm="syz.1.292" path="socket:[9692]" dev="sockfs" ino=9692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   53.936785][   T31] usb 1-1: device descriptor read/64, error -71
[   54.195186][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   54.221356][ T1229] capability: warning: `syz.4.296' uses deprecated v2 capabilities in a way that may be insecure
[   54.342596][   T31] usb 1-1: device descriptor read/64, error -71
[   54.513652][  T614] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   54.599226][   T31] usb 1-1: device descriptor read/64, error -71
[   54.640988][ T1237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250
[   54.674141][  T614] usb 5-1: Using ep0 maxpacket: 32
[   54.690798][  T614] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   54.698986][  T614] usb 5-1: config 0 has no interface number 0
[   54.707867][  T614] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   54.717092][  T614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.717104][   T31] usb usb1-port1: attempt power cycle
[   54.731275][  T614] usb 5-1: Product: syz
[   54.735494][  T614] usb 5-1: Manufacturer: syz
[   54.740381][  T614] usb 5-1: SerialNumber: syz
[   54.749061][  T614] usb 5-1: config 0 descriptor??
[   54.760109][  T614] smsc95xx v2.0.0
[   55.065108][ T1250] fuse: Bad value for 'group_id'
[   55.070310][ T1250] fuse: Bad value for 'group_id'
[   55.080257][   T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   55.103032][   T31] usb 1-1: device descriptor read/8, error -71
[   55.252574][   T31] usb 1-1: device descriptor read/8, error -71
[   55.379637][  T613] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   55.507904][   T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   55.528001][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.0.303
[   55.530586][   T31] usb 1-1: device descriptor read/8, error -71
[   55.540923][  T613] usb 3-1: device descriptor read/64, error -71
[   55.553135][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.0.303
[   55.566482][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.0.303
[   55.579202][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.0.303
[   55.592471][ T1258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1258 comm=syz.0.303
[   55.613572][  T614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   55.625701][  T614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   55.635004][  T614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   55.646142][  T614] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   55.655357][  T614] usb 5-1: USB disconnect, device number 6
[   55.690179][   T31] usb 1-1: device descriptor read/8, error -71
[   55.807291][   T31] usb usb1-port1: unable to enumerate USB device
[   55.828737][  T613] usb 3-1: device descriptor read/64, error -71
[   56.085213][  T613] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   56.127908][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   56.170681][ T1264] binder: Unknown parameter 'processor	: 0
[   56.170681][ T1264] vendor_id	: GenuineIntel
[   56.170681][ T1264] cpu family	: 6
[   56.170681][ T1264] model		: 79
[   56.170681][ T1264] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[   56.170681][ T1264] stepping	: 0
[   56.170681][ T1264] microcode	: 0xffffffff
[   56.170681][ T1264] cpu MHz		: 2199.998
[   56.170681][ T1264] cache size	: 56320 KB
[   56.170681][ T1264] physical id	: 0
[   56.170681][ T1264] siblings	: 2
[   56.170681][ T1264] core id		: 0
[   56.170681][ T1264] cpu cores	: 1
[   56.170681][ T1264] apicid		: 0
[   56.170681][ T1264] initial apicid	: 0
[   56.170681][ T1264] fpu		: yes
[   56.170681][ T1264] fpu_exception	: yes
[   56.170681][ T1264] cpuid level	: 13
[   56.170681][ T1264] wp		: yes
[   56.170681][ T1264] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[   56.170681][ T1264] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[   56.224172][  T613] usb 3-1: device descriptor read/64, error -71
[   56.502086][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   56.509725][  T614] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   56.609960][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184
[   56.619706][  T613] usb 3-1: device descriptor read/64, error -71
[   56.683847][   T10] usb 5-1: Using ep0 maxpacket: 32
[   56.690187][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   56.698397][   T10] usb 5-1: config 0 has no interface number 0
[   56.704562][  T614] usb 2-1: Using ep0 maxpacket: 16
[   56.714148][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   56.723288][  T614] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.734412][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.742463][  T614] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96
[   56.753164][   T10] usb 5-1: Product: syz
[   56.757337][   T10] usb 5-1: Manufacturer: syz
[   56.761980][  T614] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8
[   56.771994][  T613] usb usb3-port1: attempt power cycle
[   56.777489][   T10] usb 5-1: SerialNumber: syz
[   56.782720][  T614] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   56.796056][   T10] usb 5-1: config 0 descriptor??
[   56.801463][  T614] usb 2-1: config 1 interface 0 has no altsetting 0
[   56.808525][   T10] smsc95xx v2.0.0
[   56.813130][  T614] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.822229][  T614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   56.828897][ T1276] rust_binder: Error while translating object.
[   56.830328][  T614] usb 2-1: SerialNumber: syz
[   56.830514][ T1276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.839492][ T1266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   56.841254][ T1276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188
[   56.850983][ T1266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   57.019997][   T36] audit: type=1400 audit(3501144376.277:350): avc:  denied  { create } for  pid=1277 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   57.089133][ T1264] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   57.096743][ T1264] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   57.142965][ T1278] tipc: Enabling of bearer <udp:z> rejected, failed to enable media
[   57.154291][  T613] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   57.176631][  T613] usb 3-1: device descriptor read/8, error -71
[   57.253678][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   57.265027][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   57.318011][  T613] usb 3-1: device descriptor read/8, error -71
[   57.547620][  T614] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   57.569352][   T36] audit: type=1400 audit(3501144376.783:351): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   57.590731][  T613] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   57.602465][   T36] audit: type=1400 audit(3501144376.792:352): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.623884][   T36] audit: type=1400 audit(3501144376.792:353): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.645628][   T36] audit: type=1400 audit(3501144376.792:354): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.668977][   T36] audit: type=1400 audit(3501144376.792:355): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.693419][   T36] audit: type=1400 audit(3501144376.820:356): avc:  denied  { read } for  pid=1290 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.717938][  T613] usb 3-1: device descriptor read/8, error -71
[   57.724364][   T36] audit: type=1400 audit(3501144376.820:357): avc:  denied  { open } for  pid=1290 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.750019][   T36] audit: type=1400 audit(3501144376.820:358): avc:  denied  { getattr } for  pid=1290 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.775445][   T36] audit: type=1400 audit(3501144376.932:359): avc:  denied  { write } for  pid=1289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.799155][   T36] audit: type=1400 audit(3501144376.932:360): avc:  denied  { add_name } for  pid=1289 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.861327][  T613] usb 3-1: device descriptor read/8, error -71
[   57.919845][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68!
[   57.927301][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 70!
[   57.934723][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 0a!
[   57.942461][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6e!
[   57.949876][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 33!
[   57.957277][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   57.964684][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 63!
[   57.972336][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6f!
[   57.979928][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   57.987448][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 01!
[   57.990979][  T613] usb usb3-port1: unable to enumerate USB device
[   57.995031][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 61!
[   58.008758][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6d!
[   58.016177][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 69!
[   58.020004][ T1304] input: syz0 as /devices/virtual/input/input12
[   58.023730][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.037267][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 70!
[   58.044687][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 70!
[   58.052113][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 73!
[   58.059543][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.062058][ T1304] can0: slcan on ttyS3.
[   58.066964][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6e!
[   58.078519][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 28!
[   58.085940][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.093368][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 65!
[   58.100790][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 73!
[   58.108490][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 65!
[   58.116155][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 36!
[   58.123574][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6f!
[   58.130995][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 66!
[   58.138405][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.145813][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 65!
[   58.153227][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.160648][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.168056][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 65!
[   58.175472][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 6c!
[   58.182894][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 74!
[   58.184321][ T1303] can0 (unregistered): slcan off ttyS3.
[   58.190320][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 74!
[   58.203129][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 62!
[   58.210531][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 20!
[   58.217944][    C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 67!
[   58.443961][   T62] usb 2-1: USB disconnect, device number 12
[   58.450673][   T62] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   58.629535][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   58.779349][  T614] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   58.789875][    T9] usb 1-1: Using ep0 maxpacket: 32
[   58.796069][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   58.804268][    T9] usb 1-1: config 0 has no interface number 0
[   58.811841][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   58.821158][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.829292][    T9] usb 1-1: Product: syz
[   58.833526][    T9] usb 1-1: Manufacturer: syz
[   58.838613][    T9] usb 1-1: SerialNumber: syz
[   58.845431][    T9] usb 1-1: config 0 descriptor??
[   58.851433][    T9] smsc95xx v2.0.0
[   58.941060][  T614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   58.953235][  T614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.963063][  T614] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   58.972172][  T614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.981227][  T614] usb 3-1: config 0 descriptor??
[   59.066827][ T1327] random: crng reseeded on system resumption
[   59.218160][ T1359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196
[   59.315704][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   59.336065][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   59.390015][ T1371] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   59.404916][ T1373] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   59.432199][  T614] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   59.510889][ T1377] rust_binder: Failed to allocate buffer. len:104, is_oneway:false
[   59.768433][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'.
[   59.860604][  T305] usb 3-1: USB disconnect, device number 9
[   59.903152][ T1396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.903188][ T1396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[   60.179704][   T62] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   60.329350][   T62] usb 2-1: device descriptor read/64, error -71
[   60.525425][ T1405] rust_binder: Write failure EFAULT in pid:280
[   60.538765][ T1407] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   60.584642][ T1412] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.585190][ T1412] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   60.591779][   T62] usb 2-1: device descriptor read/64, error -71
[   60.614289][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[   60.625135][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   60.635443][   T10] usb 5-1: USB disconnect, device number 7
[   60.725701][ T1421] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.726271][ T1421] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   60.822635][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.839155][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.863853][   T62] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   61.003142][   T62] usb 2-1: device descriptor read/64, error -71
[   61.259482][   T62] usb 2-1: device descriptor read/64, error -71
[   61.289849][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[   61.300881][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   61.310593][    T9] usb 1-1: USB disconnect, device number 15
[   61.377108][   T62] usb usb2-port1: attempt power cycle
[   61.569837][ T1425] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.570743][ T1425] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   61.654991][   T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   61.679642][ T1432] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   61.740570][   T62] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   61.773745][   T62] usb 2-1: device descriptor read/8, error -71
[   61.826011][   T31] usb 5-1: Using ep0 maxpacket: 32
[   61.832356][   T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   61.845521][   T31] usb 5-1: config 0 has no interface number 0
[   61.853435][   T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   61.862767][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.870825][   T31] usb 5-1: Product: syz
[   61.875074][   T31] usb 5-1: Manufacturer: syz
[   61.879722][   T31] usb 5-1: SerialNumber: syz
[   61.884929][   T31] usb 5-1: config 0 descriptor??
[   61.890728][   T31] smsc95xx v2.0.0
[   61.912795][   T62] usb 2-1: device descriptor read/8, error -71
[   61.943648][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   62.082600][    T9] usb 3-1: device descriptor read/64, error -71
[   62.093290][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   62.168225][   T62] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   62.190551][   T62] usb 2-1: device descriptor read/8, error -71
[   62.253650][   T10] usb 1-1: Using ep0 maxpacket: 16
[   62.260288][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   62.268023][   T10] usb 1-1: can't read configurations, error -61
[   62.329559][   T62] usb 2-1: device descriptor read/8, error -71
[   62.339316][    T9] usb 3-1: device descriptor read/64, error -71
[   62.403324][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   62.446253][   T62] usb usb2-port1: unable to enumerate USB device
[   62.563673][   T10] usb 1-1: Using ep0 maxpacket: 16
[   62.570531][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   62.578281][   T10] usb 1-1: can't read configurations, error -61
[   62.585034][   T10] usb usb1-port1: attempt power cycle
[   62.595763][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   62.734718][    T9] usb 3-1: device descriptor read/64, error -71
[   62.948546][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   62.961584][ T1423] capability: warning: `syz.4.339' uses 32-bit capabilities (legacy support in use)
[   62.970440][   T10] usb 1-1: Using ep0 maxpacket: 16
[   62.980321][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   62.988321][   T10] usb 1-1: can't read configurations, error -61
[   62.994671][    T9] usb 3-1: device descriptor read/64, error -71
[   63.109104][    T9] usb usb3-port1: attempt power cycle
[   63.130459][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   63.152065][   T10] usb 1-1: Using ep0 maxpacket: 16
[   63.158830][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   63.158834][ T1436] rust_binder: Error while translating object.
[   63.158883][ T1436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.166976][   T10] usb 1-1: can't read configurations, error -61
[   63.172761][ T1436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233
[   63.182623][   T10] usb usb1-port1: unable to enumerate USB device
[   63.198357][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[   63.204037][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   63.204056][   T36] audit: type=1400 audit(3501144382.049:372): avc:  denied  { map } for  pid=1422 comm="syz.4.339" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   63.218186][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   63.253324][ T1441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   63.254294][ T1441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:238
[   63.254629][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   63.283978][   T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   63.293660][   T31] usb 5-1: USB disconnect, device number 8
[   63.377984][ T1443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.378011][ T1443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240
[   63.515150][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   63.548297][    T9] usb 3-1: device descriptor read/8, error -71
[   63.687270][    T9] usb 3-1: device descriptor read/8, error -71
[   63.777576][   T36] audit: type=1400 audit(3501144382.591:373): avc:  granted  { setsecparam } for  pid=1447 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   63.796776][   T36] audit: type=1400 audit(3501144382.591:374): avc:  denied  { read } for  pid=1447 comm="syz.4.348" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   63.845678][ T1453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'.
[   63.881583][ T1459] netlink: 'syz.4.352': attribute type 4 has an invalid length.
[   63.889358][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'.
[   63.942771][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   63.965210][    T9] usb 3-1: device descriptor read/8, error -71
[   64.032417][ T1464] rust_binder: Write failure EFAULT in pid:68
[   64.104357][    T9] usb 3-1: device descriptor read/8, error -71
[   64.141543][   T36] audit: type=1326 audit(3501144382.938:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1473 comm="syz.4.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d2db8e929 code=0x0
[   64.194789][   T36] audit: type=1400 audit(3501144382.984:376): avc:  denied  { getopt } for  pid=1473 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.231933][    T9] usb usb3-port1: unable to enumerate USB device
[   64.385884][   T36] audit: type=1400 audit(3501144383.162:377): avc:  denied  { mount } for  pid=1482 comm="syz.4.358" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.386185][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   64.407736][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:87
[   64.429336][   T36] audit: type=1400 audit(3501144383.199:378): avc:  denied  { unmount } for  pid=1049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.460143][ T1487] binder: Unknown parameter '™'
[   64.759756][   T36] audit: type=1400 audit(3501144383.517:379): avc:  denied  { connect } for  pid=1490 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.186304][ T1507] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   65.186326][ T1507] rust_binder: Error while translating object.
[   65.197088][ T1507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   65.203328][ T1507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[   65.233205][ T1509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220
[   65.236746][ T1512] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[   65.242452][ T1509] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   65.260670][ T1509] rust_binder: Read failure Err(EFAULT) in pid:220
[   65.273174][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[   65.353905][  T305] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   65.515734][  T305] usb 3-1: not running at top speed; connect to a high speed hub
[   65.524557][  T305] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   65.538057][  T305] usb 3-1: config 1 interface 0 has no altsetting 0
[   65.548865][  T305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   65.558013][  T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.566082][  T305] usb 3-1: Product: syz
[   65.570425][  T305] usb 3-1: Manufacturer: syz
[   65.576160][  T305] usb 3-1: SerialNumber: syz
[   65.674669][   T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   65.728302][ T1528] rust_binder: Failed to allocate buffer. len:4615172634223575152, is_oneway:false
[   65.728305][ T1529] rust_binder: Write failure EINVAL in pid:229
[   65.728326][ T1528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   65.744150][ T1528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:229
[   65.784367][   T36] audit: type=1400 audit(3501144384.472:380): avc:  denied  { getopt } for  pid=1532 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.832933][ T1535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.841631][ T1535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.849670][   T31] usb 5-1: Using ep0 maxpacket: 16
[   65.866299][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.881244][  T305] usb 3-1: USB disconnect, device number 14
[   65.891390][ T1540] cgroup: Bad value for 'name'
[   65.893023][   T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   65.911086][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.922570][   T31] usb 5-1: config 0 descriptor??
[   65.945841][ T1543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'.
[   65.974233][   T36] audit: type=1400 audit(3501144384.649:381): avc:  denied  { read } for  pid=1541 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.042502][ T1556] rust_binder: Error in use_page_slow: ESRCH
[   66.042528][ T1556] rust_binder: use_range failure ESRCH
[   66.048597][ T1556] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   66.054292][ T1556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   66.064077][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:250
[   66.073663][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250
[   66.101382][ T1561] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4240, limit: 4240, size: 136)
[   66.110769][ T1561] rust_binder: Error while translating object.
[   66.122188][ T1561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   66.128434][ T1561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254
[   66.146344][ T1563] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.156459][ T1563] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   66.180578][ T1567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[   66.226318][ T1571] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.226622][ T1571] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   66.226978][ T1572] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   66.290699][ T1583] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.359295][   T31] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   66.374706][   T31] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   66.382031][   T31] appleir 0003:05AC:8241.0002: item fetching failed at offset 3/5
[   66.390078][   T31] appleir 0003:05AC:8241.0002: parse failed
[   66.403988][   T31] appleir 0003:05AC:8241.0002: probe with driver appleir failed with error -22
[   66.427749][ T1586] bpf: Bad value for 'gid'
[   66.472142][ T1590] input: syz0 as /devices/virtual/input/input13
[   66.602780][ T1522] binder: Bad value for 'stats'
[   66.693846][   T31] usb 5-1: USB disconnect, device number 9
[   66.767536][ T1603] KVM: debugfs: duplicate directory 1603-5
[   67.013553][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:351
[   67.013726][ T1611] binder: Binderfs stats mode cannot be changed during a remount
[   67.200282][ T1625] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.235159][ T1625] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   67.321044][ T1637] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.335489][ T1639] rust_binder: Write failure EFAULT in pid:119
[   67.342952][ T1637] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   67.398002][ T1645] fuse: Unknown parameter 'rootmo@uËp¦00000000000000040000'
[   67.556175][ T1400] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   67.737935][ T1400] usb 3-1: Using ep0 maxpacket: 32
[   67.759322][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   67.793526][   T12] bridge_slave_1: left allmulticast mode
[   67.799352][   T12] bridge_slave_1: left promiscuous mode
[   67.810592][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.844985][   T12] bridge_slave_0: left allmulticast mode
[   67.850746][   T12] bridge_slave_0: left promiscuous mode
[   67.858835][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.889690][ T1400] usb 3-1: config 128 has an invalid descriptor of length 112, skipping remainder of the config
[   67.910117][ T1400] usb 3-1: too many endpoints for config 128 interface 0 altsetting 0: 31, using maximum allowed: 30
[   67.931198][    T9] usb 2-1: Using ep0 maxpacket: 16
[   67.941067][ T1400] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 31
[   67.967114][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   67.983793][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.994555][ T1400] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[   68.016586][    T9] usb 2-1: config 0 descriptor??
[   68.025432][ T1400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.034373][    T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   68.043263][   T12] veth1_macvtap: left promiscuous mode
[   68.059115][   T12] veth0_vlan: left promiscuous mode
[   68.248179][    T9] usb 2-1: Detected FT232A
[   68.261959][    T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   68.330262][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.344569][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.354085][ T1654] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.369850][ T1654] bridge_slave_0: entered allmulticast mode
[   68.382187][ T1654] bridge_slave_0: entered promiscuous mode
[   68.395844][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.414466][ T1654] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.430332][ T1654] bridge_slave_1: entered allmulticast mode
[   68.444008][ T1654] bridge_slave_1: entered promiscuous mode
[   68.452979][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.600934][ T1626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.658428][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.665526][ T1654] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.672890][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.679968][ T1654] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.763851][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.766257][ T1626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.780167][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.810242][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.817336][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.842655][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.849767][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.893955][ T1400] usb 3-1: string descriptor 0 read error: -71
[   68.914410][ T1400] usb 3-1: USB disconnect, device number 15
[   68.939116][ T1654] veth0_vlan: entered promiscuous mode
[   68.964598][ T1654] veth1_macvtap: entered promiscuous mode
[   69.224536][  T902] usb 2-1: USB disconnect, device number 17
[   69.231370][  T902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   69.256173][  T902] ftdi_sio 2-1:0.0: device disconnected
[   69.288683][   T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   69.475793][   T62] usb 6-1: Using ep0 maxpacket: 16
[   69.485091][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.506862][   T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.519335][   T62] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   69.544627][   T62] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   69.554306][   T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.564679][   T62] usb 6-1: config 0 descriptor??
[   69.747782][    T9] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[   69.793085][   T62] hid (null): report_id 1537886436 is invalid
[   69.800493][   T62] hid-multitouch 0003:0457:07DA.0003: report_id 1537886436 is invalid
[   69.812489][  T902] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   69.827419][   T62] hid-multitouch 0003:0457:07DA.0003: item 0 4 1 8 parsing failed
[   69.832457][ T1666] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.836585][ T1667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270
[   69.836601][ T1668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270
[   69.856052][   T62] hid-multitouch 0003:0457:07DA.0003: probe with driver hid-multitouch failed with error -22
[   69.910089][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   69.918520][    T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt
[   69.928451][    T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt
[   69.940154][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[   69.966406][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   69.975627][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.984290][    T9] usb 1-1: SerialNumber: Њ
[   69.990960][ T1662] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.004374][ T1662] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.016523][  T902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.036526][  T902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.046518][  T902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.060681][  T902] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[   70.070035][  T902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.083518][  T305] usb 6-1: USB disconnect, device number 2
[   70.092071][  T902] usb 3-1: config 0 descriptor??
[   70.184248][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   70.184269][   T36] audit: type=1400 audit(3501144388.587:393): avc:  denied  { associate } for  pid=1678 comm="syz.1.418" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   70.247181][   T36] audit: type=1326 audit(3501144388.643:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1680 comm="syz.1.419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feefe78e929 code=0x0
[   70.432607][    T9] usb 1-1: USB disconnect, device number 20
[   70.567245][ T1692] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   70.658670][ T1697] mmap: syz.5.424 (1697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   70.708073][ T1702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[   70.741820][ T1706] rust_binder: Error while translating object.
[   70.751302][ T1706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.763656][ T1706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[   70.849776][ T1710] binder: Bad value for 'max'
[   71.083536][ T1716] 9pnet_fd: Insufficient options for proto=fd
[   71.293376][  T902] usbhid 3-1:0.0: can't add hid device: -71
[   71.300348][  T902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   71.321313][ T1732] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.322904][  T902] usb 3-1: USB disconnect, device number 16
[   71.335964][ T1732] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   71.355850][ T1734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.366499][ T1734] tmpfs: Bad value for 'size'
[   71.512399][ T1744] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[   71.526547][ T1746] binder: Bad value for 'max'
[   71.531841][   T36] audit: type=1400 audit(3501144389.841:395): avc:  denied  { execute } for  pid=1745 comm="syz.5.443" path="/10/cpu.stat" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.617328][ T1750] overlayfs: failed to resolve './file1': -2
[   71.625511][   T36] audit: type=1400 audit(3501144389.934:396): avc:  denied  { remount } for  pid=1748 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.630174][ T1751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.653691][ T1751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.696717][ T1757] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.704741][ T1756] rust_binder: Error in use_page_slow: ESRCH
[   71.704760][ T1756] rust_binder: use_range failure ESRCH
[   71.710750][ T1756] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   71.716580][ T1756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   71.725047][ T1756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38
[   71.745178][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.757235][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.770554][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.777028][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   71.783744][ T1761] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   71.797448][ T1761] rust_binder: Write failure EINVAL in pid:287
[   71.827870][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:294
[   71.902334][ T1771] rust_binder: Error while translating object.
[   71.911612][ T1771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   71.917813][ T1771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[   72.099691][  T902] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   72.258452][ T1773] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   72.259260][ T1774] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   72.259270][ T1773] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   72.274812][  T902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.294221][  T902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.304369][  T902] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   72.313848][  T902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.323565][  T902] usb 6-1: config 0 descriptor??
[   72.383463][ T1779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:368
[   72.545876][  T902] usbhid 6-1:0.0: can't add hid device: -71
[   72.561156][  T902] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   72.569784][  T902] usb 6-1: USB disconnect, device number 3
[   72.594426][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.603636][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.612580][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.621727][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.631240][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.641328][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.651155][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.660372][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.669309][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.678204][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.700364][ T1794] binder: Unknown parameter 'euid>00000000000000000000'
[   72.774786][   T36] audit: type=1400 audit(3501144391.010:397): avc:  denied  { create } for  pid=1802 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   72.831541][ T1809] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   72.926426][ T1817] @: renamed from vlan0 (while UP)
[   72.981803][   T36] audit: type=1400 audit(3501144391.206:398): avc:  denied  { ioctl } for  pid=1821 comm="syz.0.468" path="socket:[16265]" dev="sockfs" ino=16265 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   73.020432][   T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   73.040491][ T1824] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.040968][ T1824] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   73.072517][ T1824] rust_binder: Write failure EINVAL in pid:392
[   73.117188][ T1828] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.124062][ T1828] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   73.190131][   T45] usb 6-1: Using ep0 maxpacket: 16
[   73.207411][   T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.218236][   T45] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   73.233424][ T1838] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.233955][ T1838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406
[   73.234808][   T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.254349][ T1400] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[   73.258804][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.267969][ T1838] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   73.274946][   T45] usb 6-1: Product: syz
[   73.288695][   T45] usb 6-1: Manufacturer: syz
[   73.293327][   T45] usb 6-1: SerialNumber: syz
[   73.351729][ T1840] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.352392][   T36] audit: type=1400 audit(3501144391.553:399): avc:  denied  { write } for  pid=1839 comm="syz.2.475" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   73.414776][ T1841] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   73.425330][ T1400] usb 1-1: Invalid ep0 maxpacket: 16
[   73.575184][ T1400] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[   73.735365][ T1400] usb 1-1: Invalid ep0 maxpacket: 16
[   73.740866][ T1400] usb usb1-port1: attempt power cycle
[   74.109566][ T1400] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[   74.131292][ T1400] usb 1-1: Invalid ep0 maxpacket: 16
[   74.254890][   T36] audit: type=1326 audit(3501144392.394:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1842 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad378e929 code=0x7ffc0000
[   74.278398][ T1400] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[   74.278612][ T1843] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   74.286144][   T36] audit: type=1326 audit(3501144392.394:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1842 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad378e929 code=0x7ffc0000
[   74.318899][   T36] audit: type=1326 audit(3501144392.404:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1842 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdad378d290 code=0x7ffc0000
[   74.345061][ T1400] usb 1-1: Invalid ep0 maxpacket: 16
[   74.355478][ T1400] usb usb1-port1: unable to enumerate USB device
[   74.408925][ T1846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.424044][   T45] cdc_ncm 6-1:1.0: bind() failure
[   74.440381][   T45] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[   74.449064][   T45] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[   74.462440][   T45] usb 6-1: USB disconnect, device number 4
[   74.506260][ T1846] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   74.741079][    T9] ==================================================================
[   74.757110][    T9] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[   74.763910][    T9] Write of size 8 at addr 0000000000000098 by task kworker/0:0/9
[   74.771652][    T9] 
[   74.773996][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[   74.774020][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   74.774032][    T9] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[   74.774084][    T9] Call Trace:
[   74.774090][    T9]  <TASK>
[   74.774097][    T9]  __dump_stack+0x21/0x30
[   74.774118][    T9]  dump_stack_lvl+0x10c/0x190
[   74.774135][    T9]  ? __cfi_dump_stack_lvl+0x10/0x10
[   74.774154][    T9]  print_report+0x3d/0x70
[   74.774168][    T9]  kasan_report+0x163/0x1a0
[   74.774191][    T9]  ? down_write+0x83/0x2a0
[   74.774208][    T9]  ? down_write+0x83/0x2a0
[   74.774223][    T9]  kasan_check_range+0x299/0x2a0
[   74.774245][    T9]  __kasan_check_write+0x18/0x20
[   74.774262][    T9]  down_write+0x83/0x2a0
[   74.774277][    T9]  ? __cfi_down_write+0x10/0x10
[   74.774292][    T9]  ? _raw_spin_lock+0x8c/0x120
[   74.774311][    T9]  ? __cfi__raw_spin_lock+0x10/0x10
[   74.774331][    T9]  ? mutex_unlock+0x8b/0x240
[   74.774345][    T9]  ? __cfi_mutex_unlock+0x10/0x10
[   74.774359][    T9]  rust_binderfs_remove_file+0x6c/0x110
[   74.774374][    T9]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[   74.774403][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   74.774421][    T9]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[   74.774447][    T9]  ? update_load_avg+0x506/0x19a0
[   74.774461][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[   74.774483][    T9]  ? dequeue_entity+0xa9c/0x1750
[   74.774499][    T9]  ? __cfi_ip6_output+0x10/0x10
[   74.774514][    T9]  ? tg_unthrottle_up+0x980/0x980
[   74.774529][    T9]  ? __cfi_ip6_local_out+0x10/0x10
[   74.774545][    T9]  ? __cfi_dst_output+0x10/0x10
[   74.774561][    T9]  ? kvm_sched_clock_read+0x15/0x30
[   74.774577][    T9]  ? sched_clock_noinstr+0xd/0x30
[   74.774590][    T9]  ? sched_clock+0x44/0x60
[   74.774605][    T9]  ? sched_clock_cpu+0x75/0x400
[   74.774622][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   74.774638][    T9]  ? __cfi_min_vruntime_cb_rotate+0x10/0x10
[   74.774658][    T9]  ? __cfi_sched_clock_cpu+0x10/0x10
[   74.774676][    T9]  ? __kasan_check_write+0x18/0x20
[   74.774692][    T9]  ? __switch_to+0xc7b/0x1310
[   74.774710][    T9]  ? psi_group_change+0xb44/0x1130
[   74.774726][    T9]  ? __cfi___switch_to+0x10/0x10
[   74.774745][    T9]  ? _raw_spin_unlock+0x45/0x60
[   74.774765][    T9]  ? __switch_to_asm+0x3d/0x70
[   74.774785][    T9]  ? __schedule+0x1463/0x1f10
[   74.774807][    T9]  ? kick_pool+0xad/0x550
[   74.774830][    T9]  process_scheduled_works+0x7d2/0x1020
[   74.774853][    T9]  worker_thread+0xc58/0x1250
[   74.774876][    T9]  kthread+0x2c7/0x370
[   74.774897][    T9]  ? __cfi_worker_thread+0x10/0x10
[   74.774917][    T9]  ? __cfi_kthread+0x10/0x10
[   74.774938][    T9]  ret_from_fork+0x64/0xa0
[   74.774955][    T9]  ? __cfi_kthread+0x10/0x10
[   74.774982][    T9]  ret_from_fork_asm+0x1a/0x30
[   74.775004][    T9]  </TASK>
[   74.775010][    T9] ==================================================================
[   75.089711][    T9] Disabling lock debugging due to kernel taint
[   75.096383][    T9] BUG: kernel NULL pointer dereference, address: 0000000000000098
[   75.104215][    T9] #PF: supervisor write access in kernel mode
[   75.110298][    T9] #PF: error_code(0x0002) - not-present page
[   75.116301][    T9] PGD 8000000116bb6067 P4D 8000000116bb6067 PUD 0 
[   75.122858][    T9] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[   75.129049][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G    B              6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473
[   75.143834][    T9] Tainted: [B]=BAD_PAGE
[   75.148000][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.158064][    T9] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[   75.174862][    T9] RIP: 0010:down_write+0x9a/0x2a0
[   75.179916][    T9] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[   75.199673][    T9] RSP: 0018:ffffc90000097500 EFLAGS: 00010256
[   75.205785][    T9] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[   75.214073][    T9] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000097520
[   75.222065][    T9] RBP: ffffc90000097598 R08: ffffc90000097527 R09: 1ffff92000012ea4
[   75.230052][    T9] R10: dffffc0000000000 R11: fffff52000012ea5 R12: dffffc0000000000
[   75.238036][    T9] R13: 1ffff92000012ea0 R14: ffffc90000097520 R15: 0000000000000000
[   75.246017][    T9] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   75.254956][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.261558][    T9] CR2: 0000000000000098 CR3: 000000012f65c000 CR4: 00000000003526b0
[   75.269548][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.277533][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.285520][    T9] Call Trace:
[   75.288808][    T9]  <TASK>
[   75.291750][    T9]  ? __cfi_down_write+0x10/0x10
[   75.296610][    T9]  ? _raw_spin_lock+0x8c/0x120
[   75.301385][    T9]  ? __cfi__raw_spin_lock+0x10/0x10
[   75.306741][    T9]  ? mutex_unlock+0x8b/0x240
[   75.311361][    T9]  ? __cfi_mutex_unlock+0x10/0x10
[   75.316410][    T9]  rust_binderfs_remove_file+0x6c/0x110
[   75.321987][    T9]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[   75.337343][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   75.344052][    T9]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[   75.358328][    T9]  ? update_load_avg+0x506/0x19a0
[   75.363500][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[   75.370964][    T9]  ? dequeue_entity+0xa9c/0x1750
[   75.375940][    T9]  ? __cfi_ip6_output+0x10/0x10
[   75.380806][    T9]  ? tg_unthrottle_up+0x980/0x980
[   75.385847][    T9]  ? __cfi_ip6_local_out+0x10/0x10
[   75.390982][    T9]  ? __cfi_dst_output+0x10/0x10
[   75.395842][    T9]  ? kvm_sched_clock_read+0x15/0x30
[   75.401053][    T9]  ? sched_clock_noinstr+0xd/0x30
[   75.406098][    T9]  ? sched_clock+0x44/0x60
[   75.410520][    T9]  ? sched_clock_cpu+0x75/0x400
[   75.415379][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   75.421460][    T9]  ? __cfi_min_vruntime_cb_rotate+0x10/0x10
[   75.427371][    T9]  ? __cfi_sched_clock_cpu+0x10/0x10
[   75.432669][    T9]  ? __kasan_check_write+0x18/0x20
[   75.437795][    T9]  ? __switch_to+0xc7b/0x1310
[   75.442490][    T9]  ? psi_group_change+0xb44/0x1130
[   75.447612][    T9]  ? __cfi___switch_to+0x10/0x10
[   75.452568][    T9]  ? _raw_spin_unlock+0x45/0x60
[   75.457437][    T9]  ? __switch_to_asm+0x3d/0x70
[   75.462217][    T9]  ? __schedule+0x1463/0x1f10
[   75.466914][    T9]  ? kick_pool+0xad/0x550
[   75.471265][    T9]  process_scheduled_works+0x7d2/0x1020
[   75.476850][    T9]  worker_thread+0xc58/0x1250
[   75.481550][    T9]  kthread+0x2c7/0x370
[   75.485637][    T9]  ? __cfi_worker_thread+0x10/0x10
[   75.490762][    T9]  ? __cfi_kthread+0x10/0x10
[   75.495366][    T9]  ret_from_fork+0x64/0xa0
[   75.499791][    T9]  ? __cfi_kthread+0x10/0x10
[   75.504410][    T9]  ret_from_fork_asm+0x1a/0x30
[   75.509205][    T9]  </TASK>
[   75.512240][    T9] Modules linked in:
[   75.516160][    T9] CR2: 0000000000000098
[   75.520320][    T9] ---[ end trace 0000000000000000 ]---
[   75.525781][    T9] RIP: 0010:down_write+0x9a/0x2a0
[   75.530822][    T9] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[   75.550438][    T9] RSP: 0018:ffffc90000097500 EFLAGS: 00010256
[   75.556514][    T9] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[   75.564497][    T9] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000097520
[   75.572481][    T9] RBP: ffffc90000097598 R08: ffffc90000097527 R09: 1ffff92000012ea4
[   75.580458][    T9] R10: dffffc0000000000 R11: fffff52000012ea5 R12: dffffc0000000000
[   75.588440][    T9] R13: 1ffff92000012ea0 R14: ffffc90000097520 R15: 0000000000000000
[   75.596430][    T9] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   75.605366][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.611960][    T9] CR2: 0000000000000098 CR3: 000000012f65c000 CR4: 00000000003526b0
[   75.619943][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.627926][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.635909][    T9] Kernel panic - not syncing: Fatal exception
[   75.642283][    T9] Kernel Offset: disabled
[   75.646626][    T9] Rebooting in 86400 seconds..