last executing test programs:

59.16885446s ago: executing program 2 (id=256):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010002"], 0x1c}}, 0x814)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ff00001d00000000000000080009000d000000", 0x24)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0xf}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
flistxattr(r1, &(0x7f0000000180)=""/181, 0xb5)

59.089212842s ago: executing program 2 (id=257):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x2, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0xfffffff9, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x9, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x3, 0x100, 0xfa, 0x7, 0xe5eb, 0x5, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x4, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0xffffffff, 0x2, 0x8, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x7, 0x6, 0x8, 0x401, 0x1, 0x9, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x88, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0x2, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x6, 0x9, 0xfffffffa, 0x8, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0x0, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x7, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x1, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0x26, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0xffffffbe, 0x59, 0xffffffff, 0x6, 0x1, 0xe6b, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x7, 0xfffffffa, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x10000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xfffffffb, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0xa, 0x3ff, 0xa, 0x2, 0x5, 0x4, 0x3, 0x5, 0x1, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x401, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x80000001, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0x401, 0x10, 0x2, 0x259, 0x2, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x7, 0x204, 0xbe7, 0x1, 0x9, 0x401, 0x5, 0x4, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0x10b, 0x1, 0x4, 0x7, 0x8, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x1, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x100, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0x4, 0x1, 0x708, 0x1c0, 0xd, 0x2, 0x3, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x1, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0x0, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0x3, 0x9, 0x8001, 0x40, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x1000, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x10001, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x7, 0x8, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0xff, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x8, 0x100, 0x7, 0x5, 0x100, 0x7, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0x10001, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0x5, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xfffffffd, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x802, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x4, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa3, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x1, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba4, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x9, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffdfff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x6, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x5, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x3ff]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f00000002c0))
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001140)=""/224)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0x4b}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/timer_list\x00', 0x0, 0x0)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
sendfile(r9, r8, 0x0, 0xfffffffc)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

59.063409832s ago: executing program 2 (id=258):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x4, 0x0)

59.052800782s ago: executing program 2 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
unshare(0x400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r0, 0x7fffffffffffffff, 0x0)
r1 = timerfd_create(0x0, 0x0)
sendfile(r0, r1, 0x0, 0x240000000000)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)

59.001466903s ago: executing program 2 (id=260):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
listen(r1, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

58.897414646s ago: executing program 2 (id=263):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$cdc_ncm(0x3, 0x96, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "84d6c652"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9a46, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x28}, [@obex={0x5, 0x24, 0x15, 0xc35}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x5, 0x7f, 0x8, 0x6, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x101, 0x4aa}, @dmm={0x7, 0x24, 0x14, 0x48a1, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x21, 0x3, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0xff, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0x2, 0x7f}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x288, 0x7f, 0x0, 0x0, 0x8, 0xaf}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "d6e8fdb68ff997e6b0d13d40182d1007cb056d3b2c7440f5544c3795bdeff1d5271815a8bf5b1e7901fc2f5e509460203474f0109b59cc1837d6881057fc78922966e346a18c"}}, {0x13, &(0x7f0000000280)=@string={0x13, 0x3, "3eb052bd0fb1da89cb2cb1039da1f0f776"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "a91c32a85e2e6c864d51c6c2c07adc212fdeb81bab6a88aa78df3e94ca553a7ef647c5c0fde6a4ab4b1153ba4fbfed91a5e62b975d6d4616154efad95c4c4f12e39f6fe960c466cb7a7183298119d09d2c62b14367a905ee7619578014b56b"}}, {0x1f, &(0x7f00000004c0)=@string={0x1f, 0x3, "63e4ae4aec29b317973cbbe1da7c3d11c39c5bedc90a48ea3d1f4a471c"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x7, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "2aac8ccbd1b0851b263ee5483bdeae474e9d9d7e6065ae5e06bba998857aaf1da65a2d3f25d4dcb6f240b457d2e41b9682eb046a634c1e087485f1cbfa03e60cb76b225d312cb1a95c93725e9838cc1369f0c5d67fdc9e664befb3ca6b09c9eea7210f2b16cf9c17f3a52bdc0f30bd09ead8c39eaa54fd759a8238cedd46ec5245312df46fb04f73a600ddab3052ec4abae491b94b34d53f2f69b82d67ea9575622f59b1671aab73441803a8256f55e0d3309e7c87478b9d24f35edbc62967d0763930ec907f00730c4c4926dcfd9f3391a4d70ddf68173cb43f3e7fe70b68321603a06b18add2d5eef89ede73b4c1e7a16dcaf0a9f75d6fe9d674f3ade7aedd4a39cc977d52f6f562d63c271e1b5399d828bbc7e8b3d238bb50871661ef6d2cee4a9a3e523167e395133dd4df2994a9d6958064229ed366ce5dd0f256c6cdf18bfda9da68cda4cd1443e8a8f67953c5b24258f1ccd9e514ed186c507bddd2477a9d6e953298c145c8a974f05c0ae2637ee01198d7f94de7ecbc0bb2d084c804f72e7393162f86fc7202e8395df0213bc5e1e0da856132ae00a649fc7a3a26a8a5b022a48dbfe81847ae08706c9c7366d5a16fb6ac68f0f436ad5fa0f289d74438a7c208c92bdc597fb2da2f19e222bde02b874e70e2f2a2a50b906f7fed4358450a8803950f68d7bdc3332fd645d03c61f177e0e602f69cc41772ccbdf70a35f5fdf313f5788f863ad5534d303b6dfe42fbffdd47efa0df5b7bf01dbd8e0038caa023b36e40988b5619d318c989a470d95bdd0ca9bb3610d19502d12c091256090d88d9345f9c89e1a24566e2536ad151a3e462160417319ba34979ac13fb7e713f0d2aa151f40b52d360a82e2a2420e4181bcffbe0f6c8007241fa6a0c2789beab1f366db4af3f28a114dd97eb1a4beffb99d7df3437fb8263cde23c44fcd8a6e73e1107360b8e417204e135464d8f996b86a1812c253408fb78737a368b1b88e4cc8585487fe39961896ed1b093c21cfc456c5dc6a177dcb881b776053468ee0d1ff7ffc05599a383b7c1c16b38fe3cd7c3d3386b4f974075f09a196cba336bbba2defa91763ab5c7bf973c12d8de66937a7a5a8116b47a98b01977970ce43772e78f5c4862ad2ca5a2cc1a5cc191dca2ae031c867c4cca9598ba2332bcba7379c7f5b97c91240870737686edf1b3c4d4fd32d091cf865f5596f24d9130b40a1e3a62b40dfa7908d8cb679400add3a72d06f6dd738aaf5cdae9c2979c56136a7f566d0062c38cdb3e472024ffb6fe1e3e1042d4411a7d9cf9936aa464dda64898d602a584024c3f6b0cc45c9009af1bffd80bebec4bf8a6aec280bf078dc82c0700b8394271eedd7debd57e5c9a09fb997da37fd3306ca0a51459f299b48bf0908f5c9be3c31379c4f1dea89841fa49cee8a459316e553fed7f31fbe714de"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}})
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x101, 0x1) (async)
getdents64(r4, 0x0, 0xac) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
close_range(r5, 0xffffffffffffffff, 0x0)

58.897134716s ago: executing program 32 (id=263):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$cdc_ncm(0x3, 0x96, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "84d6c652"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9a46, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x28}, [@obex={0x5, 0x24, 0x15, 0xc35}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x5, 0x7f, 0x8, 0x6, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x101, 0x4aa}, @dmm={0x7, 0x24, 0x14, 0x48a1, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x21, 0x3, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0xff, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0x2, 0x7f}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x288, 0x7f, 0x0, 0x0, 0x8, 0xaf}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "d6e8fdb68ff997e6b0d13d40182d1007cb056d3b2c7440f5544c3795bdeff1d5271815a8bf5b1e7901fc2f5e509460203474f0109b59cc1837d6881057fc78922966e346a18c"}}, {0x13, &(0x7f0000000280)=@string={0x13, 0x3, "3eb052bd0fb1da89cb2cb1039da1f0f776"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "a91c32a85e2e6c864d51c6c2c07adc212fdeb81bab6a88aa78df3e94ca553a7ef647c5c0fde6a4ab4b1153ba4fbfed91a5e62b975d6d4616154efad95c4c4f12e39f6fe960c466cb7a7183298119d09d2c62b14367a905ee7619578014b56b"}}, {0x1f, &(0x7f00000004c0)=@string={0x1f, 0x3, "63e4ae4aec29b317973cbbe1da7c3d11c39c5bedc90a48ea3d1f4a471c"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x7, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}})
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x101, 0x1) (async)
getdents64(r4, 0x0, 0xac) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
close_range(r5, 0xffffffffffffffff, 0x0)

1.054354788s ago: executing program 1 (id=1524):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0xd592, 0x10000, 0x3, 0x0, 0x8000}, 0x1c)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000})
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x4}}, 0xe8)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)="9a582215a09d", 0x589a}], 0x1)
read$FUSE(r4, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

986.462519ms ago: executing program 1 (id=1526):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000005c0)=""/282, 0x11a}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0)
socket$netlink(0x10, 0x3, 0x12)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x803, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8fe21def"}]}}, 0x0}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})

893.491961ms ago: executing program 3 (id=1534):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2542c0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x40047705, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e20, @multicast2}})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)

892.519221ms ago: executing program 3 (id=1536):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000840)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c8e6698"})

875.285992ms ago: executing program 3 (id=1537):
io_destroy(0x0)
fsopen(&(0x7f0000000000)='securityfs\x00', 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x42)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080))
socket$packet(0x11, 0x1, 0x300)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800)
r2 = socket$key(0xf, 0x3, 0x2)
ppoll(&(0x7f0000000140)=[{r2, 0x5018}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0xe127]}, 0x8)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40, 0x47}, 0x18)
getdents64(r3, &(0x7f0000000280)=""/206, 0xce)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)=[@rdmsr={0x32, 0x18, {0x9ad}}], 0x18})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000400)={0x2})
timer_create(0x0, &(0x7f0000000440)={0x0, 0x29}, &(0x7f0000000480)=<r5=>0x0)
timer_gettime(r5, &(0x7f00000004c0))
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x16940, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000540)={@hyper})
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000580))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000005c0)={{0x2, 0x2, 0x4891, 0x3, 0x2}, 0x0, 0x80000000, 0x7})
r7 = openat$cgroup_devices(r6, &(0x7f0000000640)='devices.deny\x00', 0x2, 0x0)
r8 = fspick(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000006c0)='&&\'\x00', &(0x7f0000000700)='\x00', 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x180c2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000780)={0xfff, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000018780))
socket$packet(0x11, 0x3, 0x300)
r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000018880), 0x0, 0x0)
ioctl$FICLONE(r10, 0x40049409, r7)
syncfs(0xffffffffffffffff)

777.192184ms ago: executing program 0 (id=1541):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async)
mount$fuseblk(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) (async)
syz_pidfd_open(0x0, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x4010, r1, 0xffffd000)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) (async)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
write$tcp_mem(r9, &(0x7f0000000040)={0x4, 0x20, 0x0, 0x20, 0xfffffffffffffffe}, 0x48)
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)

776.868614ms ago: executing program 0 (id=1542):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
eventfd2(0x6, 0x800)
r1 = socket(0x2, 0x3, 0xff)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1})
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r3, &(0x7f0000000480)="532e87ac770767f7429748", 0xb)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020)
socket$inet6_udplite(0xa, 0x2, 0x88)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0)
r4 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x40081271, 0x3)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000200)={0x11, 0xf8, r7, 0x1, 0x5, 0x6, @multicast}, 0x14)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}})
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x7a0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xde, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xa7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4c, 0x2}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xf8, 0x7, 0x1, 0xff, 0x44}, 0x53, &(0x7f00000001c0)={0x5, 0xf, 0x53, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x34, 0x2, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xdf, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe1, 0x3, 0xff, 0x4a0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x9, 0x1, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "aa80d32f3680bb944558ea3de261dfa4"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3157a186a136a25fa63cb9590eeec5ee"}]}, 0x2, [{0xc4, &(0x7f0000000300)=ANY=[@ANYBLOB="c403c3ed84892c6f0f1e03ae3d2745a022f4000000000000000ccb6d779e4b031c039f9cf3da9727a5216b7e93dfd81007ec7401040000616d072b6e1ab63139c8f4177579cf5fbdf6bcaf3ebfb8f79cacdf21024c6a2e4bc1f5285a3bfba19e27c09c75b805fd333835c103a692805d83731cf7e31b65ff629a8f412c987c845e5f0da58e8022e9496d4f7226d66bd0b320344d7d85fc651968af082bba95aaf22c330af19d0d5a7ba8df9c1e798faa537e7093dbd77a09468026645d3b278124367e2a"]}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "9a3e4c3762fad449e8ca4165d6992ef59282fbff65512d4b3a75d70872ff"}}]})

532.333059ms ago: executing program 1 (id=1543):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

525.078289ms ago: executing program 1 (id=1544):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

477.12082ms ago: executing program 1 (id=1545):
r0 = socket(0x1e, 0x4, 0x7ab)
accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000200)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x100})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000001340)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=""/40, 0x28}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001380))
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000013c0)='tunl0\x00')
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001400)=0x6, 0x4)
r5 = syz_usb_connect(0x2, 0x725, &(0x7f0000001440)={{0x12, 0x1, 0x201, 0x84, 0x7f, 0x3f, 0x20, 0x5c6, 0x7102, 0x7f9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x713, 0x4, 0xc3, 0x5, 0xa0, 0x2, [{{0x9, 0x4, 0x3, 0x1, 0x1, 0x78, 0x40, 0x56, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x3, 0x2, [0x8, 0x5], 0x2}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x1002}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x3, 0xf8, "5135983c589c"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x88, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6a, 0xc9cc}]}}]}}, {{0x9, 0x4, 0xa2, 0x5, 0x2, 0xff, 0x3, 0x10, 0x9c, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "153b8b793a17"}, {0x5, 0x24, 0x0, 0x480}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x5, 0x6, 0xf, 0x3, 0x81}, @acm={0x4}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0x9, 0x2b, 0x8, 0x5, 0x9, 0x7, [@generic={0x88, 0x5, "de01006b9289f0bc3b83b91bf52add059bcefd2a09dcb8509d4862fb3d819891cf15f50811024978db71675af07f7ea2b8abf8783a1919f14f760e838b2ab9ae8e7ef66828f5d5f03ea76488caf66fd8330e0e5cc07a80fac132c2418d0f60dde5db874b66b176a5e7589602f61b324e8e1b767b077ad5c04807d0cd0426cccd6cf9e8e248d5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xcf, 0xef5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x80, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xd}]}}]}}, {{0x9, 0x4, 0xe6, 0x4, 0x6, 0xff, 0xff, 0xff, 0x9, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffa, 0x0, 0x2, "cecae2f3dd"}, @as_header={0x7, 0x24, 0x1, 0xc0, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x2}]}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0xe, 0x0, [@generic={0xd9, 0x0, "ddeecbfa7686d54741e6a77fc9c08cc3f8bfd2a8edf3ca58b59a7628782fe8012780d5ffe6c2941ca5dbadf574855e840741d15108ede17dfe7406161958d10ec2df9ea189f9c9fff16c30593a10d213124846450931c9a77d9f3a18e111ab0c133ed07f57185c1c4b776ef56d5de4cd480e5a806f5c0788e2ba5afd7f29256a2c2df3ea7e415dad1468c9fcfb620a21daf0eeec04c15ec9da3d99ace029e4bcbaa136fd1c544f28ffebc64cdb589b8216f24687d85a3757f224ace4949b3053b827c29d0e265296ae4fce015fd342e76331f8c192a0e6"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x5c, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0xc1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xc2, 0x3, 0x80, [@generic={0x91, 0x12, "5f913343751cd01d1f2bb175f869a749722b60492295d470ffb7bf489ee6c72fedd14f53719c08c7ef2f4b6a2ba738e876681e16908a9b69e14d41e2102e200c7324117d002e240f1dccd079238f6f43d1bcaa11f1a8f514b8d12e57b2bc856eff505d9d8705ff1a3af662910a29eaf091f32b1a2b5421749068f4816131523fdebb97a291cc5d0d641c253952e1ed"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x0, 0x4, 0x0, [@generic={0xc8, 0xb, "78a88dccf91b9b4d0f6955a055730fe7cd828bd2927bbcb66b9e1dd5a3a7fc23bf0a048ad8b8614bb8cc616cd9ac180f11a1a0e7f90d4950c1bbc31753eb9e61baa8018a01fbca343d02e253c0472b2ed46733eef8a8319ca2822351f0061f76b7a2da1131401646a4f573f35b9fe9700afeef5808f43ec264c91074e2150e3f5ed5d277d3469bee89834cf146d89cac6ed4ec255861dba357c3cb3f57164439644532d35d9fd0ad08e7cbc1e553e8aa54a4cfbd5a37edff458279acf6ecd56680aa5d70db57"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x4, 0x3, [@generic={0x24, 0x21, "db4ec2c939a21bdde931f5a8fd2c8a5d8c3f30c0150e865dbf3bcdc664cd17b2474d"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x17, 0x6}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x2, 0x2}]}}]}}, {{0x9, 0x4, 0x67, 0x1, 0x6, 0xd8, 0xf, 0xd4, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x3}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x6, 0x5, [0x5, 0x4, 0x1, 0x5, 0x1], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x9, 0x9], 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x8, "1892be"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0x1, 0x7, 0x4, 0x1}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x7, 0x6, "f5"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x4, 0x1, "56f8e0b533"}]}], [{{0x9, 0x5, 0xf, 0x8, 0x400, 0x2, 0x60, 0x1, [@generic={0xc1, 0xa, "32f061ed167a3a38333bfb39a2867c8549e5362f1b47ee69598ea9b969b59311f4e32d9c9f9a491a0d07faa66843a81ea374d83cb42bb36cafa648e2e42f2f28f9317ae6312f45dfdd4de9553471cfd175534387847d847abd3aa6aeed5a36b2a580747b5a7457486166ab446554d646a5aabae8077461e64daeb96315fda859c50df6e691f10cb6c779ad2da1fe7b980947d115a9d2a7f7d3704916f1edd06aad92e4b4da684579a952d2184b962de7294edec5c3a19dbc74e02140b2bcb4"}, @generic={0xd7, 0x8, "99d71a7e5fa7fa75076d0946a4ee246484515e5d1b2b21fd17ff0257dbce7186cbcd7403dea8e9aa3984dd70ecc733b040b03c9aa38bfb72888c166b1838d08d7cab3b7ea1c8a5dcd2ad96bd78a05ec7fdd01619ba4aece890b0eea476d28eef3529a253aa110d3891e738dd83b56a77084fd92c6c4fc439aa100b30a9b6a916529a69add7fec2b8f4a9331cfcadfb7e8ee254816659112de80d89d33d67848172ce039575737cc2464dc663585ad5648a9f60d1cb2d7af2c1472afc9ae3a6c19b55827ad9819c56f1da9ef5d56ab40b424c300ebd"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xfc, 0x1, 0x6, [@generic={0x7c, 0x11, "70d03e0c82b37a5819380baede0d92694167ec91797fd7e863f0ac3c7b693145053c172ac362abe38790b39e7dc1e26aa352001cca854f9945ce7a60a74ae025baaad063819cdbcf7c9d05ac023ba14f9026bb8cb74e2ffb041e0d129725b5753dfa008aa98d9d78527323e169ec2975bf07e7852b056a8bfd4c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x18, 0x76, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x8, 0x40, 0x80, [@generic={0x68, 0xc, "e98f3586432e129ae7971d1e8598e09c6aca84e81fcfaeee04e15afc1530c1e807c0df2dff030f36086f2ab94580e399c806d29b20ac87675776384e7d8285369f62101d4e3bf7013b8dd752c0fc6b5a7f53d0a6a58b4d2b90fc8806db840ffef9eb17e7c5f7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4, 0x1, [@generic={0x3, 0xe, "9f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7fff}]}}]}}]}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x300, 0x8, 0xf, 0x1, 0xdb9e666e5c39cdb2}, 0x2d, &(0x7f0000001bc0)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x56, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x9, 0x3, 0x0, 0xc}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x437, 0xf, 0x6c8, [0x0]}]}, 0x4, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x2001}}, {0x81, &(0x7f0000001c40)=@string={0x81, 0x3, "8ef2aee1a9fa38b986451fe1eaaf1111b744707c2b6933e184c720b4599aa2dab1a6f1467f777288bb4dbdc6fa20d17fd58371ce85844bf7c1c0fa1e3e52336097ad63515af1997e894e0c10e5d1a67b7833ad3a454b16067962d20e34bb3c9b0005bcad4565ef9fbb467c4cdd70fc5b24e16e6c747f845e8652edc3edcb14"}}, {0x10, &(0x7f0000001d00)=@string={0x10, 0x3, "4e2fb73878ebc401c4394a264f4c"}}, {0x9a, &(0x7f0000001d40)=@string={0x9a, 0x3, "00896399be0e1579b7cac4393ce34cc0e4ac15d1feb539a79a694887dac021ef18ab62b082ee67caac8a79a572c91a56350853cb3588b5ead3c7ec2a5ae1dbf7f553e2295e246329491fb72d49a6fbdb07de226fccb930128c069c991e8a33ffb3c18cafe1b5ce83539b977b931267c57758b756b4fd71b394d3f9f0148a8f7d13c5bca2a515cecfee916c0ecd753165332a120f83cb2fea"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000002040)={0x24, &(0x7f0000001e80)={0x20, 0x21, 0xf7, {0xf7, 0x30, "09cd5205f70424e65c1410fbf12079df0ab257aaceacda4569252eda5a3c76ce2e8154b8bd393e362eee3f59a7403d2ed60a930adb0695158e7e73af33dbf459ee53728f09547c9408dc3a5efaf0104b97f071dc3a611e8de8073ac769c863c13d3202ed98621f008a8e5d12a4976ae86cff4aa67abfc29a478ee33ad7a5dc03beffa52045a02f91ebb84dba433d212e2cfc660408005bfdebeaa4455d1c32393aa7b5d756660f73a704f76a88fb9f3926b546b711a81a539d2ac6cb01b0bb2e6c65b779661cac8fb00212027773f2d7dae9adb596a63bb469533508596b5b053e55751ea4e2e88024b6ff41a8c40bb9d71f65b80b"}}, &(0x7f0000001f80)={0x0, 0x3, 0x19, @string={0x19, 0x3, "6afcc1ff6793779230e26954ce92fff14199fcbd704703"}}, &(0x7f0000001fc0)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x5, "a82cfc4b"}, @main=@item_4={0x3, 0x0, 0x9, "af450fc4"}, @local=@item_4={0x3, 0x2, 0x7, "6c20bbf6"}, @global=@item_4={0x3, 0x1, 0xb, "da8a5378"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000002000)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x4b3}}}}, &(0x7f0000002340)={0x2c, &(0x7f0000002080)={0x40, 0xf, 0xf5, "257aed616b4760d305e871bcf8ebe0af62558d0b301748a137279f6e1295c4258d173da611a70f5172b05929b534bf39d3e9afec697fa7438286318e47bf56ef730c65120de43fc5637263999277f5552f249ce000729c1a03b64726d8697fc70e3f32f07acd24fd6c7c4db2c80ccbae8e809fdbebf32d33482f983651169935caaa83db626af2e3c2e720c66194135b100b88769a0f4e05042d961c64e21d155b42e0a70f1c4f5807c3962bed4a0a183f4b0c28e5db3dfff63c8287f0b7678fa03670c414dfb39cba9553e8233516517f2f3fc13dde134cafabd6a3d1bad1d1bd40acd47f68fbebb6408278bc463974fd8767c4c8"}, &(0x7f0000002180)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002200)={0x20, 0x1, 0xbe, "099d618e289c76721aa713b94608ab848ea9107c7c97ff80f53de0c93d3e0c0ca28f8b9a2e786711592e6a529ca102b85ae96322366416534d22da24775631e26980b4881f26a9de567a016a78b7a44e273162bd0913523a8f9cbe08d6b7a54e9fd8035c686b799810b3c78ded34b7ef532a68e252bbc967c8997925e4390826666df0e56f8cb7260cdccea2ee635d092b09782dd7d709ae66f93ad253784bca7c726ae51083818eacc65d55e31e830f2633f1714cc19385bf8292801481"}, &(0x7f0000002300)={0x20, 0x3, 0x1, 0xe4}})
syz_usb_control_io$rtl8150(r5, &(0x7f0000002480)={0x14, &(0x7f0000002380)={0x0, 0xc, 0xb0, {0xb0, 0x30, "0d268964d1ae8146d03dd843eecec6070b7bcd2ecc27fc8f6cf575629b2b847243ec53a53c120855d579d4aa9010535e0cc3e392d59d21acf84a8e9c6e250d5706eb779dc6181c03e693b97fd10250db43050884b0f741ab39ef26293d2fb7e56d9010f06459ee6f2491a0c1a3f193c6520a2203d06762d6bf17775310a31fb6f5f3019ce52ac938eeff4686c777716efd309f2527f06e9e9543096104849298867b033ab249668f63e04ba8ed9f"}}, &(0x7f0000002440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000002680)={0x2c, &(0x7f00000024c0)={0x20, 0x1, 0x91, "d2c61565ce32ba90be7902499debf94ecfb143817ba380a339588c421340216e6c07af857f73d68103b7c50869923732981c5fbbae5393a05ca107fd33bd95b3344bd1424ad55a5e409b2a3ce5a6b15591632095e00685fab35116940c7ad84fe26aaaf56b9e1eb37429aa7bf4dcadd71c3488158f40e4f97693231462c2145f5f8b0c973d4845c9df11d8bc35de73ec9c"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002600)={0xc0, 0x5, 0x5, "bb0924501c"}, &(0x7f0000002640)={0x40, 0x5, 0x1, "da"}})
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r3, &(0x7f00000026c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002740)={'batadv_slave_1\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000002780), r6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002840)={'vxcan1\x00', &(0x7f00000027c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}})
shutdown(r1, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000002880), &(0x7f00000028c0)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000002b80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b40)={&(0x7f0000002940)={0x1d4, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_USERDATA={0xd0, 0xd, 0x1, 0x0, "03c055db8c6606a7742e15f36f58460dbbddd1e438342596f6268bc526816b77664f6df66e8fe92c7f164eb5b5ba6ae1c12ad70242fc9574157247c9d177d1bb47d6d6169ffbecd133a1ed33b750bfde47c9922f4b135f44f51ff589693cf1ed17b6d6229f5c50e29bd1b45b7f24fed6059b3d8de460b9bdd944266e3f865b8688efac462d08a727ff9ab2b880d1e963c7a9253e87bcfe40d7cbf22b4e759026f41f57fa673936a7b610e1154670e526a22d13b05799b34e9bfd7a73d8623ceaefde933ac4d124c7ffc677db"}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0xe5, 0xd, 0x1, 0x0, "eebcf03c10aff9110a8afd5979b0cb73dcf8ef136c191426422665cb5bd1be9c7cb543fd202cd73639edd2177bc690029b30761e59d907fb0725f2f56a88bfd60392ed8575f16277eb261ae4f739199329323842bb44c52df88c8962b041e4e4816f4578e3e30ac7c2fb91cb47b896edea4975b12a4789ea16370d67f480b921600a385377a34f3324677dab7ba4b0ce491d099892f515ea94b753909bb4de1c8ab6dd659a014180e33f3af21dde6f242df3393aad9c1cfb261e7dea11d2f40650d73446130d439d02ec5ed933c9ec5a330f48ec244a09821a0ec798c2b34d4d29"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24008049}, 0x4000)
r8 = timerfd_create(0x3, 0x80000)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f0000002bc0)={0x5, 0x3})
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000002c00), 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002cc0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000002e40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d00)={0xfc, r9, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4421be26c5d843c3e0d4ae078f2538f6a5c5f4828373329b210b4e1eb3bf27bd"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bf76c46f013604db202b22775faa3494"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "923ceb4752dd020e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d13b011a8f9a7dae4c9d49c963ba51f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="982dce2b62cbdf1feb9e6c33484f3f48f6f5b3ab3ca5dc09"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1db3c3f06a98d741"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5b64048ce167529916766a6be4e82e58"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b36d882b2ff4ff535cd9e3eaea72488f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a73d9bf99a3e7f3fc63771cc605a863d"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40001)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ec0), r0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x3c, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040045)

466.95024ms ago: executing program 4 (id=1548):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

459.09682ms ago: executing program 4 (id=1549):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00')
statx(r2, 0x0, 0x7000, 0x200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000040"])
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, &(0x7f0000000440)=ANY=[@ANYBLOB="e8210a00", @ANYRESHEX=0xee01, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=\x00,rootcontext=root,smackfsroot=mountinfo\x00,\x00'])
sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
sendfile(r1, r0, 0x0, 0x80000000)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0)

407.607112ms ago: executing program 4 (id=1550):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080))
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x18, @multicast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r6 = socket(0x2, 0x3, 0xff)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r8})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000840)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c8e6698"})

402.547272ms ago: executing program 4 (id=1551):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0xe3b, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

402.343382ms ago: executing program 4 (id=1552):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffe26)
read$FUSE(r1, &(0x7f0000006140)={0x2020}, 0x2020)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000c0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
write$bt_hci(r1, &(0x7f0000000ac0)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0xff}}}, 0xe)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x3000, 0x6, 0xfffffffc, 0x0, 0x0, [{0x21, 0x60, 0x40, '\x00', 0x6}, {0x8, 0x6, 0x4, '\x00', 0x1}, {0xa8, 0x8, 0x3f}, {0x0, 0x3, 0xa, '\x00', 0x80}, {0xff, 0x9, 0x3, '\x00', 0x3}, {0xa8, 0x6, 0x9, '\x00', 0x85}, {0xf1, 0x2, 0x4, '\x00', 0x6c}, {0x4, 0x40, 0xd, '\x00', 0x40}, {0x46, 0x0, 0x1, '\x00', 0x6}, {0x5, 0x5a, 0x4, '\x00', 0x8}, {0x6, 0x1, 0x4, '\x00', 0x8}, {0x75, 0x7c, 0x9, '\x00', 0xd}, {0x6, 0x0, 0x5, '\x00', 0x8}, {0x1, 0x4, 0x1}, {0x0, 0x4, 0x80, '\x00', 0x6}, {0x8, 0x1, 0xe, '\x00', 0xfd}, {0x5, 0x61, 0x0, '\x00', 0x2}, {0x9, 0xd, 0x30, '\x00', 0x4}, {0x7, 0xc, 0x7, '\x00', 0x8}, {0x7c, 0xe1, 0xf8}, {0x2, 0x77, 0x44, '\x00', 0x56}, {0xb, 0x7, 0xfd, '\x00', 0xc}, {0x7, 0x0, 0x6, '\x00', 0x3}, {0x1, 0xe5, 0x2, '\x00', 0x6}]}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x8000000000001, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="32000000000000001800000000000000a20100000000000032000000000074a9a813252b20c900001800000000000000d00800000000000014000000000000001800000000000000010000005a08000000000000000000001800000000000000f100000000000000320000000000000018000000000000009e030000000000001400000000000000180000000000000001020080ed070000140000000000000018000000000000000100000006000000"], 0xa8})
ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f00000003c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
fsopen(0x0, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x6, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "02ca8770987783fe3e26efe1ff2dc7e1bb2e821a"}, 0x15, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0xfffffffffffffe3a, 0x18, &(0x7f0000000280)={@flat=@handle, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0x14}, @flat=@handle={0x73682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

401.888602ms ago: executing program 4 (id=1553):
r0 = socket$netlink(0x10, 0x3, 0x4)
getpid() (async)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)={0x10, 0x2c, 0x200, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x10014}, 0x8a0)
getpgrp(r1)
r2 = inotify_init1(0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000002c0), 0x4)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)) (async)
io_setup(0x8, &(0x7f0000004200)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00')
io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x8, 0xfffe, r6, 0x0}])
execveat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000200)='\x00']}, &(0x7f00000007c0)={[&(0x7f00000006c0)='\'}\x00', &(0x7f0000000700)='/dev/rnullb0\x00', &(0x7f0000000740)='#[\x00', &(0x7f0000000780)='\x00']}, 0x800) (async)
execveat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000200)='\x00']}, &(0x7f00000007c0)={[&(0x7f00000006c0)='\'}\x00', &(0x7f0000000700)='/dev/rnullb0\x00', &(0x7f0000000740)='#[\x00', &(0x7f0000000780)='\x00']}, 0x800)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x6, &(0x7f0000000040)={0x0, 0x20113, 0x4, @tid=r7}, &(0x7f0000000080)=<r8=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0300004000000229bd7000fcdbdf25100000000800158004002a8008008000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="0400c3802528d119829afd0ee2703ab040b70d5123abae773576adc973848f1ab118b1d26cf0e00ce23d306d752a6978b77429926ddf7d4dca83a2d15db6e34063e0fbd4295d81a41a692006282b8379bf93a8beb9bc63b45724b86a16fdde2f516d50294700000008006700", @ANYRES32=r2, @ANYBLOB="d7cfdd045cbcdefed745a1b069cb54ecba5d038f93fb32e135e646fad711e785c786453dea001500"], 0x33c}, 0x1, 0x0, 0x0, 0x24042090}, 0x20000014) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0300004000000229bd7000fcdbdf25100000000800158004002a8008008000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="0400c3802528d119829afd0ee2703ab040b70d5123abae773576adc973848f1ab118b1d26cf0e00ce23d306d752a6978b77429926ddf7d4dca83a2d15db6e34063e0fbd4295d81a41a692006282b8379bf93a8beb9bc63b45724b86a16fdde2f516d50294700000008006700", @ANYRES32=r2, @ANYBLOB="d7cfdd045cbcdefed745a1b069cb54ecba5d038f93fb32e135e646fad711e785c786453dea001500"], 0x33c}, 0x1, 0x0, 0x0, 0x24042090}, 0x20000014)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r9=>0x0)
ioctl$FIOCLEX(r0, 0x5451) (async)
ioctl$FIOCLEX(r0, 0x5451)
timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000800)=0xdddd0000) (async)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000800)=0xdddd0000)
sendfile(r4, r4, 0x0, 0x7ffff000)
timer_gettime(r8, &(0x7f0000000000))

237.265055ms ago: executing program 0 (id=1554):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='ntfs3\x00', 0x2208008, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@filename='./file2\x00', r3, &(0x7f0000000400)='./file2\x00')
r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
unshare(0x62040200)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008"], 0x24}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "e476d0501796a924", "50ac495230f834b7f7768b40b65222de", '\beKx', "009dd280960531d3"}, 0x28)
r7 = socket$inet6(0x10, 0x2, 0x4)
readv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/185, 0xb9}], 0x1)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x401070cd, 0x3)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000004c0)=0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000200)={0x1, 0x1})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
statx(r9, &(0x7f00000000c0)='./file2\x00', 0x2000, 0x4, &(0x7f0000000500))

236.656195ms ago: executing program 0 (id=1555):
io_setup(0x1, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = eventfd2(0x7f, 0x80000)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x676c, r1, &(0x7f0000000040)="47bbc3e940a8430a4909598bb016e4254129df87e8fa96fcea", 0x19, 0x5, 0x0, 0x3, r2}])
sendto(r1, &(0x7f0000000100)="82d4aa76466c7850808556a1bf7a1107500058ebcc066456a94a57c142e06a6bd32da76f7064ca3b3d869d91f15368bf0f5b3ce3f7bd0004353b45def091e9dcc08b18556e819883d1a3499888e0c5c42ee8b2e5598bc35af2b458d8c70ad42367c64a980760f7c03b61a684ab66bae781e9811be3c7728087d132d45e6a3ed1793c2e75696b92ede6a9feee22fc746cd194505cadd547a1cb23ea1a6901d157d43fc2b6dfe2ed98048ad77257ffb90bf0a73eb13d2c1a4e02", 0xb9, 0x800, &(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$input_event(r3, &(0x7f0000000280)={{}, 0x0, 0x6, 0x614}, 0x18)
sendmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)="f9281f5c2e47ea52107253cb76781777f6863f269251449ad19e6ea6285b8920a71da583c9abcf27c7ce0c5e1414dbdde95eace410426eb9e9e1c54791f9d7504f5b96eedd37bf6dce618c70c136704ffffdc2f2c77b0c22c36ed026a1f3557e9ec3f7664f2168bfe021b1a078d6d7925807a8a02851e6c84605fc914b6a0cfc17a47a06de4ce611c4b2a4be91926041d520e9d52af752c9b356d138221fbc6da64c3e6b55591c59a1e1a1b051692882fb1883a4c7796a59382a897e19", 0xbd}, {&(0x7f0000000400)="141c139428db0f37ea636c59e66e94e3f6de72b16b1b65b8fcf471f8d01de194128e148759dba17dc600e4c0d16465219842bbd70d076c4ed58596ee5c8109718d945fc784f8b56bdfcf098a4817b3a605b4ec089dd78bf59c19ccde7b8c5d3cb81f65c70e8de8418428adbe79272153e6336e18009b19bcb89a059aea7a0d150491214d2edd5d151a0596dfb6e1b538d93bf56a", 0x94}, {&(0x7f00000004c0)="494feb6219117bb945f976432e6b17fc9278642d4b38a94355d78a90fdcba6cab216a263920ae3aa0439c8780c6b648f6d66d8f650fa0a796738fa9c3806e2812157a3a236a76d52eb5a2b8e6a6eaec9f6134cdeb2fee74ea51f8ba6ca2faf4cd1b17aa8ac8475d0eecc941fe49b88b4cbffbcd5ef3800c66a162fffda06a862e069bec1d798b7e8d1116c48dd4458020eb7ea176e6d3dee76e56f3ce9cffba6c467e06ae6922838a5e34f229ec5a50bf72547dd95a76771b0b03fd28ce1d2fb934e6d50e8ace04382c54340d99fa99ddb10ae81f6d88986fa8db89cdd", 0xdd}, {&(0x7f00000005c0)="008b6b740a39d07d68173ad5a8b845edc0ea", 0x12}, {&(0x7f0000000600)="d342a69a437ef4d6f10f1c1ecb1f3ff552429eae60f89823b226f8eebca2b6d89228f2afcb399dd680b0b1ce31e70a56a7c1c9eb727c0d59a89bcd9280220078a7e6c19362e6ac884fd91d784e2c1f8849d25bc8c3cf", 0x56}], 0x5}}, {{&(0x7f0000000700)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="bd52e91c1e55e67bd08c64e3727fa65366ed6917f2f5eb97", 0x18}, {&(0x7f00000007c0)="631a21825c0729f5753448358251fbd1fb4e215945fddd0f9136de27ecba26930e7c5369f8f9bef1fb4272d59622b66489233a8d29aa94c323da9143ec5448a50990bb4fbaab34bd66f3ea172ffe4421aec5f6d929fc85cdc3d3fa67f00ae5f6bac7375741c33a6138f5abf5046299cf82a65213b91e9988a13ff5b8c3dad9006f2c456f9ff116aad212e2af2593c246810fe6d7dcb4332fa34678cfa67afceed4aa870c05e9a3634d0035fa3d1c940788813264ef64aacf3101ac6368f136f6dfa5847ec814b01ee0950ef5c257852c85bcebf2b4fcc6248433da66adee377ee40cd669ff0a3403b839251f4d0f9f3be5fd", 0xf2}, {&(0x7f00000008c0)="5eb6c92c4a896ce20e49f0922fab28eaa83d77f914be9cb64985cf56f625052c6141f16e829f", 0x26}, {&(0x7f0000000900)="b7d3c84b482cd2ac36d7abc93dc1a90d11c9364424c1bce454e97f65b0219e8c3503423c2221dccfca2069ee0a4090bd05c24eb515301fa977c8dd4a8f73ccfbfe00f79dfef79f9412b5cc9ed9a3c9d174a3b8915fef3f12d5a6a9153904f8131a84e7f0148f01300308c48a0ff05e8842b96a55bf6ea844d465cd71d788bb1db80a2416b74e498d6572012f284bca3ac8693fbd56684f88afe7a426a0df98182c43897e59bcebe9f1626c0e230976697da26be9df54fc302bebf4884e53e28342a7b6db902d984f3f45185a24e982ccba56beda5e1807ae6b2c9bdceb4c173bcb42f2bd8f4dd1d629f06602cb3a1d", 0xef}], 0x4, &(0x7f0000000a40)=[{0x70, 0x10f, 0xf5, "6948caa7d0ce9d0cc7bfc3279ef6d279ca3e3ee3f350951a879b7005c124380312f990f4dd9ab13d7e0fcd7008d44b2bf12bf01976c2e27587c938e1135fdaa1afbdb068dd70377138499fecfd258011c4c7ccf94e18f743f4"}], 0x70}}, {{&(0x7f0000000ac0)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000b40)="d026ae77a3a7217e3d3a96f327e355cefb45a62e4b4a26a47919dc023a59b7880786ff3f67cf1bf0e04ace5a2846fb961955af3183307714982b89e9e7dc4f1ba44231e8afe9dc9212db847192a262c6e7e44f69edceb0587e4613dbfefdd63874e7a5cac4b69cb26de2cc7ee38b9129cb647fbb8e0045e66302ab11b82dd1d72968ac4353c325227eb17ca55af21266342c54a71ed680679f80a3f5fc4f944880b1ef754f64bbc151088de4475a785c7f6701bc23efc9b99425bc9e293fe6448512b23575f2017ad79b35d8fabb92412e3a3b1c824821ebcc1ec54031f6d1fb90eb358d075e027564d2793b0d6f9cd245017b9a95459745c9f02a544e6c296d6fd46eb99ac644cdb73d3ce78336993d895c5bb2badfc9435a0c05b75d15ed965eb94a697c006057c42390a5df84e82a540284ff3604ce1390745d8427c71f9e60eac953ea14906653aa013092fd165413b75cb6d0a0fd6b9443df8c361db152256f2609d4428e1e00c31a78a86fd55ff3919fafeeda6eeafbfa473f8013b3dcf3062de9fa4c57ae36ebb192b5decdb06f4295efccd21ce20d68a2df1269151cdc9da9f61208b5d564d0ac8ee9849ee82b03f4972b2bf5e95aa148d2fda27f62df4c22587afd4de2c14290e83a052b335cc1ddf42733814f4cadc4263ffd86cc5fde796b186b1f8ddda33a7fc684b32b65d9b5dd5dd6fc0f3c2496a0d90341159c83405f8de5dbb2cd6461301673a52d7f696463963578814cc70badf05782c52fb44d75287cc23fcb2345e6cabcef8f461c6ab347ec38d2900ec27da20405faee1bcf7e4e4ffb12070d180170d38de5fc504f4b73f610e84f51aed218afe8e67ac22f005ef11e3ba62a3606708cecad97cb9d7254fbe70738ddc555d160f8dce5f2d0077f09cb4e35ca5570857ba9cc32a337b01a7160efd9c0d4986e05fa72f2a12b45d9a8642fbd92d93582742ffc002c0696c5c261341b77abaa8cc0bd12cfd0cdb84dc8de62cb26202b5e8fcb4bc75e07b159c0e4b1e46d5448160bdd559c080430b74c550000c8531f185163baf8b385984298d3bf0e819836ce5acd34dd554f054118974d17ca08defb525fc17d9d40634e579f6fd789038a70fdb72b3f319eda5598af4f1c819f05698299b0ff6ad0d0bd49688f5e906477dd9cb8807b7ca9711249629da50949cfed3ed74afc6ab664c4e694c5023262676e9a40fdba6a09e912b8c4c8268c393109b1ec7143d674eae028347848abe2941c5e234b66e2351973b453ac2ac982a4daba8b4cdf6af2060c4d1c5bc3924f7c38a51a0ab7fbf622c5aad8b49adbf0679585590d2a4f57fbe5d714f8729c1f105233c7546b2736dbd953e162f736f0541a611fb0a36f80bc93bbb3da5c1366a03e116bbf51f44702fdb16e1a9d95ff0a26e4bb4c9732f8d102d42f6368a3a865892d6d4057a2a998a0f86e378fba1081ba6c42f837d2ec7b313602f1ef5f9d06807bb43f0da0f6bb619c3961b267723d909b3014ec1c26c60ed7e7fbfde1a7de03f04ff88f79d6e83bddd74632980f2bfc91c81d5a315907470e599fc13baa22d32e5473ce3cc9444a9f98612a646378da13c7c0671ece9f1f8a3a108f31392a898b761b25904b9c66a268ff9c8e92ad500ced6a67d0957c06ac87e3baed4624a9dfb47a68aee94156075f2469dc94bf4fc58b175a06476a18d593270649ae09177d6bd4d0594fb6ec0313bb23a9a38f9c3ee15f2009998ad7c15b193fbc8bc1b5123e05a37476ffc65e0ae8a5b184ec1ce8de9d6289a561745da048db722e6e0f2156aeedc377d17a6703ecf542d82adab82a6e6d5e396e5a012c8aae3b659c41787f11c9058a3a430f99ce180f8bfb954cc67c9d1551507b454d1dce07af88496df0cd1cf14ddd1363d7e7c45101bf3066aa48ab141118810e9ce5c7cacede85c9c5a672a9369a20df5c706aca1aa67432efd2110fa0189be90f6fea2eefd376923f06f206f92337ceda57922f36a2ad223c7685f66009e6cf32c68f0005704a088c69e61142a7c669492ced03bc3363802ab0e51f13ad28eacd6257cc43025a90c3458163f05923dd9db9b33f7bb7ba03efaeab45432fde217b5b66053dbfedc089474156220d3f2a6e85e2c261667b405f1d70967b824de2bace7bf42ebc9237f3959959ab6a0c4c123b24cbdac4f3692f81fd45be5ca88f5f768914532b5ea10d9695a33a12c13c6323c09e907ffe612822814ac11ef6f6e9f5e17fafca0c010b1770e5184e01ea60ebb2ce11d66c05ba88ff14c350b242c7408b6cb78bed9ea702ea55adb210ef462b9fd74c894ac8c2fd785f2467d122d14bd007d09b212971fd7208ca01b4d54bc2d65d6b806fa6a62b2318cd07fa1fcad7393a0e3993fc1bcbef5bdf9ce7bd15645e9f2b01011226e79a3f188ab51f080a6798258f62b7f4f9ecae645d4dc04cf8c6bb451d1521502b644f030fe35eee2deaed690443311f153ff6e1aad2462118e9f9b28ecbdb2af118d6d229b9c60e287329e60a4530bbc7cb59d7d18aac0724aa0fb37e821d4e4d9ce0c4c4409f741884d2d4f1425f3effda4cfbab5fbc4a82202ca3ef6a3f002e9f2f2e11d41d55a3e04c6045913c66cc97f749877c00df8ea7666bcbb3eb9f6da015478daca2323b5de03c21f7c3b3a84b76e63db7b52fbc8363969143180c156123c307b43c7af46704748e01cada8c02039968776af0e95a5c0265e7e8a50f13c358464602f219c986e5b5ed5f74c31d71f5e06bd2078e293bfa3ea03d45c6e0017460ab83a3dc2f2d7db1cac6b89990d1da3869129072d4823f9ac2518905088cc700475c303726b68ebbb0542842315e733bdebdb5815c219016277fa7a50c9f00c879040db119ef69fc97584410035a7e999203f2fc2c2f5d498a70e0a0e7df07ffbb580f5ff0ed110e0f4663d0b18c3ae7a1de59275700898ff5310ee9441e7cdacddb17b1875dec91b0f3864185c23c6d3c42a3386541b3dc86f15ad662127a976a37cf5b83d622fd02a68138c74b8054dabedd560637a5308b2644b1ed0ad28fcc172cb8d1d68ef43251afa1b89c36854317603b93f78473ef2aec5bd6c4218f5f6160d16809270f66f20015f52b125930a6eda5e7da5d52baa8e873d8e0c1a823321392fae0c6e8dc48402f1b8db38450f1af42b37bb6c8798dc331f8b538ac5b3b5d607aa51d60c3344ffc0dd38e7bd5921e06949236fe6256804c5bfe666e5aa895efbb6b5b2313424a9701eb3ce7868f696c5044f06b0fbd40de501ce434b89b0d5a9452bfbf017f69cd4f4b3c54c00850d61a350b272f5f71c820b49c1d45900b4314c105ccc014464de026c94e21eef301ab3aecb86cdae59f1857ecf6334b6b16614b4bf90c42b8262f3ae30443725c796a3754a51b50f41d198b10c1f34ed66229db28e790c9261ffde9b6314b17994ce575c6f83333804ed0e7ad0ba299bb4088f43d16b055f68452204b9e903ff00838d4d5dafa0560a02b3cb9befb63e24a8524fc54166d5033e9be1e795e52ef96f590710a00e85ea253df9467c1cbe616472809b7925319c634921eb0174b25b7bd7c0a0449684463bf6519d47ec7ace88d7a47245dd61a9ebd51dfd1406136be2ab5a9fb6158092a98754ce76b296b9899cef6bb31c857d1af2a544e46490ee2dcd3ec82118b84725a164c83b0f03f768ca9f0bb7c57a2a32693ef7adbfb116864a5d82c4c68ba53ede1ef43522e9f0cf014368310b1ebe8f997f17ff926479746bf95d669ece2a005373a9f5c53d14c677c4563eb7e20a5aa5373b19f4c762e63b26a1d199eb36b3e7ac4830d62c821aad10676ecba7505110d54ea4d45d220813bd0c3070a2b5896cdb7b6d55f9a73de5ad1d7817c3e28ecac91937dd9bae8822b55877b5a1e3e3ebb4deb918a0bc06d8484a45caf8a173e8a65d87f21067a0ecc9bf8e17faef08a55217d11771d8ec1e48b71f7497d398ed2bf4a7b6c6c94c2eacd01cc4649f27f7ff9020454f3309ef09e8644a18825b74cfa9dd91a6c1f144f966f48f5f94f86e8d7b089a3a98887f934afb661879245e8912116cff7d409c2a75312fca3fda18c014a2271eaccd3c0c8ec6f96ffbb3e29c875d2bb9af051e180454151903b04decba91a0780dce9057e9755d3b931ec418bfaa7ad29eb8272a474c35d4741594671b841ab908bef687f2b3260eb949108c8e5720064735c96897350d2598d5dfd048836b85c346ccd34dc05c0305b9379d1fb2831d905aa3200ed28769a57b3fc6d84e1533ce3c4aa12e551a27a1c27f4ed98022ad7f136337db8d8dcfe5bfeec9508723b628e6e4be24b4ed8030111d6f3b2bc017f556296bf867758eaa9764890baad5db7f2b8bf3fe36f1c7933b09df95755f3eae9c010fa9f6fa244dc044cb4bb68bf31b3471d0729c362bc2de1a498eefbae5b670592fd7e18fac447f85fbd10e9c2b7844e51e705292c9b614e815e42ac582f14827dbb294478c198318a11349e3e5433be489cb20e98223f66592d12f329ea5db0d6879022da45144738c53cebe724b695732d20cc66006ed449c14cb45314f530c894cb93ecb3d975814b1b14110d5588921a9a243cbb53254e7cfdaf7d50a2f302a49dc9e8603592cd182e4efa7e4082ef96eb6c491b44aa26ae0dd157829f962ec72b83040db897ec78fafbcb4c81c23ca96a734de20f6952d7e34e455be4c93e0fea567a3099cec98dc91256745eb0346e4103b580d75607db0e946846391e0e46bb3e8e5bb8effd888ae161b4576e45b5574ffab982666a2534dd6e394080e316e8a8725246830322aa66183d1d4b9003f5c796345319b7a9387c56567a6f1b52b34b731e1ae0488362979f88ce05200400cbcd9d79e42c27ea4e0b5d688354b8e4a707e8a8283d09b7b69cb27256e5863ef1aa6d8afcd95adb0be2bb2d783dc6401c7064a2fbd693e3bd9e1fe8b5f8b4046293a7f1023ef61ed7af015f3708d85cebb477c031f0f897052f5a3aa77299fa71831a4d771ec8c0db78e601b226645a48b38a758b1bdff0b962e27107165af98b6f999fc05fd1ebfb603fa8184cb0fa3cccda3f0d6ddb0d9caa79c8b1fe1b15aa86d6c413a0c5b5fbeb5c1e91b02197b79d0d33d4c38cbc62d04b0be330f3975db8aa82addc968bb5b852ea8bebfd8d334d55b76efc72986f40fda78b622f65c0ac74641d77b6deabe66d9fb30b177a4db13faa9baa72579633490f39aefec2d0c5a6cfb7d99fd956818949de00c073a20fa9a2c598e890aa80bfa5868a7e7b476435ca4dc12c05661104b70454639e39b5f165eab9e9449ec3670a7e5f42ef6cb8d2b3235919403bedb3a2657121f97d232bd97c1472955c2be2bfa7d3bae6f50df4de195f03ebc1f08d0b102f02bbd4b69761863d5ab3a7ff2e7b74e04631c048215fbe4c689443ce57123a9ce2ede63e480e200c7be6fc09b6c83b32e6d436f820ff8e896b8a8bec4c6cca569ce4fd0bbc68912bce13b0792cde0e279b8de0d2e1b75a82d15d14e46fe239ab5c779c6b71416e26d79156013a1427345670da155dbf0a45dfc1ddcb24c7e69a4d85dff146432daa40c83520441ed3224c1a30cd8995b176b806bfdd6c671d7f693d502b7d95cd4063813a0ad9f78f94570f6d5b91100cebccc5fee3c03f889d7327ed9aabb9cd6f6b931da32e504808492b346d080b1c93f2669bf43dd625d1138e638bd2b2fba7bcb0dfc4bbb9c36971ecc61b9c0f05a4fec1a0b99466145fb862eeddb61c1c2316b9887362e3f0976ef466414193", 0x1000}, {&(0x7f0000001b40)="6696632da7b83a2063a225eb1c35522f263263b60d0beea044", 0x19}, {&(0x7f0000001b80)="4b4d172a5395fe68edd1148fd289aeb852f0862171bae526f4df63500d67175834875aebaa8c967bdf047281e4416b47", 0x30}, {&(0x7f0000001bc0)="738bc0f75677f893a5e8e6350a31a14011d3f196aa5261d72f933db5556a2ce5537b6b5693d6c501b0f70cb5b559e3f2603bb4913ed5cef5ba03", 0x3a}, {&(0x7f0000001c00)=']', 0x1}], 0x5, &(0x7f0000001cc0)=[{0x108, 0x107, 0x7, "fbae2b7263cc183a8cf565e38c218b5cc313000c7f843c05fc8b4ca2b80234d362fec830834e16798b42e25b608396dd7418a4b58fea8899e40477852493e454095b8a8c9a801232690e9aba83dd13fb70bd62a8ed34a8425f5f1af092dbffc724a803dd48297ccb8c2b67385435a8aa57a72b4d2525b729fe6dab07fb2a8d1b74d80e764e926b13e6051c7e2ce71d67ac67ac5fc0ad877f78be10c08cfb84df7d8cd2b1f471e26147f13724e21f24c3fe79df71e10e93a9ba11efbf4ba3422d62ca06ba3cceb75917099013da818b262f432b3e1d260edda85ee58547ab668b5db5e3f49870de68b8c35d2c62e6ad03c91e4784b2"}, {0xb0, 0x1, 0x2, "d69af55bdf2b9b47fe46ed22fbf489b333663d1d514af5221a74a11c9a39fdfca1ba821d46ec4061072ac371e7ef3ee1251aa52c73704c8336bea91605a87bb364660aca1a6d95a966064b22f7ef61e40fd29f29caf01bba1d0c609d2e11924b6f8d80ca4d75b3338c039fe8b763b9c99972dd767349dc461ffadc736f81806a16b262c4be3f8bc0ac67d4927d1a8a8d19ed27d4b532fe7230cfa0"}, {0x100, 0x1be, 0x6, "ea62969aa8f5c7adfa55c32be1ce93d685660592b5c08a48a5f6d662ca2ae0ae4567187f0059e962001a1025147eb41e0219577a91436870bb0c46952ffa141a351443b0a56a16092ac48fada3c17c6f4dc55cfda5a2705c93a730bf74bf7f4ec3061e07c99553b75b3e54bee5b6a0dc70e83e98df5e621ee7b8c4c702f3c9cc3bb1f625af039967acb89b00897397e74a97db73881ed4ac00157594780bbfac33f165c364084d886cb44e56e4340eb657e0befd128c960956461271442a509def0f838d8c49d1b1b82f184f41a0ba988d2b983b0dfac16055d262dd38d3f3185dde2e571753a9c825a4b0df59b711"}, {0x1010, 0x6, 0x2a, "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"}], 0x12c8}}], 0x3, 0x80)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$addseals(r4, 0x409, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003140)={'syztnl2\x00', &(0x7f00000030c0)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0xf5, 0x68, 0x5, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7847, 0x3, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x8, 0x60, 0x5ba, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x8000, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003280)={'gre0\x00', &(0x7f0000003240)={'erspan0\x00', <r8=>0x0, 0x20, 0xf, 0x40, 0x76, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, {[@end]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000032c0)={@mcast1, <r9=>0x0}, &(0x7f0000003300)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000003500)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000034c0)={&(0x7f0000003340)={0x150, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000003540)='geneve1\x00', 0x10)
r10 = fsmount(0xffffffffffffffff, 0x16475487a8d98b9, 0x70)
ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000003580)=r7)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r10, 0x4068aea3, &(0x7f00000035c0)={0xd5, 0x0, 0x10})
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000003640)={'bridge_slave_1\x00', {0x2, 0x4e21, @private=0xa010102}})
setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000003680)=0x6, 0x4)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000036c0), r10)
io_destroy(r0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x7c, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1800000, 0x400, 0x1e0, 0xfffffaa9, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c5}, 0x8000)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000003880), r10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000003940)={'syztnl0\x00', &(0x7f00000038c0)={'ip6tnl0\x00', <r13=>0x0, 0x29, 0x42, 0x0, 0x1, 0x4a, @rand_addr=' \x01\x00', @private1, 0x10, 0x7, 0x8, 0xd}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003980)={'vxcan0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000003f40)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003f00)={&(0x7f00000039c0)={0x530, r12, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x1, 0x7, 0x6}, {0x9, 0x9, 0x40, 0xe66}, {0x9, 0xff, 0x5, 0xeb8}, {0x8001, 0x6, 0x7f, 0xae2}, {0x2, 0x2, 0xd, 0x6}, {0x53, 0x8, 0xff, 0x749}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x4004010}, 0x20008000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r2, 0xafac3000)

197.654006ms ago: executing program 0 (id=1556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xbf, 0x0, 0x8}]}}}], 0x18}}], 0x1, 0x46000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)) (async, rerun: 64)
r4 = syz_open_pts(r3, 0x6301)
r5 = dup3(r4, r3, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006306"], 0x13c}}, 0x0) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', <r8=>0x0}) (async)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00')
writev(r9, &(0x7f0000000340)=[{&(0x7f00000002c0)="3210e7c8f205c5fd2aeaf88a7cb7034f4672a005e8d21fefc44da37e89198ef6c57f5332845a013eb9f726d0f88bdce4ac7c7891c6515aab29b3435a069ed7db01e5e41e9e93dee574627745594f757ce8ca521a1cb0b7d6c8d59be6d2af52c0a99be1b02e353f", 0x1}], 0x61)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) (async)
setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) (async)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) (async)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})

190.018156ms ago: executing program 0 (id=1557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x801, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
clock_gettime(0x3, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0x60000004})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000002080)={0x2c, &(0x7f0000001ec0)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000100)=ANY=[], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7a}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xd9}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n#'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4134}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0xffffffffffffff8e, 0x5}, 0x0, 0x0})
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket(0x1f, 0x800, 0x0)
write(r6, &(0x7f0000000000)="2400000020005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000800030002081000418e00000004fcff", 0x58}], 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
dup2(r2, r7)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r9 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x8c5)

1.23794ms ago: executing program 3 (id=1558):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000200)='./bus\x00', 0x0)
r3 = socket$inet6(0xa, 0x801, 0x8001)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e1f, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffe01}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108)
lsm_list_modules(0x0, 0x0, 0x18)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000080)=0x4e8700b3, 0x4)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0)
timer_create(0x5, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000151000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x3c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000380)={{0x0, 0x0, 0x80, {0x0, 0x80a0000, 0x3}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118b76ab546617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8)
sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r9, @ANYRESHEX=r7], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
close_range(r4, 0xffffffffffffffff, 0x0)

623.459µs ago: executing program 3 (id=1559):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0xfffff, r1)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0})

279.229µs ago: executing program 3 (id=1560):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r2 = memfd_create(&(0x7f0000000400)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asw-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00N\xc4t\xfd\xc4\xe4\xe6;T\xd9\xda\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1da\xc0\xd8\xc9\xb2A\x7f\x9d\vCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/576, 0x1)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000640)={0x0, 0x7, {0x4, @usage=0x10000, 0x0, 0x5, 0x0, 0x1fffffffe0000, 0x3, 0xfff, 0x6a3, @usage=0x4, 0x7, 0xfffffffc, [0x4, 0x0, 0x2, 0x6, 0xa94, 0x1]}, {0x8, @usage=0x8d, 0x0, 0x1, 0x8001, 0xe, 0x8, 0x1, 0x410, @usage=0xc5, 0xfff, 0x62, [0x4, 0x7fffffffffffffff, 0x1, 0xffff, 0x9aa, 0x1]}, {0x5, @usage=0xbf, <r3=>0x0, 0x9, 0x2, 0x519, 0x6f446e46, 0xffffffffffffbc72, 0x21, @usage, 0x0, 0xff, [0x1, 0x200, 0x7, 0xad9, 0x4, 0x37]}, {0x2e, 0x3, 0x2}})
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a40)={r3, 0x10, 0x1, [0x5, 0x8, 0x4, 0x9, 0x3], [0x3, 0x2, 0xffffffffffffffff, 0x3, 0x7, 0x6, 0x5, 0x9, 0x0, 0x80, 0xed8, 0x5957, 0x966, 0x2e3, 0x2, 0x100000000, 0x3ff, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x7, 0xe, 0x30f, 0x800, 0x0, 0x8, 0x180, 0x13d3, 0x8, 0x2, 0xf8, 0x4, 0x2, 0xfffffffffffffffc, 0x100, 0x97f6, 0x4, 0x4, 0x3, 0x0, 0x101, 0x1000, 0xffffffffffffffe3, 0x13, 0x5, 0x0, 0xa80, 0x3, 0x5938, 0x8, 0x1, 0x8, 0x2, 0x4, 0x2, 0x6, 0xbc0, 0x5, 0xff, 0x8, 0x7, 0x80000001, 0x4, 0x9, 0xa, 0x2, 0x9, 0x4d0, 0xffffffffffffffff, 0x8, 0x9, 0x1, 0xd, 0xaf, 0x7, 0x4, 0x2, 0x768d, 0x1, 0x5, 0xe, 0xd9, 0x0, 0x2c5, 0x9, 0x0, 0x8, 0x9, 0x7, 0x3, 0x5, 0x9, 0x8, 0x57e1, 0x8001, 0x2c7b92bf, 0x8000000000000000, 0x9, 0x8, 0x9, 0x0, 0x1ff, 0x0, 0x100000001, 0x9, 0xffffffffffffffff, 0xe87, 0x80000000, 0x0, 0xe0d1, 0x7, 0x4]})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]})
r4 = getpgrp(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x10000008)
syz_pidfd_open(r4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=1561):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00])
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00')
pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37)

0s ago: executing program 3 (id=1563):
r0 = socket$igmp(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=12432,\x00'/33]) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@noprefix}]})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC]) (async)
r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x80081270, 0x3) (async, rerun: 32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (rerun: 32)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async, rerun: 32)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) (rerun: 32)
ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async, rerun: 32)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x31) (async, rerun: 32)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x7f5, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts.
[   19.658632][   T36] audit: type=1400 audit(1757082444.029:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   19.662003][   T36] audit: type=1400 audit(1757082444.029:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.675720][  T281] cgroup: Unknown subsys name 'net'
[   19.677205][   T36] audit: type=1400 audit(1757082444.049:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.677327][  T281] cgroup: Unknown subsys name 'devices'
[   19.843531][  T281] cgroup: Unknown subsys name 'hugetlb'
[   19.849438][  T281] cgroup: Unknown subsys name 'rlimit'
[   20.000718][   T36] audit: type=1400 audit(1757082444.369:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.024055][   T36] audit: type=1400 audit(1757082444.369:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.027523][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.049017][   T36] audit: type=1400 audit(1757082444.369:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.080579][   T36] audit: type=1400 audit(1757082444.439:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.106333][   T36] audit: type=1400 audit(1757082444.439:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.135804][   T36] audit: type=1400 audit(1757082444.509:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.161604][   T36] audit: type=1400 audit(1757082444.509:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.161610][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.958770][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.965880][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.973042][  T290] bridge_slave_0: entered allmulticast mode
[   20.979215][  T290] bridge_slave_0: entered promiscuous mode
[   20.988654][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.995727][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.003019][  T289] bridge_slave_0: entered allmulticast mode
[   21.009284][  T289] bridge_slave_0: entered promiscuous mode
[   21.018621][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.025868][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.033019][  T290] bridge_slave_1: entered allmulticast mode
[   21.039205][  T290] bridge_slave_1: entered promiscuous mode
[   21.049106][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.056181][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.063416][  T289] bridge_slave_1: entered allmulticast mode
[   21.069652][  T289] bridge_slave_1: entered promiscuous mode
[   21.082043][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.089113][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.096258][  T291] bridge_slave_0: entered allmulticast mode
[   21.102531][  T291] bridge_slave_0: entered promiscuous mode
[   21.112345][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.119391][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.126585][  T288] bridge_slave_0: entered allmulticast mode
[   21.132823][  T288] bridge_slave_0: entered promiscuous mode
[   21.142272][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.149320][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.156594][  T291] bridge_slave_1: entered allmulticast mode
[   21.162957][  T291] bridge_slave_1: entered promiscuous mode
[   21.172053][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.179100][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.186250][  T288] bridge_slave_1: entered allmulticast mode
[   21.192470][  T288] bridge_slave_1: entered promiscuous mode
[   21.348559][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.355635][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.362978][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.370179][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.379956][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.387024][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.394388][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.401415][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.412047][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.419091][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.427079][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.434203][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.447242][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.454318][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.461617][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.468636][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.507054][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.514309][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.522943][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.530485][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.538020][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.545566][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.552972][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.560334][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.573697][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.580832][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.600448][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.607530][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.624187][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.631263][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.639334][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.646488][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.654417][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.661524][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.669027][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.676081][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.683657][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.690690][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.704569][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.711745][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.759128][  T291] veth0_vlan: entered promiscuous mode
[   21.768018][  T290] veth0_vlan: entered promiscuous mode
[   21.777330][  T288] veth0_vlan: entered promiscuous mode
[   21.792366][  T289] veth0_vlan: entered promiscuous mode
[   21.804234][  T290] veth1_macvtap: entered promiscuous mode
[   21.816003][  T288] veth1_macvtap: entered promiscuous mode
[   21.837996][  T291] veth1_macvtap: entered promiscuous mode
[   21.856150][  T289] veth1_macvtap: entered promiscuous mode
[   21.868353][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   21.946147][  T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.241273][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   22.413940][    T9] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   22.423428][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.432769][    T9] usb 3-1: Product: syz
[   22.437000][    T9] usb 3-1: Manufacturer: syz
[   22.441913][    T9] usb 3-1: SerialNumber: syz
[   22.448067][    T9] usb 3-1: config 0 descriptor??
[   22.504543][  T366] syz.0.11: attempt to access beyond end of device
[   22.504543][  T366] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[   22.517548][  T366] FAT-fs (loop1): unable to read boot sector
[   22.591250][   T64] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   22.602979][  T370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   22.742372][   T64] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[   22.756129][   T64] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   22.776626][   T64] usb 2-1: config 0 has no interface number 0
[   22.788051][   T64] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   22.801340][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.809538][   T64] usb 2-1: Product: syz
[   22.813916][   T64] usb 2-1: Manufacturer: syz
[   22.818527][   T64] usb 2-1: SerialNumber: syz
[   22.827339][   T64] usb 2-1: config 0 descriptor??
[   22.896838][  T384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   22.923404][  T386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   22.944953][   T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   23.065847][  T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   23.075099][  T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   23.102582][   T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   23.113742][   T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1408, setting to 64
[   23.124802][   T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   23.133886][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.136161][    T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   23.153848][  T371] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   23.180395][    T9] asix 3-1:0.0: probe with driver asix failed with error -71
[   23.188502][  T344] usb 2-1: USB disconnect, device number 2
[   23.198309][    T9] usb 3-1: USB disconnect, device number 2
[   23.221386][  T356] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   23.364351][  T371] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   23.371258][  T356] usb 4-1: Using ep0 maxpacket: 32
[   23.378564][  T356] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   23.387195][  T356] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   23.395957][  T356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   23.405347][  T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   23.415180][  T356] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   23.424900][  T356] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   23.437948][  T356] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   23.447144][  T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.456007][  T356] usb 4-1: config 0 descriptor??
[   23.668763][  T356] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   23.692478][  T356] usb 4-1: USB disconnect, device number 2
[   23.699632][  T356] usblp0: removed
[   23.745043][  T400] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   23.752304][  T400] rust_binder: Write failure EINVAL in pid:14
[   23.815897][  T403] rust_binder: Write failure EINVAL in pid:16
[   23.822509][  T403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   23.828769][  T403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16
[   23.840402][  T405] rust_binder: Write failure EFAULT in pid:17
[   23.957232][  T410] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[   24.101258][  T356] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   24.221234][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   24.251329][  T356] usb 4-1: Using ep0 maxpacket: 32
[   24.257827][  T356] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   24.266509][  T356] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   24.275324][  T356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   24.284479][  T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   24.294676][  T356] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   24.305074][  T356] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   24.319032][  T356] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   24.329065][  T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.338771][  T356] usb 4-1: config 0 descriptor??
[   24.382465][    T9] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[   24.390937][    T9] usb 2-1: config 0 has no interface number 0
[   24.397151][    T9] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   24.408555][    T9] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   24.420431][    T9] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[   24.431978][    T9] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   24.441973][    T9] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   24.458000][    T9] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[   24.467253][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.475920][    T9] usb 2-1: Product: syz
[   24.480238][    T9] usb 2-1: Manufacturer: syz
[   24.484939][    T9] usb 2-1: SerialNumber: syz
[   24.490931][    T9] usb 2-1: config 0 descriptor??
[   24.497017][  T410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   24.546219][  T356] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   24.614371][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   24.705370][   T36] kauditd_printk_skb: 103 callbacks suppressed
[   24.705402][   T36] audit: type=1400 audit(1757082449.079:177): avc:  denied  { setopt } for  pid=409 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   24.754124][   T36] audit: type=1400 audit(1757082449.129:178): avc:  denied  { read write } for  pid=387 comm="syz.3.18" name="lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   24.777732][   T36] audit: type=1400 audit(1757082449.149:179): avc:  denied  { open } for  pid=387 comm="syz.3.18" path="/dev/usb/lp0" dev="devtmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   24.815135][    T9] ums-alauda 2-1:0.189: USB Mass Storage device detected
[   24.833294][    T9] scsi host1: usb-storage 2-1:0.189
[   24.841612][    T9] usb 2-1: USB disconnect, device number 3
[   24.860277][   T36] audit: type=1400 audit(1757082449.229:180): avc:  denied  { create } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.879989][   T36] audit: type=1400 audit(1757082449.229:181): avc:  denied  { bind } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.899328][   T36] audit: type=1400 audit(1757082449.229:182): avc:  denied  { listen } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.919216][   T36] audit: type=1400 audit(1757082449.229:183): avc:  denied  { connect } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.939687][   T36] audit: type=1400 audit(1757082449.239:184): avc:  denied  { write } for  pid=387 comm="syz.3.18" path="socket:[4441]" dev="sockfs" ino=4441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.965876][   T36] audit: type=1400 audit(1757082449.239:185): avc:  denied  { accept } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.985219][   T36] audit: type=1400 audit(1757082449.239:186): avc:  denied  { read } for  pid=387 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   25.023491][  T344] usb 4-1: USB disconnect, device number 3
[   25.030483][  T344] usblp0: removed
[   25.552151][  T427] binder: Bad value for 'max'
[   25.554125][   T31] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[   25.558982][    T9] rust_binder: 368: removing orphan mapping 0:24
[   25.564883][   T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5
[   25.595094][   T31] usb 1-1: USB disconnect, device number 2
[   25.595146][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   25.743982][  T329] Bluetooth: hci1: Frame reassembly failed (-84)
[   26.044306][  T462] rust_binder: Write failure EFAULT in pid:38
[   26.291520][  T356] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   26.300763][  T475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   26.451562][  T356] usb 2-1: Using ep0 maxpacket: 16
[   26.458333][  T356] usb 2-1: unable to get BOS descriptor or descriptor too short
[   26.467093][  T356] usb 2-1: config 7 has an invalid interface number: 188 but max is 0
[   26.475951][  T356] usb 2-1: config 7 has no interface number 0
[   26.482349][  T356] usb 2-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023
[   26.492784][  T356] usb 2-1: config 7 interface 188 has no altsetting 0
[   26.500932][  T356] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76
[   26.510083][  T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.518136][  T356] usb 2-1: Product: syz
[   26.522545][  T356] usb 2-1: Manufacturer: syz
[   26.527134][  T356] usb 2-1: SerialNumber: syz
[   26.532877][  T463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   26.691452][  T449] Bluetooth: hci0: command 0x1003 tx timeout
[   26.697782][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   26.735102][  T483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.45'.
[   26.745513][  T483] netlink: 344 bytes leftover after parsing attributes in process `syz.2.45'.
[   26.745564][  T458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   26.754961][  T458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   26.765474][  T483] pim6reg1: entered promiscuous mode
[   26.778984][  T483] pim6reg1: entered allmulticast mode
[   26.813011][  T484] netlink: 56 bytes leftover after parsing attributes in process `syz.2.45'.
[   26.838877][  T488] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   26.848965][  T488] SELinux: failed to load policy
[   26.983960][  T495] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true
[   27.087403][  T497] rust_binder: Failed copying remainder into alloc: EFAULT
[   27.097072][  T497] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   27.104591][  T497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   27.115990][  T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42
[   27.249324][  T518] rust_binder: Error while translating object.
[   27.260524][  T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   27.267322][  T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57
[   27.661282][  T391] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   27.801319][  T391] usb 4-1: device descriptor read/64, error -71
[   27.811418][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[   27.811515][  T416] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   27.971919][  T539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'.
[   27.995880][  T541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.995913][  T541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   28.041268][  T391] usb 4-1: device descriptor read/64, error -71
[   28.183916][  T551] rust_binder: Write failure EFAULT in pid:66
[   28.291275][  T391] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   28.431281][  T391] usb 4-1: device descriptor read/64, error -71
[   28.671238][  T391] usb 4-1: device descriptor read/64, error -71
[   28.781339][  T391] usb usb4-port1: attempt power cycle
[   28.892189][  T560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55
[   28.981793][  T356] rndis_host 2-1:7.188: invalid descriptor buffer length
[   29.003054][  T356] usb 2-1: bad CDC descriptors
[   29.008379][  T356] cdc_acm 2-1:7.188: invalid descriptor buffer length
[   29.008873][  T563] syz.1.73 uses obsolete (PF_INET,SOCK_PACKET)
[   29.018572][  T356] usb 2-1: USB disconnect, device number 4
[   29.089688][  T567] SELinux: security_context_str_to_sid () failed with errno=-22
[   29.121278][  T391] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   29.142401][  T391] usb 4-1: device descriptor read/8, error -71
[   29.272491][  T391] usb 4-1: device descriptor read/8, error -71
[   29.511330][  T391] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   29.532494][  T391] usb 4-1: device descriptor read/8, error -71
[   29.662675][  T391] usb 4-1: device descriptor read/8, error -71
[   29.771417][  T391] usb usb4-port1: unable to enumerate USB device
[   30.081300][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   30.171390][  T372] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   30.221274][   T31] usb 2-1: device descriptor read/64, error -71
[   30.321270][  T372] usb 3-1: Using ep0 maxpacket: 16
[   30.352786][   T36] kauditd_printk_skb: 36 callbacks suppressed
[   30.352802][   T36] audit: type=1400 audit(1757082454.729:223): avc:  denied  { unlink } for  pid=573 comm="syz.2.77" name="#3" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   30.381483][   T36] audit: type=1400 audit(1757082454.729:224): avc:  denied  { mount } for  pid=573 comm="syz.2.77" name="/" dev="overlay" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.461298][   T31] usb 2-1: device descriptor read/64, error -71
[   30.500090][  T372] usb 3-1: unable to get BOS descriptor or descriptor too short
[   30.509392][  T372] usb 3-1: unable to read config index 0 descriptor/start: -71
[   30.517146][  T372] usb 3-1: can't read configurations, error -71
[   30.527985][   T36] audit: type=1400 audit(1757082454.899:225): avc:  denied  { create } for  pid=580 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   30.547470][   T36] audit: type=1400 audit(1757082454.899:226): avc:  denied  { ioctl } for  pid=580 comm="syz.3.79" path="socket:[5283]" dev="sockfs" ino=5283 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   30.582208][   T36] audit: type=1400 audit(1757082454.959:227): avc:  denied  { mounton } for  pid=584 comm="syz.0.81" path="/proc/61/task" dev="proc" ino=5296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   30.605234][   T36] audit: type=1400 audit(1757082454.979:228): avc:  denied  { getopt } for  pid=584 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   30.625168][   T36] audit: type=1400 audit(1757082454.979:229): avc:  denied  { bind } for  pid=584 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   30.653688][   T36] audit: type=1400 audit(1757082455.029:230): avc:  denied  { ioctl } for  pid=589 comm="syz.0.82" path="socket:[5302]" dev="sockfs" ino=5302 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   30.701276][   T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   30.713323][  T593] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   30.781329][  T356] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   30.829597][  T598] binder: Bad value for 'defcontext'
[   30.844625][   T31] usb 2-1: device descriptor read/64, error -71
[   30.860423][  T391] rust_binder: 573: removing orphan mapping 0:96
[   30.875789][   T36] audit: type=1400 audit(1757082455.249:231): avc:  denied  { append } for  pid=601 comm="syz.2.87" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   30.899125][   T36] audit: type=1400 audit(1757082455.249:232): avc:  denied  { setopt } for  pid=601 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.941293][  T356] usb 4-1: Using ep0 maxpacket: 32
[   30.952780][  T356] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   30.961345][  T356] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   30.970134][  T356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   30.981096][  T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   30.990808][  T356] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   31.000745][  T356] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   31.014203][  T356] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   31.023648][  T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.032729][  T356] usb 4-1: config 0 descriptor??
[   31.073456][  T610] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   31.081312][  T610] rust_binder: Write failure EINVAL in pid:83
[   31.101306][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   31.101368][   T31] usb 2-1: device descriptor read/64, error -71
[   31.231418][   T31] usb usb2-port1: attempt power cycle
[   31.241208][  T356] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   31.258328][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00
[   31.268541][  T356] usb 4-1: USB disconnect, device number 8
[   31.274508][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.285123][  T356] usblp0: removed
[   31.291471][   T10] usb 1-1: config 0 descriptor??
[   31.311687][  T616] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   31.318896][  T616] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   31.343374][  T619] rust_binder: 91: no such ref 2
[   31.348634][  T619] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   31.497706][  T633] pim6reg1: entered promiscuous mode
[   31.503148][  T633] pim6reg1: entered allmulticast mode
[   31.571336][   T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   31.592959][   T31] usb 2-1: device descriptor read/8, error -71
[   31.710356][   T10] wacom 0003:056A:009F.0001: unknown main item tag 0x0
[   31.717433][   T10] wacom 0003:056A:009F.0001: item fetching failed at offset 3/5
[   31.725684][   T10] wacom 0003:056A:009F.0001: parse failed
[   31.731602][   T10] wacom 0003:056A:009F.0001: probe with driver wacom failed with error -22
[   31.732515][   T31] usb 2-1: device descriptor read/8, error -71
[   31.801325][  T372] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   31.912601][   T45] usb 1-1: USB disconnect, device number 3
[   31.951338][  T372] usb 3-1: Using ep0 maxpacket: 16
[   31.957896][  T372] usb 3-1: config index 0 descriptor too short (expected 25953, got 27)
[   31.966651][  T372] usb 3-1: config 9 has an invalid interface number: 144 but max is 0
[   31.978375][  T372] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[   31.989311][   T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   31.997307][  T372] usb 3-1: config 9 has no interface number 0
[   32.003644][  T372] usb 3-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   32.016974][  T372] usb 3-1: config 9 interface 144 has no altsetting 0
[   32.025816][  T372] usb 3-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68
[   32.035255][  T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.043378][  T372] usb 3-1: Product: syz
[   32.047701][  T372] usb 3-1: Manufacturer: syz
[   32.052784][  T372] usb 3-1: SerialNumber: syz
[   32.057589][   T31] usb 2-1: device descriptor read/8, error -71
[   32.065655][  T372] r8152-cfgselector 3-1: Unknown version 0x0000
[   32.079880][  T639] can: request_module (can-proto-0) failed.
[   32.126588][  T644] 9pnet_fd: p9_fd_create_tcp (644): problem connecting socket to 127.0.0.1
[   32.163691][  T649] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   32.192374][   T31] usb 2-1: device descriptor read/8, error -71
[   32.301377][   T31] usb usb2-port1: unable to enumerate USB device
[   32.439459][  T372] r8152 3-1:9.144: Expected endpoints are not found
[   32.456276][  T372] r8152-cfgselector 3-1: USB disconnect, device number 5
[   32.464818][  T668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   32.464849][  T668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:80
[   32.751262][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   32.891716][  T673] support for cryptoloop has been removed.  Use dm-crypt instead.
[   32.912347][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.923385][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.933168][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   32.946235][   T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[   32.955349][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.965567][   T31] usb 4-1: config 0 descriptor??
[   32.993548][  T681] netlink: 'syz.2.112': attribute type 4 has an invalid length.
[   33.002719][  T681] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.112'.
[   33.016494][  T681] rust_binder: Error while translating object.
[   33.016542][  T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   33.023385][  T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:114
[   33.097670][  T694] rust_binder: 686 RLIMIT_NICE not set
[   33.306072][  T727] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96
[   33.320936][  T372] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   33.376151][   T31] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.0002/input/input7
[   33.389435][   T31] uclogic 0003:28BD:1903.0002: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0
[   33.481285][  T372] usb 3-1: Using ep0 maxpacket: 16
[   33.488116][  T372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.499408][  T372] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7
[   33.510372][  T372] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   33.520398][  T372] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7
[   33.535250][  T372] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.544981][  T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.553154][  T372] usb 3-1: Product: syz
[   33.557326][  T372] usb 3-1: Manufacturer: syz
[   33.562147][  T372] usb 3-1: SerialNumber: syz
[   33.576182][   T64] usb 4-1: USB disconnect, device number 9
[   33.662558][   T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   33.752344][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.752373][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.759055][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.765604][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.772245][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.774123][  T693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'.
[   33.778756][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.788490][  T693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.794691][  T756] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.801425][  T693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.809671][   T45] usb 2-1: device descriptor read/64, error -71
[   33.822614][  T693] netlink: 'syz.2.117': attribute type 4 has an invalid length.
[   33.844278][  T372] usb 3-1: unknown interface protocol 0x10, assuming v1
[   33.851605][  T372] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[   33.859504][  T372] usb 3-1: 2:1 : unknown format tag 0x2 is detected.  processed as MPEG.
[   33.868948][  T372] usb 3-1: found format II with max.bitrate = 8, frame size=5
[   33.876647][  T372] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   33.885778][  T372] usb 3-1: USB disconnect, device number 6
[   33.893229][  T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   33.930709][  T770] capability: warning: `syz.0.134' uses 32-bit capabilities (legacy support in use)
[   34.071275][   T45] usb 2-1: device descriptor read/64, error -71
[   34.311280][   T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   34.344814][  T817] rust_binder: 816 RLIMIT_NICE not set
[   34.346981][  T816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103
[   34.361550][  T819] 9pnet_fd: Insufficient options for proto=fd
[   34.391220][  T372] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   34.408641][   T31] rust_binder: 815: removing orphan mapping 0:4248
[   34.441255][   T45] usb 2-1: device descriptor read/64, error -71
[   34.541954][  T372] usb 1-1: not running at top speed; connect to a high speed hub
[   34.550863][  T372] usb 1-1: config 95 has an invalid interface number: 1 but max is 0
[   34.559237][  T372] usb 1-1: config 95 has no interface number 0
[   34.566054][  T372] usb 1-1: config 95 interface 1 has no altsetting 0
[   34.574572][  T372] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[   34.584157][  T372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.592233][  T372] usb 1-1: Product: syz
[   34.596622][  T372] usb 1-1: Manufacturer: syz
[   34.601254][  T372] usb 1-1: SerialNumber: syz
[   34.671222][  T356] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   34.701255][   T45] usb 2-1: device descriptor read/64, error -71
[   34.812655][   T45] usb usb2-port1: attempt power cycle
[   34.822425][  T356] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[   34.830723][  T356] usb 4-1: config 0 has no interface number 1
[   34.836959][  T356] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   34.847045][  T356] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   34.860321][  T356] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[   34.865005][   T31] rust_binder: 837: removing orphan mapping 0:4232
[   34.869583][  T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   34.889910][  T356] usb 4-1: SerialNumber: syz
[   34.897110][  T356] usb 4-1: config 0 descriptor??
[   34.904205][  T356] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[   34.905506][  T372] usb 1-1: USB disconnect, device number 4
[   34.912152][  T356] usb 4-1: No valid video chain found.
[   34.935902][  T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.965786][  T845] SELinux: security_context_str_to_sid () failed with errno=-22
[   35.107381][  T356] usb 4-1: USB disconnect, device number 10
[   35.151286][   T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   35.172421][   T45] usb 2-1: device descriptor read/8, error -71
[   35.302339][   T45] usb 2-1: device descriptor read/8, error -71
[   35.534070][   T36] kauditd_printk_skb: 94 callbacks suppressed
[   35.534086][   T36] audit: type=1400 audit(1757082459.909:327): avc:  denied  { watch } for  pid=857 comm="syz.0.161" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   35.571301][   T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   35.602517][   T45] usb 2-1: device descriptor read/8, error -71
[   35.679055][   T36] audit: type=1400 audit(1757082460.049:328): avc:  denied  { name_bind } for  pid=861 comm="syz.3.162" path="socket:[7359]" dev="sockfs" ino=7359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   35.713858][   T36] audit: type=1400 audit(1757082460.089:329): avc:  denied  { setopt } for  pid=863 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   35.734561][   T45] usb 2-1: device descriptor read/8, error -71
[   35.821696][  T869] rust_binder: Write failure EFAULT in pid:146
[   35.835720][   T36] audit: type=1400 audit(1757082460.209:330): avc:  denied  { block_suspend } for  pid=870 comm="syz.2.166" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   35.851399][   T45] usb usb2-port1: unable to enumerate USB device
[   35.934852][  T876] Zero length message leads to an empty skb
[   35.942271][   T36] audit: type=1400 audit(1757082460.309:331): avc:  denied  { ioctl } for  pid=866 comm="syz.3.164" path="socket:[8466]" dev="sockfs" ino=8466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   35.966884][   T36] audit: type=1400 audit(1757082460.309:332): avc:  denied  { sys_module } for  pid=866 comm="syz.3.164" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   36.061408][  T372] rust_binder: 879: removing orphan mapping 0:24
[   36.084134][   T36] audit: type=1400 audit(1757082460.459:333): avc:  denied  { write } for  pid=888 comm="syz.2.170" name="udp6" dev="proc" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   36.108938][  T889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   36.127039][   T36] audit: type=1400 audit(1757082460.499:334): avc:  denied  { connect } for  pid=886 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   36.131416][   T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   36.137182][   T36] audit: type=1400 audit(1757082460.509:335): avc:  denied  { listen } for  pid=886 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   36.302405][   T45] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   36.312003][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.320768][   T45] usb 1-1: config 0 descriptor??
[   36.732762][   T45] usb 1-1: Cannot set autoneg
[   36.738088][   T45] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   36.753828][   T45] usb 1-1: USB disconnect, device number 5
[   36.806048][   T36] audit: type=1400 audit(1757082461.179:336): avc:  denied  { create } for  pid=918 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.921926][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.929963][  T923] incfs: Options parsing error. -22
[   36.935531][  T923] incfs: mount failed -22
[   36.992826][  T933] kvm: apic: phys broadcast and lowest prio
[   37.291260][   T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.421263][   T45] usb 3-1: device descriptor read/64, error -71
[   37.661248][   T45] usb 3-1: device descriptor read/64, error -71
[   37.674131][  T948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   37.674155][  T948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:196
[   37.901253][   T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   37.991441][  T954] overlay: filesystem on ./bus is read-only
[   38.027935][  T963] netlink: 'syz.1.198': attribute type 13 has an invalid length.
[   38.041261][   T45] usb 3-1: device descriptor read/64, error -71
[   38.281249][   T45] usb 3-1: device descriptor read/64, error -71
[   38.391425][   T45] usb usb3-port1: attempt power cycle
[   38.562104][  T973] overlayfs: failed to resolve './file0': -2
[   38.582276][  T975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   38.594042][  T975] erspan0: default FDB implementation only supports local addresses
[   38.731303][   T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   38.752477][   T45] usb 3-1: device descriptor read/8, error -71
[   38.882617][   T45] usb 3-1: device descriptor read/8, error -71
[   38.891296][  T372] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   38.931382][  T416] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.931427][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   39.042707][  T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10
[   39.054096][  T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18317, setting to 1024
[   39.067972][  T372] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   39.077754][  T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.086588][  T372] usb 1-1: config 0 descriptor??
[   39.092996][  T989] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   39.141358][   T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   39.173178][   T45] usb 3-1: device descriptor read/8, error -71
[   39.251236][   T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   39.303559][   T45] usb 3-1: device descriptor read/8, error -71
[   39.310123][  T372] usbhid 1-1:0.0: can't add hid device: -71
[   39.316417][  T372] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   39.325609][  T372] usb 1-1: USB disconnect, device number 6
[   39.402489][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   39.414100][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   39.421429][   T45] usb usb3-port1: unable to enumerate USB device
[   39.430086][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[   39.445311][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.454192][   T10] usb 4-1: config 0 descriptor??
[   39.459872][ T1000] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   39.679948][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   39.688655][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   39.702371][   T10] usb 4-1: USB disconnect, device number 11
[   39.741261][  T356] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   39.886893][ T1016] netlink: 'syz.3.218': attribute type 46 has an invalid length.
[   39.895934][  T356] usb 1-1: device descriptor read/64, error -71
[   39.933326][ T1020] kvm: user requested TSC rate below hardware speed
[   39.943897][ T1020] rust_binder: Error while translating object.
[   39.943963][ T1020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.950346][ T1020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147
[   40.141269][  T356] usb 1-1: device descriptor read/64, error -71
[   40.304481][ T1044] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.226' resets device
[   40.340805][ T1044] SELinux: failed to load policy
[   40.391368][  T356] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   40.412121][ T1047] binder: Unknown parameter 'ma000000000041052'
[   40.521366][  T356] usb 1-1: device descriptor read/64, error -71
[   40.587881][   T36] kauditd_printk_skb: 37 callbacks suppressed
[   40.587899][   T36] audit: type=1400 audit(1757082464.959:374): avc:  denied  { setopt } for  pid=1050 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.629117][   T36] audit: type=1400 audit(1757082464.999:375): avc:  denied  { execute } for  pid=1055 comm="syz.1.231" name="file0" dev="ramfs" ino=10815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   40.629138][ T1056] process 'syz.1.231' launched './file0' with NULL argv: empty string added
[   40.667054][   T36] audit: type=1400 audit(1757082464.999:376): avc:  denied  { execute_no_trans } for  pid=1055 comm="syz.1.231" path="/file0" dev="ramfs" ino=10815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   40.694662][   T36] audit: type=1400 audit(1757082465.009:377): avc:  denied  { create } for  pid=1055 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   40.767780][ T1062] overlayfs: failed to clone upperpath
[   40.768279][ T1063] overlayfs: failed to clone upperpath
[   40.791369][  T356] usb 1-1: device descriptor read/64, error -71
[   40.911369][  T356] usb usb1-port1: attempt power cycle
[   41.211769][ T1067] rust_binder: 185: no such ref 0
[   41.218578][ T1067] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   41.227550][ T1067] rust_binder: Write failure EINVAL in pid:185
[   41.227924][   T36] audit: type=1400 audit(1757082465.609:378): avc:  denied  { wake_alarm } for  pid=1066 comm="syz.2.235" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   41.228955][ T1067] rust_binder: 185: no such ref 2
[   41.266977][  T356] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   41.267012][ T1067] rust_binder: 185: no such ref 0
[   41.281575][ T1067] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   41.295815][  T356] usb 1-1: device descriptor read/8, error -71
[   41.300799][   T36] audit: type=1400 audit(1757082465.669:379): avc:  denied  { create } for  pid=1068 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   41.345970][   T36] audit: type=1400 audit(1757082465.719:380): avc:  denied  { mount } for  pid=1070 comm="syz.1.237" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   41.372909][ T1071] =======================================================
[   41.372909][ T1071] WARNING: The mand mount option has been deprecated and
[   41.372909][ T1071]          and is ignored by this kernel. Remove the mand
[   41.372909][ T1071]          option from the mount to silence this warning.
[   41.372909][ T1071] =======================================================
[   41.453714][  T356] usb 1-1: device descriptor read/8, error -71
[   41.486858][   T36] audit: type=1400 audit(1757082465.859:381): avc:  denied  { ioctl } for  pid=1080 comm="syz.3.242" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   41.512346][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   41.559409][   T36] audit: type=1400 audit(1757082465.929:382): avc:  denied  { create } for  pid=1086 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   41.583372][   T36] audit: type=1400 audit(1757082465.949:383): avc:  denied  { create } for  pid=1086 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   41.602197][ T1091] overlayfs: failed to clone upperpath
[   41.674375][ T1104] 9pnet: p9_errstr2errno: server reported unknown error O�����X��۵רѳl��u�9
[   41.674483][ T1106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220
[   41.774811][ T1113] netlink: 'syz.3.255': attribute type 4 has an invalid length.
[   42.031277][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   42.062355][ T1115] rust_binder: Error while translating object.
[   42.062388][ T1115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.068802][ T1115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187
[   42.095165][ T1118] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.107389][ T1118] rust_binder: Failed copying remainder into alloc: EFAULT
[   42.114073][ T1118] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   42.122577][ T1118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   42.131093][ T1118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:190
[   42.181227][   T10] usb 4-1: Using ep0 maxpacket: 32
[   42.198989][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   42.210442][   T10] usb 4-1: config 0 has no interface number 0
[   42.222326][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[   42.244071][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   42.258438][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.275235][   T10] usb 4-1: Product: syz
[   42.290588][   T10] usb 4-1: Manufacturer: syz
[   42.311255][   T10] usb 4-1: SerialNumber: syz
[   42.320035][   T10] usb 4-1: config 0 descriptor??
[   42.332575][   T10] smsc75xx v1.0.0
[   42.373775][   T46] bridge_slave_1: left allmulticast mode
[   42.382831][   T46] bridge_slave_1: left promiscuous mode
[   42.388895][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.401006][   T46] bridge_slave_0: left allmulticast mode
[   42.409620][   T46] bridge_slave_0: left promiscuous mode
[   42.416354][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.536953][   T46] veth1_macvtap: left promiscuous mode
[   42.543490][   T46] veth0_vlan: left promiscuous mode
[   42.597862][ T1131] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   42.619925][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.636595][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.644816][ T1132] bridge_slave_0: entered allmulticast mode
[   42.653205][ T1132] bridge_slave_0: entered promiscuous mode
[   42.660038][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.668909][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.677449][ T1132] bridge_slave_1: entered allmulticast mode
[   42.686808][ T1132] bridge_slave_1: entered promiscuous mode
[   42.754116][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.762027][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.771856][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.780700][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.810001][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.820090][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.834914][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.843028][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.857407][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.866891][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.909221][ T1132] veth0_vlan: entered promiscuous mode
[   42.927375][ T1132] veth1_macvtap: entered promiscuous mode
[   42.934744][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   42.958938][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   43.061060][ T1181] fuse: Unknown parameter '>�0x0000000000000003'
[   43.087848][ T1183] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   43.096415][ T1183] rust_binder: Write failure EINVAL in pid:251
[   43.097126][ T1185] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   43.113206][ T1185] rust_binder: Write failure EINVAL in pid:251
[   43.130525][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.146509][ T1187] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.157000][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.172089][ T1189] rust_binder: Write failure EFAULT in pid:14
[   43.176106][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   43.199069][ T1191] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   43.200066][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   43.207324][ T1191] rust_binder: 16: no such ref 1
[   43.218648][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   43.235068][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[   43.247723][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[   43.290178][ T1191] rust_binder: 16: no such ref 3
[   43.295275][ T1191] rust_binder: 16: no such ref 0
[   43.300698][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16
[   43.300924][ T1191] rust_binder: 16: no such ref 2
[   43.315527][ T1191] rust_binder: Error while translating object.
[   43.315549][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   43.321940][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:16
[   43.443853][ T1203] 2N: renamed from vcan0 (while UP)
[   43.684867][ T1213] rust_binder: Write failure EFAULT in pid:34
[   44.208456][ T1220] incfs: Options parsing error. -22
[   44.220735][ T1220] incfs: mount failed -22
[   44.841272][  T356] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   44.901138][  T372] usb 4-1: USB disconnect, device number 12
[   44.991231][  T356] usb 5-1: Using ep0 maxpacket: 32
[   45.001733][  T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.017478][  T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.029032][  T356] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   45.039975][  T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.053343][  T356] usb 5-1: config 0 descriptor??
[   45.171274][  T416] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   45.171289][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   45.291154][ T1275] rust_binder: Write failure EINVAL in pid:268
[   45.466399][  T356] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   45.483639][  T356] koneplus 0003:1E7D:2D51.0003: item fetching failed at offset 3/5
[   45.493146][  T356] koneplus 0003:1E7D:2D51.0003: parse failed
[   45.500887][  T356] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -22
[   45.541244][  T372] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   45.667799][   T45] usb 5-1: USB disconnect, device number 2
[   45.692531][  T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.704554][  T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.717169][  T372] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   45.729372][  T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.741637][  T372] usb 4-1: config 0 descriptor??
[   46.114029][   T36] kauditd_printk_skb: 33 callbacks suppressed
[   46.114048][   T36] audit: type=1400 audit(1757082470.489:417): avc:  denied  { getopt } for  pid=1279 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.175894][ T1291] overlayfs: failed to clone upperpath
[   46.223969][ T1293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4022749297 (514911910016 ns) > initial count (27584176000 ns). Using initial count to start timer.
[   46.253733][ T1293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer.
[   46.409085][   T36] audit: type=1400 audit(1757082470.779:418): avc:  denied  { unmount } for  pid=1132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.470387][   T36] audit: type=1400 audit(1757082470.839:419): avc:  denied  { setopt } for  pid=1314 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   46.545191][   T36] audit: type=1400 audit(1757082470.919:420): avc:  denied  { bind } for  pid=1314 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   46.583701][   T36] audit: type=1400 audit(1757082470.959:421): avc:  denied  { write } for  pid=1317 comm="syz.0.323" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.637060][ T1321] rust_binder: Error in use_page_slow: ESRCH
[   46.637086][ T1321] rust_binder: use_range failure ESRCH
[   46.652976][ T1321] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   46.653008][ T1321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   46.678043][ T1321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:55
[   46.730184][   T36] audit: type=1400 audit(1757082471.099:422): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   46.766796][ T1332] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.767044][ T1330] rust_binder: got new transaction with bad transaction stack
[   46.775569][ T1330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284
[   46.787471][   T36] audit: type=1400 audit(1757082471.159:423): avc:  denied  { ioctl } for  pid=1329 comm="syz.4.328" path="socket:[11685]" dev="sockfs" ino=11685 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.831753][   T36] audit: type=1400 audit(1757082471.159:424): avc:  denied  { read write } for  pid=1329 comm="syz.4.328" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   46.872926][   T36] audit: type=1400 audit(1757082471.159:425): avc:  denied  { open } for  pid=1329 comm="syz.4.328" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   46.901354][ T1341] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   46.902532][   T36] audit: type=1400 audit(1757082471.159:426): avc:  denied  { ioctl } for  pid=1329 comm="syz.4.328" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   46.914144][ T1355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'.
[   47.028485][ T1372] netlink: 580 bytes leftover after parsing attributes in process `syz.0.342'.
[   47.094468][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:293
[   47.598688][ T1381] netlink: 72 bytes leftover after parsing attributes in process `syz.1.345'.
[   47.846583][ T1391] futex_wake_op: syz.4.347 tries to shift op by -1; fix this program
[   48.259659][  T372] usbhid 4-1:0.0: can't add hid device: -71
[   48.269738][  T372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   48.282026][  T372] usb 4-1: USB disconnect, device number 13
[   48.377601][ T1407] netlink: 'syz.3.351': attribute type 4 has an invalid length.
[   48.386734][ T1407] netlink: 17 bytes leftover after parsing attributes in process `syz.3.351'.
[   48.513204][ T1419] overlayfs: failed to clone lowerpath
[   48.624208][ T1437] overlayfs: failed to clone upperpath
[   48.648758][ T1439] veth1: entered allmulticast mode
[   48.655292][ T1438] veth1: left allmulticast mode
[   48.842971][  T372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   48.853425][ T1454] binder: Unknown parameter 'fscontext?}'
[   48.870842][  T372] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   48.922465][ T1458] syzkaller0: entered promiscuous mode
[   48.923890][ T1456] fido_id[1456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   48.928265][ T1458] syzkaller0: entered allmulticast mode
[   48.958995][  T329] syzkaller0: tun_net_xmit 48
[   48.984128][ T1459] syzkaller0: tun_chr_ioctl cmd 1074025677
[   48.990692][ T1459] syzkaller0: Linktype set failed because interface is up
[   49.374835][ T1533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[   49.397824][ T1536] can0: slcan on ptm0.
[   49.406220][ T1537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.419426][ T1537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.485483][ T1560] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   49.651265][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   49.795846][ T1580] overlayfs: failed to clone upperpath
[   49.813381][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.821686][   T31] usb 1-1: Using ep0 maxpacket: 32
[   49.829825][ T1582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'.
[   49.840544][   T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   49.852635][   T31] usb 1-1: config 0 has no interfaces?
[   49.858683][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   49.869454][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.880907][   T31] usb 1-1: config 0 descriptor??
[   49.955229][ T1601] overlayfs: missing 'lowerdir'
[   50.039497][ T1627] syz.1.419 (1627): attempted to duplicate a private mapping with mremap.  This is not supported.
[   50.092037][   T31] usb 1-1: USB disconnect, device number 11
[   50.163622][ T1535] can0 (unregistered): slcan off ptm0.
[   50.279211][ T1667] capability: warning: `syz.4.426' uses deprecated v2 capabilities in a way that may be insecure
[   50.705878][ T1683] syzkaller0: entered promiscuous mode
[   50.713751][ T1683] syzkaller0: entered allmulticast mode
[   50.724481][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   50.732341][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   50.734492][ T1683] rust_binder: Write failure EFAULT in pid:321
[   51.103694][ T1729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'.
[   51.124802][ T1729] netlink: 'syz.4.444': attribute type 4 has an invalid length.
[   51.134762][ T1729] netlink: 17 bytes leftover after parsing attributes in process `syz.4.444'.
[   51.849104][ T1746] netlink: 'syz.1.449': attribute type 4 has an invalid length.
[   51.902648][ T1750] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   52.293091][ T1769] 9pnet_fd: Insufficient options for proto=fd
[   52.308280][   T36] kauditd_printk_skb: 40 callbacks suppressed
[   52.308296][   T36] audit: type=1400 audit(1757082476.679:467): avc:  denied  { create } for  pid=1770 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.337670][   T36] audit: type=1400 audit(1757082476.689:468): avc:  denied  { write } for  pid=1770 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.359769][   T36] audit: type=1400 audit(1757082476.689:469): avc:  denied  { accept } for  pid=1770 comm="syz.3.459" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.382654][   T36] audit: type=1400 audit(1757082476.689:470): avc:  denied  { ioctl } for  pid=1770 comm="syz.3.459" path="socket:[13674]" dev="sockfs" ino=13674 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.609573][ T1791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.467'.
[   52.709204][   T36] audit: type=1400 audit(1757082477.082:471): avc:  denied  { create } for  pid=1809 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   52.739790][   T36] audit: type=1400 audit(1757082477.112:472): avc:  denied  { write } for  pid=1816 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.765256][   T36] audit: type=1400 audit(1757082477.142:473): avc:  denied  { read } for  pid=1816 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.771278][  T416] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   52.795154][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   52.970973][ T1852] 9pnet_fd: Insufficient options for proto=fd
[   53.055352][ T1861] netlink: 'syz.1.491': attribute type 4 has an invalid length.
[   53.065719][ T1861] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.491'.
[   53.086272][   T36] audit: type=1400 audit(1757082477.462:474): avc:  denied  { create } for  pid=1862 comm="syz.1.492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   53.091794][ T1863] cgroup: No subsys list or none specified
[   53.110810][   T36] audit: type=1400 audit(1757082477.472:475): avc:  denied  { mounton } for  pid=1862 comm="syz.1.492" path="/145/file0" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   53.285761][ T1884] overlayfs: missing 'lowerdir'
[   53.299360][   T36] audit: type=1400 audit(1757082477.672:476): avc:  denied  { map } for  pid=1885 comm="syz.3.501" path="socket:[13883]" dev="sockfs" ino=13883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   53.361335][ T1896] tmpfs: Unknown parameter '����'
[   53.516264][ T1920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331
[   53.995388][ T1929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'.
[   54.259982][ T1973] overlayfs: failed to clone upperpath
[   54.713648][ T1990] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   54.889721][ T2011] SELinux:  Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped).
[   54.912609][ T2014] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   54.920960][ T2014] rust_binder: Write failure EINVAL in pid:349
[   55.401276][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   55.562929][   T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   55.572652][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.582577][   T31] usb 1-1: config 0 descriptor??
[   56.198371][ T2082] /dev/loop0: Can't lookup blockdev
[   56.243301][ T2086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[   56.386168][ T2100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'.
[   56.407328][ T2102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'.
[   56.774768][ T2107] netlink: 277 bytes leftover after parsing attributes in process `syz.1.578'.
[   56.851791][ T2119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'.
[   56.861621][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'.
[   56.999907][   T31] usb 1-1: Cannot set autoneg
[   57.005160][   T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   57.018700][   T31] usb 1-1: USB disconnect, device number 12
[   57.511664][ T2161] tipc: Started in network mode
[   57.517238][ T2161] tipc: Node identity , cluster identity 4711
[   57.529112][ T2161] tipc: Failed to obtain node identity
[   57.535303][ T2161] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   57.771365][  T356] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   57.923506][ T2163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.932533][ T2163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.944206][  T356] usb 1-1: unable to read config index 0 descriptor/start: -71
[   57.951894][  T356] usb 1-1: can't read configurations, error -71
[   58.430916][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   58.430934][   T36] audit: type=1400 audit(1773859927.798:495): avc:  denied  { shutdown } for  pid=2175 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.463374][ T2178] rust_binder: Error while translating object.
[   58.463411][ T2178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   58.473138][ T2178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:366
[   58.603669][   T36] audit: type=1400 audit(1773859927.978:496): avc:  denied  { create } for  pid=2191 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[   58.704200][ T2203] veth1_macvtap: left promiscuous mode
[   58.710534][ T2203] macsec0: entered allmulticast mode
[   58.718841][ T2203] veth1_macvtap: entered promiscuous mode
[   58.725370][ T2203] veth1_macvtap: entered allmulticast mode
[   58.732509][ T2203] macsec0: left allmulticast mode
[   58.737859][ T2203] veth1_macvtap: left allmulticast mode
[   58.773553][   T36] audit: type=1400 audit(1773859928.148:497): avc:  denied  { create } for  pid=2200 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   58.796538][  T356] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   58.821613][   T36] audit: type=1400 audit(1773859928.168:498): avc:  denied  { write } for  pid=2200 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   58.879673][   T36] audit: type=1400 audit(1773859928.248:499): avc:  denied  { write } for  pid=2217 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   58.981223][  T356] usb 1-1: Using ep0 maxpacket: 32
[   58.982108][ T2240] overlayfs: failed to clone upperpath
[   58.992506][  T356] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   59.001574][  T356] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   59.011441][  T356] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   59.024005][  T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   59.041212][  T356] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   59.053711][  T356] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   59.071198][   T36] audit: type=1326 audit(1773859928.448:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2247 comm="syz.4.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb63f8ebe9 code=0x0
[   59.101245][  T356] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   59.121197][  T356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.131066][  T356] usb 1-1: config 0 descriptor??
[   59.229162][   T36] audit: type=1400 audit(1773859928.598:501): avc:  denied  { setattr } for  pid=2253 comm="syz.1.637" name="PPPOL2TP" dev="sockfs" ino=16409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.340898][  T356] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   59.366502][  T356] usb 1-1: USB disconnect, device number 14
[   59.379840][  T356] usblp0: removed
[   59.781274][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   59.904525][   T36] audit: type=1400 audit(1773859929.278:502): avc:  denied  { create } for  pid=2269 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   59.927443][   T36] audit: type=1400 audit(1773859929.278:503): avc:  denied  { sys_admin } for  pid=2269 comm="syz.4.641" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   59.953451][   T36] audit: type=1400 audit(1773859929.278:504): avc:  denied  { associate } for  pid=2271 comm="syz.4.641" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   59.970104][   T31] usb 1-1: Using ep0 maxpacket: 32
[   59.982991][   T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   59.995797][   T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   60.005656][   T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   60.015929][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   60.025971][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   60.037347][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   60.053565][   T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   60.082886][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.095001][   T31] usb 1-1: config 0 descriptor??
[   60.511278][   T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   60.530027][   T31] usb 1-1: USB disconnect, device number 15
[   60.543666][   T31] usblp0: removed
[   60.546674][ T2284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:377
[   60.598154][ T2295] tmpfs: Unknown parameter '.'
[   60.841264][   T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   60.858556][ T2341] overlayfs: failed to clone upperpath
[   60.993087][   T31] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   61.006736][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   61.015586][   T31] usb 1-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40
[   61.026001][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.034846][   T31] usb 1-1: Product: 〉
[   61.039399][   T31] usb 1-1: Manufacturer: Г
[   61.044719][   T31] usb 1-1: SerialNumber: 眨臸꾠ỹ鞫毤闺颂릦鹍妓䯼㎠䐽汴댿㵒뉣䟼뤽徽䱀䣿瑇쏾䱧燕區↝ế哤㬽㱋㰖蓳␭펬쓐윗䖳阷ቧ楞ே腭ኮ衳蕀凩㚩蒎닓똛餹仝뮵볌嚸묨᧙溋㳷뫅㞴䫋㽀瞈喥⌊뻺㴼똠蚵싖鏨惊ᵌ줫컬ﱩᛚ씎鈏徼㜧긷譍Ƴᴵ㉓뒴
[   61.283447][   T31] usbhid 1-1:1.0: can't add hid device: -71
[   61.290316][   T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   61.301240][   T31] usb 1-1: USB disconnect, device number 16
[   61.793696][ T2363] rust_binder: 379: no such ref 0
[   61.799265][ T2363] rust_binder: 379: no such ref 2
[   61.804700][ T2363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:379
[   61.807726][  T356] rust_binder: 2361: removing orphan mapping 0:24
[   62.182920][ T2410] overlayfs: failed to resolve './file1': -2
[   62.198896][ T2413] netlink: 'syz.1.689': attribute type 11 has an invalid length.
[   62.548377][ T2449] 9pnet: p9_errstr2errno: server reported unknown error �
[   62.743765][ T2478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26137 sclass=netlink_route_socket pid=2478 comm=syz.4.711
[   63.309832][ T2488] overlayfs: failed to clone upperpath
[   63.589290][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   63.589311][   T36] audit: type=1400 audit(1773864284.958:521): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   63.619772][   T36] audit: type=1400 audit(1773864284.968:522): avc:  denied  { append } for  pid=2492 comm="syz.0.717" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.756322][ T2504] fuse: Bad value for 'fd'
[   63.785270][ T2511] rust_binder: 405: no such ref 1
[   63.834687][ T2516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'.
[   64.420497][ T2523] 9pnet_fd: Insufficient options for proto=fd
[   64.462712][   T36] audit: type=1400 audit(1773864285.838:523): avc:  denied  { setopt } for  pid=2534 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   64.570456][ T2540] overlay: Unknown parameter 'appraise'
[   64.912167][   T36] audit: type=1400 audit(1773864286.288:524): avc:  denied  { accept } for  pid=2550 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   65.171266][   T31] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[   65.242987][   T36] audit: type=1400 audit(1773864286.618:525): avc:  denied  { lock } for  pid=2590 comm="syz.1.750" path="socket:[16250]" dev="sockfs" ino=16250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.351212][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   65.491303][   T31] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[   65.651269][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   65.657213][   T31] usb usb1-port1: attempt power cycle
[   66.011264][   T31] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[   66.031585][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   66.033599][ T2620] overlayfs: failed to clone upperpath
[   66.134282][   T36] audit: type=1400 audit(1773864287.508:526): avc:  denied  { map } for  pid=2629 comm="syz.3.762" path="socket:[16939]" dev="sockfs" ino=16939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.171239][   T31] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[   66.191621][   T31] usb 1-1: Invalid ep0 maxpacket: 64
[   66.198679][   T31] usb usb1-port1: unable to enumerate USB device
[   66.221427][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'.
[   66.905071][   T36] audit: type=1400 audit(1773864288.278:527): avc:  denied  { watch watch_reads } for  pid=2663 comm="syz.3.773" path="/157/file0" dev="tmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.950612][ T2666] fuse: Bad value for 'group_id'
[   66.956218][ T2666] fuse: Bad value for 'group_id'
[   66.963737][   T36] audit: type=1326 audit(1773864288.338:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.3.774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd32c38ebe9 code=0x0
[   68.969089][ T2704] 9pnet_fd: Insufficient options for proto=fd
[   69.006119][   T36] audit: type=1400 audit(1773864290.378:529): avc:  denied  { name_bind } for  pid=2710 comm="syz.4.791" src=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   69.042940][ T2715] netlink: 'syz.3.792': attribute type 4 has an invalid length.
[   69.061247][   T36] audit: type=1400 audit(1773864290.378:530): avc:  denied  { node_bind } for  pid=2710 comm="syz.4.791" saddr=::1 src=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   69.110410][   T36] audit: type=1400 audit(1773864290.478:531): avc:  denied  { map } for  pid=2723 comm="syz.3.796" path="socket:[17011]" dev="sockfs" ino=17011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   69.191095][ T2738] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   69.191120][ T2738] rust_binder: Read failure Err(EFAULT) in pid:432
[   69.206849][   T36] audit: type=1400 audit(1773864290.578:532): avc:  denied  { write } for  pid=2739 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.232389][ T2748] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   69.236339][ T2748] rust_binder: Error while translating object.
[   69.238217][ T2733] netlink: 5 bytes leftover after parsing attributes in process `syz.4.799'.
[   69.245918][ T2748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   69.253054][ T2733] netlink: 5 bytes leftover after parsing attributes in process `syz.4.799'.
[   69.262083][ T2748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434
[   69.438982][ T2746] overlayfs: failed to clone upperpath
[   70.306146][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   70.313800][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   70.322180][ T2825] incfs: Options parsing error. -22
[   70.328124][ T2825] incfs: mount failed -22
[   70.445829][ T2855] netlink: 'syz.3.840': attribute type 28 has an invalid length.
[   71.303018][ T2911] netlink: 5 bytes leftover after parsing attributes in process `syz.3.860'.
[   71.313743][ T2912] netlink: 5 bytes leftover after parsing attributes in process `syz.3.860'.
[   72.084618][   T36] audit: type=1107 audit(1773864293.458:533): pid=2944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   72.101852][   T36] audit: type=1107 audit(1773864293.478:534): pid=2944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   72.321861][ T3001] overlay: Bad value for 'uuid'
[   72.371250][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   72.371354][  T416] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   72.461729][ T3019] input: syz0 as /devices/virtual/input/input9
[   72.468299][ T3019] input: failed to attach handler leds to device input9, error: -6
[   72.481625][   T36] audit: type=1400 audit(1773864293.858:535): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.509637][   T36] audit: type=1400 audit(1773864293.858:536): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.522027][ T3019] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   72.535153][   T36] audit: type=1400 audit(1773864293.858:537): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.576437][ T3019] rtc_cmos 00:00: Alarms can be up to one day in the future
[   72.656545][ T3026] rust_binder: Error while translating object.
[   72.656682][ T3026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   72.664576][ T3026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461
[   72.778495][  T372] rtc_cmos 00:00: Alarms can be up to one day in the future
[   72.796787][  T372] rtc_cmos 00:00: Alarms can be up to one day in the future
[   72.805045][  T372] rtc_cmos 00:00: Alarms can be up to one day in the future
[   72.813265][  T372] rtc_cmos 00:00: Alarms can be up to one day in the future
[   72.822126][  T372] rtc rtc0: __rtc_set_alarm: err=-22
[   72.953021][   T36] audit: type=1400 audit(1773864294.328:538): avc:  denied  { execute } for  pid=3052 comm="syz.0.905" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.847771][ T3102] rust_binder: 482: no such ref 3
[   73.853433][ T3102] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   73.862599][ T3102] rust_binder: Write failure EINVAL in pid:482
[   73.872514][ T3104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484
[   74.011689][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   74.011707][   T36] audit: type=1400 audit(1773864295.388:541): avc:  denied  { read write } for  pid=3112 comm="syz.0.925" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   74.057055][   T36] audit: type=1400 audit(1773864295.388:542): avc:  denied  { open } for  pid=3112 comm="syz.0.925" path="/155/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   74.119591][ T3123] rust_binder: Write failure EFAULT in pid:499
[   74.991752][ T3149] can0: slcan on ptm0.
[   75.046549][ T3148] can0 (unregistered): slcan off ptm0.
[   75.073572][   T36] audit: type=1400 audit(1773864296.448:543): avc:  denied  { ioctl } for  pid=3160 comm="syz.0.937" path="socket:[18309]" dev="sockfs" ino=18309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   75.101477][ T3161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3161 comm=syz.0.937
[   75.114704][   T36] audit: type=1326 audit(1773864296.478:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3160 comm="syz.0.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x0
[   76.127253][   T36] audit: type=1400 audit(1773864297.498:545): avc:  denied  { create } for  pid=3195 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   76.142055][ T3196] overlayfs: failed to clone upperpath
[   76.253726][ T3206] SELinux:  Context ϧ�-�)�:E�2�٭�ؾ�)đJu36���ޢ{�@�m�[ is not valid (left unmapped).
[   76.266142][ T3206] netlink: 'syz.3.946': attribute type 16 has an invalid length.
[   76.274543][ T3206] netlink: 53458 bytes leftover after parsing attributes in process `syz.3.946'.
[   76.286538][   T36] audit: type=1400 audit(1773864297.658:546): avc:  denied  { create } for  pid=3205 comm="syz.3.946" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A11753336B7D2C6DEA27B07E040986DFD5B
[   76.316746][   T36] audit: type=1400 audit(1773864297.658:547): avc:  denied  { associate } for  pid=3205 comm="syz.3.946" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A11753336B7D2C6DEA27B07E040986DFD5B
[   76.348700][   T36] audit: type=1400 audit(1773864297.658:548): avc:  denied  { mounton } for  pid=3205 comm="syz.3.946" path="/219/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A11753336B7D2C6DEA27B07E040986DFD5B
[   76.349399][ T3212] syz.3.949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   76.380883][   T36] audit: type=1400 audit(1773864297.688:549): avc:  denied  { rmdir } for  pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C4914A11753336B7D2C6DEA27B07E040986DFD5B
[   76.651753][ T3242] overlayfs: failed to clone upperpath
[   76.660403][ T3242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'.
[   76.697670][   T36] audit: type=1400 audit(1773864298.068:550): avc:  denied  { shutdown } for  pid=3245 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.901345][ T3248] fuse: Bad value for 'fd'
[   77.578066][ T3255] netlink: 44 bytes leftover after parsing attributes in process `syz.4.965'.
[   77.587169][ T3255] netlink: 35 bytes leftover after parsing attributes in process `syz.4.965'.
[   77.596301][ T3255] netlink: 'syz.4.965': attribute type 6 has an invalid length.
[   77.604005][ T3255] netlink: 'syz.4.965': attribute type 5 has an invalid length.
[   77.611693][ T3255] netlink: 35 bytes leftover after parsing attributes in process `syz.4.965'.
[   78.056674][ T3259] dummy0: entered promiscuous mode
[   78.062589][ T3259] dummy0: entered allmulticast mode
[   78.580509][ T3267] x_tables: duplicate underflow at hook 1
[   79.463088][ T3304] overlayfs: failed to resolve './file1': -2
[   79.494622][ T3310] netlink: 596 bytes leftover after parsing attributes in process `syz.4.989'.
[   79.504758][ T3310] netlink: 'syz.4.989': attribute type 4 has an invalid length.
[   79.763735][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   79.763752][   T36] audit: type=1400 audit(1773864301.138:553): avc:  denied  { create } for  pid=3316 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   80.012745][ T3340] 9pnet_fd: Insufficient options for proto=fd
[   80.362557][   T36] audit: type=1400 audit(1773864301.738:554): avc:  denied  { write } for  pid=3346 comm="syz.3.1002" name="/" dev="configfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   80.385509][   T36] audit: type=1400 audit(1773864301.738:555): avc:  denied  { add_name } for  pid=3346 comm="syz.3.1002" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   80.418696][ T3356] netlink: 'syz.0.1005': attribute type 4 has an invalid length.
[   80.426725][   T36] audit: type=1400 audit(1773864301.738:556): avc:  denied  { create } for  pid=3346 comm="syz.3.1002" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[   80.468380][ T3363] rust_binder: Error while translating object.
[   80.468436][ T3363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   80.479479][ T3363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531
[   80.525292][ T3386] netlink: 'syz.3.1014': attribute type 4 has an invalid length.
[   80.543949][ T3386] netlink: 'syz.3.1014': attribute type 4 has an invalid length.
[   80.622340][   T36] audit: type=1326 audit(1773864301.998:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3402 comm="syz.3.1018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd32c38ebe9 code=0x0
[   80.754002][   T36] audit: type=1326 audit(1773864302.128:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3419 comm="syz.0.1025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x0
[   80.768137][ T3426] batadv_slave_0: entered promiscuous mode
[   80.786211][ T3425] batadv_slave_0: left promiscuous mode
[   80.808969][ T3429] overlayfs: failed to clone upperpath
[   80.940701][ T3451] mmap: syz.1.1033 (3451): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data.
[   80.969800][   T36] audit: type=1400 audit(1773864302.338:559): avc:  denied  { write } for  pid=3455 comm="syz.1.1035" name="file0" dev="tmpfs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   80.971423][ T3456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[   80.993914][   T36] audit: type=1400 audit(1773864302.338:560): avc:  denied  { open } for  pid=3455 comm="syz.1.1035" path="/293/file0" dev="tmpfs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   81.037652][ T3460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'.
[   81.049242][   T36] audit: type=1400 audit(1773864302.418:561): avc:  denied  { module_load } for  pid=3459 comm="syz.1.1036" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[   81.348094][   T36] audit: type=1400 audit(1773864302.718:562): avc:  denied  { listen } for  pid=3475 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.559350][ T3498] overlayfs: failed to clone upperpath
[   81.588656][ T3510] netlink: 'syz.3.1052': attribute type 4 has an invalid length.
[   81.798676][ T3530] .N: renamed from veth0_to_bond (while UP)
[   81.820371][ T3533] netlink: 'syz.1.1062': attribute type 4 has an invalid length.
[   81.830178][ T3533] incfs: Options parsing error. -22
[   81.835685][ T3533] incfs: mount failed -22
[   81.861257][   T64] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   81.873695][ T3535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1063'.
[   81.936499][ T3547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1068'.
[   82.021312][   T64] usb 1-1: Using ep0 maxpacket: 8
[   82.028116][   T64] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   82.037819][   T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.047534][   T64] usb 1-1: config 0 descriptor??
[   82.258669][   T64] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   82.739215][ T3595] netlink: 'syz.3.1086': attribute type 5 has an invalid length.
[   83.291804][ T3619] SELinux:  Context ϧ� is not valid (left unmapped).
[   83.295409][ T3621] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   83.299742][ T3619] overlayfs: failed to clone upperpath
[   83.315825][ T3619] tmpfs: Bad value for 'nr_blocks'
[   83.471189][ T3512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.481873][ T3512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.505094][   T64] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   83.515682][   T64] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   83.527290][   T64] asix 1-1:0.0: probe with driver asix failed with error -71
[   83.536422][   T64] usb 1-1: USB disconnect, device number 21
[   84.022319][ T3660] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.074454][ T3661] rust_binder: Error in use_page_slow: ESRCH
[   84.080965][ T3661] rust_binder: use_range failure ESRCH
[   84.087342][ T3661] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   84.093016][ T3661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   84.101473][ T3661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:559
[   84.465048][ T3671] overlayfs: failed to clone upperpath
[   84.612371][ T3696] netlink: 'syz.1.1127': attribute type 7 has an invalid length.
[   85.153950][ T3713] incfs: Options parsing error. -22
[   85.159367][ T3713] incfs: mount failed -22
[   85.164924][ T3713] mmap: syz.3.1134 (3713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   85.179267][ T3713] tipc: Started in network mode
[   85.184304][ T3713] tipc: Node identity 0672367b97ca, cluster identity 4711
[   85.191735][ T3713] tipc: Enabled bearer <eth:xfrm0>, priority 8
[   85.229426][ T3725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'.
[   85.274257][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   85.274274][   T36] audit: type=1326 audit(1773864306.648:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3724 comm="syz.3.1138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd32c38ebe9 code=0x0
[   85.373209][ T3738] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.374543][ T3738] netlink: 'syz.0.1141': attribute type 4 has an invalid length.
[   85.389075][ T3738] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1141'.
[   85.399198][ T3738] rust_binder: Error in use_page_slow: ESRCH
[   85.399215][ T3738] rust_binder: use_range failure ESRCH
[   85.405480][ T3738] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   85.412128][ T3738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   85.420289][ T3738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:564
[   85.442863][   T36] audit: type=1400 audit(1773864306.818:580): avc:  denied  { name_bind } for  pid=3739 comm="syz.0.1142" path="socket:[20767]" dev="sockfs" ino=20767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   85.533157][ T3744] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.585271][ T3745] rust_binder: Error in use_page_slow: ESRCH
[   85.592596][ T3745] rust_binder: use_range failure ESRCH
[   85.599118][ T3745] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   85.605004][ T3745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   85.613641][ T3745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:570
[   85.626326][   T36] audit: type=1400 audit(1773864306.998:581): avc:  denied  { create } for  pid=3743 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   86.033420][ T3774] netlink: 'syz.0.1153': attribute type 3 has an invalid length.
[   86.041970][ T3774] netlink: 944 bytes leftover after parsing attributes in process `syz.0.1153'.
[   86.076473][   T36] audit: type=1400 audit(1773864307.448:582): avc:  denied  { map } for  pid=3775 comm="syz.0.1154" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   86.162225][   T36] audit: type=1400 audit(1773864307.538:583): avc:  denied  { setopt } for  pid=3796 comm="syz.0.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   86.321247][   T31] tipc: Node number set to 2444768891
[   86.541201][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   86.704371][   T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   86.714144][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.722498][   T10] usb 1-1: Product: syz
[   86.726769][   T10] usb 1-1: Manufacturer: syz
[   86.731575][   T10] usb 1-1: SerialNumber: syz
[   87.164058][   T10] rtl8150 1-1:1.0: couldn't reset the device
[   87.171102][   T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[   87.180934][   T10] usb 1-1: USB disconnect, device number 22
[   87.543597][ T3838] sock: sock_set_timeout: `syz.4.1177' (pid 3838) tries to set negative timeout
[   87.554117][ T3838] netlink: 'syz.4.1177': attribute type 4 has an invalid length.
[   87.649620][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'.
[   87.901226][   T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   88.052699][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[   88.059419][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00
[   88.068980][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.078008][   T31] usb 1-1: config 0 descriptor??
[   88.300127][ T3871] x_tables: duplicate underflow at hook 1
[   88.578183][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   88.585332][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   88.596020][   T31] usb 1-1: USB disconnect, device number 23
[   88.657379][   T36] audit: type=1400 audit(1773864310.028:584): avc:  denied  { view } for  pid=3878 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   88.658317][ T3879] overlayfs: failed to clone upperpath
[   88.687975][ T3879] overlayfs: failed to clone upperpath
[   88.697552][ T3881] binder: Unknown parameter 'context��'
[   88.703547][   T36] audit: type=1400 audit(1773864310.068:585): avc:  denied  { remount } for  pid=3880 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   88.791617][   T36] audit: type=1400 audit(1773864310.168:586): avc:  denied  { mounton } for  pid=3894 comm="syz.0.1197" path="/199/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   88.822464][   T36] audit: type=1400 audit(1773864310.198:587): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   88.856947][   T36] audit: type=1400 audit(1773864310.228:588): avc:  denied  { setattr } for  pid=3898 comm="syz.4.1199" name="secretmem" dev="secretmem" ino=20432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   88.878792][ T3904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1200'.
[   89.289778][ T3936] fuse: Bad value for 'group_id'
[   89.295123][ T3936] fuse: Bad value for 'group_id'
[   89.393715][ T3950] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.765685][ T3960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14367 sclass=netlink_route_socket pid=3960 comm=syz.1.1221
[   89.812913][ T3969] x_tables: duplicate underflow at hook 4
[   90.375369][ T4008] netlink: 'syz.3.1236': attribute type 16 has an invalid length.
[   90.384202][ T4008] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1236'.
[   90.528946][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   90.529071][   T36] audit: type=1400 audit(1773864311.898:591): avc:  denied  { ioctl } for  pid=4024 comm="syz.4.1242" path="socket:[22619]" dev="sockfs" ino=22619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.691294][  T356] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[   90.731616][   T36] audit: type=1326 audit(1773864312.098:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.4.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7feb63f8ebe9 code=0x0
[   90.739625][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'.
[   90.769469][   T36] audit: type=1326 audit(1773864312.148:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.1253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9278ebe9 code=0x0
[   90.821253][  T356] usb 1-1: device descriptor read/64, error -71
[   90.875319][ T4067] netlink: 1327 bytes leftover after parsing attributes in process `syz.1.1253'.
[   91.061247][  T356] usb 1-1: device descriptor read/64, error -71
[   91.134882][ T4085] netlink: 'syz.3.1260': attribute type 12 has an invalid length.
[   91.166276][ T4089] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.301200][  T356] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[   91.441241][  T356] usb 1-1: device descriptor read/64, error -71
[   91.681267][  T356] usb 1-1: device descriptor read/64, error -71
[   91.792767][  T356] usb usb1-port1: attempt power cycle
[   91.940465][ T4160] incfs: Options parsing error. -22
[   91.945921][ T4160] incfs: mount failed -22
[   91.964989][ T4164] netlink: 'syz.4.1288': attribute type 4 has an invalid length.
[   91.974254][ T4164] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1288'.
[   91.983987][ T4165] netlink: 'syz.4.1288': attribute type 4 has an invalid length.
[   91.992406][ T4165] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1288'.
[   92.131356][  T356] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[   92.152206][  T356] usb 1-1: device descriptor read/8, error -71
[   92.284012][  T356] usb 1-1: device descriptor read/8, error -71
[   92.493294][ T4251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1316'.
[   92.513070][   T36] audit: type=1400 audit(1773864313.888:594): avc:  denied  { accept } for  pid=4255 comm="syz.1.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   92.533622][  T356] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[   92.562374][  T356] usb 1-1: device descriptor read/8, error -71
[   92.702421][  T356] usb 1-1: device descriptor read/8, error -71
[   92.811349][  T356] usb usb1-port1: unable to enumerate USB device
[   92.920826][   T36] audit: type=1400 audit(1773864314.288:595): avc:  denied  { setopt } for  pid=4300 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.940554][   T36] audit: type=1400 audit(1773864314.298:596): avc:  denied  { connect } for  pid=4300 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.982043][ T4302] 9pnet_fd: Insufficient options for proto=fd
[   93.148577][ T4319] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1340'.
[   93.247480][ T4330] incfs: Options parsing error. -22
[   93.253028][ T4330] incfs: mount failed -22
[   93.277553][   T36] audit: type=1400 audit(1773864314.648:597): avc:  denied  { mounton } for  pid=4334 comm="syz.1.1347" path="/403/file0" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   93.784818][   T36] audit: type=1400 audit(1773864315.158:598): avc:  denied  { bpf } for  pid=4352 comm="syz.3.1354" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.837584][   T36] audit: type=1400 audit(1773864315.208:599): avc:  denied  { mount } for  pid=4354 comm="syz.1.1355" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   93.861636][ T4355] overlayfs: failed to resolve './file0:dirsync': -2
[   93.869942][  T356] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[   94.001256][  T356] usb 1-1: device descriptor read/64, error -71
[   94.241255][  T356] usb 1-1: device descriptor read/64, error -71
[   94.278759][   T36] audit: type=1400 audit(1773864315.648:600): avc:  denied  { lock } for  pid=4363 comm="syz.4.1357" path="socket:[23163]" dev="sockfs" ino=23163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   94.371122][ T4374] overlayfs: failed to clone upperpath
[   94.452952][ T4394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1367'.
[   94.481398][  T356] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[   94.505197][ T4405] netlink: 'syz.1.1371': attribute type 16 has an invalid length.
[   94.520260][ T4405] netlink: 'syz.1.1371': attribute type 25 has an invalid length.
[   94.523497][ T4408] tipc: Enabled bearer <eth:ip6gre0>, priority 8
[   94.529669][ T4405] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.1371'.
[   94.621221][  T356] usb 1-1: device descriptor read/64, error -71
[   94.630119][ T4428] veth1: entered allmulticast mode
[   94.637141][ T4427] veth1: left allmulticast mode
[   94.650322][ T4431] netlink: 'syz.1.1380': attribute type 13 has an invalid length.
[   94.715150][ T4448] overlayfs: failed to clone upperpath
[   94.861313][  T356] usb 1-1: device descriptor read/64, error -71
[   94.971355][  T356] usb usb1-port1: attempt power cycle
[   95.311252][  T356] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[   95.332572][  T356] usb 1-1: device descriptor read/8, error -71
[   95.462588][  T356] usb 1-1: device descriptor read/8, error -71
[   95.701233][  T356] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[   95.722426][  T356] usb 1-1: device descriptor read/8, error -71
[   95.760760][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   95.760793][   T36] audit: type=1400 audit(1773864317.128:603): avc:  denied  { listen } for  pid=4481 comm="syz.1.1399" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   95.852478][  T356] usb 1-1: device descriptor read/8, error -71
[   95.961323][  T356] usb usb1-port1: unable to enumerate USB device
[   96.067615][ T4497] x_tables: unsorted underflow at hook 2
[   96.098489][ T4506] overlayfs: failed to clone upperpath
[   96.483811][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4515 comm=syz.0.1410
[   96.501746][ T4521] netlink: 'syz.3.1412': attribute type 4 has an invalid length.
[   96.507868][ T4523] loop2: detected capacity change from 0 to 7
[   96.519960][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.529378][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.537674][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.547244][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.555418][ T4523]  loop2: unable to read partition table
[   96.561555][ T4523] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   96.577754][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.587215][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.596043][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.605315][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.613802][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.623050][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.631718][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.641557][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.649668][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.659045][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   96.688993][   T36] audit: type=1400 audit(1773864319.061:604): avc:  denied  { getopt } for  pid=4532 comm="syz.3.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   96.689171][ T4533] 9pnet_fd: Insufficient options for proto=fd
[   96.721188][   T36] audit: type=1400 audit(1773864319.091:605): avc:  denied  { write } for  pid=4537 comm="syz.1.1418" path="socket:[22460]" dev="sockfs" ino=22460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   96.896495][ T4566] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1427'.
[   96.906659][ T4566] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1427'.
[   97.519857][ T4594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1435'.
[   97.520010][ T4595] overlayfs: failed to clone upperpath
[   97.529383][ T4594] netlink: 'syz.0.1435': attribute type 6 has an invalid length.
[   97.544361][ T4594] netlink: 'syz.0.1435': attribute type 5 has an invalid length.
[   97.552726][ T4594] netlink: 'syz.0.1435': attribute type 4 has an invalid length.
[   97.568479][   T36] audit: type=1400 audit(1773864319.941:606): avc:  denied  { bind } for  pid=4598 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   98.130651][ T4617] overlayfs: failed to clone upperpath
[   98.439592][ T4664] 9pnet_fd: Insufficient options for proto=fd
[   98.502617][   T36] audit: type=1326 audit(1773864320.881:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x7ffc0000
[   98.529394][   T36] audit: type=1326 audit(1773864320.881:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x7ffc0000
[   98.553501][   T36] audit: type=1326 audit(1773864320.881:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfbd18d550 code=0x7ffc0000
[   98.579524][   T36] audit: type=1326 audit(1773864320.881:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfbd18d550 code=0x7ffc0000
[   98.605665][   T36] audit: type=1326 audit(1773864320.881:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x7ffc0000
[   98.630740][   T36] audit: type=1326 audit(1773864320.881:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd18ebe9 code=0x7ffc0000
[   98.652787][ T4713] overlayfs: failed to clone upperpath
[   98.787404][ T4750] batadv_slave_1: entered promiscuous mode
[   98.793807][ T4749] batadv_slave_1: left promiscuous mode
[   98.885271][ T4775] 2N: renamed from vcan0 (while UP)
[   98.900345][ T4777] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1493'.
[   98.910138][ T4778] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1493'.
[   98.936093][ T4782] veth1: entered allmulticast mode
[   98.942050][ T4781] veth1: left allmulticast mode
[   99.079055][ T4795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1499'.
[   99.292900][ T4813] incfs: Options parsing error. -22
[   99.301058][ T4816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4816 comm=syz.1.1506
[   99.305668][ T4813] incfs: mount failed -22
[   99.374930][ T4826] fuse: Bad value for 'user_id'
[   99.383362][ T4826] fuse: Bad value for 'user_id'
[   99.447378][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1512'.
[   99.583239][ T4846] IPv6: NLM_F_CREATE should be specified when creating new route
[   99.591917][ T4846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.599615][ T4846] IPv6: NLM_F_CREATE should be set when creating new route
[  100.214686][ T4896] overlay: ./file0 is not a directory
[  100.292083][ T4914] fuse: Unknown parameter 'grNY"i�00000000000000000000'
[  100.312274][ T4914] 9pnet_fd: Insufficient options for proto=fd
[  100.770314][ T4955] batadv_slave_1: entered promiscuous mode
[  100.777197][ T4955] batadv_slave_1: left promiscuous mode
[  100.810929][ T4961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=4961 comm=syz.4.1553
[  100.877230][ T4962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=4962 comm=syz.4.1553
[  100.879588][ T4964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=4964 comm=syz.4.1553
[  101.208904][ T4981] overlayfs: failed to clone upperpath
[  101.215832][ T4981] overlayfs: failed to clone upperpath
[  101.235722][ T4988] ------------[ cut here ]------------
[  101.241730][ T4988] WARNING: CPU: 0 PID: 4988 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  101.249886][ T4989] cgroup: noprefix used incorrectly
[  101.253324][ T4988] Modules linked in:
[  101.263342][ T4988] CPU: 0 UID: 0 PID: 4988 Comm: syz.3.1563 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  101.277210][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.288351][ T4988] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  101.295154][ T4988] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a9 4c ee 05 00 0f 85 be 00 00 00 c6 05 9c 4c ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  101.316486][ T4988] RSP: 0018:ffffc9000e457880 EFLAGS: 00010246
[  101.323356][ T4988] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000
[  101.332461][ T4988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e457938
[  101.340662][ T4988] RBP: ffffc9000e4579a8 R08: ffffc9000e457937 R09: 0000000000000000
[  101.349995][ T4988] R10: ffffc9000e457920 R11: fffff52001c8af27 R12: ffffc9000e4578c0
[  101.358475][ T4988] R13: dffffc0000000000 R14: 1ffff92001c8af14 R15: 0000000000000000
[  101.367128][ T4988] FS:  00007fd32d2946c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  101.376321][ T4988] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.383314][ T4988] CR2: 0000200000001000 CR3: 000000012bb2c000 CR4: 00000000003526b0
[  101.392127][ T4988] Call Trace:
[  101.395417][ T4988]  <TASK>
[  101.398340][ T4988]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.404698][ T4988]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  101.410625][ T4988]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  101.416395][ T4988]  ___kmalloc_large_node+0xb5/0x250
[  101.421824][ T4988]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  101.427562][ T4988]  __kmalloc_large_node_noprof+0x1e/0xe0
[  101.433471][ T4988]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  101.439111][ T4988]  __kmalloc_noprof+0x26d/0x450
[  101.444371][ T4988]  incfs_realloc_mount_info+0xa7/0x4d0
[  101.450128][ T4988]  ? incfs_add_sysfs_node+0x118/0x240
[  101.455815][ T4988]  incfs_alloc_mount_info+0x479/0x600
[  101.461239][ T4988]  incfs_mount_fs+0x3ca/0x960
[  101.466129][ T4988]  ? __cfi_incfs_mount_fs+0x10/0x10
[  101.471750][ T4988]  ? vfs_parse_fs_string+0x102/0x170
[  101.477048][ T4988]  ? selinux_capable+0x38/0x50
[  101.481944][ T4988]  legacy_get_tree+0x106/0x1b0
[  101.486750][ T4988]  ? __cfi_incfs_mount_fs+0x10/0x10
[  101.492003][ T4988]  vfs_get_tree+0xa1/0x290
[  101.496692][ T4988]  do_new_mount+0x251/0xb40
[  101.501446][ T4988]  ? security_capable+0xcf/0xf0
[  101.506583][ T4988]  path_mount+0x688/0x1050
[  101.511046][ T4988]  ? putname+0x113/0x150
[  101.515370][ T4988]  __se_sys_mount+0x2bd/0x480
[  101.520158][ T4988]  ? __x64_sys_mount+0xf0/0xf0
[  101.524961][ T4988]  ? __kasan_check_read+0x15/0x20
[  101.530373][ T4988]  __x64_sys_mount+0xc3/0xf0
[  101.535040][ T4988]  x64_sys_call+0x2021/0x2ee0
[  101.539885][ T4988]  do_syscall_64+0x58/0xf0
[  101.544397][ T4988]  ? clear_bhb_loop+0x50/0xa0
[  101.549107][ T4988]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.555167][ T4988] RIP: 0033:0x7fd32c38ebe9
[  101.559595][ T4988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.579761][ T4988] RSP: 002b:00007fd32d294038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  101.588511][ T4988] RAX: ffffffffffffffda RBX: 00007fd32c5c6090 RCX: 00007fd32c38ebe9
[  101.596717][ T4988] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
[  101.605029][ T4988] RBP: 00007fd32c411e19 R08: 0000200000000280 R09: 0000000000000000
[  101.613246][ T4988] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000
[  101.621349][ T4988] R13: 00007fd32c5c6128 R14: 00007fd32c5c6090 R15: 00007ffc787ca138
[  101.629612][ T4988]  </TASK>
[  101.632676][ T4988] ---[ end trace 0000000000000000 ]---
[  101.638414][ T4988] incfs: Error allocating mount info. -12
[  101.644772][ T4988] incfs: mount failed -12