last executing test programs:

37.386183213s ago: executing program 0 (id=80):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "1049d97cde0148c6", "dcc0e769e091d0fd251e5e12aaa4fc70", "480ae6f4", "98d36583eca2be02"}, 0x28)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="d2cf4071eedf8b7b757a8a7286590f3b2b73e4d6501d0dcc9ade7118283ba63b6a59c5d5b4171e791290e0ed52580ccb12807717e072cf88cfb3c53a48a6dbff0300000000", 0x45}, {0x0}], 0x2}}], 0x1, 0x4000001)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000200)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0xd5cfe9c02b02a08b)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xc400, 0x0)
ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000580)=ANY=[@ANYBLOB="6b9addee0bad8c2733eac63f6d5644578d4c645a1c51a2310ee9cfc0761c21954bed80903ea9d5f4c041e1f4fe0366da372daae3c7afad6aa71b73a2fea4767ba6022ce6121e31e22263c7089fb1b4500caddd98798c82c8a0d3b19003129a694179fba767fcd75434a1a11ab1c01df4c0a6fcb2", @ANYRES32=r4, @ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="00e6ff0000000100eeff00000000000120000000", @ANYRES32=r4, @ANYBLOB="0007e85f2f958985dcffffff0020000000000000f88c859767a353f4c690d89dabc0574a448161d6329a6b9cc48679690bf7888de03f1319fc1e0c96a1138f979168f8f44e2c72be3d9e89a9c7e8d13ad14dae"])
socket$netlink(0x10, 0x3, 0x4)
mkdirat(r4, &(0x7f0000000040)='./bus\x00', 0x111)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./bus\x00', &(0x7f00000020c0), 0x0, &(0x7f00000004c0)=ANY=[])
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x21, r8, 0x0, 0x2)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r7], 0x10)

37.349411493s ago: executing program 0 (id=82):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0xfffffffc, 0x4)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x124e8866}) (async)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x124e8866})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x24000000}, 0x0)
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r2 = inotify_init()
inotify_add_watch(r2, 0x0, 0x8)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f00000012c0)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8a1eaa0000000000004acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6bbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f7265f210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d65cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d1b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b40900f5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266ba65dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584143a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd83bd223a1e64a3a8271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3777c64b42336d70f0000000000000062e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
getsockopt$netlink(r3, 0x10e, 0x3, 0x0, &(0x7f0000000080))
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) (async)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x945}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x8, 0x4}}}}}]}}]}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f00000002c0))
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xea100, 0x0)
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0xb) (async)
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0xb)

36.723882163s ago: executing program 0 (id=85):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010002, 0x0, 0x5}]})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0)
setreuid(0xee00, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000180)=""/105, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=""/129, 0x4000})
setreuid(0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x5)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

35.68727333s ago: executing program 0 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0212000002de2a196bdabaee4dce95f2984047b42096908b0028fa321ebcc043eafff18878d5fcb4665b32ccec90b1301b519d0d8569dab89a2b8a7feffbcb6d54474d9984f431466ea77524748185cc1ce247ba45e1d316d5c7da0e536d3b63c12ce76001a89b2863b1faa59d8f932133fe3404b369b24d08f71be8809503cce77c8e89dd31e4478b37c1d7f91473c71d568e82d3117d1b212aa5d9fd98495df89fd17a8a6fe47fe72504269a4823105342c6e801609a10b0b70c5c6219044db0aafc7e1ea6e0553ac303e37fff0b19080040ce9a53fca4a6d280"], 0xfffffe05}}, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000080010a0000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x22800, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x482240, 0x3)
mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@privport}]}})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})
socket$inet6(0xa, 0x4, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

35.361966936s ago: executing program 0 (id=98):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x63, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd"}) (fail_nth: 6)

35.13105418s ago: executing program 0 (id=104):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1800)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = socket(0x1e, 0x4, 0x20000)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendto$inet6(r4, &(0x7f0000000840)="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", 0x7c1, 0x40001, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r5, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000040000000020000001000000100000000008"], 0x2a)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x10}, 0x0, 0x0, 0x0})
r6 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000240), 0x12)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x0)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(r3, &(0x7f0000000280)='net/sco\x00')
lseek(r9, 0x10001, 0x0)

33.671662534s ago: executing program 2 (id=115):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000080000064d564b", @ANYRESHEX=0x0])
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
read$FUSE(r4, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000002c0)=r4)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r5, 0xb42, 0x80000})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r9, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c7665f273696f6e3d3970323030302e752c00"])
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000081000/0x400000)=nil)

33.268770941s ago: executing program 2 (id=118):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xf, 0x2})
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x240)
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0xb2, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x7, 0xfb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x18, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xff, 0x40}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

31.831399494s ago: executing program 2 (id=121):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x63, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd"}) (fail_nth: 8)

31.694165256s ago: executing program 2 (id=122):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x58, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"})
syz_clone(0x6908280, 0x0, 0x0, 0x0, 0x0, 0x0)

31.693816886s ago: executing program 2 (id=123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000023c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, r2, 0x62a, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002440)={'bond0\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0xfffff001, 0x4)
sendto$packet(r4, &(0x7f00000003c0)="3f031c000302140006001e00895aac4a858000a762dea6a20eb00000004a097880610c000000", 0x26, 0x200400c0, &(0x7f0000000100)={0xc9, 0x8100, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x84}}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)='%((@\x00')
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f0000000100)="9ea1d0081f", 0x5)
recvmmsg(r9, &(0x7f00000008c0), 0x10, 0x0, 0x0)
close(r8)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x1f8, 0x0, 0x108, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x7, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}], [{@uid_eq}]})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r10, &(0x7f0000000300)={0x2020}, 0x2020)

31.086339477s ago: executing program 2 (id=124):
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) (async)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71dbe621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe72}}, 0x1006) (async)
r1 = eventfd2(0x3, 0x1)
write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000004640)={0x2020}, 0xffffffffffffffda) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r4 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x9, 0x18, {0x18, 0x23, "19eca45b5e56984a13f55f0533c0cfaf49d0dd82e1e5"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000540)={0x40, 0x1}, &(0x7f0000000200)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) (async)
write$cgroup_devices(r0, &(0x7f0000001000)={'a', ' *:* ', 'r\x00'}, 0x8) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

31.031282708s ago: executing program 32 (id=124):
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) (async)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, {"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", 0xfffffffffffffe72}}, 0x1006) (async)
r1 = eventfd2(0x3, 0x1)
write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000004640)={0x2020}, 0xffffffffffffffda) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r4 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x9, 0x18, {0x18, 0x23, "19eca45b5e56984a13f55f0533c0cfaf49d0dd82e1e5"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000540)={0x40, 0x1}, &(0x7f0000000200)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) (async)
write$cgroup_devices(r0, &(0x7f0000001000)={'a', ' *:* ', 'r\x00'}, 0x8) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

19.97516579s ago: executing program 33 (id=104):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1800)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = socket(0x1e, 0x4, 0x20000)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendto$inet6(r4, &(0x7f0000000840)="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", 0x7c1, 0x40001, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r5, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000040000000020000001000000100000000008"], 0x2a)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x10}, 0x0, 0x0, 0x0})
r6 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000240), 0x12)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x0)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = syz_open_procfs(r3, &(0x7f0000000280)='net/sco\x00')
lseek(r9, 0x10001, 0x0)

2.690121185s ago: executing program 4 (id=465):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140))
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44})
read(r3, &(0x7f00000044c0)=""/181, 0xb5)
r4 = epoll_create(0xaf2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000004c0)={0xe000200b})
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x400000000000000, 0x1d}, {0x0, 0xfffffffffffffffe, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x5}, {{@in6=@loopback, 0x0, 0x6c}, 0x2, @in=@remote, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}}, 0x48014)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.39884292s ago: executing program 1 (id=468):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x19)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1fff, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x18, 0x36, {0x36, 0x3, "17ba2ecbb3ac4fcca68b0d4dd17ea18265cc3288651c16a4887bbf7d2b44b03a1b6c9be06bd2951b98091f3e9afa20b396d4fa97"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f00001b8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x42, 0x1d, 0x4e})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

1.882311939s ago: executing program 1 (id=471):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x4, 0x2, 0xff, '\x00', 0x1})
r3 = dup3(r1, r0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
close(0x3)
socket$inet_icmp(0x2, 0x2, 0x1)
recvfrom(r4, 0x0, 0x0, 0x2100, 0x0, 0x0)
syz_clone3(&(0x7f0000000780)={0x81000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

1.882042889s ago: executing program 1 (id=472):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r4 = epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
close(0x3)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r8=>0x0})
bind$xdp(r6, &(0x7f0000000040)={0x2c, 0xd, r8}, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "ab64337707aea0f466389eca00e8273fa681ce3683faa418b99df8f987d2dcc4", "c8adf18e5a8118824b62595c46fd5f3ee24b8e85334f1bb786f99f361953f788", "7a6d05b81fea90a253dd77725147d687026d26ca6f00", "d7a3a3c002fb00006d0dd00e2b9d475ee25503cfc59c30a17b27b179bc33d117", "6b72b1f095575b2ed10ba721d53a8bf9c29750ad9c2d5a7a05582a661306a6f7", "d85f4023183cb73b81c01cd4", 0xa00a, 0x7f, 0x8, 0x3ff, 0x8}})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r4, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})
close_range(r0, 0xffffffffffffffff, 0x0)

1.881839559s ago: executing program 4 (id=473):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)

1.876009789s ago: executing program 1 (id=474):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x11, r0, 0x3a176000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="687467652ca0703d616c7761dd"])
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x256b43, 0x1d0)
fallocate(r4, 0x0, 0x0, 0x1000f4)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
ftruncate(r5, 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}})
keyctl$setperm(0x5, 0x0, 0x7613808)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, @multicast2}, 0x10)

1.84589309s ago: executing program 4 (id=475):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x1, 0x1)
fchdir(r1) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x7b) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) (async)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10000004) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x1, 0x7c7, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x2a, 0xa3, 0xc0, 0x40, 0x711, 0x230, 0x7605, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b5, 0x2, 0x2, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x4, 0xe, 0xe8, 0x41, 0xb6, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "cc56e6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x400, 0x7, 0xfc}, {0x6, 0x24, 0x1a, 0xd, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xcc, 0x7, 0xf, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}, @obex={0x5, 0x24, 0x15, 0x1000}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0x8, 0x4}, @mdlm_detail={0xb2, 0x24, 0x13, 0x6, "190bad42afea5c2737677f046c621e0e870c1c34459f8f6051480f80325e8015e67f4d11baccf82413aa07694199727534662e456d2793be0c8d568e9b4b55352cab5f1014d8abd5c0d57b7788f0f1203158ad55118d9a6f7c1f14f5507f06ebd607cd355242372b3fe2185d657858dd87a783fa8d94152aba21ba71a9fcb662a1c22db0df5f53df7d722bd9ca20c924e6c2efa3ee28b15ec232c091b6b670d44e18f1884fb5c14723331401446a"}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x3, 0xdb, 0x6, 0xfc, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x1, 0x6, 0x4}]}], [{{0x9, 0x5, 0x5, 0x10, 0x400, 0x8, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0xca, 0xe4, 0x31}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x2, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x4, 0x9, 0x59}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7, 0x3, 0x35, [@generic={0xdb, 0x23, "b4d3212eba5bfec5fdc9c82ca04f32cc5ff4b379955f6e8f107bce4d9f7c98bef602f937937f9ce08c22f89187d91b3f9568cbf66537bf3287a9faeb72c0f1ee7a19494526b471548dc72586a9261c666cdbcb5f47117d74e1d9b84ade7e8b161850c7dd0a55077f8b903176a2cc2383b864787ac074703346d02219f6e754a3d83fdb28653f6ed4762f3e8697f6b9b710480c7930bf2d575810c2aaa27fe201765b6135dcde86fc42c804cd113e274ef8c1314379e44f1397b5189bf419b7bf56fee4051908fec2ea8a2cdad8c08f1206827434d81003ff43"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x6, 0x1, 0x8, [@generic={0xc, 0xa, "a5295b6e0a4fa0e1e4a9"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xac30}]}}, {{0x9, 0x5, 0xe, 0x5, 0x200, 0xfd, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x625f}, @generic={0x12, 0x5, "dd82a3d4e7dfacb18bb09a70b49b313c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0xb, 0xe, 0x400, 0xb, 0x6, 0x7a, [@generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x9, 0x4, 0xb0, [@generic={0x4, 0x23, "157d"}, @generic={0x97, 0xd, "9373b2cbd648bc6c26d3b7fcab5623a48ee712e4a3173544853fa382ec53c1ac25549f9c9b1ebff435cf3909a9ac30f0db43bbc0ba0b17d24412492d36e00f8f14adced2616e82dd58379b704e29de9f8829d5bc78a0f2ee918f234c64b9b5d6e67f09f5af4722df305294b184d7a7803e7f2771cfcfc9483e96a32595cb6d7ba3d515fc44260bfce864f74423c2ff69b9028fdaba"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x33, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0xb, 0xde, 0xff, [@generic={0x63, 0xd, "f0261a94152a411ca90c6831867a669f259ec90dc8dd0ac0f2daeae10e97b149b85122714314c7812c12d0bb7178a32e8086c58fd8b7f8d84c5c78b1a8ff571e633d39521bd0a5ca1b0a12a37a3196bfbeef738c2c481a1c4a1a7ada78c9e0c2fc"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x8, 0xff, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfc, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xc, 0x14, 0x20, 0x29, 0x3, 0x5b, [@generic={0x5f, 0xd, "402071626fbe70834e6fac155863297376ef2838b18cbe9800705cc55ac81d2a6e758469caf27664aa4c7e17390e9eb119f708415e8cbd353c2fde920ead57b0e829b590ea2148d6232bae555ca53959f9504715acf6ac6975ef830c68"}]}}]}}, {{0x9, 0x4, 0x62, 0xf6, 0xb, 0xff, 0xff, 0xff, 0xf9, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0xf, 0x4, [@generic={0x2a, 0x22, "5374c758eaeed8854d6eca9205ed93799c852a200b65cf69f85047543319a56869fb67f7ef76b5ac"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfff8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xbc, 0x1, 0x9b}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0xa, 0xb8, [@generic={0x89, 0xc, "ca49dc8d29936e0ce2928d69ee595b4fa26aa180ee99d5e1eb04e76eda2f54969d95b78b2b48feac6316179d1f8b4dfcf10154fb0edc88a970956108a42e046b3eb4c5dfe7f7e330ea0064764366e0b40a918adfd7899454fd49a0a0dbd22962324f691b18ab6af2290f5e899c4ac715a497399cffb559b1603e85047e90c1f9224ab9f9c35da8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x3d, 0xd8, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @generic={0x49, 0x31, "1445156355b65531268a64e6de5bcda8a583ca34febe0b67174b327932889aa720007dae5085ef940e9c2524cab9df5cb78ed4792ef54b967cc00e0b3750a9746bbc4adc6aef01"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x1, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x56c537c361d1d5b7, 0x10, 0x400, 0x1c, 0xb, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x80, 0x8, 0xf3}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x7, 0x10, [@generic={0x1e, 0x3, "692dd407951e0d6beeb82a53477c22d8c0c24da05b6d8fed6bc26a7f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0xa1, 0xb, 0x5, [@generic={0xde, 0x21, "cc2108f9a0b8076610008a91778f7e7c5b0120dc7449d7ebb5cd62f13ac1736bc38ca13fc41fbf56335169ad8f9e7d8d8bf49b616e92b3333e92b15803d4b36ce873dc14923ff600ba0e9dca30776680da7c0a67ebe2b71ce0adf40dc2e7dc6538d6d39ce12a29268d6ba6189e1e157563b30c13155796b5bddb544b88bed5d2e5507e9d6703da4c3958c072f995fb55aa625064c6c38a9d78a00f65ac60cc4c4fb98b1fbe0baad76c992811d3e4cd37b3fe092371b0514a35e654c25d826bcd5cbd0d7099c7ca78e3443799357eb3e7cecbf3c6c2c1b7b12886b840"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3, 0x2, 0x9, 0x10, 0x40}, 0xf1, &(0x7f0000000140)={0x5, 0xf, 0xf1, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x5, 0xf9}, @generic={0xdb, 0x10, 0x3, "0345f3aeb31558813fc95f5bd8c15de557c1e01a8434a655471bd99d21bb8c4c1ab567fb8f77a22e31a5c213d46e816d3cb73373e2f8e5ded432d39d9249b583838d1fd5a065ce7e4a73476c655c6b3c5edf77f45250d4df8fda67e512ec4a6d8f9ee24ecba3415089553948382b1454d76f18b48617baca44fe2a3c4f2fa0a99092bc55fbc968fca210d00d1234722197db6cae70717b9fb584f87e0950d38de0c5492f3f4e62cc50fbc3145bad7d0e7bafefd77eecca854f8d6b8500ae25be28a0b5ec1c37a92a02d3ee01f801a933e67522294ddca152"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0xfb, 0x3ff}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1404}}]}) (async)
setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) (async)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async)
ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

1.79828964s ago: executing program 1 (id=476):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000740))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x9, 0x0, &(0x7f0000000040)=[@dead_binder_done, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

1.79793265s ago: executing program 4 (id=477):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80)
clock_gettime(0x0, &(0x7f0000004980)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000240)=""/192, 0xc0}], 0x4, &(0x7f0000004a80)=""/195, 0xc3}, 0x2}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000004a00)=""/98, 0x62}, {&(0x7f0000000680)=""/156, 0x9c}], 0x5}, 0x11}, {{&(0x7f00000007c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/85, 0x55}, 0x1}, {{&(0x7f0000000900)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/69, 0x45}, {&(0x7f0000000a00)=""/123, 0x7b}, {&(0x7f0000000a80)=""/238, 0xee}], 0x3, &(0x7f0000000bc0)=""/72, 0x48}, 0x8b}, {{&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)}, {&(0x7f0000000d00)=""/86, 0x56}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/254, 0xfe}], 0x4, &(0x7f0000000f00)=""/163, 0xa3}, 0x6}, {{&(0x7f0000000340)=@generic, 0x80, &(0x7f00000046c0)=[{&(0x7f0000001040)=""/95, 0x5f}, {&(0x7f00000010c0)=""/102, 0x66}, {&(0x7f0000003180)=""/216, 0xd8}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/101, 0x65}, {&(0x7f0000004300)=""/151, 0x97}, {&(0x7f00000043c0)=""/227, 0xe3}, {&(0x7f00000044c0)=""/174, 0xae}, {&(0x7f0000004580)=""/10, 0xa}, {&(0x7f00000045c0)=""/223, 0xdf}], 0xa, &(0x7f0000000600)=""/90, 0x5a}, 0x4}], 0x6, 0x40000120, &(0x7f00000049c0)={r1, r2+10000000})
getpid()
setns(0xffffffffffffffff, 0x24020000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040))
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@getsa={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfb, {@in6=@loopback, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)
syz_open_dev$hiddev(&(0x7f0000000300), 0xffffffffffffffff, 0x80)
socket$unix(0x1, 0x1, 0x0)

1.78715712s ago: executing program 1 (id=478):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x10c, 0x10, 0x633, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0xfffffffd, 0x705fa590858cd464}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0xfffffffd}, 0x2, 0x3504, 0xa, 0x4}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e23, @in6=@mcast2}}]}, 0x10c}}, 0x0)
timer_create(0x0, 0x0, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2)
pause()
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)
unshare(0x2040000)

1.389784337s ago: executing program 3 (id=481):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x541c82, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r3=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000021c0)=0xe8)
getgroups(0x5, &(0x7f0000002200)=[<r5=>0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff])
read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004280)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000004380)=0xe8)
statx(0xffffffffffffffff, &(0x7f00000043c0)='./file0\x00', 0x400, 0x400, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004500)=<r9=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004540)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000004640)=0xe8)
lstat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
write$FUSE_DIRENTPLUS(r2, &(0x7f0000004740)={0x380, 0xffffffffffffffda, r3, [{{0x6, 0x2, 0x52d, 0x6, 0x9, 0x6, {0x3, 0x5, 0x63fa0420, 0x3, 0xdb, 0x10001, 0x7, 0x40, 0x4, 0xc000, 0xcd6, r4, r5, 0x3}}, {0x5, 0x9, 0x12, 0x190b, '/dev/loop-control\x00'}}, {{0x3, 0x1, 0x9, 0x9, 0x1, 0x0, {0x3, 0xa, 0x400, 0xfffffffffffffffe, 0x6, 0x6, 0x2, 0x9, 0x49ae, 0xc000, 0xcd, 0xee00, r6, 0xaa20000, 0x7fffffff}}, {0x2, 0x400, 0x12, 0x2, '/dev/loop-control\x00'}}, {{0x2, 0x2, 0x101, 0x2, 0x5, 0x2, {0x5, 0x7, 0x12, 0x4, 0x2, 0x6, 0x7, 0x9, 0xa, 0x6000, 0x5, r7, r8, 0x1ff, 0x859}}, {0x4, 0x8, 0x12, 0xfffffff8, '/dev/loop-control\x00'}}, {{0x1, 0x3, 0x7fff, 0x4, 0xd, 0xff, {0x2, 0x8, 0x4, 0x200, 0x89, 0xac46, 0xf7d, 0x0, 0x2, 0x6000, 0xb, r9, 0xee00, 0x4, 0x3}}, {0x5, 0x7, 0x12, 0x4, '/dev/loop-control\x00'}}, {{0x2, 0x3, 0x1, 0x800, 0x3, 0x2929, {0x4, 0x400, 0x8000, 0x6, 0xff, 0x6, 0x8, 0x4, 0x2, 0x2000, 0x4, r10, r11, 0x4b7, 0x7fff}}, {0x3, 0x9, 0x12, 0x2, '/dev/loop-control\x00'}}]}, 0x380)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
pipe2$9p(&(0x7f0000004b40)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000004ac0)='./file0\x00', &(0x7f0000004b00), 0x2, &(0x7f0000004b80)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@directio}, {@loose}, {@cache_mmap}, {@loose}], [{@seclabel}]}})
ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000004c00)={<r14=>r12, 0xffffffffffffff38, 0xc, 0x9})
ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r1)
ioctl$EVIOCGMTSLOTS(r14, 0x8040450a, &(0x7f0000004c40)=""/102)
openat$uhid(0xffffffffffffff9c, &(0x7f0000004cc0), 0x802, 0x0)
ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r1)
ioctl$TCFLSH(r14, 0x540b, 0x1)
write(0xffffffffffffffff, &(0x7f0000004d00)="ef78931be157ffe8ee1155df5a8ee654db9e7598c11444adf0d2b8653bdbc4313d332f76b06786c372defafe7c9d92d940c78fbbf817", 0x36)
getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000004d40)={<r15=>0x0, @dev, @multicast2}, &(0x7f0000004d80)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000004f40)={'gretap0\x00', &(0x7f0000004dc0)={'syztnl0\x00', r15, 0x8000, 0x40, 0x8, 0x4b75, {{0x57, 0x4, 0x3, 0x1b, 0x15c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x2c, 0x51, 0x3, 0x0, [{@multicast1, 0x1}, {@multicast2, 0x5}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}]}, @timestamp_addr={0x44, 0x54, 0xb0, 0x1, 0x7, [{@loopback, 0x5}, {@multicast2, 0x7fffffff}, {@empty, 0xffff}, {@multicast2, 0xc}, {@multicast1, 0x8}, {@remote, 0x4}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010100, 0x4}]}, @generic={0x82, 0x2}, @lsrr={0x83, 0xb, 0xdd, [@rand_addr=0x64010100, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0xe}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x6, [{@multicast1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@multicast1, 0x1999}, {@rand_addr=0x64010101, 0x95f}, {@local, 0x1ff}, {@private=0xa010102, 0x3}]}, @cipso={0x86, 0x42, 0x2, [{0x2, 0xd, "42096ed2f7f5d404e3a233"}, {0x1, 0x11, "c0a5617b8055ff9a51c9b54b884eb2"}, {0x1, 0xc, "91ff11fd89da1bb5432f"}, {0x0, 0x12, "73e1a5611bded608729bdef40f3d0b82"}]}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x8, [{@multicast2, 0x1}, {@empty, 0x4}, {@remote, 0x8000}, {@local, 0x6}]}, @lsrr={0x83, 0x13, 0x3d, [@multicast1, @broadcast, @rand_addr=0x64010101, @multicast1]}]}}}}})
newfstatat(0xffffffffffffff9c, &(0x7f0000005000)='./file0\x00', &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x2000)
mount$9p_fd(0x0, &(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0), 0x82420, &(0x7f00000050c0)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r16}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'loose'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@pcr={'pcr', 0x3d, 0x27}}, {@hash}, {@permit_directio}]}})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
lgetxattr(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)=@random={'security.', 'dfltgid'}, &(0x7f0000005200)=""/90, 0x5a)

1.377792657s ago: executing program 3 (id=482):
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x28444c2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f5f62665f7265616461686561643d30303030303030303030303030303030303030312c6e6f5f62665f7265616461686561643d30303030303030303030303030303030303030302c726561645f74696d9b2032b06fe57b0eac1879a0a7dbf0656f75745f6d733d30303030303030303030303030303030303030372c6e6f5f62665f7265616461686561643d30303030303030303030303030303030303030312c646f6e745f6d6561737572652c686173682c6d61"])

1.356453398s ago: executing program 3 (id=483):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x410, &(0x7f00000006c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async)
setresgid(0xee01, 0x0, 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x0, 0x100) (async)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = pidfd_getfd(r1, r0, 0x0)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, 0xee01, &(0x7f0000000000)={0x4f3, 0x7, 0x0, 0x1}) (async)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0xffffffffffffffff, r5, r5)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r6, 0xffffffffffffffff, 0x0)

1.286318349s ago: executing program 3 (id=484):
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000040))
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x400, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0)

1.275452289s ago: executing program 3 (id=486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = gettid()
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6c5}) (async)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6c5})
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0)
read(r2, &(0x7f0000000180)=""/84, 0x54)
read(r2, &(0x7f0000001940)=""/4096, 0x1000)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) (async)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000})
r3 = syz_open_procfs(r0, &(0x7f0000000080)='net/netfilter\x00')
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r3)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000000)='.\x00', 0x0, 0x321491, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000340)=r6)
umount2(&(0x7f0000000240)='./file0\x00', 0x1)

1.125940152s ago: executing program 5 (id=489):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @flat=@binder={0x73622a85, 0x100b, 0x1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0})

1.125634101s ago: executing program 5 (id=490):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x10, 0x5, 0x0, 0x4, 0x7, 0x0, 0x7, 0xfc, 0x0, 0xfc, 0x0, 0x1ff, 0x2, 0xff, 0x0, 0x45, [0x0, 0x1]}})
poll(&(0x7f0000000600)=[{r1, 0x3306}, {r1, 0x20}, {0xffffffffffffffff, 0x8001}], 0x3, 0x6)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/231, 0xe7, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/165, 0xa5, 0x2, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r4, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000000ff7f02000000000002003e00eefffbff94020000000000004000000000000300cf000000000000000f0000002c8f380001"], 0x78)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000001600)=0xffffffff, 0x4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101})
syz_io_uring_setup(0x2421, 0x0, 0x0, 0x0)

935.976085ms ago: executing program 4 (id=491):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done={0x400c6314}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=[@dead_binder_done={0x400c6314}], 0x0, 0x0, 0x0}) (async)

914.113065ms ago: executing program 4 (id=492):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001200010029bd7000fbdbdf250a010100000000000000000000000000000004d302003c0014000d00ac1414bb000000000000000000390000"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, 0x0}}], 0x0, 0x0, 0x0})

834.281686ms ago: executing program 3 (id=493):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
stat(0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="c4e1fd2f0fb9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_open_dev$usbfs(0x0, 0xb, 0x101301)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000018c0), 0x8000, 0x0)
ioctl$BLKFRASET(r8, 0x1264, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r7, 0x147a5000)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74)

816.805417ms ago: executing program 34 (id=493):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
stat(0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="c4e1fd2f0fb9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_open_dev$usbfs(0x0, 0xb, 0x101301)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000018c0), 0x8000, 0x0)
ioctl$BLKFRASET(r8, 0x1264, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r7, 0x147a5000)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74)

317.355605ms ago: executing program 6 (id=494):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c69676e6f726571762c646972656374696f2c616669643d3078303030303030303030303030303030382c009aefe4e383ab8835626722f8c7b9e578c1a75afbbc799a99e154ef23"])
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r4, r0, 0x0, 0x80000000)

299.152515ms ago: executing program 6 (id=495):
r0 = fsopen(&(0x7f0000000100)='befs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, 0x0)
syz_io_uring_setup(0x1866, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x4, 0x236}, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r3, 0x8, 0x1)
getdents64(r3, &(0x7f0000000280)=""/158, 0x9e)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0xf9c56000)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0)

150.249997ms ago: executing program 6 (id=496):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "fffffffffffff1ff"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0)
ioprio_set$uid(0x3, 0x0, 0x2000)

150.013317ms ago: executing program 5 (id=497):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r1, 0x540b, 0x2)

146.310858ms ago: executing program 5 (id=498):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_clone3(&(0x7f0000000200)={0x44800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x5}, &(0x7f0000000140)=""/48, 0x30, &(0x7f0000000180)=""/6, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
ptrace(0x11, r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

64.447659ms ago: executing program 6 (id=499):
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffb)
socket$netlink(0x10, 0x3, 0x12)
write$evdev(r2, &(0x7f0000000040), 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1ff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/252, 0xfc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x4b, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"])
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

18.1765ms ago: executing program 5 (id=500):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1)
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0xca71f000) (async)
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0xca71f000)
r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x80000001, 0x80000001})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x5)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='/dev/cpu/#/msr\x00', 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mremap(&(0x7f0000703000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000fef000/0x3000)=nil) (async)
mremap(&(0x7f0000703000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000fef000/0x3000)=nil)

0s ago: executing program 5 (id=501):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0xffffffffffffffff, 0xf000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x150)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x74, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r6}], 0x51, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff7a"})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000180)={0x1})
chdir(&(0x7f00000000c0)='./bus\x00')
ftruncate(r5, 0x400)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r8)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

kernel console output (not intermixed with test programs):

evice number 2
[   30.296623][   T45] usb 3-1: USB disconnect, device number 2
[   30.362753][   T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   30.492766][   T31] usb 2-1: device descriptor read/64, error -71
[   30.602762][  T409] rust_binder: get_current_thread was called from the wrong process.
[   30.604117][   T62] usb 1-1: USB disconnect, device number 2
[   30.732879][   T31] usb 2-1: device descriptor read/64, error -71
[   30.842882][   T31] usb usb2-port1: attempt power cycle
[   30.907513][  T448] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[   30.926503][  T451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.019706][  T456] rust_binder: Error in use_page_slow: ESRCH
[   31.019723][  T456] rust_binder: use_range failure ESRCH
[   31.022086][  T457] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   31.025778][  T456] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   31.031518][  T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   31.039463][  T456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   31.047531][  T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:28
[   31.057021][  T456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:28
[   31.068580][  T457] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.175154][  T461] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.182453][  T460] rust_binder: Error while translating object.
[   31.189434][   T36] kauditd_printk_skb: 113 callbacks suppressed
[   31.189455][   T36] audit: type=1400 audit(1753790797.220:187): avc:  denied  { transfer } for  pid=459 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   31.192976][  T461] rust_binder: Error while translating object.
[   31.195735][   T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   31.202238][  T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   31.222518][   T36] audit: type=1400 audit(1753790797.240:188): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   31.227553][  T460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   31.244157][  T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69
[   31.266087][  T460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69
[   31.275381][   T31] usb 2-1: device descriptor read/8, error -71
[   31.382558][   T36] audit: type=1400 audit(1753790797.420:189): avc:  denied  { read write } for  pid=475 comm="syz.0.43" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.405585][   T36] audit: type=1400 audit(1753790797.420:190): avc:  denied  { open } for  pid=475 comm="syz.0.43" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.428356][   T36] audit: type=1400 audit(1753790797.430:191): avc:  denied  { ioctl } for  pid=475 comm="syz.0.43" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.433842][   T31] usb 2-1: device descriptor read/8, error -71
[   31.452868][   T36] audit: type=1400 audit(1753790797.430:192): avc:  denied  { map } for  pid=475 comm="syz.0.43" path="socket:[3784]" dev="sockfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   31.555956][   T36] audit: type=1400 audit(1753790797.600:193): avc:  denied  { read append } for  pid=477 comm="syz.0.44" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   31.580396][   T36] audit: type=1400 audit(1753790797.600:194): avc:  denied  { open } for  pid=477 comm="syz.0.44" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   31.605004][  T409] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   31.613885][   T36] audit: type=1400 audit(1753790797.660:195): avc:  denied  { create } for  pid=477 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.634107][   T36] audit: type=1400 audit(1753790797.660:196): avc:  denied  { write } for  pid=477 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.742751][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   31.750335][  T409] usb 3-1: device descriptor read/64, error -71
[   31.773781][   T31] usb 2-1: device descriptor read/8, error -71
[   31.904658][   T31] usb 2-1: device descriptor read/8, error -71
[   31.992760][  T409] usb 3-1: device descriptor read/64, error -71
[   32.012807][   T31] usb usb2-port1: unable to enumerate USB device
[   32.232875][  T409] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   32.362757][  T409] usb 3-1: device descriptor read/64, error -71
[   32.562751][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   32.602744][  T409] usb 3-1: device descriptor read/64, error -71
[   32.712885][  T409] usb usb3-port1: attempt power cycle
[   32.719249][   T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   32.728160][   T31] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[   32.738579][  T433] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   32.746158][   T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   32.755193][   T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12147, setting to 1024
[   32.766491][   T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[   32.777711][   T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   32.787151][   T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   32.795192][   T31] usb 4-1: Product: syz
[   32.799384][   T31] usb 4-1: Manufacturer: syz
[   32.805027][  T497] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   32.813085][   T31] cdc_wdm 4-1:1.0: skipping garbage
[   32.818340][   T31] cdc_wdm 4-1:1.0: skipping garbage
[   32.823676][   T31] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[   32.902746][  T433] usb 1-1: device descriptor read/64, error -71
[   33.052755][  T409] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.073755][  T409] usb 3-1: device descriptor read/8, error -71
[   33.142724][  T433] usb 1-1: device descriptor read/64, error -71
[   33.203831][  T409] usb 3-1: device descriptor read/8, error -71
[   33.382724][  T433] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   33.421203][  T526] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   33.442801][  T409] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   33.464208][  T409] usb 3-1: device descriptor read/8, error -71
[   33.522720][  T433] usb 1-1: device descriptor read/64, error -71
[   33.594130][  T409] usb 3-1: device descriptor read/8, error -71
[   33.702889][  T409] usb usb3-port1: unable to enumerate USB device
[   33.762742][  T433] usb 1-1: device descriptor read/64, error -71
[   33.802740][   T10] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   33.872827][  T433] usb usb1-port1: attempt power cycle
[   33.953834][   T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   33.962985][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.971671][   T10] usb 2-1: config 0 descriptor??
[   34.213597][  T433] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   34.233967][  T433] usb 1-1: device descriptor read/8, error -71
[   34.363927][  T433] usb 1-1: device descriptor read/8, error -71
[   34.525656][  T545] FAULT_INJECTION: forcing a failure.
[   34.525656][  T545] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.539010][  T545] CPU: 0 UID: 0 PID: 545 Comm: syz.2.66 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   34.539044][  T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   34.539065][  T545] Call Trace:
[   34.539076][  T545]  <TASK>
[   34.539085][  T545]  __dump_stack+0x21/0x30
[   34.539123][  T545]  dump_stack_lvl+0x10c/0x190
[   34.539147][  T545]  ? __cfi_dump_stack_lvl+0x10/0x10
[   34.539172][  T545]  dump_stack+0x19/0x20
[   34.539195][  T545]  should_fail_ex+0x3d9/0x530
[   34.539223][  T545]  should_fail+0xf/0x20
[   34.539248][  T545]  should_fail_usercopy+0x1e/0x30
[   34.539334][  T545]  _copy_from_user+0x22/0xb0
[   34.539351][  T545]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1246/0xa290
[   34.539388][  T545]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   34.539482][  T545]  ? is_bpf_text_address+0x17b/0x1a0
[   34.539510][  T545]  ? is_bpf_text_address+0x17b/0x1a0
[   34.539531][  T545]  ? kernel_text_address+0xa9/0xe0
[   34.539555][  T545]  ? __kernel_text_address+0x11/0x40
[   34.539575][  T545]  ? unwind_get_return_address+0x51/0x90
[   34.539591][  T545]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   34.539619][  T545]  ? arch_stack_walk+0x10b/0x170
[   34.539654][  T545]  ? is_bpf_text_address+0x17b/0x1a0
[   34.539668][  T545]  ? kernel_text_address+0xa9/0xe0
[   34.539685][  T545]  ? __kernel_text_address+0x11/0x40
[   34.539702][  T545]  ? unwind_get_return_address+0x51/0x90
[   34.539719][  T545]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   34.539740][  T545]  ? arch_stack_walk+0x10b/0x170
[   34.539762][  T545]  ? __kasan_check_write+0x18/0x20
[   34.539788][  T545]  ? _raw_spin_lock+0x8c/0x120
[   34.539806][  T545]  ? __cfi__raw_spin_lock+0x10/0x10
[   34.539824][  T545]  ? stack_depot_save_flags+0x38/0x800
[   34.539847][  T545]  ? _raw_spin_unlock+0x45/0x60
[   34.539864][  T545]  ? rust_helper_spin_unlock+0x19/0x30
[   34.539885][  T545]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   34.539919][  T545]  ? __kasan_slab_alloc+0x73/0x90
[   34.539942][  T545]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   34.539963][  T545]  ? proc_tid_base_lookup+0x2f/0x40
[   34.539983][  T545]  ? do_filp_open+0x1c6/0x3e0
[   34.539998][  T545]  ? do_sys_openat2+0x12c/0x1c0
[   34.540015][  T545]  ? __x64_sys_openat+0x13a/0x170
[   34.540032][  T545]  ? x64_sys_call+0xe69/0x2ee0
[   34.540055][  T545]  ? do_syscall_64+0x58/0xf0
[   34.540072][  T545]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.540097][  T545]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   34.540126][  T545]  ? avc_has_perm_noaudit+0x268/0x360
[   34.540146][  T545]  ? __asan_memcpy+0x5a/0x80
[   34.540165][  T545]  ? avc_has_perm_noaudit+0x286/0x360
[   34.540184][  T545]  ? avc_has_perm+0x144/0x220
[   34.540203][  T545]  ? selinux_file_open+0x457/0x610
[   34.540219][  T545]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   34.540249][  T545]  ? avc_has_extended_perms+0x7c7/0xdd0
[   34.540268][  T545]  ? __asan_memcpy+0x5a/0x80
[   34.540294][  T545]  ? avc_has_extended_perms+0x921/0xdd0
[   34.540319][  T545]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   34.540359][  T545]  ? do_vfs_ioctl+0xeda/0x1e30
[   34.540378][  T545]  ? arch_stack_walk+0x10b/0x170
[   34.540406][  T545]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   34.540427][  T545]  ? _parse_integer+0x2e/0x40
[   34.540456][  T545]  ? ioctl_has_perm+0x384/0x4d0
[   34.540475][  T545]  ? has_cap_mac_admin+0xd0/0xd0
[   34.540507][  T545]  ? proc_fail_nth_write+0x17e/0x210
[   34.540531][  T545]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   34.540557][  T545]  ? selinux_file_ioctl+0x6e0/0x1360
[   34.540571][  T545]  ? vfs_write+0x8ba/0xe80
[   34.540592][  T545]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   34.540607][  T545]  ? __cfi_vfs_write+0x10/0x10
[   34.540627][  T545]  ? __kasan_check_write+0x18/0x20
[   34.540655][  T545]  ? mutex_unlock+0x8b/0x240
[   34.540678][  T545]  ? __cfi_mutex_unlock+0x10/0x10
[   34.540700][  T545]  ? __fget_files+0x2c5/0x340
[   34.540725][  T545]  ? __fget_files+0x2c5/0x340
[   34.540755][  T545]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   34.540779][  T545]  ? __se_sys_ioctl+0x114/0x1b0
[   34.540792][  T545]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   34.540814][  T545]  __se_sys_ioctl+0x132/0x1b0
[   34.540827][  T545]  __x64_sys_ioctl+0x7f/0xa0
[   34.540840][  T545]  x64_sys_call+0x1878/0x2ee0
[   34.540861][  T545]  do_syscall_64+0x58/0xf0
[   34.540878][  T545]  ? clear_bhb_loop+0x50/0xa0
[   34.540904][  T545]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   34.540934][  T545] RIP: 0033:0x7f3c7538e9a9
[   34.540963][  T545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.540981][  T545] RSP: 002b:00007f3c761ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   34.541011][  T545] RAX: ffffffffffffffda RBX: 00007f3c755b5fa0 RCX: 00007f3c7538e9a9
[   34.541028][  T545] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   34.541043][  T545] RBP: 00007f3c761ae090 R08: 0000000000000000 R09: 0000000000000000
[   34.541057][  T545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.541070][  T545] R13: 0000000000000000 R14: 00007f3c755b5fa0 R15: 00007ffd8af4e168
[   34.541088][  T545]  </TASK>
[   34.541138][  T545] rust_binder: Write failure EFAULT in pid:89
[   34.612713][  T433] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   34.710966][  T549] rust_binder: 548 RLIMIT_NICE not set
[   34.733866][  T433] usb 1-1: device descriptor read/8, error -71
[   34.741314][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   34.883939][  T433] usb 1-1: device descriptor read/8, error -71
[   34.888007][   T10] asix 2-1:0.0: probe with driver asix failed with error -61
[   35.022857][  T433] usb usb1-port1: unable to enumerate USB device
[   35.160518][  T433] rust_binder: 546: removing orphan mapping 0:4120
[   35.172322][  T552] binder: Bad value for 'defcontext'
[   35.241563][  T555] rust_binder: Error while translating object.
[   35.241605][  T555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   35.247882][  T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:97
[   35.287057][  T433] usb 4-1: USB disconnect, device number 3
[   35.328690][  T565] rust_binder: Write failure EFAULT in pid:58
[   35.342558][  T567] rust_binder: 60: no such ref 0
[   35.355110][  T567] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   35.498506][  T569] rust_binder: Write failure EFAULT in pid:62
[   35.508557][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.510753][  T599] FAULT_INJECTION: forcing a failure.
[   35.510753][  T599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.534425][  T599] CPU: 0 UID: 0 PID: 599 Comm: syz.0.75 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   35.534462][  T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   35.534475][  T599] Call Trace:
[   35.534483][  T599]  <TASK>
[   35.534492][  T599]  __dump_stack+0x21/0x30
[   35.534523][  T599]  dump_stack_lvl+0x10c/0x190
[   35.534548][  T599]  ? __cfi_dump_stack_lvl+0x10/0x10
[   35.534576][  T599]  dump_stack+0x19/0x20
[   35.534600][  T599]  should_fail_ex+0x3d9/0x530
[   35.534629][  T599]  should_fail+0xf/0x20
[   35.534659][  T599]  should_fail_usercopy+0x1e/0x30
[   35.534688][  T599]  _copy_from_user+0x22/0xb0
[   35.534708][  T599]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1a2a/0xa290
[   35.534757][  T599]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   35.534855][  T599]  ? is_bpf_text_address+0x17b/0x1a0
[   35.534876][  T599]  ? kernel_text_address+0xa9/0xe0
[   35.534905][  T599]  ? is_bpf_text_address+0x17b/0x1a0
[   35.534925][  T599]  ? kernel_text_address+0xa9/0xe0
[   35.534949][  T599]  ? __kernel_text_address+0x11/0x40
[   35.534972][  T599]  ? unwind_get_return_address+0x51/0x90
[   35.534994][  T599]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   35.535024][  T599]  ? arch_stack_walk+0x10b/0x170
[   35.535059][  T599]  ? is_bpf_text_address+0x17b/0x1a0
[   35.535079][  T599]  ? kernel_text_address+0xa9/0xe0
[   35.535103][  T599]  ? __kernel_text_address+0x11/0x40
[   35.535127][  T599]  ? unwind_get_return_address+0x51/0x90
[   35.535149][  T599]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   35.535177][  T599]  ? arch_stack_walk+0x10b/0x170
[   35.535208][  T599]  ? __kasan_check_write+0x18/0x20
[   35.535236][  T599]  ? _raw_spin_lock+0x8c/0x120
[   35.535261][  T599]  ? __cfi__raw_spin_lock+0x10/0x10
[   35.535285][  T599]  ? stack_depot_save_flags+0x38/0x800
[   35.535316][  T599]  ? _raw_spin_unlock+0x45/0x60
[   35.535340][  T599]  ? rust_helper_spin_unlock+0x19/0x30
[   35.535368][  T599]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   35.535412][  T599]  ? __kasan_slab_alloc+0x73/0x90
[   35.535444][  T599]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   35.535473][  T599]  ? proc_tid_base_lookup+0x2f/0x40
[   35.535498][  T599]  ? do_filp_open+0x1c6/0x3e0
[   35.535519][  T599]  ? do_sys_openat2+0x12c/0x1c0
[   35.535543][  T599]  ? __x64_sys_openat+0x13a/0x170
[   35.535568][  T599]  ? x64_sys_call+0xe69/0x2ee0
[   35.535597][  T599]  ? do_syscall_64+0x58/0xf0
[   35.535621][  T599]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.535654][  T599]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   35.535694][  T599]  ? avc_has_perm_noaudit+0x268/0x360
[   35.535720][  T599]  ? __asan_memcpy+0x5a/0x80
[   35.535746][  T599]  ? avc_has_perm_noaudit+0x286/0x360
[   35.535772][  T599]  ? avc_has_perm+0x144/0x220
[   35.535800][  T599]  ? selinux_file_open+0x457/0x610
[   35.535831][  T599]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   35.535872][  T599]  ? avc_has_extended_perms+0x7c7/0xdd0
[   35.535898][  T599]  ? __asan_memcpy+0x5a/0x80
[   35.535924][  T599]  ? avc_has_extended_perms+0x921/0xdd0
[   35.535948][  T599]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   35.535986][  T599]  ? do_vfs_ioctl+0xeda/0x1e30
[   35.536005][  T599]  ? arch_stack_walk+0x10b/0x170
[   35.536035][  T599]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   35.536057][  T599]  ? _parse_integer+0x2e/0x40
[   35.536086][  T599]  ? ioctl_has_perm+0x384/0x4d0
[   35.536107][  T599]  ? has_cap_mac_admin+0xd0/0xd0
[   35.536128][  T599]  ? proc_fail_nth_write+0x17e/0x210
[   35.536151][  T599]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   35.536176][  T599]  ? selinux_file_ioctl+0x6e0/0x1360
[   35.536195][  T599]  ? vfs_write+0x8ba/0xe80
[   35.536222][  T599]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   35.536237][  T599]  ? __cfi_vfs_write+0x10/0x10
[   35.536257][  T599]  ? __kasan_check_write+0x18/0x20
[   35.536276][  T599]  ? mutex_unlock+0x8b/0x240
[   35.536297][  T599]  ? __cfi_mutex_unlock+0x10/0x10
[   35.536318][  T599]  ? __fget_files+0x2c5/0x340
[   35.536342][  T599]  ? __fget_files+0x2c5/0x340
[   35.536365][  T599]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   35.536387][  T599]  ? __se_sys_ioctl+0x114/0x1b0
[   35.536400][  T599]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   35.536421][  T599]  __se_sys_ioctl+0x132/0x1b0
[   35.536435][  T599]  __x64_sys_ioctl+0x7f/0xa0
[   35.536447][  T599]  x64_sys_call+0x1878/0x2ee0
[   35.536468][  T599]  do_syscall_64+0x58/0xf0
[   35.536485][  T599]  ? clear_bhb_loop+0x50/0xa0
[   35.536507][  T599]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   35.536528][  T599] RIP: 0033:0x7f54b3d8e9a9
[   35.536541][  T599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.536554][  T599] RSP: 002b:00007f54b4c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   35.536573][  T599] RAX: ffffffffffffffda RBX: 00007f54b3fb5fa0 RCX: 00007f54b3d8e9a9
[   35.536585][  T599] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   35.536595][  T599] RBP: 00007f54b4c6b090 R08: 0000000000000000 R09: 0000000000000000
[   35.536605][  T599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.536614][  T599] R13: 0000000000000000 R14: 00007f54b3fb5fa0 R15: 00007ffcfb8d8078
[   35.536627][  T599]  </TASK>
[   35.536682][  T599] rust_binder: Write failure EFAULT in pid:29
[   36.047165][  T610] random: crng reseeded on system resumption
[   36.223465][   T36] kauditd_printk_skb: 32 callbacks suppressed
[   36.223483][   T36] audit: type=1400 audit(1753790802.270:229): avc:  denied  { ioctl } for  pid=622 comm="syz.0.82" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.402858][   T36] audit: type=1326 audit(1753790802.450:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=619 comm="syz.3.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f068378e9a9 code=0x0
[   36.545343][  T532] usb 2-1: USB disconnect, device number 6
[   36.548430][   T36] audit: type=1400 audit(1753790802.590:231): avc:  denied  { append } for  pid=633 comm="syz.1.84" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   36.799220][  T636] kvm: kvm [635]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x5
[   36.874666][  T638] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[   37.051082][  T646] netlink: 228 bytes leftover after parsing attributes in process `syz.2.88'.
[   37.079112][   T36] audit: type=1400 audit(1753790803.120:232): avc:  denied  { setopt } for  pid=645 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.113354][   T36] audit: type=1400 audit(1753790803.150:233): avc:  denied  { bind } for  pid=641 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.113914][  T649] FAULT_INJECTION: forcing a failure.
[   37.113914][  T649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   37.138512][   T36] audit: type=1400 audit(1753790803.150:234): avc:  denied  { listen } for  pid=641 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.161713][  T649] CPU: 0 UID: 0 PID: 649 Comm: syz.2.89 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   37.161761][  T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   37.161778][  T649] Call Trace:
[   37.161786][  T649]  <TASK>
[   37.161796][  T649]  __dump_stack+0x21/0x30
[   37.161833][  T649]  dump_stack_lvl+0x10c/0x190
[   37.161863][  T649]  ? __cfi_dump_stack_lvl+0x10/0x10
[   37.161894][  T649]  dump_stack+0x19/0x20
[   37.161922][  T649]  should_fail_ex+0x3d9/0x530
[   37.161956][  T649]  should_fail+0xf/0x20
[   37.161985][  T649]  should_fail_usercopy+0x1e/0x30
[   37.162019][  T649]  _copy_from_user+0x22/0xb0
[   37.162042][  T649]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1a97/0xa290
[   37.162097][  T649]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   37.162199][  T649]  ? is_bpf_text_address+0x17b/0x1a0
[   37.162222][  T649]  ? kernel_text_address+0xa9/0xe0
[   37.162256][  T649]  ? is_bpf_text_address+0x17b/0x1a0
[   37.162280][  T649]  ? kernel_text_address+0xa9/0xe0
[   37.162328][  T649]  ? __kernel_text_address+0x11/0x40
[   37.162355][  T649]  ? unwind_get_return_address+0x51/0x90
[   37.162380][  T649]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   37.162414][  T649]  ? arch_stack_walk+0x10b/0x170
[   37.162456][  T649]  ? is_bpf_text_address+0x17b/0x1a0
[   37.162478][  T649]  ? kernel_text_address+0xa9/0xe0
[   37.162505][  T649]  ? __kernel_text_address+0x11/0x40
[   37.162532][  T649]  ? unwind_get_return_address+0x51/0x90
[   37.162566][  T649]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   37.162598][  T649]  ? arch_stack_walk+0x10b/0x170
[   37.162637][  T649]  ? __kasan_check_write+0x18/0x20
[   37.162670][  T649]  ? _raw_spin_lock+0x8c/0x120
[   37.162699][  T649]  ? __cfi__raw_spin_lock+0x10/0x10
[   37.162727][  T649]  ? stack_depot_save_flags+0x38/0x800
[   37.162762][  T649]  ? _raw_spin_unlock+0x45/0x60
[   37.162790][  T649]  ? rust_helper_spin_unlock+0x19/0x30
[   37.162820][  T649]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   37.162868][  T649]  ? __kasan_slab_alloc+0x73/0x90
[   37.162907][  T649]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   37.162941][  T649]  ? proc_tid_base_lookup+0x2f/0x40
[   37.162972][  T649]  ? do_filp_open+0x1c6/0x3e0
[   37.162997][  T649]  ? do_sys_openat2+0x12c/0x1c0
[   37.163024][  T649]  ? __x64_sys_openat+0x13a/0x170
[   37.163051][  T649]  ? x64_sys_call+0xe69/0x2ee0
[   37.163083][  T649]  ? do_syscall_64+0x58/0xf0
[   37.163113][  T649]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.163149][  T649]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   37.163196][  T649]  ? avc_has_perm_noaudit+0x268/0x360
[   37.163226][  T649]  ? __asan_memcpy+0x5a/0x80
[   37.163262][  T649]  ? avc_has_perm_noaudit+0x286/0x360
[   37.163292][  T649]  ? avc_has_perm+0x144/0x220
[   37.163324][  T649]  ? selinux_file_open+0x457/0x610
[   37.163349][  T649]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   37.163397][  T649]  ? avc_has_extended_perms+0x7c7/0xdd0
[   37.163426][  T649]  ? __asan_memcpy+0x5a/0x80
[   37.163457][  T649]  ? avc_has_extended_perms+0x921/0xdd0
[   37.163486][  T649]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   37.163533][  T649]  ? do_vfs_ioctl+0xeda/0x1e30
[   37.163561][  T649]  ? arch_stack_walk+0x10b/0x170
[   37.163595][  T649]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   37.163621][  T649]  ? _parse_integer+0x2e/0x40
[   37.163653][  T649]  ? ioctl_has_perm+0x384/0x4d0
[   37.163678][  T649]  ? has_cap_mac_admin+0xd0/0xd0
[   37.163703][  T649]  ? proc_fail_nth_write+0x17e/0x210
[   37.163730][  T649]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   37.163759][  T649]  ? selinux_file_ioctl+0x6e0/0x1360
[   37.163782][  T649]  ? vfs_write+0x8ba/0xe80
[   37.163812][  T649]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   37.163837][  T649]  ? __cfi_vfs_write+0x10/0x10
[   37.163869][  T649]  ? __kasan_check_write+0x18/0x20
[   37.163900][  T649]  ? mutex_unlock+0x8b/0x240
[   37.163934][  T649]  ? __cfi_mutex_unlock+0x10/0x10
[   37.163969][  T649]  ? __fget_files+0x2c5/0x340
[   37.164007][  T649]  ? __fget_files+0x2c5/0x340
[   37.164044][  T649]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   37.164078][  T649]  ? __se_sys_ioctl+0x114/0x1b0
[   37.164100][  T649]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   37.164134][  T649]  __se_sys_ioctl+0x132/0x1b0
[   37.164158][  T649]  __x64_sys_ioctl+0x7f/0xa0
[   37.164179][  T649]  x64_sys_call+0x1878/0x2ee0
[   37.164213][  T649]  do_syscall_64+0x58/0xf0
[   37.164241][  T649]  ? clear_bhb_loop+0x50/0xa0
[   37.164279][  T649]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.164316][  T649] RIP: 0033:0x7f3c7538e9a9
[   37.164336][  T649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.164358][  T649] RSP: 002b:00007f3c761ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   37.164385][  T649] RAX: ffffffffffffffda RBX: 00007f3c755b5fa0 RCX: 00007f3c7538e9a9
[   37.164404][  T649] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   37.164420][  T649] RBP: 00007f3c761ae090 R08: 0000000000000000 R09: 0000000000000000
[   37.164436][  T649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.164452][  T649] R13: 0000000000000000 R14: 00007f3c755b5fa0 R15: 00007ffd8af4e168
[   37.164472][  T649]  </TASK>
[   37.164628][  T649] rust_binder: Write failure EFAULT in pid:113
[   37.731695][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.738879][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.757747][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.764480][  T652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.765525][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.772052][  T652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115
[   37.780691][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.796763][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.807978][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.814876][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.821578][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.832748][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.840073][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.846852][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.853950][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.860696][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.865196][   T36] audit: type=1400 audit(1753790803.900:235): avc:  denied  { create } for  pid=656 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.867678][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.884059][   T36] audit: type=1400 audit(1753790803.900:236): avc:  denied  { setopt } for  pid=656 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   37.893750][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.915870][   T36] audit: type=1400 audit(1753790803.920:237): avc:  denied  { setopt } for  pid=658 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   37.919970][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.945444][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.952007][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.958812][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.958836][  T659] netlink: 68 bytes leftover after parsing attributes in process `syz.0.93'.
[   37.965497][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.980607][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.988115][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.994800][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.001350][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.008158][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.014909][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.027429][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.034276][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.040854][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.052621][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.060177][  T651] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.072748][  T663] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.109926][   T36] audit: type=1400 audit(1753790804.140:238): avc:  denied  { wake_alarm } for  pid=667 comm="syz.1.96" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   38.152353][  T678] FAULT_INJECTION: forcing a failure.
[   38.152353][  T678] name failslab, interval 1, probability 0, space 0, times 1
[   38.153874][  T679] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   38.173372][  T679] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   38.190625][  T678] CPU: 1 UID: 0 PID: 678 Comm: syz.0.98 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   38.190660][  T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   38.190673][  T678] Call Trace:
[   38.190680][  T678]  <TASK>
[   38.190689][  T678]  __dump_stack+0x21/0x30
[   38.190723][  T678]  dump_stack_lvl+0x10c/0x190
[   38.190750][  T678]  ? __cfi_dump_stack_lvl+0x10/0x10
[   38.190779][  T678]  dump_stack+0x19/0x20
[   38.190803][  T678]  should_fail_ex+0x3d9/0x530
[   38.190832][  T678]  should_failslab+0xac/0x100
[   38.190867][  T678]  __kmalloc_node_track_caller_noprof+0x68/0x440
[   38.190898][  T678]  ? rust_helper_krealloc+0x33/0xd0
[   38.190927][  T678]  krealloc_noprof+0x8d/0x130
[   38.190959][  T678]  rust_helper_krealloc+0x33/0xd0
[   38.190984][  T678]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100
[   38.191022][  T678]  _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100
[   38.191061][  T678]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1b2d/0xa290
[   38.191108][  T678]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   38.191202][  T678]  ? is_bpf_text_address+0x17b/0x1a0
[   38.191226][  T678]  ? kernel_text_address+0xa9/0xe0
[   38.191256][  T678]  ? is_bpf_text_address+0x17b/0x1a0
[   38.191277][  T678]  ? kernel_text_address+0xa9/0xe0
[   38.191302][  T678]  ? __kernel_text_address+0x11/0x40
[   38.191325][  T678]  ? unwind_get_return_address+0x51/0x90
[   38.191348][  T678]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   38.191377][  T678]  ? arch_stack_walk+0x10b/0x170
[   38.191412][  T678]  ? is_bpf_text_address+0x17b/0x1a0
[   38.191443][  T678]  ? kernel_text_address+0xa9/0xe0
[   38.191467][  T678]  ? __kernel_text_address+0x11/0x40
[   38.191491][  T678]  ? unwind_get_return_address+0x51/0x90
[   38.191515][  T678]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   38.191550][  T678]  ? arch_stack_walk+0x10b/0x170
[   38.191582][  T678]  ? __kasan_check_write+0x18/0x20
[   38.191610][  T678]  ? _raw_spin_lock+0x8c/0x120
[   38.191635][  T678]  ? __cfi__raw_spin_lock+0x10/0x10
[   38.191660][  T678]  ? stack_depot_save_flags+0x38/0x800
[   38.191690][  T678]  ? _raw_spin_unlock+0x45/0x60
[   38.191716][  T678]  ? rust_helper_spin_unlock+0x19/0x30
[   38.191742][  T678]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   38.191786][  T678]  ? __kasan_slab_alloc+0x73/0x90
[   38.191818][  T678]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   38.191846][  T678]  ? proc_tid_base_lookup+0x2f/0x40
[   38.191871][  T678]  ? do_filp_open+0x1c6/0x3e0
[   38.191893][  T678]  ? do_sys_openat2+0x12c/0x1c0
[   38.191917][  T678]  ? __x64_sys_openat+0x13a/0x170
[   38.191941][  T678]  ? x64_sys_call+0xe69/0x2ee0
[   38.191971][  T678]  ? do_syscall_64+0x58/0xf0
[   38.191996][  T678]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   38.192030][  T678]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   38.192072][  T678]  ? avc_has_perm_noaudit+0x268/0x360
[   38.192097][  T678]  ? __asan_memcpy+0x5a/0x80
[   38.192124][  T678]  ? avc_has_perm_noaudit+0x286/0x360
[   38.192150][  T678]  ? avc_has_perm+0x144/0x220
[   38.192176][  T678]  ? selinux_file_open+0x457/0x610
[   38.192198][  T678]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   38.192239][  T678]  ? avc_has_extended_perms+0x7c7/0xdd0
[   38.192264][  T678]  ? __asan_memcpy+0x5a/0x80
[   38.192286][  T678]  ? avc_has_extended_perms+0x921/0xdd0
[   38.192307][  T678]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   38.192341][  T678]  ? do_vfs_ioctl+0xeda/0x1e30
[   38.192357][  T678]  ? arch_stack_walk+0x10b/0x170
[   38.192382][  T678]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   38.192400][  T678]  ? _parse_integer+0x2e/0x40
[   38.192435][  T678]  ? ioctl_has_perm+0x384/0x4d0
[   38.192452][  T678]  ? has_cap_mac_admin+0xd0/0xd0
[   38.192470][  T678]  ? proc_fail_nth_write+0x17e/0x210
[   38.192490][  T678]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   38.192511][  T678]  ? selinux_file_ioctl+0x6e0/0x1360
[   38.192527][  T678]  ? vfs_write+0x8ba/0xe80
[   38.192551][  T678]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   38.192568][  T678]  ? __cfi_vfs_write+0x10/0x10
[   38.192592][  T678]  ? __kasan_check_write+0x18/0x20
[   38.192614][  T678]  ? mutex_unlock+0x8b/0x240
[   38.192639][  T678]  ? __cfi_mutex_unlock+0x10/0x10
[   38.192665][  T678]  ? __fget_files+0x2c5/0x340
[   38.192697][  T678]  ? __fget_files+0x2c5/0x340
[   38.192725][  T678]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   38.192750][  T678]  ? __se_sys_ioctl+0x114/0x1b0
[   38.192766][  T678]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   38.192790][  T678]  __se_sys_ioctl+0x132/0x1b0
[   38.192806][  T678]  __x64_sys_ioctl+0x7f/0xa0
[   38.192821][  T678]  x64_sys_call+0x1878/0x2ee0
[   38.192846][  T678]  do_syscall_64+0x58/0xf0
[   38.192866][  T678]  ? clear_bhb_loop+0x50/0xa0
[   38.192892][  T678]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   38.192916][  T678] RIP: 0033:0x7f54b3d8e9a9
[   38.192931][  T678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.192946][  T678] RSP: 002b:00007f54b4c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   38.192965][  T678] RAX: ffffffffffffffda RBX: 00007f54b3fb5fa0 RCX: 00007f54b3d8e9a9
[   38.192979][  T678] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   38.192991][  T678] RBP: 00007f54b4c6b090 R08: 0000000000000000 R09: 0000000000000000
[   38.193003][  T678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.193013][  T678] R13: 0000000000000000 R14: 00007f54b3fb5fa0 R15: 00007ffcfb8d8078
[   38.193028][  T678]  </TASK>
[   38.198372][  T679] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   38.207499][  T681] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   38.224203][  T679] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   38.242186][  T678] rust_binder: Write failure ENOMEM in pid:44
[   38.344429][  T688] bpf: Bad value for 'uid'
[   38.397527][  T692] binder: Bad value for 'stats'
[   38.451423][  T688] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   38.798512][  T688] rust_binder: Read failure Err(EFAULT) in pid:98
[   38.852743][  T532] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   38.874131][  T699] rust_binder: 122: no such ref 0
[   38.876274][  T698] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   38.884757][  T699] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   38.900293][  T699] rust_binder: Write failure EINVAL in pid:122
[   38.966872][  T706] rust_binder: Error while translating object.
[   38.973189][  T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   38.979454][  T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[   38.992713][  T532] usb 2-1: device descriptor read/64, error -71
[   39.051579][  T712] FAULT_INJECTION: forcing a failure.
[   39.051579][  T712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.064790][  T712] CPU: 0 UID: 0 PID: 712 Comm: syz.2.112 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   39.064827][  T712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   39.064840][  T712] Call Trace:
[   39.064847][  T712]  <TASK>
[   39.064856][  T712]  __dump_stack+0x21/0x30
[   39.064890][  T712]  dump_stack_lvl+0x10c/0x190
[   39.064916][  T712]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.064944][  T712]  ? _raw_spin_unlock+0x45/0x60
[   39.064971][  T712]  dump_stack+0x19/0x20
[   39.064997][  T712]  should_fail_ex+0x3d9/0x530
[   39.065026][  T712]  should_fail+0xf/0x20
[   39.065052][  T712]  should_fail_usercopy+0x1e/0x30
[   39.065083][  T712]  _copy_to_user+0x24/0xa0
[   39.065103][  T712]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x86df/0xa290
[   39.065141][  T712]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread8get_work+0x10/0x10
[   39.065185][  T712]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   39.065256][  T712]  ? kvm_sched_clock_read+0x15/0x30
[   39.065290][  T712]  ? update_cfs_group+0x260/0x260
[   39.065321][  T712]  ? sched_clock+0x44/0x60
[   39.065344][  T712]  ? sched_clock_cpu+0x75/0x400
[   39.065371][  T712]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[   39.065406][  T712]  ? update_curr+0x821/0xaa0
[   39.065436][  T712]  ? cgroup_rstat_updated+0x132/0x7f0
[   39.065465][  T712]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   39.065494][  T712]  ? kvm_sched_clock_read+0x15/0x30
[   39.065527][  T712]  ? update_cfs_group+0x260/0x260
[   39.065557][  T712]  ? sched_clock+0x44/0x60
[   39.065580][  T712]  ? sched_clock_cpu+0x75/0x400
[   39.065617][  T712]  ? is_bpf_text_address+0x17b/0x1a0
[   39.065639][  T712]  ? kernel_text_address+0xa9/0xe0
[   39.065668][  T712]  ? is_bpf_text_address+0x17b/0x1a0
[   39.065689][  T712]  ? kernel_text_address+0xa9/0xe0
[   39.065713][  T712]  ? __kernel_text_address+0x11/0x40
[   39.065737][  T712]  ? unwind_get_return_address+0x51/0x90
[   39.065760][  T712]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   39.065789][  T712]  ? arch_stack_walk+0x10b/0x170
[   39.065831][  T712]  ? is_bpf_text_address+0x17b/0x1a0
[   39.065852][  T712]  ? kernel_text_address+0xa9/0xe0
[   39.065876][  T712]  ? __kernel_text_address+0x11/0x40
[   39.065900][  T712]  ? unwind_get_return_address+0x51/0x90
[   39.065923][  T712]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   39.065952][  T712]  ? arch_stack_walk+0x10b/0x170
[   39.065984][  T712]  ? __kasan_check_write+0x18/0x20
[   39.066011][  T712]  ? _raw_spin_lock+0x8c/0x120
[   39.066036][  T712]  ? __cfi__raw_spin_lock+0x10/0x10
[   39.066061][  T712]  ? stack_depot_save_flags+0x38/0x800
[   39.066092][  T712]  ? _raw_spin_unlock+0x45/0x60
[   39.066117][  T712]  ? rust_helper_spin_unlock+0x19/0x30
[   39.066144][  T712]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   39.066186][  T712]  ? __kasan_slab_alloc+0x73/0x90
[   39.066218][  T712]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   39.066248][  T712]  ? proc_tid_base_lookup+0x2f/0x40
[   39.066274][  T712]  ? do_filp_open+0x1c6/0x3e0
[   39.066296][  T712]  ? do_sys_openat2+0x12c/0x1c0
[   39.066320][  T712]  ? __x64_sys_openat+0x13a/0x170
[   39.066344][  T712]  ? x64_sys_call+0xe69/0x2ee0
[   39.066373][  T712]  ? do_syscall_64+0x58/0xf0
[   39.066404][  T712]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.066436][  T712]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   39.066477][  T712]  ? avc_has_perm_noaudit+0x268/0x360
[   39.066503][  T712]  ? __asan_memcpy+0x5a/0x80
[   39.066531][  T712]  ? avc_has_perm_noaudit+0x286/0x360
[   39.066558][  T712]  ? avc_has_perm+0x144/0x220
[   39.066586][  T712]  ? selinux_file_open+0x457/0x610
[   39.066609][  T712]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   39.066651][  T712]  ? avc_has_extended_perms+0x7c7/0xdd0
[   39.066675][  T712]  ? __asan_memcpy+0x5a/0x80
[   39.066701][  T712]  ? avc_has_extended_perms+0x921/0xdd0
[   39.066725][  T712]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   39.066766][  T712]  ? do_vfs_ioctl+0xeda/0x1e30
[   39.066786][  T712]  ? arch_stack_walk+0x10b/0x170
[   39.066815][  T712]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   39.066838][  T712]  ? _parse_integer+0x2e/0x40
[   39.066874][  T712]  ? ioctl_has_perm+0x384/0x4d0
[   39.066895][  T712]  ? has_cap_mac_admin+0xd0/0xd0
[   39.066917][  T712]  ? proc_fail_nth_write+0x17e/0x210
[   39.066941][  T712]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   39.066967][  T712]  ? selinux_file_ioctl+0x6e0/0x1360
[   39.066987][  T712]  ? vfs_write+0x8ba/0xe80
[   39.067016][  T712]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   39.067038][  T712]  ? __cfi_vfs_write+0x10/0x10
[   39.067067][  T712]  ? __kasan_check_write+0x18/0x20
[   39.067093][  T712]  ? mutex_unlock+0x8b/0x240
[   39.067124][  T712]  ? __cfi_mutex_unlock+0x10/0x10
[   39.067153][  T712]  ? __fget_files+0x2c5/0x340
[   39.067188][  T712]  ? __fget_files+0x2c5/0x340
[   39.067221][  T712]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   39.067251][  T712]  ? __se_sys_ioctl+0x114/0x1b0
[   39.067271][  T712]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   39.067301][  T712]  __se_sys_ioctl+0x132/0x1b0
[   39.067322][  T712]  __x64_sys_ioctl+0x7f/0xa0
[   39.067341][  T712]  x64_sys_call+0x1878/0x2ee0
[   39.067371][  T712]  do_syscall_64+0x58/0xf0
[   39.067429][  T712]  ? clear_bhb_loop+0x50/0xa0
[   39.067461][  T712]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.067492][  T712] RIP: 0033:0x7f3c7538e9a9
[   39.067510][  T712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.067529][  T712] RSP: 002b:00007f3c761ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   39.067553][  T712] RAX: ffffffffffffffda RBX: 00007f3c755b5fa0 RCX: 00007f3c7538e9a9
[   39.067569][  T712] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   39.067584][  T712] RBP: 00007f3c761ae090 R08: 0000000000000000 R09: 0000000000000000
[   39.067598][  T712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.067611][  T712] R13: 0000000000000000 R14: 00007f3c755b5fa0 R15: 00007ffd8af4e168
[   39.067629][  T712]  </TASK>
[   39.067689][  T712] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   39.159508][  T713] rust_binder: Error in use_page_slow: ESRCH
[   39.169099][  T712] rust_binder: Read failure Err(EFAULT) in pid:126
[   39.190161][  T713] rust_binder: use_range failure ESRCH
[   39.227919][  T714] rust_binder: Write failure EINVAL in pid:111
[   39.237652][  T713] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[   39.262422][  T716] input: syz1 as /devices/virtual/input/input6
[   39.273024][  T713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   39.342750][  T532] usb 2-1: device descriptor read/64, error -71
[   39.348961][  T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:111
[   39.602756][  T532] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   39.892726][  T532] usb 2-1: device descriptor read/64, error -71
[   39.904672][  T723] binder: Unknown parameter '00000000000000000000'
[   39.922471][  T724] binder: Unknown parameter '00000000000000000000'
[   40.152912][  T532] usb 2-1: device descriptor read/64, error -71
[   40.212843][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   40.266218][  T532] usb usb2-port1: attempt power cycle
[   40.362797][   T10] usb 4-1: Using ep0 maxpacket: 16
[   40.369117][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.379380][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[   40.393717][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.402824][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   40.410828][   T10] usb 4-1: SerialNumber: syz
[   40.418054][   T10] usb 4-1: bad CDC descriptors
[   40.602807][  T532] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   40.618659][  T433] usb 4-1: USB disconnect, device number 4
[   40.625776][  T532] usb 2-1: device descriptor read/8, error -71
[   40.712754][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   40.763891][  T532] usb 2-1: device descriptor read/8, error -71
[   40.862738][   T10] usb 3-1: Using ep0 maxpacket: 8
[   40.869040][   T10] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023
[   40.879429][   T10] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 32
[   40.889693][   T10] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   40.902649][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[   40.910748][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.919904][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.928042][   T10] usb 3-1: Product: syz
[   40.932215][   T10] usb 3-1: Manufacturer: syz
[   40.936927][   T10] usb 3-1: SerialNumber: syz
[   40.942805][  T729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   40.950125][  T729] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   41.012827][  T532] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   41.033687][  T532] usb 2-1: device descriptor read/8, error -71
[   41.160448][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[   41.169796][  T532] usb 2-1: device descriptor read/8, error -71
[   41.176821][   T10] usb 3-1: USB disconnect, device number 7
[   41.269723][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   41.269742][   T36] audit: type=1400 audit(1753790807.310:249): avc:  denied  { ioctl } for  pid=733 comm="syz.1.120" path="socket:[6437]" dev="sockfs" ino=6437 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.274419][  T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.308960][  T532] usb usb2-port1: unable to enumerate USB device
[   41.314937][  T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.382741][   T62] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   41.533897][   T62] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.544258][   T62] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.554072][   T62] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.563179][   T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.571235][   T62] usb 4-1: SerialNumber: syz
[   41.612719][  T532] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   41.686338][  T738] FAULT_INJECTION: forcing a failure.
[   41.686338][  T738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.699553][  T738] CPU: 1 UID: 0 PID: 738 Comm: syz.2.121 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   41.699588][  T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   41.699602][  T738] Call Trace:
[   41.699609][  T738]  <TASK>
[   41.699618][  T738]  __dump_stack+0x21/0x30
[   41.699650][  T738]  dump_stack_lvl+0x10c/0x190
[   41.699676][  T738]  ? __cfi_dump_stack_lvl+0x10/0x10
[   41.699701][  T738]  ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread8get_work+0xa7d/0x1c90
[   41.699730][  T738]  dump_stack+0x19/0x20
[   41.699747][  T738]  should_fail_ex+0x3d9/0x530
[   41.699767][  T738]  should_fail+0xf/0x20
[   41.699789][  T738]  should_fail_usercopy+0x1e/0x30
[   41.699820][  T738]  _copy_to_user+0x24/0xa0
[   41.699838][  T738]  _RNvXs5_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_9NodeDeathNtB7_13DeliverToRead7do_work+0xacf/0x10e0
[   41.699880][  T738]  ? __cfi__RNvXs5_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_9NodeDeathNtB7_13DeliverToRead7do_work+0x10/0x10
[   41.699909][  T738]  ? _raw_spin_unlock+0x45/0x60
[   41.699928][  T738]  ? __kasan_check_write+0x18/0x20
[   41.699956][  T738]  ? _raw_spin_lock+0x8c/0x120
[   41.699981][  T738]  ? __cfi__raw_spin_lock+0x10/0x10
[   41.700004][  T738]  ? mutex_unlock+0x8b/0x240
[   41.700032][  T738]  ? __kasan_check_read+0x15/0x20
[   41.700051][  T738]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0xeb2/0xa290
[   41.700073][  T738]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread8get_work+0x10/0x10
[   41.700118][  T738]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   41.700204][  T738]  ? is_bpf_text_address+0x17b/0x1a0
[   41.700220][  T738]  ? kernel_text_address+0xa9/0xe0
[   41.700251][  T738]  ? is_bpf_text_address+0x17b/0x1a0
[   41.700271][  T738]  ? kernel_text_address+0xa9/0xe0
[   41.700293][  T738]  ? __kernel_text_address+0x11/0x40
[   41.700317][  T738]  ? unwind_get_return_address+0x51/0x90
[   41.700333][  T738]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   41.700354][  T738]  ? arch_stack_walk+0x10b/0x170
[   41.700385][  T738]  ? is_bpf_text_address+0x17b/0x1a0
[   41.700406][  T738]  ? kernel_text_address+0xa9/0xe0
[   41.700429][  T738]  ? __kernel_text_address+0x11/0x40
[   41.700451][  T738]  ? unwind_get_return_address+0x51/0x90
[   41.700471][  T738]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   41.700491][  T738]  ? arch_stack_walk+0x10b/0x170
[   41.700519][  T738]  ? __kasan_check_write+0x18/0x20
[   41.700546][  T738]  ? _raw_spin_lock+0x8c/0x120
[   41.700571][  T738]  ? __cfi__raw_spin_lock+0x10/0x10
[   41.700594][  T738]  ? stack_depot_save_flags+0x38/0x800
[   41.700625][  T738]  ? _raw_spin_unlock+0x45/0x60
[   41.700643][  T738]  ? rust_helper_spin_unlock+0x19/0x30
[   41.700664][  T738]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   41.700709][  T738]  ? __kasan_slab_alloc+0x73/0x90
[   41.700739][  T738]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   41.700764][  T738]  ? proc_tid_base_lookup+0x2f/0x40
[   41.700782][  T738]  ? do_filp_open+0x1c6/0x3e0
[   41.700798][  T738]  ? do_sys_openat2+0x12c/0x1c0
[   41.700820][  T738]  ? __x64_sys_openat+0x13a/0x170
[   41.700845][  T738]  ? x64_sys_call+0xe69/0x2ee0
[   41.700873][  T738]  ? do_syscall_64+0x58/0xf0
[   41.700897][  T738]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.700921][  T738]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   41.700950][  T738]  ? avc_has_perm_noaudit+0x268/0x360
[   41.700978][  T738]  ? __asan_memcpy+0x5a/0x80
[   41.701005][  T738]  ? avc_has_perm_noaudit+0x286/0x360
[   41.701030][  T738]  ? avc_has_perm+0x144/0x220
[   41.701055][  T738]  ? selinux_file_open+0x457/0x610
[   41.701070][  T738]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   41.701104][  T738]  ? avc_has_extended_perms+0x7c7/0xdd0
[   41.701131][  T738]  ? __asan_memcpy+0x5a/0x80
[   41.701163][  T738]  ? avc_has_extended_perms+0x921/0xdd0
[   41.701188][  T738]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   41.701218][  T738]  ? do_vfs_ioctl+0xeda/0x1e30
[   41.701231][  T738]  ? arch_stack_walk+0x10b/0x170
[   41.701257][  T738]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   41.701280][  T738]  ? _parse_integer+0x2e/0x40
[   41.701308][  T738]  ? ioctl_has_perm+0x384/0x4d0
[   41.701328][  T738]  ? has_cap_mac_admin+0xd0/0xd0
[   41.701347][  T738]  ? proc_fail_nth_write+0x17e/0x210
[   41.701364][  T738]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   41.701382][  T738]  ? selinux_file_ioctl+0x6e0/0x1360
[   41.701401][  T738]  ? vfs_write+0x8ba/0xe80
[   41.701430][  T738]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   41.701451][  T738]  ? __cfi_vfs_write+0x10/0x10
[   41.701480][  T738]  ? __kasan_check_write+0x18/0x20
[   41.701499][  T738]  ? mutex_unlock+0x8b/0x240
[   41.701521][  T738]  ? __cfi_mutex_unlock+0x10/0x10
[   41.701543][  T738]  ? __fget_files+0x2c5/0x340
[   41.701580][  T738]  ? __fget_files+0x2c5/0x340
[   41.701614][  T738]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   41.701642][  T738]  ? __se_sys_ioctl+0x114/0x1b0
[   41.701661][  T738]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   41.701683][  T738]  __se_sys_ioctl+0x132/0x1b0
[   41.701697][  T738]  __x64_sys_ioctl+0x7f/0xa0
[   41.701719][  T738]  x64_sys_call+0x1878/0x2ee0
[   41.701748][  T738]  do_syscall_64+0x58/0xf0
[   41.701771][  T738]  ? clear_bhb_loop+0x50/0xa0
[   41.701799][  T738]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.701821][  T738] RIP: 0033:0x7f3c7538e9a9
[   41.701833][  T738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.701847][  T738] RSP: 002b:00007f3c761ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.701873][  T738] RAX: ffffffffffffffda RBX: 00007f3c755b5fa0 RCX: 00007f3c7538e9a9
[   41.701889][  T738] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   41.701903][  T738] RBP: 00007f3c761ae090 R08: 0000000000000000 R09: 0000000000000000
[   41.701916][  T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.701951][  T738] R13: 0000000000000000 R14: 00007f3c755b5fa0 R15: 00007ffd8af4e168
[   41.701965][  T738]  </TASK>
[   41.701977][  T738] rust_binder: Read failure Err(EFAULT) in pid:138
[   41.752732][  T532] usb 2-1: device descriptor read/64, error -71
[   42.322504][   T62] usb 4-1: 0:2 : does not exist
[   42.329627][   T62] usb 4-1: USB disconnect, device number 5
[   42.392495][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.410640][   T13] bridge_slave_1: left allmulticast mode
[   42.416614][   T13] bridge_slave_1: left promiscuous mode
[   42.424223][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.432625][   T13] bridge_slave_0: left allmulticast mode
[   42.438668][   T13] bridge_slave_0: left promiscuous mode
[   42.444552][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.539705][   T36] audit: type=1400 audit(1753790808.580:250): avc:  denied  { mounton } for  pid=743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   42.552766][  T532] usb 2-1: device descriptor read/64, error -71
[   42.572163][   T13] veth1_macvtap: left promiscuous mode
[   42.577843][   T13] veth0_vlan: left promiscuous mode
[   42.644457][  T743] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.651528][  T743] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.658845][  T743] bridge_slave_0: entered allmulticast mode
[   42.665186][  T743] bridge_slave_0: entered promiscuous mode
[   42.671584][  T743] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.678719][  T743] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.687413][  T743] bridge_slave_1: entered allmulticast mode
[   42.693953][  T743] bridge_slave_1: entered promiscuous mode
[   42.749098][  T743] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.756203][  T743] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.763567][  T743] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.770713][  T743] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.795310][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.804768][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.811834][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.819362][  T532] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   42.848352][  T743] veth0_vlan: entered promiscuous mode
[   42.857990][  T755] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.865074][  T743] veth1_macvtap: entered promiscuous mode
[   42.891004][   T36] audit: type=1400 audit(1753790808.930:251): avc:  denied  { mounton } for  pid=743 comm="syz-executor" path="/root/syzkaller.xXHUjq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   42.927916][  T433] rust_binder: 753: removing orphan mapping 0:4120
[   42.982728][  T532] usb 2-1: device descriptor read/64, error -71
[   43.222741][  T532] usb 2-1: device descriptor read/64, error -71
[   43.252763][  T433] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   43.343121][  T532] usb usb2-port1: attempt power cycle
[   43.402714][  T433] usb 5-1: Using ep0 maxpacket: 8
[   43.408825][  T433] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[   43.417121][  T433] usb 5-1: config 0 has no interface number 0
[   43.423375][  T433] usb 5-1: config 0 interface 200 has no altsetting 0
[   43.431689][  T433] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[   43.440839][  T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.448877][  T433] usb 5-1: Product: syz
[   43.453127][  T433] usb 5-1: Manufacturer: syz
[   43.457749][  T433] usb 5-1: SerialNumber: syz
[   43.463315][  T433] usb 5-1: config 0 descriptor??
[   43.545243][  T778] FAULT_INJECTION: forcing a failure.
[   43.545243][  T778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.558746][  T778] CPU: 1 UID: 0 PID: 778 Comm: syz.3.130 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   43.558787][  T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   43.558801][  T778] Call Trace:
[   43.558808][  T778]  <TASK>
[   43.558816][  T778]  __dump_stack+0x21/0x30
[   43.558848][  T778]  dump_stack_lvl+0x10c/0x190
[   43.558866][  T778]  ? __cfi_dump_stack_lvl+0x10/0x10
[   43.558884][  T778]  ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread8get_work+0xa7d/0x1c90
[   43.558906][  T778]  dump_stack+0x19/0x20
[   43.558923][  T778]  should_fail_ex+0x3d9/0x530
[   43.558944][  T778]  should_fail+0xf/0x20
[   43.558968][  T778]  should_fail_usercopy+0x1e/0x30
[   43.558989][  T778]  _copy_to_user+0x24/0xa0
[   43.559003][  T778]  _RNvXs5_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_9NodeDeathNtB7_13DeliverToRead7do_work+0xc88/0x10e0
[   43.559043][  T778]  ? __cfi__RNvXs5_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_9NodeDeathNtB7_13DeliverToRead7do_work+0x10/0x10
[   43.559075][  T778]  ? _raw_spin_unlock+0x45/0x60
[   43.559094][  T778]  ? __kasan_check_write+0x18/0x20
[   43.559115][  T778]  ? _raw_spin_lock+0x8c/0x120
[   43.559132][  T778]  ? __cfi__raw_spin_lock+0x10/0x10
[   43.559149][  T778]  ? mutex_unlock+0x8b/0x240
[   43.559172][  T778]  ? __kasan_check_read+0x15/0x20
[   43.559191][  T778]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0xeb2/0xa290
[   43.559214][  T778]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread8get_work+0x10/0x10
[   43.559246][  T778]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[   43.559308][  T778]  ? cgroup_rstat_updated+0x132/0x7f0
[   43.559329][  T778]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[   43.559349][  T778]  ? __cgroup_account_cputime+0xa5/0xd0
[   43.559373][  T778]  ? is_bpf_text_address+0x17b/0x1a0
[   43.559388][  T778]  ? kernel_text_address+0xa9/0xe0
[   43.559406][  T778]  ? __kernel_text_address+0x11/0x40
[   43.559422][  T778]  ? unwind_get_return_address+0x51/0x90
[   43.559439][  T778]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   43.559461][  T778]  ? arch_stack_walk+0x10b/0x170
[   43.559487][  T778]  ? is_bpf_text_address+0x17b/0x1a0
[   43.559501][  T778]  ? kernel_text_address+0xa9/0xe0
[   43.559518][  T778]  ? __kernel_text_address+0x11/0x40
[   43.559535][  T778]  ? unwind_get_return_address+0x51/0x90
[   43.559550][  T778]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   43.559570][  T778]  ? arch_stack_walk+0x10b/0x170
[   43.559593][  T778]  ? __kasan_check_write+0x18/0x20
[   43.559612][  T778]  ? _raw_spin_lock+0x8c/0x120
[   43.559629][  T778]  ? __cfi__raw_spin_lock+0x10/0x10
[   43.559649][  T778]  ? stack_depot_save_flags+0x38/0x800
[   43.559671][  T778]  ? _raw_spin_unlock+0x45/0x60
[   43.559688][  T778]  ? rust_helper_spin_unlock+0x19/0x30
[   43.559709][  T778]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440
[   43.559739][  T778]  ? __kasan_slab_alloc+0x73/0x90
[   43.559762][  T778]  ? kmem_cache_alloc_noprof+0x131/0x3a0
[   43.559783][  T778]  ? proc_tid_base_lookup+0x2f/0x40
[   43.559802][  T778]  ? do_filp_open+0x1c6/0x3e0
[   43.559817][  T778]  ? do_sys_openat2+0x12c/0x1c0
[   43.559835][  T778]  ? __x64_sys_openat+0x13a/0x170
[   43.559852][  T778]  ? x64_sys_call+0xe69/0x2ee0
[   43.559872][  T778]  ? do_syscall_64+0x58/0xf0
[   43.559890][  T778]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.559913][  T778]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[   43.559943][  T778]  ? avc_has_perm_noaudit+0x268/0x360
[   43.559962][  T778]  ? __asan_memcpy+0x5a/0x80
[   43.559982][  T778]  ? avc_has_perm_noaudit+0x286/0x360
[   43.560001][  T778]  ? avc_has_perm+0x144/0x220
[   43.560021][  T778]  ? selinux_file_open+0x457/0x610
[   43.560043][  T778]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[   43.560074][  T778]  ? avc_has_extended_perms+0x7c7/0xdd0
[   43.560092][  T778]  ? __asan_memcpy+0x5a/0x80
[   43.560111][  T778]  ? avc_has_extended_perms+0x921/0xdd0
[   43.560130][  T778]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[   43.560160][  T778]  ? do_vfs_ioctl+0xeda/0x1e30
[   43.560173][  T778]  ? arch_stack_walk+0x10b/0x170
[   43.560194][  T778]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   43.560210][  T778]  ? _parse_integer+0x2e/0x40
[   43.560231][  T778]  ? ioctl_has_perm+0x384/0x4d0
[   43.560246][  T778]  ? has_cap_mac_admin+0xd0/0xd0
[   43.560261][  T778]  ? proc_fail_nth_write+0x17e/0x210
[   43.560278][  T778]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   43.560296][  T778]  ? selinux_file_ioctl+0x6e0/0x1360
[   43.560311][  T778]  ? vfs_write+0x8ba/0xe80
[   43.560330][  T778]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   43.560346][  T778]  ? __cfi_vfs_write+0x10/0x10
[   43.560366][  T778]  ? __kasan_check_write+0x18/0x20
[   43.560385][  T778]  ? mutex_unlock+0x8b/0x240
[   43.560408][  T778]  ? __cfi_mutex_unlock+0x10/0x10
[   43.560432][  T778]  ? __fget_files+0x2c5/0x340
[   43.560456][  T778]  ? __fget_files+0x2c5/0x340
[   43.560480][  T778]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[   43.560501][  T778]  ? __se_sys_ioctl+0x114/0x1b0
[   43.560515][  T778]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[   43.560536][  T778]  __se_sys_ioctl+0x132/0x1b0
[   43.560550][  T778]  __x64_sys_ioctl+0x7f/0xa0
[   43.560563][  T778]  x64_sys_call+0x1878/0x2ee0
[   43.560583][  T778]  do_syscall_64+0x58/0xf0
[   43.560600][  T778]  ? clear_bhb_loop+0x50/0xa0
[   43.560622][  T778]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.560643][  T778] RIP: 0033:0x7f068378e9a9
[   43.560656][  T778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.560669][  T778] RSP: 002b:00007f0684543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.560686][  T778] RAX: ffffffffffffffda RBX: 00007f06839b5fa0 RCX: 00007f068378e9a9
[   43.560698][  T778] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[   43.560708][  T778] RBP: 00007f0684543090 R08: 0000000000000000 R09: 0000000000000000
[   43.560718][  T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.560728][  T778] R13: 0000000000000000 R14: 00007f06839b5fa0 R15: 00007ffd646de1a8
[   43.560742][  T778]  </TASK>
[   43.560775][  T778] rust_binder: Read failure Err(EFAULT) in pid:142
[   43.702753][  T532] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   44.203790][  T532] usb 2-1: device descriptor read/8, error -71
[   44.298769][   T36] audit: type=1400 audit(1753790810.340:252): avc:  denied  { setopt } for  pid=789 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   44.333274][  T532] usb 2-1: device descriptor read/8, error -71
[   44.782739][  T532] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   44.803166][  T532] usb 2-1: Using ep0 maxpacket: 16
[   44.809504][  T532] usb 2-1: config 1 interface 0 has no altsetting 0
[   44.817746][  T532] usb 2-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40
[   44.826900][  T532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.834964][  T532] usb 2-1: Product: Д
[   44.839081][  T532] usb 2-1: Manufacturer: 䀊
[   44.843730][  T532] usb 2-1: SerialNumber: Ñ‹
[   45.319418][  T532] usbhid 2-1:1.0: can't add hid device: -71
[   45.325475][  T532] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   45.336146][  T532] usb 2-1: USB disconnect, device number 14
[   45.916343][   T36] audit: type=1400 audit(1753790811.960:253): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   45.948423][  T433] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input7
[   45.975306][  T808] capability: warning: `syz.4.139' uses 32-bit capabilities (legacy support in use)
[   45.980111][  T433] usb 5-1: USB disconnect, device number 2
[   45.998523][   T36] audit: type=1400 audit(1753790812.030:254): avc:  denied  { read } for  pid=807 comm="syz.4.139" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   46.023956][   T36] audit: type=1400 audit(1753790812.030:255): avc:  denied  { open } for  pid=807 comm="syz.4.139" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   46.054137][   T36] audit: type=1400 audit(1753790812.040:256): avc:  denied  { getopt } for  pid=809 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.081003][  T813] input: syz0 as /devices/virtual/input/input8
[   46.151343][  T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86
[   46.372729][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.722724][  T532] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   46.872735][  T532] usb 4-1: Using ep0 maxpacket: 8
[   46.878946][  T532] usb 4-1: config 0 has an invalid interface number: 19 but max is 0
[   46.887104][  T532] usb 4-1: config 0 has no interface number 0
[   46.893232][  T532] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   46.905698][  T532] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=33.05
[   46.914815][  T532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.923006][  T532] usb 4-1: Product: syz
[   46.927255][  T532] usb 4-1: Manufacturer: syz
[   46.931952][  T532] usb 4-1: SerialNumber: syz
[   46.939810][  T830] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.939842][  T830] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.943628][  T532] usb 4-1: config 0 descriptor??
[   47.002430][  T840] 9pnet_fd: Insufficient options for proto=fd
[   47.079174][  T845] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.080321][   T36] audit: type=1400 audit(1753790813.120:257): avc:  denied  { create } for  pid=844 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   47.172170][  T828] rust_binder: Error in use_page_slow: ESRCH
[   47.172197][  T828] rust_binder: use_range failure ESRCH
[   47.178597][  T828] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   47.184334][  T828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   47.192363][  T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:161
[   47.202785][  T510] usb 4-1: USB disconnect, device number 6
[   47.272738][  T433] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   47.422743][  T433] usb 2-1: Using ep0 maxpacket: 32
[   47.429927][  T433] usb 2-1: unable to get BOS descriptor or descriptor too short
[   47.438892][  T433] usb 2-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config
[   47.449536][  T433] usb 2-1: too many endpoints for config 1 interface 0 altsetting 4: 66, using maximum allowed: 30
[   47.460582][  T433] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 66
[   47.473956][  T433] usb 2-1: config 1 interface 0 has no altsetting 0
[   47.482183][  T433] usb 2-1: New USB device found, idVendor=0b07, idProduct=17e0, bcdDevice= 0.40
[   47.491640][  T433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.500052][  T433] usb 2-1: Product: syz
[   47.504519][  T433] usb 2-1: Manufacturer: syz
[   47.509207][  T433] usb 2-1: SerialNumber: syz
[   47.721185][  T433] usb 2-1: USB disconnect, device number 15
[   47.797413][  T851] __vm_enough_memory: pid: 851, comm: syz.3.155, bytes: 18014402804453376 not enough memory for the allocation
[   47.825331][  T853] rust_binder: Error while translating object.
[   47.825372][  T853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.831613][  T853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[   47.952224][  T857] rust_binder: Write failure EINVAL in pid:171
[   47.985954][   T36] audit: type=1400 audit(1753790814.030:258): avc:  denied  { nlmsg_read } for  pid=859 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   48.007842][  T865] bridge0: port 3(veth1_macvtap) entered blocking state
[   48.012906][   T36] audit: type=1400 audit(1753790814.030:259): avc:  denied  { bind } for  pid=862 comm="syz.3.160" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.019764][  T865] bridge0: port 3(veth1_macvtap) entered disabled state
[   48.040025][   T36] audit: type=1400 audit(1753790814.030:260): avc:  denied  { name_bind } for  pid=862 comm="syz.3.160" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   48.063275][  T865] veth1_macvtap: entered allmulticast mode
[   48.067960][   T36] audit: type=1400 audit(1753790814.030:261): avc:  denied  { node_bind } for  pid=862 comm="syz.3.160" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   48.074708][  T865] veth1_macvtap: left allmulticast mode
[   48.121073][  T869] overlayfs: failed to resolve './file1': -2
[   48.168420][  T879] SELinux: security_context_str_to_sid () failed with errno=-22
[   48.173623][   T36] audit: type=1400 audit(1753790814.210:262): avc:  denied  { mount } for  pid=875 comm="syz.3.163" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   48.197795][   T36] audit: type=1400 audit(1753790814.210:263): avc:  denied  { write } for  pid=875 comm="syz.3.163" name="raw6" dev="proc" ino=4026532603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   48.220583][   T36] audit: type=1400 audit(1753790814.210:264): avc:  denied  { getopt } for  pid=875 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.412767][  T532] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   48.482988][   T10] rust_binder: get_current_thread was called from the wrong process.
[   48.573961][  T532] usb 5-1: config 0 has an invalid interface number: 32 but max is 0
[   48.590426][  T532] usb 5-1: config 0 has no interface number 0
[   48.596683][  T532] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[   48.605842][  T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.614779][  T532] usb 5-1: config 0 descriptor??
[   48.620601][  T532] ftdi_sio 5-1:0.32: FTDI USB Serial Device converter detected
[   48.628715][  T532] ftdi_sio ttyUSB0: unknown device type: 0xc698
[   48.742802][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   48.823689][  T532] usb 5-1: USB disconnect, device number 3
[   48.830056][  T532] ftdi_sio 5-1:0.32: device disconnected
[   48.838993][   T36] audit: type=1400 audit(1753790814.880:265): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   48.872789][   T10] usb 2-1: device descriptor read/64, error -71
[   49.082747][  T433] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   49.112779][   T10] usb 2-1: device descriptor read/64, error -71
[   49.232791][  T433] usb 4-1: Using ep0 maxpacket: 16
[   49.240397][  T433] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[   49.249520][  T433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.257689][  T433] usb 4-1: Product: syz
[   49.261888][  T433] usb 4-1: Manufacturer: syz
[   49.266576][  T433] usb 4-1: SerialNumber: syz
[   49.271859][  T433] usb 4-1: config 0 descriptor??
[   49.277720][  T433] usb-storage 4-1:0.0: USB Mass Storage device detected
[   49.285683][  T433] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[   49.293133][  T433] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.38-syzkaller-g616c12b4d684)
[   49.293133][  T433]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   49.338824][  T896] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.354033][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   49.482134][  T532] usb 4-1: USB disconnect, device number 7
[   49.492934][   T10] usb 2-1: device descriptor read/64, error -71
[   49.732767][   T10] usb 2-1: device descriptor read/64, error -71
[   49.842849][   T10] usb usb2-port1: attempt power cycle
[   50.125138][  T906] syzkaller0: entered promiscuous mode
[   50.130717][  T906] syzkaller0: entered allmulticast mode
[   50.182995][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   50.191254][   T36] audit: type=1400 audit(1753790816.230:266): avc:  denied  { setopt } for  pid=907 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   50.229440][   T10] usb 2-1: device descriptor read/8, error -71
[   50.237836][  T910] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   50.245153][  T910] rust_binder: Write failure EINVAL in pid:199
[   50.260066][  T912] tipc: Started in network mode
[   50.278173][  T912] tipc: Node identity ac14140f, cluster identity 4711
[   50.285757][  T912] tipc: New replicast peer: 255.255.255.255
[   50.291979][  T912] tipc: Enabled bearer <udp:syz2>, priority 10
[   50.363696][   T10] usb 2-1: device descriptor read/8, error -71
[   50.396608][  T916] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[   50.405285][  T916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[   50.473874][  T918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.473914][  T918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[   50.602732][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   50.634181][   T10] usb 2-1: device descriptor read/8, error -71
[   50.763835][   T10] usb 2-1: device descriptor read/8, error -71
[   50.872950][   T10] usb usb2-port1: unable to enumerate USB device
[   51.277805][  T923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   51.301407][  T925] devpts: called with bogus options
[   51.344819][  T935] SELinux:  Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped).
[   51.373187][  T937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   51.373221][  T937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:52
[   51.394316][  T939] fuse: Unknown parameter 'f'
[   51.402802][  T510] tipc: Node number set to 2886997007
[   51.596683][  T958] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 210)
[   51.596712][  T958] rust_binder: Error while translating object.
[   51.607366][  T958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.614663][  T958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116
[   51.678761][  T963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.191'.
[   51.722454][  T429] rust_binder: 967: removing orphan mapping 0:1048
[   52.062729][  T429] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[   52.213927][  T429] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   52.222788][  T429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.233175][  T429] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   52.250989][  T429] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   52.265444][  T429] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.276720][  T429] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   52.286032][  T429] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   52.294127][  T429] usb 2-1: Product: syz
[   52.298553][  T429] usb 2-1: Manufacturer: syz
[   52.308449][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   52.308467][   T36] audit: type=1400 audit(1753790818.350:277): avc:  denied  { write } for  pid=1027 comm="syz.3.202" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.336787][  T429] cdc_wdm 2-1:1.0: skipping garbage
[   52.338735][   T36] audit: type=1400 audit(1753790818.350:278): avc:  denied  { remove_name } for  pid=1027 comm="syz.3.202" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.342043][  T429] cdc_wdm 2-1:1.0: skipping garbage
[   52.365674][   T36] audit: type=1400 audit(1753790818.350:279): avc:  denied  { unlink } for  pid=1027 comm="syz.3.202" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   52.370825][  T429] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   52.399119][  T429] cdc_wdm 2-1:1.0: Unknown control protocol
[   52.456095][ T1036] binder: Unknown parameter 'fscontext?}'
[   52.530060][   T36] audit: type=1400 audit(1753790818.570:280): avc:  denied  { append } for  pid=996 comm="syz.1.197" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   52.549106][ T1041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.207'.
[   52.554533][  T429] usb 2-1: USB disconnect, device number 20
[   53.145109][   T36] audit: type=1400 audit(1753790819.190:281): avc:  denied  { bind } for  pid=1062 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   53.331671][ T1066] input: syz1 as /devices/virtual/input/input9
[   53.697547][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.706816][ T1084] TCP: out of memory -- consider tuning tcp_mem
[   53.714132][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.721302][ T1078] bridge_slave_0: entered allmulticast mode
[   53.728187][ T1078] bridge_slave_0: entered promiscuous mode
[   53.735295][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.742629][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.750433][ T1078] bridge_slave_1: entered allmulticast mode
[   53.757126][ T1078] bridge_slave_1: entered promiscuous mode
[   53.771394][ T1002] Bluetooth: hci0: Frame reassembly failed (-84)
[   53.849537][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.856669][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.864013][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.871072][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.898830][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.906736][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.917900][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.925011][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.957908][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.965021][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.994966][ T1096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.021610][ T1078] veth0_vlan: entered promiscuous mode
[   54.043369][ T1078] veth1_macvtap: entered promiscuous mode
[   54.181791][   T36] audit: type=1400 audit(1753790820.220:282): avc:  denied  { read write } for  pid=1119 comm="syz.4.224" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   54.182193][ T1120] rust_binder: Write failure EFAULT in pid:99
[   54.216473][   T36] audit: type=1400 audit(1753790820.220:283): avc:  denied  { open } for  pid=1119 comm="syz.4.224" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   54.263219][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.301271][ T1128] overlay: Unknown parameter 'pcr'
[   54.406656][ T1132] overlay: ./file0 is not a directory
[   54.622762][  T409] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   54.762739][  T409] usb 6-1: device descriptor read/64, error -71
[   55.002731][  T409] usb 6-1: device descriptor read/64, error -71
[   55.037035][   T36] audit: type=1400 audit(1753790821.080:284): avc:  denied  { connect } for  pid=1139 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   55.038638][ T1140] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   55.056890][   T36] audit: type=1400 audit(1753790821.080:285): avc:  denied  { append } for  pid=1139 comm="syz.1.231" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   55.065049][ T1140] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   55.096330][ T1140] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   55.104292][ T1140] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   55.126351][ T1145] 9pnet_fd: Insufficient options for proto=fd
[   55.136024][   T36] audit: type=1400 audit(1753790821.180:286): avc:  denied  { create } for  pid=1144 comm="syz.1.232" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   55.242729][  T409] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   55.293503][ T1151] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   55.301036][ T1151] rust_binder: 157: no such ref 0
[   55.372747][  T409] usb 6-1: device descriptor read/64, error -71
[   55.612762][  T409] usb 6-1: device descriptor read/64, error -71
[   55.722898][  T409] usb usb6-port1: attempt power cycle
[   55.812738][  T796] Bluetooth: hci0: command 0x1003 tx timeout
[   55.812747][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   56.062707][  T409] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   56.085588][  T409] usb 6-1: device descriptor read/8, error -71
[   56.164348][ T1157] batadv_slave_1: entered promiscuous mode
[   56.174278][ T1156] batadv_slave_1: left promiscuous mode
[   56.213890][  T409] usb 6-1: device descriptor read/8, error -71
[   56.356559][ T1163] fuse: Unknown parameter ''
[   56.452737][  T409] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   56.465441][ T1175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'.
[   56.474434][ T1175] netlink: 43 bytes leftover after parsing attributes in process `syz.3.246'.
[   56.475507][  T409] usb 6-1: device descriptor read/8, error -71
[   56.483693][ T1175] netlink: 'syz.3.246': attribute type 6 has an invalid length.
[   56.497295][ T1175] netlink: 'syz.3.246': attribute type 5 has an invalid length.
[   56.504990][ T1175] netlink: 43 bytes leftover after parsing attributes in process `syz.3.246'.
[   56.531597][ T1177] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   56.540078][ T1177] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   56.548684][ T1177] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   56.556690][ T1177] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   56.615996][  T409] usb 6-1: device descriptor read/8, error -71
[   56.725020][  T409] usb usb6-port1: unable to enumerate USB device
[   56.737365][ T1198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=1198 comm=syz.3.255
[   57.401383][ T1223] 9pnet_fd: Insufficient options for proto=fd
[   57.443202][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   57.443222][   T36] audit: type=1400 audit(1753790823.490:306): avc:  denied  { create } for  pid=1227 comm="syz.5.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   57.472801][   T36] audit: type=1400 audit(1753790823.490:307): avc:  denied  { write } for  pid=1227 comm="syz.5.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   57.526778][ T1230] 9pnet_fd: Insufficient options for proto=fd
[   57.541390][   T36] audit: type=1400 audit(1753790823.580:308): avc:  denied  { bind } for  pid=1229 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   57.575450][   T36] audit: type=1400 audit(1753790823.620:309): avc:  denied  { connect } for  pid=1233 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   57.575933][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.595166][   T36] audit: type=1400 audit(1753790823.620:310): avc:  denied  { write } for  pid=1233 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   57.646555][   T36] audit: type=1400 audit(1753790823.690:311): avc:  denied  { setattr } for  pid=1237 comm="syz.3.268" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.671374][   T36] audit: type=1400 audit(1753790823.690:312): avc:  denied  { ioctl } for  pid=1237 comm="syz.3.268" path="socket:[9196]" dev="sockfs" ino=9196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   57.712515][ T1246] input: syz0 as /devices/virtual/input/input10
[   57.762782][  T433] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   57.828333][ T1258] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.846939][ T1260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1260 comm=syz.4.274
[   57.866281][ T1260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1260 comm=syz.4.274
[   57.883472][   T36] audit: type=1400 audit(1753790823.930:313): avc:  denied  { read } for  pid=1259 comm="syz.4.274" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   57.914036][  T429] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   57.926357][   T36] audit: type=1400 audit(1753790823.970:314): avc:  denied  { ioctl } for  pid=1259 comm="syz.4.274" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   57.932940][  T433] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   57.977565][  T433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.987894][  T433] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   57.997111][  T433] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   58.008311][  T433] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.016603][ T1270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   58.019779][  T433] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   58.026850][ T1270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   58.036679][  T433] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   58.052504][  T433] usb 6-1: Product: syz
[   58.056736][  T433] usb 6-1: Manufacturer: syz
[   58.063096][  T433] cdc_wdm 6-1:1.0: skipping garbage
[   58.068340][  T433] cdc_wdm 6-1:1.0: skipping garbage
[   58.074267][  T433] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   58.080197][  T433] cdc_wdm 6-1:1.0: Unknown control protocol
[   58.088672][ T1273] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   58.097014][  T429] usb 4-1: Using ep0 maxpacket: 32
[   58.100056][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.102157][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.108510][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.114951][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.115970][  T429] usb 4-1: unable to get BOS descriptor or descriptor too short
[   58.121374][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.128598][  T429] usb 4-1: config 3 has an invalid interface number: 242 but max is 0
[   58.135689][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.144782][  T429] usb 4-1: config 3 has no interface number 0
[   58.149776][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.156149][  T429] usb 4-1: config 3 interface 242 has no altsetting 0
[   58.163169][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.169988][  T429] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[   58.182167][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.190243][  T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.190377][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.196472][  T429] usb 4-1: Product: syz
[   58.205046][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.210880][  T429] usb 4-1: Manufacturer: syz
[   58.215733][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.226038][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.228668][  T429] usb 4-1: SerialNumber: syz
[   58.235088][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.247708][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.256107][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.262391][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.269658][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.277133][ T1279] overlayfs: missing 'lowerdir'
[   58.281057][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.288254][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.294682][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.300912][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.307464][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.314113][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.320617][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.327051][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.335789][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.336250][ T1284] netlink: 'syz.1.282': attribute type 32 has an invalid length.
[   58.342005][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.342028][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.361807][ T1284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'.
[   58.362252][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.377407][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.378598][ T1284] netlink: 'syz.1.282': attribute type 32 has an invalid length.
[   58.383755][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.398103][ T1274] rust_binder: Write failure EFAULT in pid:139
[   58.405300][ T1289] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   58.411641][ T1284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'.
[   58.459201][  T429] ums-karma 4-1:3.242: USB Mass Storage device detected
[   58.522067][  T429] usb 4-1: USB disconnect, device number 8
[   58.579782][   T36] audit: type=1400 audit(1753790824.620:315): avc:  denied  { ioctl } for  pid=1308 comm="syz.1.288" path="socket:[10363]" dev="sockfs" ino=10363 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.648125][ T1314] overlayfs: failed to resolve './file0': -2
[   58.654991][ T1315] overlayfs: failed to resolve './file0': -2
[   58.732487][ T1318] netlink: 37 bytes leftover after parsing attributes in process `syz.1.290'.
[   58.792339][ T1323] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.792855][ T1324] rust_binder: Got transaction with invalid offset.
[   58.806175][ T1324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   58.813336][ T1324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153
[   58.839791][ T1326] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.867348][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.336889][ T1336] usb usb8: usbfs: process 1336 (syz.3.297) did not claim interface 0 before use
[   59.375915][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'.
[   59.394062][ T1338] tipc: Started in network mode
[   59.399009][ T1338] tipc: Node identity 7f000001, cluster identity 4711
[   59.422972][ T1338] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.431662][ T1338] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0038
[   59.453506][ T1338] tipc: Enabled bearer <udp:syz0>, priority 10
[   59.516682][ T1340] batadv_slave_1: entered promiscuous mode
[   60.203880][ T1344] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.208569][ T1337] batadv_slave_1: left promiscuous mode
[   60.220989][ T1345] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.235659][ T1349] netlink: 'syz.3.301': attribute type 4 has an invalid length.
[   60.249981][ T1349] netlink: 'syz.3.301': attribute type 6 has an invalid length.
[   60.258134][ T1349] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.301'.
[   60.279928][ T1353] 9pnet_virtio: no channels available for device 127.0.0.1
[   60.423469][ T1357] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.454171][   T10] usb 6-1: USB disconnect, device number 6
[   60.542747][  T532] tipc: Node number set to 2130706433
[   60.572717][  T429] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[   60.722736][  T429] usb 4-1: Invalid ep0 maxpacket: 16
[   60.813111][ T1368] overlayfs: missing 'lowerdir'
[   60.836214][ T1373] /dev/sr0: Can't lookup blockdev
[   60.853803][  T429] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[   60.948460][ T1405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[   61.032715][  T429] usb 4-1: Invalid ep0 maxpacket: 16
[   61.038222][  T429] usb usb4-port1: attempt power cycle
[   61.382907][  T429] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[   61.403056][  T429] usb 4-1: Invalid ep0 maxpacket: 16
[   61.433496][ T1418] netlink: 'syz.4.326': attribute type 4 has an invalid length.
[   61.441304][ T1418] netlink: 17 bytes leftover after parsing attributes in process `syz.4.326'.
[   61.532791][  T429] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[   61.563074][  T429] usb 4-1: Invalid ep0 maxpacket: 16
[   61.568508][  T429] usb usb4-port1: unable to enumerate USB device
[   62.127326][ T1437] 9pnet_fd: p9_fd_create_unix (1437): problem connecting socket: ./file0: -5
[   62.128398][ T1438] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.149856][ T1440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:192
[   62.156501][ T1440] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.218075][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.233372][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.471856][   T36] kauditd_printk_skb: 213 callbacks suppressed
[   62.471875][   T36] audit: type=1400 audit(1753790828.510:529): avc:  denied  { lock } for  pid=1448 comm="syz.1.338" path="socket:[9772]" dev="sockfs" ino=9772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   62.632756][  T409] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   62.784108][  T409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.795078][  T409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.805222][  T409] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   62.814327][  T409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.823105][  T409] usb 5-1: config 0 descriptor??
[   62.912720][  T433] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   63.001655][   T36] audit: type=1400 audit(1753790829.040:530): avc:  denied  { bind } for  pid=1461 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.062700][  T433] usb 6-1: Using ep0 maxpacket: 32
[   63.069251][  T433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.080384][  T433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.090201][  T433] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   63.099561][  T433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.108559][  T433] usb 6-1: config 0 descriptor??
[   63.115116][  T433] hub 6-1:0.0: USB hub found
[   63.230411][  T409] isku 0003:1E7D:319C.0002: item fetching failed at offset 5/7
[   63.238288][  T409] isku 0003:1E7D:319C.0002: parse failed
[   63.244056][  T409] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -22
[   63.320860][  T433] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[   63.331392][  T433] usbhid 6-1:0.0: can't add hid device: -71
[   63.337455][  T433] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   63.363260][  T433] usb 6-1: USB disconnect, device number 7
[   63.405985][   T36] audit: type=1400 audit(1753790829.450:531): avc:  denied  { mounton } for  pid=1485 comm="syz.3.351" path="/107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[   63.488484][   T36] audit: type=1400 audit(1753790829.530:532): avc:  denied  { ioctl } for  pid=1491 comm="syz.3.352" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   63.534719][  T409] usb 5-1: USB disconnect, device number 4
[   63.639087][   T36] audit: type=1400 audit(1753790829.680:533): avc:  denied  { create } for  pid=1501 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   63.772745][  T433] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   63.922701][  T433] usb 6-1: Using ep0 maxpacket: 16
[   63.928876][  T433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.939993][  T433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.949845][  T433] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   63.958935][  T433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.967919][  T433] usb 6-1: config 0 descriptor??
[   64.100170][ T1506] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.100487][ T1506] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   64.107171][ T1506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   64.115229][ T1506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:199
[   64.126413][ T1506] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.148957][ T1510] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.155922][ T1510] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 73)
[   64.162613][ T1510] rust_binder: Error while translating object.
[   64.173335][ T1510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.179915][ T1510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204
[   64.207026][ T1514] 9pnet_fd: Insufficient options for proto=fd
[   64.263047][   T36] audit: type=1400 audit(1753790830.310:534): avc:  denied  { lock } for  pid=1524 comm="syz.1.363" path="socket:[10990]" dev="sockfs" ino=10990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   64.440151][   T36] audit: type=1400 audit(1753790830.480:535): avc:  denied  { setattr } for  pid=1529 comm="syz.3.364" path="socket:[11000]" dev="sockfs" ino=11000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   64.583889][  T433] usbhid 6-1:0.0: can't add hid device: -71
[   64.592798][  T433] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   64.613746][  T433] usb 6-1: USB disconnect, device number 8
[   64.660024][ T1544] 9pnet_fd: Insufficient options for proto=fd
[   64.765430][ T1554] kvm: user requested TSC rate below hardware speed
[   64.932758][ T1565] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   64.959517][ T1567] rust_binder: Write failure EFAULT in pid:226
[   65.001583][ T1578] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   65.009430][ T1578] rust_binder: Failed to allocate buffer. len:4312, is_oneway:false
[   65.016115][ T1578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   65.024573][ T1578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:231
[   65.043188][  T433] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   65.212771][  T433] usb 6-1: Using ep0 maxpacket: 32
[   65.219031][  T433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.231667][  T433] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   65.241042][  T433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.249126][  T433] usb 6-1: Product: syz
[   65.253384][  T433] usb 6-1: Manufacturer: syz
[   65.257992][  T433] usb 6-1: SerialNumber: syz
[   65.263681][  T433] usb 6-1: config 0 descriptor??
[   65.269420][  T433] cdc_ether 6-1:0.0: skipping garbage
[   65.274872][  T433] usb 6-1: bad CDC descriptors
[   65.279872][  T433] usb 6-1: unsupported MDLM descriptors
[   65.322762][  T532] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   65.362773][  T335] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   65.472803][  T532] usb 5-1: Using ep0 maxpacket: 16
[   65.479301][  T532] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.489535][  T532] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   65.500097][  T532] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   65.509250][  T532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.517404][  T532] usb 5-1: Product: syz
[   65.521657][  T532] usb 5-1: Manufacturer: syz
[   65.523333][ T1606] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   65.526358][  T532] usb 5-1: SerialNumber: syz
[   65.535218][  T335] usb 4-1: Using ep0 maxpacket: 8
[   65.545828][  T335] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   65.554181][  T335] usb 4-1: config 179 has no interface number 0
[   65.560589][  T335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   65.571775][  T335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   65.583134][  T335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   65.595222][  T335] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   65.606896][  T335] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   65.620337][  T335] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   65.629632][  T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.640616][ T1605] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   65.701403][ T1617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'.
[   65.908138][ T1653] 9pnet_fd: Insufficient options for proto=fd
[   65.916348][   T36] audit: type=1400 audit(1753790831.960:536): avc:  denied  { accept } for  pid=1652 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.946523][  T532] usb 5-1: 0:2 : does not exist
[   66.025180][ T1668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1668 comm=syz.1.404
[   66.058751][ T1605] fuse: Bad value for 'fd'
[   66.064575][  T547] usb 4-1: USB disconnect, device number 13
[   66.064700][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   66.079052][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[   66.308507][  T532] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   66.320198][  T532] usb 5-1: USB disconnect, device number 5
[   66.328888][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   66.700531][ T1001] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.707136][ T1697] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.713929][   T36] audit: type=1400 audit(1753790832.760:537): avc:  denied  { map } for  pid=1696 comm="syz.3.413" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[   66.736601][   T36] audit: type=1400 audit(1753790832.760:538): avc:  denied  { execute } for  pid=1696 comm="syz.3.413" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[   66.737231][ T1698] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.762130][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241
[   67.523704][ T1706] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.534231][ T1706] rust_binder: Error while translating object.
[   67.540743][ T1706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   67.547009][ T1706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244
[   67.711563][  T433] usb 6-1: USB disconnect, device number 9
[   67.747207][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   67.747228][   T36] audit: type=1400 audit(1753790833.790:540): avc:  denied  { append } for  pid=1726 comm="syz.5.422" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   67.782523][ T1727] random: crng reseeded on system resumption
[   67.823872][ T1734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.988853][ T1747] rust_binder: 1748 RLIMIT_NICE not set
[   68.032861][ T1753] devpts: called with bogus options
[   68.077054][ T1756] overlayfs: failed to clone upperpath
[   68.262718][  T433] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   68.412702][  T433] usb 6-1: Using ep0 maxpacket: 16
[   68.419241][  T433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   68.430905][  T433] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.444413][  T433] usb 6-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00
[   68.453792][  T433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.466675][  T433] usb 6-1: config 0 descriptor??
[   68.674156][ T1752] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   68.691635][ T1766] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.692018][ T1766] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   68.708766][   T36] audit: type=1400 audit(1753790834.750:541): avc:  denied  { relabelto } for  pid=1765 comm="syz.4.437" name="85" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   68.709362][ T1766] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[   68.735231][   T36] audit: type=1400 audit(1753790834.750:542): avc:  denied  { associate } for  pid=1765 comm="syz.4.437" name="85" dev="tmpfs" ino=489 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[   68.735677][ T1766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   68.770381][ T1766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:271
[   68.779980][  T796] Bluetooth: hci0: command 0x1003 tx timeout
[   68.796907][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   68.810797][   T36] audit: type=1400 audit(1753790834.850:543): avc:  denied  { write } for  pid=743 comm="syz-executor" name="85" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   68.837482][   T36] audit: type=1400 audit(1753790834.850:544): avc:  denied  { remove_name } for  pid=743 comm="syz-executor" name="binderfs" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   68.865103][   T36] audit: type=1400 audit(1753790834.850:545): avc:  denied  { rmdir } for  pid=743 comm="syz-executor" name="85" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   68.895069][ T1772] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.895135][ T1773] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.904966][  T433] wacom 0003:056A:0090.0003: item fetching failed at offset 3/5
[   68.911314][ T1775] bpf: Bad value for 'mode'
[   68.911718][  T433] wacom 0003:056A:0090.0003: parse failed
[   68.931936][  T433] wacom 0003:056A:0090.0003: probe with driver wacom failed with error -22
[   68.982164][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.000420][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.115728][  T510] usb 6-1: USB disconnect, device number 10
[   69.144716][   T36] audit: type=1326 audit(1753790835.190:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1807 comm="syz.1.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd12f8e9a9 code=0x0
[   69.212739][  T433] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   69.246337][   T36] audit: type=1400 audit(1753790835.290:547): avc:  denied  { remount } for  pid=1807 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.372764][  T433] usb 5-1: Using ep0 maxpacket: 8
[   69.379173][  T433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.390143][  T433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.399942][  T433] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[   69.409035][  T433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.417984][  T433] usb 5-1: config 0 descriptor??
[   69.562743][  T335] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   69.624242][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.632963][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.706944][ T1824] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[   69.706983][ T1824] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   69.715055][ T1824] rust_binder: Read failure Err(EFAULT) in pid:100
[   69.724047][  T335] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[   69.739548][  T335] usb 4-1: config 0 has no interface number 0
[   69.746108][  T335] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.757264][  T335] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.767435][  T335] usb 4-1: New USB device found, idVendor=29bd, idProduct=0055, bcdDevice= 0.00
[   69.776552][  T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.786951][  T335] usb 4-1: config 0 descriptor??
[   69.797028][  T335] usbhid 4-1:0.128: can't add hid device: -22
[   69.803311][  T335] usbhid 4-1:0.128: probe with driver usbhid failed with error -22
[   69.843778][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.852746][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x6
[   69.860022][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x5
[   69.867435][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x4
[   69.874767][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.881886][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.889369][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.896867][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.904236][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.911367][  T433] cherry 0003:046A:0027.0004: unknown main item tag 0x0
[   69.918846][  T433] cherry 0003:046A:0027.0004: unknown global tag 0xd
[   69.925951][  T433] cherry 0003:046A:0027.0004: item 0 4 1 13 parsing failed
[   69.934721][  T433] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22
[   70.043603][  T433] usb 5-1: USB disconnect, device number 6
[   70.510043][ T1831] fuse: Unknown parameter 'roothode'
[   70.518581][   T36] audit: type=1400 audit(1753790836.560:548): avc:  denied  { getopt } for  pid=1830 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.582750][ T1833] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   70.632193][   T36] audit: type=1400 audit(1753790836.670:549): avc:  denied  { remount } for  pid=1837 comm="syz.5.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   70.658217][  T335] usb 4-1: USB disconnect, device number 14
[   70.942753][  T510] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   71.035677][ T1854] fuse: Bad value for 'max_read'
[   71.092908][  T510] usb 6-1: Using ep0 maxpacket: 32
[   71.099631][  T510] usb 6-1: unable to get BOS descriptor or descriptor too short
[   71.108524][  T510] usb 6-1: config index 0 descriptor too short (expected 64624, got 116)
[   71.117226][  T510] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   71.127109][  T510] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   71.139147][  T510] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.148262][  T510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.156491][  T510] usb 6-1: Product: syz
[   71.160731][  T510] usb 6-1: Manufacturer: syz
[   71.165394][  T510] usb 6-1: SerialNumber: syz
[   71.182444][ T1864] fuse: Bad value for 'group_id'
[   71.187529][ T1864] fuse: Bad value for 'group_id'
[   71.685413][  T510] cdc_ncm 6-1:1.0: bind() failure
[   71.693768][  T510] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   71.700604][  T510] cdc_ncm 6-1:1.1: bind() failure
[   71.710541][  T510] usb 6-1: USB disconnect, device number 11
[   72.089214][ T1899] 9pnet_fd: Insufficient options for proto=fd
[   72.539898][ T1926] process 'syz.5.490' launched './file1' with NULL argv: empty string added
[   72.551552][ T1926] binder: Bad value for 'max'
[   72.578244][ T1928] rust_binder: Write failure EFAULT in pid:306
[   72.579246][ T1930] rust_binder: Write failure EFAULT in pid:306
[   72.626607][ T1002] bridge_slave_1: left allmulticast mode
[   72.638763][ T1002] bridge_slave_1: left promiscuous mode
[   72.644634][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.652852][ T1002] bridge_slave_0: left allmulticast mode
[   72.658642][ T1002] bridge_slave_0: left promiscuous mode
[   72.664560][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.790667][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.798029][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.805243][ T1934] bridge_slave_0: entered allmulticast mode
[   72.811510][ T1934] bridge_slave_0: entered promiscuous mode
[   72.818123][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.825237][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.832465][ T1934] bridge_slave_1: entered allmulticast mode
[   72.838939][ T1934] bridge_slave_1: entered promiscuous mode
[   72.858067][ T1002] tipc: Disabling bearer <udp:syz2>
[   72.863596][ T1002] tipc: Left network mode
[   72.869529][ T1002] veth1_macvtap: left promiscuous mode
[   72.875167][ T1002] veth0_vlan: left promiscuous mode
[   72.912781][  T532] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   72.960768][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.967916][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.975278][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.982336][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.005375][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.013278][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.023511][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.030619][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.039648][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.046812][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.072742][  T532] usb 5-1: Using ep0 maxpacket: 16
[   73.073946][ T1934] veth0_vlan: entered promiscuous mode
[   73.083883][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.091644][ T1934] veth1_macvtap: entered promiscuous mode
[   73.101165][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.111256][  T532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   73.126094][  T532] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   73.135420][  T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.145774][  T532] usb 5-1: config 0 descriptor??
[   73.154790][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   73.154806][   T36] audit: type=1400 audit(1753790839.200:557): avc:  denied  { mount } for  pid=1934 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   73.295786][ T1947] input: syz0 as /devices/virtual/input/input12
[   73.455336][   T36] audit: type=1400 audit(1753790839.500:558): avc:  denied  { create } for  pid=1956 comm="syz.6.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   73.478527][   T36] audit: type=1400 audit(1753790839.500:559): avc:  denied  { mount } for  pid=1958 comm="syz.5.500" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   73.514094][ T1962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136
[   73.518865][ T1962] overlayfs: failed to resolve './file0': -2
[   73.535307][ T1962] rust_binder: Failed to allocate buffer. len:1104, is_oneway:true
[   73.557538][  T532] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[   73.573106][  T532] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[   73.584381][  T532] ==================================================================
[   73.592753][  T532] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0
[   73.600475][  T532] Read of size 3584 at addr ffff888113abaa21 by task kworker/0:4/532
[   73.608728][  T532] 
[   73.611117][  T532] CPU: 0 UID: 0 PID: 532 Comm: kworker/0:4 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf
[   73.611142][  T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   73.611155][  T532] Workqueue: usb_hub_wq hub_event
[   73.611184][  T532] Call Trace:
[   73.611190][  T532]  <TASK>
[   73.611198][  T532]  __dump_stack+0x21/0x30
[   73.611220][  T532]  dump_stack_lvl+0x10c/0x190
[   73.611239][  T532]  ? __cfi_dump_stack_lvl+0x10/0x10
[   73.611260][  T532]  ? __cfi__printk+0x10/0x10
[   73.611285][  T532]  print_address_description+0x71/0x220
[   73.611302][  T532]  print_report+0x4a/0x70
[   73.611316][  T532]  kasan_report+0x163/0x1a0
[   73.611332][  T532]  ? mon_bin_event+0x12c1/0x23e0
[   73.611355][  T532]  ? mon_bin_event+0x12c1/0x23e0
[   73.611376][  T532]  kasan_check_range+0x299/0x2a0
[   73.611391][  T532]  ? mon_bin_event+0x12c1/0x23e0
[   73.611412][  T532]  __asan_memcpy+0x31/0x80
[   73.611432][  T532]  mon_bin_event+0x12c1/0x23e0
[   73.611455][  T532]  ? mon_bin_complete+0x50/0x50
[   73.611476][  T532]  ? __kmalloc_noprof+0x1b1/0x450
[   73.611497][  T532]  ? __hid_request+0x1e5/0x410
[   73.611520][  T532]  ? hid_connect+0x49a/0x1a20
[   73.611542][  T532]  ? hid_hw_start+0xcb/0x160
[   73.611564][  T532]  ? ms_probe+0x194/0x460
[   73.611583][  T532]  ? __cfi_mon_bin_submit+0x10/0x10
[   73.611604][  T532]  mon_bin_submit+0x2b/0x40
[   73.611625][  T532]  mon_submit+0x1b9/0x230
[   73.611642][  T532]  usb_hcd_submit_urb+0x12d/0x1a20
[   73.611659][  T532]  ? bus_probe_device+0x18b/0x270
[   73.611679][  T532]  ? usb_probe_device+0x1d4/0x380
[   73.611694][  T532]  ? really_probe+0x2d6/0x890
[   73.611709][  T532]  ? __driver_probe_device+0x198/0x280
[   73.611735][  T532]  ? driver_probe_device+0x54/0x3f0
[   73.611749][  T532]  ? __device_attach_driver+0x2f1/0x4b0
[   73.611765][  T532]  usb_submit_urb+0x111b/0x1800
[   73.611802][  T532]  usb_start_wait_urb+0x11b/0x2f0
[   73.611824][  T532]  ? usb_api_blocking_completion+0xd0/0xd0
[   73.611846][  T532]  ? __kasan_kmalloc+0x96/0xb0
[   73.611871][  T532]  ? __kasan_check_write+0x18/0x20
[   73.611891][  T532]  ? usb_alloc_urb+0x9b/0x200
[   73.611910][  T532]  usb_control_msg+0x25a/0x490
[   73.611932][  T532]  usbhid_raw_request+0x457/0x590
[   73.611953][  T532]  __hid_request+0x1e5/0x410
[   73.611975][  T532]  hidinput_connect+0x241b/0x3340
[   73.611995][  T532]  hid_connect+0x49a/0x1a20
[   73.612020][  T532]  ? usbhid_start+0x1a67/0x2530
[   73.612046][  T532]  ? __cfi_hid_connect+0x10/0x10
[   73.612081][  T532]  hid_hw_start+0xcb/0x160
[   73.612113][  T532]  ms_probe+0x194/0x460
[   73.612133][  T532]  hid_device_probe+0x2c4/0x5d0
[   73.612158][  T532]  ? __cfi_hid_device_probe+0x10/0x10
[   73.612183][  T532]  really_probe+0x2d6/0x890
[   73.612198][  T532]  __driver_probe_device+0x198/0x280
[   73.612230][  T532]  driver_probe_device+0x54/0x3f0
[   73.612245][  T532]  ? __device_attach_driver+0x2db/0x4b0
[   73.612260][  T532]  __device_attach_driver+0x2f1/0x4b0
[   73.612275][  T532]  bus_for_each_drv+0x260/0x2f0
[   73.612295][  T532]  ? __cfi___device_attach_driver+0x10/0x10
[   73.612310][  T532]  ? __cfi_bus_for_each_drv+0x10/0x10
[   73.612330][  T532]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   73.612351][  T532]  __device_attach+0x2bd/0x3a0
[   73.612375][  T532]  ? device_attach+0x40/0x40
[   73.612397][  T532]  ? _raw_spin_lock+0x8c/0x120
[   73.612415][  T532]  ? __cfi__raw_spin_lock+0x10/0x10
[   73.612434][  T532]  device_initial_probe+0x1e/0x30
[   73.612458][  T532]  bus_probe_device+0x18b/0x270
[   73.612478][  T532]  device_add+0x80c/0xc00
[   73.612502][  T532]  hid_add_device+0x39b/0x560
[   73.612528][  T532]  usbhid_probe+0xde3/0x12b0
[   73.612549][  T532]  usb_probe_interface+0x696/0xc00
[   73.612565][  T532]  ? __cfi_usb_probe_interface+0x10/0x10
[   73.612580][  T532]  really_probe+0x2d6/0x890
[   73.612595][  T532]  __driver_probe_device+0x198/0x280
[   73.612620][  T532]  driver_probe_device+0x54/0x3f0
[   73.612635][  T532]  ? __device_attach_driver+0x2db/0x4b0
[   73.612657][  T532]  __device_attach_driver+0x2f1/0x4b0
[   73.612673][  T532]  bus_for_each_drv+0x260/0x2f0
[   73.612692][  T532]  ? __cfi___device_attach_driver+0x10/0x10
[   73.612708][  T532]  ? __cfi_bus_for_each_drv+0x10/0x10
[   73.612728][  T532]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   73.612748][  T532]  __device_attach+0x2bd/0x3a0
[   73.612832][  T532]  ? device_attach+0x40/0x40
[   73.612864][  T532]  ? _raw_spin_lock+0x8c/0x120
[   73.612886][  T532]  ? __cfi__raw_spin_lock+0x10/0x10
[   73.612908][  T532]  device_initial_probe+0x1e/0x30
[   73.612937][  T532]  bus_probe_device+0x18b/0x270
[   73.612959][  T532]  device_add+0x80c/0xc00
[   73.612986][  T532]  usb_set_configuration+0x1ad4/0x20b0
[   73.613018][  T532]  usb_generic_driver_probe+0x95/0x160
[   73.613042][  T532]  usb_probe_device+0x1d4/0x380
[   73.613058][  T532]  ? __cfi_usb_probe_device+0x10/0x10
[   73.613074][  T532]  really_probe+0x2d6/0x890
[   73.613091][  T532]  __driver_probe_device+0x198/0x280
[   73.613119][  T532]  driver_probe_device+0x54/0x3f0
[   73.613150][  T532]  ? __device_attach_driver+0x2db/0x4b0
[   73.613181][  T532]  __device_attach_driver+0x2f1/0x4b0
[   73.613209][  T532]  bus_for_each_drv+0x260/0x2f0
[   73.613240][  T532]  ? __cfi___device_attach_driver+0x10/0x10
[   73.613264][  T532]  ? __cfi_bus_for_each_drv+0x10/0x10
[   73.613294][  T532]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   73.613318][  T532]  __device_attach+0x2bd/0x3a0
[   73.613346][  T532]  ? device_attach+0x40/0x40
[   73.613372][  T532]  ? _raw_spin_lock+0x8c/0x120
[   73.613393][  T532]  ? __cfi__raw_spin_lock+0x10/0x10
[   73.613415][  T532]  device_initial_probe+0x1e/0x30
[   73.613442][  T532]  bus_probe_device+0x18b/0x270
[   73.613466][  T532]  device_add+0x80c/0xc00
[   73.613500][  T532]  usb_new_device+0x9ed/0x1590
[   73.613527][  T532]  ? __cfi_usb_new_device+0x10/0x10
[   73.613554][  T532]  hub_event+0x2c81/0x4270
[   73.613596][  T532]  ? __cfi_hub_event+0x10/0x10
[   73.613623][  T532]  ? __kasan_check_write+0x18/0x20
[   73.613646][  T532]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[   73.613672][  T532]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   73.613695][  T532]  ? kick_pool+0xb9/0x550
[   73.613713][  T532]  process_scheduled_works+0x7d2/0x1020
[   73.613747][  T532]  worker_thread+0xc58/0x1250
[   73.613777][  T532]  kthread+0x2ca/0x370
[   73.613793][  T532]  ? __cfi_worker_thread+0x10/0x10
[   73.613818][  T532]  ? __cfi_kthread+0x10/0x10
[   73.613836][  T532]  ret_from_fork+0x67/0xa0
[   73.613861][  T532]  ? __cfi_kthread+0x10/0x10
[   73.613877][  T532]  ret_from_fork_asm+0x1a/0x30
[   73.613904][  T532]  </TASK>
[   73.613911][  T532] 
[   73.757380][ T1932] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.759541][  T532] Allocated by task 532:
[   73.759560][  T532]  kasan_save_track+0x3e/0x80
[   74.256639][  T532]  kasan_save_alloc_info+0x40/0x50
[   74.261848][  T532]  __kasan_kmalloc+0x96/0xb0
[   74.266542][  T532]  __kmalloc_noprof+0x1b1/0x450
[   74.271410][  T532]  __hid_request+0xa9/0x410
[   74.275919][  T532]  hidinput_connect+0x241b/0x3340
[   74.280943][  T532]  hid_connect+0x49a/0x1a20
[   74.285450][  T532]  hid_hw_start+0xcb/0x160
[   74.289881][  T532]  ms_probe+0x194/0x460
[   74.294057][  T532]  hid_device_probe+0x2c4/0x5d0
[   74.298914][  T532]  really_probe+0x2d6/0x890
[   74.303421][  T532]  __driver_probe_device+0x198/0x280
[   74.308711][  T532]  driver_probe_device+0x54/0x3f0
[   74.313905][  T532]  __device_attach_driver+0x2f1/0x4b0
[   74.319276][  T532]  bus_for_each_drv+0x260/0x2f0
[   74.324136][  T532]  __device_attach+0x2bd/0x3a0
[   74.328929][  T532]  device_initial_probe+0x1e/0x30
[   74.333971][  T532]  bus_probe_device+0x18b/0x270
[   74.338852][  T532]  device_add+0x80c/0xc00
[   74.343188][  T532]  hid_add_device+0x39b/0x560
[   74.348052][  T532]  usbhid_probe+0xde3/0x12b0
[   74.352660][  T532]  usb_probe_interface+0x696/0xc00
[   74.357797][  T532]  really_probe+0x2d6/0x890
[   74.362312][  T532]  __driver_probe_device+0x198/0x280
[   74.367698][  T532]  driver_probe_device+0x54/0x3f0
[   74.372728][  T532]  __device_attach_driver+0x2f1/0x4b0
[   74.378119][  T532]  bus_for_each_drv+0x260/0x2f0
[   74.382992][  T532]  __device_attach+0x2bd/0x3a0
[   74.387936][  T532]  device_initial_probe+0x1e/0x30
[   74.392970][  T532]  bus_probe_device+0x18b/0x270
[   74.397827][  T532]  device_add+0x80c/0xc00
[   74.402166][  T532]  usb_set_configuration+0x1ad4/0x20b0
[   74.407979][  T532]  usb_generic_driver_probe+0x95/0x160
[   74.413446][  T532]  usb_probe_device+0x1d4/0x380
[   74.418300][  T532]  really_probe+0x2d6/0x890
[   74.422802][  T532]  __driver_probe_device+0x198/0x280
[   74.428132][  T532]  driver_probe_device+0x54/0x3f0
[   74.433155][  T532]  __device_attach_driver+0x2f1/0x4b0
[   74.438531][  T532]  bus_for_each_drv+0x260/0x2f0
[   74.443409][  T532]  __device_attach+0x2bd/0x3a0
[   74.448197][  T532]  device_initial_probe+0x1e/0x30
[   74.453238][  T532]  bus_probe_device+0x18b/0x270
[   74.458110][  T532]  device_add+0x80c/0xc00
[   74.462910][  T532]  usb_new_device+0x9ed/0x1590
[   74.467854][  T532]  hub_event+0x2c81/0x4270
[   74.472281][  T532]  process_scheduled_works+0x7d2/0x1020
[   74.477845][  T532]  worker_thread+0xc58/0x1250
[   74.482544][  T532]  kthread+0x2ca/0x370
[   74.486707][  T532]  ret_from_fork+0x67/0xa0
[   74.491141][  T532]  ret_from_fork_asm+0x1a/0x30
[   74.495918][  T532] 
[   74.498242][  T532] The buggy address belongs to the object at ffff888113abaa20
[   74.498242][  T532]  which belongs to the cache kmalloc-8 of size 8
[   74.511957][  T532] The buggy address is located 1 bytes inside of
[   74.511957][  T532]  allocated 7-byte region [ffff888113abaa20, ffff888113abaa27)
[   74.525768][  T532] 
[   74.528098][  T532] The buggy address belongs to the physical page:
[   74.534520][  T532] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113aba
[   74.543380][  T532] anon flags: 0x4000000000000000(zone=1)
[   74.549105][  T532] page_type: f5(slab)
[   74.553133][  T532] raw: 4000000000000000 ffff888100041500 0000000000000000 dead000000000001
[   74.561737][  T532] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000
[   74.570317][  T532] page dumped because: kasan: bad access detected
[   74.576836][  T532] page_owner tracks the page as allocated
[   74.582896][  T532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 110, tgid 110 (udevadm), ts 6783540813, free_ts 6783504840
[   74.601387][  T532]  post_alloc_hook+0x3b9/0x3f0
[   74.606163][  T532]  prep_new_page+0x1c/0x120
[   74.610669][  T532]  get_page_from_freelist+0x46bb/0x4750
[   74.616320][  T532]  __alloc_pages_noprof+0x30d/0x6c0
[   74.621608][  T532]  alloc_slab_page+0x6b/0x1f0
[   74.626294][  T532]  allocate_slab+0x69/0x440
[   74.630931][  T532]  ___slab_alloc+0x59a/0x8b0
[   74.635561][  T532]  __kmalloc_noprof+0x243/0x450
[   74.640434][  T532]  kernfs_fop_write_iter+0x16f/0x4d0
[   74.645745][  T532]  vfs_write+0x694/0xe80
[   74.650016][  T532]  ksys_write+0x141/0x250
[   74.654373][  T532]  __x64_sys_write+0x7f/0x90
[   74.659080][  T532]  x64_sys_call+0x271c/0x2ee0
[   74.663777][  T532]  do_syscall_64+0x58/0xf0
[   74.668206][  T532]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   74.674112][  T532] page last free pid 110 tgid 110 stack trace:
[   74.680264][  T532]  free_unref_page+0xae5/0xdd0
[   74.685031][  T532]  __free_pages+0x6b/0x3b0
[   74.689481][  T532]  free_pages+0x86/0x90
[   74.693713][  T532]  selinux_genfs_get_sid+0x209/0x2d0
[   74.699023][  T532]  inode_doinit_with_dentry+0x7f0/0xdd0
[   74.704588][  T532]  selinux_d_instantiate+0x2b/0x40
[   74.709710][  T532]  security_d_instantiate+0xb5/0xf0
[   74.714915][  T532]  d_splice_alias+0x71/0x3a0
[   74.719533][  T532]  kernfs_iop_lookup+0x2c6/0x320
[   74.724469][  T532]  path_openat+0x12fe/0x34b0
[   74.729145][  T532]  do_filp_open+0x1c6/0x3e0
[   74.733907][  T532]  do_sys_openat2+0x12c/0x1c0
[   74.738634][  T532]  __x64_sys_openat+0x13a/0x170
[   74.743515][  T532]  x64_sys_call+0xe69/0x2ee0
[   74.748163][  T532]  do_syscall_64+0x58/0xf0
[   74.752590][  T532]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   74.758493][  T532] 
[   74.760826][  T532] Memory state around the buggy address:
[   74.766545][  T532]  ffff888113aba900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   74.774609][  T532]  ffff888113aba980: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   74.782671][  T532] >ffff888113abaa00: fa fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc
[   74.790727][  T532]                                ^
[   74.795833][  T532]  ffff888113abaa80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   74.803892][  T532]  ffff888113abab00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   74.811953][  T532] ==================================================================
[   74.820006][  T532] Disabling lock debugging due to kernel taint
[   74.843044][   T36] audit: type=1400 audit(1753790840.880:560): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   74.866101][   T36] audit: type=1400 audit(1753790840.880:561): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.877010][  T532] microsoft 0003:045E:07DA.0005: No inputs registered, leaving
[   74.887574][   T36] audit: type=1400 audit(1753790840.880:562): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.897066][  T532] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   74.917627][   T36] audit: type=1400 audit(1753790840.880:563): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.928973][  T532] microsoft 0003:045E:07DA.0005: no inputs found
[   74.956025][  T532] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[   74.967110][   T36] audit: type=1400 audit(1753790840.880:564): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.975994][  T532] usb 5-1: USB disconnect, device number 7
[   74.988497][   T36] audit: type=1400 audit(1753790840.880:565): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.017096][   T36] audit: type=1400 audit(1753790840.880:566): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1