last executing test programs:

4m7.063208886s ago: executing program 3 (id=7446):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x9, 0x2, 0x3, 0x2, 0xff}, 0x8) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = epoll_create(0x9)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})

4m6.502670367s ago: executing program 3 (id=7447):
mmap(&(0x7f000025e000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x6931d000) (async)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000340)={0x0, 0xa6, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="010326bd708efddbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x24008091}, 0x10) (async, rerun: 32)
prctl$PR_GET_SECCOMP(0x15) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 32)
r2 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @remote}}}, 0x108) (async, rerun: 64)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (rerun: 64)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x80, 0x100021) (async, rerun: 64)
mmap$xdp(&(0x7f000013a000/0x1000)=nil, 0x1000, 0x0, 0x80110, r2, 0x180000000) (async, rerun: 64)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) (async)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async, rerun: 32)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) (async, rerun: 32)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async, rerun: 64)
ptrace(0x10, r6) (async, rerun: 64)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 64)
ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async, rerun: 64)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

4m6.439115159s ago: executing program 3 (id=7448):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d1f75dd47d0b90b893a03ffb8"])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000ed1301000040"]) (async)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000ed1301000040"])
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)="ea", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) (async)
splice(r0, 0x0, r5, 0x0, 0x39000, 0x0)
rt_sigaction(0x1, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f00000005c0))
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x52, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xfff, 0x1e, 0x1, {0x22, 0xc9b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xd5, 0xa0}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x40, 0x1, 0x7, 0x40, 0x9}, 0x3a, &(0x7f00000000c0)={0x5, 0xf, 0x3a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dff23871a06e8ca6b1b38c3d81766d6b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x32, 0xc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x8, 0x7, 0x7df}]}, 0x0, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x26, &(0x7f0000000140)=@string={0x26, 0x3, "fdb33a619aab28090d7aa2bb52d4c1d7a057074d4ce437ce361b7f54e3afdfb94be59ab6"}}, {0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "4b1a93c2aa37ba46a1cf8e3ff180ca3268b88a9796ab31367301bfa9717ea21011b7809f294aa7135c9d50c5654dc9b19fd1271d9fd13d7559ee2cd953e39e3921b755190337d02c6f94bc333d1c079cfd35a4fdb72e7bcf2438dd1b877ee8ce0d8a3fd719d560798f7895167618790a43b7e690495b4f686c2c6f45d48a9b32d33b029f627ae295259a39f2d96e2d30846c80ecc4a2d4ca216d1d633068cbf5d5969a1ed152edcdbe61f1073e11e867fb5ea15bd8fa08ed7a246a409c38adb4a7a9a0"}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "be3e919d92dc8e0d2e79b863f45773f67bf37967910ffb3445381331f3caba782a6f0161ebfb80e9a844bd2bc2398dc3b20b22947ad8ad936b6b980cf905e254ee5802d0c591dc8cb90d36341a71d910017a02df5ded7e6f85898a2f9304adae3c56fe902e6579da940b5c83a26c1cd6f7aebfa1d9c9f26e935abfe994cf6054b2d22aee9e4bea4e60ebd058fa9a549535"}}, {0xa4, &(0x7f0000000400)=@string={0xa4, 0x3, "61cce3cd5e7c197092c7aba9806beecf9bbb1a107d18edfc2538fca7821e1b305b8a9e08db9935f06c19a5fadc06d15d3da03001837a7b0d835618a23a510c4d0d8007fdc1f43e226656c6f9f06bad7127d1e506c7fb936a21ca8c79e1d2ee1989df46ed9713fb4787ae9e2db1a7c212a51881a076e159f07fce236d6cd45f88742a6de780018fdf6046c28a09080df4b9d981b1e940dcfb19e39c88cbaace7c5fba"}}]})

4m3.191978323s ago: executing program 3 (id=7478):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) (async)
r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
utime(&(0x7f0000000200)='.\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0xd, 0x17, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x800) (async)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0xd, 0x17, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x800)
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)

4m3.159827463s ago: executing program 3 (id=7479):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x80, 0x0)
readv(r0, &(0x7f0000002400)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000380)=""/119, 0x77}], 0x6)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff"], 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x7)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000002480)=0x8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2, 0x3, 0x0, 0x6}, 0x20)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
close(0x4)
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffee5)
mkdir(&(0x7f0000000040)='./file0\x00', 0x2)

4m3.067522445s ago: executing program 3 (id=7480):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
setreuid(0xee00, 0x0)
setpriority(0x2, 0x0, 0xd2f4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x8)
fchdir(r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r3, 0x1, 0x1)
getdents(r3, 0x0, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424)
inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x4000008)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630f, 0x3}, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0xfffffffc)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
ppoll(&(0x7f00000005c0)=[{r6, 0x42}], 0x1, &(0x7f0000000640), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

4m3.043850315s ago: executing program 32 (id=7480):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
setreuid(0xee00, 0x0)
setpriority(0x2, 0x0, 0xd2f4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x8)
fchdir(r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r3, 0x1, 0x1)
getdents(r3, 0x0, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424)
inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x4000008)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630f, 0x3}, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0xfffffffc)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
ppoll(&(0x7f00000005c0)=[{r6, 0x42}], 0x1, &(0x7f0000000640), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

7.13097638s ago: executing program 4 (id=10526):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffe3b, 0x0}, 0x2}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pipe(0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
r4 = eventfd2(0x4000, 0x801)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x8, 0x1, r4})
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff11"], 0x30}}, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
syz_open_procfs$userns(0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08001d00", @ANYRES32=r2, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRESHEX=r9, @ANYBLOB="774d388b873a6aa4b3e9ab4d16c2c4d8591f2efed6704afb0ca47dda41188b4754980f7044f6f5e8f8a89aed37fd7366d5062187a2ce142b26d45f28c6f6a3d9b912e56b0436cf1a1d7e3b13f3facb20d590dec860a12cd08a189e9c7d29888eb4f5df7bb265e07a2344daff84dbdd0dd61c7bb12223c5b5451489b130360551ae84350d91ce496da00bfff94c5caa6ea4bb25e20b21d444f05d20d9455b1fad94d77193afe34ac08e9fc501f74f5a542bb7652a97a5c3519ba4f945793db04382f5dd16ce98", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010728bd703fe5db1f8f86bfc300fcdbdf2567000000080003898597dac7c5ff6258ef8bfd750799a1be000000", @ANYRES32=0x0, @ANYBLOB="0c00990009000000580000000800c30004000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

6.921461304s ago: executing program 4 (id=10530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x2, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c090}, 0x8010)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x1})
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000200)={0x1, 0x38, [0xb, 0xa9, 0x7], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x30d4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0xeb, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x472}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x50, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x0, 0xf, 0x8, 0xff, 0x8}, 0x1eb, &(0x7f00000002c0)={0x5, 0xf, 0x1eb, 0x6, [@generic={0x2b, 0x10, 0x4, "eeb5a6b2f4bc70100468225d156af7f6750cd213170ba2b8825e4c4852d0c6740953977118317b1a"}, @generic={0xea, 0x10, 0xb, "cecc67a763023433987e83571d85d9133638dbbd9a09974330b44871ad2d942523804a87f3ef6d396376621e9f7c8e1b566b4ca17cc6e93a0573b5762095aabe53177bb71092b06fafcd2f442ab7ccd777afc0609b301ac718267b928ac74260893a70a0926bb3c79cd4820d3858dc135417f0d3d8d1b0bb7f57a22ba8268a27cde58739f41922311844a81b5e52693ed8a0b434c7b925cf578f8360485a00ffe01d9e8b4e48a2a4ecd0a69c60bdd33b4cfe5c564ce5981af88006b9efa25adf80cb11116dccc646fa06d670810acb64accf6cf5e277c063fcabedef8dfc3a6fc69a0cbccaf70f"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xb, 0xc, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x2, 0x200}, @generic={0xa7, 0x10, 0xb, "59e672b5ddb5ecc5c4c5a364d5cb23e84ebcc54131337c6803ca727f50fbcf5cc620a7c0de94a0c8e8370e646c003639a9f40e962dee4338011bf2d1b0f03aad760bfb99bc852ef3c2437ad6b5fdc1c9b961a9d6f5ac808802ff481b08709407898aecbe1c39aecf791a513af2c19e3dffda37a934fcc79ffab2ed6dda6b057d1ba42ff763f618865ccd7057f7124df1a1049a607206ffe1237fa1b54ca565ee8f12b033"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x23f, 0x0, 0x9, [0xc030, 0xc00f, 0xc0, 0xff0000]}]}, 0x7, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa4, &(0x7f0000000500)=@string={0xa4, 0x3, "003e24019e0e4f2c39a71004e7be6b45a648972999500f8c556007a1b88f33337853fa9ef654a52ec485a329f5185c36bb9651e6d896ad111c7b14544b346b71d682842e68da4a77c546b8a7d701c4f5a96d034366eef166bcc3c11366b84ca2e5c01e299e23d8299b154ba0845f0fe5f79c9e38c73c6ed8ca6b9f6ad4a07eb759adb9e043d4b9cf1776e811257e3a7aed6b0c89b7637a6cc270765c51da6b527fd9"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x861}}, {0x42, &(0x7f0000000640)=@string={0x42, 0x3, "4929a7cdcd48432f4286fd2dcdc6aab896cf6ed67d32372e0e856f8a5a752a2a9525445d7b772ddd31ff33a7d8f1a7456e74046d81db0e2cfda4d82bdde5f111"}}, {0x31, &(0x7f00000006c0)=@string={0x31, 0x3, "1b60aefed2f2ac7b7c6dcbb3b6fdef38d5b53c7925f4b5d56286c2d20f78ff87fd49fc3fb936e180ca82cb27109e58"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1801}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x40, 0x10, 0x4f, {0x4f, 0x6, "84c2127f702c92922d749e0c653fff37c18c067a4fcdf2f82b6dadc335d070cc3fc26c6ab34f1cc203ec2f952ee77567064575861a93facc34138385968e0650011065490273bbc3c087868402"}}, &(0x7f0000000840)={0x0, 0x3, 0xab, @string={0xab, 0x3, "6e9f13fe07547c15a6647b7aadab17b1f95c8c9ee7eda14632ab72119ab0b3af5d6ccc3c036f143ba9ae4d366eec7d33ccb118225646eb71862ef21a24ee078530cd0fc6c10663755f081ff64a48333f0374c6651d57c4815d55afd6112dc7d2a28bde1520d97a8188250a058ff3bd5f87ab5649095f59353d1ffa0e71d8f18d9ffb0f81ff5b62ddc7e8656f8071768a4b58542ef19d9ce6317933a171612eb58984a2f789d833627b"}}, &(0x7f0000000900)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "16"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0xcd6}}}}, &(0x7f0000000b00)={0x2c, &(0x7f00000009c0)={0x40, 0x0, 0x9, "500b16fac97cfdf06f"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a80)={0x20, 0x1, 0x1a, "2183477c08bfd4a8ba92e6f56b2a6728b35a14aa79f629c180bd"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x8}})
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000b40)={{r2}, 0x6, 0x4, 0x8})
r4 = dup2(r2, 0xffffffffffffffff)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000f80)={r5, "59dc26ae8569737ae7a74a19d7366c33"})
sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000004)
syz_usb_control_io(r3, &(0x7f00000022c0)={0x2c, &(0x7f0000002080)={0x20, 0xb, 0x94, {0x94, 0x22, "1621d743de4650ffa5b6b6c90b9ef713783caaa559019aa94c00c0f7f0c8990f689f6d48af6c5706c014ed93eac54dda3ece4501986c8c769aed1350388148a584739556ecab59ae8ca704e2abf931a825c14c0d0027bf58660d6ef810d7609d620c8796dca139a1823c097e32351c37f510df384dc9f24c954f51d37f7c0536b0a510b96eccc77b39ad8cbef0908d0bc593"}}, &(0x7f0000002140)={0x0, 0x3, 0x82, @string={0x82, 0x3, "b64adcd6a2716f132757ea5d22fa37e784794ae2cd02eab5cb205c465fd302c9db15f6a2e65e22b355709b742b9df3368d641075adb4e491e830f561bd282fff45c6dba04117b7586e0e3468936877aa938446eaeae60fcedb488ff7fe739eeddf8bbf25f4788f8c5e3e35973d0a31491ba2ca66da0122842cf785a149ba6991"}}, &(0x7f0000002200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x7f, 0x7, "d61d7a05", "f0614dd3"}}, &(0x7f0000002280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2d, 0x10, 0xa, 0x1, 0x2, 0x9f0e, 0x7}}}, &(0x7f0000002740)={0x84, &(0x7f0000002300)={0x20, 0xe, 0xb3, "ad149fbfe553039f9c75e15b1423fee95c9d45eb502489b244f3b4cc53595e7d189a3accd0d02e0ba308a18d222d1841d5807de70754eb347197110880e8c1d379a3383985bfb9e6149f90932c480467b54937a308a800edd595a57226b6976510d1a85b2c213884791ae512cd84f0945c2eaac06662951781ed3d347bacca22939b31317f7bf01d8024b872e23498f603e2f5b2bbe4c6fc9d9bc02b2b32d6219e0d0dad7bcb0543ca8693cf481bd40ce23283"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000002540)={0x40, 0xb, 0x2, "03a6"}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000025c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000002600)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000002640)={0x40, 0x19, 0x2, "7ebc"}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x2}, 0xfffffffffffffffc, &(0x7f00000026c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002700)={0x40, 0x21, 0x1, 0xe}})
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000002840), r0)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x80, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002980)={0xaa, 0xa0})
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002a40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x7c, r7, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x2)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002bc0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r10, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002d00), r9)
sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, r11, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x1c}}, 0x94)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002e40)={0x2, &(0x7f0000002e00)=[{0x42c7, 0xb, 0x2}, {0x55, 0xf8, 0x7c}]}, 0x10)
fsetxattr$security_selinux(r0, &(0x7f0000002e80), &(0x7f0000002ec0)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002f40)={0x5, &(0x7f0000002f00)=[{0x7ff, 0x4, 0xff, 0x5}, {0x6, 0x9, 0x7, 0xcfbd}, {0x4, 0x5, 0x3, 0x401}, {0x9, 0x4, 0x7, 0x9}, {0x3, 0x6, 0x9, 0x8}]})

6.143237379s ago: executing program 4 (id=10540):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40342, 0x0)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r1, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f40000400000000120000000000", 0x1d)
readahead(r0, 0x5, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c)
getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080))
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000040"])
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0)
timerfd_create(0x0, 0x80800)
recvfrom$inet6(r6, &(0x7f0000000080)=""/141, 0x8d, 0x100, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0)
pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r9 = socket(0xa, 0x801, 0x0)
getsockopt(r9, 0x0, 0x40, 0x0, &(0x7f00000000c0))
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x14)

6.142870149s ago: executing program 4 (id=10541):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
mount$incfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000140)=""/4132, 0x1024}], 0x1}, 0x6}], 0x1, 0x12040, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r4 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0))
socket$inet6(0xa, 0x3, 0x1)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x400})
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x10)
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r6, &(0x7f0000000140)=""/120, 0x78, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xb4, 0x0, &(0x7f0000000580)=[@register_looper, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0xb, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x400}, @increfs_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/224, 0xe0, 0x1, 0x35}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/16, 0x10, 0x0, 0x13}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @enter_looper], 0x7f, 0x0, &(0x7f0000000380)="f67de368cc0e62fc75d6ab6a390cfe247f4853ec4a291dbddfeeed6f881bc6eabeafb36f819440fe3315d93832388181ccd167352c876ee1138736a64654457d6ad63fa08a617c30e8e7634c34c857cf902188ad08a8adc1ee31c19a7c3456062072685c9f756b266ce015aca22190df3c03cdf9a0f22454cd7e63dfb214e4"})
syz_io_uring_setup(0x6042, 0xfffffffffffffffe, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

6.0877227s ago: executing program 4 (id=10543):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
removexattr(&(0x7f0000000940)='./file0\x00', 0x0)

5.764879767s ago: executing program 4 (id=10546):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) (async)
r1 = fsopen(&(0x7f0000000080)='ncpfs\x00', 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x7c, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@handle, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @exit_looper, @acquire_done={0x40106309, 0x2}], 0xb6, 0x0, &(0x7f0000000200)="4e34cc634a740510adac97fe364cda5fb15481985436d36770d827c3be8e0fe371f597d102b68a624f65430813263da0060d458b5ecba6b7ac11b190566cd7821f6658c879f0166fcaacf6ee8061d74fa921c9c6aaf5b689d3c2c1d994c158e489dcc49da354b821846981adaa733cd944838c0e51ad287fc35f83d159901197c6860a075d77050f3d42dae857bc0662951639ce09cb3cacdb50fbb16d023cec57ddcb7aed112480c065fc951fd57c6891a32c7c146b"}) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) (async, rerun: 32)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) (async, rerun: 32)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8953, 0x0) (async)
r6 = dup(r4)
r7 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0})
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x3, r9, 0x30}, 0x49) (async)
fcntl$getownex(r5, 0x10, &(0x7f0000001200)) (async)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000) (async)
ioctl$ASHMEM_GET_NAME(r3, 0x40047703, 0x0)

5.691486428s ago: executing program 33 (id=10546):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) (async)
r1 = fsopen(&(0x7f0000000080)='ncpfs\x00', 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x7c, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@handle, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @exit_looper, @acquire_done={0x40106309, 0x2}], 0xb6, 0x0, &(0x7f0000000200)="4e34cc634a740510adac97fe364cda5fb15481985436d36770d827c3be8e0fe371f597d102b68a624f65430813263da0060d458b5ecba6b7ac11b190566cd7821f6658c879f0166fcaacf6ee8061d74fa921c9c6aaf5b689d3c2c1d994c158e489dcc49da354b821846981adaa733cd944838c0e51ad287fc35f83d159901197c6860a075d77050f3d42dae857bc0662951639ce09cb3cacdb50fbb16d023cec57ddcb7aed112480c065fc951fd57c6891a32c7c146b"}) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) (async, rerun: 32)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) (async, rerun: 32)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8953, 0x0) (async)
r6 = dup(r4)
r7 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0})
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x3, r9, 0x30}, 0x49) (async)
fcntl$getownex(r5, 0x10, &(0x7f0000001200)) (async)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000) (async)
ioctl$ASHMEM_GET_NAME(r3, 0x40047703, 0x0)

2.954149011s ago: executing program 2 (id=10597):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000940)=ANY=[@ANYBLOB="12011001020000202505a1a4400001020301090269000000014205240001000d240f01000002000978e02e2706241a02000408241c0900090800042402050905810308003810000904010000020d00000904010102020d0020000000000000000000000000000000000000a17b7feac5ed7f5b2b697cebc8927769ea2446eda98f3dfcab02a5fecc2d2527a6b43949b145f6c05648ab3b786d6f0ceb37028e914ead7ba9b8000000000000000000"], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0x8, 0x8, 0xff, 0xf7}, 0x25, &(0x7f0000000ac0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x8000, 0x1e00, 0xa, [0x3f3f, 0xff0000, 0x30, 0xc0c0, 0xff3f00]}]}, 0x1, [{0x100, &(0x7f0000000440)=@string={0x100, 0x3, "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"}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x7, 0x28, {0x28, 0xc, "fb35b7d22f16ae124e9e2e85ed40189cb25a2627cba9e2e0f93be6869942fec089b49d60fa0f"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x0, 0x10, 0xbb, "a988dbca0f0329e65e8ac6d959656b05da6cfece2f38d1cddf5a72193c0c4bdfc360c60c09f063a5126dd2e76c3ce9f111204d613cba9dbe53446f7d7c51958e5e66ec4cdd0dfeade6862bdf0bdf8f7bada44670728e75220b9939e817c4317d16e4e90fed3c6095646772acb51d100cbf73de8c43717e3fdfb400ea1872dbfa07a88ae103e72dba1f5e5bbda6c46d8102f50ea65bb80899d4e28d1855251a1dd2c16a55ad9d414686a39433770ce69809f934c5baef27154ab31e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x47}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x106, 0x8, 0x5, 0x401, 0x1, 0xa, 0x2, 0x7, 0xffff, 0x100, 0x9, 0x7c1}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000800)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}})
close(r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x9, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a18a361a87"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x5, 0x3}, {0x6, 0x24, 0x1a, 0x200, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xe1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x22, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x4, 0xe}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x16, 0x0, 0x4, 0x10, 0x2}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x9a, 0x2, 0x8, 0x7, 0x10}]}, 0x7, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x427}}, {0x81, &(0x7f0000000c80)=@string={0x81, 0x3, "8ad19dfba70701cee488a9fb67b060031728f43bfc453a9169b15e4d60b47e5c1c7a4fd95804e627692697b968c18c927b088383950c30c7b33bba4fdcb6deee6029020d6d8788e0e4d12958f68fc2b04045ac95dba01bd4e82c733da01a7b3b8ef95a7605b4c926e2ede187ccc1a68d3338ad2df421bf399feb6f14432fb4"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xc0a}}, {0x63, &(0x7f0000000d80)=@string={0x63, 0x3, "dc5d46b39286eb71fda3813e19c60a5a37259956116093b2de02bddc6b7ca89bd92d04aca99acfbb85e9f4cf7570093c7c54014a55d6ade74b1fb57c479504d18748c70421dd9e780a7fd182732735e65677cbec5e5b80aa4c57c5fe2587a8d842"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x2401}}]})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000001000)={0x14, &(0x7f0000000ec0)={0x20, 0x11, 0xd1, {0xd1, 0x9, "13cbc9a4017e89f0203a5a4bf98e3710c36fb5b365cb4dba537e4cc1f0d6c643c31b7fe988ae1387baa0d2984ef63575df0936745ea74f7086c68f84cf00ce5c51a65b379904292114ed00921403be66aaf2db6b707b0c2f3b0275f1e58c625a84ff8bfa492481b374404365f329fc8c93baa414f4389269cebe76f920ca0e416e6f6b7fd8758260a57915f7344b5071c91657b6e0e425a42bdcf0e5ed7ca85e6c0de3299c27af6a8e3b5f4d59f6866735ab22453c086f9de1b167fbc87e4096053721d419527b5da71e45794ca6d4"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x44, &(0x7f0000001040)={0x40, 0x16, 0x39, "eec36fef682c1625f82227f8123f9d9626b56e78da24f1ac2fe28d190ff3691bc8e4a457319d86c6fc9b8c1564dd799475331e280812bcc9eb"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x39}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001100)={0x20, 0x80, 0x1c, {0x855, 0xb, 0x2, 0x4, 0x9, 0x100, 0x2, 0x9ac, 0x8, 0x81, 0x7, 0x2}}, &(0x7f0000001140)={0x20, 0x85, 0x4}, &(0x7f0000001180)={0x20, 0x83, 0x2, 0xfff8}, &(0x7f00000011c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001200)={0x20, 0x89, 0x2}})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x200000002, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

2.352929114s ago: executing program 2 (id=10599):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100", @ANYRES64=r1], 0x108}}], 0x2, 0xc040)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r5], 0x1c}}, 0x804)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000f08015f2d03a28ffd62300c67ed902005b8601d8d1f313a86056462f68ab3cb134bdca3f4382095f5362b1efd24d704fac9abe5ca6ae4e7bff2d89076c58f251fb4f3a2a31658426b0c0fc", @ANYRES16=r4, @ANYBLOB="080029bd7000ffdbdf25090000001800038014000600fe8000000000000000000000000000aa08000600ffffffff3800018008000500000000000600020033000000090006006e6f6e650000000008000500010000000800080005000000080008000100000008000500a70000004400038008000500ac1414aa050008000100000006000400df07000005000800020000000800010000000000060007004e210000080003000f0000000800030000000000"], 0xb8}}, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

2.223546616s ago: executing program 2 (id=10601):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
utimes(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x398a0bdb) (async)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
utimes(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) (async)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

1.669260037s ago: executing program 2 (id=10621):
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0xffffffffffffffff)
ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000340)=""/4096)
r2 = inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000140)={0x3, 0x591})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]})
finit_module(r0, 0x0, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setlease(r6, 0x400, 0x2)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r7, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

1.235557155s ago: executing program 1 (id=10628):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) (async)
mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r0, 0x12d57000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')

1.229570326s ago: executing program 1 (id=10629):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="1c0000001d005f0214ffffffffffffe8070000000d00000000005e2c", 0x1c)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32)
r2 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
fsmount(r2, 0x0, 0xf) (async, rerun: 64)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x8, 0x8, 0x6}) (async, rerun: 64)
setreuid(0x0, 0xee00) (async, rerun: 64)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800c2, 0x0)

1.139508737s ago: executing program 1 (id=10631):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/65, 0x41}, 0x100)
sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.111983058s ago: executing program 1 (id=10632):
r0 = socket(0x11, 0x3, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1})
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x1ff, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f00000004c0)=[@exit_looper, @decrefs={0x40046307, 0x1}], 0xfffffffffffffcd3, 0x0, 0x0})
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
sendto$inet(r2, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10)
recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/130, 0x82}, 0x4}], 0x1, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$netlink(0x10, 0x3, 0x8)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100)=0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRES8, @ANYRESOCT], 0xa0}, 0x1, 0x0, 0x0, 0x55}, 0x4000000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in=@local, 0x200, 0x0, 0x3, 0x7}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000440)=0x34, &(0x7f0000000480)=0x4)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1}, {}, {0x16}]})
close_range(r4, 0xffffffffffffffff, 0x0)

768.168725ms ago: executing program 0 (id=10641):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

667.299777ms ago: executing program 2 (id=10643):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc080, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x8000000000000000, 0x5})
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="2e387d25e941c88374b4", 0xa}, {&(0x7f00000000c0)="5616f82c094830eee2c6a5f673d763702d6eb26e619d6e219719267b8da1b2f3e4c6b5603adbee36dc721e937d949c07c42f3a41a089e9ba4cfac0769721e28e9f5d1ae55d43da3d0b4c8b2788c6608ff488deeb1344f03e06039395556aaba4ec720bf0d5fa8a13d7eaa180273e088a5b29c6483145b57e7cf794210f907c9d56f8caf1a8faa995f692099de827fb6fd37bfce83971c30e3eead8ff3c0356977ba1b3811b", 0xa5}], 0x2, 0x5, 0x5, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xf6b0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "daa2b3794f48d17d", "688cfc20b7d143c31f1eb8cc7465423b", "c3a4f517", "224bf8d67c2e04fd"}, 0x28)
r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x0, 0x0, [0xb761, 0x79, 0x4, 0x10, 0x1ff, 0x8], 0x3, &(0x7f0000000480)=[{}], 0x0, [{}, {}, {}]}, 0xa8)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000580), &(0x7f00000005c0))
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000600))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0)
ioctl$TIOCNOTTY(r3, 0x5422)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000680)={0x9, {{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x1, [{{0x2, 0x4e23, @multicast1}}]}, 0x110)
read$snapshot(r3, &(0x7f00000007c0)=""/15, 0xf)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000800)={0x2, 0x0, 0x62a, 0x2d9, 0x1, "96c72f57979b05740946208149476380161879"})
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000840)={0x1, 0x4b, "247027757923f6d423a0b771bc88cda3c4b53393871e9394b181cf2888c3c8b3ff75227738841c6f1f92a302f7699c15d1dc78783ee829b0040f1632058d93945cfab57b6d7cebc1e52c8c"})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040010}, 0x2000c040)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f6, 0x300, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x54}, 0x80)
accept4$unix(r3, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x180800)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x6003, 0x0)
write(r5, &(0x7f0000000bc0)="d30cf34ac8e6b879fe4404745f9ffbf4c8", 0x11)
write$cgroup_pressure(r3, &(0x7f0000000c00)={'full', 0x20, 0xfa, 0x20, 0x7}, 0x2f)
r6 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$inet(r6, &(0x7f0000002200)={&(0x7f0000000c40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002140)=[{&(0x7f0000000c80)="c1aa10df6b7c87d17ab4448d393a34804fcc955765b2f30571dc06ecdfcda0175d2d350cf202fe1ebd00e223d1b7641d1824a9c4a25e243d1319e60283f9e737971df3d147421425f6e81f22bad5a32ab724cfc0731c6c7dc22f94e3bfb293", 0x5f}, {&(0x7f0000000d00)="01c358ee271f7bed5a2f5a3276fb7e0dd85c9e445aac7c3151e0afd44a277a07ed1f549b6a0189f266d7de56f7d1b205eae5e50605178bebd668e9701cdff624e5", 0x41}, {&(0x7f0000000d80)="df90efa9f8687c6cf9d35dc5afca381157b09a8a6e2e04b297b18561b98972ad2705fbce0921e2f0d38fcfbe4a4eabb4c5fb158d26f8bca985", 0x39}, {&(0x7f0000000dc0)="2669fe0ce7d3670544818fd38b4f21e49e4e005867bad95ac2f7ceb4", 0x1c}, {&(0x7f0000000e00)="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", 0xfb}, {&(0x7f0000000f00)="4b89e2d68f2468ac8ea8f146fb04984f41f947bab3ad1c83d8fc663cb4625559ebeeb4507a305c591a0ff61f8184d75811c30dbabffcbd525191d10b24023f64045c737b8af04675f4a1191d700960667d058b6a479fb01e2e4f706b67b170824d699b97833afac42d23b5e9ea3b7fa087999c1702382dcab7dd64ea1c89b0935b8eb87e7c36dd60e5504d99ace005e86d03e0d7a8", 0x95}, {&(0x7f0000000fc0)="e7", 0x1}, {&(0x7f0000001000)="e2e3c5ada9313befc3665f809025cc059e1c14eed5ef35473cae1de5170b7b5f89ddf8415e7343de8025f3d26307ba7e7823a684d0dcc04cfc893cbb2aa6a1bb68b5383f50be7d22c9521abeedf7de22ebe07df784ae542371b427f84dca45c1589e2def5b6cbba6faf278acb58c13a136ee1c9ff31138ac0ea17b19461917204aad9c4ad4a2b2d12d60d5217ea606881fa535e428aa3903fc2ff6586fa735efdb2a0a98532de977b9cce491b957d5539bf78e8f85e8fbc27ce357", 0xbb}, {&(0x7f00000010c0)="6310ec25f40062e7c68120a3eb3b8e5a31c6cd76d3787e24e687ef68f56abf58dc0a8d567a41b46bc12c24e3589dbbea9f97632c4c336d0953c828ac656e040334f41ddfa748f444666d8173e46e", 0x4e}, {&(0x7f0000001140)="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", 0x1000}], 0xa}, 0x40080)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000002240)=<r7=>0x0)
ptrace$peeksig(0x4209, r7, &(0x7f0000002280)={0xd, 0x0, 0x6}, &(0x7f00000022c0)=[{}, {}, {}, {}, {}, {}])
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000002880)={&(0x7f00000025c0), 0xc, &(0x7f0000002840)={&(0x7f0000002640)={0x1d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x45235504}, @NL80211_ATTR_VENDOR_DATA={0x86, 0xc5, "57887c314077191ff295563837e8a133267639d6a99d467ccfa4418acd20565f49b12852c0b722627f5d775602b4f434607ec35808193596cf9b80080a9a1f479fae35585060a531196a8879d571a32659cdb92a20b59a327d68284f9effc0f22c17a301833073b3647ff3bebcccb3fe464f34bd84b93f5139153baf65e649b41ae3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x82}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x103, 0xc5, "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"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

666.556527ms ago: executing program 0 (id=10644):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))

609.630878ms ago: executing program 5 (id=10645):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8)
fcntl$setpipe(r0, 0x407, 0x176)
vmsplice(r1, &(0x7f0000001080)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x8)
vmsplice(r0, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8fe67000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000339000/0x3000)=nil, 0x3000)

584.983948ms ago: executing program 0 (id=10646):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
mkdir(0x0, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0xc000)
r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

515.308629ms ago: executing program 2 (id=10647):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x6)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b40)=0x1c)
sendmsg$inet6(r4, &(0x7f0000002e80)={&(0x7f0000000b80)={0xa, 0x4e23, 0xa4, @private1, 0xe}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c00)="c9cede93e2d2ca00ff10eb22b01d02887ee7f4dfeb240451a1c891eb70b8b254d85fd28642f72b3c5be9564db94cd58cb6e451f03beccfcfc6ffd43cb2f5f663e6d22895dfcf0e53d226e2ce512c9e269b30de30b080c32d2a70427382f6656cc38b9e4d334451af68bd539b67d500724fde079ebd4d6f9b7673987158b3fb", 0x7f}, {&(0x7f0000000c80)="2c7dd71d83a844f0b65a30cab9db34a96b2ac66adc5d", 0x16}, {&(0x7f0000000cc0)="f8be6c783801fdfc4746e8b1d0dfce416d1f53f045021f64299355f7f662fb4da71c865eb18ca818e3dd4f23e06331402ddc2aa78c41992dcd2e23c02de21e5240b71dfef774ad86fa29d5b9153cbd70f91822668efd22a468079da0826ae484a093752aa180428a16b5cfb2b1f5d85a386f6c77", 0x74}, {&(0x7f0000000d40)="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", 0x1000}], 0x5, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x1088}, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fremovexattr(r6, &(0x7f0000000100)=@random={'security.', '\x00'})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000014"], 0x50}}], 0x1, 0x0)
r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_usb_connect$uac1(0x0, 0xe9, &(0x7f0000000580)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0xe, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x6, 0x4, 0x2}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x6, "febaf886dd"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x6, 0x2, [0x9, 0x2], 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0x7, "788593b35b"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x5, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xde, 0x401, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x8, 0x2, "6aeb5f20938a9d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x5, "", "91"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6b, 0x2, 0x1, 0x1, "142e8d48dca8c678"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x0, 0x4, {0x7, 0x25, 0x1, 0x2, 0x1, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x5, 0x72, "117973"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x6, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2c, 0xf8, 0xc9, {0x7, 0x25, 0x1, 0x2, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x83, 0xa7, 0x10, 0x4}, 0x108, &(0x7f0000000680)={0x5, 0xf, 0x108, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0xa3, 0x44, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7, 0x1, 0x1, 0xa7a7, 0x69}, @generic={0xda, 0x10, 0x2, "0e0f5f7278ce049a835a2e08b94cd1dcf46b3d36b0e84c422238aac7a3e0b9b8d508fbe730bf22a1f9382da2b06eb47b91abcd1093a05024368f025f59bfd52bdefdd6fddcf36cc22836c05e4bdfe60d4a16d5f46bf62e018eb29228cf06e3ff3e3747e4ed4b1d2bd6e8007a89e8b9d8d51217c1a5a7198e6e1144c8ab164f87bdbe41c4946f8ae944f0fd3ae93e5729a640d839b0d83afb81e5bdd600f1ddcd27558bc34d8462fa08e6657c5d52397a6b5fba11c5731f520129be727c02c1c6be05eb8751417e84769fd06b8b4729c8345d60e33ada59"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0xf00f, 0xa, [0xc0]}]}, 0x7, [{0xd9, &(0x7f00000007c0)=@string={0xd9, 0x3, "b57d6288fe3c1a3d88db3465d9e47fb118bcc07980e304f5cd28d5b7bc3b14fec8d331fdaf12cc603cb8d6688ac8150dd23527db2b07f34f9e0f8e6d710d4bc3b525bdc2ad4b252e4739bcfc63655119f2089b1e944200845c56600e745627be9b6d9c554711ee5dbe4231077b012bc121928123c813acb52b25cd5f4fe85511d29327582046001e5752a18004fde87b21c9a00bc3ab1d2f322b962edfaf4d20d8aab337d2943aa98948a4035741eb2444cb3121d395becf33718f54a6e489c5e197f491cf75d0d519c97de2448466aa70d570f081982b"}}, {0x1d, &(0x7f0000000200)=@string={0x1d, 0x3, "76adee2232ea9b80e8a237a9c417c6793d14c171945c18431866e5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x429}}, {0xaa, &(0x7f00000009c0)=@string={0xaa, 0x3, "28d20a249701b15f0da9b5f594a1929f85be19183a10f7cb62ac5d4f12d920f090a04eff9983fc0c18516ee819c0f0c008c0c0fe2b01be6cc099217fb77ea159b4b1b378af78bef93cd5ed98ecb1de49515eb43c08b5266882d9eaf1c5cb393b4b35544a35016f848e062edfe45ac62bea833b4b4008086c1d09742880678a24dd80523a8c19a5e43e31135fe47817de5c31a08168f144e0f86ed80785b1f290ce4819bbdf2a1050"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x445}}]})
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

500.44938ms ago: executing program 0 (id=10648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat(r4, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

461.611171ms ago: executing program 0 (id=10649):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open(0x0, 0xc8141, 0x5)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$getflags(r1, 0x401)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0)
symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000002400)='./file0/file0\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0xf)
sendfile(r2, r3, 0x0, 0xe74e)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa)
shutdown(r4, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

395.434922ms ago: executing program 5 (id=10650):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/65, 0x41}, 0x100)
sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

381.478703ms ago: executing program 5 (id=10651):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
r1 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64)
r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0xe4280, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) (async)
r5 = eventfd2(0x2e34, 0x80800)
readv(r5, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/205}, {&(0x7f0000000200)=""/76}, {&(0x7f00000005c0)=""/186}], 0x219)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async)
close_range(r5, r1, 0x0)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000001c0)) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

376.293872ms ago: executing program 0 (id=10652):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000200))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c) (async)
getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000200)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async)

175.583956ms ago: executing program 5 (id=10653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200)
getcwd(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400f7132700010023bd70c46778653cf663e9000004001e80a37979d456a35d6a240100c5cf7196ec000000000000000239076aae896ab0262de666ef96ec000609b2970a10d8751aea79ac6bb3a17c93a3ca83c49dcd9b6bb3497fa244ea3db3e9ea0156518a184365b4801fb4b3f8941216ada1c7d603eb04037a2a32dc6f3a87fc645227bc7ab4fedcac05c059b202d2cb65dbcaf6c6e6ce6b0d50d2cb02e906e8cbb677ecdbe08bc4ca35590d4b52b225899fcc688377779b7436c4fc6d6d447a1e902f672fedf45fd733e88b1ed50da376a8bc1080a45300"/228], 0x14}], 0x1}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1})

152.863527ms ago: executing program 1 (id=10654):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))

114.136768ms ago: executing program 5 (id=10655):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="183300ac41508a346ef84524fa4ebf0675395617446664bdd77ed0ae98eb1f92db72a488eb858212f52f7356d9f26373451aaa1c7fa8c6342c0721b32e477c6cef3c4148e5a2976dc600c31cb5c5173f24cd16b39ebe980f52c007569833c5c30a3914e60159805b94aa38fdbf966427ee808cb36556d771ad3fd91f0a153ed719e195724e10b8b04a7b10e62a8717c1c00d8b90ef8a67f20a9c2710ae8e78d6f61298a9735d7d0fdc967d9a560450d8f9986e426b17ceaf5988a7e8426338283bd9c8b95c42c032754333119f20c54a03d7f1bba2628b5324e1fefe042a0f13f3af27c904f92324e6a953212797bbecf40d2b76a173bd", @ANYRES16=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=0x0])
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001500010027bd7000fbdbdf25ac14143dec0000000000451900000000000000000000000000000000000000004e22051a4e220fff0a0080805c0000003d246fc76a431edfbb0332c5b9"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x10) (async, rerun: 32)
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r2=>0x0}, 0x2020) (rerun: 32)
timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) (async)
write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f008ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x120) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x27, &(0x7f0000000000)=0x8, 0x4) (async)
getdents64(r5, &(0x7f0000000200)=""/41, 0x29) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x8) (async)
io_submit(0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, 0x0)

51.042929ms ago: executing program 1 (id=10656):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
mkdir(0x0, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0xc000)
r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

0s ago: executing program 5 (id=10657):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

dge0: port 1(bridge_slave_0) entered blocking state
[  726.363622][T29516] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.439205][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.447162][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.469340][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.476471][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.488951][T11830] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.496070][T11830] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.644421][T29516] veth0_vlan: entered promiscuous mode
[  726.697622][T29516] veth1_macvtap: entered promiscuous mode
[  726.760723][T29554] Invalid logical block size (7)
[  726.779715][T29556] 9pnet_fd: Insufficient options for proto=fd
[  726.940341][T29567] netlink: 'syz.2.9612': attribute type 27 has an invalid length.
[  726.977084][T29567] veth1_vlan: left allmulticast mode
[  727.175496][T17631] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  727.334981][T17630] usb 1-1: USB disconnect, device number 6
[  727.346018][T17631] usb 5-1: Using ep0 maxpacket: 8
[  727.358497][T17631] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  727.396338][T17631] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  727.417253][T17631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.442679][T17631] usb 5-1: Product: ╄ࢹ㋀톞뛌䣵홷㦩鱁釡钎唦짼獅⩳亨軥ᨩꗀ㿮洀똲⽟瞕믾ꘖⱝ襎훂磯葏
[  727.458385][T17631] usb 5-1: Manufacturer: 編玲눂哐ꎃ褗䞾뮋窗ᤡ駇Ւ㴭燈绫
[  727.467478][T17631] usb 5-1: SerialNumber: ᩴ償ꙵ⺯鍝엜筧焳餏值봺犤⺍굱ꋋ糡怭뼺Ỹ逪媏堳䶡먟딨È䏷콉䍉܍莞ᅅĈ綊쵁ᄪ蓽ኾ승뚛짭琸뮋ܾᗆ➳Ựᄣ劜◆ⷍ깃遽ꏲ襸䚷䏛浪氈䳁냊㒽鮮댝娃蝐ﯖꤐ㗜㨺褤喕ᒖ싎欈
[  727.508353][T29577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  727.539999][T29577] syzkaller0: entered promiscuous mode
[  727.545553][T29577] syzkaller0: entered allmulticast mode
[  727.551689][T29577] tipc: Resetting bearer <eth:syzkaller0>
[  727.614972][T29577] tipc: Resetting bearer <eth:syzkaller0>
[  727.630607][T29577] tipc: Disabling bearer <eth:syzkaller0>
[  727.718274][T29566] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  727.756985][T29585] binder: Bad value for 'defcontext'
[  727.958242][T17631] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  727.972412][T17631] cdc_ncm 5-1:1.0: bind() failure
[  727.980770][T17631] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  727.988427][T17631] cdc_ncm 5-1:1.1: bind() failure
[  727.997199][T17631] usb 5-1: USB disconnect, device number 9
[  728.049460][T17630] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  728.198737][T17630] usb 1-1: device descriptor read/64, error -71
[  728.465259][T17630] usb 1-1: device descriptor read/64, error -71
[  728.542869][T29597] SELinux: security_context_str_to_sid (sytem_u�Gй�:���18446744073709551615) failed with errno=-22
[  728.582376][   T36] kauditd_printk_skb: 761 callbacks suppressed
[  728.582400][   T36] audit: type=1400 audit(2000000134.995:65085): avc:  denied  { unmount } for  pid=19321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  728.644810][   T36] audit: type=1400 audit(2000000134.995:65086): avc:  denied  { unmount } for  pid=29516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  728.668660][   T36] audit: type=1400 audit(2000000135.014:65087): avc:  denied  { read write } for  pid=29516 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.694094][   T36] audit: type=1400 audit(2000000135.014:65088): avc:  denied  { read write open } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.719340][   T36] audit: type=1400 audit(2000000135.014:65089): avc:  denied  { ioctl } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.746779][T17630] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  728.775142][   T36] audit: type=1400 audit(2000000135.033:65090): avc:  denied  { ioctl } for  pid=29586 comm="syz.0.9618" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  728.803693][   T36] audit: type=1400 audit(2000000135.033:65091): avc:  denied  { ioctl } for  pid=29586 comm="syz.0.9618" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  728.835983][   T36] audit: type=1400 audit(2000000135.052:65092): avc:  denied  { read write } for  pid=19321 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.862358][   T36] audit: type=1400 audit(2000000135.052:65093): avc:  denied  { read write open } for  pid=19321 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.888566][   T36] audit: type=1400 audit(2000000135.052:65094): avc:  denied  { ioctl } for  pid=19321 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  728.923480][T17630] usb 1-1: device descriptor read/64, error -71
[  728.936023][T29607] rust_binder: Write failure EINVAL in pid:11
[  728.984885][T29610] overlayfs: overlapping lowerdir path
[  729.030077][  T408] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  729.195256][T29621] batadv_slave_0: mtu less than device minimum
[  729.205265][T29621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  729.212887][  T408] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  729.263554][  T408] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  729.301678][  T408] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  729.328041][  T408] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  729.358854][  T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.420333][T29600] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  729.667806][T29600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  729.700842][T29600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9623'.
[  729.710519][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9623'.
[  729.720624][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9623'.
[  729.766523][T17630] usb 1-1: device descriptor read/64, error -71
[  729.869936][  T408] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  729.878399][  T408] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input100
[  729.894184][T17630] usb usb1-port1: attempt power cycle
[  729.901659][  T408] usb 2-1: USB disconnect, device number 25
[  729.907745][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  729.936058][   T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  730.117613][   T31] usb 5-1: device descriptor read/64, error -71
[  730.266477][T17630] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  730.301552][T17630] usb 1-1: device descriptor read/8, error -71
[  730.361363][T29644] netlink: 'syz.1.9639': attribute type 16 has an invalid length.
[  730.369276][T29644] netlink: 'syz.1.9639': attribute type 2 has an invalid length.
[  730.377163][T29644] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.9639'.
[  730.383752][   T31] usb 5-1: device descriptor read/64, error -71
[  730.391655][T29644] /dev/sg0: Can't lookup blockdev
[  730.444817][T17630] usb 1-1: device descriptor read/8, error -71
[  730.589463][T29651] 9pnet_fd: Insufficient options for proto=fd
[  730.650219][   T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  730.653056][T29654] syzkaller0: entered promiscuous mode
[  730.663559][T29654] syzkaller0: entered allmulticast mode
[  730.703508][T17630] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  730.727375][T17630] usb 1-1: device descriptor read/8, error -71
[  730.754015][T29656] SELinux: security_context_str_to_sid () failed with errno=-22
[  730.792010][T29659] input: syz0 as /devices/virtual/input/input101
[  730.799411][   T31] usb 5-1: device descriptor read/64, error -71
[  730.867889][T17630] usb 1-1: device descriptor read/8, error -71
[  730.994597][T17630] usb usb1-port1: unable to enumerate USB device
[  731.065880][   T31] usb 5-1: device descriptor read/64, error -71
[  731.183599][   T31] usb usb5-port1: attempt power cycle
[  731.385645][T17630] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  731.524238][T17630] usb 1-1: device descriptor read/64, error -71
[  731.545727][   T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  731.569577][   T31] usb 5-1: device descriptor read/8, error -71
[  731.708496][   T31] usb 5-1: device descriptor read/8, error -71
[  731.780001][T17630] usb 1-1: device descriptor read/64, error -71
[  731.961340][   T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  731.985210][   T31] usb 5-1: device descriptor read/8, error -71
[  732.046773][T17630] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  732.123376][   T31] usb 5-1: device descriptor read/8, error -71
[  732.195757][T17630] usb 1-1: device descriptor read/64, error -71
[  732.238548][   T31] usb usb5-port1: unable to enumerate USB device
[  732.345331][T29687] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  732.451527][T17630] usb 1-1: device descriptor read/64, error -71
[  732.501863][T29694] 9pnet_fd: Insufficient options for proto=fd
[  732.568853][T17630] usb usb1-port1: attempt power cycle
[  732.694885][T29696] netlink: 'syz.4.9659': attribute type 64 has an invalid length.
[  732.702813][T29696] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9659'.
[  732.931496][T17630] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  732.971308][ T1222] syzkaller0: tun_net_xmit 76
[  732.975097][T17630] usb 1-1: device descriptor read/8, error -71
[  732.976403][ T1222] syzkaller0: tun_net_xmit 48
[  733.114785][T17630] usb 1-1: device descriptor read/8, error -71
[  733.368164][T17630] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  733.385369][T29709] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9665'.
[  733.401218][T17630] usb 1-1: device descriptor read/8, error -71
[  733.488652][T29716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9668'.
[  733.541125][T17630] usb 1-1: device descriptor read/8, error -71
[  733.656318][T17630] usb usb1-port1: unable to enumerate USB device
[  733.869138][   T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  733.937229][   T36] kauditd_printk_skb: 583 callbacks suppressed
[  733.937250][   T36] audit: type=1400 audit(2000000140.043:65678): avc:  denied  { create } for  pid=29730 comm="syz.1.9673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  733.963389][   T36] audit: type=1400 audit(2000000140.043:65679): avc:  denied  { bind } for  pid=29730 comm="syz.1.9673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  733.983241][   T36] audit: type=1400 audit(2000000140.043:65680): avc:  denied  { connect } for  pid=29730 comm="syz.1.9673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  734.004174][   T36] audit: type=1400 audit(2000000140.043:65681): avc:  denied  { connect } for  pid=29730 comm="syz.1.9673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  734.024180][   T36] audit: type=1400 audit(2000000140.071:65682): avc:  denied  { ioctl } for  pid=29723 comm="syz.4.9670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  734.060995][   T45] usb 5-1: Using ep0 maxpacket: 8
[  734.066787][   T36] audit: type=1400 audit(2000000140.155:65683): avc:  denied  { ioctl } for  pid=29723 comm="syz.4.9670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  734.093182][   T36] audit: type=1400 audit(2000000140.183:65684): avc:  denied  { ioctl } for  pid=29723 comm="syz.4.9670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  734.121262][   T36] audit: type=1400 audit(2000000140.193:65685): avc:  denied  { ioctl } for  pid=29723 comm="syz.4.9670" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  734.147102][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11
[  734.149805][T29733] __vm_enough_memory: pid: 29733, comm: syz.1.9674, bytes: 18014402804453376 not enough memory for the allocation
[  734.159936][   T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  734.185829][   T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[  734.196677][   T36] audit: type=1400 audit(2000000140.193:65686): avc:  denied  { read write } for  pid=19321 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  734.221046][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.224616][   T36] audit: type=1400 audit(2000000140.193:65687): avc:  denied  { read write open } for  pid=19321 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  734.242475][   T45] usb 5-1: config 0 descriptor??
[  734.342346][T29737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  734.342384][T29737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284
[  734.744248][   T45] wacom 0003:056A:0301.0036: Unknown device_type for 'HID 056a:0301'. Assuming pen.
[  734.796269][   T45] wacom 0003:056A:0301.0036: hidraw0: USB HID vff.ea Device [HID 056a:0301] on usb-dummy_hcd.4-1/input0
[  734.815182][   T45] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0301.0036/input/input102
[  734.895397][T29758] 9pnet_fd: Insufficient options for proto=fd
[  734.970744][   T31] usb 5-1: USB disconnect, device number 14
[  735.579807][T29788] netlink: 'syz.0.9692': attribute type 16 has an invalid length.
[  735.591232][T29772] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.604624][T29788] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9692'.
[  735.610176][T29772] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.644879][T29772] bridge_slave_0: entered allmulticast mode
[  735.660258][T29772] bridge_slave_0: entered promiscuous mode
[  735.684757][T29790] can0: slcan on ptm0.
[  735.688997][T29772] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.701194][T29772] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.723773][T29772] bridge_slave_1: entered allmulticast mode
[  735.730173][T29772] bridge_slave_1: entered promiscuous mode
[  735.830296][T29791] can0 (unregistered): slcan off ptm0.
[  736.269949][T11835] syzkaller0: tun_net_xmit 76
[  736.274931][T11835] syzkaller0: tun_net_xmit 48
[  736.279942][ T1222] bridge_slave_1: left allmulticast mode
[  736.289509][T29813] syzkaller0: create flow: hash 1311091673 index 1
[  736.299384][   T45] syzkaller0: tun_net_xmit 76
[  736.305184][ T1222] bridge_slave_1: left promiscuous mode
[  736.335056][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.357062][ T1222] bridge_slave_0: left allmulticast mode
[  736.381558][ T1222] bridge_slave_0: left promiscuous mode
[  736.408951][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.593335][ T1222] tipc: Disabling bearer <udp:syz2>
[  736.608467][   T31] syzkaller0: tun_net_xmit 76
[  736.613321][ T1222] tipc: Left network mode
[  736.664034][ T1222] veth1_macvtap: left promiscuous mode
[  736.669613][ T1222] veth0_vlan: left promiscuous mode
[  736.689026][T29835] /dev/rnullb0: Can't lookup blockdev
[  736.763559][T29843] rust_binder: Error while translating object.
[  736.763604][T29843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  736.769886][T29843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:328
[  736.870988][T29812] syzkaller0: delete flow: hash 1311091673 index 1
[  736.947921][T29845] tipc: Started in network mode
[  736.952900][T29845] tipc: Node identity 42b5efc2ef3, cluster identity 4711
[  736.960000][T29845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  736.982413][T29845] syzkaller0: entered promiscuous mode
[  736.987937][T29845] syzkaller0: entered allmulticast mode
[  736.994034][T29845] tipc: Resetting bearer <eth:syzkaller0>
[  737.002963][T29845] tipc: Resetting bearer <eth:syzkaller0>
[  737.014660][T29845] tipc: Disabling bearer <eth:syzkaller0>
[  737.069066][T11830] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.076169][T11830] bridge0: port 1(bridge_slave_0) entered forwarding state
[  737.087617][T11835] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.094722][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  737.130704][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  737.188423][T29852] rust_binder: Write failure EFAULT in pid:63
[  737.257360][T29772] veth0_vlan: entered promiscuous mode
[  737.301029][T29772] veth1_macvtap: entered promiscuous mode
[  737.320840][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  737.352427][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.386549][   T31] usb 1-1: config 0 descriptor??
[  737.642301][T17630] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  737.812826][T17630] usb 5-1: Using ep0 maxpacket: 8
[  737.820522][T17630] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.832879][T17630] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  737.834842][   T31] logitech-djreceiver 0003:046D:C53F.0037: ignoring exceeding usage max
[  737.843028][T17630] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  737.868545][T17630] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  737.880527][T17630] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  737.890519][T17630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.909151][T17630] hub 5-1:1.0: bad descriptor, ignoring hub
[  737.919955][T17630] hub 5-1:1.0: probe with driver hub failed with error -5
[  737.927421][T17630] cdc_wdm 5-1:1.0: skipping garbage
[  737.934391][T17630] cdc_wdm 5-1:1.0: skipping garbage
[  737.943246][T17630] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  737.949263][T17630] cdc_wdm 5-1:1.0: Unknown control protocol
[  738.047457][T17630] usb 1-1: USB disconnect, device number 15
[  738.091556][T29878] netlink: 'syz.1.9720': attribute type 2 has an invalid length.
[  738.104993][T29878] netlink: 'syz.1.9720': attribute type 5 has an invalid length.
[  738.208568][T29880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9721'.
[  738.239250][   T31] usb 5-1: USB disconnect, device number 15
[  738.942687][   T31] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  739.102519][   T31] usb 1-1: Invalid ep0 maxpacket: 16
[  739.103504][T29898] Invalid ELF header magic: != ELF
[  739.241910][T29902] can0: slcan on ptm0.
[  739.262465][   T31] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  739.274115][   T36] kauditd_printk_skb: 730 callbacks suppressed
[  739.274135][   T36] audit: type=1400 audit(2000000145.053:66418): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  739.302658][   T36] audit: type=1400 audit(2000000145.072:66419): avc:  denied  { ioctl } for  pid=29895 comm="syz.0.9728" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  739.331546][   T36] audit: type=1400 audit(2000000145.072:66420): avc:  denied  { ioctl } for  pid=29895 comm="syz.0.9728" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  739.357154][T29901] can0 (unregistered): slcan off ptm0.
[  739.358766][   T36] audit: type=1400 audit(2000000145.081:66421): avc:  denied  { ioctl } for  pid=29895 comm="syz.0.9728" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  739.390626][   T36] audit: type=1400 audit(2000000145.109:66422): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  739.415218][   T36] audit: type=1400 audit(2000000145.137:66423): avc:  denied  { ioctl } for  pid=29895 comm="syz.0.9728" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  739.441275][   T36] audit: type=1400 audit(2000000145.175:66424): avc:  denied  { unlink } for  pid=19321 comm="syz-executor" name="file0" dev="tmpfs" ino=3089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  739.464634][   T31] usb 1-1: Invalid ep0 maxpacket: 16
[  739.466930][   T36] audit: type=1400 audit(2000000145.184:66425): avc:  denied  { read write } for  pid=19321 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  739.496052][   T36] audit: type=1400 audit(2000000145.184:66426): avc:  denied  { read write open } for  pid=19321 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  739.498899][   T31] usb usb1-port1: attempt power cycle
[  739.525757][   T36] audit: type=1400 audit(2000000145.184:66427): avc:  denied  { ioctl } for  pid=19321 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  739.912635][   T31] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  739.935459][   T31] usb 1-1: Invalid ep0 maxpacket: 16
[  740.072601][   T31] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  740.095186][   T31] usb 1-1: Invalid ep0 maxpacket: 16
[  740.101453][   T31] usb usb1-port1: unable to enumerate USB device
[  740.214567][T29910] can0: slcan on ptm0.
[  740.309703][T29910] can0 (unregistered): slcan off ptm0.
[  740.755025][  T408] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  740.829128][T29936] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.915594][  T408] usb 2-1: Using ep0 maxpacket: 32
[  740.925162][T17630] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  740.933416][  T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.964008][  T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  740.979955][  T408] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  740.997903][  T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.022420][  T408] usb 2-1: config 0 descriptor??
[  741.039271][  T408] hub 2-1:0.0: USB hub found
[  741.139680][T17630] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  741.161417][T17630] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  741.184085][T17630] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  741.198497][T17630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  741.216809][T17630] usb 5-1: SerialNumber: syz
[  741.254617][  T408] hub 2-1:0.0: 1 port detected
[  741.446269][T29930] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9738'.
[  741.476122][T29930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  741.476161][T29930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83
[  741.520622][T17630] usb 5-1: USB disconnect, device number 17
[  741.608938][T29963] SELinux: failed to load policy
[  741.867299][T29970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  741.867340][T29970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95
[  741.902387][   T45] usb 2-1: USB disconnect, device number 26
[  741.917589][  T408] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  741.929096][T29972] input: syz0 as /devices/virtual/input/input105
[  742.092900][T29981] tipc: Started in network mode
[  742.103166][T29981] tipc: Node identity 7f000001, cluster identity 4711
[  742.114077][T29981] tipc: Enabled bearer <udp:syz2>, priority 10
[  742.144975][T29981] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  742.153899][T29981] tipc: Enabled bearer <udp:syz0>, priority 10
[  742.513328][T17631] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  742.523536][T29995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9754'.
[  742.683850][T17631] usb 1-1: Using ep0 maxpacket: 8
[  742.692149][T17631] usb 1-1: config 0 has an invalid interface number: 193 but max is 1
[  742.702269][T17631] usb 1-1: config 0 has an invalid interface number: 4 but max is 1
[  742.711587][T17631] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.722634][T17631] usb 1-1: config 0 has no interface number 0
[  742.729887][T17631] usb 1-1: config 0 has no interface number 1
[  742.736170][T17631] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  742.751511][T17631] usb 1-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  742.765945][T17631] usb 1-1: config 0 interface 193 has no altsetting 0
[  742.773593][T17631] usb 1-1: config 0 interface 4 has no altsetting 0
[  742.785391][T17631] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a
[  742.796545][T17631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.806125][T17631] usb 1-1: Product: syz
[  742.810419][T17631] usb 1-1: Manufacturer: syz
[  742.825202][T17631] usb 1-1: SerialNumber: syz
[  742.871774][T17631] usb 1-1: config 0 descriptor??
[  743.110499][T17631] usb 1-1: unknown interface protocol 0x4f, assuming v1
[  743.123371][T17631] usb 1-1: 193:2 : does not exist
[  743.129500][T17631] usb 1-1: unknown interface protocol 0x5, assuming v1
[  743.138218][T17631] usb 1-1: 4:0 : does not exist
[  743.152911][T17631] usb 1-1: USB disconnect, device number 20
[  743.251872][T29437] udevd[29437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  743.312717][ T1244] tipc: Node number set to 2130706433
[  743.323401][  T442] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  743.499011][  T442] usb 2-1: config 0 has no interfaces?
[  743.515107][  T442] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  743.553123][  T442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  743.582283][  T442] usb 2-1: SerialNumber: syz
[  743.608793][  T442] usb 2-1: config 0 descriptor??
[  743.654680][T30051] fuse: Bad value for 'fd'
[  743.697237][T30054] overlayfs: failed to clone upperpath
[  743.764208][T30056] tipc: Enabled bearer <udp:syz2>, priority 10
[  743.786550][T30056] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  743.795169][T30056] tipc: Enabled bearer <udp:syz0>, priority 10
[  743.845869][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.872426][T30066] syz.0.9778: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  743.885763][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.888753][T30066] CPU: 1 UID: 0 PID: 30066 Comm: syz.0.9778 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  743.888797][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  743.888815][T30066] Call Trace:
[  743.888825][T30066]  <TASK>
[  743.888837][T30066]  __dump_stack+0x21/0x30
[  743.888880][T30066]  dump_stack_lvl+0x10c/0x190
[  743.888915][T30066]  ? __cfi_dump_stack_lvl+0x10/0x10
[  743.888951][T30066]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  743.888987][T30066]  dump_stack+0x19/0x20
[  743.889021][T30066]  warn_alloc+0x1bc/0x2a0
[  743.889055][T30066]  ? stack_depot_save_flags+0x38/0x800
[  743.889083][T30066]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  743.889115][T30066]  ? __cfi_warn_alloc+0x10/0x10
[  743.889149][T30066]  ? kasan_save_track+0x4f/0x80
[  743.889176][T30066]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  743.889201][T30066]  ? xskq_create+0x68/0x2a0
[  743.889246][T30066]  ? xsk_init_queue+0xb6/0x120
[  743.889280][T30066]  ? xsk_setsockopt+0x43f/0x6f0
[  743.889311][T30066]  ? do_sock_setsockopt+0x26d/0x400
[  743.889346][T30066]  ? __x64_sys_setsockopt+0x1b8/0x250
[  743.889380][T30066]  ? x64_sys_call+0x2adc/0x2ee0
[  743.889417][T30066]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  743.889467][T30066]  __vmalloc_node_range_noprof+0x135/0x1420
[  743.889511][T30066]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  743.889553][T30066]  ? avc_has_perm+0x1f2/0x220
[  743.889591][T30066]  ? kasan_save_alloc_info+0x40/0x50
[  743.889628][T30066]  ? __kasan_kmalloc+0x96/0xb0
[  743.889658][T30066]  vmalloc_user_noprof+0x77/0x90
[  743.889694][T30066]  ? xskq_create+0xdb/0x2a0
[  743.889728][T30066]  xskq_create+0xdb/0x2a0
[  743.889763][T30066]  xsk_init_queue+0xb6/0x120
[  743.889797][T30066]  xsk_setsockopt+0x43f/0x6f0
[  743.889829][T30066]  ? __cfi_xsk_setsockopt+0x10/0x10
[  743.889862][T30066]  ? do_futex+0x309/0x500
[  743.889889][T30066]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  743.889921][T30066]  ? security_socket_setsockopt+0x33/0xd0
[  743.889947][T30066]  ? __cfi_xsk_setsockopt+0x10/0x10
[  743.889981][T30066]  do_sock_setsockopt+0x26d/0x400
[  743.890016][T30066]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  743.890053][T30066]  __x64_sys_setsockopt+0x1b8/0x250
[  743.890092][T30066]  x64_sys_call+0x2adc/0x2ee0
[  743.890132][T30066]  do_syscall_64+0x58/0xf0
[  743.890164][T30066]  ? clear_bhb_loop+0x50/0xa0
[  743.890191][T30066]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  743.890229][T30066] RIP: 0033:0x7f3a88d8eec9
[  743.890250][T30066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.890275][T30066] RSP: 002b:00007f3a89b5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  743.890304][T30066] RAX: ffffffffffffffda RBX: 00007f3a88fe6090 RCX: 00007f3a88d8eec9
[  743.890326][T30066] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  743.890344][T30066] RBP: 00007f3a88e11f91 R08: 0000000000000004 R09: 0000000000000000
[  743.890360][T30066] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  743.890379][T30066] R13: 00007f3a88fe6128 R14: 00007f3a88fe6090 R15: 00007ffd736fc398
[  743.890403][T30066]  </TASK>
[  743.890461][T30066] Mem-Info:
[  743.945478][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.950374][T30066] active_anon:23422 inactive_anon:23 isolated_anon:0
[  743.950374][T30066]  active_file:8133 inactive_file:16879 isolated_file:0
[  743.950374][T30066]  unevictable:16393 dirty:138 writeback:0
[  743.950374][T30066]  slab_reclaimable:5598 slab_unreclaimable:86123
[  743.950374][T30066]  mapped:24868 shmem:16586 pagetables:1128
[  743.950374][T30066]  sec_pagetables:0 bounce:0
[  743.950374][T30066]  kernel_misc_reclaimable:0
[  743.950374][T30066]  free:1467916 free_pcp:3013 free_cma:0
[  743.970665][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.973872][T30066] Node 0 active_anon:93688kB inactive_anon:92kB active_file:32532kB inactive_file:67516kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:99472kB dirty:552kB writeback:0kB shmem:66344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8772kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no
[  744.005611][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.028462][T30066] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:1820kB free_cma:0kB
[  744.072034][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.076905][T30066] lowmem_reserve[]:
[  744.124567][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.128061][T30066]  0
[  744.149311][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.152041][T30066]  3921
[  744.178435][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.189968][T30066]  3921
[  744.229209][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.264273][T30066] 
[  744.394249][T30066] Normal free:2914216kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93832kB inactive_anon:92kB active_file:32532kB inactive_file:67516kB unevictable:65572kB writepending:568kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3892kB local_pcp:3012kB free_cma:0kB
[  744.426698][T30066] lowmem_reserve[]: 0 0 0
[  744.431166][T30066] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  744.447408][T30066] Normal: 1269*4kB (UME) 369*8kB (UME) 217*16kB (UME) 483*32kB (UME) 417*64kB (UME) 330*128kB (UME) 230*256kB (UME) 119*512kB (UME) 45*1024kB (UME) 11*2048kB (ME) 642*4096kB (UM) = 2913932kB
[  744.466535][T30066] 58063 total pagecache pages
[  744.471236][T30066] 103 pages in swap cache
[  744.475605][T30066] Free swap  = 124048kB
[  744.479881][T30066] Total swap = 124996kB
[  744.484087][T30066] 2097051 pages RAM
[  744.489239][T30066] 0 pages HighMem/MovableOnly
[  744.494053][T30066] 351537 pages reserved
[  744.499361][T30066] 0 pages cma reserved
[  744.506625][T30066] Memory allocations:
[  744.510791][T30066]          0 B        0 init/main.c:1370 func:do_initcalls
[  744.518746][T30066]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  744.526859][T30066]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  744.535533][T30066]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  744.544198][T30066]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  744.552858][T30066]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  744.562215][T30066]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  744.570228][T30066]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  744.580976][T30066]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  744.594232][T30066]          0 B        0 init/initramfs.c:101 func:find_link
[  744.626454][   T36] kauditd_printk_skb: 1638 callbacks suppressed
[  744.626476][   T36] audit: type=1400 audit(2000000150.072:68066): avc:  denied  { map } for  pid=30077 comm="syz.4.9781" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  744.657229][T30079] __vm_enough_memory: pid: 30079, comm: syz.4.9781, bytes: 18014402804453376 not enough memory for the allocation
[  744.671765][   T36] audit: type=1400 audit(2000000150.091:68067): avc:  denied  { create } for  pid=30080 comm="syz.0.9782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.692440][   T36] audit: type=1400 audit(2000000150.091:68068): avc:  denied  { setopt } for  pid=30080 comm="syz.0.9782" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.718117][   T36] audit: type=1400 audit(2000000150.091:68069): avc:  denied  { write } for  pid=30080 comm="syz.0.9782" path="socket:[139873]" dev="sockfs" ino=139873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.745894][   T36] audit: type=1400 audit(2000000150.091:68070): avc:  denied  { write } for  pid=30080 comm="syz.0.9782" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.768699][   T36] audit: type=1400 audit(2000000150.100:68071): avc:  denied  { read } for  pid=30077 comm="syz.4.9781" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  744.792267][   T36] audit: type=1400 audit(2000000150.194:68072): avc:  denied  { create } for  pid=30082 comm="syz.0.9783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.806511][T30085] fuse: Bad value for 'group_id'
[  744.812539][   T36] audit: type=1400 audit(2000000150.194:68073): avc:  denied  { ioctl } for  pid=30082 comm="syz.0.9783" path="socket:[140653]" dev="sockfs" ino=140653 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  744.858580][T30085] fuse: Bad value for 'group_id'
[  744.863345][   T36] audit: type=1400 audit(2000000150.194:68074): avc:  denied  { create } for  pid=30082 comm="syz.0.9783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  744.887471][   T36] audit: type=1400 audit(2000000150.194:68075): avc:  denied  { write } for  pid=30082 comm="syz.0.9783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  744.911546][  T408] tipc: Node number set to 2812810072
[  744.937747][  T408] usb 2-1: USB disconnect, device number 27
[  744.966177][T30091] tipc: Enabled bearer <udp:syz2>, priority 10
[  745.028131][T30091] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  745.044318][T30091] tipc: Enabled bearer <udp:syz0>, priority 10
[  745.153913][T30105] netlink: 'syz.0.9792': attribute type 16 has an invalid length.
[  745.161832][T30105] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9792'.
[  745.295601][T30119] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9795'.
[  745.765900][T30123] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.773015][T30123] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.780231][T30123] bridge_slave_0: entered allmulticast mode
[  745.786921][T30123] bridge_slave_0: entered promiscuous mode
[  745.796533][T30123] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.803605][T30123] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.811573][T30123] bridge_slave_1: entered allmulticast mode
[  745.819085][T30123] bridge_slave_1: entered promiscuous mode
[  745.831749][T30136] overlayfs: failed to clone upperpath
[  745.962209][T30123] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.969341][T30123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  745.976636][T30123] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.983708][T30123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  746.077033][T11830] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.102933][T11830] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.132919][T11830] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.140043][T11830] bridge0: port 1(bridge_slave_0) entered forwarding state
[  746.156374][T11835] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.163505][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.171027][  T408] tipc: Node number set to 2911236034
[  746.304144][T30123] veth0_vlan: entered promiscuous mode
[  746.379652][T30123] veth1_macvtap: entered promiscuous mode
[  746.754922][T30175] overlayfs: failed to clone lowerpath
[  746.778121][T30175] overlayfs: failed to clone lowerpath
[  746.796253][T30175] overlayfs: failed to clone lowerpath
[  746.811541][T30175] overlayfs: failed to clone lowerpath
[  746.825320][T30179] rust_binder: 137: no such ref 3
[  746.834932][T30175] overlayfs: failed to clone lowerpath
[  746.856097][T30175] overlayfs: failed to clone lowerpath
[  746.866869][T30175] overlayfs: failed to clone lowerpath
[  746.888178][T30175] overlayfs: failed to clone lowerpath
[  746.908759][T30175] overlayfs: failed to clone lowerpath
[  746.930580][T30175] overlayfs: failed to clone lowerpath
[  746.949861][T30175] overlayfs: failed to clone lowerpath
[  746.967100][T30175] overlayfs: failed to clone lowerpath
[  746.985747][T30175] overlayfs: failed to clone lowerpath
[  747.011008][T30175] overlayfs: failed to clone lowerpath
[  747.024362][T30175] overlayfs: failed to clone lowerpath
[  747.046435][T30175] overlayfs: failed to clone lowerpath
[  747.064077][T30175] overlayfs: failed to clone lowerpath
[  747.077435][T30175] overlayfs: failed to clone lowerpath
[  747.097602][T30175] overlayfs: failed to clone lowerpath
[  747.110806][T30175] overlayfs: failed to clone lowerpath
[  747.119364][T30175] overlayfs: failed to clone lowerpath
[  747.127086][T30175] overlayfs: failed to clone lowerpath
[  747.140507][T30175] overlayfs: failed to clone lowerpath
[  747.149101][T30175] overlayfs: failed to clone lowerpath
[  747.160801][T30175] overlayfs: failed to clone lowerpath
[  747.178002][T30175] overlayfs: failed to clone lowerpath
[  747.196294][T30175] overlayfs: failed to clone lowerpath
[  747.210483][T30175] overlayfs: failed to clone lowerpath
[  747.222365][T30175] overlayfs: failed to clone lowerpath
[  747.227051][T30194] binder: Unknown parameter 'stk\global'
[  747.236278][T30175] overlayfs: failed to clone lowerpath
[  747.256908][T30175] overlayfs: failed to clone lowerpath
[  747.276037][T30175] overlayfs: failed to clone lowerpath
[  747.293016][T30175] overlayfs: failed to clone lowerpath
[  747.387972][T30197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9822'.
[  747.437052][T30199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  747.494300][T30202] netlink: 'syz.1.9821': attribute type 2 has an invalid length.
[  747.518952][T30206] overlayfs: failed to clone lowerpath
[  747.544238][T17630] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  747.581690][T30210] binder: Bad value for 'stats'
[  747.693708][T17630] usb 5-1: device descriptor read/64, error -71
[  747.701129][T30227] 9pnet_fd: Insufficient options for proto=fd
[  747.970617][T17630] usb 5-1: device descriptor read/64, error -71
[  748.226407][T17630] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  748.375685][T17630] usb 5-1: device descriptor read/64, error -71
[  748.644282][T17630] usb 5-1: device descriptor read/64, error -71
[  748.706023][  T442] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  748.759582][T17630] usb usb5-port1: attempt power cycle
[  748.899289][  T442] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  748.920631][  T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.928736][  T442] usb 2-1: Product: syz
[  748.951196][  T442] usb 2-1: Manufacturer: syz
[  748.955858][  T442] usb 2-1: SerialNumber: syz
[  749.121726][T17630] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  749.158685][T17630] usb 5-1: device descriptor read/8, error -71
[  749.307401][T17630] usb 5-1: device descriptor read/8, error -71
[  749.569389][T17630] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  749.592920][T17630] usb 5-1: device descriptor read/8, error -71
[  749.731690][T17630] usb 5-1: device descriptor read/8, error -71
[  749.846600][T17630] usb usb5-port1: unable to enumerate USB device
[  749.970852][   T36] kauditd_printk_skb: 796 callbacks suppressed
[  749.970871][   T36] audit: type=1400 audit(2000000155.082:68872): avc:  denied  { mounton } for  pid=30296 comm="syz.0.9860" path="/155/file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  750.000978][   T36] audit: type=1400 audit(2000000155.082:68873): avc:  denied  { create } for  pid=30296 comm="syz.0.9860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  750.022417][   T36] audit: type=1400 audit(2000000155.091:68874): avc:  denied  { connect } for  pid=30296 comm="syz.0.9860" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  750.044028][   T36] audit: type=1400 audit(2000000155.091:68875): avc:  denied  { write } for  pid=30296 comm="syz.0.9860" laddr=fe80::13 lport=60 faddr=fe80::bb fport=19970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  750.068276][   T36] audit: type=1400 audit(2000000155.129:68876): avc:  denied  { create } for  pid=30300 comm="syz.0.9861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  750.088226][   T36] audit: type=1400 audit(2000000155.129:68877): avc:  denied  { write } for  pid=30300 comm="syz.0.9861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  750.109356][   T36] audit: type=1400 audit(2000000155.129:68878): avc:  denied  { create } for  pid=30300 comm="syz.0.9861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  750.132086][   T36] audit: type=1400 audit(2000000155.232:68879): avc:  denied  { mounton } for  pid=30304 comm="syz.0.9862" path="/157/file0" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  750.241292][   T36] audit: type=1400 audit(2000000155.335:68880): avc:  denied  { create } for  pid=30314 comm="syz.0.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  750.305986][   T36] audit: type=1400 audit(2000000155.401:68881): avc:  denied  { create } for  pid=30318 comm="syz.0.9866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  750.688224][T30342] rust_binder: Write failure EFAULT in pid:151
[  751.010969][T30367] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  751.319683][T30385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9888'.
[  751.679292][  T408] usb 2-1: USB disconnect, device number 28
[  751.834927][ T1222] syzkaller0: tun_net_xmit 76
[  751.839817][ T1222] syzkaller0: tun_net_xmit 48
[  751.861060][T17631] syzkaller0: tun_net_xmit 76
[  752.023364][T30426] 9pnet_fd: Insufficient options for proto=fd
[  752.107065][T17630] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  752.296887][T17630] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  752.306510][T17630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.315703][T17630] usb 5-1: Product: syz
[  752.320853][T17630] usb 5-1: Manufacturer: syz
[  752.325577][T17630] usb 5-1: SerialNumber: syz
[  752.682023][T17630] syzkaller0: tun_net_xmit 76
[  752.832293][T30470] cgroup: Bad value for 'name'
[  752.927525][T30473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9921'.
[  752.937795][T17631] syzkaller0: tun_net_xmit 76
[  753.010758][T30477] netlink: 'syz.0.9922': attribute type 13 has an invalid length.
[  753.024164][T17630] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  753.087125][T30484] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9924'.
[  753.195821][T17630] usb 2-1: No LPM exit latency info found, disabling LPM.
[  753.205365][T17630] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8
[  753.216287][T17630] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  753.233963][T17630] usb 2-1: string descriptor 0 read error: -22
[  753.240223][T17630] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  753.249488][T17630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.260962][T30463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  753.499745][T17630] usbhid 2-1:1.0: can't add hid device: -71
[  753.505851][T17630] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  753.518084][T17630] usb 2-1: USB disconnect, device number 29
[  753.740752][T30486] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  753.756152][T30486] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  754.060510][T30494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9930'.
[  754.070523][T30494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9930'.
[  754.081445][T30494] /dev/rnullb0: Can't lookup blockdev
[  754.119616][T30496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  754.119653][T30496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31
[  754.132019][T30498] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  754.142107][T30497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  754.148651][T30497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31
[  754.228443][T30502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  754.237574][T30502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:37
[  754.371928][T30509] tipc: Started in network mode
[  754.386040][T30509] tipc: Node identity 7f000001, cluster identity 4711
[  754.394497][T30509] tipc: Enabled bearer <udp:syz2>, priority 10
[  754.409518][T30509] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  754.417886][T30509] tipc: Enabled bearer <udp:syz0>, priority 10
[  754.559097][T30521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  754.559134][T30521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[  754.749660][T30533] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  754.778744][T30533] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  754.906292][T30540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30540 comm=syz.0.9947
[  754.967862][  T408] usb 5-1: USB disconnect, device number 22
[  755.101324][ T1244] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  755.263890][ T1244] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  755.274048][ T1244] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  755.284813][ T1244] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  755.293928][ T1244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  755.301919][ T1244] usb 2-1: SerialNumber: syz
[  755.310105][   T36] kauditd_printk_skb: 854 callbacks suppressed
[  755.310125][   T36] audit: type=1400 audit(2000000160.092:69736): avc:  denied  { ioctl } for  pid=30534 comm="syz.1.9945" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.342961][   T36] audit: type=1400 audit(2000000160.092:69737): avc:  denied  { ioctl } for  pid=30534 comm="syz.1.9945" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.368843][   T36] audit: type=1400 audit(2000000160.101:69738): avc:  denied  { ioctl } for  pid=30534 comm="syz.1.9945" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.394080][   T36] audit: type=1400 audit(2000000160.148:69739): avc:  denied  { ioctl } for  pid=30547 comm="syz.4.9950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.431707][T17631] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  755.440066][   T36] audit: type=1400 audit(2000000160.205:69740): avc:  denied  { ioctl } for  pid=30547 comm="syz.4.9950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.465345][   T36] audit: type=1400 audit(2000000160.205:69741): avc:  denied  { ioctl } for  pid=30547 comm="syz.4.9950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.492443][   T36] audit: type=1400 audit(2000000160.205:69742): avc:  denied  { ioctl } for  pid=30547 comm="syz.4.9950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.519511][   T36] audit: type=1400 audit(2000000160.280:69743): avc:  denied  { execmem } for  pid=30549 comm="syz.0.9951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  755.541678][   T36] audit: type=1400 audit(2000000160.280:69744): avc:  denied  { execute } for  pid=30549 comm="syz.0.9951" path="/dev/rnullb0" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  755.565638][   T36] audit: type=1400 audit(2000000160.289:69745): avc:  denied  { ioctl } for  pid=30547 comm="syz.4.9950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  755.591531][T17630] tipc: Node number set to 2130706433
[  755.613504][T17631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.624984][T17631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.635255][T17631] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  755.644343][T17631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.656594][T17631] usb 5-1: config 0 descriptor??
[  755.778588][T30561] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  755.801484][T30561] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  755.882673][T17631] usbhid 5-1:0.0: can't add hid device: -71
[  755.899787][T17631] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  755.916606][T17631] usb 5-1: USB disconnect, device number 23
[  756.301858][T30578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30578 comm=syz.2.9960
[  756.319388][T30578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30578 comm=syz.2.9960
[  756.335267][T30578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=30578 comm=syz.2.9960
[  756.354278][T30578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30578 comm=syz.2.9960
[  756.366970][  T408] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  756.535272][  T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  756.547662][  T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.557677][  T408] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  756.562123][T30588] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  756.569175][  T408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.587176][  T408] usb 5-1: config 0 descriptor??
[  756.603721][  T408] hub 5-1:0.0: USB hub found
[  757.037292][  T408] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  757.277355][T30548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.286171][T30548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.300408][  T408] usbhid 5-1:0.0: can't add hid device: -71
[  757.306447][  T408] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  757.340902][  T408] usb 5-1: USB disconnect, device number 24
[  757.469942][T30614] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  757.994481][ T1244] usb 2-1: 0:2 : does not exist
[  758.033602][ T1244] usb 2-1: USB disconnect, device number 30
[  758.050029][T30643] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  758.139628][T11830] Bluetooth: hci0: Frame reassembly failed (-84)
[  758.160291][   T45] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  758.190513][T29437] udevd[29437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  758.365922][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  758.377815][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  758.387716][   T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  758.400751][   T45] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  758.409952][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.427845][   T45] usb 5-1: config 0 descriptor??
[  758.512049][ T1244] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  758.682571][ T1244] usb 2-1: Using ep0 maxpacket: 32
[  758.690951][ T1244] usb 2-1: unable to get BOS descriptor or descriptor too short
[  758.701760][ T1244] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  758.711355][ T1244] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  758.721758][ T1244] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  758.730867][ T1244] usb 2-1: config 128 has no interface number 0
[  758.737333][ T1244] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  758.748604][ T1244] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  758.758730][ T1244] usb 2-1: config 128 interface 127 has no altsetting 0
[  758.769248][ T1244] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  758.778328][ T1244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.786386][ T1244] usb 2-1: Product: syz
[  758.790605][ T1244] usb 2-1: Manufacturer: syz
[  758.795214][ T1244] usb 2-1: SerialNumber: syz
[  759.037192][ T1244] usb 2-1: USB disconnect, device number 31
[  759.085450][   T45] usbhid 5-1:0.0: can't add hid device: -71
[  759.103218][   T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  759.114632][   T45] usb 5-1: USB disconnect, device number 25
[  759.143831][T29437] udevd[29437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  759.312562][T30641] rust_binder: Write failure EFAULT in pid:186
[  759.420576][T30664] netlink: 182 bytes leftover after parsing attributes in process `syz.4.9990'.
[  759.516828][T30667] rust_binder: Write failure EINVAL in pid:193
[  759.657812][T30672] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  759.760899][T11830] syzkaller0: tun_net_xmit 76
[  759.765752][T11830] syzkaller0: tun_net_xmit 48
[  759.776528][T30679] syzkaller0: create flow: hash 1311091673 index 1
[  759.789696][T30679] syzkaller0: delete flow: hash 1311091673 index 1
[  759.830895][T30685] overlayfs: failed to clone upperpath
[  760.060117][T30704] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  760.149308][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10006'.
[  760.270774][ T1070] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  760.522014][T30713] /dev/rnullb0: Can't lookup blockdev
[  760.643860][   T36] kauditd_printk_skb: 696 callbacks suppressed
[  760.643879][   T36] audit: type=1400 audit(2000000165.093:70442): avc:  denied  { read open } for  pid=30720 comm="syz.4.10010" path="/dev/vsock" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  760.675052][   T36] audit: type=1400 audit(2000000165.102:70443): avc:  denied  { ioctl } for  pid=30720 comm="syz.4.10010" path="/dev/vsock" dev="devtmpfs" ino=208 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  760.701250][   T36] audit: type=1400 audit(2000000165.121:70444): avc:  denied  { read write } for  pid=29516 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  760.738241][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10011'.
[  760.747403][   T36] audit: type=1400 audit(2000000165.121:70445): avc:  denied  { read write open } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  760.773779][T30723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10011'.
[  760.793472][   T36] audit: type=1400 audit(2000000165.121:70446): avc:  denied  { ioctl } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  760.830022][   T36] audit: type=1400 audit(2000000165.177:70447): avc:  denied  { read } for  pid=30722 comm="syz.4.10011" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  760.874285][   T36] audit: type=1400 audit(2000000165.177:70448): avc:  denied  { read open } for  pid=30722 comm="syz.4.10011" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  760.911906][   T36] audit: type=1400 audit(2000000165.177:70449): avc:  denied  { create } for  pid=30722 comm="syz.4.10011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  760.945196][T30729] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  760.951852][   T36] audit: type=1400 audit(2000000165.177:70450): avc:  denied  { write } for  pid=30722 comm="syz.4.10011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  760.975571][   T36] audit: type=1400 audit(2000000165.177:70451): avc:  denied  { write } for  pid=30722 comm="syz.4.10011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  761.244584][T30731] bridge0: port 3(veth1_to_batadv) entered blocking state
[  761.253091][T30731] bridge0: port 3(veth1_to_batadv) entered disabled state
[  761.261451][T30731] veth1_to_batadv: entered allmulticast mode
[  761.268623][T30731] veth1_to_batadv: entered promiscuous mode
[  761.275049][T30731] bridge0: port 3(veth1_to_batadv) entered blocking state
[  761.282242][T30731] bridge0: port 3(veth1_to_batadv) entered forwarding state
[  761.412019][T30753] netlink: 'syz.2.10022': attribute type 1 has an invalid length.
[  761.636286][T30767] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  761.991977][T30774] overlayfs: failed to clone upperpath
[  762.193487][T30784] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  762.193517][T30785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  762.201062][T30783] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  762.218393][T30784] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  762.219594][T30783] rust_binder: Write failure EINVAL in pid:221
[  762.266338][T30791] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  762.310605][T30795] fuse: Bad value for 'group_id'
[  762.315768][T30795] fuse: Bad value for 'group_id'
[  762.337713][T30795] rust_binder: Write failure EFAULT in pid:72
[  762.807499][ T1244] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  762.983541][ T1244] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  763.010000][ T1244] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  763.051017][ T1244] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  763.070949][ T1244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  763.087150][ T1244] usb 2-1: SerialNumber: syz
[  763.128229][T30824] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  763.149018][T30825] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 1176, size: 4096)
[  763.149046][T30825] rust_binder: Error while translating object.
[  763.159881][T30825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  763.166080][T30825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224
[  763.254952][T30831] netlink: 8540 bytes leftover after parsing attributes in process `syz.0.10049'.
[  763.273620][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10049'.
[  763.282693][T30831] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10049'.
[  763.335644][T30811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  763.346805][T30811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  763.368550][T30811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  763.419383][T30811] syzkaller0: entered promiscuous mode
[  763.425031][T30811] syzkaller0: entered allmulticast mode
[  763.447001][T30811] tipc: Resetting bearer <eth:syzkaller0>
[  763.461153][T30810] tipc: Resetting bearer <eth:syzkaller0>
[  763.474828][ T1244] usb 2-1: USB disconnect, device number 32
[  763.507996][T30810] tipc: Disabling bearer <eth:syzkaller0>
[  763.582232][T30850] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  763.619523][T29437] udevd[29437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  763.717386][T30861] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  763.758228][T30863] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10061'.
[  763.975986][T30888] 9pnet_fd: Insufficient options for proto=fd
[  764.175590][T30903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82
[  764.178127][T30904] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  764.189115][T30905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82
[  764.190889][T30907] devpts: called with bogus options
[  764.250693][T30911] overlayfs: failed to resolve './file0': -2
[  764.365153][T30918] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  764.462385][T30929] 9pnet_fd: Insufficient options for proto=fd
[  764.526634][T30934] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10088'.
[  764.536026][T30934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  765.224595][T30946] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  765.262587][T30948] fuse: Bad value for 'fd'
[  765.272805][T30948] netlink: 288 bytes leftover after parsing attributes in process `syz.2.10093'.
[  765.440204][    T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  765.603575][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  765.613264][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  765.621229][    T9] usb 2-1: no configurations
[  765.627982][    T9] usb 2-1: can't read configurations, error -22
[  765.634431][T30971] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  765.696857][T30975] warn_alloc: 1 callbacks suppressed
[  765.696878][T30975] syz.4.10102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  765.706453][T30973] netlink: 'syz.2.10103': attribute type 12 has an invalid length.
[  765.713312][T30975] ,cpuset=
[  765.723107][T30973] 9pnet_fd: Insufficient options for proto=fd
[  765.745254][T30975] syz4,mems_allowed=0
[  765.752158][T30975] CPU: 0 UID: 0 PID: 30975 Comm: syz.4.10102 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  765.752201][T30975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  765.752244][T30975] Call Trace:
[  765.752253][T30975]  <TASK>
[  765.752264][T30975]  __dump_stack+0x21/0x30
[  765.752306][T30975]  dump_stack_lvl+0x10c/0x190
[  765.752341][T30975]  ? __cfi_dump_stack_lvl+0x10/0x10
[  765.752379][T30975]  dump_stack+0x19/0x20
[  765.752410][T30975]  warn_alloc+0x1bc/0x2a0
[  765.752443][T30975]  ? stack_depot_save_flags+0x38/0x800
[  765.752470][T30975]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  765.752504][T30975]  ? __cfi_warn_alloc+0x10/0x10
[  765.752539][T30975]  ? kasan_save_track+0x4f/0x80
[  765.752566][T30975]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  765.752590][T30975]  ? xskq_create+0x68/0x2a0
[  765.752624][T30975]  ? xsk_init_queue+0xb6/0x120
[  765.752656][T30975]  ? xsk_setsockopt+0x43f/0x6f0
[  765.752687][T30975]  ? do_sock_setsockopt+0x26d/0x400
[  765.752721][T30975]  ? __x64_sys_setsockopt+0x1b8/0x250
[  765.752754][T30975]  ? x64_sys_call+0x2adc/0x2ee0
[  765.752792][T30975]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  765.752833][T30975]  __vmalloc_node_range_noprof+0x135/0x1420
[  765.752874][T30975]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  765.752910][T30975]  ? avc_has_perm+0x1f2/0x220
[  765.752944][T30975]  ? kasan_save_alloc_info+0x40/0x50
[  765.752980][T30975]  ? __kasan_kmalloc+0x96/0xb0
[  765.753008][T30975]  vmalloc_user_noprof+0x77/0x90
[  765.753042][T30975]  ? xskq_create+0xdb/0x2a0
[  765.753076][T30975]  xskq_create+0xdb/0x2a0
[  765.753110][T30975]  xsk_init_queue+0xb6/0x120
[  765.753144][T30975]  xsk_setsockopt+0x43f/0x6f0
[  765.753176][T30975]  ? __cfi_xsk_setsockopt+0x10/0x10
[  765.753206][T30975]  ? do_futex+0x309/0x500
[  765.753244][T30975]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  765.753278][T30975]  ? security_socket_setsockopt+0x33/0xd0
[  765.753304][T30975]  ? __cfi_xsk_setsockopt+0x10/0x10
[  765.753338][T30975]  do_sock_setsockopt+0x26d/0x400
[  765.753372][T30975]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  765.753409][T30975]  __x64_sys_setsockopt+0x1b8/0x250
[  765.753452][T30975]  x64_sys_call+0x2adc/0x2ee0
[  765.753489][T30975]  do_syscall_64+0x58/0xf0
[  765.753519][T30975]  ? clear_bhb_loop+0x50/0xa0
[  765.753543][T30975]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  765.753583][T30975] RIP: 0033:0x7f0916b8eec9
[  765.753604][T30975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  765.753628][T30975] RSP: 002b:00007f09179b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  765.753657][T30975] RAX: ffffffffffffffda RBX: 00007f0916de5fa0 RCX: 00007f0916b8eec9
[  765.753678][T30975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  765.753696][T30975] RBP: 00007f0916c11f91 R08: 0000000000000004 R09: 0000000000000000
[  765.753714][T30975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  765.753733][T30975] R13: 00007f0916de6038 R14: 00007f0916de5fa0 R15: 00007ffc912660d8
[  765.753757][T30975]  </TASK>
[  765.753767][T30975] Mem-Info:
[  766.058785][T30975] active_anon:39683 inactive_anon:23 isolated_anon:0
[  766.058785][T30975]  active_file:8133 inactive_file:16891 isolated_file:0
[  766.058785][T30975]  unevictable:16393 dirty:105 writeback:0
[  766.058785][T30975]  slab_reclaimable:5802 slab_unreclaimable:87880
[  766.058785][T30975]  mapped:24993 shmem:32981 pagetables:1006
[  766.058785][T30975]  sec_pagetables:0 bounce:0
[  766.058785][T30975]  kernel_misc_reclaimable:0
[  766.058785][T30975]  free:1448222 free_pcp:4602 free_cma:0
[  766.058816][    T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  766.059731][   T36] kauditd_printk_skb: 776 callbacks suppressed
[  766.060741][   T36] audit: type=1400 audit(2000000170.178:71228): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.105004][T30975] Node 0 active_anon:158732kB inactive_anon:92kB active_file:32532kB inactive_file:67564kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:99972kB dirty:420kB writeback:0kB shmem:131924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8892kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no
[  766.111966][   T36] audit: type=1400 audit(2000000170.178:71229): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.118861][T30975] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:1820kB free_cma:0kB
[  766.144011][   T36] audit: type=1400 audit(2000000170.178:71230): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.181356][T30975] lowmem_reserve[]:
[  766.202118][   T36] audit: type=1400 audit(2000000170.262:71231): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.232277][T30975]  0
[  766.272996][   T36] audit: type=1400 audit(2000000170.375:71232): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.285013][T30975]  3921
[  766.289549][   T36] audit: type=1400 audit(2000000170.375:71233): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.320701][T30975]  3921
[  766.343438][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  766.346962][   T36] audit: type=1400 audit(2000000170.394:71234): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.347071][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  766.351522][T30975] Normal free:2841796kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:158760kB inactive_anon:92kB active_file:32532kB inactive_file:67564kB unevictable:65572kB writepending:420kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3940kB local_pcp:3748kB free_cma:0kB
[  766.386053][T30975] lowmem_reserve[]:
[  766.416510][    T9] usb 2-1: no configurations
[  766.418956][T30975]  0
[  766.420352][    T9] usb 2-1: can't read configurations, error -22
[  766.421271][    T9] usb usb2-port1: attempt power cycle
[  766.426730][T30975]  0
[  766.428748][   T36] audit: type=1400 audit(2000000170.394:71235): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.435180][T30975]  0
[  766.439280][   T36] audit: type=1400 audit(2000000170.394:71236): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.441812][T30975] 
[  766.466949][   T36] audit: type=1400 audit(2000000170.440:71237): avc:  denied  { ioctl } for  pid=30940 comm="syz.1.10090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  766.471547][T30975] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  766.543331][T30975] Normal: 183*4kB (UME) 133*8kB (UME) 244*16kB (UME) 332*32kB (UME) 59*64kB (UME) 46*128kB (UME) 199*256kB (UME) 128*512kB (UME) 46*1024kB (UME) 11*2048kB (ME) 642*4096kB (UM) = 2841732kB
[  766.563406][T30975] 74498 total pagecache pages
[  766.568948][T30975] 103 pages in swap cache
[  766.573369][T30975] Free swap  = 124048kB
[  766.577744][T30975] Total swap = 124996kB
[  766.582938][T30975] 2097051 pages RAM
[  766.587646][T30975] 0 pages HighMem/MovableOnly
[  766.593664][T30975] 351537 pages reserved
[  766.597849][T30975] 0 pages cma reserved
[  766.607130][T30975] Memory allocations:
[  766.611175][T30975]          0 B        0 init/main.c:1370 func:do_initcalls
[  766.619542][T30975]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  766.628206][T30975]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  766.637002][T30975]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  766.645776][T30975]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  766.656178][T30975]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  766.665511][T30975]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  766.675274][T30975]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  766.684618][T30975]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  766.696008][T30975]          0 B        0 init/initramfs.c:101 func:find_link
[  766.783200][    T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  766.834914][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  766.844478][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  766.854359][    T9] usb 2-1: no configurations
[  766.865071][    T9] usb 2-1: can't read configurations, error -22
[  766.940703][T31006] No source specified
[  766.952684][T31006] binder: Bad value for 'max'
[  767.028890][    T9] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  767.075643][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  767.094219][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  767.107976][    T9] usb 2-1: no configurations
[  767.112687][    T9] usb 2-1: can't read configurations, error -22
[  767.144909][    T9] usb usb2-port1: unable to enumerate USB device
[  767.290271][T31023] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10119'.
[  767.882229][T31072] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  767.882262][T31072] rust_binder: Error while translating object.
[  767.894649][T31072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  767.908093][T31072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260
[  767.990141][T31083] rust_binder: Error while translating object.
[  767.999430][T31083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  768.005797][T31083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262
[  768.220037][T31100] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  768.334708][T31107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  768.990676][T31135] random: crng reseeded on system resumption
[  769.202695][    T9] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  769.281650][T31135] 9pnet_fd: Insufficient options for proto=fd
[  769.379219][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  769.393373][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  769.406933][    T9] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  769.417447][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.428289][    T9] usb 5-1: config 0 descriptor??
[  769.460181][T31138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  769.469921][    T9] usbhid 5-1:0.0: can't add hid device: -22
[  769.475950][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  769.597082][T31178] overlayfs: failed to resolve './file0': -2
[  769.710903][  T442] usb 5-1: USB disconnect, device number 26
[  769.778708][T31187] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  769.942536][T31199] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  769.950798][T31199] rust_binder: Write failure EINVAL in pid:110
[  769.985382][T31201] rust_binder: Read failure Err(EAGAIN) in pid:112
[  770.051279][T31205] overlayfs: failed to resolve './file1': -2
[  770.250697][T31212] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  770.624474][T31235] 8021q: VLANs not supported on wg0
[  770.903512][T31253] cgroup: Invalid name
[  771.408854][T31277] binder: Unknown parameter 'fscontext?}'
[  771.414724][   T36] kauditd_printk_skb: 753 callbacks suppressed
[  771.414746][   T36] audit: type=1400 audit(2000000175.189:71991): avc:  denied  { mounton } for  pid=31276 comm="syz.4.10210" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  771.455914][   T36] audit: type=1400 audit(2000000175.236:71992): avc:  denied  { read write } for  pid=29516 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  771.480430][   T36] audit: type=1400 audit(2000000175.236:71993): avc:  denied  { read write open } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  771.506396][   T36] audit: type=1400 audit(2000000175.236:71994): avc:  denied  { ioctl } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  771.533689][   T36] audit: type=1400 audit(2000000175.293:71995): avc:  denied  { read } for  pid=31278 comm="syz.4.10211" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  771.556835][   T36] audit: type=1400 audit(2000000175.293:71996): avc:  denied  { read open } for  pid=31278 comm="syz.4.10211" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  771.574057][T31279] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  771.602063][T31279] rust_binder: Write failure EINVAL in pid:288
[  771.602168][   T36] audit: type=1400 audit(2000000175.293:71997): avc:  denied  { mounton } for  pid=31278 comm="syz.4.10211" path="/103/file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  771.633169][   T36] audit: type=1400 audit(2000000175.311:71998): avc:  denied  { mount } for  pid=31278 comm="syz.4.10211" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  771.656886][   T36] audit: type=1400 audit(2000000175.311:71999): avc:  denied  { read } for  pid=31278 comm="syz.4.10211" dev="nsfs" ino=4026533824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  771.683411][   T36] audit: type=1400 audit(2000000175.339:72000): avc:  denied  { read open } for  pid=31278 comm="syz.4.10211" path="net:[4026533824]" dev="nsfs" ino=4026533824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  771.818917][T31291] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  771.898987][   T45] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  772.047794][T31299] fuse: Unknown parameter 'goup_id'
[  772.053302][   T45] usb 2-1: device descriptor read/64, error -71
[  772.061098][T31299] fuse: Bad value for 'user_id'
[  772.066004][T31299] fuse: Bad value for 'user_id'
[  772.081093][T31299] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  772.188698][T31303] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  772.196944][T31303] rust_binder: Write failure EINVAL in pid:306
[  772.314650][   T45] usb 2-1: device descriptor read/64, error -71
[  772.422681][T31312] netlink: 'syz.0.10225': attribute type 32 has an invalid length.
[  772.439039][T31312] netlink: 'syz.0.10225': attribute type 32 has an invalid length.
[  772.454281][T31312] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  772.581089][   T45] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  772.667659][   T31] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  772.730293][   T45] usb 2-1: device descriptor read/64, error -71
[  772.739867][T31327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10232'.
[  772.749099][T31327] netlink: 35 bytes leftover after parsing attributes in process `syz.0.10232'.
[  772.758802][T31327] netlink: 'syz.0.10232': attribute type 6 has an invalid length.
[  772.767460][T31327] netlink: 'syz.0.10232': attribute type 5 has an invalid length.
[  772.775333][T31327] netlink: 35 bytes leftover after parsing attributes in process `syz.0.10232'.
[  772.847502][   T31] usb 5-1: Invalid ep0 maxpacket: 64
[  772.986061][   T45] usb 2-1: device descriptor read/64, error -71
[  772.992471][   T31] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  773.103399][   T45] usb usb2-port1: attempt power cycle
[  773.156596][   T31] usb 5-1: Invalid ep0 maxpacket: 64
[  773.162032][   T31] usb usb5-port1: attempt power cycle
[  773.465626][   T45] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  773.490445][   T45] usb 2-1: device descriptor read/8, error -71
[  773.529597][   T31] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  773.552758][   T31] usb 5-1: Invalid ep0 maxpacket: 64
[  773.628476][   T45] usb 2-1: device descriptor read/8, error -71
[  773.700093][   T31] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  773.722616][   T31] usb 5-1: Invalid ep0 maxpacket: 64
[  773.728521][   T31] usb usb5-port1: unable to enumerate USB device
[  773.881289][   T45] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  773.904965][   T45] usb 2-1: device descriptor read/8, error -71
[  773.968816][T31366] 9pnet: Could not find request transport: ����m�=0xffffffffffffffff
[  774.045569][   T45] usb 2-1: device descriptor read/8, error -71
[  774.170751][   T45] usb usb2-port1: unable to enumerate USB device
[  774.206405][T31383] 9pnet: Could not find request transport: f
[  774.381257][T31399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1555 sclass=netlink_route_socket pid=31399 comm=syz.2.10261
[  774.799768][T31429] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  775.047541][T31437] netlink: 'syz.2.10274': attribute type 29 has an invalid length.
[  775.055606][T31437] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10274'.
[  775.169758][T31445] fuse: Bad value for 'fd'
[  775.256399][   T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  775.426557][   T45] usb 2-1: Using ep0 maxpacket: 8
[  775.435690][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[  775.448438][   T45] usb 2-1: config 6 has an invalid interface number: 123 but max is 0
[  775.456667][   T45] usb 2-1: config 6 has no interface number 0
[  775.464427][   T45] usb 2-1: too many endpoints for config 6 interface 123 altsetting 105: 70, using maximum allowed: 30
[  775.476458][   T45] usb 2-1: config 6 interface 123 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 70
[  775.491903][   T45] usb 2-1: config 6 interface 123 has no altsetting 0
[  775.504248][   T45] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01
[  775.513869][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.521955][   T45] usb 2-1: Product: syz
[  775.526743][   T45] usb 2-1: Manufacturer: syz
[  775.533982][   T45] usb 2-1: SerialNumber: syz
[  775.778958][   T45] usb 2-1: USB disconnect, device number 41
[  775.929262][T31488] veth1_macvtap: left promiscuous mode
[  775.944418][T31488] macsec0: entered promiscuous mode
[  775.962167][T31487] veth1_macvtap: entered promiscuous mode
[  775.968137][T31487] macsec0: left promiscuous mode
[  776.023413][T31488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=31488 comm=syz.4.10293
[  776.157057][T31493] netlink: 'syz.1.10295': attribute type 4 has an invalid length.
[  776.250335][T31497] 9pnet_fd: Insufficient options for proto=fd
[  776.403811][T31509] overlayfs: missing 'lowerdir'
[  776.547342][T31514] binder: Bad value for 'max'
[  776.736753][T31533] overlayfs: missing 'lowerdir'
[  776.762364][   T36] kauditd_printk_skb: 642 callbacks suppressed
[  776.762384][   T36] audit: type=1400 audit(2000000181.214:72643): avc:  denied  { read write } for  pid=30123 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  776.793427][   T36] audit: type=1400 audit(2000000181.214:72644): avc:  denied  { read write open } for  pid=30123 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  776.801452][    T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  776.820748][   T36] audit: type=1400 audit(2000000181.214:72645): avc:  denied  { ioctl } for  pid=30123 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  776.852756][   T36] audit: type=1400 audit(2000000181.242:72646): avc:  denied  { mounton } for  pid=31534 comm="syz.1.10313" path="/65/file0" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  776.879306][   T36] audit: type=1400 audit(2000000181.252:72647): avc:  denied  { mount } for  pid=31534 comm="syz.1.10313" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  776.903368][   T36] audit: type=1400 audit(2000000181.252:72648): avc:  denied  { read } for  pid=31534 comm="syz.1.10313" dev="nsfs" ino=4026532725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  776.922608][T31538] netlink: 'syz.1.10315': attribute type 1 has an invalid length.
[  776.931815][T31539] netlink: 'syz.1.10315': attribute type 4 has an invalid length.
[  776.933223][   T36] audit: type=1400 audit(2000000181.252:72649): avc:  denied  { read open } for  pid=31534 comm="syz.1.10313" path="net:[4026532725]" dev="nsfs" ino=4026532725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  776.955485][T31541] 9pnet_fd: Insufficient options for proto=fd
[  776.965460][   T36] audit: type=1400 audit(2000000181.252:72650): avc:  denied  { create } for  pid=31534 comm="syz.1.10313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  776.990895][   T36] audit: type=1400 audit(2000000181.252:72651): avc:  denied  { connect } for  pid=31534 comm="syz.1.10313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  777.007804][T31539] netlink: 'syz.1.10315': attribute type 17 has an invalid length.
[  777.020331][   T36] audit: type=1400 audit(2000000181.252:72652): avc:  denied  { shutdown } for  pid=31534 comm="syz.1.10313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  777.059918][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  777.071096][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  777.084026][    T9] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  777.093362][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.110650][    T9] usb 5-1: config 0 descriptor??
[  777.123042][T31515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  777.145811][T11835] syzkaller0: tun_net_xmit 76
[  777.150744][T11835] syzkaller0: tun_net_xmit 48
[  777.157660][    T9] usbhid 5-1:0.0: can't add hid device: -22
[  777.163255][T31549] syzkaller0: create flow: hash 1311091673 index 1
[  777.163672][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  777.178094][T17631] syzkaller0: tun_net_xmit 76
[  777.186038][T31548] syzkaller0: delete flow: hash 1311091673 index 1
[  777.293984][T31563] overlayfs: missing 'lowerdir'
[  777.475328][T31577] overlayfs: missing 'lowerdir'
[  777.812093][T31589] overlayfs: missing 'lowerdir'
[  778.049559][T31607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.064256][T31607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.103558][T31607] __vm_enough_memory: pid: 31607, comm: syz.4.10337, bytes: 18014402804453376 not enough memory for the allocation
[  778.207091][T31616] overlayfs: missing 'lowerdir'
[  778.403939][T31629] tmpfs: Unknown parameter 'h�zh��Y��f�uge'
[  778.532986][T31643] overlayfs: missing 'lowerdir'
[  778.634748][   T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  778.799813][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  778.838188][   T45] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  778.850702][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.866213][   T45] usb 2-1: Product: syz
[  778.871480][   T45] usb 2-1: Manufacturer: syz
[  778.877229][   T45] usb 2-1: SerialNumber: syz
[  778.886598][   T45] usb 2-1: config 0 descriptor??
[  778.894426][T31662] overlayfs: failed to clone upperpath
[  779.072451][T31667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.091699][T31668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.101201][T31667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.114177][T31668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.137389][T31626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=31626 comm=syz.1.10345
[  779.158324][   T45] usb 2-1: USB disconnect, device number 42
[  779.247968][T29974] udevd[29974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  779.373676][T31682] netlink: 'syz.2.10366': attribute type 6 has an invalid length.
[  779.381566][T31682] netlink: 'syz.2.10366': attribute type 4 has an invalid length.
[  779.389591][T31682] netlink: 'syz.2.10366': attribute type 6 has an invalid length.
[  779.397460][T31682] netlink: 5944 bytes leftover after parsing attributes in process `syz.2.10366'.
[  779.733494][T31694] random: crng reseeded on system resumption
[  779.975715][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.985474][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.997644][T11829] Bluetooth: hci0: Frame reassembly failed (-84)
[  780.501831][T31707] overlayfs: missing 'workdir'
[  780.718648][T31727] overlayfs: missing 'workdir'
[  780.775349][T31731] netlink: 'syz.2.10388': attribute type 4 has an invalid length.
[  780.786380][T31731] netlink: 'syz.2.10388': attribute type 4 has an invalid length.
[  780.873501][T31736] 9pnet_fd: Insufficient options for proto=fd
[  781.054582][T31744] usb usb8: usbfs: process 31744 (syz.1.10394) did not claim interface 0 before use
[  781.099314][T31750] overlayfs: missing 'workdir'
[  781.102959][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  781.114518][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  781.125007][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  781.139961][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  781.149717][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  781.168488][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  781.183410][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  781.195861][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  781.207267][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  781.219522][T31744] kvm: kvm [31743]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  781.605587][T31776] overlayfs: missing 'lowerdir'
[  781.652918][T31778] binder: Bad value for 'defcontext'
[  781.812637][T31784] binder: Unknown parameter '����0x00000000000000030x0000000000000000��0x0000000000000003��������00000000000000000000003'
[  781.891331][T31790] syz.1.10413: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0
[  781.906834][T31790] CPU: 1 UID: 0 PID: 31790 Comm: syz.1.10413 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  781.906874][T31790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  781.906886][T31790] Call Trace:
[  781.906892][T31790]  <TASK>
[  781.906899][T31790]  __dump_stack+0x21/0x30
[  781.906928][T31790]  dump_stack_lvl+0x10c/0x190
[  781.906952][T31790]  ? __cfi_dump_stack_lvl+0x10/0x10
[  781.906977][T31790]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  781.907000][T31790]  dump_stack+0x19/0x20
[  781.907023][T31790]  warn_alloc+0x1bc/0x2a0
[  781.907046][T31790]  ? stack_depot_save_flags+0x38/0x800
[  781.907065][T31790]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  781.907095][T31790]  ? __cfi_warn_alloc+0x10/0x10
[  781.907129][T31790]  ? kasan_save_track+0x4f/0x80
[  781.907155][T31790]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  781.907172][T31790]  ? xskq_create+0x68/0x2a0
[  781.907195][T31790]  ? xsk_init_queue+0xb6/0x120
[  781.907217][T31790]  ? xsk_setsockopt+0x43f/0x6f0
[  781.907239][T31790]  ? do_sock_setsockopt+0x26d/0x400
[  781.907262][T31790]  ? __x64_sys_setsockopt+0x1b8/0x250
[  781.907285][T31790]  ? x64_sys_call+0x2adc/0x2ee0
[  781.907311][T31790]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  781.907340][T31790]  __vmalloc_node_range_noprof+0x135/0x1420
[  781.907370][T31790]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  781.907396][T31790]  ? avc_has_perm+0x1f2/0x220
[  781.907420][T31790]  ? kasan_save_alloc_info+0x40/0x50
[  781.907445][T31790]  ? __kasan_kmalloc+0x96/0xb0
[  781.907466][T31790]  vmalloc_user_noprof+0x77/0x90
[  781.907490][T31790]  ? xskq_create+0xdb/0x2a0
[  781.907513][T31790]  xskq_create+0xdb/0x2a0
[  781.907537][T31790]  xsk_init_queue+0xb6/0x120
[  781.907560][T31790]  xsk_setsockopt+0x43f/0x6f0
[  781.907583][T31790]  ? __cfi_xsk_setsockopt+0x10/0x10
[  781.907605][T31790]  ? do_futex+0x309/0x500
[  781.907624][T31790]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  781.907647][T31790]  ? security_socket_setsockopt+0x33/0xd0
[  781.907664][T31790]  ? __cfi_xsk_setsockopt+0x10/0x10
[  781.907686][T31790]  do_sock_setsockopt+0x26d/0x400
[  781.907710][T31790]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  781.907736][T31790]  __x64_sys_setsockopt+0x1b8/0x250
[  781.907760][T31790]  x64_sys_call+0x2adc/0x2ee0
[  781.907786][T31790]  do_syscall_64+0x58/0xf0
[  781.907806][T31790]  ? clear_bhb_loop+0x50/0xa0
[  781.907824][T31790]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  781.907886][T31790] RIP: 0033:0x7f331e98eec9
[  781.907907][T31790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  781.907923][T31790] RSP: 002b:00007f331f89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  781.907942][T31790] RAX: ffffffffffffffda RBX: 00007f331ebe5fa0 RCX: 00007f331e98eec9
[  781.907956][T31790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  781.907967][T31790] RBP: 00007f331ea11f91 R08: 0000000000000004 R09: 0000000000000000
[  781.907979][T31790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  781.907990][T31790] R13: 00007f331ebe6038 R14: 00007f331ebe5fa0 R15: 00007ffd9dafb528
[  781.908006][T31790]  </TASK>
[  782.213334][T16188] Bluetooth: hci0: command 0x1003 tx timeout
[  782.216151][ T1070] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  782.220809][T31790] Mem-Info:
[  782.228626][T31790] active_anon:40109 inactive_anon:23 isolated_anon:0
[  782.228626][T31790]  active_file:8159 inactive_file:17409 isolated_file:0
[  782.228626][T31790]  unevictable:16393 dirty:174 writeback:0
[  782.228626][T31790]  slab_reclaimable:5674 slab_unreclaimable:87253
[  782.228626][T31790]  mapped:25302 shmem:33067 pagetables:1219
[  782.228626][T31790]  sec_pagetables:0 bounce:0
[  782.228626][T31790]  kernel_misc_reclaimable:0
[  782.228626][T31790]  free:1448873 free_pcp:2199 free_cma:0
[  782.274211][T31790] Node 0 active_anon:160436kB inactive_anon:92kB active_file:32636kB inactive_file:69636kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:101208kB dirty:696kB writeback:0kB shmem:132268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:9216kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no
[  782.307352][T31790] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:1820kB free_cma:0kB
[  782.337356][T31790] lowmem_reserve[]: 0 3921 3921
[  782.342365][T31790] Normal free:2835280kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160436kB inactive_anon:92kB active_file:32636kB inactive_file:69636kB unevictable:65572kB writepending:696kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3600kB local_pcp:1628kB free_cma:0kB
[  782.374333][T31790] lowmem_reserve[]: 0 0 0
[  782.379137][T31790] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  782.394825][T31790] Normal: 180*4kB (UE) 196*8kB (UME) 352*16kB (UME) 227*32kB (UME) 168*64kB (UME) 120*128kB (UME) 156*256kB (UME) 119*512kB (UME) 46*1024kB (UME) 10*2048kB (ME) 641*4096kB (UM) = 2835280kB
[  782.413623][T31790] 74615 total pagecache pages
[  782.418319][T31790] 103 pages in swap cache
[  782.422676][T31790] Free swap  = 124048kB
[  782.426843][T31790] Total swap = 124996kB
[  782.431047][T31790] 2097051 pages RAM
[  782.434873][T31790] 0 pages HighMem/MovableOnly
[  782.439739][T31790] 351537 pages reserved
[  782.443927][T31790] 0 pages cma reserved
[  782.450309][T31790] Memory allocations:
[  782.454372][T31790]          0 B        0 init/main.c:1370 func:do_initcalls
[  782.461649][T31790]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  782.469746][T31790]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  782.477441][T31790]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  782.485380][T31790]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  782.493315][T31790]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  782.501931][T31790]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  782.509866][T31790]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  782.517810][T31790]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  782.525758][T31790]          0 B        0 init/initramfs.c:101 func:find_link
[  782.548289][   T36] kauditd_printk_skb: 1350 callbacks suppressed
[  782.548309][   T36] audit: type=1400 audit(2000000186.646:74003): avc:  denied  { read write } for  pid=30123 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  782.579006][   T36] audit: type=1400 audit(2000000186.646:74004): avc:  denied  { read write open } for  pid=30123 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  782.604321][   T36] audit: type=1400 audit(2000000186.646:74005): avc:  denied  { ioctl } for  pid=30123 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  782.630278][   T36] audit: type=1400 audit(2000000186.665:74006): avc:  denied  { mounton } for  pid=31792 comm="syz.1.10414" path="/98/file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  782.653142][   T36] audit: type=1400 audit(2000000186.675:74007): avc:  denied  { mount } for  pid=31792 comm="syz.1.10414" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  782.696209][   T36] audit: type=1400 audit(2000000186.787:74008): avc:  denied  { read } for  pid=31792 comm="syz.1.10414" dev="nsfs" ino=4026532725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  782.717726][   T36] audit: type=1400 audit(2000000186.787:74009): avc:  denied  { read open } for  pid=31792 comm="syz.1.10414" path="net:[4026532725]" dev="nsfs" ino=4026532725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  782.741772][   T36] audit: type=1400 audit(2000000186.787:74010): avc:  denied  { create } for  pid=31792 comm="syz.1.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  782.762018][   T36] audit: type=1400 audit(2000000186.787:74011): avc:  denied  { connect } for  pid=31792 comm="syz.1.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  782.782337][   T36] audit: type=1400 audit(2000000186.787:74012): avc:  denied  { shutdown } for  pid=31792 comm="syz.1.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  782.903005][T31799] overlayfs: missing 'lowerdir'
[  783.562865][T31831] overlayfs: missing 'lowerdir'
[  784.007852][T31847] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  784.029133][T31849] overlay: Bad value for 'redirect_dir'
[  784.075626][T31854] SELinux: security_context_str_to_sid () failed with errno=-22
[  784.281541][T31863] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  784.290806][T31863] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  784.337129][  T442] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  784.407019][T31867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10443'.
[  784.522694][  T442] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  784.529248][T31878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  784.537573][  T442] usb 2-1: config 0 has no interface number 0
[  784.552739][T31872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.569466][  T442] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  784.569501][T31872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.587173][  T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.596642][  T442] usb 2-1: Product: syz
[  784.600911][  T442] usb 2-1: Manufacturer: syz
[  784.606532][  T442] usb 2-1: SerialNumber: syz
[  784.606719][T31871] tipc: Disabling bearer <eth:syzkaller0>
[  784.619511][  T442] usb 2-1: config 0 descriptor??
[  784.875324][T31888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  784.884136][T31888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  784.938759][T31890] netlink: 'syz.0.10451': attribute type 4 has an invalid length.
[  785.282901][  T442] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  785.293452][  T442] asix 2-1:0.251: probe with driver asix failed with error -524
[  785.330534][T31903] binder: Bad value for 'max'
[  785.481028][T31911] overlayfs: failed to clone upperpath
[  785.499117][T17631] usb 2-1: USB disconnect, device number 43
[  785.622761][T31916] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  785.852423][T31935] overlayfs: failed to clone upperpath
[  786.109616][T31956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  786.117399][T31955] tipc: Disabling bearer <eth:syzkaller0>
[  786.808331][T31991] overlayfs: failed to clone upperpath
[  787.259267][T32010] overlayfs: failed to clone upperpath
[  787.962888][   T36] kauditd_printk_skb: 676 callbacks suppressed
[  787.962908][   T36] audit: type=1400 audit(2000000191.731:74689): avc:  denied  { create } for  pid=32026 comm="syz.2.10505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  787.991051][   T36] audit: type=1400 audit(2000000191.731:74690): avc:  denied  { write } for  pid=32026 comm="syz.2.10505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  788.024755][   T36] audit: type=1400 audit(2000000191.778:74691): avc:  denied  { mounton } for  pid=32031 comm="syz.2.10506" path="/256/bus" dev="tmpfs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  788.025878][T32032] overlayfs: failed to resolve './file1/file0': -2
[  788.092527][   T36] audit: type=1400 audit(2000000191.844:74692): avc:  denied  { mounton } for  pid=32034 comm="syz.2.10507" path="/257/file0" dev="tmpfs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  788.115580][   T36] audit: type=1400 audit(2000000191.844:74693): avc:  denied  { mount } for  pid=32034 comm="syz.2.10507" name="/" dev="incremental-fs" ino=1498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  788.179823][   T36] audit: type=1400 audit(2000000191.928:74694): avc:  denied  { mounton } for  pid=32038 comm="syz.2.10509" path="/259/bus" dev="tmpfs" ino=1513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  788.181188][T32039] overlayfs: failed to clone upperpath
[  788.217239][   T36] audit: type=1400 audit(2000000191.966:74695): avc:  denied  { read write } for  pid=29516 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  788.241965][   T36] audit: type=1400 audit(2000000191.966:74696): avc:  denied  { read write open } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  788.321132][   T36] audit: type=1400 audit(2000000191.966:74697): avc:  denied  { ioctl } for  pid=29516 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  788.355042][   T36] audit: type=1400 audit(2000000192.032:74698): avc:  denied  { read write } for  pid=32040 comm="syz.4.10510" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  788.525574][T32062] /dev/loop0: Can't lookup blockdev
[  788.638033][T32070] overlayfs: failed to clone upperpath
[  788.750554][T32074] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  788.760879][T32074] rust_binder: Write failure EINVAL in pid:430
[  789.138215][T32101] SELinux:  Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped).
[  789.571076][T11835] syzkaller0: tun_net_xmit 76
[  789.576107][T11835] syzkaller0: tun_net_xmit 48
[  789.577138][T32123] syzkaller0: create flow: hash 1311091673 index 1
[  789.603095][  T399] syzkaller0: tun_net_xmit 76
[  789.859031][  T399] syzkaller0: tun_net_xmit 76
[  789.864689][T32127] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  789.864717][T32127] rust_binder: Error while translating object.
[  789.873736][T32127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  789.880021][  T399] syzkaller0: tun_net_xmit 76
[  789.880071][T32127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442
[  789.940759][  T399] usb 5-1: USB disconnect, device number 31
[  789.970415][T32130] incfs: Backing dir is not set, filesystem can't be mounted.
[  789.996961][T32130] incfs: mount failed -2
[  790.062454][T11835] veth1_to_batadv: left allmulticast mode
[  790.068473][T11835] veth1_to_batadv: left promiscuous mode
[  790.074887][T11835] bridge0: port 3(veth1_to_batadv) entered disabled state
[  790.084755][T11835] bridge_slave_1: left allmulticast mode
[  790.090447][T11835] bridge_slave_1: left promiscuous mode
[  790.097480][T11835] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.106161][T11835] bridge_slave_0: left allmulticast mode
[  790.114239][T11835] bridge_slave_0: left promiscuous mode
[  790.120289][T11835] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.277971][T11835] tipc: Disabling bearer <udp:syz2>
[  790.295258][T11835] tipc: Disabling bearer <udp:syz0>
[  790.306238][T11835] tipc: Left network mode
[  790.319548][T11835] veth1_macvtap: left promiscuous mode
[  790.337535][T11835] veth0_vlan: left promiscuous mode
[  790.448933][T32121] syzkaller0: delete flow: hash 1311091673 index 1
[  790.586081][T32143] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.593198][T32143] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.601338][T32143] bridge_slave_0: entered allmulticast mode
[  790.608567][T32143] bridge_slave_0: entered promiscuous mode
[  790.617503][T32143] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.624578][T32143] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.631895][T32143] bridge_slave_1: entered allmulticast mode
[  790.638279][T32143] bridge_slave_1: entered promiscuous mode
[  790.729123][T32143] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.736278][T32143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  790.743664][T32143] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.750714][T32143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.810100][T23167] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.817656][T23167] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.837851][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.844968][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.852921][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.860299][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  790.948353][T32143] veth0_vlan: entered promiscuous mode
[  790.998864][T32143] veth1_macvtap: entered promiscuous mode
[  791.007688][T32161] incfs: Backing dir is not set, filesystem can't be mounted.
[  791.016071][T32161] incfs: mount failed -2
[  791.125515][T32166] overlayfs: failed to clone upperpath
[  791.367443][T32189] incfs: Backing dir is not set, filesystem can't be mounted.
[  791.367951][T32191] 9pnet_fd: Insufficient options for proto=fd
[  791.375094][T32189] incfs: mount failed -2
[  791.385144][T32191] 9pnet_fd: Insufficient options for proto=fd
[  791.446515][T17631] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  791.551718][T32199] overlayfs: failed to clone upperpath
[  791.595509][T32201] netlink: 'syz.2.10565': attribute type 4 has an invalid length.
[  791.595732][T17631] usb 6-1: device descriptor read/64, error -71
[  791.862225][T17631] usb 6-1: device descriptor read/64, error -71
[  792.080680][T32223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10573'.
[  792.118319][T17631] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  792.193415][T32229] overlayfs: failed to clone upperpath
[  792.288859][T17631] usb 6-1: device descriptor read/64, error -71
[  792.327396][T32237] /dev/rnullb0: Can't lookup blockdev
[  792.398290][T32243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32243 comm=syz.0.10581
[  792.431400][T32243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32243 comm=syz.0.10581
[  792.534756][T32248] overlayfs: conflicting options: userxattr,redirect_dir=on
[  792.544397][T17631] usb 6-1: device descriptor read/64, error -71
[  792.672358][T17631] usb usb6-port1: attempt power cycle
[  792.798466][T32259] overlayfs: failed to clone upperpath
[  792.903232][T32271] netlink: 'syz.2.10593': attribute type 64 has an invalid length.
[  792.911260][  T442] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  792.950852][T32275] overlayfs: failed to clone upperpath
[  793.045329][T17631] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  793.077320][  T442] usb 2-1: Using ep0 maxpacket: 32
[  793.084994][T17631] usb 6-1: device descriptor read/8, error -71
[  793.091972][  T442] usb 2-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024
[  793.102533][  T442] usb 2-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64
[  793.112548][  T442] usb 2-1: config 1 interface 0 has no altsetting 0
[  793.122971][  T442] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  793.132123][  T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.140198][  T442] usb 2-1: Product: syz
[  793.144408][  T442] usb 2-1: Manufacturer: syz
[  793.149023][  T442] usb 2-1: SerialNumber: syz
[  793.159013][T32253] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  793.166737][T32253] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  793.228852][T17631] usb 6-1: device descriptor read/8, error -71
[  793.344311][   T36] kauditd_printk_skb: 669 callbacks suppressed
[  793.344333][   T36] audit: type=1400 audit(2000000196.779:75368): avc:  denied  { ioctl } for  pid=32169 comm="syz.5.10547" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  793.375852][   T36] audit: type=1400 audit(2000000196.779:75369): avc:  denied  { ioctl } for  pid=32169 comm="syz.5.10547" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  793.403615][   T36] audit: type=1400 audit(2000000196.826:75370): avc:  denied  { read write } for  pid=32252 comm="syz.1.10585" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  793.427349][   T36] audit: type=1400 audit(2000000196.826:75371): avc:  denied  { read open } for  pid=32252 comm="syz.1.10585" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  793.452544][   T36] audit: type=1400 audit(2000000196.826:75372): avc:  denied  { ioctl } for  pid=32252 comm="syz.1.10585" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  793.477426][   T36] audit: type=1400 audit(2000000196.835:75373): avc:  denied  { ioctl } for  pid=32252 comm="syz.1.10585" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  793.486325][T32283] incfs: Backing dir is not set, filesystem can't be mounted.
[  793.504437][   T36] audit: type=1400 audit(2000000196.845:75374): avc:  denied  { ioctl } for  pid=32169 comm="syz.5.10547" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  793.510197][T17631] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  793.538148][   T36] audit: type=1400 audit(2000000196.901:75375): avc:  denied  { create } for  pid=32282 comm="syz.0.10598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  793.542964][T32283] incfs: mount failed -2
[  793.567897][T32284] overlayfs: failed to clone upperpath
[  793.574983][  T442] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  793.584719][   T36] audit: type=1400 audit(2000000196.901:75376): avc:  denied  { write } for  pid=32282 comm="syz.0.10598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  793.597628][  T442] usb 2-1: USB disconnect, device number 44
[  793.628354][T17631] usb 6-1: device descriptor read/8, error -71
[  793.639258][   T36] audit: type=1400 audit(2000000196.901:75377): avc:  denied  { execmem } for  pid=32282 comm="syz.0.10598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  793.773072][T17631] usb 6-1: device descriptor read/8, error -71
[  793.887927][T17631] usb usb6-port1: unable to enumerate USB device
[  794.056963][T32318] 9pnet_fd: Insufficient options for proto=fd
[  794.307192][T32341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  794.353022][T32341] syzkaller0: entered promiscuous mode
[  794.359260][T32341] syzkaller0: entered allmulticast mode
[  794.365471][T32341] tipc: Resetting bearer <eth:syzkaller0>
[  794.376560][T32339] tipc: Resetting bearer <eth:syzkaller0>
[  794.389588][T32339] tipc: Disabling bearer <eth:syzkaller0>
[  794.435123][T32346] overlayfs: failed to clone upperpath
[  794.455013][T32348] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  794.566887][T32354] binder: Unknown parameter '�_Q.5�2G�*v0�������$%%�ew4��-ie\�G�E�Yc���-�#$�a$'
[  794.644842][T32358] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  794.644867][T32358] rust_binder: Read failure Err(EFAULT) in pid:6
[  794.650072][T32352] kvm_intel: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x98b7
[  794.672743][T32352] kvm_pr_unimpl_wrmsr: 55 callbacks suppressed
[  794.672767][T32352] kvm: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x7a2
[  794.687916][T32352] kvm: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x768e
[  794.700236][T32352] kvm: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa128
[  794.712709][T32352] kvm: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1014
[  794.721882][T32352] kvm: kvm [32351]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7f00
[  795.056637][T32384] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  795.065194][T32384] rust_binder: Write failure EINVAL in pid:17
[  795.109104][T32389] xt_NFQUEUE: number of total queues is 0
[  795.935659][T32441] fuse: Unknown parameter '3'
[  795.946928][T32441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10655'.
[  796.048378][T32449] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  796.051331][T32448] rust_binder: 48: no such ref 1
[  796.051785][T32446] ------------[ cut here ]------------
[  796.068314][T32446] WARNING: CPU: 0 PID: 32446 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  796.077871][T32446] Modules linked in:
[  796.081900][T32446] CPU: 0 UID: 0 PID: 32446 Comm: syz.1.10656 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  796.093688][T32446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  796.103804][T32446] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  796.109836][T32446] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 24 ee 05 00 0f 85 be 00 00 00 c6 05 25 24 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  796.129516][T32446] RSP: 0018:ffffc90005ad79a0 EFLAGS: 00010246
[  796.135633][T32446] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000
[  796.143771][T32446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005ad7a58
[  796.151811][T32446] RBP: ffffc90005ad7ac8 R08: ffffc90005ad7a57 R09: 0000000000000000
[  796.159860][T32446] R10: ffffc90005ad7a40 R11: fffff52000b5af4b R12: ffffc90005ad79e0
[  796.167898][T32446] R13: dffffc0000000000 R14: 1ffff92000b5af38 R15: 0000000000000000
[  796.175950][T32446] FS:  00007f331f89c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  796.184971][T32446] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  796.191654][T32446] CR2: 0000200000f8f000 CR3: 000000014367a000 CR4: 00000000003526b0
[  796.199680][T32446] Call Trace:
[  796.203038][T32446]  <TASK>
[  796.206012][T32446]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  796.211867][T32446]  ? futex_wait_setup+0x1bc/0x260
[  796.216968][T32446]  ? __futex_wait+0x218/0x2a0
[  796.221746][T32446]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  796.227970][T32446]  ___kmalloc_large_node+0x81/0x220
[  796.233248][T32446]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  796.239470][T32446]  __kmalloc_large_node_noprof+0x1e/0xe0
[  796.245274][T32446]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  796.251581][T32446]  __kmalloc_noprof+0x26d/0x450
[  796.256650][T32446]  ? __kasan_check_write+0x18/0x20
[  796.261932][T32446]  pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  796.268006][T32446]  ? futex_setup_timer+0xb4/0xd0
[  796.272998][T32446]  ? futex_wait+0x29a/0x7a0
[  796.277589][T32446]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  796.284061][T32446]  ? selinux_file_ioctl+0x6e0/0x1360
[  796.289452][T32446]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  796.295046][T32446]  ? do_futex+0x309/0x500
[  796.299433][T32446]  ? __cfi_do_futex+0x10/0x10
[  796.304144][T32446]  ? __fget_files+0x2c5/0x340
[  796.308897][T32446]  ? bpf_lsm_file_ioctl+0xd/0x20
[  796.313913][T32446]  ? security_file_ioctl+0x34/0xd0
[  796.319081][T32446]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  796.325582][T32446]  __se_sys_ioctl+0x132/0x1b0
[  796.330317][T32446]  __x64_sys_ioctl+0x7f/0xa0
[  796.334946][T32446]  x64_sys_call+0x1878/0x2ee0
[  796.339720][T32446]  do_syscall_64+0x58/0xf0
[  796.344178][T32446]  ? clear_bhb_loop+0x50/0xa0
[  796.348878][T32446]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  796.354856][T32446] RIP: 0033:0x7f331e98eec9
[  796.359307][T32446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  796.379136][T32446] RSP: 002b:00007f331f89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  796.387736][T32446] RAX: ffffffffffffffda RBX: 00007f331ebe5fa0 RCX: 00007f331e98eec9
[  796.395794][T32446] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000008
[  796.403923][T32446] RBP: 00007f331ea11f91 R08: 0000000000000000 R09: 0000000000000000
[  796.411929][T32446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  796.419982][T32446] R13: 00007f331ebe6038 R14: 00007f331ebe5fa0 R15: 00007ffd9dafb528
[  796.428228][T32446]  </TASK>
[  796.431271][T32446] ---[ end trace 0000000000000000 ]---
[  798.047809][ T1222] erspan0: left allmulticast mode
[  798.052874][ T1222] erspan0: left promiscuous mode
[  798.057983][ T1222] bridge0: port 3(erspan0) entered disabled state
[  798.065362][ T1222] bridge_slave_1: left allmulticast mode
[  798.071170][ T1222] bridge_slave_1: left promiscuous mode
[  798.076905][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.084555][ T1222] bridge_slave_0: left allmulticast mode
[  798.090360][ T1222] bridge_slave_0: left promiscuous mode
[  798.096061][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.228146][ T1222] veth1_macvtap: left promiscuous mode
[  798.233691][ T1222] veth0_vlan: left promiscuous mode