last executing test programs:

3m37.109553988s ago: executing program 1 (id=163):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x4100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000940)=""/4104, 0x1011}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000880)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x65, 0x5, 0x67, @dev={0xfe, 0x80, '\x00', 0x31}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x8, 0x8}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000002f00)=@ethtool_perm_addr={0x20, 0x64, "66a2ced12da5b53d77d0aefe23c2e58341d2117144b199f493cc74d8bcb34db9630bd669e19eeea8f7838292728580b8f6f5a0a1ec068e0cf60a5ea80544e15d07a1c21e733b39bfcd7f414f069d02bcf2f689fcc6092bbcf4711bc7a3e5a73faba1571d"}})
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc)
splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000746572210000807f0000000200000001ffffff06"])
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x13)
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x6, 0x40, 0x8, 0x6}, {0xbc4f, 0x3, 0x53, 0xffffffff}, {0xde8, 0x73, 0x5, 0x8000}, {0xfffe, 0x4, 0x0, 0x172}, {0x6, 0x8, 0x0, 0x10000}, {0x12c3, 0x2, 0x7f, 0xb}, {0x800, 0x1, 0x5, 0xfffffff9}, {0x9, 0x5, 0x5, 0x10001}, {0x5, 0x6, 0x9, 0x8f9}]})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a<W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00!\xd1\xe2\x92\x01@\xe6\xa0\xa4.tt\xf1\x13\xcd\xdf\x90\xf4\xb5\v\x852\x9eT\xb84\xf1\r\x1d\x1e\x15\xec}\x8a\x84\xca*6<O\\=\xd1q\v7\xcb\xe6\x1c\f\xd1\xcd\x95s\xc61\x9c\a\xc9\xb5\x8f\x15c\x03|\xcfA1Uva\xa7\x051AyN\x06\xed\xbb6\xc2$\xe7+:w\n\x89\xc8s>\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%')
socket(0xb, 0x3, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)

3m36.283216623s ago: executing program 1 (id=169):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff})
listen(0xffffffffffffffff, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x37, 0x0, &(0x7f0000000140)="5e785f59c58867d8d727e8a259f3999e61dddcc18e8e5719f879be812d9f7e06b3623bb128e523d3180f6cbea4efccdf4229992cc5fb39"})

3m36.270800803s ago: executing program 1 (id=170):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x5000, 0x80, 0x7, 0x5, 0x0, [{0xed, 0xe0, 0x2, '\x00', 0x1e}, {0x7, 0x2, 0x9, '\x00', 0x1}, {0x5, 0x8, 0x7, '\x00', 0x7}, {0x1, 0x7f, 0x3, '\x00', 0xf}, {0xfc, 0x3, 0x9e, '\x00', 0xff}, {0x8, 0x35, 0x5, '\x00', 0x40}, {0x81, 0x4, 0x7, '\x00', 0x1c}, {0x0, 0x1a, 0x18, '\x00', 0xff}, {0x5b, 0x1, 0x54, '\x00', 0x2}, {0x69, 0xf4, 0x9, '\x00', 0x6}, {0x9, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x6, 0x0, '\x00', 0x7}, {0x5, 0x7, 0x0, '\x00', 0x1}, {0x8, 0x2, 0xff, '\x00', 0x5}, {0x1, 0xa6, 0x2, '\x00', 0x6}, {0x7, 0x9, 0x2, '\x00', 0x1}, {0x5, 0x5, 0x8, '\x00', 0x2}, {0x10, 0xe4, 0x1e, '\x00', 0x2}, {0xc, 0xff, 0x6, '\x00', 0xa}, {0x9, 0x7, 0x16, '\x00', 0x1}, {0x8, 0x0, 0x9, '\x00', 0x6}, {0x40, 0x8, 0x1, '\x00', 0x1}, {0xc, 0x6f, 0x4, '\x00', 0x11}, {0x2, 0x9, 0x0, '\x00', 0x4}]}})
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0])
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4)
sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x9, @none, 0xd4, 0x1}, 0xe)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000)

3m36.024160687s ago: executing program 1 (id=172):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40c201, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x4000})
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40c201, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x4000}) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

3m36.006342497s ago: executing program 1 (id=173):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001600)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1}}, 0x30)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x9}, 0x4, 0x1, 0x7, 0xe65c, 0x3, 'syz0\x00', "28677dae7f9d54c1d905d8d9ec135101089ca12e69b23ce13cdafec1e56dadaa", "9e3ef763c32cc15bdef5836e8968488d3f024833f19921ba04d956e3da93bfcd", [{0xff87, 0x8f, {0x1, 0xfffffffd}}, {0x3, 0x7, {0x3}}, {0x1, 0x6, {0x0, 0x7}}, {0x234, 0x9, {0x1, 0x5}}, {0x8, 0x800, {0x3, 0x6}}, {0x6, 0xe71, {0x3, 0x6}}, {0x5, 0x3, {0x3, 0x1}}, {0x95, 0xfffe, {0x3, 0x3ff}}, {0x7fff, 0x0, {0x3, 0x5}}, {0x8eb3, 0x5, {0x3, 0x5}}, {0x8, 0x1, {0x3, 0x9}}, {0x7, 0xd8, {0x3, 0x8000}}, {0x0, 0x5, {0x3, 0x4e1}}, {0xff, 0x40, {0x3, 0x3}}, {0x142, 0xc, {0x2}}, {0x5, 0x8, {0x0, 0x10}}, {0x2, 0x7, {0x3}}, {0x4, 0x0, {0x0, 0x4}}, {0x2, 0xad, {0x0, 0x1}}, {0xece0, 0x8000, {0x1, 0x3}}, {0xfff8, 0x9}, {0x7ff, 0x5, {0x2, 0x3ff}}, {0xe, 0x8, {0x3, 0x200}}, {0x7, 0x401, {0x0, 0x3}}, {0x800, 0x2, {0x0, 0x8}}, {0x0, 0xcc, {0x3, 0x5}}, {0x6, 0x0, {0x3, 0x1}}, {0x9, 0xfbff, {0x3, 0x5f}}, {0xa, 0x7f, {0x3, 0x80000001}}, {0x1, 0x4, {0x1, 0x6846}}, {0x2, 0x7fa6, {0x1, 0x8}}, {0x2, 0x8, {0x3, 0x3}}, {0x6, 0x7, {0x0, 0xc}}, {0x1000, 0x6, {0x0, 0x7f}}, {0x0, 0x400, {0x1, 0x8}}, {0x5, 0x7f, {0x3, 0x1}}, {0x2, 0xdf70, {0x0, 0x9}}, {0x1400, 0x6, {0x0, 0xfd96}}, {0x3, 0x4, {0x3, 0x8000}}, {0x5, 0x8, {0x3, 0x10}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44800}, 0x4000010)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r1, 0x10, 0x80, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_IE={0x60, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2, 0x1}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x41}, 0x3, 0x7, @device_a, 0xc, 0x7, 0x3}}, @random_vendor={0xdd, 0x13, "90347af0abda02589efd679505e81aebcadb60"}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x7, 0x0, {0x4, 0x39c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xb4f8, 0xa5}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7b, 0x2a, [@challenge={0x10, 0x1, 0xd1}, @random_vendor={0xdd, 0x5f, "8eba66feed32435c38d3969e220c73e96a22f7eabd3a8b9e35eff5528b45bd2424e45f7b65a67a390b09614a61c18088da91486f103df21f64f8ccd87a4f4f5db2712a8bb3f969194b12e11ee9c510f6e208997ef8ec71b97b9fbec0338eec"}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x90}]}]}, 0x130}}, 0x881)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x1)
fchdir(r3)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000680)=0x2c)

3m35.87402506s ago: executing program 1 (id=175):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))

3m35.87286287s ago: executing program 32 (id=175):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))

1m59.40695478s ago: executing program 2 (id=2304):
setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x2, "dd0339f4313f1187"}, 0x9, 0x1)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000aa7000/0x3000)=nil, 0x7, &(0x7f0000000000)=[{0x26, 0xfffffffffffffffc, 0x4b7}, {0x5, 0x800, 0xd59}, {0x7, 0x8e3e, 0x6}, {0x2, 0xf94, 0x64c0}, {0x7, 0x3, 0x4}, {0x10, 0x80000001, 0x1}, {0x5, 0x1, 0x1}, {0x7fffffffffffffff, 0x9, 0x4}], 0x8, 0x1, 0x23, 0x28, 0x0, 0x1b})

1m59.341803841s ago: executing program 2 (id=2305):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
exit(0x1ff) (async)
exit(0x1ff)
syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}'])

1m59.317734471s ago: executing program 2 (id=2306):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = socket$inet6(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8000000000000001, 0x1, 0x22}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1m59.307993341s ago: executing program 2 (id=2307):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000e40)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10162, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/132, 0x84}], 0x1)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mkdir(0x0, 0x0)
chdir(0x0)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r3, r0, 0x0, 0x80000000)

1m58.409836157s ago: executing program 2 (id=2316):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280), 0x622481, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x8)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x2000009, 0x2, 0x9, 0x0, 0x2, "972d595029c59b15743b291346db66fb4c8676"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000000c0)={0x0, "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"})
r4 = socket(0x2, 0x3, 0xff)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x7, 0x2)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r5, 0x400, 0x6, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40810)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})

1m58.374793617s ago: executing program 2 (id=2317):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x84000) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=C'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
r3 = syz_clone3(&(0x7f0000001880)={0x100002a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0x0)
tgkill(r3, r3, 0x21) (async)
tgkill(r3, r3, 0x21)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040), 0x4)

1m41.734220701s ago: executing program 33 (id=2317):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x84000) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=C'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
r3 = syz_clone3(&(0x7f0000001880)={0x100002a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0x0)
tgkill(r3, r3, 0x21) (async)
tgkill(r3, r3, 0x21)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040), 0x4)

1m33.52690977s ago: executing program 3 (id=2611):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11)
gettid() (async)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$setown(r0, 0x8, r1) (async)
fcntl$setown(r0, 0x8, r1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
mknod$loop(0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
socket$inet6(0xa, 0x1, 0x0) (async)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0xffffffff}, 0x1c) (async)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0xffffffff}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

1m32.533576586s ago: executing program 3 (id=2613):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0x1, 0x7c, {"b8010000000f01d9c4c17c50cb660fc7b01572000066baf80cb8cb4a0387ef66bafc0cb02eeec4817b70848817a200000f0f20d835200000000f22d8f3470fc7b4ef00000000c46299b8c36566430f3a20cdbe48b8249c0000000000000f23c80f21f8350400e0000f23f8"}}, @code={0x1, 0x5e, {"66b88f000f00d0f3440faec466b8ae008ec048b876640000000000000f23c80f21f835040070000f23f82e400f78850020000066ba610066ed0f79722fc4017c112e420fc734a766b899008ed0"}}, @code={0x1, 0x86, {"c4624938670166640f2001f607ce3e430f79e6450f019cf9fb5d00003ef3460f0966baf80cb818692e88ef66bafc0cb000eec744240000000000c744240200a0ffffc7442406000000000f01142466baf80cb8a0325a8cef66bafc0ced48b833000000000000000f23c00f21f835010009000f23f8"}}, @cpuid={0x2, 0x18, {0x88, 0x6}}, @cpuid={0x2, 0x18, {0x6, 0x5}}, @cpuid={0x2, 0x18, {0x1, 0x4}}, @code={0x1, 0x91, {"b94d0200000f32c4c1bc159e0000008066baf80cb8f4170784ef66bafc0cedc107130f2016c744240085410000c74424020c000000c7442406000000000f011c2466baf80cb888795586ef66bafc0cedb805000000b9a02700000f01c166baf80cb894319a83ef66bafc0ced66baf80cb8acf10f85ef66bafc0cb8cd7e404bef"}}, @cpuid={0x2, 0x18, {0x1, 0xaf}}, @uexit={0x0, 0x18, 0xffffffffffffff7f}, @cpuid={0x2, 0x18, {0x2, 0xfffffff7}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x76, {"66baf80cb8a8cfd68aef66bafc0c66b8fab866ef8f8830cdd903c74424000a010000c7442402cc27cc15ff1c24c422c94756000f01cbb9a60a0000b8fa770000ba000000000f30b91f0001c0b883140000ba000000000f30643643f4c4a1115cccf30fc731"}}, @code={0x1, 0x65, {"36f3430f0748b859480000000000000f23c00f21f835020005000f23f843f4400f0099545f4fe666ba4100b800900000ef66ba2100ed656766410fde362ef3430f1ed1660f3a1404ef0066ba2000b800000000ef"}}, @cpuid={0x2, 0x18, {0x20000000, 0xfffff070}}, @code={0x1, 0x65, {"460f0766b88b000f00d0a2da24c1e900000000b9de0a0000b800000000ba000000800f3045dfb645000000660f5ab9b11cf7eeb9800000c00f3235002000000f30450fc7a9030000000fc71d4500000064f341a5"}}], 0x409})
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{}, 0xb, 0x9, 0x6})
openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10)
write(r4, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23)
recvmmsg(r4, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
fsopen(0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

1m30.795399757s ago: executing program 3 (id=2627):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x266dc1, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x40c580, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)
rmdir(0x0)
syz_clone(0x2800, &(0x7f0000000040)="a284d35db49d715bc8fd4f4693aa28755335315cd62d20489e8df0b8261b8c5adbd10453b301b9b59c49713ab9c328862d1872b4d5b8c9dd1ba3f90ecf69a3a1a0aaad1ac1fc9fdfec6cfcc1c400", 0x4e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180))
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x8, 0x7, 0xb, 0x0, 0xeb, 0x9, 0x81, 0x9, 0x4, [0x8000a, 0x283, 0x7ffdffff, 0x8, 0x529, 0x7, 0x4d, 0xb9ac]}})
r3 = socket(0x10, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r4 = open(&(0x7f00000003c0)='./file2\x00', 0x101881, 0x1b)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x40101283, 0x3)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x4)

1m30.730521188s ago: executing program 3 (id=2629):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x410082, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x6000, 0x10000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1m30.729717108s ago: executing program 3 (id=2630):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x1a, 0x633, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x4000, 0x4e24, 0x0, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x3}, {}, {}, 0x70bd2b, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'fpu(pcbc(aes))\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, 0x154}}, 0x0)
r2 = socket(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000b127ec7229c2dd06bdfe8b2e089f1ef300"], 0x0}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000000680)=0xfeab)
fchown(r0, r4, 0xee01)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x1c)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
read$FUSE(r8, &(0x7f0000002480)={0x2020}, 0x2020)

1m27.480157653s ago: executing program 3 (id=2675):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000001c0)={&(0x7f00000000c0)=""/211, 0xd3})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2958028, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB=',mode=00000000000037777777777,uid='])

1m11.413097586s ago: executing program 34 (id=2675):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000001c0)={&(0x7f00000000c0)=""/211, 0xd3})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2958028, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB=',mode=00000000000037777777777,uid='])

1m3.117518657s ago: executing program 5 (id=3160):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2000000000000)
r2 = signalfd(r0, &(0x7f0000000000)={[0xffff]}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x2d, 0x0, &(0x7f0000000180)="8ff9941f22b37b535e7bc806a0301b5c9e36db681119c21c9915d0c7d86c3ba86d1252c44137decc32da3e2646"})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
read(r5, &(0x7f0000000180)=""/51, 0x33)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
bind$802154_dgram(r2, &(0x7f0000000140)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0302}}}, 0x14)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x80000, @loopback}, 0x1c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0)

1m3.082103367s ago: executing program 5 (id=3161):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0])
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
io_destroy(r0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000)

1m2.105979194s ago: executing program 5 (id=3176):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet(r2, 0x0, 0x0, 0xc011, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="efec5bbe5899611acf1451d1644b09d7964ef85ba452f3e99588e998819282983224b08a25330c", 0x27}, {&(0x7f0000001300)="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", 0x1000}], 0x2, 0x0, 0x0, 0x800300}, 0x24048801)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0)
r8 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000280)={0x0, r8})
close_range(r0, 0xffffffffffffffff, 0x0)

1m0.889843535s ago: executing program 5 (id=3187):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000005200cfdb"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
rename(&(0x7f0000001040)='./bus\x00', &(0x7f0000001080)='./bus\x00')
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r3 = dup(r1)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x8000, @local, 0x8008}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0x147a5000)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4004080)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000010c0))

1m0.839325446s ago: executing program 5 (id=3188):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x39, 0xb8, 0xe8, 0x20, 0x7cf, 0x2001, 0x82ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x7, 0x80, 0x5, [{{0x9, 0x4, 0xda, 0x4, 0x5, 0x7f, 0x36, 0x60, 0xa1, [], [{{0x9, 0x5, 0x0, 0x2, 0x10, 0x5, 0xff, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x7, 0xbc}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x3, 0x6, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x1, 0x53, 0xa}}, {{0x9, 0x5, 0x85, 0x1, 0x2d8ca2016370afc2, 0x80, 0x5, 0x3}}]}}, {{0x9, 0x4, 0xdb, 0x9, 0x5, 0x3, 0xd8, 0x2, 0x0, [], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x10, 0x7, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x7f, 0x95}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x78, 0xb}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x7, 0xa}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000017200))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="3091535b140c42838375ebe454cef526fbe6b1172a0f9093d7cc3b887956fb8d5447856246b649027b4792b40a120c4aeacd44ddf21623270b2738718b1d4d5f2669a4e3b70cfea7c15676", 0x4b)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r7, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002000000"], 0x150}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f00000036c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x8014)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

1m0.752338567s ago: executing program 5 (id=3189):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000002c00), 0x4) (async)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2000, 0x4) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)

1m0.689875088s ago: executing program 35 (id=3189):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000002c00), 0x4) (async)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2000, 0x4) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)

4.314898627s ago: executing program 7 (id=4063):
socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
creat(&(0x7f0000000240)='./file0\x00', 0x1f) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0)

4.256853658s ago: executing program 7 (id=4065):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_usb_connect$uac1(0x2, 0x94, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd38c, 0x6}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x7, "070d319eb261"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x4, 0x7, 0xff00, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x6a, "07a9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0xb, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x10, 0x1}}}}}}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x301, 0xd, 0x10, 0x6, 0xbf, 0x4}, 0x2d0, &(0x7f0000002000)={0x5, 0xf, 0x2d0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "66944ef3b24997d0f88c14cfa8b74477"}, @generic={0xbb, 0x10, 0xa, "4708957dc2bf61046b6e8d534f9bbe9f2890b861235dd956755166ef9b0eca528d79d412abbfafd55480750a58cb3c5387c77fa2fe1e6cf992d301641bcde1175d164eb34cf93b47587589278a39c53618e096bb062c9d3164b7ce87d1a0fc737159c85b565cee2013e64e32383447c81facdf9fa6347accde3b738d59c871a7b829acc661a0626b788962345380350c545251ba0f45833c32941d43ce7a5bd1f26be994e0577634666b9754c0872ef4a03fa8e8171ee342"}, @generic={0xf8, 0x10, 0x4, "0b8811ec9cb8e4a4ade630df3afd73c86dc293acbb7e90c912b332c2b39105020c5903b98ccbca3aa6441b85e50387c415c7d1278d9ef6bdfd03fdddd7e4f9747188f00e91028d5160d45b9a89c192918172cffbf74baa6e71d6150fbed693b33ce6924772ab33fc7d19229eef64090a5bdfcbc04a9c6286d7e3780710e236c8c92b98c31142c65f64cdb084705c9a2f188be274accdd6104b73470f1e153a542db64ad7837d581a5dca6748875325bd117f569020d2569a827205345fe46c5898ccb44bf642b4b77e3fea6f894fd95acb55aab79e19e1f1f32ebed25ec7529cbd9f761cefb2b99192040b8ddcc12a5afaf1a28594"}, @generic={0xe6, 0x10, 0x4, "9decaf15456ee0c61897c4ecdadadcc7b1e4eea8ddd6242d6c07a78cec2c6a660f23f33cd666aaa40a33fb84ebad3f5c6d921c859a4de16bd150ca88c74c1843b31bb258b69ef589906b75339ee1802f4e0c34d40483aaf5f6d06b649de8f8b8647a1df7f3614b35bdfdd1bae0a7ea4ff0d513f1b4718a56fb2d9cd5f999d0365d91d6d4e7b92be9626873c96277816355ac222b2c617e6aaa7899ad25d058b27adf1f7362d9848f1a71b84b89e6aa1fd39312e7556e3de688652d3f916fcfb22bd3eb09edb67e14bde66cbb60d6aae6edc93bdd08462b57c61c08191ba047c85b7a47"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "62b5857e604928e69727575d146db427"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x10, 0xfff}]}, 0x2, [{0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x449}}, {0xb0, &(0x7f0000001580)=@string={0xb0, 0x3, "9d391088dcfb899260982beaab7ac7e234e20559b5666a7254cd5095e60574baac5259538ae56bceac27f0186a260576ce230155cba4fd10bfc59f88b0db58a166968cedc17d3a6ae0b380bc33bf4c1677a24070d290dc0242b81f8a762b6eeb3626f89fa0267433fffb0e28229eb6f7f66dae775e7fb429fe0da99706a7b8a35a1796ac008bc0f0d242666af493e25b34475dcdd81e6d4ed4a28e91ca70f6269e3afd73e87c5e10466f14425adc"}}]})
recvmmsg(r3, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r4, 0x0, &(0x7f0000000340))
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='P', 0x1}], 0x1)
r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001f80)=ANY=[@ANYBLOB="120100020000008d1b9bf84140000102030109022d00010180007f09090003fd5569743e62d206020301020009210400030122d00c090581030800ea5e489b05020340000980eab9dc96d5d6164992037498b647bdd61fa0fca66a6f2959f936f4b70bb87be90d5d97ce5bfc5054d64bafb96bbfc7"], &(0x7f0000001b40)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x140, 0x0, 0x7b, 0x8b, 0xff, 0x8a}, 0xd1, &(0x7f0000001700)={0x5, 0xf, 0xd1, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x5, 0x6}, @generic={0xa6, 0x10, 0x5, "023f638b64412c832f10d25aa2a74873afe3dda4d15ed712a63a512be525929e83901a76533eac579a7529a5936c94b5c0dccfd129784de273a784ff8ae1623213fcbd8b19dc6bd4c18adf6b8c9e1ba1918bd488575de0246bb186ff10692c5a4fec7e09a90ee556edb1a7602e6d6363f4a8727d9026d7daf880826e1e40d1cc23b8a572681a06c3795a79868d0bd7fdc38bb0073dfd9783c6334ca3ee83c180b66970"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x5, 0x0, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c615242869adc67cf004f8a66336c00d"}]}, 0x8, [{0x86, &(0x7f0000001800)=@string={0x86, 0x3, "68cb7bee0947596e2779f2ea6fbe5729e98d90060695c2f50adacdb7a92f8c47e098b2f5d48c7b2ddf5e4cea7d698db58efa5078537cceb1f8cfd5a74381d7057c5ac85445c11e98d0df0e24a0471a97c22ef798c3ed4776b466843ed71b2bd063b384ad953f4180a26cd9b505c0a5c62e82407aa5d235725cca9ce58bb5d3e5b0fc1457"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x411}}, {0x39, &(0x7f0000001900)=@string={0x39, 0x3, "c7a06f640386c93c0b306b8f65c9bc87e83ceb40ab9f066c77a29c25e9c8efa04a1d63b22b1108a599f72f9a8e71b7f716ea0c6202749f"}}, {0xd6, &(0x7f0000001940)=@string={0xd6, 0x3, "8a7782b7a5e5a471368056186cde2b271095a06e3ec3be89551a7b307ee407d84a82ab281a4c8d52a32a2b3813b5fa7abf783c844748989a5d2462d48906683f5cfdf3f40d119277216c97a2a11bf18d10f0a46eb1dceacc06304d418f915e861d33b942ca58343428df4136009351864d51a6207d0011df78d2acefcb2bcd23f015cd9913b4c39d0a9b410e57e8449b7bfa892df319554f86629eff6df87ae7d98b5c330deb3c766ce0e4d0b7f08ec2ca4a3123b74423302b6fafc4a9b6a4901504120f946f9378b60ed427fd329b941952baa1"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io$hid(r5, &(0x7f0000001d40)={0x24, &(0x7f0000001bc0)={0x20, 0x1, 0x3b, {0x3b, 0x21, "2f7962bc39aa124982ea7364c0e2980abeb1bc0df4a4dd079264ae1b4566ad051e868b557ef80462e7363b197bf25629ff6675f78b54774cd3"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000001c80)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0xa, 'gWe0'}, @local=@item_4={0x3, 0x2, 0x2, "24d4d6bc"}, @global, @global=@item_012={0x1, 0x1, 0x2, "a6"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f0000001cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9b79, 0xc, 0x1, {0x22, 0xbf9}}}}, &(0x7f0000001f40)={0x2c, &(0x7f0000001d80)={0x0, 0x13, 0xa7, "9a331c0e1ed6b85d331e6d211734af8d44fab22a7be8024077679d60eaab55916b750fd37f6319e81bcb6b7328765ae9134ba344ba3b74cbab29e93c8339d299a8341bc199678dc1bb949d0e00bc51bba863352bbc093cb800a2d52c591e36c81c679b707817dbe273f3dee41069c7a4a701c8b1a10ea3b8358915f11e3b80ec9fd276e7b8825fcdcc9b8c5fc07af4c16936a32bcdc6d588a99dca0f7982485033e05ba24df9c9"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001ec0)={0x20, 0x1, 0x35, "eee53371168d9fa61b24badfa83297922b0b7a43a77fffd67d711a57ded0242583bbdec7f638635f04dd40c7e208c94cb750b1eb01"}, &(0x7f0000001f00)={0x20, 0x3, 0x1, 0x7}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="bbc87b957fa40d0485d0e4ec0c80aa25dd540b7949a48b57971e4fa1e74a9a3ef5763ba5c311d9bf2742b3098eaecbbfc6ec6d950edcdf773f6750d25bcc3be9ab2d2e60311f939b80644c914648796329153afb7782eacf20be8d513db9fabd7801c294346a077a967eb5c6812d2de7d99c413e00488a38ec480b2b15577796e77e845f242bd56b810a569d89f1657aa52c62a7fbc73831068c073a2c9327256b8ee74c33326df7d0e39a481831fff03a1ca9f41347ac7c88f99dc1b9c49efcf7eab8f8fefc8ee0bb872ecf4b3f333a0e090b9f39d353f010c591a1a290bbf3d52fee0f3470149bdf0d3bd84b50b739bafb970a69de945efc41917e92162cbb552a22e795e5842d087f3ded4a01f20b49f5014b95179dd3e4f87e4e565eecc32ff8a5ba9a7386232848a351d2bc5e433afd605cc36e1e0853ac25bcd5bbb2cac9f0880a3163dfe81c6d6ec409102f8abbe05bd9a27ab6d30e10bce68b28892ac6ff1848ed3859b1377537ffcf61cd149c0ea5405ce971b1b7acaa5efa7b524b36ad47459841e98c81a6d19fa9f2acf6934bc7750c726e41a412d552b5cc3eaf66b43ca770a4f0a3387b99675c327ce7da07f51ada9a78ba8fb46a7f12a43d53aac03c6bd9e12ead74d94d6b9c5c6c46f92d9b45156e429e31d7fd73328fc29fd7af8767ad7fa79d06674a4b77df44b059f619a41ce7b6981f24278447e0a61f46a8cd802a1e8462d7007ddd64e876efe7924744776644109867b04984d7c233125d5db8bc52c69a7f651a5a80937c2a144967335bc14980b624be315dcbd78cae42571f13d654cc60027eaf1f221b7898ead2440d97cd8c496e61899421c8eb533676db7eb07f3ca4f3fcc967354d667fd27861ed798ff0d087171f4969a0c28ad7b3695235a899f36bb6390cc53b1937a442552277b929f3d1792d6be5db5823c1acf8959f0defa6f0a41b9b2e2f67c5a0afb3295a731062c5ccd72156eff4e89c9b2984e2140e39447aebad408c17f0ecfe3db363191af5800563c313f353c57d8dc071eadac3a887758764970967cb3a57832fe5b0ae290da177df9f05af3e40434dd689df877bba6c3fb646d0e03cf09ce0c8d69a0c5b75c137a202e56edaa08b454105470097c737fc88b711d03d1dfd978c0f43d65f1106bceb3b86515a03589ca36f5c288df1fc0a8215059288454cc1fda835500ef18110c64bdd71a3bad2682992c4d60c875cac8a862d12e154810bf21b8463342241532853f97c5e248c13d5749db83874d8e9dca8addac0ea3476d7713efb4518288bf4bf900409c0ae74b90160d5976296823d9b6f97397e9b4e734b731cff63d72f432458f666dde99deb830cab869ac49b39ef6a8c038eddf812f693ccbae3a27567008bc3c43731977f9df09bc0c71faf556f09869e8df29a32e02c7ed67dda2a54a3476f1c07e1c7271f89e929c375fda95b86dfb7335b1de74e446f3ce53a7fe4f39a7ba0795b76c1f6830ee6a8e15d940e49de9c75e6a0b483a478d7953a698b4a56e980c485ab1734ac493daa5c7e9c2febe04873a775845a087c4cb47643ea28354c3a55c577df820a0d508bcee5f93c3ac503ebff49cf6ea25d3dbdd0e0834cba3f703f0d3e5db8b603c84f7dc2e6a47e0dc5c657e8d41ff453dcf7a636b5b4345b1d170a484d2c3e9efec3c847ad0f3728efdc04bb0b868eaa44f9eb2aa40687c2cdaf5a19fff287170ffc2c3e65918ad8c8df3fd7177b73dc329eb90e05d9b1f564b6f72f2dbb8f8638701caf3aa219c367068d540f38c7e46c3af48b9431c82d474b86873a40d0d26f7b997558840a0c0fcbbb0b219b30ecaff69b975399506f7c525ce000fc5d7db3b6d1e8bf710a8a689fb60fd9db11798eeb0ca47188610e5b2936588b8e474c004d1d9f0195b22123d748b491c7e2d557de213c1da1de2a218bc07eff63e18437b9f42c89bb09713cd7368e4d798e658312c371e7dfab15658e30404f166e392475b95998951df75d6dd6994da18f1614cf0b68fe6df6d8111e62fb5831478145d801284bbb46bca069d907f0837c4c8f7fd48e928a80dbe3c2442e4dcf5c9a32a0a576b1d11868174fba4c358455bc3a515054925e0de9fc55f2154bb433ac510a8795b7b2b371e0982dcfa16bb7d59f60fb116ecba72384167a4655700d5f4603bc312703c801ace399f9d3ad5dd03547abdd9ab17b71eaf969a68e2e46b7867392d486be2554fe594a6fd693c91861562c38e84b35cec29a3635adca76d240ae9a61147b0e009c4ec46938b70c1dcadb7771424804cf29059f6fd41ab10c99ccdccb98a480965d7ca9a7cc43d21e6a7138d91f2436aaea984df884d188750e646f587f30bd478b4c2fe5c4f38e46cf5fde45a4ee7f9ebce318edcdfaeaccc1714da798ea4d3e4bb893e65661ae9436bb1beb508007811265e1b989fa90cdd85e64cecbcd5084c6e30b139cf02d9a57028129c26b1189a7248d1805ec871e0bb81436f9106bd3af533ec6343f070fa4f7413d4aec0ed089eae17afbdf0ab59967a8a821a6f396ff89d286cde41a5258322e6138aec696b006fc99ec5ac56ccc6186106e2489435029d08022020a78553f8298ad37b3890af589782a661a01887e0666da020e9dd54fee466d75aee30c34392f93dca8564b22d6fea908897c986450d0f64d54149be410c10b0406600334643064e913fde8ba5ca9a42ac186d43b59f84b2aae9f49a1a827d3954a17611a09e1e0e13f1971c1a4ba730c408f93ecffe0da5710a2760497a9b5b0d041abe3ae6a4977146fca0b36924a38e5e54e2be8a5a659f2445848f32e32186013e09bcf4cad76e3b513f7245b290b2a5110115c19bee0626ef67ebddbb995029ced162012a4f0e87df2114f96f87cc04de7a51f8cf890a9ae3a62f2d1fd782b99356df63b33a282d75843b720562a7e4df3fda8df335116dde56b53321d4216ffbe1db6186e7c0d8699433f1b3455af5c83ddd53a4b61a9942237c52be4e23bba62848f7531822592b34f9644b67bd4f5e7c96660335cdd5539e51ca9ab06d8bfc34341eb8271bf3e0d048b9fef51bb8dd49608eaee8a3d12573329333c6d4222dc0174424380f8703980d756f14a688bc5fc7c1d5cefe2db68352adc7280290b6a0b5e4228df2639a715746cc466bd690e87ae460eca0d72eb73b303d61d564f57870508c9dd03dddca54178ffbb8e6f784ff34f7d6bbe6e0242dce84fb851f9b1ef5601083d7f1e510f6b8bd5a461c30e3abeb9fcf22f333585f8a5f7a611f60802916f0d0011bc141b1b7ccc8e4603f8993cc108842749ba6457541083c5d65074266b4a44dabe027383591ea56022b7d253af28da50bddad709735b3c645353c41a1f265931327e04b2c00aee97d4210b2db11c2518251c86d66428d1ce2c27152a9f0ff9f28e5b367f08047073a5214954b00f0cb51068de85ada2faca10cc562eb522a2144707e1ac5499576fcba0e3674f44521ecdc027c645cb9f2e74c0ff2b10fa04462dfe3e33d4e5fcfcc26fbbdc55907df3c11eb8d67f71cbc7c09d72b7132f22c7f62c481c572d97a32b8bb07f5032777c4d7e84cc140e49d3ef8a8130d330bd842f2fa6fd50f48f47e5e6b1cf315819e0f522e9b9213ba5e50ca7bca507301161f93f6c1843dddd8b5f22f1a737c9ff446a05084a4e952da2269ec8e6e938eb3a3a40debf80603ad5d5e8ac8ee54cacb3d03cbf4e3dee20424e39d8e5f89f105742cf296d02f01b894cf8725113b0d0076c9471d6b0383588cc42184661539efc7168d4a62c8ea71ec129d0f45df025d7d8f9af689d4b1b7031c2d761c22c1d924e53a7faba0251564eeda2917a16cb36367fcc0c9136d511d24f305899d16ae4d11d566b7cc09f94153d26605e6cd85980131be8dedbbebbc006b1a65ec64fbb01c6a958c5d12c589b56a65da69d6d341e29557b59c570b9802cfff3c3d12be7b5cd55dabd5f76d599ec069f8cc31399ed645a826fd01e9bb2f044f3f7107f53880b96557e88f80ef4945503b4d13d834d6cf270ee60332ce3e727f97115ccdc200f4680490a239c1a7592176354f65a3c7d1dc70e39b13486c43ead9723cbca04e0a84a23e150e45189f791e1eace448cc7c7cf65a80112924f8ae25e14c28c1c88b0eda23e7e3981667eda4fe57ae7b7d5bf29b7af547d6e36503b3ea2cae4d94c7d088742ab3d28041686899c7cda6c265d1b55f667a5a91308c2b7d348fdb53a328d1680cea933dd7de174bfe98f0157f4ba944e8fccbc2a67c56f585f66b5b69224ec4f4e64dc095a61b66b7c6024e04b56fac09b3d25f1855c7f49b1b53c00d6aa15b0353b5a63934f3715eff9a7dd949aa65d8dea959917179a910940972c972e686bcde10a6ecd99837404407141e116c6494fb9ac664c6933d79933af95894a9d85045eb79466772ce8921a5ba5dc5a8f93de13279ca6664820d9268ae27a6dbc9e81961a37937006b003c0edee99c986c9c65d8b0e2effc2f34cc883f9df0bac4234613483f7c2ab5e582c9124d2ff82d0e1a5d8494c67123a1fb52895954089f28529651ac43587ea559b20999bbaf6a785f97600e90f269af3bfa99694600b7180b49e1c641c7388dbb5922610e2c64c099bec4b23de3513bb5bf7d5fe20493b6c50f68c1ec5b695303860641f2f6f08c08026b36b1d8dd3fdcbb4cbda06594c16ea2bc883ff724b7fe834090c67e0eac1078b8bbb2d20a2fac116fe49115b46f1a227bbf9768472eb8954b214760927278ee8bc142c60d33006071a99a7e7f3a1ea0f52c4f307a00bb85d0511e2100e3f848ab7872a4957d047e7b1809aba056877ff2e3b33295cb9c68ae465ea3eda3933875f2b8b8185048ccb834417527fd7baf1e111e2d1ff7699347569ce6be06f17485c7d68d7783b793cd7a51b09a56dfc1a6a61b0bc09955c32455ca37a3a260ceea4c85c5853b55a7bc8e4bf9b468cd6836e92cbf9f5de80877165f9090c84130328ffc3303514f73d4313b32145858a016a2572c4b0fa7231b7feb5d09db8da8646c85c6780790984dd6ca6721a45e8843d3af5b90aad69f112e62ffcc1f2c0fd348a3ad3bb483423679723e7af94f4e4086d30ec0a31fb190ab8dd5feb12aecc8f8168cee3d9a040e6d601c6588b0397421dca97dd3454e6537194678331c7dc95ae433cb85548b834af269345499ae81e06bf3f395078257b4c26f747f0fd101645d5c5329c51f22213cd560cbc44a154f9ae0086c675cdad9a0b61a13884213d4b45b96a33262ebec007536f3f27abafd3aa506992961e183234afe7b89498c1d1aad1952f1f3eadb21842fbd141448215ce0d5c14a24815926a8861a318e4b16d54be46bd617a667c123c3d6db997faeaaa218861a61c1042958303ea5dd44ed238ade4652308c6f887a755c71ef54b7b4f46bd1b9aa31f97634ef714bbe96e4c618fadc957008572f2a17d7590dc6250fdc3ae71db5b344a5d70f14a814008e7a343a86529d0172b0118cb3b083aea5437fefe1b39055f16450986d8b2b70260ab9e94a8e820c159cae17e6e5d8f5f94218ebba18a52c59c9011554cd526a44c266139fa67766e8ca76ce9e918b90a8cc948b0bcf00407991df47d9aa400b6805a82318ccd90675581ff038c48d6e53152e6c522912b3fa0d01593f4cade33d91d0221b17a489fb3ec3a175fb7c2d4f5fa068a5cba03a397f1f37b2f59a06f0e965411e8e0268d2de4ea601c95faf6943e5435dff2d7e335e7f2ab55b6151462c2235d029e7d", 0x1000, 0x4, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000140)={0x7ff, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}, {{0xa, 0x4e21, 0x5, @mcast1, 0xca}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

2.97834922s ago: executing program 4 (id=4082):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000040)="44ba4b03b9", 0x5, 0x3b00, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0xf648e000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x2}, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.97401117s ago: executing program 4 (id=4084):
prctl$PR_SET_SECUREBITS(0x1c, 0x17)
setresuid(0xee01, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x3)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r0=>0x0}, &(0x7f0000000080)=0xc)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000000c0)={0x9, 0xffffffff, 0x1, 0x2})
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1fffffffa)
prctl$PR_SET_SECUREBITS(0x1c, 0x38)
prctl$PR_SET_SECUREBITS(0x1c, 0xf)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SET_SECUREBITS(0x1c, 0x17) (async)
setresuid(0xee01, 0x0, 0x0) (async)
faccessat(0xffffffffffffffff, 0x0, 0x3) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000000c0)={0x9, 0xffffffff, 0x1, 0x2}) (async)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1fffffffa) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x38) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0xf) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xffffe000) (async)

2.909922761s ago: executing program 4 (id=4085):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x5}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="4d0170706f6535df0bce12e7de9da638d8864d2cb91ee41da5f33e5cc0b26953653a537c5cec089604e6a20da96222f1566811820831f6d32f537f201dd80d93656ac4acde6d52a268186d071490f67d95aa37f5f64c819a9f65f7c20f46b444945554425a9e2071ff962db5127b1de8d18f3af61ad7c8e276dbc2bc1cf5a90fc17080760d28bee3fb4c353868a8e0dd99b2d1be0f52c40f42519f7ddbf437f4c1241ed5bf3af6", 0xa7, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r3, &(0x7f0000000040)="06", 0x1)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

2.346946091s ago: executing program 4 (id=4102):
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7000, 0x400, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(0xee00, r0, r1) (async)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) (async)
setns(0xffffffffffffffff, 0x2000000) (async)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0x6cd, 0xffff}]}, 0xc, 0x2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000380)=0xfa0, 0x4) (async)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000003c0)=0x9, 0x4)
r7 = socket$igmp6(0xa, 0x3, 0x2) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r8=>0x0, 0x29, 0x4, 0x5, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x3, 0xa1}})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x12, r8}) (async)
ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) (async)
r9 = accept$unix(r4, 0x0, &(0x7f0000000500))
getsockname$unix(r9, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) (async)
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020) (async)
clock_gettime(0x0, &(0x7f0000002680)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000002780)={&(0x7f0000002640)={0x1d, r8}, 0x10, &(0x7f0000002740)={&(0x7f00000026c0)={0x3, 0x800, 0x8d78, {0x0, 0x2710}, {r10, r11/1000+60000}, {0x4, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x31, 0x2, 0x0, 0x0, "010150f6d10dacb17917315c3e38f3a449d0ff97d78edbf03aaf5c8ab8ace2f8cdc9c901a94607ec3e2a39695deac8403d3ea5ffb697c2045034703f1d5d16ba"}}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x4000880)
io_setup(0x3, &(0x7f00000027c0)=<r12=>0x0)
io_getevents(r12, 0xf, 0x1, &(0x7f0000002800)=[{}], &(0x7f0000002840)={0x77359400})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000028c0)={'veth1_to_team\x00', &(0x7f0000002880)=@ethtool_test={0x1a, 0x481, 0x81, 0x5, [0x3, 0x875, 0xffffffffffffffff, 0x5, 0x1]}})
sendmmsg(r6, &(0x7f0000004640)=[{{&(0x7f0000002900)=@phonet={0x23, 0xf0, 0x2, 0x6}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002980)="f50bd30759dac83bef295050fa6fe8e909e5c969ae2811dab67abf035f9961d3aa71363edd78773f1f43eeb7cd614e3eb31e3b4ce4eba32053bfe323cf70d2b0da8a41294d2b170bed36c379fe5df6f6878bcade9e8ab1cc45bfc70267041da2cceaaf2e", 0x64}, {&(0x7f0000002a00)="241fbd57a5961110cad9574009a35e09883766a814910c0531fcb672ce3d04dcdad132fa20f8da093810c02ec55430ec6443c84bfcb96a1b0d0dd45e3339019348f7c1e585407761f15b8871e0b47187d4ad5674070be1e3130ec6a7a9617aff24e5dfbf86f09d6768dc213f623847704b5a560f72552a94bde57a1cda8e41b880a1aeacaa050ce3d200a103012fb6c2994df7aec0875c51b9375d67b509a895a5c2c274959172de53efbc87a474", 0xae}, {&(0x7f0000002ac0)="f212d3758a843761f11c3f841f07b3", 0xf}, {&(0x7f0000002b00)="8dfa96f4bcdd569d0669b919711142c7c0117bf130f40f076abacfc266b6b212ddf8ea282e3a76148c319492993c1690d247657574dfe55de13823", 0x3b}, {&(0x7f0000002b40)="066441e096f95b5e09b473534e2cb9839c0b3658a6e607e2d78509ba21d5ba48c02b0bf2e491a3dcc0d8a6ad7d9a8e9486b42bc8e9c1dcb37f17ac6cef8d9a4a4e0b09893a5f69d2a4cfd8ae67aa41b1a50e7ca269d42b4065c5e73308bd2aaf9b", 0x61}, {&(0x7f0000002bc0)="e5f5542182b6a07f4480189852bd3e8ca6b5cbe72321bffbcaee3382edbc07a76e22b8c4665551bacd77b9b4dc2de6316a48f7e96e828e415a5a37ce3e24e91869832324702be498c464e1ce1d2a4815177192c6d0fe3e5d6aec5b82b159573cd72eff9191cea67e38dd0a6f871955303af00d212bc77ce8866c272fcc3fc4b539ffb5a5b17b043f2d0d441ef2401abd6d118c2345491ce50b5dce896666e1cdb64d5f7ec5aec79061342345dcc667a079f7cc05cf3ff250cbc56cd8c78ac204baf425bb0113d1eda5c4f50e07a44eda63b6427e660102f4d894a57bcb4a2e2a25dfb8633e4a", 0xe6}, {&(0x7f0000002cc0)="a15adf0a160d708e580136bc54fda08816ce606efdb312b37a9e0498a6cf8a911145611543bc23f3eb2651d7f485de83215beacb4cdd3666b0eedca752e7132cb653764a39b9c111892fc598c5888abb60bfb076c2b227a8cc395271e06242b2e12fe425b32cf5fa4c9632ea18d44512c488c6aedcb038b27ed96ee7106177a5da37b5d9c0ccad676cebe50caea934bff05dab1e33c45a3d1ec20dc22ec9ac9f480574277aff4b128bb9ec0218300de7c3b306e066d5ac304c647cdfcded906f4f6dc09b39db6b52eeaf509a0433e79715d21e8069c0fe9435d523a2d6a9ac6a3dd7afa0889c3ef6eae934c26ccea1b00c7aa721e59d39", 0xf7}, {&(0x7f0000002dc0)="b992f233968672d1bc0b9d91949f9abe9dc120831994860360434bf6a369eab60bea30a74ccd419a6a6ca55659f9bb5c768aa160f05f4c5a068d2035a1b597c7e6297ea1037812b6e29ff715c6f842636ef354bed7a0c701a28154c2f4207b5bd4957173f035fc1265bff3641cfbd40d9e1859136bffdc91ca8cb69a12ea4e6e18e98b9719c62b5cdb83ec6857ee7e66fc90a70c2b66d85c2472e0673acf2031523a5d6877ab79a53ad805652ea23507318f50702307d6174399109369cf36af2917e6b0f572c891d030297bec1dc213357b1e2b577dcad11e19f276b3995180411f40826cc4a1845937d699fbeea15701", 0xf1}], 0x8, &(0x7f0000002f40)}}, {{&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003000)="a30a4a8fb53702aed83ff454fc3823ec6b48e2fe18834c89b0e54eb8cbdf26abeb709b36f0864add807312391962f52faa104e1e775e895c8f05b455", 0x3c}, {&(0x7f0000003040)="dbfb9858f7152de82b727a981e8d812ccd213aa5b1a6a2b9e99fb679fba60bb88fc4514c21b118299212fb07045d8063720518969ad9a545e7e4a57d443ea60d49da8dfd109f460d6e691b3a211627276023cf07dd5a0e4f77bb39e1ba4ea75e2ba278c3ffe5ca17c3e824d86b2a1cfd8b2c0dfbdc887911f292230536bb3cf7c5068db665699942ec2cc3b9fa8f40ade1622d6bf631fa46dc96d032b57faadee5a0de1f84368cefc875", 0xaa}], 0x2, &(0x7f0000003140)=[{0xc8, 0x10f, 0x8001, "cc5e781d06941deeb05061f69792b3e1d593bf62fb0bd3bde8d357af0b9505f03f478e61159771fe57bd36924fb2887f7048fa20d64b49e7aa7fa67159935cf489ebb1e9e8baea926da0fb38523aca57fd3f112ffc7c474715fd2a49b0a8201cc2f8ec6ada991fbe61c1d5634e68c23c02343c7c5bea56af332e3b032c9b48d0dfdf3ca16fca26b9ccffd4f3106346a5d744f1d74acbc743ea8f24c4f7c9c5ae71e22df003b51e3c261b126b4b4d620e4e5c00"}, {0xc8, 0x10b, 0x256d, "1d21ead1e90f61a728e2087ba0d3255d9200960048f391d7f0dc257e5224da05f2ef16d5132d163850acd2f3c1a25207fca88edaf28b461f6ffe50d771ea583f21bb025c25a8f22ad30c21e23e6aa0d7d4358f619fa5b0577f871020af7964d7475c50332b344eaa05966ae586b43048bd115f7f2f8ae8b2f10eb6d36ef30bec34e97f7a0e21e3e29821fd7243b21c23a17d1e8cd71f2968ab4b8bd303017653ac333c9ce4b8eb52608de081b357f85bb64de9a2"}, {0x60, 0x109, 0x4, "ed075c82964120cf642b8a7778c944f119560365f9d0ca1a1d4c519abfd6aa8c994c39f5a7c3db42863af2e0f537280a00bb722f834077cccdb90d043602c4c757a7ee1560c0726de4a537fc0d4d86bb"}, {0xd0, 0x10e, 0xb1, "87b7cadad63e3d0e91cd1fd4007c6b8bc08ef53f13053efd7450e5402e06e042385e8ce9b6f736381e2dbfe36fe41aee35d27c178ce61f59b1d40026af949af331fdc3dd0af1cc5965ab3e0de5f0a9639ba5279042eb90e00d967c15fcc7652b624a017a72910a5e152ac6d1764543c237684e49563722080a52bafb49d016a2f77f7a9cbf83b2aac5cf7acaa2e31d86e4d709120f2f476fa2a0bea910987586a39740e917628014fcde473dd50fa0701a63bb1d71c353a56940c1c640bdbee6"}, {0x68, 0x88, 0x41, "70861cf2bd15bcbb96c9803cbdc0068c37e212fcb8301574db5492ede4014c301b22cf4139370144b39245c593eead70114180cded2cc35d914891ed28144f31d31ff4655ffbbbb1210a05517b5d4499f845"}, {0x108, 0x1, 0x4, "ac7954435087ba8ccc13c832593eefb302435f5679eaf09d025dcf2ebb58fde32e2a346d188e8fc3730b39bfeb3d9b1a326442ce3da09717a718ffbef646e728e8ef88077e6a47a9094c8496a5359ac4224db72d1a778a0a4cb35ccbfb3526c61c2b0f8142ce53b02c2023575b1d4e01dac39396eabb1e6663425b7bbe4ca65414f51f29b7eb54524997920afcaecf56f4a97d937c0697a59cecd175894bd8e3c3b20171028fa3311366d930186011bc5025738893456949f8587b816b8f1e4ee60eea390b576e7efe16d9da1df428c13a17b61442648a2408a0352887e56353d9fa89ba4911de461a61f64262b742319b836edeca10eb94"}, {0x1010, 0x88, 0x4c0, "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"}], 0x1440}}, {{&(0x7f0000004580)=@ll={0x11, 0x6, r8, 0x1, 0x8, 0x6, @broadcast}, 0x80, &(0x7f0000004600)}}], 0x3, 0x8080)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004700)={'veth0_to_bridge\x00'})
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000004740)=""/118)
listen(r9, 0x5) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000047c0)=0x8) (async)
io_destroy(r12) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000004800))

2.301322471s ago: executing program 4 (id=4103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x1, @random="1f08b379bddd"}, 0x4, {0x2, 0x4e21, @private=0xa010102}, 'lo\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000800)="240000001e005f0314206544a600000000000000010000000100080008fff4c01300ff00", 0x24)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x648081, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x6, 0x80800)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x10, {{0x2, 0x4e21, @remote}}, 0x0, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x310)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000280)={0x0, r6})
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000080)=r6)
close_range(r3, 0xffffffffffffffff, 0x0)

2.233810612s ago: executing program 4 (id=4104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfffffffb]}, 0x45c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000ddbd731082057d0085a300000001090212000100000000090423"], 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d2763", 0x4}], 0x1}, 0x4000001)
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
umount2(&(0x7f0000000240)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/146, 0x92, 0x0, 0xa}}, 0x0}}], 0x0, 0x0, 0x0})

1.885824978s ago: executing program 6 (id=4111):
pipe2$9p(&(0x7f0000000200), 0x800)
r0 = socket(0x10, 0x803, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
setpriority(0x1, 0x0, 0xe)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x8, 0x70bd26, 0x25dfdbff, {{@in=@multicast2, 0x4d3, 0xa, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x3505}}, 0x40}}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
rt_sigqueueinfo(r3, 0x3a, &(0x7f0000000000)={0x20, 0x6c, 0xfffffffe})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000100", @ANYRES16=r4, @ANYBLOB="8b3324000000ffdbdf25150000000c0099000a0000000200000024001d80200000801c000d80180003001400030025000900000802000500630906000800"], 0x44}}, 0x0)
r5 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x80)
ppoll(&(0x7f00000022c0)=[{r5, 0x9}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0xffffff2d)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000)

1.885034418s ago: executing program 0 (id=4112):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) (async)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x800, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x4, 0x7, 0x6, 0x1}, {0xeeee0000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeef0000, 0x9, 0x0, 0x83, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x2000, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0)
mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) (async)
mlock(&(0x7f000035b000/0x400000)=nil, 0x400000)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0xf}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) (async, rerun: 32)
ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) (rerun: 32)

1.832993199s ago: executing program 0 (id=4113):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@empty, @broadcast, 0x0, "8ef4a2c5a0390a66b69cd6909c4bcbbbd155166ce7566134703da305d5674fd6", 0x4, 0xa69, 0xc, 0x9}, 0x3c)
syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0) (async)
mprotect(&(0x7f000014b000/0x4000)=nil, 0x4000, 0x5) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0})

1.294129738s ago: executing program 0 (id=4114):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002e000000101000000020000"], 0x14)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}'])

1.233636289s ago: executing program 0 (id=4115):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x52, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r3)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009000100"], 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001ec0)={'vxcan1\x00', <r5=>0x0})
sendmmsg$sock(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="4ff0d8830288b7332fbb57caafbf21be9d0cadd4deeb5c83fe00fcccd26524cab8fa46cff213c5fdc04b06660d27eb687d0168fc2563540045c2cf13c88ca716395f413a9eff1622d49ce95fcc5478b84e0aea", 0x53}], 0x1, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x30}}, {{&(0x7f00000004c0)=@llc={0x1a, 0x1b, 0x5, 0xda, 0x6, 0x2}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="912ee5c166e6749fecbf2feaf219da3c551908d998b7fbab6f59aaed47017e8280b43805139c17bb97436e3047f7f1815e3021de68404199cac47a68c00680fca62250972f1f30a77ef7556572e01bd67c7269b771bc4b9f467db32c068bdb8efac19592bffeb62ee8b6d33d4a5fe8593f3aa63ff3976bd788bb6b492b73b7712e07098fb9b17b9658c44c681cfe38ee2bcb8228e29f1f5e6e46a090a0e82675bc2ecc5532e0773a6405c5be7318541dc2b7c8f07cac3889ddd7c89157aee2a7fe13b6db616685a67cf173a5bea61ac2f49492f3fe9747698a496c866816853b", 0xe0}, {&(0x7f0000000840)="c7a65b28e103518a19b875a1cfdf1c57ec3fd250184f27496c3b4dbc7f4c004d6ca4d17505a0823c78302797349e636a64b3b241925a0e97f2361a770fabfd561508efa3888425e9f9f84769857779036dc08e81bd01e216b105ec739459ce095bd583cd1f6a4d968011e73cb585876fede973534c7192cf87620afad588b5593b618401284a7a64b9a3f390ec3db28ba915a5f75c5becd8e5961dcba39c4e61a9d07293fd3949cf09a07a0296470a26e852bc6760ad047a5199eb1f1cba5d4987a33c1be692a0d1b6bc132f77378434b37e07c83e3e94cc6b62b9d038b6931d7928e29d165bfbd84b6a015857bbd340067b10b57cfacce14c29c02ed2f623", 0xff}, {&(0x7f0000000540)="ae5669282756195a4701e2bf4988fc9379c04cacbb4cd1e9ab8966cc9f685d524df93b80cd29b16861b1107f92c21c806c5d1d1cdae27db3cf26ae5673ff53c47f07ba4ba91881331f796eb54e95496a3f0add8013b15257cbab88f69906a2f91214d4423cc397dfc39464ec9a41307e75b728dfe2db05e54bc8cee46a49d6d45d12400ba17dc1a03d464fee918ff1f25d2f7181f568acbb217510a075b89e452d608ea0ca1d20dc889e29d4bd2dcae9120b5ec2b4b18f102076a9b897a2", 0xbe}, {&(0x7f0000000940)="63e5570369ed31b4c19b8e2314bb44efdb616445ccd74298a12a38cd16f4b23435b0f411d116cb4b1210735cd2111094b926d1c74404be2172875ec462fab8f6a60e414635fe4a62af5a9e794c3289dd0cc5afc8b8f60281bcbd108c9fbbdd0bb32452727ac0e93dc94c1d9490e50a8bd6d612495e81604b08af24366e24830513da0f", 0x83}, {&(0x7f0000000a00)="23cd911b42e967feeb0ce99203b82f8198b95bc4f7b5153ba593210d2f0b2d6ac8f89a8ba54d864574492a64fb8ba8ffe59c43e1643a07e601f47b58ab1c5b0c2c7d7f67314ecffc8916f06d4ea393b3dc174df24d45a798e196e5b4966bef60f424a6ec8aa4e3792cc7ea6270b77c220c501df8f8dd19024db73276ab5834c3774cd5fb3027858bc85ccfd578278accf72c894a51e85f753f461826dbc8ff6f", 0xa0}], 0x5, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b40)="f7673496eeae5fd406a384a491f36fa1d1e57ec1b8ba9184adb5b720575412bc98cee9697e69b7e800ef6ea4c49e65807e750931f8f441453f1ec2a549f1b91ededc79ba767fe03b0db9c7a7a232d2eb94c882b9a2c382653de93439820da6f1dcaa6152a0883e92d325ac417511ba59d28ac8999b1a0e7fb2a9b465e0cec87bdc1615525f662a0eabd9936d84ab32253d116097adc273275688535f1297328d990edb532bd5da31a2947c90d03c166724c7d355860340e28f11d8eb7366c747be472b9fad9d869146dc8b41", 0xcc}, {&(0x7f0000000c40)="344f5be6a1b40992390e987805df1158875e1a0e3f1bba667afe59e9db9ddb76f5e82b0a3e7b78dce1da51d36fb7991b4375ba9040e325549562bd59fa37325bbaecd3f0d2bfc26c8c9fefb68f0254a72030e105f46a705134dab6381b05af577ca9c982ab050d8dcca345df4a0628e43158c10dab5b31c25839f153f8563d038a35a9278ccbe9dcb24d1e4d80cd73fa17ef53eaf5400088e560f5e0db47", 0x9e}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="aa3a9e70f156dea4be79286df6c90e124dd8ad76bc1b336990c3cdd7d9a8535ece99c24a3ccbafcbf1276163788263dd5f2fd3b8293d96f8495469583d5a59d474dec895dd9da54947849d8f5fa505d5a533b42119a9f9699b668f2e68545c1dcb52bc8130c2f4198524d5bdd25bb74a1f3c05ccad304c4485e22053171fdc235e0c", 0x82}, {&(0x7f0000001dc0)="cf69e8ef69670ed19020d8c6aec81891d3b7dd541138e10f33262205d3e0c008973dd89345662e879f25b8e83e4aa27184e82bdba305afb43a0667bf4a", 0x3d}, {&(0x7f0000001e00)="1c68da9ca8f415d223f054df", 0xc}], 0x6}}, {{&(0x7f0000001f00)=@can={0x1d, r5}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)="8d2a2e50bfa4319d23a94014c8ec5de077fca7196b0754218734f980f234ca3114e71d0c6f715b7c16770a54f67c7b9c6c4654b3b00f41ccd534000af45b", 0x3e}, {&(0x7f0000002080)="32d915df611e41e0be22e3846c6b562983ec817d707050c2c1d4229fec5b02ccc227ef61508e10f838a4b996c804a6e236d8086ac9d2012e58cfb7d4298aa472bc3978847a83c0005125b7e2904744ba7c711edd0a59862c96d047b77a75f62046e9f8263af07b7fb164f6d03ed08261bad8591a7482ad7688b01dfe5e7e69fa2c803d59c53d", 0x86}, {&(0x7f0000002140)="eda7bb0240f343b563aa08fed40e5cbb67ec1090fce8f668b0ee014abefcf4e408cf923a53aa9fca2a5dc7cbc836448ca1879e6d32f0cd32f78589cd186a96bd34f466468e22df85a549dae5a338dd6fca499095b168378ea7a7bda46651cec41be243c3101c9dacbded64c10a45a1519da44f4ac6224639470898394e3f7957eb6747c04d412ac44380ec39fb", 0x8d}, {&(0x7f0000001fc0)="ec9ff73c5206eb9654dbe6e01b9a53ebd7721e8df4bdf66219aa9a9ceeff014e17497810f0719dac45eb55437748bd498b384797f7627e1a0f98471d3ccefdcc01f0a909f1aabd3ce04e", 0x4a}, {&(0x7f0000002200)="11b06a2cc8900ce3cd337aa0bd6d040285591c57ae3d54db60e207bfadfe4d28a3c61f8219b964eeacd14e889e09ab82bf320b81062cdfd8fec69e6cadc94403a1bb8d08ac72f3b050001545d34d0d79493ac34df0befca2627b2feb02237594e1c717447edbafa5130000581a8a5daed9722efa0c88acacbcaa7eaa5e31183046a96257f524349a611c72940f6708e59a5dea2cf67febb725efc19c11cd3b1dc0e36d235e0026175db217bd334dd24118a3809ab664d4ffda6c591403251dd61f34dd5fb48c541dc90393b0bfe23b02a3cf4d6ccaa7e8bf08a4146e881c", 0xde}, {&(0x7f0000002300)="760ca20d", 0x4}], 0x6, &(0x7f00000023c0)=[@mark={{0x14, 0x1, 0x24, 0x707fee7c}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}}], 0x4, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00')
lseek(r6, 0xffffffffffff0000, 0x0)
r7 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x6, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f5, 0x0, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x8000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1.024593183s ago: executing program 6 (id=4116):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000000)=""/24, 0x18})
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), 0x4)
fadvise64(r0, 0xa, 0x400, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

963.678854ms ago: executing program 7 (id=4117):
pipe2$9p(&(0x7f00000028c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x880)
write$P9_RWRITE(r1, &(0x7f0000002900)={0xb, 0x77, 0x401, 0x9cfd}, 0xb)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0)
madvise(&(0x7f0000a39000/0x3000)=nil, 0x3000, 0x19)
pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f000045e000/0x4000)=nil, 0x4000, 0x4, 0x30, r5, 0x98f7b000)
shutdown(r5, 0x0)
sendmsg$inet(r6, &(0x7f0000009380)={0x0, 0x0, 0x0}, 0x44080)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000064c0), 0x1, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000002880))
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
recvmsg$unix(r7, &(0x7f0000002840)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002a80)=""/220, 0xdc}, {&(0x7f0000002b80)=""/212, 0xd4}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f0000002980)=""/224, 0xe0}, {&(0x7f00000016c0)=""/80, 0x50}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x8, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0xe2e7096f8abe87ca)
sendfile(r0, r6, &(0x7f0000002940)=0x400, 0x5)
fcntl$setlease(r5, 0x400, 0x2)

963.227584ms ago: executing program 7 (id=4118):
r0 = memfd_secret(0x80000)
fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@local, @mcast2, @mcast2, 0x76, 0x6, 0x0, 0x100, 0x0, 0x87220082})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000200), 0xfea7)
copy_file_range(r6, &(0x7f00000001c0), r5, 0x0, 0xffffffffa003e45b, 0x700000000000000)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x84180, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f00000005c0)={r8, 0x1, 0x6, @broadcast}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

898.452995ms ago: executing program 6 (id=4119):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x1d0003, 0x0, [0x80000000, 0xffff, 0xc3, 0x4, 0x5, 0xed2, 0xfffe, 0x86]})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000280)="65660f38815bd80f30b952090000b800400000ba000000000f309a1a4c00008600260fc7ab687000000f01c3c7442400693e0ceac744240200600000c7442406000000000f011c2466baf80cb81202578cef66bafc0c66b80d0066efc4e2ed39c8f0876ff2", 0x65}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

821.729166ms ago: executing program 6 (id=4120):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x99, 0x0, 0x1000000000000000, 0x0, 0x545}, {0x9, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd26, 0x3500, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x24000840)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xb0000005})
epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
close(0x3)
timer_create(0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1000006, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
pipe(&(0x7f00000001c0)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x99, 0x0, 0x1000000000000000, 0x0, 0x545}, {0x9, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd26, 0x3500, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) (async)
syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x24000840) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_create1(0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xb0000005}) (async)
epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async)
close(0x3) (async)
timer_create(0x0, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1000006, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

709.675728ms ago: executing program 0 (id=4121):
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)

699.330908ms ago: executing program 6 (id=4122):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x80, 0x3})
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002180)=""/4067, 0xfe3}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000001080)=""/255, 0xff}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000003c0)=""/80, 0x50}], 0x9}, 0x81}], 0x3, 0x2102, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @fda={0x66646185, 0x8, 0x400, 0x9}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0})

637.556029ms ago: executing program 6 (id=4123):
r0 = userfaultfd(0x801)
socket(0x10, 0x3, 0x0)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2, 0x9, 0x9, 0x9, 0x23, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x8, 0x1, 0x6a, 0x4, 0x20000000}, @sadb_key={0x3, 0x9, 0x68, 0x0, "22ebe9954d102d0a48073fb8c2"}, @sadb_lifetime={0x4, 0x3, 0x800, 0x0, 0x3, 0x3}, @sadb_x_filter={0x0, 0x1a, @in=@local, @in=@private=0xa010101, 0x6, 0x1c, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_ident={0x0, 0xa, 0x4, 0x0, 0x6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x9, 0x77, 0x1, 0xa0000001}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_key={0xd, 0x8, 0x2d0, 0x0, "5309d67ddd4cc8d5513b46f1961130d40c2e9f482630a01ddb54e1da04116f16c4a2443727d57d74147555eb94e2569e80d980c22ddf4f9ad72b7c35c8cdc2978aae5423ce6ed0eff9be325d75be429365a06b57403a59227c6e"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x40, 0x3d, 0x2, 0x80000003}]}, 0x118}}, 0x4004000)
pselect6(0x40, &(0x7f0000000300)={0x2, 0x8, 0x69, 0xc, 0x7, 0xfffffffffffffffa, 0xffffffffffffffff, 0x530}, 0x0, &(0x7f0000000380)={0x30, 0x62, 0x7e7a542d, 0xffffffffffffeabc, 0x2, 0x1, 0x6, 0x800}, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110a, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x2, 0x0, 0x3}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000001)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1})
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r7, 0x147a5000)
socket$packet(0x11, 0x2, 0x300)
r8 = socket(0x10, 0x3, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x2050, &(0x7f0000000280)=ANY=[@ANYBLOB="4404", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
userfaultfd(0x1)

151.822768ms ago: executing program 0 (id=4124):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = inotify_init()
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000199c4f20c9070e004f5d9d7d03010902240001000010000904d60202ffff0000090502020002092d461e3ece"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x108)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="7865da1c9d66e2be8659a0ca598df7f032bcddac35d891ac319cfe8d7f5a2293ef4ed760f7ec7f1a1069f6e457e676586a048825", @ANYRES16=0x0, @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x1a4}}, 0x0)
syz_usb_connect(0x2, 0x8d5, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x6, 0x5, 0x20, 0x3}, 0xa4, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r2], 0x1, [{0xdb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r1]}]})
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
r8 = socket(0x9, 0x6, 0x24)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0)
write(r8, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000003000000000005200", 0x1c)
readv(r7, &(0x7f0000000400)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/255, 0xff}], 0x5)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r10, r9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x19)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000840)={@flat=@handle={0x73682a85, 0x1000}, @fd, @fda={0x66646185, 0x6, 0x1, 0x1f}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0x4)
fadvise64(r0, 0x5, 0x10, 0x2)

99.661198ms ago: executing program 7 (id=4125):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000), 0x4)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f00000000c0)=0x3)

0s ago: executing program 7 (id=4126):
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x64)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x67, 0x0, 0xee01}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0xffffffe000000002, 0x0, 0x40000000000000, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000000}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600cd1140ef86b582a12c410a"], 0x14}}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="24010000280004002bbd7000ffdbdf250700000008000800233a40000ff508a3be598b669215091ee3e868d7183e4d497a95a00540c63487b2a852b7b5b3e0f386f206d0718d73779cbe8d5e582a6620808119c7f034d7ead42b94b81476ce9d1d76ac0cd6af0afbf0077a4c4834a5a0dfb71069f43fd7600b1b1e8a2dd7f4be34b80094dd18fcc651c609c90a3a12cf56d3eb192e17f11a77cad45e72fb9891854c4075f11572323a32200e412b82c5f14b429ce113f788bb88e1164c9e96a4ce40b1551f5d31f7ca0348c7a91d428879cb52bd560a41558062845c371ea2b16984bba89b6458f68d7e99e6fd019e3f793a8b1d28000480040013800400278004000f8008000600ac1e01010b00440062696e646572000004002b93d0798e343c834b8008"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00'])

kernel console output (not intermixed with test programs):

syz.3.2271" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  151.230822][ T7666] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  151.240387][ T7666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  151.266952][ T7669] devpts: called with bogus options
[  151.463728][ T7695] netlink: 'syz.3.2287': attribute type 1 has an invalid length.
[  151.896735][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  152.057080][    T9] usb 4-1: Using ep0 maxpacket: 16
[  152.063420][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.074543][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  152.083633][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.092614][    T9] usb 4-1: config 0 descriptor??
[  152.206758][ T1123] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.379290][ T7730] overlayfs: failed to resolve './file1': -2
[  152.454131][ T7738] fuse: Bad value for 'fd'
[  152.464300][ T7739] fuse: Bad value for 'group_id'
[  152.469291][ T7739] fuse: Bad value for 'group_id'
[  152.486909][   T36] audit: type=1400 audit(1753391275.561:976): avc:  denied  { append } for  pid=7733 comm="syz.4.2299" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  152.533465][    T9] hid-generic 0003:04D8:00DD.0006: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  152.586465][ T7750] tipc: Started in network mode
[  152.591377][ T7750] tipc: Node identity 7f000001, cluster identity 4711
[  152.598724][ T7750] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.647762][ T7726] ./cgroup: Can't lookup blockdev
[  153.107045][ T7766] overlayfs: failed to resolve './file0': -2
[  153.788979][   T31] tipc: Node number set to 2130706433
[  153.940101][ T7822] cgroup: none used incorrectly
[  153.945819][ T7822] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.961025][   T36] audit: type=1400 audit(2000000000.757:977): avc:  denied  { mounton } for  pid=7825 comm="syz.4.2326" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  153.962353][ T7826] lo: entered allmulticast mode
[  153.997172][ T7826] lo: left allmulticast mode
[  154.002137][   T36] audit: type=1400 audit(2000000000.785:978): avc:  denied  { connect } for  pid=7825 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  154.032303][   T36] audit: type=1400 audit(2000000000.813:979): avc:  denied  { create } for  pid=7827 comm="syz.4.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  154.101260][   T36] audit: type=1400 audit(2000000000.879:980): avc:  denied  { append } for  pid=7829 comm="syz.4.2328" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  154.124324][   T36] audit: type=1400 audit(2000000000.907:981): avc:  denied  { connect } for  pid=7829 comm="syz.4.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  154.856725][    T9] usb 4-1: USB disconnect, device number 3
[  154.874590][ T7872] SELinux: security_context_str_to_sid (sytem_u�Gй00000000000000000000005) failed with errno=-22
[  155.221577][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  155.392549][    T9] usb 4-1: Using ep0 maxpacket: 16
[  155.398771][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.424626][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.434979][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  155.444444][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.452612][    T9] usb 4-1: Product: syz
[  155.457249][    T9] usb 4-1: Manufacturer: syz
[  155.461850][    T9] usb 4-1: SerialNumber: syz
[  155.682041][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  155.682058][   T36] audit: type=1400 audit(2000000002.366:983): avc:  denied  { write } for  pid=7875 comm="syz.3.2344" name="usbmon6" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  155.711539][   T36] audit: type=1400 audit(2000000002.366:984): avc:  denied  { open } for  pid=7875 comm="syz.3.2344" path="/dev/usbmon6" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  156.463732][ T7905] overlay: Unknown parameter 'subj_role'
[  156.490798][ T7910] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  157.233891][   T36] audit: type=1400 audit(2000000003.816:985): avc:  denied  { mounton } for  pid=7948 comm="syz.0.2370" path="/" dev="configfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  157.233952][ T7949] 9pnet_fd: Insufficient options for proto=fd
[  157.316877][ T7964] 
: renamed from bond_slave_0
[  157.387581][ T7967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2376'.
[  158.116578][    T9] usb 4-1: 0:2 : does not exist
[  158.126420][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  158.150749][    T9] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5)
[  158.165312][    T9] usb 4-1: USB disconnect, device number 4
[  158.189887][   T36] audit: type=1400 audit(2000000004.705:986): avc:  denied  { unmount } for  pid=7220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  158.220865][ T7990] binder: Bad value for 'max'
[  158.273058][ T7999] netlink: 'syz.3.2387': attribute type 4 has an invalid length.
[  158.281081][ T7999] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.2387'.
[  158.333321][ T8004] /dev/rnullb0: Can't open blockdev
[  159.393221][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2406'.
[  159.468063][ T8185] rust_binder: Error in use_page_slow: ESRCH
[  159.468087][ T8185] rust_binder: use_range failure ESRCH
[  159.474166][ T8184] rust_binder: Error in use_page_slow: ESRCH
[  159.479716][ T8184] rust_binder: use_range failure ESRCH
[  159.485710][ T8184] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[  159.491299][ T8185] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[  159.499273][ T8184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  159.499273][ T8185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  159.499300][ T8184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91
[  159.507086][ T8185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91
[  159.552690][   T36] audit: type=1400 audit(2000000005.986:987): avc:  denied  { bpf } for  pid=8186 comm="syz.3.2411" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  159.615491][   T36] audit: type=1400 audit(2000000006.042:988): avc:  denied  { listen } for  pid=8191 comm="syz.3.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  160.438554][ T1081] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  160.600001][ T1081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.612585][ T1081] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  160.624269][ T1081] usb 4-1: config 1 has no interface number 0
[  160.630373][ T1081] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.643313][   T36] audit: type=1400 audit(2000000006.987:989): avc:  denied  { map } for  pid=8211 comm="syz.0.2420" path="socket:[29284]" dev="sockfs" ino=29284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  160.666679][   T36] audit: type=1400 audit(2000000006.987:990): avc:  denied  { write } for  pid=8211 comm="syz.0.2420" path="socket:[29284]" dev="sockfs" ino=29284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  160.691297][ T1081] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.700525][ T1081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.708678][ T1081] usb 4-1: Product: syz
[  160.712871][ T1081] usb 4-1: Manufacturer: syz
[  160.717651][ T1081] usb 4-1: SerialNumber: syz
[  160.728483][ T1081] usb 4-1: selecting invalid altsetting 1
[  160.941033][ T1081] cdc_ncm 4-1:1.1: bind() failure
[  160.952980][ T1081] usb 4-1: USB disconnect, device number 5
[  161.448491][ T8234] SELinux: security_context_str_to_sid () failed with errno=-22
[  161.774901][ T1081] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  161.913871][ T1081] usb 4-1: device descriptor read/64, error -71
[  162.146338][ T8256] overlayfs: failed to clone upperpath
[  162.170442][ T1081] usb 4-1: device descriptor read/64, error -71
[  162.427004][ T1081] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  162.565968][ T1081] usb 4-1: device descriptor read/64, error -71
[  162.704954][ T8260] sit0: entered promiscuous mode
[  162.710843][ T8260] netlink: 'syz.0.2440': attribute type 1 has an invalid length.
[  162.718743][ T8260] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2440'.
[  162.746682][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'.
[  162.788111][ T8277] veth1_vlan: mtu greater than device maximum
[  162.833249][ T1081] usb 4-1: device descriptor read/64, error -71
[  162.950921][ T1081] usb usb4-port1: attempt power cycle
[  163.314301][ T1081] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  163.336731][ T1081] usb 4-1: device descriptor read/8, error -71
[  163.475647][ T1081] usb 4-1: device descriptor read/8, error -71
[  163.731607][ T1081] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  163.753633][ T1081] usb 4-1: device descriptor read/8, error -71
[  163.891062][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.898266][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.907918][ T8305] bridge_slave_0: entered allmulticast mode
[  163.915577][ T1081] usb 4-1: device descriptor read/8, error -71
[  163.922423][ T8305] bridge_slave_0: entered promiscuous mode
[  163.929199][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.936616][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.943784][ T8305] bridge_slave_1: entered allmulticast mode
[  163.950169][ T8305] bridge_slave_1: entered promiscuous mode
[  164.026782][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.033881][ T8305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.041139][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.048400][ T8305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.055833][ T1081] usb usb4-port1: unable to enumerate USB device
[  164.074856][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.082130][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.092793][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.099882][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.108582][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.115627][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.138819][ T8305] veth0_vlan: entered promiscuous mode
[  164.149035][ T8305] veth1_macvtap: entered promiscuous mode
[  164.283491][ T8311] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  164.727182][ T8317] kvm: user requested TSC rate below hardware speed
[  164.767912][ T8323] batadv_slave_1: entered promiscuous mode
[  164.774554][ T8322] batadv_slave_1: left promiscuous mode
[  164.909619][   T36] audit: type=1400 audit(2000000010.990:991): avc:  denied  { setopt } for  pid=8326 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  164.930498][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'.
[  165.032691][   T36] audit: type=1400 audit(2000000011.028:992): avc:  denied  { bind } for  pid=8326 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  165.067587][   T36] audit: type=1326 audit(2000000011.131:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4638e9a9 code=0x7fc00000
[  165.305485][   T36] audit: type=1400 audit(2000000011.365:994): avc:  denied  { read append } for  pid=8336 comm="syz.0.2465" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  165.382534][ T8340] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=269 sclass=netlink_xfrm_socket pid=8340 comm=syz.0.2466
[  165.395547][   T36] audit: type=1400 audit(2000000011.365:995): avc:  denied  { open } for  pid=8336 comm="syz.0.2465" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  165.495042][   T36] audit: type=1400 audit(2000000011.421:996): avc:  denied  { ioctl } for  pid=8339 comm="syz.0.2466" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  165.500050][ T8346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.521897][ T8346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.535491][ T8346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.557146][ T8346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.566456][ T8346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.013056][   T36] audit: type=1400 audit(2000000012.019:997): avc:  denied  { append } for  pid=8372 comm="syz.4.2475" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  166.234912][ T8382] rust_binder: Error while translating object.
[  166.234948][ T8382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  166.241288][ T8382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:142
[  167.021377][ T8386] rust_binder: 148: no such ref 2
[  167.934940][   T36] audit: type=1400 audit(2000000013.825:998): avc:  denied  { write } for  pid=8391 comm="syz.3.2481" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  167.955982][   T36] audit: type=1400 audit(2000000013.825:999): avc:  denied  { open } for  pid=8391 comm="syz.3.2481" path="/52/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  168.039897][ T8398] syzkaller0: entered promiscuous mode
[  168.045693][ T8398] syzkaller0: entered allmulticast mode
[  168.161176][ T8401] overlayfs: conflicting options: userxattr,redirect_dir=on
[  168.224723][ T8400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  168.224746][ T8400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162
[  168.353243][   T36] audit: type=1400 audit(2000000014.218:1000): avc:  denied  { read } for  pid=8413 comm="syz.3.2489" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  168.437357][ T8419] rust_binder: 181: no such ref 0
[  168.443166][ T8419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181
[  168.459636][ T8421] binder: Bad value for 'max'
[  168.979255][ T8448] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  169.162097][  T420] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  169.247669][ T1081] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  169.306378][ T8452] rust_binder: 181: no such ref 0
[  169.311556][ T8452] rust_binder: 181: no such ref 0
[  169.311745][  T420] usb 4-1: device descriptor read/64, error -71
[  169.410356][ T1081] usb 1-1: Using ep0 maxpacket: 32
[  169.420109][ T1081] usb 1-1: unable to get BOS descriptor or descriptor too short
[  169.436040][ T8471] binder: Unknown parameter 'fTcontext'
[  169.441901][ T1081] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.451290][ T1081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.459314][ T1081] usb 1-1: Product: syz
[  169.464687][ T1081] usb 1-1: Manufacturer: syz
[  169.469376][ T1081] usb 1-1: SerialNumber: syz
[  169.579095][  T420] usb 4-1: device descriptor read/64, error -71
[  169.731347][ T1081] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  169.740865][ T1081] usb 1-1: USB disconnect, device number 23
[  169.750913][ T7611] udevd[7611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  169.835576][  T420] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  169.974553][  T420] usb 4-1: device descriptor read/64, error -71
[  170.231184][  T420] usb 4-1: device descriptor read/64, error -71
[  170.349429][  T420] usb usb4-port1: attempt power cycle
[  170.365615][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  170.365631][   T36] audit: type=1400 audit(2000000016.098:1002): avc:  denied  { map } for  pid=8475 comm="syz.0.2511" path="socket:[31428]" dev="sockfs" ino=31428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  170.412998][   T36] audit: type=1400 audit(2000000016.135:1003): avc:  denied  { setattr } for  pid=8478 comm="syz.0.2513" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  170.513610][ T8488] netlink: 'syz.0.2516': attribute type 64 has an invalid length.
[  170.522948][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.530001][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.537204][ T8484] bridge_slave_0: entered allmulticast mode
[  170.544858][ T8484] bridge_slave_0: entered promiscuous mode
[  170.551192][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.558236][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.565382][ T8484] bridge_slave_1: entered allmulticast mode
[  170.571598][ T8484] bridge_slave_1: entered promiscuous mode
[  170.598667][ T8495] binder: Bad value for 'stats'
[  170.655968][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.663054][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.670370][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.677396][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.712403][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.723641][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.744301][  T420] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  170.744533][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.758959][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.778468][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.784988][  T420] usb 4-1: device descriptor read/8, error -71
[  170.785555][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.832160][ T8484] veth0_vlan: entered promiscuous mode
[  170.856221][ T8504] netlink: 1603 bytes leftover after parsing attributes in process `syz.0.2520'.
[  170.866199][ T8504] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  170.866221][ T8504] rust_binder: Read failure Err(EFAULT) in pid:47
[  170.866784][ T8484] veth1_macvtap: entered promiscuous mode
[  170.927832][  T420] usb 4-1: device descriptor read/8, error -71
[  170.945020][ T8506] kvm: kvm [8505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  170.954232][ T8506] kvm: kvm [8505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  170.969278][ T8506] kvm_intel: kvm [8505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  170.980324][ T8506] kvm: kvm [8505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  170.984525][   T10] rust_binder: 8507: removing orphan mapping 0:1048
[  170.988878][ T8506] kvm: kvm [8505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  171.055430][   T36] audit: type=1400 audit(2000000016.743:1004): avc:  denied  { read } for  pid=8517 comm="syz.0.2524" path="socket:[32163]" dev="sockfs" ino=32163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  171.184782][  T420] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  171.203479][ T8525] rust_binder: 13: no such ref 0
[  171.208856][ T8525] rust_binder: 13: no such ref 0
[  171.215991][  T420] usb 4-1: device descriptor read/8, error -71
[  171.276966][ T8537] rust_binder: Error while translating object.
[  171.277001][ T8537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  171.283442][ T8537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25
[  171.365356][  T420] usb 4-1: device descriptor read/8, error -71
[  171.407987][ T8543] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.492751][  T420] usb usb4-port1: unable to enumerate USB device
[  172.540310][   T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  172.569520][ T8559] rust_binder: 8558 RLIMIT_NICE not set
[  172.569732][ T8558] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  172.575327][ T8558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  172.583349][ T8558] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender.
[  172.592733][ T8558] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:40
[  172.701686][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.722292][   T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  172.731560][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.740732][   T45] usb 4-1: config 0 descriptor??
[  172.749602][ T8563] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  172.792212][ T8568] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.821103][   T36] audit: type=1400 audit(2000000018.389:1005): avc:  denied  { append } for  pid=8569 comm="syz.4.2544" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  172.875091][ T8572] binder: Unknown parameter 'dirsy$������'
[  172.881532][ T8572] binder: Unknown parameter 'dirsy$������'
[  172.921950][ T8575] binder: Bad value for 'stats'
[  172.948185][ T8577] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.949480][ T8577] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  172.952317][   T36] audit: type=1400 audit(2000000018.511:1006): avc:  denied  { ioctl } for  pid=8578 comm="syz.0.2547" path="socket:[33051]" dev="sockfs" ino=33051 ioctlcmd=0xae8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  173.008484][   T36] audit: type=1400 audit(2000000018.539:1007): avc:  denied  { write } for  pid=8578 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  173.065104][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2552'.
[  173.205722][   T45] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  173.212710][   T45] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  173.219829][   T45] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  173.226819][   T45] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  173.233947][   T45] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  173.241901][   T45] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  173.280276][   T45] rust_binder: 8557: removing orphan mapping 0:4120
[  173.333055][ T8602] fuse: Unknown parameter 'ro
'
[  173.368468][ T8602] rust_binder: 48: no such ref 3
[  173.373462][ T8602] rust_binder: Write failure EFAULT in pid:48
[  173.437627][   T45] usb 4-1: USB disconnect, device number 14
[  173.475292][ T8614] KVM: debugfs: duplicate directory 8614-4
[  173.604446][ T8619] binder: Bad value for 'max'
[  173.704189][ T8630] rust_binder: 59: no such ref 1
[  173.716247][ T8630] rust_binder: 59: no such ref 2
[  173.818816][ T8636] rust_binder: 91: no such ref 2
[  173.823915][ T8636] rust_binder: Write failure EFAULT in pid:91
[  173.898773][ T8641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95
[  173.918086][ T8643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.939321][   T36] audit: type=1400 audit(2000000019.437:1008): avc:  denied  { mount } for  pid=8642 comm="syz.0.2571" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  174.049744][   T36] audit: type=1400 audit(2000000019.540:1009): avc:  denied  { write } for  pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33339 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  174.075549][ T8657] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2572'.
[  174.261497][   T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  174.347009][   T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  174.423162][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  174.431289][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  174.439871][   T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  174.448361][   T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  174.458619][   T10] usb 4-1: config 4 has no interface number 0
[  174.466267][   T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  174.475399][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.483383][   T10] usb 4-1: Product: syz
[  174.487577][   T10] usb 4-1: Manufacturer: syz
[  174.492702][   T10] usb 4-1: SerialNumber: syz
[  174.518483][   T45] usb 1-1: too many configurations: 151, using maximum allowed: 8
[  174.533630][   T45] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  174.542994][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  174.551304][   T45] usb 1-1: Product: syz
[  174.555655][   T45] usb 1-1: Manufacturer: syz
[  174.560258][   T45] usb 1-1: SerialNumber: syz
[  174.565607][   T45] usb 1-1: config 0 descriptor??
[  174.713562][ T8656] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2574'.
[  174.732174][ T8656] binder: Unknown parameter 'context��a|r�|��q3~I�����-z'
[  174.746272][   T10] usb 4-1: USB disconnect, device number 15
[  174.786939][ T8657] futex_wake_op: syz.0.2572 tries to shift op by -1; fix this program
[  174.796034][ T8657] rust_binder: Error while translating object.
[  174.796148][ T8657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  174.802332][ T8657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[  174.870885][ T1358] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  175.042038][ T1358] usb 6-1: Using ep0 maxpacket: 8
[  175.048580][ T1358] usb 6-1: unable to get BOS descriptor or descriptor too short
[  175.057109][ T1358] usb 6-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11
[  175.068597][ T1358] usb 6-1: config 1 interface 0 has no altsetting 0
[  175.076761][ T1358] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40
[  175.085886][ T1358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.093904][ T1358] usb 6-1: Product: syz
[  175.098085][ T1358] usb 6-1: SerialNumber: syz
[  175.294487][ T8661] rust_binder: 212: no such ref 3
[  175.316275][ T8664] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.316543][ T8663] rust_binder: Failed to allocate buffer. len:4104, is_oneway:true
[  175.332593][ T8663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  175.332624][ T8663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:214
[  175.557792][ T8669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=8669 comm=syz.3.2579
[  175.592723][ T8671] __vm_enough_memory: pid: 8671, comm: syz.3.2580, bytes: 8589934592 not enough memory for the allocation
[  176.249942][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  176.326934][ T8680] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.327865][ T8680] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.334818][ T8680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227
[  176.380888][ T8690] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.390421][ T8690] rust_binder: 237: no such ref 3
[  176.402024][ T8690] rust_binder: Write failure EFAULT in pid:237
[  176.410503][   T10] usb 4-1: Using ep0 maxpacket: 32
[  176.426422][ T8692] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.426851][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  176.447694][   T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  176.456611][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.466919][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.478182][   T10] usb 4-1: string descriptor 0 read error: -22
[  176.484505][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.493666][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.511792][   T10] usb 4-1: 0:2 : does not exist
[  176.528925][ T8698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2589'.
[  176.726477][   T36] audit: type=1400 audit(2000000022.047:1010): avc:  denied  { execute } for  pid=8676 comm="syz.3.2582" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  176.732434][   T10] usb 4-1: USB disconnect, device number 16
[  177.204559][   T45] usb 1-1: bad CDC descriptors
[  177.218864][   T45] usb 1-1: USB disconnect, device number 24
[  177.227930][ T8701] fuse: Unknown parameter '0x00000000000000040x0000000000000003'
[  177.397500][   T36] audit: type=1400 audit(2000000022.674:1011): avc:  denied  { shutdown } for  pid=8725 comm="syz.3.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  177.433974][   T36] audit: type=1400 audit(2000000022.702:1012): avc:  denied  { mounton } for  pid=8727 comm="syz.3.2598" path="/88/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  177.458185][   T36] audit: type=1400 audit(2000000022.730:1013): avc:  denied  { unmount } for  pid=7463 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  177.497847][ T8736] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  177.522549][   T36] audit: type=1400 audit(2000000022.795:1014): avc:  denied  { append } for  pid=8738 comm="syz.3.2601" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  177.546084][   T36] audit: type=1400 audit(2000000022.795:1015): avc:  denied  { connect } for  pid=8738 comm="syz.3.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  177.608504][ T8750] fuseblk: Bad value for 'user_id'
[  177.613697][ T8750] fuseblk: Bad value for 'user_id'
[  177.619055][ T8750] fuseblk: Bad value for 'user_id'
[  177.624312][ T8750] fuseblk: Bad value for 'user_id'
[  177.629708][ T8750] fuseblk: Bad value for 'user_id'
[  177.634866][ T8750] fuseblk: Bad value for 'user_id'
[  177.640153][ T8750] fuseblk: Bad value for 'user_id'
[  177.645421][ T8750] fuseblk: Bad value for 'user_id'
[  177.650709][ T8750] fuseblk: Bad value for 'user_id'
[  177.655866][ T8750] fuseblk: Bad value for 'user_id'
[  177.661198][ T8750] fuseblk: Bad value for 'user_id'
[  177.666342][ T8750] fuseblk: Bad value for 'user_id'
[  177.671602][ T8750] fuseblk: Bad value for 'user_id'
[  177.676808][ T8750] fuseblk: Bad value for 'user_id'
[  177.682151][ T8750] fuseblk: Bad value for 'user_id'
[  177.687332][ T8750] fuseblk: Bad value for 'user_id'
[  177.692654][ T8750] fuseblk: Bad value for 'user_id'
[  177.697835][ T8750] fuseblk: Bad value for 'user_id'
[  177.703091][ T8750] fuseblk: Bad value for 'user_id'
[  177.708302][ T8750] fuseblk: Bad value for 'user_id'
[  177.713641][ T8750] fuseblk: Bad value for 'user_id'
[  177.718806][ T8750] fuseblk: Bad value for 'user_id'
[  177.724137][ T8750] fuseblk: Bad value for 'user_id'
[  177.729309][ T8750] fuseblk: Bad value for 'user_id'
[  177.734743][ T8750] fuseblk: Bad value for 'user_id'
[  177.739888][ T8750] fuseblk: Bad value for 'user_id'
[  177.745184][ T8750] fuseblk: Bad value for 'user_id'
[  177.750629][ T8750] fuseblk: Bad value for 'user_id'
[  177.756134][ T8750] fuseblk: Bad value for 'user_id'
[  177.761382][ T8750] fuseblk: Bad value for 'user_id'
[  177.766600][ T8750] fuseblk: Bad value for 'user_id'
[  177.771747][ T8750] fuseblk: Bad value for 'user_id'
[  177.776978][ T8750] fuseblk: Bad value for 'user_id'
[  177.782465][ T8750] fuseblk: Bad value for 'user_id'
[  177.787710][ T8750] fuseblk: Bad value for 'user_id'
[  177.792898][ T8750] fuseblk: Bad value for 'user_id'
[  177.798124][ T8750] fuseblk: Bad value for 'user_id'
[  177.803255][ T8750] fuseblk: Bad value for 'user_id'
[  177.808487][ T8750] fuseblk: Bad value for 'user_id'
[  177.813628][ T8750] fuseblk: Bad value for 'user_id'
[  177.818845][ T8750] fuseblk: Bad value for 'user_id'
[  177.828795][ T8750] fuseblk: Bad value for 'user_id'
[  177.834441][ T8750] fuseblk: Bad value for 'user_id'
[  177.836624][ T1358] usbhid 6-1:1.0: can't add hid device: -71
[  177.839554][ T8750] fuseblk: Bad value for 'user_id'
[  177.839704][ T8750] fuseblk: Bad value for 'user_id'
[  177.845841][ T1358] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  177.853837][ T8750] fuseblk: Bad value for 'user_id'
[  177.866581][ T1358] usb 6-1: USB disconnect, device number 2
[  177.887559][ T8750] fuseblk: Bad value for 'user_id'
[  177.887602][ T8755] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2605'.
[  177.892724][ T8750] fuseblk: Bad value for 'user_id'
[  177.892876][ T8750] fuseblk: Bad value for 'user_id'
[  177.913576][ T8750] fuseblk: Bad value for 'user_id'
[  177.918983][ T8750] fuseblk: Bad value for 'user_id'
[  177.924268][ T8750] fuseblk: Bad value for 'user_id'
[  177.929663][ T8750] fuseblk: Bad value for 'user_id'
[  177.929889][   T36] audit: type=1400 audit(2000000023.179:1016): avc:  denied  { read } for  pid=8754 comm="syz.5.2605" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  177.934927][ T8750] fuseblk: Bad value for 'user_id'
[  177.964038][ T8750] fuseblk: Bad value for 'user_id'
[  177.969161][ T8750] fuseblk: Bad value for 'user_id'
[  177.974514][ T8750] fuseblk: Bad value for 'user_id'
[  177.979715][ T8750] fuseblk: Bad value for 'user_id'
[  177.985011][ T8750] fuseblk: Bad value for 'user_id'
[  177.989952][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2605'.
[  177.990379][ T8750] fuseblk: Bad value for 'user_id'
[  178.004649][ T8750] fuseblk: Bad value for 'user_id'
[  178.009774][ T8750] fuseblk: Bad value for 'user_id'
[  178.015647][ T8750] fuseblk: Bad value for 'user_id'
[  178.020858][ T8750] fuseblk: Bad value for 'user_id'
[  178.026213][ T8750] fuseblk: Bad value for 'user_id'
[  178.031416][ T8750] fuseblk: Bad value for 'user_id'
[  178.037024][ T8750] fuseblk: Bad value for 'user_id'
[  178.042147][ T8750] fuseblk: Bad value for 'user_id'
[  178.047538][ T8750] fuseblk: Bad value for 'user_id'
[  178.052843][ T8750] fuseblk: Bad value for 'user_id'
[  178.058175][ T8750] fuseblk: Bad value for 'user_id'
[  178.063300][ T8750] fuseblk: Bad value for 'user_id'
[  178.068717][ T8750] fuseblk: Bad value for 'user_id'
[  178.073850][ T8750] fuseblk: Bad value for 'user_id'
[  178.079090][ T8750] fuseblk: Bad value for 'user_id'
[  178.084290][ T8750] fuseblk: Bad value for 'user_id'
[  178.089885][ T8750] fuseblk: Bad value for 'user_id'
[  178.095029][ T8750] fuseblk: Bad value for 'user_id'
[  178.100414][ T8750] fuseblk: Bad value for 'user_id'
[  178.105534][ T8750] fuseblk: Bad value for 'user_id'
[  178.110804][ T8750] fuseblk: Bad value for 'user_id'
[  178.115925][ T8750] fuseblk: Bad value for 'user_id'
[  178.126182][ T8750] fuseblk: Bad value for 'user_id'
[  178.133849][ T8750] fuseblk: Bad value for 'user_id'
[  178.139266][ T8750] fuseblk: Bad value for 'user_id'
[  178.144417][ T8750] fuseblk: Bad value for 'user_id'
[  178.149878][ T8750] fuseblk: Bad value for 'user_id'
[  178.155259][ T8750] fuseblk: Bad value for 'user_id'
[  178.160726][ T8750] fuseblk: Bad value for 'user_id'
[  178.165877][ T8750] fuseblk: Bad value for 'user_id'
[  178.171140][ T8750] fuseblk: Bad value for 'user_id'
[  178.176272][ T8750] fuseblk: Bad value for 'user_id'
[  178.181715][ T8750] fuseblk: Bad value for 'user_id'
[  178.186941][ T8750] fuseblk: Bad value for 'user_id'
[  178.192147][ T8750] fuseblk: Bad value for 'user_id'
[  178.197268][ T8750] fuseblk: Bad value for 'user_id'
[  178.202455][ T8750] fuseblk: Bad value for 'user_id'
[  178.207623][ T8750] fuseblk: Bad value for 'user_id'
[  178.212951][ T8750] fuseblk: Bad value for 'user_id'
[  178.218084][ T8750] fuseblk: Bad value for 'user_id'
[  178.225271][ T8750] fuseblk: Bad value for 'user_id'
[  178.230549][ T8750] fuseblk: Bad value for 'user_id'
[  178.235809][ T8750] fuseblk: Bad value for 'user_id'
[  178.240971][ T8750] fuseblk: Bad value for 'user_id'
[  178.246199][ T8750] fuseblk: Bad value for 'user_id'
[  178.253129][ T8750] fuseblk: Bad value for 'user_id'
[  178.253525][   T36] audit: type=1400 audit(2000000023.478:1017): avc:  denied  { create } for  pid=8760 comm="syz.0.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  178.260050][ T8761] overlay: ./file0 is not a directory
[  178.283976][ T8750] fuseblk: Bad value for 'user_id'
[  178.288612][ T8761] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  178.289315][ T8750] fuseblk: Bad value for 'user_id'
[  178.303161][ T8750] fuseblk: Bad value for 'user_id'
[  178.313210][ T8750] fuseblk: Bad value for 'user_id'
[  178.313497][ T8763] rust_binder: Write failure EINVAL in pid:116
[  178.318586][ T8750] fuseblk: Bad value for 'user_id'
[  178.330185][ T8750] fuseblk: Bad value for 'user_id'
[  178.335495][ T8750] fuseblk: Bad value for 'user_id'
[  178.336572][ T8763] rust_binder: Error in use_page_slow: ESRCH
[  178.340621][ T8750] fuseblk: Bad value for 'user_id'
[  178.340827][   T36] audit: type=1400 audit(2000000023.553:1018): avc:  denied  { lock } for  pid=8762 comm="syz.0.2608" path="socket:[34000]" dev="sockfs" ino=34000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  178.346979][ T8763] rust_binder: use_range failure ESRCH
[  178.351836][ T8750] fuseblk: Bad value for 'user_id'
[  178.376082][ T8763] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  178.381477][ T8750] fuseblk: Bad value for 'user_id'
[  178.386656][ T8763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  178.394543][ T8750] fuseblk: Bad value for 'user_id'
[  178.399767][ T8763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:116
[  178.408782][ T8750] fuseblk: Bad value for 'user_id'
[  178.430946][ T8750] fuseblk: Bad value for 'user_id'
[  178.441792][ T8750] fuseblk: Bad value for 'user_id'
[  178.447051][ T8750] fuseblk: Bad value for 'user_id'
[  178.454064][ T8750] fuseblk: Bad value for 'user_id'
[  178.459398][ T8750] fuseblk: Bad value for 'user_id'
[  178.464534][ T8750] fuseblk: Bad value for 'user_id'
[  178.469742][ T8750] fuseblk: Bad value for 'user_id'
[  178.474888][ T8750] fuseblk: Bad value for 'user_id'
[  178.480081][ T8750] fuseblk: Bad value for 'user_id'
[  178.485251][ T8750] fuseblk: Bad value for 'user_id'
[  178.490438][ T8750] fuseblk: Bad value for 'user_id'
[  178.495568][ T8750] fuseblk: Bad value for 'user_id'
[  178.510570][   T36] audit: type=1400 audit(2000000023.712:1019): avc:  denied  { shutdown } for  pid=8769 comm="syz.3.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  178.698127][   T31] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  178.805270][ T8777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[  178.859875][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  178.877048][   T31] usb 1-1: not running at top speed; connect to a high speed hub
[  178.885736][   T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  178.898266][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  178.907365][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.915428][   T31] usb 1-1: Product: syz
[  178.919573][   T31] usb 1-1: Manufacturer: syz
[  178.924193][   T31] usb 1-1: SerialNumber: syz
[  179.146957][   T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  179.157356][   T31] usb 1-1: USB disconnect, device number 25
[  179.162953][ T7611] udevd[7611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  179.691474][ T8781] /dev/rnullb0: Can't open blockdev
[  179.725102][ T8783] netlink: 'syz.5.2615': attribute type 6 has an invalid length.
[  179.732945][ T8783] netlink: 6016 bytes leftover after parsing attributes in process `syz.5.2615'.
[  179.864125][ T8789] /dev/rnullb0: Can't open blockdev
[  179.870031][ T8791] 7�: Can't lookup blockdev
[  179.948792][ T8809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86
[  179.959269][ T8812] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.971328][ T8812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89
[  179.978127][ T8813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.989075][ T8813] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  179.991671][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  179.995728][ T8813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  180.003901][    T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  180.011364][ T8813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:257
[  180.162726][    T9] usb 1-1: device descriptor read/64, error -71
[  180.178260][   T10] usb 4-1: Using ep0 maxpacket: 8
[  180.184567][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.194665][   T10] usb 4-1: config 0 has no interfaces?
[  180.201653][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  180.210770][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.218830][   T10] usb 4-1: Product: syz
[  180.222990][   T10] usb 4-1: Manufacturer: syz
[  180.227779][   T10] usb 4-1: SerialNumber: syz
[  180.232922][   T10] usb 4-1: config 0 descriptor??
[  180.248229][   T31] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  180.409964][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  180.418018][   T31] usb 6-1: not running at top speed; connect to a high speed hub
[  180.426467][   T31] usb 6-1: config index 0 descriptor too short (expected 8192, got 45)
[  180.434773][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.440660][    T9] usb 1-1: device descriptor read/64, error -71
[  180.445079][   T31] usb 6-1: config 0 has no interfaces?
[  180.458430][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40
[  180.460306][ T8779] netlink: 'syz.3.2613': attribute type 27 has an invalid length.
[  180.467581][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.483459][   T31] usb 6-1: Product: syz
[  180.487675][   T31] usb 6-1: Manufacturer: syz
[  180.492376][   T31] usb 6-1: SerialNumber: syz
[  180.500640][   T31] usb 6-1: config 0 descriptor??
[  180.521970][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.529156][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.665674][ T8825] usb 4-1: USB disconnect, device number 17
[  180.707919][    T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  180.725990][ T8824] usb 6-1: USB disconnect, device number 3
[  180.846991][    T9] usb 1-1: device descriptor read/64, error -71
[  180.857734][ T8825] rust_binder: get_current_thread was called from the wrong process.
[  180.924944][ T8831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  180.933846][ T8831] rust_binder: Write failure EFAULT in pid:262
[  180.940629][ T8831] rust_binder: Write failure EFAULT in pid:262
[  181.103499][    T9] usb 1-1: device descriptor read/64, error -71
[  181.231848][    T9] usb usb1-port1: attempt power cycle
[  181.289762][ T8835] �����2: renamed from lo (while UP)
[  181.337193][ T8845] netlink: 'syz.3.2630': attribute type 32 has an invalid length.
[  181.542483][ T8851] rust_binder: 103: no such ref 1
[  181.547560][ T8851] rust_binder: 103: no such ref 2
[  181.595255][    T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  181.602983][ T8825] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  181.628350][    T9] usb 1-1: device descriptor read/8, error -71
[  181.665484][ T8853] rust_binder: 8852 RLIMIT_NICE not set
[  181.768330][    T9] usb 1-1: device descriptor read/8, error -71
[  181.781350][ T8825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.792329][ T8825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.803024][ T8825] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  181.812370][ T8825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.820548][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  181.821153][ T8825] usb 4-1: config 0 descriptor??
[  182.055215][    T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  182.077331][    T9] usb 1-1: device descriptor read/8, error -71
[  182.216335][    T9] usb 1-1: device descriptor read/8, error -71
[  182.262294][ T8825] hkems 0003:2006:0118.0008: unknown main item tag 0x7
[  182.269301][ T8825] hkems 0003:2006:0118.0008: item fetching failed at offset 6/7
[  182.277054][ T8825] hkems 0003:2006:0118.0008: parse failed
[  182.283022][ T8825] hkems 0003:2006:0118.0008: probe with driver hkems failed with error -22
[  182.332979][    T9] usb usb1-port1: unable to enumerate USB device
[  182.436477][   T64] rust_binder: 8850: removing orphan mapping 0:1048
[  182.787182][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  182.787199][   T36] audit: type=1400 audit(2000000027.715:1022): avc:  denied  { map } for  pid=8875 comm="syz.5.2638" path="socket:[34855]" dev="sockfs" ino=34855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  182.858833][ T8883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8883 comm=syz.4.2642
[  182.922607][ T8889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126
[  182.958810][ T8901] tmpfs: Invalid uid '0x00000000ffffffff'
[  183.037326][ T8903] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  183.088823][ T8910] overlayfs: conflicting options: userxattr,verity=require
[  183.107764][ T8910] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  183.134906][ T8920] rust_binder: 147: no such ref 3
[  183.156447][   T64] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  183.189859][ T8925] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  183.327203][   T64] usb 6-1: Invalid ep0 maxpacket: 32
[  183.412671][    T9] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  183.476791][   T64] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  183.574097][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.584743][    T9] usb 1-1: config 0 has no interfaces?
[  183.590231][    T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  183.599371][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.607984][    T9] usb 1-1: config 0 descriptor??
[  183.637159][   T64] usb 6-1: Invalid ep0 maxpacket: 32
[  183.642567][   T64] usb usb6-port1: attempt power cycle
[  183.829309][ T8923] rust_binder: Write failure EFAULT in pid:150
[  183.829773][ T1358] usb 1-1: USB disconnect, device number 30
[  184.011379][   T64] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  184.033051][   T64] usb 6-1: Invalid ep0 maxpacket: 32
[  184.170526][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'.
[  184.179544][   T64] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  184.204109][   T64] usb 6-1: Invalid ep0 maxpacket: 32
[  184.209982][   T64] usb usb6-port1: unable to enumerate USB device
[  184.421742][ T8980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8980 comm=syz.0.2670
[  184.517726][ T8824] rust_binder: 0: removing orphan mapping 0:1024
[  184.529799][ T8987] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2673'.
[  184.550285][   T36] audit: type=1326 audit(2000000029.362:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.0.2674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4638e9a9 code=0x0
[  184.556414][   T64] usb 4-1: USB disconnect, device number 18
[  184.573567][   T36] audit: type=1326 audit(2000000029.362:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.0.2674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4638e9a9 code=0x0
[  184.635518][   T36] audit: type=1400 audit(2000000029.418:1025): avc:  denied  { setattr } for  pid=7463 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  184.916588][   T36] audit: type=1400 audit(2000000029.708:1026): avc:  denied  { create } for  pid=9015 comm="syz.0.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  185.120954][ T9043] 9pnet_fd: Insufficient options for proto=fd
[  185.724292][ T9050] 9pnet: Could not find request transport: fd��
[  185.916634][ T9072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9072 comm=syz.0.2703
[  185.996491][   T36] audit: type=1400 audit(2000000030.709:1027): avc:  denied  { audit_write } for  pid=9074 comm="syz.0.2704" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  186.038567][ T9080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9080 comm=syz.0.2705
[  186.042530][   T36] audit: type=1107 audit(2000000030.709:1028): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='
'
[  186.243731][    T9] rust_binder: 9085: removing orphan mapping 0:1048
[  186.548430][ T9112] input: syz1 as /devices/virtual/input/input15
[  186.684492][ T9115] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2716'.
[  186.716270][ T9115] rust_binder: 151: no such ref 0
[  186.726030][ T9115] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  186.749999][ T9115] rust_binder: Write failure EINVAL in pid:151
[  186.930874][   T36] audit: type=1326 audit(2000000031.597:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9137 comm="syz.4.2725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f465e38e9a9 code=0x0
[  187.540634][   T36] audit: type=1400 audit(2000000032.168:1030): avc:  denied  { shutdown } for  pid=9147 comm="syz.0.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  187.749686][   T36] audit: type=1326 audit(2000000032.355:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9131 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efed8e9a9 code=0x7fc00000
[  187.785354][ T9167] fuse: Bad value for 'fd'
[  187.828246][ T9169] IPv4: Oversized IP packet from 172.20.20.170
[  187.834674][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  187.841105][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  187.848833][ T9173] batadv_slave_0: entered promiscuous mode
[  187.860619][ T9170] batadv_slave_0: left promiscuous mode
[  187.881842][ T9176] /dev/rnullb0: Can't open blockdev
[  187.892587][ T9169] IPv4: Oversized IP packet from 172.20.20.170
[  187.899009][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  187.905285][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  187.924818][ T9169] IPv4: Oversized IP packet from 172.20.20.170
[  187.931234][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  187.937522][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  187.948539][ T9169] IPv4: Oversized IP packet from 172.20.20.170
[  188.109697][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'.
[  188.450217][ T9192] fuse: Bad value for 'fd'
[  189.497047][ T9294] netlink: 'syz.0.2783': attribute type 3 has an invalid length.
[  189.505205][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2783'.
[  189.548032][ T9299] overlayfs: failed to clone lowerpath
[  189.888870][ T9314] rust_binder: 174: no such ref 3
[  189.962922][ T9327] rust_binder: 178: no such ref 0
[  189.968294][ T9327] rust_binder: 178: no such ref 0
[  190.058064][   T36] kauditd_printk_skb: 97 callbacks suppressed
[  190.058081][   T36] audit: type=1400 audit(2000000034.516:1129): avc:  denied  { ioctl } for  pid=9328 comm="syz.5.2794" path="socket:[35616]" dev="sockfs" ino=35616 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  190.230197][ T9334] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 221)
[  190.230218][ T9334] rust_binder: Error while translating object.
[  190.243979][ T9334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  190.250261][ T9334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185
[  190.287602][ T9337] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  190.575600][ T9354] netlink: 'syz.4.2803': attribute type 13 has an invalid length.
[  191.176667][   T36] audit: type=1400 audit(2000000035.563:1130): avc:  denied  { accept } for  pid=9399 comm="syz.0.2818" path="socket:[35713]" dev="sockfs" ino=35713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  191.297901][ T9407] input: syz1 as /devices/virtual/input/input16
[  191.323231][ T9409] 9pnet_fd: Insufficient options for proto=fd
[  191.395354][ T9416] /dev/rnullb0: Can't open blockdev
[  191.425822][ T9423] rust_binder: Write failure EFAULT in pid:203
[  191.432881][ T9427] fuseblk: Unknown parameter 'user�id'
[  191.503225][ T9436] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2830'.
[  191.516410][ T9439] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.516937][ T9439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207
[  191.571449][ T9448] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  191.634169][ T9455] 9pnet_fd: Insufficient options for proto=fd
[  191.712729][   T36] audit: type=1400 audit(2000000036.059:1131): avc:  denied  { checkpoint_restore } for  pid=9461 comm="syz.0.2839" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  191.890046][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'.
[  192.649340][ T8825] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  192.809707][ T8825] usb 6-1: device descriptor read/64, error -71
[  192.974485][   T36] audit: type=1326 audit(2000000037.238:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.4.2859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f465e38e9a9 code=0x0
[  193.066278][ T8825] usb 6-1: device descriptor read/64, error -71
[  193.333530][ T8825] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  193.483227][ T8825] usb 6-1: device descriptor read/64, error -71
[  193.750477][ T8825] usb 6-1: device descriptor read/64, error -71
[  193.868200][ T8825] usb usb6-port1: attempt power cycle
[  194.231548][ T8825] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  194.254531][ T8825] usb 6-1: device descriptor read/8, error -71
[  194.295676][  T292] bridge_slave_1: left allmulticast mode
[  194.301348][  T292] bridge_slave_1: left promiscuous mode
[  194.323373][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.332982][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.403601][ T8825] usb 6-1: device descriptor read/8, error -71
[  194.463924][  T292] veth1_macvtap: left promiscuous mode
[  194.469607][  T292] veth0_vlan: left promiscuous mode
[  194.669868][ T8825] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  194.692227][ T8825] usb 6-1: device descriptor read/8, error -71
[  194.831218][ T8825] usb 6-1: device descriptor read/8, error -71
[  194.958505][ T8825] usb usb6-port1: unable to enumerate USB device
[  195.650888][ T9541] binder: Unknown parameter 'fscontext?}'
[  195.873401][   T36] audit: type=1400 audit(2000000039.950:1133): avc:  denied  { relabelfrom } for  pid=9551 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  195.903353][   T36] audit: type=1400 audit(2000000039.950:1134): avc:  denied  { relabelto } for  pid=9551 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  195.937052][   T36] audit: type=1400 audit(2000000039.969:1135): avc:  denied  { create } for  pid=9551 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  196.262759][ T8825] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  196.433832][ T8825] usb 6-1: device descriptor read/64, error -71
[  196.479747][ T9574] netlink: 'syz.0.2875': attribute type 27 has an invalid length.
[  196.517251][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.524510][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.701090][ T8825] usb 6-1: device descriptor read/64, error -71
[  196.713003][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2881'.
[  196.957650][ T8825] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  197.107321][ T8825] usb 6-1: device descriptor read/64, error -71
[  197.363903][ T8825] usb 6-1: device descriptor read/64, error -71
[  197.481557][ T8825] usb usb6-port1: attempt power cycle
[  197.877058][ T8825] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  197.901167][ T8825] usb 6-1: device descriptor read/8, error -71
[  198.038428][ T8825] usb 6-1: device descriptor read/8, error -71
[  198.326056][ T8825] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  198.348578][ T8825] usb 6-1: device descriptor read/8, error -71
[  198.487439][ T8825] usb 6-1: device descriptor read/8, error -71
[  198.614775][ T8825] usb usb6-port1: unable to enumerate USB device
[  198.659329][ T9682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2909'.
[  198.704773][ T9682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2909'.
[  199.101341][ T9718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9718 comm=syz.4.2919
[  199.260128][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'.
[  199.269267][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'.
[  199.298956][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'.
[  199.646738][ T9752] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  199.652680][ T9752] rust_binder: 251: no such ref 3
[  200.127630][ T9780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.159716][   T36] audit: type=1400 audit(2000000043.963:1136): avc:  denied  { setattr } for  pid=9785 comm="syz.5.2941" name="PACKET" dev="sockfs" ino=36704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  200.230567][ T9792] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9792 comm=syz.4.2944
[  200.230798][ T9793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9793 comm=syz.4.2944
[  200.422739][ T9804] netlink: 'syz.4.2949': attribute type 4 has an invalid length.
[  200.430620][ T9804] netlink: 'syz.4.2949': attribute type 27 has an invalid length.
[  200.439412][ T9804] netlink: 3609 bytes leftover after parsing attributes in process `syz.4.2949'.
[  200.765258][ T9848] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2965'.
[  200.803101][ T1421] bridge_slave_1: left allmulticast mode
[  200.812275][ T1421] bridge_slave_1: left promiscuous mode
[  200.824793][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.858024][ T1421] bridge_slave_0: left allmulticast mode
[  200.870419][ T1421] bridge_slave_0: left promiscuous mode
[  200.880730][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.022998][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.030800][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.038045][ T9850] bridge_slave_0: entered allmulticast mode
[  201.044851][ T9850] bridge_slave_0: entered promiscuous mode
[  201.058505][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.067691][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.072992][ T9863] fuse: Unknown parameter 'f'
[  201.074847][ T9850] bridge_slave_1: entered allmulticast mode
[  201.084297][   T36] audit: type=1400 audit(2000000044.824:1137): avc:  denied  { mounton } for  pid=9862 comm="syz.0.2970" path="/" dev="ramfs" ino=37442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  201.085835][ T9850] bridge_slave_1: entered promiscuous mode
[  201.147414][   T36] audit: type=1400 audit(2000000044.871:1138): avc:  denied  { create } for  pid=9862 comm="syz.0.2970" name=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  201.216470][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.223526][ T9850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.230768][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.237802][ T9850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.257164][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.264526][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.275434][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.282595][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.291922][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.299011][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.323751][ T9850] veth0_vlan: entered promiscuous mode
[  201.334579][ T9850] veth1_macvtap: entered promiscuous mode
[  201.613563][   T36] audit: type=1400 audit(2000000045.320:1139): avc:  denied  { accept } for  pid=9870 comm="syz.5.2972" path="socket:[37615]" dev="sockfs" ino=37615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  201.648872][ T9875] can: request_module (can-proto-0) failed.
[  201.661218][ T9875] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2974'.
[  201.671890][ T9876] futex_wake_op: syz.4.2973 tries to shift op by -1; fix this program
[  201.675603][ T9875] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2974'.
[  201.694421][ T9875] net_ratelimit: 86 callbacks suppressed
[  201.694441][ T9875] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  201.714974][   T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  201.726983][ T9875] 9pnet_fd: Insufficient options for proto=fd
[  201.733552][ T9875] /dev/rnullb0: Can't open blockdev
[  201.783602][ T9889] overlayfs: failed to clone upperpath
[  201.855232][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'.
[  201.864698][   T45] usb 7-1: device descriptor read/64, error -71
[  201.874978][ T9899] rust_binder: 9896 RLIMIT_NICE not set
[  201.879401][ T9896] rust_binder: validate_parent_fixup: new_min_offset=540, sg_entry.length=0
[  201.885115][ T9896] rust_binder: Error while translating object.
[  201.894014][ T9896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  201.900279][ T9896] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  201.912768][ T9896] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:288
[  201.932010][ T8823] rust_binder: 9895: removing orphan mapping 0:4120
[  202.121232][   T45] usb 7-1: device descriptor read/64, error -71
[  202.132314][   T36] audit: type=1326 audit(2000000045.815:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.0.2999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c4638e9a9 code=0x0
[  202.378536][   T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  202.516786][   T45] usb 7-1: device descriptor read/64, error -71
[  202.773390][   T45] usb 7-1: device descriptor read/64, error -71
[  202.891067][   T45] usb usb7-port1: attempt power cycle
[  202.978795][ T9969] overlayfs: failed to resolve './file1/file0': -2
[  203.099146][ T9993] /dev/nbd0: Can't lookup blockdev
[  203.104369][   T36] audit: type=1400 audit(2000000046.713:1141): avc:  denied  { mounton } for  pid=9991 comm="syz.0.3013" path="/202/bus" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  203.173866][T10006] tipc: Enabling <eth:lo> not permitted
[  203.180570][T10006] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  203.234649][   T36] audit: type=1400 audit(2000000046.844:1142): avc:  denied  { read } for  pid=10020 comm="syz.4.3022" path="socket:[38359]" dev="sockfs" ino=38359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  203.257969][   T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  203.288919][   T45] usb 7-1: device descriptor read/8, error -71
[  203.425504][ T8825] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  203.426528][   T45] usb 7-1: device descriptor read/8, error -71
[  203.586872][ T8825] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  203.596097][ T8825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.604801][ T8825] usb 6-1: config 0 descriptor??
[  203.693125][   T45] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  203.715206][   T45] usb 7-1: device descriptor read/8, error -71
[  203.758834][   T36] audit: type=1400 audit(2000000047.331:1143): avc:  denied  { create } for  pid=10029 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  203.808116][   T36] audit: type=1400 audit(2000000047.378:1144): avc:  denied  { watch } for  pid=10034 comm="syz.0.3027" path="/208/memory.events" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  203.859135][   T45] usb 7-1: device descriptor read/8, error -71
[  203.985005][   T45] usb usb7-port1: unable to enumerate USB device
[  204.729781][T10111] overlayfs: conflicting options: userxattr,verity=require
[  204.741276][T10111] fuse: blksize only supported for fuseblk
[  204.747238][T10113] fuse: blksize only supported for fuseblk
[  204.863948][   T36] audit: type=1400 audit(2000000048.360:1145): avc:  denied  { create } for  pid=10118 comm="syz.0.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  204.884564][T10122] __nla_validate_parse: 2 callbacks suppressed
[  204.884584][T10122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3053'.
[  204.935982][ T8825] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  204.949637][ T8825] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  204.960475][ T8825] asix 6-1:0.0: probe with driver asix failed with error -71
[  204.972870][ T8825] usb 6-1: USB disconnect, device number 16
[  205.033525][   T36] audit: type=1107 audit(2000000048.509:1146): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='
'
[  205.343055][T10140] futex_wake_op: syz.6.3058 tries to shift op by 144; fix this program
[  205.484129][T10148] netlink: 'syz.6.3061': attribute type 3 has an invalid length.
[  205.491920][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3061'.
[  205.595571][T10166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  205.607530][T10166] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  205.626923][T10166] random: crng reseeded on system resumption
[  205.632965][   T36] audit: type=1400 audit(2000000049.071:1147): avc:  denied  { append } for  pid=10164 comm="syz.5.3066" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  205.683697][   T36] audit: type=1400 audit(2000000049.071:1148): avc:  denied  { open } for  pid=10164 comm="syz.5.3066" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  205.876188][T10196] fuse: Bad value for 'fd'
[  205.881579][T10196] bpf: Bad value for 'uid'
[  205.886942][T10189] rust_binder: Error while translating object.
[  205.886981][T10189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  205.902034][T10189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:326
[  206.272905][T10246] netlink: 'syz.6.3092': attribute type 12 has an invalid length.
[  206.449085][T10265] rust_binder: Write failure EFAULT in pid:353
[  206.935795][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'.
[  207.011927][T10296] overlayfs: failed to resolve './file2': -2
[  207.030993][T10298] overlayfs: failed to clone lowerpath
[  207.037946][T10298] 9pnet_fd: Insufficient options for proto=fd
[  207.113930][T10306] 9pnet_fd: Insufficient options for proto=fd
[  207.230386][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  207.230402][   T36] audit: type=1400 audit(2000000050.577:1153): avc:  denied  { accept } for  pid=10315 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  207.270899][  T292] Bluetooth: hci0: Frame reassembly failed (-84)
[  207.281720][  T292] Bluetooth: hci0: Frame reassembly failed (-84)
[  207.296277][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.304855][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.552056][ T8825] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  207.648153][   T36] audit: type=1400 audit(2000000050.960:1154): avc:  denied  { setattr } for  pid=10332 comm="syz.6.3120" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  207.713797][ T8825] usb 6-1: config 8 has an invalid interface number: 3 but max is 1
[  207.721900][ T8825] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  207.730746][ T8825] usb 6-1: config 8 has an invalid descriptor of length 49, skipping remainder of the config
[  207.741141][ T8825] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2
[  207.750038][ T8825] usb 6-1: config 8 has no interface number 0
[  207.756274][ T8825] usb 6-1: config 8 interface 3 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64
[  207.766973][ T8825] usb 6-1: config 8 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  207.777784][ T8825] usb 6-1: config 8 interface 3 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  207.788613][ T8825] usb 6-1: config 8 interface 3 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  207.799517][ T8825] usb 6-1: config 8 interface 3 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  207.810333][ T8825] usb 6-1: config 8 interface 3 has no altsetting 0
[  207.812599][T10342] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  207.818384][ T8825] usb 6-1: New USB device found, idVendor=19d2, idProduct=1432, bcdDevice=9b.90
[  207.827685][T10342] overlayfs: failed to clone upperpath
[  207.833136][ T8825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.833158][ T8825] usb 6-1: Product: syz
[  207.833171][ T8825] usb 6-1: Manufacturer: syz
[  207.833182][ T8825] usb 6-1: SerialNumber: syz
[  208.075118][   T36] audit: type=1400 audit(2000000051.362:1155): avc:  denied  { create } for  pid=10371 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  208.096736][ T8825] usb 6-1: USB disconnect, device number 17
[  208.141436][T10376] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3134'.
[  209.103084][   T36] audit: type=1400 audit(2000000052.335:1156): avc:  denied  { map } for  pid=10454 comm="syz.6.3165" path="socket:[39737]" dev="sockfs" ino=39737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  209.170934][T10467] devpts: called with bogus options
[  209.199877][T10473] veth0_vlan: entered allmulticast mode
[  209.216556][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'.
[  209.422910][  T547] Bluetooth: hci0: command 0x1003 tx timeout
[  209.422910][ T1123] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  209.435147][   T64] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  209.486590][   T36] audit: type=1400 audit(2000000052.681:1157): avc:  denied  { lock } for  pid=10482 comm="syz.4.3175" path="socket:[39758]" dev="sockfs" ino=39758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  209.605750][   T64] usb 7-1: No LPM exit latency info found, disabling LPM.
[  209.613865][   T64] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  209.624915][   T64] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  209.635932][   T64] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 16, setting to 8
[  209.646465][   T64] usb 7-1: config 1 interface 0 has no altsetting 0
[  210.192668][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  210.230926][T10490] netlink: 'syz.4.3177': attribute type 2 has an invalid length.
[  210.256776][T10490] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3177'.
[  210.354140][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  210.365277][    T9] usb 6-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  210.376279][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  210.385395][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.397698][    T9] usb 6-1: invalid MIDI out EP 0
[  210.408566][    T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  210.411738][ T7611] udevd[7611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  210.611799][   T45] usb 6-1: USB disconnect, device number 18
[  210.897438][T10506] fuse: Bad value for 'user_id'
[  210.902415][T10506] fuse: Bad value for 'user_id'
[  211.158848][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3187'.
[  211.170573][   T36] audit: type=1400 audit(2000000054.262:1158): avc:  denied  { write } for  pid=10513 comm="syz.5.3187" name="/" dev="incremental-fs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  211.193642][   T36] audit: type=1400 audit(2000000054.262:1159): avc:  denied  { add_name } for  pid=10513 comm="syz.5.3187" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  211.215539][   T36] audit: type=1400 audit(2000000054.262:1160): avc:  denied  { create } for  pid=10513 comm="syz.5.3187" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  211.237644][   T36] audit: type=1400 audit(2000000054.262:1161): avc:  denied  { associate } for  pid=10513 comm="syz.5.3187" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  211.265768][   T36] audit: type=1400 audit(2000000054.281:1162): avc:  denied  { bind } for  pid=10513 comm="syz.5.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  211.329677][ T1420] bridge_slave_1: left allmulticast mode
[  211.335559][ T1420] bridge_slave_1: left promiscuous mode
[  211.341404][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.349374][ T1420] bridge_slave_0: left allmulticast mode
[  211.355103][ T1420] bridge_slave_0: left promiscuous mode
[  211.361046][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.489086][T10517] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.496154][T10517] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.503400][T10517] bridge_slave_0: entered allmulticast mode
[  211.509788][T10517] bridge_slave_0: entered promiscuous mode
[  211.516250][T10517] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.523345][T10517] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.530428][T10517] bridge_slave_1: entered allmulticast mode
[  211.536679][T10517] bridge_slave_1: entered promiscuous mode
[  211.551730][ T1420] veth1_macvtap: left promiscuous mode
[  211.557509][ T1420] veth0_vlan: left promiscuous mode
[  211.713925][T10517] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.721068][T10517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.728396][T10517] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.735434][T10517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.783382][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.798928][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.843939][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.851139][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.870376][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.877452][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.991792][T10517] veth0_vlan: entered promiscuous mode
[  212.034089][T10517] veth1_macvtap: entered promiscuous mode
[  212.051147][T10530] overlayfs: failed to clone upperpath
[  212.137109][T10534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3195'.
[  212.287788][T10543] /dev/rnullb0: Can't open blockdev
[  212.368652][T10547] rust_binder: Error while translating object.
[  212.368691][T10547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  212.386593][   T64] usb 7-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.40
[  212.426993][T10547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:11
[  212.442821][   T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.450674][T10549] rust_binder: Write failure EINVAL in pid:95
[  212.491324][   T64] usb 7-1: Product: ࡃ
[  212.523294][T10551] incfs: Options parsing error. -22
[  212.528848][T10551] incfs: mount failed -22
[  212.534791][   T64] usb 7-1: can't set config #1, error -71
[  212.566567][   T64] usb 7-1: USB disconnect, device number 6
[  212.827677][T10558] netlink: 'syz.7.3202': attribute type 20 has an invalid length.
[  212.891529][T10560] option changes via remount are deprecated (pid=10559 comm=syz.7.3203)
[  212.908064][   T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  212.930002][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  212.930020][   T36] audit: type=1400 audit(2000000055.899:1165): avc:  denied  { unmount } for  pid=10517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  212.958277][T10562] rust_binder: 24: no such ref 3
[  213.079103][   T64] usb 7-1: device descriptor read/64, error -71
[  213.118103][T10570] /dev/rnullb0: Can't open blockdev
[  213.357138][   T64] usb 7-1: device descriptor read/64, error -71
[  213.613881][   T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  213.635277][T10576] overlayfs: failed to resolve './file2': -2
[  213.773980][   T64] usb 7-1: device descriptor read/64, error -71
[  214.037303][   T36] audit: type=1400 audit(2000000056.947:1166): avc:  denied  { map } for  pid=10579 comm="syz.7.3212" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  214.082715][   T64] usb 7-1: device descriptor read/64, error -71
[  214.201703][   T64] usb usb7-port1: attempt power cycle
[  214.261880][ T1081] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  214.291162][ T1081] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.325339][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'.
[  214.373840][T10592] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.428871][T10592] bridge_slave_1 (unregistering): left allmulticast mode
[  214.478963][T10592] bridge_slave_1 (unregistering): left promiscuous mode
[  214.511168][T10592] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.554602][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'.
[  214.597202][   T64] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  214.661380][   T64] usb 7-1: device descriptor read/8, error -71
[  214.673767][T10599] 9pnet_fd: Insufficient options for proto=fd
[  214.801509][   T64] usb 7-1: device descriptor read/8, error -71
[  214.900113][   T36] audit: type=1400 audit(2000000057.751:1167): avc:  denied  { bind } for  pid=10610 comm="syz.0.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  215.056857][   T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  215.079248][   T64] usb 7-1: device descriptor read/8, error -71
[  215.218494][   T64] usb 7-1: device descriptor read/8, error -71
[  215.334929][   T64] usb usb7-port1: unable to enumerate USB device
[  215.541825][T10620] 9pnet_fd: Insufficient options for proto=fd
[  215.733922][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'.
[  215.817918][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.833675][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.846370][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.858920][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.871999][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.884970][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.897727][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.910516][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.923307][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.935830][ T8820] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  215.943411][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10655 comm=syz.6.3237
[  215.981286][T10670] /dev/rnullb0: Can't open blockdev
[  216.018020][T10677] SELinux: security_context_str_to_sid () failed with errno=-22
[  216.115217][ T8820] usb 8-1: Using ep0 maxpacket: 16
[  216.121563][ T8820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.132569][ T8820] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.145667][ T8820] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.154797][ T8820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.163640][ T8820] usb 8-1: config 0 descriptor??
[  216.385630][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.396175][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.403552][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.411873][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.419201][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.426551][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.433840][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.441483][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.448827][ T8820] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  216.451557][   T36] audit: type=1326 audit(2000000059.201:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10622 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465e38e9a9 code=0x7fc00000
[  216.456449][ T8820] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  216.489536][ T8820] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  216.505694][ T8820] microsoft 0003:045E:07DA.000A: no inputs found
[  216.524055][ T8820] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  216.554223][ T8820] usb 8-1: USB disconnect, device number 2
[  216.732765][T10729] rust_binder: Error in use_page_slow: ESRCH
[  216.732785][T10729] rust_binder: use_range failure ESRCH
[  216.741307][T10729] rust_binder: Failed to allocate buffer. len:1104, is_oneway:true
[  216.747013][T10729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  216.770043][T10729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63
[  216.866647][T10760] __vm_enough_memory: pid: 10760, comm: syz.6.3267, bytes: 8589934592 not enough memory for the allocation
[  216.958518][T10762] binder: Unknown parameter 'defcontext01777777777777777777777'
[  217.173737][T10773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78
[  217.270312][   T36] audit: type=1326 audit(2000000059.977:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.7.3274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943878e9a9 code=0x0
[  217.315843][   T36] audit: type=1326 audit(2000000060.015:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f465e38e9a9 code=0x0
[  217.375934][T10797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3279'.
[  217.454952][T10801] rust_binder: 10785 RLIMIT_NICE not set
[  217.455164][T10785] rust_binder: validate_parent_fixup: new_min_offset=540, sg_entry.length=0
[  217.463248][T10785] rust_binder: Error while translating object.
[  217.472139][T10785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  217.478500][T10785] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  217.488034][T10785] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:87
[  217.810427][   T36] audit: type=1400 audit(2000000060.473:1171): avc:  denied  { mounton } for  pid=10812 comm="syz.6.3284" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  217.871439][T10822] overlayfs: failed to clone lowerpath
[  217.894546][T10828] netlink: 'syz.6.3289': attribute type 15 has an invalid length.
[  217.902552][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3289'.
[  218.167697][    T9] rust_binder: 10781: removing orphan mapping 0:4120
[  218.237160][T10862] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  218.274003][T10872] TCP: TCP_TX_DELAY enabled
[  218.279053][T10872] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3303'.
[  218.288655][T10872] netlink: 'syz.0.3303': attribute type 4 has an invalid length.
[  218.816993][T10901] overlayfs: failed to resolve './bus': -2
[  218.876603][   T36] audit: type=1400 audit(2000000062.471:1172): avc:  denied  { map } for  pid=10910 comm="syz.0.3317" path="socket:[42558]" dev="sockfs" ino=42558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  218.899938][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  219.065862][    T9] usb 8-1: Using ep0 maxpacket: 16
[  219.072349][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.082609][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.094087][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.103847][    T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  219.117592][    T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.126662][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  219.134769][    T9] usb 8-1: SerialNumber: syz
[  219.140649][    T9] hub 8-1:1.0: bad descriptor, ignoring hub
[  219.146595][    T9] hub 8-1:1.0: probe with driver hub failed with error -5
[  219.154008][    T9] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  219.571256][T10889] raw-gadget.0 gadget.7: fail, usb_ep_set_wedge returned -11
[  219.854810][T10944] fuse: Bad value for 'fd'
[  219.899759][    T9] usb 8-1: USB disconnect, device number 3
[  220.371692][T10960] binder: Bad value for 'defcontext'
[  220.387017][T10964] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  220.387044][T10964] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  220.812079][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3346'.
[  221.492264][T11039] selinux_netlink_send: 24 callbacks suppressed
[  221.492287][T11039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11039 comm=syz.0.3357
[  221.554412][T11039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3357'.
[  221.653429][T11042] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3358'.
[  221.687099][T11045] overlayfs: missing 'lowerdir'
[  221.834328][T11081] overlayfs: failed to clone upperpath
[  221.872793][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3375'.
[  221.882083][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3375'.
[  222.302372][T11131] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  222.319620][T11133] 9pnet_fd: Insufficient options for proto=fd
[  222.334213][T11135] netlink: 'syz.0.3388': attribute type 4 has an invalid length.
[  222.342590][T11135] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3388'.
[  222.351898][T11136] netlink: 'syz.0.3388': attribute type 4 has an invalid length.
[  222.359717][T11136] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3388'.
[  222.369806][T11135] overlayfs: failed to clone upperpath
[  222.647648][   T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  222.668091][   T64] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  222.780973][T11169] rust_binder: Error while translating object.
[  222.781003][T11169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  222.787444][T11169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139
[  222.829140][T11179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  222.838471][T11179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:149
[  223.022392][T11190] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3407'.
[  223.043888][T11190] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3407'.
[  223.089483][   T36] audit: type=1326 audit(2000000066.409:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4638e9a9 code=0x7ffc0000
[  223.125689][   T36] audit: type=1326 audit(2000000066.437:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4638e9a9 code=0x7ffc0000
[  223.172696][T11207] sock: sock_timestamping_bind_phc: sock not bind to device
[  223.224488][   T64] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  223.407234][   T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.419799][   T64] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  223.428884][   T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.437020][   T64] usb 8-1: Product: syz
[  223.441219][   T64] usb 8-1: Manufacturer: syz
[  223.445806][   T64] usb 8-1: SerialNumber: syz
[  223.802752][   T36] audit: type=1400 audit(2000000067.082:1175): avc:  denied  { create } for  pid=11218 comm="syz.0.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  223.829757][   T36] audit: type=1326 audit(2000000067.101:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.0.3415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4638e9a9 code=0x0
[  224.526240][   T64] cdc_ncm 8-1:1.0: failed to get mac address
[  224.742625][T11186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  224.742658][T11186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:156
[  224.775820][   T64] cdc_ncm 8-1:1.0: bind() failure
[  224.791775][   T64] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71
[  224.800066][   T64] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71
[  224.809690][   T64] usb 8-1: USB disconnect, device number 4
[  224.856108][   T36] audit: type=1400 audit(2000000068.065:1177): avc:  denied  { shutdown } for  pid=11228 comm="syz.4.3418" laddr=172.20.20.10 lport=17 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  224.881817][T11229] overlayfs: failed to resolve 'smackfsdef='}': -2
[  225.026929][   T36] audit: type=1326 audit(2000000068.224:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11248 comm="syz.4.3425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f465e38e9a9 code=0x0
[  225.388788][T11269] binder: Unknown parameter 'context�'
[  226.307583][T11280] rust_binder: 178: no such ref 3
[  226.312709][T11280] rust_binder: Write failure EFAULT in pid:178
[  226.323079][T11282] tipc: Started in network mode
[  226.334243][T11282] tipc: Node identity ac14140f, cluster identity 4711
[  226.341122][T11282] tipc: New replicast peer: 255.255.255.255
[  226.347278][T11282] tipc: Enabled bearer <udp:syz2>, priority 10
[  226.476193][T11291] rust_binder: Error while translating object.
[  226.476221][T11291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  226.482468][T11291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189
[  226.582835][ T1420] Bluetooth: hci0: Frame reassembly failed (-84)
[  226.657145][   T36] audit: type=1326 audit(2000000069.758:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.6.3444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa6e38e9a9 code=0x0
[  227.116086][T11352] overlayfs: failed to clone upperpath
[  227.141352][T11356] overlayfs: failed to clone upperpath
[  227.543500][    T9] tipc: Node number set to 2886997007
[  227.715525][T11399] tipc: Started in network mode
[  227.720546][T11399] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711
[  227.728058][T11399] tipc: Enabled bearer <eth:macsec0>, priority 27
[  227.742207][T11403] tmpfs: Bad value for 'nr_inodes'
[  228.060686][T11414] 9pnet: Could not find request transport: f��Kd
[  228.068198][T11414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  228.076844][T11414] netlink: 'syz.0.3481': attribute type 46 has an invalid length.
[  228.084938][T11414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3481'.
[  228.094978][T11415] 9pnet: Could not find request transport: f��Kd
[  228.166116][T11421] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3480'.
[  228.473668][T11438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2130 sclass=netlink_route_socket pid=11438 comm=syz.0.3488
[  228.751588][ T1123] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  228.751605][  T547] Bluetooth: hci0: command 0x1003 tx timeout
[  228.774115][   T36] audit: type=1400 audit(2000000071.731:1180): avc:  denied  { map } for  pid=11440 comm="syz.7.3489" path="socket:[43541]" dev="sockfs" ino=43541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.803069][   T36] audit: type=1400 audit(2000000071.731:1181): avc:  denied  { accept } for  pid=11440 comm="syz.7.3489" path="socket:[43541]" dev="sockfs" ino=43541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.819124][T11450] netlink: 'syz.6.3492': attribute type 1 has an invalid length.
[  228.836648][T11452] __vm_enough_memory: pid: 11452, comm: syz.7.3491, bytes: 8589934592 not enough memory for the allocation
[  228.865999][   T36] audit: type=1400 audit(2000000071.815:1182): avc:  denied  { listen } for  pid=11455 comm="syz.6.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  228.922601][   T64] tipc: Node number set to 9546410
[  228.942884][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3498'.
[  228.952436][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3498'.
[  229.745860][   T36] audit: type=1400 audit(2000000072.629:1183): avc:  denied  { watch_reads } for  pid=11515 comm="syz.0.3514" path="/400/file0" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  229.805539][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3515'.
[  230.375177][T11585] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  230.408659][   T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  230.568963][   T64] usb 8-1: Using ep0 maxpacket: 16
[  230.578644][   T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  230.590204][   T64] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  230.599327][   T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.609718][   T64] usb 8-1: config 0 descriptor??
[  230.834122][   T64] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0
[  230.841553][   T64] holtek_kbd 0003:04D9:A055.000C: item fetching failed at offset 6/7
[  230.849868][   T64] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22
[  230.943911][T11608] netlink: 'syz.0.3548': attribute type 4 has an invalid length.
[  231.006826][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'.
[  231.049560][ T1081] usb 8-1: USB disconnect, device number 5
[  231.288683][   T36] audit: type=1326 audit(2000000074.079:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.4.3553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f465e38e9a9 code=0x0
[  232.009878][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3560'.
[  232.172551][T11652] input: syz1 as /devices/virtual/input/input18
[  232.365020][   T36] audit: type=1400 audit(2000000075.089:1185): avc:  denied  { append } for  pid=11671 comm="syz.7.3571" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  232.491108][T11679] 9pnet_fd: Insufficient options for proto=fd
[  232.532141][T11693] netlink: 'syz.6.3577': attribute type 6 has an invalid length.
[  232.621173][T11722] SELinux:  Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped).
[  232.631600][   T36] audit: type=1400 audit(2000000075.333:1186): avc:  denied  { relabelto } for  pid=11720 comm="syz.6.3585" name="memfd:vcan0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ksm_device_t:s0"
[  232.659314][   T36] audit: type=1400 audit(2000000075.333:1187): avc:  denied  { associate } for  pid=11720 comm="syz.6.3585" name="memfd:vcan0" dev="tmpfs" ino=1152 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ksm_device_t:s0"
[  232.906028][T11736] Invalid ELF header len 16
[  232.906021][   T36] audit: type=1400 audit(2000000075.595:1188): avc:  denied  { module_load } for  pid=11735 comm="syz.6.3589" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  233.214929][T11766] fuse: Bad value for 'fd'
[  233.220129][T11766] bpf: Bad value for 'gid'
[  233.225998][   T36] audit: type=1400 audit(2000000075.894:1189): avc:  denied  { read } for  pid=11765 comm="syz.4.3598" name="file1" dev="tmpfs" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  233.248616][   T36] audit: type=1400 audit(2000000075.894:1190): avc:  denied  { watch watch_reads } for  pid=11765 comm="syz.4.3598" path="/360/file0" dev="tmpfs" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  233.370551][T11781] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true
[  233.370884][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3604'.
[  233.497707][T11787] rust_binder: 258: no such ref 1
[  233.502883][T11787] rust_binder: 258: no such ref 2
[  233.606796][T11793] rust_binder: 11788 RLIMIT_NICE not set
[  233.914824][T11821] fuse: Bad value for 'user_id'
[  233.925803][T11821] fuse: Bad value for 'user_id'
[  233.932295][   T36] audit: type=1400 audit(2000000076.549:1191): avc:  denied  { create } for  pid=11820 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  233.964989][T11826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23834 sclass=netlink_route_socket pid=11826 comm=syz.0.3620
[  233.965764][T11827] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  233.987015][T11827] tipc: Enabled bearer <udp:syz1>, priority 10
[  234.220720][T11862] overlayfs: failed to clone upperpath
[  234.235416][T11864] 9pnet_fd: Insufficient options for proto=fd
[  234.407192][ T1081] rust_binder: 11786: removing orphan mapping 0:1048
[  234.444477][T11899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  234.458677][T11899] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  234.821648][T11955] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3663'.
[  235.118226][   T36] audit: type=1400 audit(2000000077.662:1192): avc:  denied  { read } for  pid=11964 comm="syz.6.3666" lport=20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  235.229523][T11970] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  235.238767][T11970] overlayfs: missing 'lowerdir'
[  235.276694][   T36] audit: type=1400 audit(2000000077.811:1193): avc:  denied  { create } for  pid=11974 comm="syz.0.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  235.399908][T11980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  235.399939][T11980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:273
[  235.420485][T11982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  235.429747][T11982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:275
[  235.700460][   T45] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  235.871538][   T45] usb 8-1: Using ep0 maxpacket: 16
[  235.876816][T12000] 9pnet_fd: Insufficient options for proto=fd
[  235.894632][   T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.906017][   T45] usb 8-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00
[  235.915580][T12005] overlayfs: missing 'lowerdir'
[  235.915576][   T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.925428][T12004] overlayfs: missing 'lowerdir'
[  235.933896][   T45] usb 8-1: config 0 descriptor??
[  236.151385][T12040] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=144 sclass=netlink_xfrm_socket pid=12040 comm=syz.6.3689
[  236.164635][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'.
[  236.333762][T12062] fuseblk: Bad value for 'rootmode'
[  236.379343][   T45] apple 0003:05AC:023F.000D: unknown main item tag 0xd
[  236.387958][   T45] apple 0003:05AC:023F.000D: unexpected long global item
[  236.395316][   T45] apple 0003:05AC:023F.000D: parse failed
[  236.404071][   T45] apple 0003:05AC:023F.000D: probe with driver apple failed with error -22
[  236.526393][T12090] overlayfs: failed to resolve './file1': -2
[  236.603216][ T1081] usb 8-1: USB disconnect, device number 6
[  236.979830][T12108] 9pnet_fd: Insufficient options for proto=fd
[  236.989739][T12108] netlink: 'syz.4.3711': attribute type 3 has an invalid length.
[  237.693930][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  237.693947][   T36] audit: type=1400 audit(2000000080.075:1195): avc:  denied  { create } for  pid=12137 comm="syz.6.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  237.739331][T12147] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3723'.
[  237.790507][T12165] overlayfs: failed to clone lowerpath
[  237.825471][T12169] netlink: 'syz.0.3730': attribute type 4 has an invalid length.
[  237.833936][T12169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3730'.
[  237.912553][T12175] futex_wake_op: syz.4.3732 tries to shift op by -1; fix this program
[  238.416296][T12190] incfs: Options parsing error. -22
[  238.421559][T12190] incfs: mount failed -22
[  238.436033][   T36] audit: type=1400 audit(2000000080.767:1196): avc:  denied  { mounton } for  pid=12191 comm="syz.0.3738" path="/file0" dev="rootfs" ino=26936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=sock_file permissive=1
[  239.076918][T12230] rust_binder: 12220 RLIMIT_NICE not set
[  239.078708][T12220] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  239.084369][T12220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  239.100273][T12220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:291
[  239.110296][T12231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  239.131728][ T1081] rust_binder: 12219: removing orphan mapping 0:4120
[  239.172597][   T36] audit: type=1400 audit(2000000081.450:1197): avc:  denied  { read } for  pid=12237 comm="syz.7.3755" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  239.417893][   T36] audit: type=1326 audit(2000000081.684:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.3765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f465e38e9a9 code=0x0
[  239.527366][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'.
[  240.324302][T12280] overlayfs: failed to clone upperpath
[  240.329936][T12281] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  240.460778][T12297] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  240.516304][T12298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[  241.408742][T12316] /dev/rnullb0: Can't open blockdev
[  242.331812][   T36] audit: type=1400 audit(2000000084.415:1199): avc:  denied  { setopt } for  pid=12335 comm="syz.7.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  242.454605][T12341] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3790'.
[  242.596067][ T1081] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  242.644923][T12373] fuseblk: Bad value for 'fd'
[  242.713878][   T36] audit: type=1326 audit(2000000084.761:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.0.3806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4638e9a9 code=0x0
[  242.789464][ T1081] usb 8-1: config index 0 descriptor too short (expected 1307, got 27)
[  242.797946][ T1081] usb 8-1: config 0 has an invalid interface number: 0 but max is -1
[  242.806166][ T1081] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0
[  242.815209][ T1081] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  242.826125][ T1081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  242.836142][ T1081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  242.846379][ T1081] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  242.865071][ T1081] usb 8-1: string descriptor 0 read error: -22
[  242.871304][ T1081] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  242.880661][ T1081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.889602][ T1081] usb 8-1: config 0 descriptor??
[  242.899879][ T1081] hub 8-1:0.0: bad descriptor, ignoring hub
[  242.905942][ T1081] hub 8-1:0.0: probe with driver hub failed with error -5
[  242.920024][ T1081] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input20
[  243.602904][   T36] audit: type=1400 audit(2000000085.594:1201): avc:  denied  { read } for  pid=12435 comm="syz.4.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  243.649060][ T1081] usb 8-1: USB disconnect, device number 7
[  243.814655][T12475] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  244.051636][T12486] binder: Bad value for 'max'
[  244.192364][T12492] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  244.192722][T12492] rust_binder: Error in use_page_slow: ESRCH
[  244.199247][T12492] rust_binder: use_range failure ESRCH
[  244.205382][T12492] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  244.210977][T12492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  244.219020][T12492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:352
[  245.009638][T12568] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  245.028798][   T36] audit: type=1400 audit(2000000086.932:1202): avc:  denied  { relabelto } for  pid=12567 comm="syz.6.3868" name="cgroup" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  245.068651][   T36] audit: type=1400 audit(2000000086.932:1203): avc:  denied  { associate } for  pid=12567 comm="syz.6.3868" name="cgroup" dev="tmpfs" ino=1272 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0"
[  245.099484][   T36] audit: type=1400 audit(2000000086.969:1204): avc:  denied  { unlink } for  pid=9850 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  245.225428][T12595] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  245.225452][T12595] rust_binder: Read failure Err(EFAULT) in pid:358
[  245.242493][   T36] audit: type=1400 audit(2000000087.137:1205): avc:  denied  { ioctl } for  pid=12596 comm="syz.7.3879" path="/dev/usbmon5" dev="devtmpfs" ino=105 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  261.909544][T12656] tmpfs: Bad value for 'nr_blocks'
[  261.963922][T12674] netlink: 'syz.6.3903': attribute type 4 has an invalid length.
[  261.972522][T12674] netlink: 'syz.6.3903': attribute type 32 has an invalid length.
[  261.995600][T12681] 9pnet_fd: Insufficient options for proto=fd
[  262.015887][T12685] /dev/rnullb0: Can't open blockdev
[  262.279764][   T36] audit: type=1400 audit(2000000103.077:1206): avc:  denied  { create } for  pid=12737 comm="syz.7.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  262.315947][T12741] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3925'.
[  262.343114][T12743] incfs: Options parsing error. -22
[  262.348493][T12743] incfs: mount failed -22
[  262.384774][T12747] devpts: called with bogus options
[  262.399337][T12749] overlayfs: failed to clone lowerpath
[  262.626904][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'.
[  262.644848][T12763] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3934'.
[  262.654335][   T36] audit: type=1400 audit(2000000103.423:1207): avc:  denied  { execute } for  pid=12762 comm="syz.0.3934" path="/cgroup.controllers" dev="ramfs" ino=48320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  263.686344][T12815] overlayfs: failed to clone upperpath
[  263.710212][T12819] netlink: 'syz.6.3954': attribute type 14 has an invalid length.
[  263.843858][T12830] netlink: 'syz.7.3960': attribute type 2 has an invalid length.
[  263.851671][T12830] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3960'.
[  263.911931][T12837] devpts: called with bogus options
[  264.204484][T12843] tc_dump_action: action bad kind
[  264.461433][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'.
[  264.523723][T12862] input: syz1 as /devices/virtual/input/input21
[  264.703116][T12874] 9pnet_fd: Insufficient options for proto=fd
[  264.949960][ T8820] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  265.012475][   T36] audit: type=1400 audit(2000000000.289:1208): avc:  denied  { listen } for  pid=12882 comm="syz.0.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  265.120990][ T8820] usb 8-1: Using ep0 maxpacket: 16
[  265.131511][ T8820] usb 8-1: config 2 has an invalid interface number: 14 but max is 0
[  265.146540][ T8820] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  265.158355][ T8820] usb 8-1: config 2 has no interface number 0
[  265.164660][ T8820] usb 8-1: config 2 interface 14 altsetting 9 has an invalid endpoint descriptor of length 6, skipping
[  265.180151][ T8820] usb 8-1: config 2 interface 14 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  265.196081][ T8820] usb 8-1: config 2 interface 14 has no altsetting 0
[  265.207364][ T8820] usb 8-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=77.73
[  265.216425][ T8820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.227504][ T8820] usb 8-1: Product: syz
[  265.231854][ T8820] usb 8-1: Manufacturer: syz
[  265.236707][ T8820] usb 8-1: SerialNumber: syz
[  265.353653][T12924] futex_wake_op: syz.4.3993 tries to shift op by -1; fix this program
[  265.467690][   T36] audit: type=1326 audit(2000000000.720:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943878e9a9 code=0x7ffc0000
[  265.470973][ T8820] snd-usb-audio 8-1:2.14: probe with driver snd-usb-audio failed with error -2
[  265.518146][ T8820] usb 8-1: USB disconnect, device number 8
[  265.520554][   T36] audit: type=1326 audit(2000000000.720:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f943878e9a9 code=0x7ffc0000
[  265.552031][   T36] audit: type=1326 audit(2000000000.720:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943878e9a9 code=0x7ffc0000
[  265.556240][T12877] udevd[12877]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.14/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  265.576425][   T36] audit: type=1326 audit(2000000000.720:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943878e9a9 code=0x7ffc0000
[  265.734665][T12978] fuse: Bad value for 'fd'
[  265.829333][T12991] fuse: Unknown parameter 'wroup_id'
[  265.876344][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4014'.
[  266.023752][T13006] netlink: 'syz.0.4018': attribute type 64 has an invalid length.
[  266.043593][T13006] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4018'.
[  266.096395][   T36] audit: type=1400 audit(2000000001.309:1213): avc:  denied  { listen } for  pid=13015 comm="syz.4.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  266.138400][T13023] binder: Unknown parameter 'sX��$�.��}�����Atats'
[  266.163471][   T36] audit: type=1400 audit(2000000001.375:1214): avc:  denied  { watch watch_reads } for  pid=13022 comm="syz.4.4027" path="/" dev="configfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  266.189880][   T36] audit: type=1400 audit(2000000001.375:1215): avc:  denied  { write } for  pid=13022 comm="syz.4.4027" name="/" dev="configfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  266.481317][T13040] SELinux: ebitmap: truncated map
[  266.486392][T13040] sel_write_load: 23 callbacks suppressed
[  266.486410][T13040] SELinux: failed to load policy
[  266.637522][T13048] netlink: 'syz.6.4035': attribute type 27 has an invalid length.
[  266.658161][T13048] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.665467][T13048] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.696778][T13048] tipc: Resetting bearer <eth:macsec0>
[  266.704304][T13042] incfs_lookup_dentry err:-13
[  266.709099][T13042] incfs: Can't find or create .index dir in ./bus
[  266.719518][T13042] incfs: mount failed -13
[  266.832568][T13071] /dev/rnullb0: Can't open blockdev
[  267.690109][T13123] overlay: Unknown parameter 'euid'
[  267.783374][T13131] /dev/rnullb0: Can't open blockdev
[  267.851237][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  267.851255][   T36] audit: type=1400 audit(2000000002.955:1219): avc:  denied  { create } for  pid=13140 comm="syz.4.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  267.911649][T13153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45128 sclass=netlink_route_socket pid=13153 comm=syz.6.4068
[  268.071631][    T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  268.097147][T13161] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4069'.
[  268.242665][    T9] usb 8-1: device descriptor read/64, error -71
[  268.509933][    T9] usb 8-1: device descriptor read/64, error -71
[  268.777202][    T9] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  268.916202][    T9] usb 8-1: device descriptor read/64, error -71
[  269.239852][T13217] 9pnet_fd: Insufficient options for proto=fd
[  269.293160][T13223] sit0: entered promiscuous mode
[  269.298367][T13223] netlink: 'syz.0.4088': attribute type 1 has an invalid length.
[  269.306554][T13223] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4088'.
[  269.373720][T13236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4092'.
[  269.423338][T13242] netlink: 2885 bytes leftover after parsing attributes in process `syz.0.4094'.
[  269.472110][   T36] audit: type=1326 audit(2000000004.461:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.6.4097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa6e38e9a9 code=0x0
[  269.727008][    T9] usb 8-1: device descriptor read/64, error -71
[  269.751468][   T36] audit: type=1400 audit(2000000004.733:1221): avc:  denied  { setopt } for  pid=13267 comm="syz.4.4102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  269.789335][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4103'.
[  269.853652][    T9] usb usb8-port1: attempt power cycle
[  269.870648][T13276] overlayfs: failed to clone lowerpath
[  270.098962][   T36] audit: type=1400 audit(2000000005.051:1222): avc:  denied  { relabelfrom } for  pid=13288 comm="syz.0.4109" name="" dev="pipefs" ino=48992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  270.133985][   T36] audit: type=1401 audit(2000000005.051:1223): op=setxattr invalid_context=""
[  270.143974][T13291] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  270.164493][T13291] overlayfs: missing 'lowerdir'
[  270.208833][T13298] overlayfs: failed to clone upperpath
[  270.220438][    T9] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  270.242835][    T9] usb 8-1: device descriptor read/8, error -71
[  270.392205][    T9] usb 8-1: device descriptor read/8, error -71
[  270.648062][    T9] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  270.670517][    T9] usb 8-1: device descriptor read/8, error -71
[  270.809116][T13306] bridge0: entered promiscuous mode
[  270.814450][T13306] bridge0: entered allmulticast mode
[  270.820196][    T9] usb 8-1: device descriptor read/8, error -71
[  270.947494][    T9] usb usb8-port1: unable to enumerate USB device
[  271.141244][T13312] netlink: 288 bytes leftover after parsing attributes in process `syz.7.4118'.
[  271.209801][T13319] batadv_slave_1: entered promiscuous mode
[  271.428983][T13311] batadv_slave_1: left promiscuous mode
[  272.006772][   T36] audit: type=1400 audit(2000000006.847:1224): avc:  denied  { append } for  pid=13335 comm="syz.7.4125" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  272.106148][T13338] ------------[ cut here ]------------
[  272.111671][T13338] WARNING: CPU: 1 PID: 13338 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0
[  272.121214][T13338] Modules linked in:
[  272.125140][T13338] CPU: 1 UID: 0 PID: 13338 Comm: syz.7.4126 Not tainted 6.12.30-syzkaller-g379b99745e88 #0 11522de10711ed1cb6b8bd0366ad005e7892f9f5
[  272.134135][   T36] audit: type=1400 audit(2000000006.931:1225): avc:  denied  { ioctl } for  pid=13337 comm="syz.7.4126" path="/158/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  272.138789][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.174953][T13338] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0
[  272.180891][T13338] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 74 30 ee 05 00 0f 85 c4 00 00 00 c6 05 67 30 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
[  272.188772][T13339] binder: Bad value for 'max'
[  272.200532][T13338] RSP: 0018:ffffc9000db079a0 EFLAGS: 00010246
[  272.200560][T13338] RAX: 0000000000000000 RBX: 1ffff92001b60f38 RCX: 0000000000000000
[  272.200574][T13338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000db07a48
[  272.200586][T13338] RBP: ffffc9000db07ad0 R08: ffffc9000db07a47 R09: 0000000000000000
[  272.200598][T13338] R10: ffffc9000db07a30 R11: fffff52001b60f49 R12: ffffc9000db079e0
[  272.200612][T13338] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000
[  272.251344][T13338] FS:  00007f94396a26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  272.260304][T13338] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  272.266906][T13338] CR2: 00007f9439680f98 CR3: 0000000115ebc000 CR4: 00000000003526b0
[  272.274925][T13338] Call Trace:
[  272.278201][T13338]  <TASK>
[  272.281139][T13338]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  272.287037][T13338]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  272.292773][T13338]  ? futex_wait_setup+0x1bc/0x260
[  272.297830][T13338]  ? __futex_wait+0x218/0x2a0
[  272.302517][T13338]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  272.308708][T13338]  ___kmalloc_large_node+0x9c/0x1d0
[  272.314037][T13338]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  272.320227][T13338]  __kmalloc_large_node_noprof+0x1e/0xe0
[  272.325867][T13338]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  272.332317][T13338]  __kmalloc_noprof+0x26d/0x450
[  272.337189][T13338]  ? __kasan_check_write+0x18/0x20
[  272.342310][T13338]  pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  272.348531][T13338]  ? futex_setup_timer+0xb4/0xd0
[  272.353475][T13338]  ? futex_wait+0x29a/0x7a0
[  272.357988][T13338]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  272.364458][T13338]  ? selinux_file_ioctl+0x6e0/0x1360
[  272.369772][T13338]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  272.375339][T13338]  ? do_futex+0x309/0x500
[  272.379687][T13338]  ? __cfi_do_futex+0x10/0x10
[  272.384410][T13338]  ? __fget_files+0x2c5/0x340
[  272.389096][T13338]  ? bpf_lsm_file_ioctl+0xd/0x20
[  272.394068][T13338]  ? security_file_ioctl+0x34/0xd0
[  272.399190][T13338]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  272.405725][T13338]  __se_sys_ioctl+0x135/0x1b0
[  272.410421][T13338]  __x64_sys_ioctl+0x7f/0xa0
[  272.415404][T13338]  x64_sys_call+0x1878/0x2ee0
[  272.420100][T13338]  do_syscall_64+0x58/0xf0
[  272.424549][T13338]  ? clear_bhb_loop+0x50/0xa0
[  272.429232][T13338]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  272.435166][T13338] RIP: 0033:0x7f943878e9a9
[  272.439599][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.459237][T13338] RSP: 002b:00007f94396a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.467667][T13338] RAX: ffffffffffffffda RBX: 00007f94389b5fa0 RCX: 00007f943878e9a9
[  272.475650][T13338] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000006
[  272.483655][T13338] RBP: 00007f9438810d69 R08: 0000000000000000 R09: 0000000000000000
[  272.491653][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.499647][T13338] R13: 0000000000000000 R14: 00007f94389b5fa0 R15: 00007ffde8d85038
[  272.507629][T13338]  </TASK>
[  272.510668][T13338] ---[ end trace 0000000000000000 ]---