last executing test programs:

21.864331721s ago: executing program 1 (id=798):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5411, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async)
brk(0x200004ffc000) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x2200c859, 0x0, 0x50) (async)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x380, 0x3}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) (async)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ab2000/0x4000)=nil) (async)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) (async)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x2}, @acquire={0x40046305, 0x1}], 0x8a, 0x0, &(0x7f00000005c0)="f22439c47e109c6096ea2bae1f7d03b8c442460948a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8f785bd21d2f5bd1f9fc438342bd72c1d75a4347f043f04a939f432e27acf3830fae86e05ac037d280be0eb1692450365f1b0d705"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x400000000d72)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0})

21.795645262s ago: executing program 1 (id=800):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1802, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000100), 0x8)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x34}, 0x8)
listen(r1, 0xb4)
connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1802, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r1, &(0x7f0000000100), 0x8) (async)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x34}, 0x8) (async)
listen(r1, 0xb4) (async)
connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

21.700613702s ago: executing program 1 (id=804):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010) (async, rerun: 64)
splice(r0, 0x0, r2, 0x0, 0x100000004, 0x0) (async, rerun: 64)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (async)
sendto(r3, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6)
r5 = syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) (async)
close(r4)
ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000040)) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async)
sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64)
shutdown(r6, 0x0) (async, rerun: 64)
recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async, rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0) (rerun: 32)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) (async)
read(r4, &(0x7f0000001400)=""/255, 0xff)
write(r7, &(0x7f0000000400)="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", 0x1f000)

21.693537253s ago: executing program 1 (id=805):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9})
r0 = openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffe, 0x80)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r4, @ANYRES64=r3, @ANYRES64=r2, @ANYRESDEC, @ANYBLOB="8ab4c78e29cdaf124e8e1bfdab28e37e2c3d0a2779a942e85c97ae7bf61200975e46993e32238c9075cc79b5e777099a4d8f40907365e1e22707452b1b6a2b1221bbb085696ea95efbf359b0289e0b1f94cc23f36e810602a10e805acf1da5c7608ac84e66e4935de52529f99442e49e67d50dbb869a918203cc6865ab2e2e79349f8c6cb3dff2bd331cb63dbc11848f2898650d3316df68c5ffbb4067e640ede1143f524e70fad24d28c30fdb1fd82a4877a43cd7aa2688442b8d493ce5a777f0f49c4250a7f417b453670984ec16d1fb0355327c35a6034a11e5fb7dc67a3aae369e86719d5b8add96b1ba38a208020f3a51", @ANYRES8=r4, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000040)=0xb, 0x8)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x2028, 0x4)
dup(r1)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f00000003c0)={0x2, 0x4e24, @dev}, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r8 = syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r8, 0xf)
wait4(r8, 0x0, 0x2, 0x0)
clock_gettime(0x4, &(0x7f0000000200))
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0002"], 0x28}}, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}})
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f00000001c0)=0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0xfffffffe, &(0x7f00000016c0))
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r10, &(0x7f0000000000), 0x8)

21.637897163s ago: executing program 1 (id=806):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
ioprio_get$pid(0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

21.634914963s ago: executing program 1 (id=807):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x0, 0x1)
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x21)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x65)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff001040000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="06d009873420030400006bb267a01cee1ed311d815552b2e7a1120a3237b69b6477b84bce1dd75a5835e6bcf341ddca1161ba6ccaff26af579f8f60d1053e29d4581133f12e219bd48c6e761b84977b6c5f9c365864fa312fc708d161b278821599940e5851ecd6b6690ea30bdadbea93a6fe2a034453c5304020b6e9e9757baab85efcd3320"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0)

6.544864365s ago: executing program 32 (id=807):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x0, 0x1)
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x21)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00160400000094c161ee9a58ce9b4e779d1d51e1b7f10677cd1cc5e3d7759f9fcdbd8c007cf33c659585f75f25487abe311ae6d7439e72eb69ee3eade52cad6ff0ed1d541056c331ed8ba6555fc2b2cf5a4c81d398d04adb876465da92740cdf5e6c9ebfdbc689f192c6c33eb9434e69661f4bdc0b890252dc9aff025b1df971ac4cc2a47ecb5a288ca20cf553a9ba0e5a17c71e9140245e381666397a61fce1187b6c95b24cb2aac19755ab1c858ac562aff699205efafe1b5dbf78816a4f409a885228414b6d2356f6917b7107fa1e125afd85a29ecf6dbfea6064794cf68e150c2fac6ac13f472cfa9530a4a598c55c3faeb64379f37c04a6f05cd4377a07987cbdf4177e42aa68efc5e80c6e460dadd716059ab8036b78b737c723c35d3fd3d91a10a0c3981f64f3d65e0d745fce3adb0993d3653b511cb8fed79d1ca40c60c3459f03c08931711498a3d8a103b7258572709bfd411fbabb3f8b1d69295cf37ec6430cd40697b8d5c54d7c4fd0129738dfb32edc1802a507c1ae219f0ffd90d4ef5a6fdd4ffb770568f5d9f7b9a6b96d70242253cede6193d65d8dd4f4f2cb535464c2228ffd51b3857cdc70eee20e85423206e4bc1922fcd34d1406e4c8fb3ea0e04b429d4d4217e849848b4a7537f92ff3bb32d0754ea1f17313c200294a621fae9095a98343c8debab2ad179b6d201ecf400c98ff9379ffa1c8893f4649132a3b4080ff28e09c62510e27ffa5679c9841fdcf1f3e631d5b5ac6567fb6a0132e0f0744bce479b908affdf7700db87c00b7fcdafb12bd3c20126ae9631a1071f467e68f9a24123d5989419badf7a520a36189823bf9847426aaddda5748b1b66b8d7ef7c4e54fa31bfa068db8354168b990086d20e295611fcae2d4422a8e1cce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x65)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff001040000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="06d009873420030400006bb267a01cee1ed311d815552b2e7a1120a3237b69b6477b84bce1dd75a5835e6bcf341ddca1161ba6ccaff26af579f8f60d1053e29d4581133f12e219bd48c6e761b84977b6c5f9c365864fa312fc708d161b278821599940e5851ecd6b6690ea30bdadbea93a6fe2a034453c5304020b6e9e9757baab85efcd3320"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0)

3.286444293s ago: executing program 3 (id=1053):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040))
madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) (async)
madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17)

3.256308853s ago: executing program 3 (id=1054):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000800)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200)
socket(0x2b, 0x2, 0x1)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR<nB\r2v\x1f\xa2u\xc0I\xd6\xb4\xa3\xac\x90\x9d)\\\x94o\x8d\xed\'\xa2Js\xd7t{\xa3pvn^&\x0e%\xda-,sI\xc4\x95h\xa6\xe5Z\x7f#\xc0\x94\xcd\xf2) p\xf3\x94\xda*\xdb\x82O\xc1G\xf18\x16dl\xde\xf8\x8b\xf0\x8c\xa8\x89\xf9~$\x1c\x04\x14AN\x84\x9f\x83Q\xadB\xbb+w\xc1\xebEF\xb0J\t\xa5\xfa8\xb60)\xbc\x11\xbd9\xad\xc6\x17[\xb5\x9fD\x82 \xf9\xf9\xfdfnh@\xa7\xa4\xab\xe4\xe5\xc7\xaa\r\x1e\\\xa4\xd1\xfcHT\x8a\xb1R[\xf9\xe2+\xc2\x8f\xa9\xceS\xbao\x0e\x98W\xf6dMK\xd4\xbdSe\xd4\x9a\xdb\xd4o&\xc9Akd\xfc\x01\xa6$\xd6-\xe6I\xea\xc1 c!,\xf3l\x98\'\xb1\'\xe7F\xfa\x058\xcdD\x1e4#L\x14\xd9{L\x94\xe6^\x1c4ir4`@\xf9\x11:\'6P_~\xca\xe8Fr\x0eZ\xcd\xe6u\xd3K\xbc<\x94R\x80\x7f\x86\x95+\x87J\xebB\xcb\xb5\x97\xf1tg|dOp\xc0vvV\"\xc6B\xd2\xca\xf2\xa6|\a\\^[\'\xb0 \x88ij\x01gB\t\xd2\xf9\xd7\x16\x9b\xc2jTa}\xba\xdf\xb2\xd8\xd0`\x0fl\xcfv@[\f\x05+\xb6\x9f9\xa5\x10\xb1{\xc4\x89.H\xe5\x17\xe9\xe2\xab\x1f\x1a~\xe5\xc8\xf4\xc9\xdb\xae.`x%\x8e\xb1`\x90\x88H\'\xdes\rW\x9c\xb9\xf3\xcb\xd2P+z\xac\xfa\x8d\x8a\xaeY+\x01]\xe7\x1c\x01\xfcU\x1b_3\xad\"\nr`\x85\xe9\xeaC}\x9d\x8c\xf7\xd6`\x8a\'\x1d\xd4kT\xb8rS2z\xfc\x00\x00\x00\x00\xb56\x99\x94\x82&m\x17\b\xe5\x19\x10\x86\xb9\xc5\x85\x98\xdb\x11\xc321\x1d\x83\x90\x92\xf1\x94\x8c\x13n\xb4\x16\x1d&\x04\x9cs`\x9e\xe5U\xa7\xd4\xa6\b\xdd0\xb0\xe4[AC\x9b\a\xeb\xb2E0n\xa0\xd0\xcfz\x9e6\xa7\xcf\xbf\x19\xacQT\x172wbh\x849O\xd1\x87\xe1V\x8ff\xc9\xbfA.X\xfa\xa0\x92?\xb4AIk\xb7\x8e\xe4\x0f\xd3Ac\xb8>4\xebh\xe2\xd4')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000)

3.165895574s ago: executing program 3 (id=1055):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = dup2(r2, r2)
shutdown(r2, 0x1)
write$tun(r3, 0x0, 0x46)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}})
io_setup(0x1, &(0x7f00000016c0)=<r4=>0x0)
io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}])

3.059157254s ago: executing program 3 (id=1056):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00')
statx(r0, 0x0, 0x7000, 0x200, 0x0) (async)
statx(r0, 0x0, 0x7000, 0x200, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.046509594s ago: executing program 3 (id=1057):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x5a18c2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

2.457848127s ago: executing program 4 (id=1073):
socket$netlink(0x10, 0x3, 0x7)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0xa33)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x6}, 0x20)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030302c00b51a83995263891166e77658e8dc1c2986e6981086ee3140e9854854474af2cb7f24fd496c4d862cb5470a587eee8e8085cf9d5aa9c169f405ff284b5d6037fe5e1d5ef12b9dd0fb4fb74eab7ef7d7682a273bf46dda5d40835242fdba598eaaba998df252c0ca7c30"])
socket$netlink(0x10, 0x3, 0x7) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1) (async)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0xa33) (async)
close(0x3) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x6}, 0x20) (async)
setresuid(0x0, 0xee01, 0xffffffffffffffff) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030302c00b51a83995263891166e77658e8dc1c2986e6981086ee3140e9854854474af2cb7f24fd496c4d862cb5470a587eee8e8085cf9d5aa9c169f405ff284b5d6037fe5e1d5ef12b9dd0fb4fb74eab7ef7d7682a273bf46dda5d40835242fdba598eaaba998df252c0ca7c30"]) (async)

2.450689947s ago: executing program 4 (id=1074):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000980)=[{r2}], 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

1.626781511s ago: executing program 0 (id=1081):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x3, 0xd5d72001, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040))
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xffffffffffff8000)
ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x3bb9, 0x3, 0x7, 0x41abfc8d, 0x7c0b, 0x8, 0x4, 0x315f, 0xdaa0, 0x7, 0x0, 0xffff, 0x8000000000000000, 0x6, 0x4, 0x7], 0x2, 0xc6c10}) (async)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x3bb9, 0x3, 0x7, 0x41abfc8d, 0x7c0b, 0x8, 0x4, 0x315f, 0xdaa0, 0x7, 0x0, 0xffff, 0x8000000000000000, 0x6, 0x4, 0x7], 0x2, 0xc6c10})
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000340))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f00000003c0)=0x8, 0x4)
ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000400)=0x1) (async)
ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000400)=0x1)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000440)={'netpci0\x00', {0x2, 0x0, @multicast2}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x7, 0x6, 0xfedeead49967c469, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4000004) (async)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x7, 0x6, 0xfedeead49967c469, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4000004)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='hsr0\x00', 0x10)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0)
ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x3a07f)
read$FUSE(r5, &(0x7f0000000640)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_WRITE(r5, &(0x7f0000002680)={0x18, 0x0, r6, {0x2}}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000026c0), 0x60002, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x35) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x35)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x300000000)
sendto$inet(r5, &(0x7f0000002700)="67a50100ba4e9f8684b9", 0xa, 0x1, &(0x7f0000002740)={0x2, 0x4e23, @loopback}, 0x10) (async)
sendto$inet(r5, &(0x7f0000002700)="67a50100ba4e9f8684b9", 0xa, 0x1, &(0x7f0000002740)={0x2, 0x4e23, @loopback}, 0x10)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000002780)={0x4, 0xfc46, 0x9, 0x8, 0x7}) (async)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000002780)={0x4, 0xfc46, 0x9, 0x8, 0x7})
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000027c0))
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000002800)={0x80})
connect$bt_sco(r5, &(0x7f00000028c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

1.572156902s ago: executing program 0 (id=1082):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r1=>0x0)
ptrace(0x11, r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.571548432s ago: executing program 4 (id=1083):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) (async, rerun: 64)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0) (async)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200006, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x80, 0x8001, 0x6}}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x2a) (async)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
sendmmsg$inet6(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="9fd49c72cdfcdd0058e4905dbc8395d693a7b22419", 0x15}, {&(0x7f0000000240)="ecda8fb871a9a60db4fc852ff5410a85e4ab23f58da765e11f633bcfb06aec566135472b6d3b35cb3975e0a6ccea86297d061203012907d94e426aeb1c8b765e8d61d44287", 0x45}, {&(0x7f00000003c0)="dc79426305908a6e7d1dfae16dda45893b311392d3e28163a641ce08569caf25f505c23f15e06fe3996135224a27b3c70cc569fba7227813ccc9b277c118ee55ab9d729903", 0x45}, {&(0x7f0000000580)="fd8fa48e7afbd5f66abaf4ecc030d783d12ebb100c69f2bb7d6ce2be381cbb8467649c8da719f34f201e5dec7305e95fc4ad2b7235ca26b32c3823c286f9c01231441525cdcc532e11a057ceaea5ac33f0c597ec9b78841129f0d3ceab", 0x5d}, {&(0x7f0000000300)="ceae64652dbcfafeb54475d62c478fafa12c8f2068571db4caa76924d7a5597e2f1bd7339c9f0c9ba6a2597cfe", 0x2d}], 0x5, &(0x7f0000000b40)=ANY=[], 0x80}}], 0x2, 0xc8040) (async)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6) (async)
connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r7 = fcntl$dupfd(r0, 0x0, r0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x20}}, 0x11)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/227, 0x101, 0x1, 0x0}, &(0x7f00000001c0)=0x40) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)

1.570312322s ago: executing program 0 (id=1084):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003900)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000001ac0)={0xa, 0x4e22, 0x1d04, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000003a00)=ANY=[], 0x240}}], 0x2, 0x40000) (async)
clock_gettime(0x0, &(0x7f0000000980)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000340)=""/114, 0x72}}, {{&(0x7f0000000480)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f00000006c0)=""/70, 0x46}], 0x5, &(0x7f00000007c0)=""/238, 0xee}, 0x9a}], 0x2, 0x1, &(0x7f00000009c0)={r1, r2+10000000}) (async)
io_setup(0x800, &(0x7f0000000440)=<r3=>0x0)
r4 = eventfd(0x0)
io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x4f}]) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0) (async)
io_setup(0x3, &(0x7f0000000000)=<r6=>0x0)
io_cancel(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x10, r0, &(0x7f00000000c0)="f33c4be565fe280a54454a30529c69a2fb04ebd9b17fc461fdce0c26936b1233303ae6648a2781dbfb23657e41fd7742035eda8e411694fb63dcd40834e08648e310d5e3856e1d41ef45dda11a2dcc9c11564e82316e61397b063dbb5fef895337fb76", 0x63, 0x9, 0x0, 0x1, r4}, &(0x7f00000001c0)) (async)
readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1)

1.532816652s ago: executing program 3 (id=1085):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$FIOCLEX(r1, 0x5451)

1.524973702s ago: executing program 0 (id=1086):
rt_sigtimedwait(&(0x7f0000000000)={[0x2]}, &(0x7f0000000040), &(0x7f00000000c0), 0x8)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x89, 0x6, 0x3ff, 0xcc4, 0x5d1, 0x9, "b0b6b0305fa6579c68fecb07178f777edcdededb9704462ef32573be99cf88544f8baa8c25e5a0aaadda33d033867fd689c87d487ddd3857b40e2c4e06960a0982cb266e1cac6841ad5bb9d46d86a3e1f93eda8d637d24c6efd36e3e14fd5b993873bf041f4dba746d02080f9f97272750aa0bd6cf05eeadb7997266fe57a3620d6505d1a01c1b7a30"}}, 0x1a1)
write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006)
epoll_create1(0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001340)="2c5bbf5a7ae23ee6a9e678e2b35a3dada82e283b9589d6eaa7efe09ca94dfce9138048098ef7fe9f83c6eb225570a2261c54bfcd6fb34ccf7553f6c20c0623621066ea995d80273fc6a049e7f0faf9ce4acec57b4d102a31958ada80c14325a374f9bd401c722c059eb910f384d2965a09dd113e9a274e4ca021181dc19a6797a387249c9a7c6ff54c3dfba9d1f3751d5dd90296c75f1f60c7f5cf68fcfb8b231f3a92db9319a422930d5b8723d8b3c530e32a187d88cabe1770998dcbf5544cd6beb99e60e9c06153d22df4e3d5d962bc328d0376acaaebd40dbb6ea5d62c1e384b6b245275017ad6be4c7192a0e3431e14c93db5a2db6c67b6622b48a44006d3513fe31a71c5695cf019846f78a23b4438fc3bf1e168319ab4e09d09b5952db60c16eaba224b2feddf89e7a484d272c1cd2276fad38bf860372fbbdcfca05ec04da264dec56b27b8af642cef41aecbb5981166baa234239605c7f6473ca3b707a873f7a85c829f5e1c2e593bdd36d4b2d45939d12c9fd24afd872f229dea2ca8ad7e367d98cbc6c99686715527c7eb126655025377572d2d8b11a312596ca318f6dc43659cafc90199fc090d13b82503a852a5f87d2238682c3564210b0312cb6fa947bcb07ec3c212b9676b6ec78606d9f8ee2bcd6e10da3dad53340f50302d94332e99b3a15985f6e09dbe9cb10d9b21d914279967eae32e4b0838bd2157bba9be0f3e3d18baefd67f88abf922fe1dd5b9fa5387a61793efdace53f78da0eea320f17bcd204f0002af4fcfe38c606be4ab1b5dff1c1d408b8fc613c8c8e2079cd17d43e990a10126ef2b585e711b8a26004e5297456c97753df8de2bf5da2775f28c49f989de0a0fe77b5085ea4be630e309817e47298e3fb9d8a637c74954fbdde831cfcb2299351fdd9fc5c30680677bede9c968411abf599277788ad752fd00b2837bb71dcd7772029d0c27b671de7129548fcd4554dc19be4c33b72c1ec0e86f182582c0f27820ba36b8650defddae436f0bfc1ee5db2f7b02d2066b0e2b75936b9ac3bb4ed5e67e46a92cad0a2f2afa8db814694e545edd984abfd0472dfd6c2eccbcfaf73eb66fe0ec82523ae5c23c9709fc302b89634b7dff46f9bcd67319e414e9f9eac0e4bea42c5a49d27ba6979d26b9f45cbb705425fc02c5acd709fd905f7af3dc8cfd2267f70be6f6d1d986201e56f857645137cf9965446cca091bbf1701a15db0faad7180663a1223b1e46db12b2492eaacf130e6b3a157fc1a9d2bccae340917265e5c79a988177672d7bbbdc82b59c8f0fcd93f23845423cc59b255f120f07eec48d42544406f6363bb55b89f4e22956dba3e40c42f5ee5d61985d62f2c628335549c83076a0178fab99bb7f7ccbd79a7435720e40ebb6d132bdb3ad2c6b56c4c85a3c9bd18d2632dc90bc2c8f0475f79f9d7b34c45a3e6738f963d8215024b5e6cf0516fc2789ad3f6ea500425272da2d77ae4fe4ec2e42d7fec15cdbe43e5f1ceb945854dd2b5c59fe75325c437971318cdf45c87dd05a93f4a3e7f3fea3d582ff1d7099de786ec3097f7495d21279536e0894ec690b5e018c438d945ced7edfc31f297821a26c55ca3662f9491387e4da4fe2054dd33142cb18d012b2642397cd5bd461f860217789d48eaefc099de3a26255bb124e8f4b5c14c5eca5149f4495b4b5baeaa55721ef1f8c188962e77ca73c9ff6bb662efadb4df96a95d0a10be40298caa5f42ef5798cd00be6b1b5bdc8b63cd5b65de612b8967da9102dd5747081a276575365bfdf5447cec860efec3fd2ea01015d216b145c2e09668b9611605ff6abe23150fc71e6382d6f21c0aab9fa77e8e826109eb1b6d10f79e48e8d990e0f2ed2b70279c8ae933b2997261f3a1bfb1937847483039aa0f73991d155ac1faa266b7080037f85ea8ce93491af179b0a751cae5f21afd53f2419cd797762263dc89ac53f17721c06904ce31226bfb78eb54598d3fa9718d60195475f62379fe48f3d083cab1526b815ee697975f78d783f3f68f00a8d7173bc67bbdbb4531320c5282fe6f14d41744b62ea381c4e2c08fc878b3713136f2991f3991dbe84bd903128f67465d5fe003299409fc41a4f3cae4a67adf1b23460209d6927ab85535ece5d2d8b61de851933359f3da30872b9f7b8942900e52e7656c6b7256d3e8416e1073798e6b69e410032cd573a057c92fc9a4f92f959d4e8fe45a2771a62ea7117f077c1aa5a3133ace71468b40fa75eead5b3f9c02d65cb0e81ee5f704bc5fd784f7a61153f2029b56d21216ed0e0e3f454d2a9796747a74ab1af2b50a43e97320eb9edbdd6a0278196f3eaf125b21b19e6dd9d2de8cee7eace9c000dcb181c5bd091e2c27fc965197b1688ec418d68626f879c315f0d2aa6c9b3fc7883681746a79e2c097a020745dee11f39cce80f99c076216334dad5d138e1c9fb2b77a43aaee3d10149865862b57b8de80e76c2ee046a494f8ea600b2a6bcd85d1ffeb1250e6bef27c630e35c2a2b4cca0ddb0e611cec68d776a471be57c4e3c357be2da49d0fb6081061470fb9be33dc99de8ac25726326434aff8e6e0d3d94b4cae4748f0b9351c7629e0cfb00b503fd0afc02775e69a8a30d7da43cacc88d945b22da64e3b63c9147524936f61da8f5325d6fed570d575616d399030f34291bed78cd635b5cf1b6faf75066c7249d55b2c177f681f58af74a7bf9166157183ff24d0edd0e94755cc7c0a1181f4bb3a19b63153e05524f66d10c09ebb4c7c350beba3d3e2ef8b1bb7398a03eb5b6314038ddd23f506cfdbeea92621034858716ffaa09a5f0f9da38f3b6b22c45b0879a2ba2ce9c372ee781a2f87fdba14edb587e2f5ffe641056e6636cbff2c1022cfea983df09e0e766ca949fd4b1805efafed2e902690f3dda618faffd4a88fe121ff50baa52fc412d9673a033a98c76cc88a3a0fa3c8db8c085234e292377097f38a794c81a09eaae750e65a7e38d7a6e5832f6e1d54f148690f5a1b1fd3086f914bffa9d64a673c58e79acbfb5a94df19136a16de266e579c03b27d6c5d983d581e51c41725d8af28f048adcab8d39caccfcc3417f739c9b2d0a854a6b5ded9812b4e0fa6a1daa974cb877a8c0fd174f700073e70ce416a542696c62dcfecab4d15ffd008a68c58f2635e843ba306bc07429abfebede2b4a68c063acd14fe498e237b149767ec2d7672672639cec458c391cf060d8bb6455e418f48f30432f12f42e05565878282546b90ed95b31888a637f1eed59eca17e06ea08fcc2c273fac97ecb860acc2671270fecc28b6628b0ca9a39b598900d56c5fcfacc8b616bf7b3f5d28140e021b0abe62e7895f0fddb7e24bae5afd8fc671283442749975a1b4c091808b09bdd8cf0d710872e4c6dbb75f79a436e5f06f4cba2e9a85a98e7178e7ae3c6df468d29c3c0c995e4036d379f6559ab4c05ae52552d1185dd609136d4c8ff3ba0e81b40a9abaec2f634ea81f3348f44dd215a3cde9f01ae9fdea60c82cd70613e193c6cbc150270721128e6a2492c615ce75a7b891d864e0bdfcec17236a1a280b4682295e4b97a0d2967238a2f468f570bf41e9e27c78a82e79fe7289c312f652a0acb27f021df44f7067fd0ae6c4384512ae399df594c8e1163c9c341525d3ec5e95f69984d1931484a8af97488717603a65e64dec118073ceec3db6c68d5edc7778ef8bd7bd56dd93dc476e354d1e65136081418a5213a971dfb840103c4c6963fc6fbb157f5a7a79259ee360b8217ed763e1ba0d55b0f2c5f8db180a1ec40b08c9d686cd69335d16570bb2f751f539806124c12eaec0ced82a6df342e74b537b42361bad5f41358cfea68cba9d48ab56eab354a5cacf27c2dff41edd2f3eb51e6e9b58b5fb758edcf3843243b52c82493fda7e3ebc849f6e6a9ccbf8b9ebee7d9ea8013fa31dc44a99abd367821151d50962d1a2e25d7fac17ad86b2ab0ac02a340d716d088889a370fe89c833e147bcf4c359452fdde0eacd7deceaff7ac4ae050198123147dfad2d7f36f3f113c69105220cc451e6915e12dc2abbdffef39db0d85d7415d044dc927dfcccc4091521c5ca6ed4dab189ceb31f37b3aad4a0e777cc122f10153c322817ba2ef5cb0671545b104ae1ab81ba25bd8babd154e3e5f9e4d086260c138dd2927ea363a7d4d065199623861f5a1c819658db1b6ff7549b2f97b8b7fdd0ac901ca9a19dd4db19fc6a6a5e11e8c6e741bf381d35a7067425f8346d18af85f37a2f6db304153f146b28b9f34b94f3f045eb226eb1b98554d56be7178cfcbb62d860f266ad8a46c392e189299d7926d7a7e62bd711809305df941dbdc2459c27bb4af67b008d1073e82e0d9c470662fa7b9dd58fdc25850e88b613704c40f06f54e210b2f0bde07c66a6da0cf2ef34bbb450d9411c0c5a48ca536da475248d1396b5d083a150ae4577a354d62c444a435f2c310fb326a9b1e444cc8cd91a31e1cbbe05fbfbefe74f2105c1b6e8013b68ce5c2ce002e229ac77edefe1ee06303a59ccf602b3319f49cc47c0e20699db0fbb8958fc02402f5dcff0f1437a53a32653efcba5f9807367d5dca9f9cc517fb064e03ce5edf748d789a78fd9a89c61ec76252fe03eb47e7a65dff58a1e1b657ece92398c771f1df8fae1e62326a8bb4afbf8d27463fb39f689969a85e85bd4d5d0dba3e9b2010588f9ae8ed87ac306257e3490c92fcce78dc93449d87cfa086c1bca2825b9b59b8f0f40d3f901c5d3567eade18abc5e6eb4e906f4dff4dbaf5b0c10dacaaedf2b8f1477d68d1ac739de5797b85b626dd163ababf64ff1e4d094b12d787b9e717ad252f9005d5ea5f7bb31d8e474f10ad3ae853d89fc6aba04ff6fb898f566b09dec40b917f30eb7ae58d805501df3d9832ece74b231d87f6443067478d5f1b6df502219bbe6b24b767d7da8562d051761e5183ed5cc04f42266458ba3667a9a67eb33f7fbca0ef88397c81f1f22a0e4789d2299f271853a468799f1d0f145229a785f46662b96319938013d35ad245bef831281057c3280b54cd144d3fdd46b4fc516115f4283c8f874e27a7d31ce8d2af1f363fca0c131ba47e4b641c66036410d85fda1527802ed829b797d2c3af8d9f6a7c9442f9e05c61931a11c933441b34420c01e71dca04e87cc0e878854e5a2ce60ad91740641aed1b4837ed9ebf573b0f7b959c8958e0c9befb7a878f8bee562f050954763b19073590768c09a76096c64a8adc64d5b2959e1707b99b3572cf4832ab61ad2436362a9b1566c2a5e124d723c1927665582fb08d7081a269ffc56f376efd83b0c9ec599beb81943bec95639e4bbaed636e5fe245b779f5651e988f0f5aee3cb3a5151f3f50f1204da90e08b128bd077b564a0449ff48432e46c56b020286cc5713154c16a3937ed53a9bf8403d47fdfe5a7092caceacd7e57c325a1c01b1b93f3896d551f606b390754a4a9834da53d332e306d04a6807aeea0b6ed8b87cf7ded81bc24c505f44b58f1c4e89dec7ac84940b2121425708e6e484cdabb5606cda1861f636ff839995a7eac7cff860c470c672d16554c9ea6c3833ce53181d6b2adfa185607ed523e943de4a3d459971d37181f113a92251ef92af2635978a291ecb6257acc4b1a68eed6416c69a7d0e20c11cafa620cb8d9fbb1cdf9788c1b1c36fa44187152a69b91724f4ff3d43e8e32b7c0ae7e23a914275d5e83b3d12658db3645a6bd50ee4fe43e3a4218e8bdab799339574402f2eb87f96f653d54545fdbf86b24cd65f64b023", 0x1000}, {&(0x7f0000002340)="c16eab83beeb", 0x6}, {&(0x7f0000002380)="74e4f5f38c1ee59cfd974024bfc94d0135567e642f71dad9a1a14278b517c6442014fa1a4874e9bf4c2df73cab8224df5eba31556fffd43a72df1171582f95a623a502adc0445ee0a2efb7d862206f60209dbde335e6e39fdd9cfc6166899e0a1b6c6b44c72006990473df1444bd3681bbcc4f7c1093a86940", 0x79}, {&(0x7f0000002400)="09591d", 0x3}, {&(0x7f0000002440)="b089ae5ade7f3e79cd35049c03dddc666d23d4bc281cb4552e0747233f25490000bad46eefdddae2280edd64e694be8ae4dacb977433111a918c2da0bb0fa5b65710472afd54b37f02ea610d8173ebe1f2d93c1f7317a1e71723517c6125704357ce8c1550833caf11edc3ceaada02d510dd57b9b8e64bab9e2d701423cd79c963759281", 0x84}, {&(0x7f0000002500)="1f746f1787db530eafd18a572a6a9f8a60059f060481c6f79b7517f33fccc81555475897f467b8656dbe0922fa9da7c7c7844241f5826c228d01f7c072025a06c9f326be", 0x44}, {&(0x7f0000002580)="25f8df9ea60181a6dea149286b2dee1c38051aef3e52e794591dd59237b87fa4bdabe2b68e5f54e1ed", 0x29}], 0x7}}, {{&(0x7f0000002640)={0xa, 0x4e20, 0x6, @mcast2, 0x5}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000002680)="ccd73739a52bc30ed95726de5be6c34af1f17f", 0x13}, {&(0x7f00000026c0)="8f6d8ffe7d22c2bedea7ea81a36650a14ba99ae042b9b07f2bc317a91eb0929e3cf933128e1e91328ef9365b846f97c687f083dc74b6a3c5db74a1ff71b7fe41c0b27a7afd4013ccfe31bbe452b0cd915d712d9d6aef7668a2902cbdee4179970f1a436ef7294d3732e0886a92bf9aec284af17aff6916e55025a77392677c0418136af972d98fabf6", 0x89}, {&(0x7f0000002780)="15ce57a3cdee7aee0b3597e71eed54ff76cfe3edc4870af48dcce1d0d3b14bdec73371068987df1790e8470e1aec6bbc8b9e7f3e1ec609f1b82e2472b66a4a60182b89369c958aaafdfca0b9b7c62a2a781fa00fe51451453ff46659bbbf275abf22be047290cfe55afdcc227aa5d4113517db95e39c71f9c686fef9a4a780d7d41f4f2585f1d3189c873d2e29236f0b883d6bc4815fee5716c4747dcea8d3ab5287f131383f038d30c16016e317a7903904ae1093bcf51fdf5292", 0xbb}, {&(0x7f0000002840)="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", 0xff}, {&(0x7f0000002940)="cadf2f711f6c131bfe3a38565424f0c7cfb018fbc0ffc677c07de168bbb73aa99024d2d659544c904b347ed9c463267a75c4c1908d5dafd602bb3a5dfdc49eac22ffadfa0a72ee20b59e38306c7929d37de4ebc91697b663276e644804bea8be1ed9296878e1581d380f4edafd24b9335032f42aa9cf60ef486592788bbdb2d68bcfb8a0da6c749ecf09c9471c8717d5fea32f41f4aeb73fe6022a1c9f4089735784840ecdf8e339b3a99c80fbccc15ff4ab0daaf09e1ce213aa7deaa4a59148cdcd20b310d7b0df27ff923cb06ed5d773121a1442e8fec0cd0c55756e5ef4", 0xdf}, {&(0x7f0000002a40)="9f150285c2268838fafdb03b0a2aee00791057bc89baf8c40e089e5c8353dfb57c5ba077d35f5604d0b3fdfec124f7a574130d9065d9a2fc34dcfdd4fbc5e71fd59eed941863ff", 0x47}, {&(0x7f0000002ac0)="8b2ac3c3e7fce8533647ab", 0xb}, {&(0x7f0000002b00)="b24d81970f780266f6facf91eadf9863d21d74a555d8b0d00f40b6ff92ce7248a86b2fb4d65162e9375b9210357086b18131020ae87ceeaa8ae3d4c674dc1ce6109b5759e9eb56a3c61dc6f2b38af7176920bbb3701abdfee9a6b3866b6f112402a1717e4dfe7f07074c7c599513d730d62de00aae950b628a38ca7f417c20ec16947c40da79bc0f3a999ce8bd343d5855b233e872c614465d9badaf3ea3c41ef772e1f404fd029cf25ed20ff5713ff3cc3d42cce721df40261d0a3003d4dcea", 0xc0}, {&(0x7f0000002bc0)="9960d34ad4690d37ad0351670fb869bb1ff6df6d083d74f4eeb68ce378c9d3cc49d45400ed22531f162e4dbc61014770e2a8ba2f608cd0b51620b0a344e8bcea3df8222d123f5297b14a0a17a29ee677155406efeb769de8d4ea228dd1bbfccc63841fb8e0412fadca1a9009ab9efc8f207ca6017be5f85a5887f6ed68193ce83db379a1c180e3372157bf119abfd4ff7dd45eb01734547b75c9b646317467e5595f92196af9f319a1a7200e4a556e1a9b52cbe26bd11ee333bdbd813c79", 0xbe}], 0x9, &(0x7f0000002d40)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x2e, 0xa, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x98}}, {{&(0x7f0000002e00)={0xa, 0x4e21, 0x2, @mcast1, 0x8}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000002e40)="7e587f5aab548f16fbe4fa5d0f4c67c3ad8ebc4d4ca5cedd8c76b57a41a22048671b02653c1dd6fb5a11d66fa664e0a602cf768e55783da8e89e4299f8f567e723a722970e206c43cf25ab3c43fa6833bb6b4616", 0x54}, {&(0x7f0000002ec0)="40265e85b9fb8d877bc52df34fbf13a4bd8d3d889bd18be664c5d619d38c72bb86f59973a466ac009a768914b72ae383ac7fc3", 0x33}], 0x2, &(0x7f0000002f40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffff4ea}}], 0x18}}], 0x3, 0x24000010)
r2 = getpid()
sched_setattr(r2, &(0x7f0000003040)={0x38, 0x0, 0x28, 0xfffff091, 0x59, 0x0, 0x0, 0x4, 0x8, 0x1}, 0x0)
io_setup(0x2, &(0x7f0000003080)=<r3=>0x0)
io_getevents(r3, 0x9, 0x3, &(0x7f00000030c0)=[{}, {}, {}], 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000003140)={0x1, 0x4}, 0x8)
sched_setaffinity(r2, 0x8, &(0x7f0000003180)=0x7)
io_getevents(r3, 0x1ff, 0x1, &(0x7f00000031c0)=[{}], 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003200), 0x200)
ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000003240))
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000003340), 0x4001)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000033c0)={{r5}, 0x1, &(0x7f0000003380)=[0x0], 0x1, 0xa})
ptrace$getregs(0xe, r2, 0x80000000, &(0x7f0000003440)=""/76)
r6 = creat(&(0x7f00000034c0)='./file0\x00', 0x69)
fgetxattr(r0, &(0x7f0000003500)=@known='security.selinux\x00', &(0x7f0000003540)=""/33, 0x21)
recvmmsg(r4, &(0x7f00000042c0)=[{{&(0x7f0000003580)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003600)=""/214, 0xd6}, {&(0x7f0000003700)=""/114, 0x72}, {&(0x7f0000003780)=""/246, 0xf6}, {&(0x7f0000003880)=""/60, 0x3c}, {&(0x7f00000038c0)=""/159, 0x9f}, {&(0x7f0000003980)=""/30, 0x1e}, {&(0x7f00000039c0)=""/229, 0xe5}], 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/131, 0x83}], 0x2, &(0x7f0000003cc0)=""/208, 0xd0}, 0xffffffff}, {{&(0x7f0000003dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e40)=""/247, 0xf7}, {&(0x7f0000003f40)=""/101, 0x65}, {&(0x7f0000003fc0)=""/91, 0x5b}], 0x3}, 0x9}, {{&(0x7f0000004080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004100)=""/66, 0x42}, {&(0x7f0000004180)=""/75, 0x4b}], 0x2, &(0x7f0000004240)=""/97, 0x61}, 0x99}], 0x4, 0x40000000, &(0x7f00000043c0)={0x77359400})
openat$kvm(0xffffffffffffff9c, &(0x7f0000004400), 0x20040, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
eventfd(0x8)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000004440)=<r7=>0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, &(0x7f0000004480), 0x4003)
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000044c0)={0x800000000000000, 0x2, 0x977, 0x0, 0x3})

893.819466ms ago: executing program 4 (id=1087):
unshare(0x62040200)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r2 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000480)={0x2, 0x0, 0x100000000, 0x40, r2})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1)

608.934737ms ago: executing program 0 (id=1088):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000002640))
socket(0x2c, 0x3, 0xbe76)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
r2 = syz_io_uring_setup(0x2d76, &(0x7f0000000040)={0x0, 0x7d8c, 0x104, 0x2, 0x370}, &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(&(0x7f00000aa000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r2, 0x0)
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000)

497.457468ms ago: executing program 0 (id=1091):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x800455cc, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f0000000400)='rxrpc_s\x00', 0x0, 0x0, 0xfffffffffffffffb)
setns(r6, 0x24020000)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x380, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x4)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_FPU(r10, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x3, 0x9, 0x9, 0x0, 0x0, 0xd000, 0xddddc001, '\x00', 0x8})
r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r11, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc5})\')&}*\xe9S\xe9\xaf\x9f\xb9\xc9\xce\xa55\x9d$]\xd0\x1e\xf5cM\xfaW\xd3m\x8d\xf4\x9c\xfalN\x9d\x05\x82\xed\'L0%\x89k\xc62+8U\xcb\xa7\x1c\x1e\xf8\xfb\xe9\x8b`H\xbf\"\xe0\xf1\x18y\x01eE\xec\xe6\x1el\xaaI\xf7\xe5\xba\xef\xcc\xa3\x1aO\x1c\xc3\xbei\xfcM\x05\xb1.e\x0f\xa8\x18\xa9G\n\x88\xe3\xe4\xfbKN\x7f\xb9\x02\xbfM\x10\x1e1\xed\xfdU\xfd\xaf/`\xeeHl\x86\x17S\xfc\xda\xe5\xf6\xb9\x82\x81vg\xf1Z\x84\xfc\n\xcb\x1a\x9f\x04', 0x3a, '', 0x3a, './file0'}, 0xbf)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x10, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})

259.488939ms ago: executing program 2 (id=1102):
r0 = dup(0xffffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x46)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) (async)
truncate(&(0x7f0000000080)='./file0\x00', 0x7)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "a15deb484a4fa3f4", "9c384eeec1f650531e6e3cb9abdc2c3a", "f77dfb5f", "89db05814c2f7cf9"}, 0x28) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 32)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0x8d, 0x4) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async, rerun: 64)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000003c0)={0x9, 0x6, 0xcf3, 0x8, 0x0, 0x800}) (async)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/169, &(0x7f00000004c0)=0xa9) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000500), 0x202, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000540)=[@timestamp, @window={0x3, 0x3, 0x76}], 0x2)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f00000005c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600))
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0)
r4 = dup(r3)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r4)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4001001}, 0x400)
ioctl$SNAPSHOT_FREE(r4, 0x3305) (async)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000840)) (async, rerun: 32)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000880)={<r6=>r4, 0xc50, 0x100, 0x8}) (rerun: 32)
sendmsg$FOU_CMD_DEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000885) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r4)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c1) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'team_slave_0\x00', 0x8000}) (async, rerun: 64)
ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000000bc0)="99d0e581659fdb689cf3") (rerun: 64)

247.512869ms ago: executing program 2 (id=1103):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0xc0000)
r2 = dup3(r1, r0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async)
exit(0x21b) (async, rerun: 32)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) (rerun: 32)
ioctl$KDGKBSENT(r3, 0x4b48, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) (async, rerun: 32)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r5 = dup(r4)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) (async, rerun: 64)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async, rerun: 64)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8)
mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8000, &(0x7f00000002c0)={[{@nofavordynmods}], [{@fsname={'fsname', 0x3d, '!(+:/#/(#('}}, {@uid_lt={'uid<', r6}}, {@subj_role={'subj_role', 0x3d, '^'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) (async, rerun: 64)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x54) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_open_procfs(0x0, &(0x7f0000000400)='task\x00') (async, rerun: 32)
ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f00000003c0)={0x2}) (rerun: 32)
statx(r7, &(0x7f00000000c0)='./cgroup\x00', 0x1000, 0x100, 0x0)

169.830579ms ago: executing program 2 (id=1104):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40820}, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_icmp(0x2, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000fedbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000300ecee719a661da5bce51f193c1df26d608d6af334", @ANYRES32=r4, @ANYBLOB="0c000600020000000200000005001200080000000c00060002000000000000000c000600030000000300000005001200090000000500120007000000"], 0x68}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101201, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r8, 0x8010aebb, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"})

169.558209ms ago: executing program 2 (id=1105):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sendfile(r0, r0, 0x0, 0x7ffff000)
tee(r0, r0, 0xffffffffffff8001, 0x6707f1cb3a17580e)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x2810, r0, 0xb1bdf000)

169.101049ms ago: executing program 2 (id=1106):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (rerun: 64)
getdents64(r0, 0x0, 0x0) (async, rerun: 32)
lseek(r0, 0x500, 0x0) (async, rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r2, 0x0, 0x0, 0x20044805, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) (async)
preadv(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/198, 0xc6}], 0x5, 0xffffff3e, 0x6) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x19, 0x0, &(0x7f0000000000)=0xffffffffffffff71) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x220241, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
eventfd(0x5) (async)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000180)={r4, 0x80007, 0x2})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x10009) (async, rerun: 32)
ioctl$TCFLSH(r3, 0x400455c8, 0x0) (rerun: 32)
syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

168.818799ms ago: executing program 2 (id=1107):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
syz_clone3(&(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x6, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0xfffffffffffff801, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x6, 0x1, 0x5], 0xeeef0000, 0x1640})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="400f01c3650f07470f01cab9800000c02e6726f3400fc7b50000000008040421000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x51}], 0x1, 0xb, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0xa512, 0x3, 0x2, 0x2000, &(0x7f0000ff5000/0x2000)=nil})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

85.96718ms ago: executing program 4 (id=1108):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
arch_prctl$ARCH_GET_FS(0x1003, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0})
r1 = getpid()
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$incfs_id(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2010800, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r5, 0x0, 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc0386723, 0x0)
r8 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r8, 0x19, &(0x7f0000000000)={0x0, 0xc, 0x3}, 0x10000000000001)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)

0s ago: executing program 4 (id=1109):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xca9b, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}})
io_setup(0x1, &(0x7f00000016c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)="9a", 0x1, 0x5}])

kernel console output (not intermixed with test programs):

idge0: port 2(bridge_slave_1) entered forwarding state
[   31.872413][  T289] veth0_vlan: entered promiscuous mode
[   31.880553][  T290] veth0_vlan: entered promiscuous mode
[   31.894600][  T290] veth1_macvtap: entered promiscuous mode
[   31.913255][  T291] veth0_vlan: entered promiscuous mode
[   31.924525][  T289] veth1_macvtap: entered promiscuous mode
[   31.950552][  T291] veth1_macvtap: entered promiscuous mode
[   31.959769][  T292] veth0_vlan: entered promiscuous mode
[   31.968089][  T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.972858][  T292] veth1_macvtap: entered promiscuous mode
[   32.052263][  T337] overlay: Bad value for 'verity'
[   32.069664][  T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.110262][  T341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   32.120238][  T341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   32.121208][  T344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.173755][  T353] input: syz1 as /devices/virtual/input/input4
[   32.241839][  T356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5
[   32.242348][  T356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   32.251823][  T356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:5
[   32.271753][  T358] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   32.308797][   T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   32.334670][  T368] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.347098][  T368] rust_binder: Write failure EFAULT in pid:17
[   32.420606][  T375] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   32.422415][  T377] rust_binder: Write failure EFAULT in pid:8
[   32.468938][   T66] usb 1-1: Using ep0 maxpacket: 32
[   32.481130][   T66] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   32.489357][   T66] usb 1-1: config 0 has no interface number 0
[   32.496881][   T66] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   32.506360][   T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.514347][   T66] usb 1-1: Product: syz
[   32.518482][   T66] usb 1-1: Manufacturer: syz
[   32.523736][   T66] usb 1-1: SerialNumber: syz
[   32.528842][   T66] usb 1-1: config 0 descriptor??
[   32.534520][   T66] smsc95xx v2.0.0
[   32.708868][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   32.868806][  T385] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   32.877150][   T31] usb 4-1: config 7 has an invalid interface number: 227 but max is 0
[   32.885371][   T31] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   32.895946][   T31] usb 4-1: config 7 has no interface number 0
[   32.902072][   T31] usb 4-1: config 7 interface 227 has no altsetting 0
[   32.910223][   T31] usb 4-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44
[   32.919284][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.927272][   T31] usb 4-1: Product: syz
[   32.931499][   T31] usb 4-1: Manufacturer: syz
[   32.936194][   T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   32.946936][   T31] usb 4-1: SerialNumber: syz
[   32.952374][   T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   33.035031][  T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44799, setting to 64
[   33.046112][  T385] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   33.053000][  T404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[   33.063030][  T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.090358][  T385] usb 2-1: config 0 descriptor??
[   33.095705][  T389] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   33.241861][   T31] cdc_wdm 4-1:7.227: More than one union descriptor, skipping ...
[   33.250095][   T31] cdc_wdm 4-1:7.227: probe with driver cdc_wdm failed with error -22
[   33.259270][   T31] usb 4-1: USB disconnect, device number 2
[   33.338803][  T330] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   33.489834][  T330] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[   33.499102][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.508027][  T330] usb 3-1: config 0 descriptor??
[   33.513243][  T385] usbhid 2-1:0.0: can't add hid device: -71
[   33.523525][  T385] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   33.532787][  T385] usb 2-1: USB disconnect, device number 2
[   33.914000][  T415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'.
[   33.924047][  T415] rust_binder: Error while translating object.
[   33.924075][  T415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.930286][  T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[   33.967650][  T330] holtek_mouse 0003:04D9:A04A.0001: invalid report_size 15990818
[   33.984719][  T330] holtek_mouse 0003:04D9:A04A.0001: item 0 4 1 7 parsing failed
[   33.992785][  T330] holtek_mouse 0003:04D9:A04A.0001: hid parse failed: -22
[   34.000070][  T330] holtek_mouse 0003:04D9:A04A.0001: probe with driver holtek_mouse failed with error -22
[   34.041058][  T417] Zero length message leads to an empty skb
[   34.077517][  T425] netlink: 596 bytes leftover after parsing attributes in process `syz.3.30'.
[   34.218963][  T436] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.219252][  T436] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   34.226339][  T436] netlink: 'syz.3.33': attribute type 4 has an invalid length.
[   34.241925][  T436] netlink: 992 bytes leftover after parsing attributes in process `syz.3.33'.
[   34.252394][  T436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.252420][  T436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[   34.268809][   T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   34.310884][  T446] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   34.318474][  T446] SELinux: failed to load policy
[   34.408811][   T31] usb 2-1: device descriptor read/64, error -71
[   34.520617][  T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.529532][  T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.658821][   T31] usb 2-1: device descriptor read/64, error -71
[   34.898814][   T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   35.028855][   T31] usb 2-1: device descriptor read/64, error -71
[   35.176663][   T36] kauditd_printk_skb: 107 callbacks suppressed
[   35.176680][   T36] audit: type=1400 audit(1779269862.809:181): avc:  denied  { mounton } for  pid=452 comm="syz.3.38" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.268801][   T31] usb 2-1: device descriptor read/64, error -71
[   35.378848][   T31] usb usb2-port1: attempt power cycle
[   35.408807][  T385] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[   35.560556][  T385] usb 4-1: config 9 has an invalid interface number: 51 but max is 0
[   35.568768][  T385] usb 4-1: config 9 has no interface number 0
[   35.576991][  T385] usb 4-1: string descriptor 0 read error: -22
[   35.583262][  T385] usb 4-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12
[   35.592329][  T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.718789][   T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   35.739755][   T31] usb 2-1: device descriptor read/8, error -71
[   35.802205][  T453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.810778][  T453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.819523][  T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.828030][  T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.830032][  T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.836975][  T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.853980][    T9] usb 4-1: USB disconnect, device number 3
[   35.879794][   T31] usb 2-1: device descriptor read/8, error -71
[   36.091479][  T385] usb 3-1: USB disconnect, device number 2
[   36.118794][   T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   36.139796][   T31] usb 2-1: device descriptor read/8, error -71
[   36.269768][   T31] usb 2-1: device descriptor read/8, error -71
[   36.378022][   T36] audit: type=1400 audit(1779269864.009:182): avc:  denied  { write } for  pid=461 comm="syz.3.41" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   36.400567][   T31] usb usb2-port1: unable to enumerate USB device
[   36.414039][   T36] audit: type=1400 audit(1779269864.049:183): avc:  denied  { execute } for  pid=461 comm="syz.3.41" path="/23/cpuacct.usage_percpu" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   36.437653][  T385] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   36.472957][  T464] rust_binder: 75: no such ref 1
[   36.589061][  T385] usb 3-1: Using ep0 maxpacket: 16
[   36.595197][  T385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.605326][  T385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   36.615458][  T385] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   36.624604][  T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.632610][  T385] usb 3-1: Product: syz
[   36.636766][  T385] usb 3-1: Manufacturer: syz
[   36.641366][  T385] usb 3-1: SerialNumber: syz
[   36.718802][   T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   36.777467][   T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000002c: -71
[   36.788414][   T66] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   36.797819][   T66] usb 1-1: USB disconnect, device number 2
[   36.847862][  T385] usb 3-1: 0:2 : does not exist
[   36.869723][   T31] usb 4-1: config 66 has an invalid interface number: 105 but max is 0
[   36.878022][   T31] usb 4-1: config 66 has no interface number 0
[   36.884300][   T31] usb 4-1: config 66 interface 105 has no altsetting 0
[   36.892876][   T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d
[   36.901979][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.910022][   T31] usb 4-1: Product: syz
[   36.914636][   T31] usb 4-1: Manufacturer: syz
[   36.919238][   T31] usb 4-1: SerialNumber: syz
[   37.045528][   T36] audit: type=1400 audit(1779269864.679:184): avc:  denied  { map } for  pid=466 comm="syz.1.43" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   37.082187][  T472] =======================================================
[   37.082187][  T472] WARNING: The mand mount option has been deprecated and
[   37.082187][  T472]          and is ignored by this kernel. Remove the mand
[   37.082187][  T472]          option from the mount to silence this warning.
[   37.082187][  T472] =======================================================
[   37.093228][  T385] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   37.129236][   T36] audit: type=1400 audit(1779269864.749:185): avc:  denied  { mount } for  pid=471 comm="syz.1.44" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   37.154984][   T36] audit: type=1400 audit(1779269864.759:186): avc:  denied  { write } for  pid=471 comm="syz.1.44" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.158519][  T479] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[   37.175405][   T36] audit: type=1400 audit(1779269864.759:187): avc:  denied  { create } for  pid=473 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.183675][   T36] audit: type=1400 audit(1779269864.809:188): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   37.231355][  T385] usb 3-1: USB disconnect, device number 3
[   37.244791][   T36] audit: type=1326 audit(1779269864.859:189): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=473 comm="syz.2.45" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb3eb8f6c9 code=0x0
[   37.282686][   T36] audit: type=1400 audit(1779269864.869:190): avc:  denied  { create } for  pid=481 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.313098][  T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.313139][  T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8
[   37.317322][  T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.325357][   T31] usb 4-1: USB disconnect, device number 4
[   37.337695][  T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8
[   37.362227][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.378581][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.378607][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.396773][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.396799][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.403488][  T498] rust_binder: Error in use_page_slow: ESRCH
[   37.407043][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.410000][  T500] capability: warning: `syz.1.52' uses deprecated v2 capabilities in a way that may be insecure
[   37.416130][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.433240][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.439332][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.439369][  T498] rust_binder: use_range failure ESRCH
[   37.445981][  T498] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false
[   37.452798][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.466065][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.472380][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.472621][  T498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   37.479263][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.494767][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.501221][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.501340][  T498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:12
[   37.507789][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.523949][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.529960][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.536567][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.543113][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.549865][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.555972][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.562778][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.568934][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.575507][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.589434][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.589516][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.596052][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.599669][  T502] rust_binder: Write failure EFAULT in pid:35
[   37.602587][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.615086][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.621956][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.628504][  T496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.677922][  T511] mmap: syz.3.57 (511): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data.
[   37.714707][  T514] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.718610][  T513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.725153][  T513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:39
[   37.888775][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   37.977358][  T531] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.977377][  T531] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.050768][    T9] usb 1-1: Using ep0 maxpacket: 32
[   38.067249][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   38.075582][    T9] usb 1-1: config 0 has no interface number 0
[   38.083170][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   38.086886][  T551] rust_binder: Write failure EFAULT in pid:53
[   38.098803][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.123066][    T9] usb 1-1: Product: syz
[   38.127258][    T9] usb 1-1: Manufacturer: syz
[   38.133396][  T549] rust_binder: 52: no such ref 3
[   38.138776][    T9] usb 1-1: SerialNumber: syz
[   38.146359][  T549] rust_binder: inc_ref_done called when no active inc_refs
[   38.146379][  T549] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.166899][    T9] usb 1-1: config 0 descriptor??
[   38.172106][  T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52
[   38.172748][    T9] smsc95xx v2.0.0
[   38.388774][  T571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   38.388806][  T571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95
[   38.555026][  T579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'.
[   38.581196][  T579] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   38.587006][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   38.602880][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   38.648196][  T580] rust_binder: 103: no such ref 2
[   38.690283][  T582] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   38.825098][  T589] rust_binder: Write failure EFAULT in pid:66
[   38.884803][  T594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[   38.900378][  T594] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.900609][  T594] SELinux:  Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped).
[   39.059779][  T607] rust_binder: 60: no such ref 2
[   39.064798][  T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60
[   39.178001][  T616] rust_binder: Write failure EFAULT in pid:126
[   39.308815][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   39.350001][  T634] rust_binder: Write failure EFAULT in pid:143
[   39.349999][  T633] rust_binder: Write failure EFAULT in pid:143
[   39.395489][  T636] kvm: kvm [635]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xeb
[   39.468836][   T31] usb 3-1: Using ep0 maxpacket: 32
[   39.475080][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.485964][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.495747][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   39.504808][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.513501][   T31] usb 3-1: config 0 descriptor??
[   39.519758][   T31] hub 3-1:0.0: USB hub found
[   39.568779][  T638] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   39.720940][   T31] hub 3-1:0.0: 1 port detected
[   39.842076][  T649] rust_binder: Got transaction with invalid offset.
[   39.842130][  T649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.848846][  T649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[   40.045362][  T663] binder: Unknown parameter 'dXCxˆ¦Â©G/‹AR“N'
[   40.088367][  T673] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   40.088459][  T673] rust_binder: Write failure EINVAL in pid:97
[   40.112307][  T676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100
[   40.298783][  T330] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   40.468789][  T330] usb 4-1: Using ep0 maxpacket: 16
[   40.475436][  T330] usb 4-1: unable to get BOS descriptor or descriptor too short
[   40.484122][  T330] usb 4-1: config 157 has an invalid interface number: 116 but max is 0
[   40.492672][  T330] usb 4-1: config 157 has no interface number 0
[   40.499189][  T330] usb 4-1: config 157 interface 116 altsetting 241 endpoint 0xE has invalid maxpacket 510, setting to 64
[   40.510778][  T330] usb 4-1: config 157 interface 116 has no altsetting 0
[   40.519323][  T330] usb 4-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=9c.e8
[   40.528529][  T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.528885][   T31] hub 3-1:0.0: activate --> -90
[   40.536708][  T330] usb 4-1: Product: syz
[   40.545871][  T330] usb 4-1: Manufacturer: syz
[   40.550641][  T330] usb 4-1: SerialNumber: syz
[   40.808308][  T688] rust_binder: 153: no such ref 2
[   40.841511][   T36] kauditd_printk_skb: 61 callbacks suppressed
[   40.841527][   T36] audit: type=1326 audit(1779269868.479:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=689 comm="syz.1.116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedb018f6c9 code=0x0
[   40.918556][   T36] audit: type=1400 audit(1779269868.549:253): avc:  denied  { read } for  pid=696 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   40.942158][  T610] rust_binder: Write failure EFAULT in pid:65
[   40.942347][  T610] rust_binder: Write failure EFAULT in pid:65
[   40.948495][   T36] audit: type=1400 audit(1779269868.559:254): avc:  denied  { write } for  pid=696 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   40.975586][  T387] usb 3-1: USB disconnect, device number 4
[   40.981487][   T36] audit: type=1400 audit(1779269868.569:255): avc:  denied  { setopt } for  pid=609 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   41.000893][   T36] audit: type=1400 audit(1779269868.579:256): avc:  denied  { bind } for  pid=609 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   41.032874][  T330] zaurus 4-1:157.116: skipping garbage
[   41.038993][  T330] usb 4-1: bad CDC descriptors
[   41.048880][  T330] usb 4-1: USB disconnect, device number 5
[   41.578775][   T36] audit: type=1400 audit(1779269869.209:257): avc:  denied  { mount } for  pid=702 comm="syz.3.119" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   41.581191][  T703] fuse: Unknown parameter ''
[   41.619323][   T36] audit: type=1400 audit(1779269869.209:258): avc:  denied  { append } for  pid=702 comm="syz.3.119" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   41.642124][  T710] netlink: 'syz.3.120': attribute type 12 has an invalid length.
[   41.664604][  T710] overlayfs: conflicting lowerdir path
[   41.745123][   T36] audit: type=1400 audit(1779269869.379:259): avc:  denied  { ioctl } for  pid=713 comm="syz.2.122" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   41.760668][  T719] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   41.777932][  T719] rust_binder: Read failure Err(EFAULT) in pid:75
[   41.904814][  T723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78
[   41.980916][  T729] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   42.006024][  T731] netlink: 'syz.1.126': attribute type 27 has an invalid length.
[   42.045714][  T734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.056965][   T36] audit: type=1400 audit(1779269869.689:260): avc:  denied  { bind } for  pid=735 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.085366][   T36] audit: type=1400 audit(1779269869.689:261): avc:  denied  { setopt } for  pid=735 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.091360][  T741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.105195][  T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90
[   42.122449][  T741] batadv_slave_0: mtu less than device minimum
[   42.426080][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000002c: -71
[   42.437098][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   42.446622][    T9] usb 1-1: USB disconnect, device number 3
[   42.498776][  T407] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   42.566737][  T750] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   42.574545][  T750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130
[   42.648796][  T407] usb 3-1: Using ep0 maxpacket: 16
[   42.664475][  T407] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[   42.680295][  T407] usb 3-1: config 0 has no interface number 0
[   42.686402][  T407] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   42.698395][  T407] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   42.708461][  T407] usb 3-1: config 0 interface 41 has no altsetting 0
[   42.730077][  T407] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   42.739176][  T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.747177][  T407] usb 3-1: Product: syz
[   42.751393][  T407] usb 3-1: Manufacturer: syz
[   42.755999][  T407] usb 3-1: SerialNumber: syz
[   42.761627][  T407] usb 3-1: config 0 descriptor??
[   42.766875][  T745] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   42.774122][  T745] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   42.861408][  T770] netlink: 164 bytes leftover after parsing attributes in process `syz.1.138'.
[   42.982483][  T743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   42.989677][  T743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   43.034037][  T774] tmpfs: Unknown parameter 'fd'
[   43.052371][  T774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   43.185874][  T786] fuse: Bad value for 'fd'
[   43.399395][  T407] Error reading MAC address
[   43.404332][  T793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   43.413087][  T407] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71
[   43.422489][  T407] usb 3-1: USB disconnect, device number 5
[   43.432441][  T793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=793 comm=syz.1.146
[   43.446321][  T793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   43.557468][  T810] binder: Unknown parameter 'fscontext?}'
[   43.620831][  T818] syz.1.155 (818): attempted to duplicate a private mapping with mremap.  This is not supported.
[   43.784558][  T835] netlink: 165 bytes leftover after parsing attributes in process `syz.0.162'.
[   43.804899][  T836] netlink: 165 bytes leftover after parsing attributes in process `syz.0.162'.
[   43.821276][  T830] fuse: Bad value for 'fd'
[   43.827549][  T835] netlink: 5 bytes leftover after parsing attributes in process `syz.0.162'.
[   43.846547][  T836] netlink: 5 bytes leftover after parsing attributes in process `syz.0.162'.
[   44.448785][  T407] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   44.598763][  T407] usb 4-1: Using ep0 maxpacket: 32
[   44.605716][  T407] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   44.614126][  T407] usb 4-1: config 0 has no interface number 0
[   44.621880][  T407] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   44.631317][  T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.639505][  T407] usb 4-1: Product: syz
[   44.643803][  T407] usb 4-1: Manufacturer: syz
[   44.648445][  T407] usb 4-1: SerialNumber: syz
[   44.654278][  T407] usb 4-1: config 0 descriptor??
[   44.660918][  T407] smsc95xx v2.0.0
[   44.861062][  T903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   45.061211][  T407] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   45.071985][  T407] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   45.158826][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   45.308798][   T31] usb 3-1: Using ep0 maxpacket: 16
[   45.314805][  T910] rust_binder: 199: no such ref 2
[   45.319910][  T910] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   45.319924][  T910] rust_binder: Read failure Err(EFAULT) in pid:199
[   45.328065][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.341840][  T913] netlink: 'syz.1.186': attribute type 12 has an invalid length.
[   45.345486][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.353836][  T913] fuse: Bad value for 'fd'
[   45.363144][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   45.380286][   T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   45.389734][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.399756][   T31] usb 3-1: config 0 descriptor??
[   45.712880][  T948] futex_wake_op: syz.0.197 tries to shift op by 144; fix this program
[   45.807602][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.814959][   T31] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[   45.823821][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.831069][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.838277][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.845509][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.852772][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.860092][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.867472][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.874727][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.881948][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.889205][   T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   45.930289][  T952] syz.0.199 uses obsolete (PF_INET,SOCK_PACKET)
[   45.991883][  T954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'.
[   46.009867][   T31] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[   46.018505][   T31] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   46.030203][   T31] microsoft 0003:045E:07DA.0002: no inputs found
[   46.036858][   T31] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   46.049112][   T31] usb 3-1: USB disconnect, device number 6
[   46.358155][  T959] rust_binder: 228: no such ref 2
[   46.523130][   T36] kauditd_printk_skb: 63 callbacks suppressed
[   46.523160][   T36] audit: type=1400 audit(1779269874.159:325): avc:  denied  { getopt } for  pid=965 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   46.583767][   T36] audit: type=1400 audit(1779269874.219:326): avc:  denied  { read } for  pid=972 comm="syz.2.206" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   46.583854][  T975] netlink: 288 bytes leftover after parsing attributes in process `syz.2.206'.
[   46.621059][  T975] rust_binder: 109: no such ref 1
[   46.632139][  T976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:233
[   46.988775][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   47.071044][   T36] audit: type=1400 audit(1779269874.709:327): avc:  denied  { getopt } for  pid=984 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.103797][   T36] audit: type=1400 audit(1779269874.739:328): avc:  denied  { sqpoll } for  pid=987 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   47.122884][   T36] audit: type=1400 audit(1779269874.739:329): avc:  denied  { mount } for  pid=987 comm="syz.0.212" name="/" dev="ramfs" ino=7134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   47.149597][  T992] netlink: 2 bytes leftover after parsing attributes in process `syz.0.214'.
[   47.158705][   T36] audit: type=1400 audit(1779269874.789:330): avc:  denied  { connect } for  pid=991 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.186101][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   47.194639][    T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 125, changing to 4
[   47.207191][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.223545][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.232310][    T9] usb 3-1: Product: syz
[   47.236492][    T9] usb 3-1: Manufacturer: syz
[   47.241225][    T9] usb 3-1: SerialNumber: syz
[   47.460676][ T1017] rust_binder: Error while translating object.
[   47.460705][ T1017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.466886][ T1017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242
[   47.651743][    T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   47.671821][    T9] usb 3-1: USB disconnect, device number 7
[   47.685406][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.791826][   T36] audit: type=1400 audit(1779269875.429:331): avc:  denied  { write } for  pid=1028 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   47.943057][   T36] audit: type=1400 audit(1779269875.579:333): avc:  denied  { associate } for  pid=1061 comm="syz.0.234" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   47.978851][   T36] audit: type=1400 audit(1779269875.579:332): avc:  denied  { mounton } for  pid=1059 comm="syz.0.234" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   48.033634][   T36] audit: type=1400 audit(1779269875.669:334): avc:  denied  { getopt } for  pid=1069 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   48.894483][  T407] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000002c: -71
[   48.905450][  T407] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   48.916813][  T407] usb 4-1: USB disconnect, device number 6
[   49.033888][ T1111] tipc: Started in network mode
[   49.038932][ T1111] tipc: Node identity ac14140f, cluster identity 4711
[   49.045852][ T1111] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   49.083648][ T1113] can: request_module (can-proto-0) failed.
[   49.104668][ T1115] rust_binder: Error while translating object.
[   49.104697][ T1115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   49.111189][ T1115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128
[   49.223482][ T1118] rust_binder: Write failure EFAULT in pid:130
[   49.247852][ T1123] rust_binder: 134: no such ref 0
[   49.253007][ T1123] rust_binder: Write failure EINVAL in pid:134
[   49.283337][ T1125] rust_binder: Write failure EFAULT in pid:136
[   49.289957][ T1126] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[   49.303913][ T1126] rust_binder: Write failure EINVAL in pid:205
[   50.248137][ T1163] tipc: Started in network mode
[   50.259446][ T1163] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   50.268415][ T1163] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001
[   50.276516][ T1163] tipc: Enabled bearer <udp:syz0>, priority 10
[   50.303423][ T1168] __nla_validate_parse: 1 callbacks suppressed
[   50.303436][ T1168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'.
[   50.427529][ T1180] raw_sendmsg: syz.0.274 forgot to set AF_INET. Fix it!
[   50.476428][ T1186] erofs: dax options not supported
[   50.492885][ T1188] SELinux: failed to load policy
[   50.506758][ T1192] fuse: Bad value for 'fd'
[   50.528256][ T1196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256
[   50.598820][  T387] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   50.738831][  T387] usb 3-1: device descriptor read/64, error -71
[   50.978788][  T387] usb 3-1: device descriptor read/64, error -71
[   51.218796][  T387] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   51.348807][  T387] usb 3-1: device descriptor read/64, error -71
[   51.386711][ T1210] fuse: Bad value for 'fd'
[   51.391238][   T66] tipc: Node number set to 1
[   51.423335][ T1217] fuse: Bad value for 'fd'
[   51.427886][ T1218] fuse: Bad value for 'fd'
[   51.495585][ T1230] netlink: 'syz.0.293': attribute type 27 has an invalid length.
[   51.574125][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   51.574141][   T36] audit: type=1400 audit(1779269879.209:344): avc:  denied  { watch watch_reads } for  pid=1244 comm="syz.0.298" path="/88" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   51.602952][   T36] audit: type=1400 audit(1779269879.219:345): avc:  denied  { mount } for  pid=1244 comm="syz.0.298" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   51.608831][  T387] usb 3-1: device descriptor read/64, error -71
[   51.629745][   T36] audit: type=1400 audit(1779269879.219:346): avc:  denied  { create } for  pid=1244 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.678244][   T36] audit: type=1400 audit(1779269879.309:347): avc:  denied  { getopt } for  pid=1252 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   51.697681][   T36] audit: type=1400 audit(1779269879.319:348): avc:  denied  { ioctl } for  pid=1252 comm="syz.0.301" path="socket:[8172]" dev="sockfs" ino=8172 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   51.738964][  T387] usb usb3-port1: attempt power cycle
[   51.762304][   T36] audit: type=1400 audit(1779269879.399:349): avc:  denied  { map } for  pid=1262 comm="syz.0.306" path="socket:[9220]" dev="sockfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   51.785111][   T36] audit: type=1400 audit(1779269879.399:350): avc:  denied  { accept } for  pid=1262 comm="syz.0.306" path="socket:[9220]" dev="sockfs" ino=9220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   51.815871][ T1265] fuse: Bad value for 'fd'
[   51.967806][ T1275] fuse: Bad value for 'fd'
[   51.999823][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.999867][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.006427][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.012918][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.019467][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.028435][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.032968][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.040074][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.046265][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.052631][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.059210][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.065972][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.072517][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.079107][  T387] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   52.079207][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.093414][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.099865][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.106471][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.112931][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.119589][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.125909][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.132696][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.138928][  T387] usb 3-1: device descriptor read/8, error -71
[   52.138957][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.156078][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.157945][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.164473][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.171048][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.177575][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.183943][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.190476][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.196892][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.196910][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.210076][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.232739][ T1292] rust_binder: Error while translating object.
[   52.232779][ T1292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   52.239269][ T1292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:294
[   52.269942][  T387] usb 3-1: device descriptor read/8, error -71
[   52.276833][ T1298] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[   52.293223][ T1298] rust_binder: Write failure EINVAL in pid:300
[   52.312886][   T36] audit: type=1400 audit(1779269879.949:351): avc:  denied  { setopt } for  pid=1301 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   52.345235][ T1304] rust_binder: Error while translating object.
[   52.345263][ T1304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.351757][ T1304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306
[   52.538810][  T387] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   52.570580][  T387] usb 3-1: device descriptor read/8, error -71
[   52.699842][  T387] usb 3-1: device descriptor read/8, error -71
[   52.809415][  T387] usb usb3-port1: unable to enumerate USB device
[   53.270476][   T36] audit: type=1400 audit(1779269880.909:352): avc:  denied  { setopt } for  pid=1320 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   53.307448][   T36] audit: type=1326 audit(1779269880.939:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1311 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb018f6c9 code=0x7fc00000
[   53.349018][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'.
[   53.417159][ T1331] rust_binder: Error while translating object.
[   53.417192][ T1331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   53.437351][ T1331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230
[   53.502222][ T1333] rust_binder: 147: no such ref 3
[   53.532787][ T1333] rust_binder: inc_ref_done called when no active inc_refs
[   53.532810][ T1333] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   53.554791][ T1343] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.554968][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147
[   53.639921][ T1356] loop7: detected capacity change from 0 to 7
[   53.658047][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.667211][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.678764][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.687913][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.695930][  T410]  loop7: unable to read partition table
[   53.715025][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.724185][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.735581][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.744743][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.752817][ T1356]  loop7: unable to read partition table
[   53.759205][ T1356] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   53.772697][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.772730][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.790933][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.791436][ T1364] overlayfs: failed to clone lowerpath
[   53.800092][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.813813][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.822962][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.836854][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.846022][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.851648][ T1366] netlink: 37 bytes leftover after parsing attributes in process `syz.2.340'.
[   53.854317][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.865706][ T1364] bpf: Bad value for 'uid'
[   53.871775][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.908851][ T1364] syz.0.339 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   53.924556][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   53.933739][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   53.948801][  T110]  loop7: unable to read partition table
[   53.961610][ T1372] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   54.007999][ T1376] rust_binder: 166: no such ref 6
[   54.021704][  T385] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   54.062428][ T1376] rust_binder: 166: no such ref 3
[   54.074963][ T1376] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   54.105891][ T1387] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   54.119639][ T1387] rust_binder: Write failure EINVAL in pid:168
[   54.179852][  T385] usb 4-1: Using ep0 maxpacket: 32
[   54.216077][  T385] usb 4-1: unable to get BOS descriptor or descriptor too short
[   54.239293][  T385] usb 4-1: config 11 has an invalid interface number: 255 but max is 0
[   54.267185][  T385] usb 4-1: config 11 has no interface number 0
[   54.273420][  T385] usb 4-1: config 11 interface 255 has no altsetting 0
[   54.285785][  T385] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a01, bcdDevice=fa.1f
[   54.300144][  T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.315784][  T385] usb 4-1: Product: syz
[   54.320152][  T385] usb 4-1: Manufacturer: syz
[   54.325994][  T385] usb 4-1: SerialNumber: syz
[   54.476300][ T1413] rust_binder: 1412 RLIMIT_NICE not set
[   54.476337][ T1413] rust_binder: 190: no such ref 0
[   54.560729][ T1362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.569438][ T1362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.578654][ T1362] rust_binder: Error while translating object.
[   54.578691][ T1362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.585102][ T1362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244
[   54.622420][  T385] usb 4-1: USB disconnect, device number 7
[   54.758803][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   54.871657][ T1433] /dev/rnullb0: Can't lookup blockdev
[   54.901222][ T1441] rust_binder: Error while translating object.
[   54.901249][ T1441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.907456][ T1441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343
[   54.911249][    T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   54.935069][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.938195][ T1443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[   54.943081][    T9] usb 3-1: Product: syz
[   54.955995][    T9] usb 3-1: Manufacturer: syz
[   54.960624][    T9] usb 3-1: SerialNumber: syz
[   54.966726][    T9] r8152-cfgselector 3-1: Unknown version 0x0000
[   54.973015][    T9] r8152-cfgselector 3-1: config 0 descriptor??
[   55.169021][ T1447] capability: warning: `syz.0.369' uses 32-bit capabilities (legacy support in use)
[   55.384917][  T407] r8152-cfgselector 3-1: USB disconnect, device number 12
[   55.914841][ T1492] binder: Unknown parameter 'Ý»P¤'
[   55.962468][ T1494] kvm_intel: kvm [1493]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xffff2911
[   55.973144][ T1494] kvm: kvm [1493]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xffffdf0c
[   56.118862][ T1503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.118907][ T1503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365
[   56.128443][ T1503] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.138520][ T1504] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.169919][ T1510] pim6reg1: entered promiscuous mode
[   56.185691][ T1510] pim6reg1: entered allmulticast mode
[   56.228806][  T385] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   56.378776][  T385] usb 4-1: Using ep0 maxpacket: 16
[   56.385071][  T385] usb 4-1: config 0 interface 0 has no altsetting 0
[   56.391832][  T385] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   56.401066][  T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.409702][  T385] usb 4-1: config 0 descriptor??
[   56.540719][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.540746][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.547249][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.553726][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.560177][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.566600][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.573055][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.579537][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.585966][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.615815][ T1497] input input8: cannot allocate more than FF_MAX_EFFECTS effects
[   56.632427][  T385] usbhid 4-1:0.0: can't add hid device: -71
[   56.638399][  T385] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   56.647074][  T385] usb 4-1: USB disconnect, device number 8
[   56.681434][ T1528] rust_binder: Write failure EFAULT in pid:374
[   56.688702][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   56.700131][ T1531] binder: Bad value for 'stats'
[   56.701252][   T36] audit: type=1400 audit(1779269884.319:370): avc:  denied  { read } for  pid=1530 comm="syz.1.394" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   56.731940][ T1535] netlink: 104 bytes leftover after parsing attributes in process `syz.1.396'.
[   56.750387][   T36] audit: type=1400 audit(1779269884.389:371): avc:  denied  { setopt } for  pid=1536 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.858770][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   56.988802][    T9] usb 3-1: device descriptor read/64, error -71
[   57.228801][    T9] usb 3-1: device descriptor read/64, error -71
[   57.264250][ T1542] bridge0: entered allmulticast mode
[   57.388797][  T385] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   57.468782][    T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   57.538796][  T385] usb 4-1: Using ep0 maxpacket: 16
[   57.545043][  T385] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   57.555239][  T385] usb 4-1: config 0 has no interfaces?
[   57.561461][  T385] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   57.570593][  T385] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   57.578588][  T385] usb 4-1: Manufacturer: syz
[   57.583884][  T385] usb 4-1: config 0 descriptor??
[   57.598886][    T9] usb 3-1: device descriptor read/64, error -71
[   57.838782][    T9] usb 3-1: device descriptor read/64, error -71
[   57.948862][    T9] usb usb3-port1: attempt power cycle
[   58.262811][ T1565] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   58.263365][ T1566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:407
[   58.288812][    T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[   58.305549][   T36] audit: type=1326 audit(1779269885.939:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1467 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8353d8f6c9 code=0x7fc00000
[   58.349928][    T9] usb 3-1: device descriptor read/8, error -71
[   58.479792][    T9] usb 3-1: device descriptor read/8, error -71
[   58.718804][    T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[   58.739757][    T9] usb 3-1: device descriptor read/8, error -71
[   58.789977][ T1581] /dev/rnullb0: Can't lookup blockdev
[   58.840328][ T1584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.411'.
[   58.860725][   T36] audit: type=1400 audit(1779269886.499:373): avc:  denied  { ioctl } for  pid=1588 comm="syz.1.414" path="socket:[10049]" dev="sockfs" ino=10049 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.899628][    T9] usb 3-1: device descriptor read/8, error -71
[   58.927404][ T1596] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   58.937686][ T1596] SELinux: failed to load policy
[   58.968875][ T1598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.417'.
[   59.020475][   T36] audit: type=1400 audit(1779269886.659:374): avc:  denied  { create } for  pid=1599 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   59.028892][    T9] usb usb3-port1: unable to enumerate USB device
[   59.526162][ T1620] process 'syz.0.424' launched './file0' with NULL argv: empty string added
[   59.535280][   T36] audit: type=1400 audit(1779269887.169:375): avc:  denied  { execute_no_trans } for  pid=1619 comm="syz.0.424" path="/123/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   60.069910][ T1633] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[   60.069933][ T1633] rust_binder: Error while translating object.
[   60.082301][ T1633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.088921][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:441
[   60.165456][  T746] usb 4-1: USB disconnect, device number 9
[   60.237665][ T1643] veth1: entered allmulticast mode
[   60.247535][   T36] audit: type=1400 audit(1779269887.879:376): avc:  denied  { mount } for  pid=1642 comm="syz.3.433" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   60.247636][ T1642] veth1: left allmulticast mode
[   60.279071][   T36] audit: type=1400 audit(1779269887.909:377): avc:  denied  { create } for  pid=1644 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   60.339767][ T1653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=1653 comm=syz.3.437
[   60.359320][ T1654] rust_binder: 231: no such ref 1
[   60.366922][   T36] audit: type=1400 audit(1779269887.999:378): avc:  denied  { create } for  pid=1652 comm="syz.3.437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   60.367132][ T1653] fuse: Unknown parameter ''
[   60.407781][   T36] audit: type=1400 audit(1779269887.999:379): avc:  denied  { mounton } for  pid=1652 comm="syz.3.437" path="/82/file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   60.677712][ T1676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448
[   60.678068][ T1676] rust_binder: Error while translating object.
[   60.687259][ T1676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   60.693476][ T1676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448
[   60.710652][ T1678] fuse: Bad value for 'fd'
[   60.725603][ T1678] SELinux:  policydb magic number 0x65737566 does not match expected magic number 0xf97cff8c
[   60.735951][ T1678] SELinux: failed to load policy
[   60.788255][ T1682] rust_binder: Write failure EFAULT in pid:277
[   61.790446][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   61.790462][   T36] audit: type=1401 audit(1779269889.429:388): op=fscreate invalid_context=CFA7AE
[   61.811920][   T66] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   61.970432][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.981376][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.991176][   T66] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   62.000277][   T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.008892][   T66] usb 4-1: config 0 descriptor??
[   62.415898][   T66] arvo 0003:1E7D:30D4.0003: bogus close delimiter
[   62.422434][   T66] arvo 0003:1E7D:30D4.0003: item 0 0 2 10 parsing failed
[   62.429913][   T66] arvo 0003:1E7D:30D4.0003: parse failed
[   62.435788][   T66] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22
[   62.637798][ T1723] fuse: Bad value for 'fd'
[   62.643852][ T1723] netlink: 5 bytes leftover after parsing attributes in process `syz.1.462'.
[   62.653150][ T1723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.669176][ T1723] binder: Unknown parameter 'defcontext01777777777777777777777'
[   62.984967][ T1732] netlink: 124 bytes leftover after parsing attributes in process `syz.0.465'.
[   63.186544][ T1738] netlink: 8568 bytes leftover after parsing attributes in process `syz.2.468'.
[   63.196369][   T36] audit: type=1326 audit(1779269890.829:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1737 comm="syz.2.468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb3eb8f6c9 code=0x0
[   63.233006][   T36] audit: type=1400 audit(1779269890.869:390): avc:  denied  { mount } for  pid=1741 comm="syz.1.470" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.255534][   T36] audit: type=1400 audit(1779269890.869:391): avc:  denied  { mount } for  pid=1741 comm="syz.1.470" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.277334][   T36] audit: type=1400 audit(1779269890.889:392): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.301360][ T1746] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   63.310978][   T36] audit: type=1400 audit(1779269890.949:393): avc:  denied  { bind } for  pid=1745 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.538509][ T1750] overlayfs: failed to clone lowerpath
[   63.629863][ T1757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   63.638628][ T1757] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   63.647721][ T1757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   63.870640][ T1772] rust_binder: 485: no such ref 3
[   63.875731][ T1772] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   63.882838][ T1772] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   63.889885][ T1772] rust_binder: Write failure EFAULT in pid:485
[   63.904959][ T1776] tmpfs: Unknown parameter ''
[   63.935357][   T36] audit: type=1400 audit(1779269891.569:394): avc:  denied  { block_suspend } for  pid=1780 comm="syz.1.485" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.972111][ T1783] rust_binder: 496: no such ref 0
[   63.985356][ T1786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.487'.
[   63.989480][ T1785] rust_binder: Error while translating object.
[   63.994416][ T1785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   64.000643][ T1785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498
[   64.519107][  T407] usb 4-1: USB disconnect, device number 10
[   64.549754][ T1815] rust_binder: inc_ref_done called when no active inc_refs
[   64.564810][ T1819] rust_binder: Write failure EFAULT in pid:243
[   64.601363][   T36] audit: type=1326 audit(1779269892.239:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1831 comm="syz.2.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x0
[   64.630631][   T36] audit: type=1400 audit(1779269892.269:396): avc:  denied  { read } for  pid=1835 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.650072][   T36] audit: type=1400 audit(1779269892.269:397): avc:  denied  { accept } for  pid=1835 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.705194][ T1839] cgroup: No subsys list or none specified
[   65.124126][ T1852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517
[   65.131034][ T1855] fuse: Bad value for 'fd'
[   65.211016][ T1864] sit0: entered promiscuous mode
[   65.216939][ T1864] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[   65.224745][ T1864] netlink: 1 bytes leftover after parsing attributes in process `syz.1.514'.
[   65.596041][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250
[   65.848835][  T407] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   65.918852][ T1919] rust_binder: Error in use_page_slow: ESRCH
[   65.918870][ T1919] rust_binder: use_range failure ESRCH
[   65.924862][ T1919] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   65.930344][ T1919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   65.937974][ T1919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:555
[   66.009034][  T407] usb 3-1: Using ep0 maxpacket: 32
[   66.024208][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.035112][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.044848][  T407] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[   66.053973][  T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.063565][  T407] usb 3-1: config 0 descriptor??
[   66.531850][  T407] wacom 0003:056A:00E3.0004: unknown main item tag 0x0
[   66.540098][  T407] wacom 0003:056A:00E3.0004: unknown main item tag 0x0
[   66.548069][  T407] wacom 0003:056A:00E3.0004: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0
[   66.608042][ T1965] rust_binder: Write failure EFAULT in pid:590
[   66.628290][ T1970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'.
[   66.658780][  T385] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   66.685630][ T1977] 9p: Unknown access argument : -22
[   66.694074][ T1978] rust_binder: inc_ref_done called when no active inc_refs
[   66.731440][ T1917] No source specified
[   66.743295][ T1917] binder: Bad value for 'stats'
[   66.790766][   T66] usb 3-1: USB disconnect, device number 17
[   66.818785][  T385] usb 4-1: Using ep0 maxpacket: 32
[   66.825022][  T385] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   66.836256][  T385] usb 4-1: config 0 has no interface number 0
[   66.842885][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   66.842898][   T36] audit: type=1326 audit(1779269894.479:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.1.554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedb018f6c9 code=0x0
[   66.872657][  T385] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   66.881795][  T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.889864][  T385] usb 4-1: Product: syz
[   66.894276][  T385] usb 4-1: Manufacturer: syz
[   66.898971][  T385] usb 4-1: SerialNumber: syz
[   66.912526][  T385] usb 4-1: config 0 descriptor??
[   66.923742][  T385] smsc95xx v2.0.0
[   67.328593][  T385] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   67.340260][  T385] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   67.598789][  T407] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[   67.647226][   T36] audit: type=1400 audit(1779269895.279:411): avc:  denied  { setattr } for  pid=2017 comm="syz.1.564" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.668785][   T36] audit: type=1400 audit(1779269895.289:412): avc:  denied  { write } for  pid=2017 comm="syz.1.564" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.749860][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   67.758331][ T2025] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   67.760878][  T407] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   67.761041][ T2025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621
[   67.767314][  T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.777181][  T407] usb 3-1: config 0 descriptor??
[   67.800730][ T2002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   68.006326][   T36] audit: type=1400 audit(1779269895.639:413): avc:  denied  { create } for  pid=2031 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   68.231725][  T407] hid-generic 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[   68.434253][   T66] usb 3-1: USB disconnect, device number 18
[   68.578710][ T2057] /dev/sg0: Can't lookup blockdev
[   69.008136][ T2070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   69.022797][ T2068] 9pnet_fd: p9_fd_create_tcp (2068): problem connecting socket to 127.0.0.1
[   69.202166][ T2093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274
[   69.213214][ T2096] 9pnet_fd: Insufficient options for proto=fd
[   69.977789][   T36] audit: type=1400 audit(1779269897.609:414): avc:  denied  { mounton } for  pid=2160 comm="syz.0.615" path="/file0" dev="ramfs" ino=16239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   69.978425][ T2161] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   70.634771][ T2194] TCP: TCP_TX_DELAY enabled
[   70.643724][   T36] audit: type=1400 audit(1779269898.279:415): avc:  denied  { getopt } for  pid=2195 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.716560][ T2204] cgroup: Setting release_agent not allowed
[   70.782983][   T36] audit: type=1400 audit(1779269898.419:416): avc:  denied  { read } for  pid=2209 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.860204][   T36] audit: type=1400 audit(1779269898.499:417): avc:  denied  { mount } for  pid=2209 comm="syz.1.633" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   70.897582][   T36] audit: type=1400 audit(1779269898.519:418): avc:  denied  { lock } for  pid=2209 comm="syz.1.633" path="socket:[16293]" dev="sockfs" ino=16293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   71.160415][  T385] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000002c: -71
[   71.177649][  T385] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   71.191880][  T385] usb 4-1: USB disconnect, device number 11
[   71.218758][   T36] audit: type=1400 audit(1779269898.849:419): avc:  denied  { getopt } for  pid=2223 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   71.239707][ T2226] netlink: 'syz.2.640': attribute type 5 has an invalid length.
[   71.521549][ T2257] binder: Unknown parameter 'contextÌðÔð[7’'
[   71.605458][ T2265] loop7: detected capacity change from 0 to 7
[   71.751303][ T2279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=2279 comm=syz.1.655
[   71.764424][ T2279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=2279 comm=syz.1.655
[   71.828404][ T2280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=2280 comm=syz.1.655
[   72.144036][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   72.144052][   T36] audit: type=1326 audit(1779269899.779:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.173461][   T36] audit: type=1326 audit(1779269899.779:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.197192][   T36] audit: type=1326 audit(1779269899.779:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.220464][   T36] audit: type=1326 audit(1779269899.779:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.243742][   T36] audit: type=1326 audit(1779269899.779:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.266986][   T36] audit: type=1326 audit(1779269899.779:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.290510][   T36] audit: type=1326 audit(1779269899.779:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.313723][   T36] audit: type=1326 audit(1779269899.779:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.336920][   T36] audit: type=1326 audit(1779269899.779:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.360127][   T36] audit: type=1326 audit(1779269899.779:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.2.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3eb8f6c9 code=0x7fc00000
[   72.628809][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   72.779898][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.790888][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.800643][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[   72.809812][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.818307][   T10] usb 3-1: config 0 descriptor??
[   73.227084][   T10] hid-led 0003:04D8:F372.0006: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0
[   73.245417][   T10] hid-led 0003:04D8:F372.0006: Greynut Luxafor initialized
[   73.426916][ T2282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.435528][ T2282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.444322][   T10] usb 3-1: USB disconnect, device number 19
[   73.450936][    T9] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[   73.459210][    T9] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[   73.467512][    T9] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[   73.475705][    T9] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[   73.483914][    T9] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[   73.492376][    T9] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[   73.500485][    T9] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[   73.508682][    T9] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[   73.517050][    T9] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[   73.525168][    T9] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[   73.533450][    T9] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[   73.541773][    T9] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[   73.549957][    T9] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[   73.558134][    T9] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[   73.566486][    T9] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[   73.574613][    T9] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[   73.582882][    T9] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[   73.591156][    T9] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[   73.961713][ T2291] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[   73.961732][ T2291] rust_binder: Error while translating object.
[   73.973826][ T2291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   73.980092][ T2291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302
[   74.228814][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   74.286035][ T2297] netlink: 'syz.0.662': attribute type 12 has an invalid length.
[   74.389864][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.400796][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   74.409859][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.418418][    T9] usb 3-1: config 0 descriptor??
[   74.823757][ T2315] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   74.834403][    T9] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[   74.924335][ T2325] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   74.939860][ T2333] rust_binder: Error while translating object.
[   74.947957][ T2333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   74.954198][ T2333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:357
[   74.999946][ T2349] netlink: 'syz.0.681': attribute type 4 has an invalid length.
[   75.017022][ T2349] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.681'.
[   75.043140][    T9] usb 3-1: USB disconnect, device number 20
[   75.298799][   T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[   75.398802][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   75.449875][   T31] usb 4-1: config 162 has an invalid interface number: 79 but max is 1
[   75.458206][   T31] usb 4-1: config 162 has an invalid interface number: 183 but max is 1
[   75.466576][   T31] usb 4-1: config 162 has no interface number 0
[   75.472849][   T31] usb 4-1: config 162 has no interface number 1
[   75.479120][   T31] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   75.492171][   T31] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[   75.503023][   T31] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   75.514077][   T31] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   75.525213][   T31] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[   75.537041][   T31] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[   75.548337][   T31] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[   75.561550][   T31] usb 4-1: config 162 interface 79 has no altsetting 0
[   75.568385][   T31] usb 4-1: config 162 interface 183 has no altsetting 0
[   75.569154][    T9] usb 3-1: too many configurations: 9, using maximum allowed: 8
[   75.576776][   T31] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[   75.590577][    T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[   75.592051][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.601440][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.614099][   T31] usb 4-1: Product: syz
[   75.621370][   T31] usb 4-1: Manufacturer: syz
[   75.621875][    T9] usb 3-1: Product: syz
[   75.627427][   T31] usb 4-1: SerialNumber: syz
[   75.630566][    T9] usb 3-1: Manufacturer: syz
[   75.640068][    T9] usb 3-1: SerialNumber: syz
[   75.654495][    T9] usb 3-1: config 0 descriptor??
[   75.664179][    T9] usb 3-1: Waiting for MOTU Microbook II to boot up...
[   75.671081][    T9] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22
[   75.679176][    T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[   75.837372][   T31] pl2303 4-1:162.79: required endpoints missing
[   75.845273][   T31] pl2303 4-1:162.183: pl2303 converter detected
[   75.852347][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   75.862934][   T31] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   75.879380][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   75.889563][   T66] usb 3-1: USB disconnect, device number 21
[   75.895720][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   75.905808][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   75.914350][   T31] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   75.922925][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   75.931395][   T31] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   75.941295][   T31] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[   75.949899][   T31] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[   75.958425][   T31] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[   75.968013][   T31] usb 4-1: pl2303 converter now attached to ttyUSB0
[   75.981274][   T31] usb 4-1: USB disconnect, device number 12
[   75.998870][   T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   76.007069][   T31] pl2303 4-1:162.183: device disconnected
[   76.354385][ T2395] binder: Unknown parameter 'smackfstransmute'
[   76.648820][   T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   76.668815][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   76.704441][ T2415] netlink: 'syz.1.706': attribute type 4 has an invalid length.
[   76.799913][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   76.809658][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7
[   76.820622][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024
[   76.828768][    T9] usb 4-1: Using ep0 maxpacket: 32
[   76.834106][   T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   76.837858][    T9] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[   76.845887][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.858932][    T9] usb 4-1: config 4 has no interface number 0
[   76.868060][    T9] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 40384, setting to 1024
[   76.872154][   T31] usb 3-1: Product: syz
[   76.879632][    T9] usb 4-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024
[   76.888779][   T31] usb 3-1: Manufacturer: syz
[   76.893878][    T9] usb 4-1: config 4 interface 228 has no altsetting 0
[   76.906580][    T9] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[   76.906901][   T31] usb 3-1: SerialNumber: syz
[   76.919878][    T9] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[   76.928505][    T9] usb 4-1: Product: syz
[   76.929112][   T31] usb 3-1: config 0 descriptor??
[   76.932892][    T9] usb 4-1: Manufacturer: syz
[   76.942522][    T9] usb 4-1: SerialNumber: syz
[   76.943039][   T31] usb 3-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64
[   76.957869][ T2411] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   76.986566][ T2428] netlink: 'syz.0.710': attribute type 16 has an invalid length.
[   77.152446][   T31] usb 3-1: USB disconnect, device number 22
[   77.162321][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   77.186900][    T9] usb 4-1: USB disconnect, device number 13
[   77.195074][  T410] udevd[410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   77.665130][ T2455] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   77.790593][ T2481] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   77.864095][ T2499] rust_binder: validate_parent_fixup: new_min_offset=57, sg_entry.length=0
[   77.864116][ T2499] rust_binder: Error while translating object.
[   77.874339][ T2499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   77.876880][ T2501] binder: Bad value for 'stats'
[   77.885267][ T2499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339
[   77.908609][   T36] kauditd_printk_skb: 65 callbacks suppressed
[   77.908625][   T36] audit: type=1400 audit(1779269905.539:500): avc:  denied  { read write } for  pid=2503 comm="syz.3.738" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   77.947382][   T36] audit: type=1400 audit(1779269905.539:501): avc:  denied  { open } for  pid=2503 comm="syz.3.738" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   77.951284][ T2506] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   77.983529][ T2506] rust_binder: Write failure EINVAL in pid:341
[   78.448059][ T2552] netlink: 68 bytes leftover after parsing attributes in process `syz.0.755'.
[   78.478785][  T387] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   78.629824][  T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   78.640547][  T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4
[   78.652863][  T387] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   78.661966][  T387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.669036][   T36] audit: type=1400 audit(1779269906.309:502): avc:  denied  { listen } for  pid=2568 comm="syz.0.760" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.670138][  T387] usb 4-1: Product: syz
[   78.694741][  T387] usb 4-1: Manufacturer: syz
[   78.699529][  T387] usb 4-1: SerialNumber: syz
[   78.704769][  T387] usb 4-1: config 0 descriptor??
[   78.778231][ T2575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'.
[   79.007249][  T387] usb 4-1: USB disconnect, device number 14
[   79.035651][ T2590] fuse: Unknown parameter 'rootmo`e'
[   79.050408][ T2592] netlink: 9 bytes leftover after parsing attributes in process `syz.3.769'.
[   79.059606][ T2592] gretap0: entered promiscuous mode
[   79.239322][   T36] audit: type=1400 audit(1779269906.879:503): avc:  denied  { map } for  pid=2595 comm="syz.3.770" path="socket:[18484]" dev="sockfs" ino=18484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   79.262480][   T36] audit: type=1400 audit(1779269906.879:504): avc:  denied  { read write accept } for  pid=2595 comm="syz.3.770" path="socket:[18484]" dev="sockfs" ino=18484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   79.345667][   T36] audit: type=1400 audit(1779269906.979:505): avc:  denied  { write } for  pid=2600 comm="syz.3.772" name="tcp" dev="proc" ino=4026532573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   79.360613][ T2601] netlink: 'syz.3.772': attribute type 32 has an invalid length.
[   79.410989][   T36] audit: type=1400 audit(1779269907.049:506): avc:  denied  { mount } for  pid=2603 comm="syz.2.773" name="/" dev="configfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   79.992859][ T2624] netlink: 'syz.3.780': attribute type 16 has an invalid length.
[   80.000730][ T2624] netlink: 'syz.3.780': attribute type 25 has an invalid length.
[   80.008526][ T2624] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.780'.
[   80.308681][   T36] audit: type=1400 audit(1779269907.939:507): avc:  denied  { remove_name } for  pid=2655 comm="syz.3.789" name="binder0" dev="binder" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.331893][   T36] audit: type=1400 audit(1779269907.939:508): avc:  denied  { unlink } for  pid=2655 comm="syz.3.789" name="binder0" dev="binder" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   80.355717][   T36] audit: type=1400 audit(1779269907.959:509): avc:  denied  { shutdown } for  pid=2657 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.425970][ T2681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=2681 comm=syz.3.792
[   80.438425][ T2681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'.
[   80.450796][ T2681] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[   80.450818][ T2681] rust_binder: Error while translating object.
[   80.463813][ T2681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   80.470179][ T2681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472
[   80.618544][ T2686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:372
[   80.812308][ T2713] overlay: ./file0 is not a directory
[   80.905810][ T2738] rust_binder: Error while translating object.
[   80.905857][ T2738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   80.912926][ T2738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:388
[   80.924773][ T2731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'.
[   80.955750][ T2746] rust_binder: Write failure EFAULT in pid:397
[   80.966705][ T2750] batadv_slave_1: entered promiscuous mode
[   81.135276][ T2751] batadv_slave_1: left promiscuous mode
[   81.246110][ T2765] rust_binder: 476: no such ref 2
[   81.465523][ T2769] loop7: detected capacity change from 0 to 7
[   81.524382][    C0] blk_print_req_error: 6 callbacks suppressed
[   81.524401][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   81.540223][    C0] buffer_io_error: 6 callbacks suppressed
[   81.540234][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   81.615093][ T2776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   81.828811][  T407] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   81.889403][ T2787] incfs: Error accessing: ./cgroup.
[   81.894621][ T2787] incfs: mount failed -2
[   81.917019][ T2791] bridge0: port 3(erspan0) entered blocking state
[   81.923560][ T2791] bridge0: port 3(erspan0) entered disabled state
[   81.930296][ T2791] erspan0: entered allmulticast mode
[   81.935963][ T2791] erspan0: entered promiscuous mode
[   81.941372][ T2791] bridge0: port 3(erspan0) entered blocking state
[   81.947806][ T2791] bridge0: port 3(erspan0) entered forwarding state
[   81.988783][  T407] usb 4-1: Using ep0 maxpacket: 32
[   81.995285][  T407] usb 4-1: unable to get BOS descriptor or descriptor too short
[   82.003759][  T407] usb 4-1: config 13 has an invalid interface number: 51 but max is 1
[   82.012006][  T407] usb 4-1: config 13 has an invalid interface number: 92 but max is 1
[   82.020259][  T407] usb 4-1: config 13 has no interface number 0
[   82.026434][  T407] usb 4-1: config 13 has no interface number 1
[   82.032627][  T407] usb 4-1: config 13 interface 51 has no altsetting 0
[   82.039404][  T407] usb 4-1: config 13 interface 92 has no altsetting 0
[   82.047860][  T407] usb 4-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=d7.f7
[   82.056920][  T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.064918][  T407] usb 4-1: Product: syz
[   82.069098][  T407] usb 4-1: Manufacturer: syz
[   82.073710][  T407] usb 4-1: SerialNumber: syz
[   82.286495][  T407] hub 4-1:13.51: Invalid hub with more than one config or interface
[   82.297094][  T407] hub 4-1:13.51: probe with driver hub failed with error -22
[   82.309404][  T407] usb 4-1: USB disconnect, device number 15
[   82.397352][ T2831] __vm_enough_memory: pid: 2831, comm: syz.2.846, bytes: 18014402804453376 not enough memory for the allocation
[   82.738992][   T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   82.859163][ T2846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.859275][ T2846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   82.888770][   T31] usb 3-1: Using ep0 maxpacket: 32
[   82.901465][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.912361][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.922115][   T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   82.931160][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.939882][   T31] usb 3-1: config 0 descriptor??
[   83.348415][   T31] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   83.548645][  T407] usb 3-1: USB disconnect, device number 23
[   83.851869][ T2859] rust_binder: Write failure EFAULT in pid:497
[   83.864116][ T2862] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.870794][ T2862] rust_binder: 499: no such ref 3
[   83.882492][ T2862] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   83.889627][ T2862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499
[   84.047736][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   84.047752][   T36] audit: type=1400 audit(1779269911.678:515): avc:  denied  { create } for  pid=2866 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   84.101684][ T2879] rust_binder: Failed to allocate buffer. len:4216, is_oneway:true
[   84.101719][ T2879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   84.109793][ T2879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:419
[   84.198251][ T2890] futex_wake_op: syz.0.868 tries to shift op by 32; fix this program
[   84.864638][ T2919] SELinux: security_context_str_to_sid () failed with errno=-22
[   84.931009][ T2929] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.218805][  T387] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   85.321414][ T2935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.321768][ T2935] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   85.328209][ T2935] rust_binder: Read failure Err(EFAULT) in pid:511
[   85.345204][ T2937] rust_binder: Write failure EINVAL in pid:513
[   85.378782][  T387] usb 3-1: Using ep0 maxpacket: 16
[   85.391496][  T387] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   85.396383][   T36] audit: type=1400 audit(1779269913.028:516): avc:  denied  { ioctl } for  pid=2947 comm="syz.0.889" path="socket:[20639]" dev="sockfs" ino=20639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   85.425929][  T387] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   85.435817][  T387] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.450974][  T387] usb 3-1: config 1 interface 0 has no altsetting 0
[   85.463044][ T2956] overlayfs: failed to resolve './file0/file0': -2
[   85.469667][  T387] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   85.478913][  T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.479715][   T36] audit: type=1400 audit(1779269913.118:517): avc:  denied  { mount } for  pid=2955 comm="syz.3.891" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   85.487279][  T387] usb 3-1: Product: syz
[   85.512569][  T387] usb 3-1: Manufacturer: syz
[   85.517165][  T387] usb 3-1: SerialNumber: syz
[   85.556829][ T2956] kvm: kvm [2955]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   85.565696][ T2956] kvm: kvm [2955]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   85.714808][ T2961] netlink: 'syz.3.893': attribute type 30 has an invalid length.
[   85.723904][  T387] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   85.784657][ T2963] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.808095][ T2967] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.815792][ T2967] rust_binder: Error in use_page_slow: ESRCH
[   85.818837][ T2968] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   85.822309][ T2967] rust_binder: use_range failure ESRCH
[   85.828279][ T2968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   85.836496][ T2967] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   85.841989][ T2968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:532
[   85.851396][ T2967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   85.868124][ T2967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:532
[   85.928641][   T36] audit: type=1400 audit(1779269913.558:518): avc:  denied  { read write } for  pid=2928 comm="syz.2.883" name="lp0" dev="devtmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   85.961212][   T36] audit: type=1400 audit(1779269913.558:519): avc:  denied  { open } for  pid=2928 comm="syz.2.883" path="/dev/usb/lp0" dev="devtmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   85.984940][   T36] audit: type=1400 audit(1779269913.558:520): avc:  denied  { ioctl } for  pid=2928 comm="syz.2.883" path="/dev/usb/lp0" dev="devtmpfs" ino=549 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   86.220581][   T36] audit: type=1400 audit(1779269913.858:521): avc:  denied  { create } for  pid=2988 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   86.296153][ T2997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=2997 comm=syz.0.907
[   86.309260][ T2997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[   86.318450][ T2997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2997 comm=syz.0.907
[   86.688778][   T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[   86.839881][   T10] usb 4-1: descriptor type invalid, skip
[   86.845864][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[   86.854349][   T10] usb 4-1: config 0 has no interfaces?
[   86.861142][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   86.870195][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.878173][   T10] usb 4-1: Product: syz
[   86.882346][   T10] usb 4-1: Manufacturer: syz
[   86.886927][   T10] usb 4-1: SerialNumber: syz
[   86.892220][   T10] usb 4-1: config 0 descriptor??
[   87.099576][   T10] usb 4-1: USB disconnect, device number 16
[   87.794139][ T3032] netlink: 'syz.0.920': attribute type 4 has an invalid length.
[   87.802645][ T3032] netlink: 92 bytes leftover after parsing attributes in process `syz.0.920'.
[   87.837536][ T3036] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[   87.949902][  T387] usb 3-1: USB disconnect, device number 24
[   87.957698][  T387] usblp0: removed
[   87.999998][ T3049] rust_binder: Error while translating object.
[   88.000038][ T3049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   88.006236][ T3049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:445
[   88.097769][ T3054] netlink: 108 bytes leftover after parsing attributes in process `syz.3.929'.
[   88.567807][ T3075] 9pnet_fd: Insufficient options for proto=fd
[   88.585065][ T3077] mmap: syz.2.937 (3077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.848788][   T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[   88.999922][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.010077][   T31] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   89.020866][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   89.034802][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.044012][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.052340][   T31] usb 3-1: SerialNumber: syz
[   89.258886][  T407] usb 3-1: USB disconnect, device number 25
[   89.346950][ T3099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.355433][ T3099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.578789][   T31] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[   89.708830][   T31] usb 4-1: device descriptor read/64, error -71
[   89.766995][ T3111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=3111 comm=syz.2.948
[   89.948780][   T31] usb 4-1: device descriptor read/64, error -71
[   90.188782][   T31] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[   90.318781][   T31] usb 4-1: device descriptor read/64, error -71
[   90.558791][   T31] usb 4-1: device descriptor read/64, error -71
[   90.662358][ T3135] 9pnet_fd: p9_fd_create_tcp (3135): problem connecting socket to 127.0.0.1
[   90.671265][   T31] usb usb4-port1: attempt power cycle
[   90.687630][ T3139] netlink: 1 bytes leftover after parsing attributes in process `syz.2.957'.
[   90.867868][ T3152] SELinux: security_context_str_to_sid () failed with errno=-22
[   90.882617][ T3154] syz.2.961 (3154): /proc/3153/oom_adj is deprecated, please use /proc/3153/oom_score_adj instead.
[   91.008818][   T31] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[   91.029735][   T31] usb 4-1: device descriptor read/8, error -71
[   91.159858][   T31] usb 4-1: device descriptor read/8, error -71
[   91.178822][  T407] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   91.329927][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.340836][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.350570][  T407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   91.363452][  T407] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   91.372498][  T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.381285][  T407] usb 3-1: config 0 descriptor??
[   91.398787][   T31] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[   91.419782][   T31] usb 4-1: device descriptor read/8, error -71
[   91.549801][   T31] usb 4-1: device descriptor read/8, error -71
[   91.588336][  T407] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max
[   91.596594][  T407] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max
[   91.604249][  T407] plantronics 0003:047F:FFFF.0009: usage index exceeded
[   91.611202][  T407] plantronics 0003:047F:FFFF.0009: item 0 1 2 2 parsing failed
[   91.618925][  T407] plantronics 0003:047F:FFFF.0009: parse failed
[   91.625179][  T407] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22
[   91.658869][   T31] usb usb4-port1: unable to enumerate USB device
[   91.788460][   T10] usb 3-1: USB disconnect, device number 26
[   91.816727][   T36] audit: type=1326 audit(1779269919.448:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3178 comm="syz.0.970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8353d8f6c9 code=0x0
[   92.381199][ T3187] rust_binder: 3183 RLIMIT_NICE not set
[   92.381229][ T3187] rust_binder: 493: no such ref 0
[   92.431304][   T36] audit: type=1400 audit(1779269920.068:523): avc:  denied  { read append } for  pid=3200 comm="syz.3.976" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[   92.452840][   T36] audit: type=1400 audit(1779269920.068:524): avc:  denied  { open } for  pid=3200 comm="syz.3.976" path="/191/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[   92.475454][   T36] audit: type=1400 audit(1779269920.098:525): avc:  denied  { map } for  pid=3192 comm="syz.2.974" path="socket:[20455]" dev="sockfs" ino=20455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   92.758778][   T10] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[   92.811991][ T3205] netlink: 76 bytes leftover after parsing attributes in process `syz.0.977'.
[   92.920506][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[   92.931199][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[   92.941114][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[   92.952889][   T10] usb 4-1: string descriptor 0 read error: -22
[   92.959123][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.968144][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.979069][ T3201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   93.188806][   T10] cdc_ncm 4-1:1.0: bind() failure
[   93.194521][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   93.201327][   T10] cdc_ncm 4-1:1.1: bind() failure
[   93.207277][   T10] usb 4-1: USB disconnect, device number 21
[   93.488804][   T66] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   93.638782][   T66] usb 3-1: Using ep0 maxpacket: 32
[   93.645230][   T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.656239][   T66] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[   93.665309][   T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.673830][   T66] usb 3-1: config 0 descriptor??
[   93.879661][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.888272][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.896339][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.904805][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.912852][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.921332][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.929373][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.937883][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.945924][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.954369][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.165617][   T66] usbhid 3-1:0.0: can't add hid device: -71
[   94.171675][   T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   94.180242][   T66] usb 3-1: USB disconnect, device number 27
[   94.679944][ T3234] netlink: 84 bytes leftover after parsing attributes in process `syz.3.985'.
[   94.689150][ T3234] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.689212][ T3234] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   94.696315][ T3234] netlink: 84 bytes leftover after parsing attributes in process `syz.3.985'.
[   94.700565][ T3235] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.713257][ T3238] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.720154][ T3234] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   94.735547][ T3242] rust_binder: 598: no such ref 0
[   94.748606][ T3242] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   94.755664][ T3242] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   94.762709][ T3242] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   94.769746][ T3242] rust_binder: 598: no such ref 0
[   94.775451][ T3243] rust_binder: 3240 RLIMIT_NICE not set
[   94.775484][ T3243] rust_binder: 513: no such ref 0
[   94.807512][ T3247] binder: Binderfs stats mode cannot be changed during a remount
[   94.938028][ T3259] rust_binder: 525: no such ref 0
[   94.943156][ T3259] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   94.950309][ T3259] rust_binder: 525: no such ref 2
[   94.955442][ T3259] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   94.980553][   T36] audit: type=1400 audit(1779269922.618:526): avc:  denied  { create } for  pid=3271 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   95.019336][ T3274] rust_binder: Write failure EFAULT in pid:541
[   95.889471][ T3295] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.900054][ T3296] rust_binder: 607: no such ref 0
[   95.926535][ T3299] usb usb8: usbfs: process 3299 (syz.2.1009) did not claim interface 63 before use
[   95.936627][ T3299] netlink: 'syz.2.1009': attribute type 14 has an invalid length.
[   95.992670][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.999739][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.006796][ T3302] bridge_slave_0: entered allmulticast mode
[   96.013316][ T3302] bridge_slave_0: entered promiscuous mode
[   96.026688][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.034214][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.036267][ T3309] binder: Unknown parameter 'fscontext?}'
[   96.043097][ T3302] bridge_slave_1: entered allmulticast mode
[   96.053548][ T3302] bridge_slave_1: entered promiscuous mode
[   96.147286][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.154379][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.161690][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.168819][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.188791][   T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   96.206773][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.214241][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.223612][  T334] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.230704][  T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.240041][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.247109][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.274700][ T3302] veth0_vlan: entered promiscuous mode
[   96.284668][ T3302] veth1_macvtap: entered promiscuous mode
[   96.302103][   T36] audit: type=1400 audit(1779269923.938:527): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.jnxrr5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   96.351586][   T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   96.358794][  T746] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   96.360599][   T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   96.384138][   T31] usb 3-1: config 220 has no interface number 2
[   96.393417][   T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   96.406864][   T31] usb 3-1: config 220 interface 0 has no altsetting 0
[   96.411998][ T3351] /dev/rnullb0: Can't open blockdev
[   96.413730][   T31] usb 3-1: config 220 interface 76 has no altsetting 0
[   96.426128][   T31] usb 3-1: config 220 interface 1 has no altsetting 0
[   96.434726][   T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   96.444280][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.452496][   T31] usb 3-1: Product: syz
[   96.457159][   T31] usb 3-1: Manufacturer: syz
[   96.464164][ T3353] /dev/sg0: Can't lookup blockdev
[   96.464327][   T31] usb 3-1: SerialNumber: syz
[   96.479190][ T3353] /dev/sg0: Can't lookup blockdev
[   96.510002][ T3357] SELinux: security_context_str_to_sid (18446744073709551615) failed with errno=-22
[   96.521228][ T3359] SELinux: security_context_str_to_sid (18446744073709551615) failed with errno=-22
[   96.532134][  T746] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   96.546668][  T746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.560024][  T746] usb 4-1: Product: syz
[   96.573082][  T746] usb 4-1: Manufacturer: syz
[   96.577810][  T746] usb 4-1: SerialNumber: syz
[   96.677391][   T36] audit: type=1400 audit(1779269924.308:528): avc:  denied  { read } for  pid=3298 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   96.701315][   T31] usb 3-1: selecting invalid altsetting 0
[   96.707290][   T31] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   96.713788][   T31] usb 3-1: No valid video chain found.
[   96.731538][   T31] usb 3-1: USB disconnect, device number 28
[   96.770577][ T3368] overlayfs: failed to clone upperpath
[   97.274487][ T3379] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   97.274686][ T3380] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   97.312139][ T3384] /dev/loop0: Can't lookup blockdev
[   97.319561][ T3382] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[   97.328372][ T3382] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[   97.415512][ T3391] loop7: detected capacity change from 0 to 7
[   97.568798][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   97.578663][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   97.670461][ T3402] input: syz1 as /devices/virtual/input/input14
[   97.682226][   T36] audit: type=1400 audit(1779269925.318:529): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.710802][   T36] audit: type=1400 audit(1779269925.328:530): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=567 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.714848][ T3402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24
[   97.734193][   T36] audit: type=1400 audit(1779269925.328:531): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=567 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.813033][   T36] audit: type=1400 audit(1779269925.448:532): avc:  denied  { write } for  pid=3406 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   97.814451][ T3407] rust_binder: Got transaction with invalid offset.
[   97.837873][ T3407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   97.844907][ T3407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[   97.883408][  T746] rtl8150 4-1:1.0: couldn't reset the device
[   97.898620][  T746] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[   98.108849][   T31] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   98.260005][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   98.271898][   T31] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   98.281537][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.290370][   T31] usb 5-1: config 0 descriptor??
[   98.295631][ T3409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   98.383307][ T3428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584
[   98.705412][   T31] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[   98.755378][ T3435] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1048'.
[   98.765893][ T3435] binder: Unknown parameter 'contextÌðÔð[7’'
[   98.833896][ T3440] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.905679][  T330] usb 5-1: USB disconnect, device number 2
[   99.088809][  T746] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   99.128020][  T330] usb 4-1: USB disconnect, device number 22
[   99.172119][   T36] audit: type=1400 audit(1779269926.808:533): avc:  denied  { create } for  pid=3449 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   99.174920][ T3450] __vm_enough_memory: pid: 3450, comm: syz.3.1054, bytes: 18014402804453376 not enough memory for the allocation
[   99.216436][   T36] audit: type=1400 audit(1779269926.848:534): avc:  denied  { shutdown } for  pid=3451 comm="syz.3.1055" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.223288][ T3452] loop7: detected capacity change from 0 to 7
[   99.239038][  T746] usb 3-1: device descriptor read/64, error -71
[   99.297621][    C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   99.307418][    C1] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   99.371764][ T3454] rust_binder: Write failure EFAULT in pid:633
[   99.428530][ T3461] 9pnet_fd: Insufficient options for proto=fd
[   99.498845][  T746] usb 3-1: device descriptor read/64, error -71
[   99.511268][ T3464] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293
[   99.527897][ T3467] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.528139][ T3467] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   99.543001][   T36] audit: type=1400 audit(1779269927.178:535): avc:  denied  { ioctl } for  pid=3468 comm="syz.4.1062" path="socket:[22914]" dev="sockfs" ino=22914 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   99.567500][ T3474] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   99.576007][ T3474] rust_binder: Read failure Err(EFAULT) in pid:47
[   99.576398][   T36] audit: type=1400 audit(1779269927.198:536): avc:  denied  { associate } for  pid=3473 comm="syz.4.1063" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   99.619143][   T36] audit: type=1400 audit(1779269927.258:537): avc:  denied  { bind } for  pid=3475 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.623753][ T3476] __vm_enough_memory: pid: 3476, comm: syz.4.1064, bytes: 18014402804453376 not enough memory for the allocation
[   99.638421][   T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   99.657907][   T36] audit: type=1400 audit(1779269927.258:538): avc:  denied  { name_bind } for  pid=3475 comm="syz.4.1064" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   99.738882][  T746] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   99.765299][ T3482] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.766032][ T3482] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[   99.780555][ T3482] rust_binder: Write failure EINVAL in pid:55
[   99.789039][ T3484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.795687][ T3484] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   99.802710][ T3485] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.841031][ T3492] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   99.856624][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.867555][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.877334][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   99.890406][   T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   99.898786][  T746] usb 3-1: device descriptor read/64, error -71
[   99.899647][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.917509][   T31] usb 4-1: config 0 descriptor??
[  100.138811][  T746] usb 3-1: device descriptor read/64, error -71
[  100.248894][  T746] usb usb3-port1: attempt power cycle
[  100.374766][   T31] usbhid 4-1:0.0: can't add hid device: -71
[  100.381287][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  100.391016][   T31] usb 4-1: USB disconnect, device number 23
[  100.598775][  T746] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  100.598823][ T3512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1075'.
[  100.619961][  T746] usb 3-1: device descriptor read/8, error -71
[  100.749754][  T746] usb 3-1: device descriptor read/8, error -71
[  100.900721][  T334] Bluetooth: hci0: Frame reassembly failed (-84)
[  100.998831][  T746] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  101.019764][  T746] usb 3-1: device descriptor read/8, error -71
[  101.078822][   T66] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.159823][  T746] usb 3-1: device descriptor read/8, error -71
[  101.229938][   T66] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[  101.238137][   T66] usb 5-1: config 0 has no interface number 1
[  101.244732][   T66] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  101.253801][   T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.262394][   T66] usb 5-1: config 0 descriptor??
[  101.269481][  T746] usb usb3-port1: unable to enumerate USB device
[  101.476923][   T66] usb 5-1: USB disconnect, device number 3
[  101.898586][ T3566] __vm_enough_memory: pid: 3566, comm: syz.2.1092, bytes: 18014402804453376 not enough memory for the allocation
[  101.938314][ T3571] rust_binder: Write failure EFAULT in pid:613
[  101.964103][ T3575] /dev/rnullb0: Can't open blockdev
[  101.987632][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.988189][ T3579] rust_binder: Write failure EINVAL in pid:619
[  102.006339][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.120729][ T3589] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.127479][ T3589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  102.134109][ T3589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:631
[  102.339614][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x60000003
[  102.341503][ T3618] rust_binder: Write failure EFAULT in pid:92
[  102.356121][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x60000307
[  102.379091][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8
[  102.388307][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100
[  102.397239][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104
[  102.406360][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100
[  102.427264][ T3302] ------------[ cut here ]------------
[  102.432806][ T3302] WARNING: CPU: 1 PID: 3302 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  102.442254][ T3302] Modules linked in:
[  102.446182][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  102.458021][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  102.468191][ T3302] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  102.473953][ T3302] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  102.480196][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8
[  102.493823][ T3302] RSP: 0018:ffffc900103ffb68 EFLAGS: 00010293
[  102.503200][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100
[  102.508974][ T3302] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881194da600
[  102.517643][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104
[  102.525274][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  102.525287][ T3302] RBP: ffffc900103ffb90 R08: ffff88811e8a6c3f R09: 1ffff11023d14d87
[  102.525301][ T3302] R10: dffffc0000000000 R11: ffffed1023d14d88 R12: 0000000000000000
[  102.525314][ T3302] R13: dffffc0000000000 R14: ffff88811e8a6ba0 R15: ffff888110eab440
[  102.543440][ T3615] kvm: kvm [3611]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100
[  102.549797][ T3302] FS:  000055559398a500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  102.549817][ T3302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.549830][ T3302] CR2: 00005555939b5528 CR3: 0000000125b5a000 CR4: 00000000003526b0
[  102.598054][ T3302] Call Trace:
[  102.601352][ T3302]  <TASK>
[  102.604278][ T3302]  ovl_do_remove+0x7b8/0xcf0
[  102.608888][ T3302]  ? ovl_set_redirect+0x780/0x780
[  102.613914][ T3302]  ? down_write+0xe9/0x2a0
[  102.618321][ T3302]  ? __cfi_down_write+0x10/0x10
[  102.623191][ T3302]  ovl_rmdir+0x1e/0x30
[  102.627260][ T3302]  vfs_rmdir+0x3dd/0x560
[  102.631516][ T3302]  incfs_kill_sb+0x109/0x230
[  102.636108][ T3302]  deactivate_locked_super+0xd5/0x2a0
[  102.641494][ T3302]  deactivate_super+0xb8/0xe0
[  102.646172][ T3302]  cleanup_mnt+0x3f1/0x480
[  102.650602][ T3302]  __cleanup_mnt+0x1d/0x40
[  102.655018][ T3302]  task_work_run+0x1e0/0x250
[  102.659620][ T3302]  ? __cfi_task_work_run+0x10/0x10
[  102.664732][ T3302]  ? __x64_sys_umount+0x126/0x170
[  102.669775][ T3302]  ? __cfi___x64_sys_umount+0x10/0x10
[  102.675203][ T3302]  ? __kasan_check_read+0x15/0x20
[  102.680263][ T3302]  resume_user_mode_work+0x36/0x50
[  102.685376][ T3302]  syscall_exit_to_user_mode+0x64/0xb0
[  102.690852][ T3302]  do_syscall_64+0x64/0xf0
[  102.695300][ T3302]  ? clear_bhb_loop+0x50/0xa0
[  102.699993][ T3302]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.705887][ T3302] RIP: 0033:0x7fb5993909f7
[  102.710333][ T3302] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  102.730277][ T3302] RSP: 002b:00007ffc8ce29208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  102.738696][ T3302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb5993909f7
[  102.746691][ T3302] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8ce292c0
[  102.754689][ T3302] RBP: 00007ffc8ce292c0 R08: 0000000000000000 R09: 0000000000000000
[  102.762681][ T3302] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8ce2a350
[  102.770690][ T3302] R13: 00007fb599411d7d R14: 0000000000018fd7 R15: 00007ffc8ce2a390
[  102.778685][ T3302]  </TASK>
[  102.781723][ T3302] ---[ end trace 0000000000000000 ]---
[  102.787445][ T3302] ------------[ cut here ]------------
[  102.792952][ T3302] WARNING: CPU: 0 PID: 3302 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  102.802380][ T3302] Modules linked in:
[  102.806270][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  102.819474][ T3302] Tainted: [W]=WARN
[  102.823269][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  102.833359][ T3302] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  102.839036][ T3302] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  102.858668][ T3302] RSP: 0018:ffffc900103ffb68 EFLAGS: 00010293
[  102.864771][ T3302] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881194da600
[  102.872769][ T3302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  102.880760][ T3302] RBP: ffffc900103ffb90 R08: ffff88811e8a6c3f R09: 1ffff11023d14d87
[  102.888757][ T3302] R10: dffffc0000000000 R11: ffffed1023d14d88 R12: 0000000000000000
[  102.896724][ T3302] R13: dffffc0000000000 R14: ffff88811e8a6ba0 R15: ffff888110eab440
[  102.904709][ T3302] FS:  000055559398a500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  102.913663][ T3302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.920276][ T3302] CR2: 0000000000000000 CR3: 0000000125b5a000 CR4: 00000000003526b0
[  102.928246][ T3302] Call Trace:
[  102.931535][ T3302]  <TASK>
[  102.934463][ T3302]  ovl_do_remove+0x7b8/0xcf0
[  102.939069][ T3302]  ? ovl_set_redirect+0x780/0x780
[  102.944102][ T3302]  ? down_write+0xe9/0x2a0
[  102.948519][ T3302]  ? __cfi_down_write+0x10/0x10
[  102.953384][ T3302]  ovl_rmdir+0x1e/0x30
[  102.957455][ T3302]  vfs_rmdir+0x3dd/0x560
[  102.961710][ T3302]  incfs_kill_sb+0x1a0/0x230
[  102.966301][ T3302]  deactivate_locked_super+0xd5/0x2a0
[  102.971700][ T3302]  deactivate_super+0xb8/0xe0
[  102.971893][  T537] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  102.976379][ T3302]  cleanup_mnt+0x3f1/0x480
[  102.976402][ T3302]  __cleanup_mnt+0x1d/0x40
[  102.982488][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  102.986867][ T3302]  task_work_run+0x1e0/0x250
[  103.001840][ T3302]  ? __cfi_task_work_run+0x10/0x10
[  103.006965][ T3302]  ? __x64_sys_umount+0x126/0x170
[  103.012024][ T3302]  ? __cfi___x64_sys_umount+0x10/0x10
[  103.017403][ T3302]  ? __kasan_check_read+0x15/0x20
[  103.022450][ T3302]  resume_user_mode_work+0x36/0x50
[  103.027587][ T3302]  syscall_exit_to_user_mode+0x64/0xb0
[  103.033063][ T3302]  do_syscall_64+0x64/0xf0
[  103.037485][ T3302]  ? clear_bhb_loop+0x50/0xa0
[  103.042190][ T3302]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  103.048081][ T3302] RIP: 0033:0x7fb5993909f7
[  103.052536][ T3302] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  103.072201][ T3302] RSP: 002b:00007ffc8ce29208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.080744][ T3302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb5993909f7
[  103.088972][ T3302] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8ce292c0
[  103.096951][ T3302] RBP: 00007ffc8ce292c0 R08: 0000000000000000 R09: 0000000000000000
[  103.104962][ T3302] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8ce2a350
[  103.112965][ T3302] R13: 00007fb599411d7d R14: 0000000000018fd7 R15: 00007ffc8ce2a390
[  103.120980][ T3302]  </TASK>
[  103.123996][ T3302] ---[ end trace 0000000000000000 ]---
[  103.137317][ T3629] loop7: detected capacity change from 0 to 7
[  103.188205][    C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  103.198006][    C1] Buffer I/O error on dev loop7, logical block 0, lost async page write