last executing test programs:

5.418193373s ago: executing program 2 (id=500):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x401, 0x7})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0xffff1000)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x10a000})
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40d1}, 0x20000000)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000200))
rmdir(&(0x7f0000000280)='./file0\x00')
sendfile(r1, r1, &(0x7f00000002c0)=0x8000000000, 0x300f)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={<r4=>0x0}, &(0x7f00000004c0)=0xc)
timer_create(0x3, &(0x7f0000000500)={0x0, 0x22, 0x4, @tid=r4}, &(0x7f0000000540))
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
listxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/100, 0x64)
r8 = socket$netlink(0x10, 0x3, 0xb)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r1)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r12, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r8)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f0000001040)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000d80)={0x268, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x17c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b727fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5657b793}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ada2c8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53dcaddb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcd87f0e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b78c535}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a630213}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56f75764}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d01ba91}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7eeb20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af2c5f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ea31339}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fbe0f21}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfedc9b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e61093}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6453bb3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28b09d28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3738d0e}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b2908}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f438809}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37468388}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7008fa55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9952670}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6949d332}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x241ae84c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e87d5c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe603ec8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a29409a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66561cd2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d54d27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11c00841}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7884a3dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17e4b725}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e36326c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ccad7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1210ceb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70e5e762}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x1)

5.338157449s ago: executing program 2 (id=502):
socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0))
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe)
mprotect(&(0x7f0000459000/0x1000)=nil, 0x1000, 0x200000a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
write(r0, &(0x7f0000001c00)="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", 0xfffffdbf)

2.10955097s ago: executing program 2 (id=566):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000440)={0x1, 0x0, @pic={0x2, 0x45, 0x6, 0x3, 0x7, 0x0, 0x6, 0x2, 0x81, 0xd, 0x9, 0x4, 0x40, 0x6f, 0xad, 0x3}})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x9, 0x1001000}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x55, {0x55, 0xe, "00f40000e30456a281d38dee548c3f14000000d7dd005aacaa3a578fea917ddd61a3277a36a2cac39dc6fe18af5baf5e4abe2bd52fd3ffd36c081454a8cde04ebff948941330fcbe48fda99a0e951ec1572f12"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.909581026s ago: executing program 3 (id=567):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x62000) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
write$binfmt_script(r2, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000002b00)={{0x1, 0x0, 0x3, 0x3, 0xf20}, 0xa836, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x3, 0x200, 0x5}) (async)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) (async)
timerfd_create(0x7, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) (async)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2})
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0x3, 0x7, 0x9, 0xda, 0x5, 0x10, 0x50c}, 0x1c) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
syz_open_procfs$namespace(r4, &(0x7f0000002140)='ns/time\x00') (async)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000019)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000035a000/0x2000)=nil, 0x2000, &(0x7f0000000040)=':$[%#\xd6-\x00') (async)
write(r0, &(0x7f0000001c00)="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", 0xfffffdbf) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.878364348s ago: executing program 3 (id=568):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f0000000080)=ANY=[@ANYRES64])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
gettid()
r1 = inotify_init()
r2 = inotify_init()
r3 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x10000002)
r4 = inotify_init1(0x80800)
inotify_rm_watch(r4, r3)
geteuid()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setreuid(0x0, r7)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
process_madvise(r9, 0x0, 0x0, 0x14, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @loopback}})
getgroups(0x4, &(0x7f0000000100)=[0xee01, <r10=>0xee01, 0x0, 0xee01])
setgroups(0x1, &(0x7f00000002c0)=[r10])
fstat(r1, &(0x7f0000000140))
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder-control\x00', 0x0, 0x0)
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x48880}, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r12 = memfd_create(&(0x7f00000006c0)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb8\nR\xe8@\x99\xe8\x8e\x12\x1c\xb3U\xd7\xa4\x86\xe2\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f0!\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa3\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x01\x00\x00\x00\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5/\xae\xfa\xf8\xdd\xc8b', 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x12, r12, 0xff64000)
read$FUSE(r11, &(0x7f0000004100)={0x2020}, 0x2020)
r13 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r13, 0x0, 0x0)
syz_open_procfs(r13, &(0x7f0000000000)='attr/sockcreate\x00')

1.814213993s ago: executing program 3 (id=569):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
exit(0x3) (async)
read$FUSE(r0, 0x0, 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) (async)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0)

950.120943ms ago: executing program 3 (id=578):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2b0a00, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

909.993926ms ago: executing program 3 (id=579):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4074, 0xfea}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000002680)=""/4119, 0x1017}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000100)=""/17, 0x11}], 0x7}, 0xc98}], 0x1, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) (async)
r1 = epoll_create(0xff8a) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000040)={0x40000000})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0xc0046209, 0x0)

766.039458ms ago: executing program 3 (id=580):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080005"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r3, 0x8ee49000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf250f0000002c0007800c000300000200fbffffffff070002"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
close(r5)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8000, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0004570000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000acc000/0x1000)=nil, 0x1000)

614.47575ms ago: executing program 2 (id=582):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x10381)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x5)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{0x1, 0xd5d71001, 0xf, 0x9, 0x3, 0x7, 0x9, 0x8, 0xaa, 0x4, 0x2}, {0x18004, 0x10000, 0x3, 0x65, 0x6, 0x6a, 0x9, 0x4d, 0x2, 0x4, 0x1, 0xf}, {0x6000, 0x0, 0x3, 0x9, 0x9, 0xd, 0x9, 0x5, 0xc, 0x79, 0x8, 0xf}, {0xdddd0000, 0x1000, 0x8, 0x8, 0xc7, 0x9a, 0x8, 0x6, 0x30, 0x2, 0x5, 0xfd}, {0x2, 0xffff1000, 0x10, 0x0, 0x9, 0x2, 0x81, 0xd, 0xff, 0x5, 0x9, 0x3}, {0xeeee8000, 0x4000, 0xd, 0x9, 0x4, 0x4f, 0x2, 0x1, 0x9, 0x8, 0x85, 0x9}, {0x80a0000, 0x33327000, 0x9103c95609e1aa8, 0x3, 0x1, 0x29, 0x4a, 0x18, 0x3, 0x4, 0xf7, 0x5}, {0x2000, 0x2000, 0xb, 0x5, 0x68, 0x7a, 0x6, 0x6, 0x57, 0x9, 0x1, 0xe}, {0xeeee0000, 0x6}, {0x4, 0xfff}, 0x20, 0x0, 0x5000, 0x4, 0xf, 0x3500, 0x100000, [0x3ff, 0x4, 0xc4ae, 0x7]})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8a0602)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="2ef36644f7e60f20998f29d09594aa960100b890a4f084ef66bafc0c6dc4c1a253a0c900000066ba4100d9e848b800100000000000000f23d0c744240007000000c7442402a0552907c7442406000000000f01142435100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc42208f31cb1c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x92}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])

497.671069ms ago: executing program 2 (id=583):
r0 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x1b3040, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000282000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, 0x0, 0x18})
syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, 0x0}) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02990034dc8b6e8bfed82bd71d67a40640080700000027bd7000fcdbdf25010016004e22000002000100000004d42e0512000100008002000a00070000000b00000000000000e9a5dd2c5d6a383f30fb1fc464e1e6719fe845349b254755cd4f221785a80cdff97df120ea44aaedbc930c10dd814454c72c60e0c5ccb6686c246e0f390d0200008e0e98f564e60489ea8f05d6cf7099a85a4022088acf1e5c4f7abc7a0c33e17f991362c895f8b7129fce6197c1d3f361f7071c380df034421ce6ba641a9972f53d1049809e656afee15a"], 0x38}}, 0x8080) (async)
mount$incfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x0, 0x0)
chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100)
syz_open_procfs(r0, &(0x7f0000000080)='net/sctp\x00') (async)
r6 = syz_pidfd_open(r0, 0x0)
setns(r6, 0x24020000)
r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r7, 0x0, 0x0, 0x1001f0) (async)
read$FUSE(r7, 0x0, 0x0) (async)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
writev(r8, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) (async)
ioctl$SNAPSHOT_FREE(r8, 0x3305)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) (async)
umount2(&(0x7f0000000040)='.\x00', 0x2)

395.315598ms ago: executing program 2 (id=584):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f00000001c0)={0x0, 0xd, 0xe0, {0xe0, 0x4, "e76498c31a130877a705f0bdcf2c863c0d9dc69651051dd2a0078ad1b31987794301dea0be5e3325e3ed3e2b92ae361be6827cc98afddcd2439b0d905b400dc2b028c76859233a20c21d0a42adb59e1722b945e6ac94fdef6e4974f2fe8e5ea45cec0e94f1807163fc836e7725203225b18fff051b54d9b5222b084da04432ebc1b887e79510092bb4a88d75482406970236378598d8c9024ae45214753a5734ce06b0bd8513e11692c576f46d8d32ced087f77788913acba4cd0d4f0babf9f021c91611521225d745828888f9812f946ab22302995cc964c698bc8f7795"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xf, 0xd5, "e89b5ecb81ec82b2c11192ce445bcfadbc9ccd28b8b2c52702cd6f6e5f1a650323b56bb55027b064c1ea307aae68f3c11942e88693f54bc672bab55e80cb2dea97dc9d02a1d1d60ed89ac01252e89267d4dfaab2e4aef6677c077f7083dba5df2ee70e611852c97bf4ad053ef31325c93ca4ee810c3960235ec3ad31170f7a8cf55afa1a35a03f5c63bd922aedcdb73f30a74939ee1cb7dd510ad9de2017973d25d99cfaa639841f570ef16e037d6fe2dc1c0031245f4dd6a188ecd58a78b6ecba4edf1d3db9259f4bfa96ece482f2f496ceed8abb"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x3d}, &(0x7f00000003c0)={0xc0, 0x5, 0x5, "d9aee4926f"}, &(0x7f0000000400)={0x40, 0x5, 0x5, "e009e89e85"}})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

392.085478ms ago: executing program 0 (id=585):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000040))
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030302a303030303030303030303031030000002c777365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,\x00'])
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x4, 0xc031401, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000042c0), 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff)
writev(r10, &(0x7f0000000040)=[{&(0x7f0000000000)="4ab99c97d3836b42", 0x8}], 0x20)
syz_fuse_handle_req(r7, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x18, 0x0, 0x2, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="66ba2100b804000000efc4e1d55fb1b5000000c744240008d8d0fbc7442402547e0defc7442406000000000f011424c4c1f85ba048c773c048b819f50000000000000f23c00f21f83502000d000f23f8360f22202636670f01cb48b800000000010000000f23d00f21f8353000000a0f23f8440f20c03504000000440f22c041cad300", 0x83}], 0x1, 0x5b, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x20000000001})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000)
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
pwritev2(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)="6e92734523d745ab342869811ec9543fbde7993d82abbb0688e8d2e382f8f95403ae80b990ea5e40e3c090edbeaf680cc599880ad10b4daf8a6c2c28497024b47f65b8e395634632d9e6f8a5683dd5b4da981748184327f2b35e56ac3d538548cb966976d751c8fd7048b6f6ec051631b26732fb1cb97fcfb6893fd16837ecc5c9364fb6cf3a07e55379bf95f615e9ca186f00a05b67d9c47cc76d88d813bbd40a5af36caf726cc2714fd25e4ae42de54fba992dbc6195221c4382333a158540b72a3801fa53d9e0f941d39efb94ad1cc4c760126b8b5e4747", 0xd9}], 0x1, 0xfffffffe, 0x7, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

391.827599ms ago: executing program 0 (id=586):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000100)="8684b94757eabab5369768b6c57c8b04f3ef434b", 0x14) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x20a040) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) (async)
fsmount(r4, 0x0, 0x6)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000001c0)={0x6, "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"})
connect$bt_sco(r0, &(0x7f0000002100)={0x1f, @none}, 0x8)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback, 0x40, 0x7800, 0xfffffffc}}) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000340)={0xb, 0x0, [{0x4b564d02, 0x0, 0xffffffffffffffff}, {0xb15, 0x0, 0x8}, {0x8f1, 0x0, 0xf}, {0x3fe, 0x0, 0xffffffffffffffff}, {0x40000082, 0x0, 0x9}, {0x2b1, 0x0, 0x1}, {0x354, 0x0, 0xadf}, {0x1a0, 0x0, 0x8}, {0x96d, 0x0, 0x81}, {0x9af, 0x0, 0xa13f}, {0x391, 0x0, 0xd}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) (async)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

347.751812ms ago: executing program 0 (id=587):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x785600, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[@wr_crn={0x46, 0x20, {0x2, 0x400}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x32, 0x18, {0x40000096}}, @code={0xa, 0x71, {"48b800900000000000000f23c00f21f83500000e000f23f866b8d0000f00d041deac1f0058000036450f01c20f32642e420fc41c180a660f1c0503000000c7442400fbffff7fc744240200800000c7442406000000000f011c240f0636477707"}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0xa68}}, @uexit={0x0, 0x18, 0x7}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @wr_crn={0x46, 0x20, {0x8, 0x138}}, @cpuid={0x14, 0x18, {0x10001, 0xe155}}, @wrmsr={0x1e, 0x20, {0xb6f, 0x8}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x5b, {"c44201b87236f2410f581bf267640f0966410f38df2066b8cc008ec0440f20c03507000000440f22c066ba400066b8f0ff66ef0f209b66baf80cb8ba9c3a8eef66bafc0cecc4627d9807"}}, @code={0xa, 0x5e, {"f2adc4a3492273ee020f009700000000c4626546cdb9800000c00f3235001000000f3067430f787100b99f020000b836b23b9fba000000000f30c402a1be31c4016dc6e5f7b8010000000f01d9"}}, @cpuid={0x14, 0x18, {0x9, 0xac5}}], 0x28a})
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000340)={{0x2, 0x0, 0x80, {0x10000, 0x2, 0x3}}, "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", "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"})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002440)=[@text32={0x20, &(0x7f00000023c0)="0fc79d008000000f20d80fc75d00b9800000c00f3235004000000f30660f73f6840f08660f388272009af8000000860066baa000b8b7000000ef3e670f78960060", 0x41}], 0x1, 0x69, &(0x7f0000002480)=[@cstype0={0x4, 0xe}, @cstype0={0x4, 0x6}], 0x2)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000024c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
lseek(r2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000002500), &(0x7f0000002540), 0x2, 0x0)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)=@deltclass={0x40, 0x29, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1c, 0x9}, {0x6, 0x7}, {0xffff, 0x5}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x1}, 0x4, 0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000090)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002680)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002700)={'syztnl1\x00', &(0x7f00000026c0)={'erspan0\x00', r6, 0x20, 0x8000, 0x989, 0xa, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0xfe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010100, {[@end]}}}}})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x400, 0x12)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f0000002780))
r8 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000027c0))
getpeername$packet(r8, &(0x7f0000002800), &(0x7f0000002840)=0x14)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000002880)={0x0, 0x10000})
r9 = openat$null(0xffffffffffffff9c, &(0x7f00000028c0), 0x41, 0x0)
poll(&(0x7f0000002900)=[{r3, 0x44}, {r9, 0x4000}, {r0, 0x43}, {r7, 0x4000}, {r0, 0x41}], 0x5, 0x1)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f0000002940))
ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000002980)={0x8000000000000001, {0x0, 0x546, 0xbdd, 0x0, 0xb6}})
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000029c0)=0x1)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r9)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x80, r11, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x7, 0x100, 0x7fff, 0x1000, 0x6, 0xa]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2ca7}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x6c}, {0x2, 0x1}, {0xc}, {0x24, 0x1}, {0x1, 0x1}, {0x9}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x1, 0x1, 0x5]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x482}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)

347.353712ms ago: executing program 0 (id=588):
socketpair(0xf, 0xa, 0x8, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(r1, r0, &(0x7f0000000040)=0xd, 0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
io_setup(0x4, &(0x7f0000000040)=<r3=>0x0)
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0))
quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r4, &(0x7f0000000400))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000480)=0x252)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4)
r6 = eventfd2(0x0, 0x0)
io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6430, r2, &(0x7f0000000180)="7ba29ccf2bc1986c38f4eca2d642fbf9c1cca57af2a2498dca22f1689fd3d79511a2cbdf0aa17c9fd75b2d7639f3da28f789bf8a0bfd1cd06f6c5df582b5a808927fd2129f48a6891898fc75740bd920b94fdd617b219ef87771c2d056b7edd8a789f873546deb863072f12b995c42d8d897e42f27c0348fa28d443cda3824bf6878767a6c8a686bd52df58f343bbbbf1f2bf66a5353b57ae914869b0e6b8a0bbdbdd8060a9c5cec0205e46d237f6e948e1b060089a2a8c0a25ecd0fe2ecb3013ece97ad6df7fb98de53d2c987f31f035a155057889e6eaf2152b5", 0xdb, 0x8, 0x0, 0x3, r6}, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff2f, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0}}, @register_looper], 0x25, 0x0, 0x0})

342.448132ms ago: executing program 0 (id=589):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0x138)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000001800)=0x7fe, 0x4)
recvmsg(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x2)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6871205bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464c63ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r2, 0x98aa2000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r4 = socket(0x8, 0x1, 0x0)
sendmmsg$sock(r4, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x7, @local, 0x3}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x80, 0x0}}, {{&(0x7f0000000140)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="57a59c9467a34d8460d1a83d575cb384f9ef1366c015aa", 0x17}], 0x1}}, {{&(0x7f0000000440)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000002700)="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", 0x1000}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x556}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="1e9285ee60b7dc0b5c3ad87a0b1c901f62df71fe4fea1a00f9d19a9f7fe441a254ee0d4b6b7c0a67a21feea7b23eaf0aafaa76d7219fc9674e97556939727abe36ae6ac61ab024adae5cc6ec318c2f710355fe1b63e4c32104e539b0760a69dfd26e4bebcb17e84f4913562e9d88488cdf6b318e249184", 0x77}, {&(0x7f0000000700)="e7135f8ce5241c760f3817dd9196970efa22ceb45423a630ed57d5fab1c1f835e2110b4b4a572cc29f89349e9712c02e750e73b548443553ed957b31845066f46674607722ce3758663222157e7f4d60a7925748f51b", 0xffed}, {&(0x7f0000000780)="cb6fe64c08d7595f3c51a92505ffd78755955727f449c1faafb9456681f207b5cc813352837bf5849095b38bfcac4a18e8cd7a76543dc6abbb182c4271e983464e2e2664f418789845009ff98c7cb93c8f840a2a42db1a0e0449345c", 0x5c}, {&(0x7f00000004c0)="6789b647ffdeacfa2e0c1bf5a54650bcc4b120121191139367c0f1247d99e32ffaf901775b9bdd881919da24ec6082a49f", 0x31}, {&(0x7f0000000800)="1ccbdee1beaaa55d4aa82e8f15443e089e7c1957b2159ca2dfebb162366ae3c17eb00b559fb811dfa955332a3e0defb5b8a6cfd89e664bdeda8d874f2c0355f392af8ec2df1d71544950bd4d5f6d8378fd5dbb38c35bf6f997105ed66b13a472fe789e50874d977655908797e1eecd65804d1ede02ae41e9eac8c8390434ae5b30071c51338bc7ed7d61259fb2093cd9bc0bda41ff87b77cec2e98204fdebde38b4a22e809cf2a377e1301", 0xab}], 0x5, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0xffd}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xa8}}], 0x5, 0x2008080)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x4dd99000)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3)
connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r7 = epoll_create1(0x0)
epoll_pwait(r7, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000380)={[0x4]}, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000001024d38f19f0000000000000200000824000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x40000081}, 0x20004010)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

137.878829ms ago: executing program 1 (id=591):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x5f875000) (async)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001040)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

137.272359ms ago: executing program 1 (id=592):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f00005c8000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x7e81c000)
r1 = socket(0xa, 0x3, 0x87)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private0, 0x18, r3})
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000))
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x180)
close(r4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYRES64=r1])
lseek(r6, 0x0, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r10)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r12, 0x1, 0x22, 0x0, &(0x7f0000000680))
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c83168f2199f86e8d539a6e9f2820000000", @ANYRES16=r11, @ANYBLOB="05000000004000000000220000000a0001007770616e31000000"], 0x20}}, 0x2008c0d4)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

132.856849ms ago: executing program 1 (id=593):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"})
close_range(r0, 0xffffffffffffffff, 0x0)

118.80942ms ago: executing program 1 (id=594):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000002900000325bd70dffcdbdf251e000000a06da9dd5d08073a19963d425f640f71ce9a8bdc8a61607b927dff56c44aa0df3e5ff569d279f32ce7ad855ba7e404bf07b3bd8c614ce63c677095ad0446ed454c4365ef33a2e8c1dc3d6747bf8b550559afb923b646672512a9c63feaba944860a6921d68fef1bc5acf8acd6034f39d33722fbb7ad112a859"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r1 = fsopen(&(0x7f00000001c0)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r3 = getpid()
syz_pidfd_open(r3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x4, 0x8, 0x58, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x20, 0x8, 0xdfb, 0x7}})
setns(0xffffffffffffffff, 0x4000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
splice(r6, 0x0, r5, 0x0, 0x7, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
read$FUSE(r9, 0x0, 0x0)
r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r11, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008094)
setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
close(r8)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e4010000c864fa11060e1f7f58a35719697b49c2926f1950b89aef0894b48af07c61274830f5809dde6fd9d9cb3427b7db857e3528d8ba881ffce8b2f55102810000000028e581d1bd1a03bcf438e4433ee5e840a0c19be24f3c4204834963431cbbe8482a95df944d19fe4d263a91b65cd9c08c84c8cf65a85c5073b8941470c3", @ANYRES16=r7, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000004)

65.409205ms ago: executing program 1 (id=595):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x400, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r1)
getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f00007d0000))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2})

10.090289ms ago: executing program 1 (id=596):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xff3b}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x25, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5aed}]}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
fcntl$addseals(r6, 0x409, 0x8)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
mprotect(&(0x7f0000704000/0x4000)=nil, 0x4000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = socket$packet(0x11, 0x1, 0x300)
setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000180)=0x5, 0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004d9000/0x2000)=nil, 0x2000}})
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x0, 0xd, 0x61, "49fb15c6945cc742a9d066f0e615a6f8d02ba94d9a63606168e42cef7342bb57bd7867db11fe71980022a7c0a28c1c24ea5fb9812d500b475dc39e195274c49e236893abbfd37a4a8d1dcace2fea21a88a87e270b03cd192cf84e8a8eb7dad153b"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x3}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "7f0f2051719e679d6022cab832b8e8077d51687a3c1c525733468e89f5b9774129abb31c99bdb6464d3685c97b26fc"}})
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)

0s ago: executing program 0 (id=597):
r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000640)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)='/]}$\x00', 0xfffffffffffffffa)
keyctl$instantiate_iov(0x14, r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="c7fea04c2a65bd87c51919db72513d7d66fec04c6c4157aff52fd4b48003a2ae8088c62a4a697595181d85c1ef6634b15113a64323106d60575bb69cebdc4dfcaaf142f1eda685eedee18842c7c3d050f8e36970b94b3f6ad9223b81175ed10b1ed29460783f1828a551906e7d4210a8a8e2111443d448a9b63542c08aa06804047405de43b5cc91d11ab99ccd0c2d1c5b09f5849d7f3486a25545936f3b3b12a2039bf55d1063fb9bb03339dfa34c42807321d896cb11a4d6df1018dc1c16197ac95f28880d76", 0xc7}, {&(0x7f0000000200)="e2fca44f688634545acffdbb1ca3df2e5d1730a6dccdef6b007dd99deec30f4b226b0d13d0a94acb4b868f9574d536b81c34f215598615a5d36ed7202e1aa4515f3271b3ae266a1bf46869c899e40459a76c447366ad6c2606c73208e73084d60712a8ac9a6d085d", 0x68}, {&(0x7f0000000280)="5a6b0bd85e6ac902ed8ccfc03300d9fa0abe70608f0c8a", 0x17}, {&(0x7f00000002c0)="f7f826d44d0feda9d0af8eafc92865276a098bf7bb742b06bf57c88a87d68e823835b32d427e40f7d34a918a9e1397816f8440eb5c5c9f959d0fc9e69cc582f343bf7ff2bcdfcbaf5d84f30555d403bdab818ea9a05d72e489316e4885db357349419c42e3917931d5b1f0a504cc7aa817e199ac0848ca65132174f729bc32700dd58a1acb4944723ec87d1cc71ab4f3473d9f3757204872f8b736b5500d76c1ec5b617b1dcfc7019958ec57b9d1edb7ce045f5244667f7b2153a8d2c483f113b839f1b112adad59431a2a8628877c2206a872e46163fefa266a14ed0697", 0xde}, {&(0x7f00000003c0)="df76cb5bf6728eb4292e9a03647064c4606721ca9556b094319cf39514a9816f82dadafc582e2c7464e410841dd0aea5f59872feb2cc756eeac86a211b65e28d69cad763fccbdafcee2c7d0a8a793c02c1fbdd77abf4d50ff0cf5279044849d2822b840e6cc900ecf9c565d278127f9d340170e06364b98d3e0c36cc19a554b68eebfe62eb9ddcbeac6cef5fe4ac40921bd5fcba22a9a1d627425e2247dd2351f9f2aef0dc90731c49643482c92436", 0xaf}, {&(0x7f0000000480)="695d8016d544588119ead447d14f513223d4d754ce154dfdca248c488864eff657d92e33c39d498c25365d1e3037422637e8107824520064c0aee19a0a8e8299193a1f23925cacfc262a78f003575a0342e21c7fa2d955c72c1ead7369191ae0f4a4f9e4369d004b99a7163519af8faceeb05f0a2ce74c4dd0e6ab6e2f97145648b11c8648d1c6c3168238ccf718c1ea00dcc64cb079c79134ae9581134fb470910a6ce4fc5fd2f53e26b725e64560e86df5d21600ae6e5a9855679017090683057e192a3a607c064f89b9560a77c4084f7fcd0c35691ceed65e", 0xda}, {&(0x7f0000000580)="5d4186a7738df25c338636f4c6ee66e5", 0x10}], 0x7, r1)
pipe2$watch_queue(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x62)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/cpu_byteorder', 0x440, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000780)={0x10000000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r5=>0xffffffffffffffff})
pwritev2(r4, &(0x7f0000000940)=[{&(0x7f0000000800)="39946f5fc57b96fec46cfa7d8e8957056b95cd041d0fe2f1", 0x18}, {&(0x7f0000000840)="2c7f8f1f1154d8be266988c668f65e75ca62fc4cec9efe5bd3a08ba54b64dbc1731b8eb598cc4bbf30f3c67fcc887cfb98258d6cf8a3961be947ac81b2034b82ab314a61f0adfee9ff9ae3e07f5dac469f9f448d8b6d5a67fc00103606014c427b1f328610f1c415cd7a2819eaa43e68ee4b6004417e3f2a69a67223c1c26fd1296dbbbb2be4ba039bcfd316f3bcd48f5e28484b02780d845a9cf76354fbace2bdb1666d2aef934248813edc5dbe1f23798a6d73f667529a93ad9efdedfb92f43630b7ec11d8cfd4562f047fdf0a102692d4a9fb7a57a218c629bb", 0xdb}], 0x2, 0x4, 0xd, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x80000, 0x0)
r6 = add_key(&(0x7f00000009c0)='ceph\x00', &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000a40)="8e6289c505464447ca02cc532d2de450cef2eee24ca903a201881af1d2765f2277658e02b32ea3cd8768e37d9ac8e3bad3463fb4d84bd3ba23c56cb298987127140fd8b0cb79f39b31120d7869f77e1b489b1b2e8014f02c929ce4f41765635a0fc43a5280beea1113cd4efcbc43b16735a572d76481ebba2357883bc7c1409e2af8a42670c98edf1993d96f7f97c754109275d20ca152d8940ce70eefdb2e98d5bbcf17fc1ea547e32207e24cd99f", 0xaf, 0xffffffffffffffff)
keyctl$search(0xa, r6, &(0x7f0000000b00)='rxrpc_s\x00', &(0x7f0000000b40)={'syz', 0x0}, r1)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000b80)={'syzkaller0\x00'})
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000bc0)=0x312)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = request_key(&(0x7f0000000c00)='syzkaller\x00', &(0x7f0000000c40)={'syz', 0x2}, &(0x7f0000000c80)='\\,@(\xf9\'\'\x00', r6)
keyctl$negate(0xd, r7, 0x8000, r6)
keyctl$revoke(0x3, r0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000)
r8 = add_key$user(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x1}, &(0x7f0000000d40)="54e2d17f8fc0ea4121f07792a9dddccedb5be5ef61ee3af8f9178f6f2059429809da5923f111ae5714b250f80e1f0df20b643575ee8fc1184bf84a338064a3cb2a01b7429f522160552e3941c1148e6d1c4a41e2651584a0caf9b8010f7b756cf082d136415286ae3468ba063022cc170c55ab482f6483017e60", 0x7a, r7)
keyctl$read(0xb, r8, &(0x7f0000000dc0)=""/199, 0xc7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000ec0)={'wg1\x00', <r9=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000f00)={@empty, @multicast2, r9}, 0xc)
r10 = inotify_init1(0x0)
clock_gettime(0x0, &(0x7f0000000f80)={<r11=>0x0, <r12=>0x0})
ppoll(&(0x7f0000000f40)=[{r2, 0x210}, {r5, 0x80}, {r10, 0xc088}], 0x3, &(0x7f0000000fc0)={r11, r12+10000000}, &(0x7f0000001000)={[0xffffffff]}, 0x8)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, &(0x7f0000001040)={0xe0, 0x23, 0x29, {0x29, 0xf, "10d23b96d9ec9e596b2989fb05cc9072353def9ee5247dae52eabad27c42491a71e00861b87c54"}}, &(0x7f0000001080)={0x0, 0x3, 0x51, @string={0x51, 0x3, "e541531d3dfc895d1d146d1b366aec118e787e4082a38a011d6879972c21c6b3e59555a168d57f0982c64a13c91a6108562ffb849f7fff6c62154b51573ad543ef69a0f2ecdbdd3d289414f76dedb6"}}}, &(0x7f00000013c0)={0x34, &(0x7f0000001140)={0x60, 0x1e, 0x4e, "4957a65e976013f57392258d90a7032fdf82f9174c8431ede51fde7ad6c35dd0b065646c84fe4fd98294e9650928d4fb61d51d7ba6c78009068947886c5d70cbe31589776380670972be42dc45b9"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001240)={0x20, 0x0, 0xf5, {0xf3, "3304b15bfbba2d9065dc9980884e537cfc94099e96b542d45cf8f9344612af91d27064b43d99940caa490fec26f63fbb6346a7dd422ad57893af5462ad60d60563b740057fca8e7e9f6287879d4d74afee3793560858446cbefd1815ba45330080c1c4669c35296f8f4198f00f130c9c49ae457a60d6f804cefbf1791c6759cb5f0e5fd5677e1b211f5190cae5bf310de2f7962f79d95ad10dee80d810cf394ba1f6b1541f5500e26de3a84f4745e8b50e70b53111e4da33ba21728d606178e0a60b403e80d57f3e493810e8244d21dce14f1e276c380b9979927bf8775d604a9fb6001ea7859a0d63d34bd8ac804af32edf5c"}}, &(0x7f0000001340)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000001380)={0x20, 0x0, 0x1, 0x80}})
close_range(r5, r5, 0x2)
recvmmsg(r4, &(0x7f0000002540)=[{{&(0x7f0000001400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f00000014c0)=""/37, 0x25}], 0x2, &(0x7f0000001540)=""/4096, 0x1000}, 0x5}], 0x1, 0x2002, &(0x7f0000002580)={0x77359400})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts.
[   21.819297][   T36] audit: type=1400 audit(1756549562.020:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.820705][  T281] cgroup: Unknown subsys name 'net'
[   21.842049][   T36] audit: type=1400 audit(1756549562.020:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.869626][   T36] audit: type=1400 audit(1756549562.050:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.869807][  T281] cgroup: Unknown subsys name 'devices'
[   22.056852][  T281] cgroup: Unknown subsys name 'hugetlb'
[   22.062599][  T281] cgroup: Unknown subsys name 'rlimit'
[   22.238690][   T36] audit: type=1400 audit(1756549562.440:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.261898][   T36] audit: type=1400 audit(1756549562.440:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.276727][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.286996][   T36] audit: type=1400 audit(1756549562.440:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.317549][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.318343][   T36] audit: type=1400 audit(1756549562.500:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.352544][   T36] audit: type=1400 audit(1756549562.500:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.378291][   T36] audit: type=1400 audit(1756549562.520:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.403870][   T36] audit: type=1400 audit(1756549562.520:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.198504][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.205619][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.212809][  T290] bridge_slave_0: entered allmulticast mode
[   23.219179][  T290] bridge_slave_0: entered promiscuous mode
[   23.235489][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.242547][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.249702][  T290] bridge_slave_1: entered allmulticast mode
[   23.255980][  T290] bridge_slave_1: entered promiscuous mode
[   23.261993][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.269206][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.276322][  T291] bridge_slave_0: entered allmulticast mode
[   23.282551][  T291] bridge_slave_0: entered promiscuous mode
[   23.297729][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.304796][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.311856][  T291] bridge_slave_1: entered allmulticast mode
[   23.318295][  T291] bridge_slave_1: entered promiscuous mode
[   23.341877][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.348980][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.356089][  T288] bridge_slave_0: entered allmulticast mode
[   23.362415][  T288] bridge_slave_0: entered promiscuous mode
[   23.377248][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.384334][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.391410][  T288] bridge_slave_1: entered allmulticast mode
[   23.397846][  T288] bridge_slave_1: entered promiscuous mode
[   23.424078][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.431196][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.438315][  T289] bridge_slave_0: entered allmulticast mode
[   23.444581][  T289] bridge_slave_0: entered promiscuous mode
[   23.461664][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.468752][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.476212][  T289] bridge_slave_1: entered allmulticast mode
[   23.482585][  T289] bridge_slave_1: entered promiscuous mode
[   23.646063][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.653119][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.660510][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.667598][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.683293][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.690385][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.697705][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.704773][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.715155][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.722204][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.729508][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.736595][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.754527][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.761607][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.769147][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.776212][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.816016][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.823223][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.831188][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.838618][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.845903][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.853100][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.877751][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.884827][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.892611][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.899755][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.910937][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.918020][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.931987][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.939112][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.947070][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.954244][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.975799][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.982870][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.033792][  T291] veth0_vlan: entered promiscuous mode
[   24.040322][  T289] veth0_vlan: entered promiscuous mode
[   24.048220][  T290] veth0_vlan: entered promiscuous mode
[   24.071798][  T290] veth1_macvtap: entered promiscuous mode
[   24.081094][  T291] veth1_macvtap: entered promiscuous mode
[   24.091938][  T289] veth1_macvtap: entered promiscuous mode
[   24.109824][  T288] veth0_vlan: entered promiscuous mode
[   24.139035][  T288] veth1_macvtap: entered promiscuous mode
[   24.151437][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.209712][  T332] fuse: Unknown parameter '0x0000000000000007'
[   24.262496][  T339] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1'.
[   24.274620][  T344] mmap: syz.1.5 (344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   24.286518][  T344] usb usb8: usbfs: process 344 (syz.1.5) did not claim interface 0 before use
[   24.301615][  T344] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   24.353552][  T353] rust_binder: 344 RLIMIT_NICE not set
[   24.362823][  T330] rust_binder: 342: removing orphan mapping 0:4256
[   24.440899][  T365] Zero length message leads to an empty skb
[   24.483742][  T367] rust_binder: Error while translating object.
[   24.483850][  T367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.490387][  T367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[   24.591471][  T371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.664393][  T372] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure
[   24.679155][  T371] incfs: Error accessing: /dev/nbd1.
[   24.684656][  T371] incfs: mount failed -2
[   24.721893][  T374] mmap: syz.1.15 (374): VmData 29007872 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[   24.736554][  T374] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.861753][  T376] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588)
[   24.861774][  T376] rust_binder: Error while translating object.
[   24.874033][  T376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.880320][  T376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[   25.139493][  T387] rust_binder: Failed to allocate buffer. len:18446744073709551408, is_oneway:false
[   25.148705][  T387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   25.179396][  T387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:6
[   25.280471][  T399] rust_binder: Error while translating object.
[   25.289688][  T399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   25.299978][  T399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10
[   25.303493][  T401] exFAT-fs (rnullb0): invalid boot record signature
[   25.325210][  T401] exFAT-fs (rnullb0): failed to read boot sector
[   25.331572][  T401] exFAT-fs (rnullb0): failed to recognize exfat type
[   25.421153][  T408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   25.430530][  T408] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   25.430555][  T408] rust_binder: Read failure Err(EFAULT) in pid:18
[   25.504281][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.644291][   T31] usb 4-1: device descriptor read/64, error -71
[   25.734428][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   25.758927][  T422] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   25.779486][  T424] loop7: detected capacity change from 0 to 16384
[   25.794448][   T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.885497][   T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.903152][   T10] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   25.905209][   T31] usb 4-1: device descriptor read/64, error -71
[   25.930957][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   25.941286][   T10] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[   25.951966][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.972414][   T63] usb 2-1: Using ep0 maxpacket: 32
[   25.985605][  T434] netlink: 'syz.0.35': attribute type 46 has an invalid length.
[   25.995234][   T63] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   25.997307][  T434] netlink: 'syz.0.35': attribute type 46 has an invalid length.
[   26.007647][   T10] usb 3-1: config 0 descriptor??
[   26.020845][   T63] usb 2-1: config 0 has no interface number 0
[   26.027825][   T63] usb 2-1: config 0 interface 184 has no altsetting 0
[   26.042101][  T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   26.047675][   T63] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   26.078247][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.086967][   T63] usb 2-1: Product: syz
[   26.091205][   T63] usb 2-1: Manufacturer: syz
[   26.100953][   T63] usb 2-1: SerialNumber: syz
[   26.107899][   T63] usb 2-1: config 0 descriptor??
[   26.118346][   T63] smsc75xx v1.0.0
[   26.136926][  T454] rust_binder: Write failure EINVAL in pid:56
[   26.137221][  T455] rust_binder: Write failure EINVAL in pid:56
[   26.144485][  T453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'.
[   26.176269][  T457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.194307][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   26.317139][   T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   26.324270][   T31] usb 4-1: device descriptor read/64, error -71
[   26.328096][   T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   26.344021][   T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   26.354818][   T63] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32
[   26.439058][   T10] uclogic 0003:2179:0053.0001: interface is invalid, ignoring
[   26.539215][   T10] usb 2-1: USB disconnect, device number 2
[   26.644281][   T31] usb 4-1: device descriptor read/64, error -71
[   26.721283][   T45] usb 3-1: USB disconnect, device number 2
[   26.774322][   T31] usb usb4-port1: attempt power cycle
[   26.835334][  T489] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.835733][   T36] kauditd_printk_skb: 109 callbacks suppressed
[   26.835745][   T36] audit: type=1400 audit(1756549567.040:183): avc:  denied  { mounton } for  pid=488 comm="syz.0.51" path="/27/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   27.114235][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   27.134367][   T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   27.155301][   T31] usb 4-1: device descriptor read/8, error -71
[   27.265480][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.276454][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.288079][   T10] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[   27.295457][   T31] usb 4-1: device descriptor read/8, error -71
[   27.298349][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.311528][   T10] usb 1-1: Product: syz
[   27.315788][   T10] usb 1-1: Manufacturer: syz
[   27.320432][   T10] usb 1-1: SerialNumber: syz
[   27.325842][   T10] usb 1-1: config 0 descriptor??
[   27.331683][   T10] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[   27.338301][   T10] usb 1-1: No valid video chain found.
[   27.534334][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   27.556070][   T31] usb 4-1: device descriptor read/8, error -71
[   27.585067][   T36] audit: type=1400 audit(1756549567.790:184): avc:  denied  { ioctl } for  pid=499 comm="syz.0.53" path="socket:[4671]" dev="sockfs" ino=4671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.609415][   T36] audit: type=1400 audit(1756549567.790:185): avc:  denied  { bind } for  pid=499 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.638532][   T36] audit: type=1400 audit(1756549567.790:186): avc:  denied  { setopt } for  pid=499 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.658362][  T505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.664440][   T36] audit: type=1400 audit(1756549567.790:187): avc:  denied  { write } for  pid=499 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.667353][  T505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.698555][   T31] usb 4-1: device descriptor read/8, error -71
[   27.716905][  T507] rust_binder: Write failure EFAULT in pid:50
[   27.746536][   T36] audit: type=1400 audit(1756549567.950:188): avc:  denied  { execute } for  pid=508 comm="syz.2.56" name="file1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.746566][  T509] process 'syz.2.56' launched './file1' with NULL argv: empty string added
[   27.784125][   T36] audit: type=1400 audit(1756549567.980:189): avc:  denied  { execute_no_trans } for  pid=508 comm="syz.2.56" path="/5/file1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.812019][  T500] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0
[   27.812049][  T500] rust_binder: Error while translating object.
[   27.814387][   T31] usb usb4-port1: unable to enumerate USB device
[   27.821121][  T500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.852522][  T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84
[   27.871371][   T36] audit: type=1400 audit(1756549568.060:190): avc:  denied  { create } for  pid=512 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   27.913901][  T521] tmpfs: Bad value for 'gid'
[   27.919301][   T36] audit: type=1400 audit(1756549568.060:191): avc:  denied  { write } for  pid=512 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   27.930062][  T521] tmpfs: Bad value for 'gid'
[   27.951540][   T36] audit: type=1400 audit(1756549568.070:192): avc:  denied  { getattr } for  pid=512 comm="syz.1.57" path="socket:[6470]" dev="sockfs" ino=6470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   28.004757][  T525] fuse: Bad value for 'fd'
[   28.057493][  T534] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610)
[   28.057522][  T534] rust_binder: Error while translating object.
[   28.069952][  T534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.076719][  T534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31
[   28.399895][  T564] FAT-fs (rnullb0): bogus number of reserved sectors
[   28.416071][  T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   28.486179][  T572] rust_binder: Error while translating object.
[   28.486216][  T572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   28.492641][  T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:49
[   28.502917][  T572] sit0: entered promiscuous mode
[   28.519255][  T572] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[   28.529571][  T572] netlink: 1 bytes leftover after parsing attributes in process `syz.2.77'.
[   28.545471][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   29.560619][  T578] rust_binder: Write failure EINVAL in pid:26
[   29.864306][  T598] usb usb8: selecting invalid altsetting 6
[   29.901572][   T10] usb 1-1: USB disconnect, device number 2
[   29.925877][  T605] rust_binder: Error in use_page_slow: ESRCH
[   29.925901][  T605] rust_binder: use_range failure ESRCH
[   29.926709][  T606] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   29.932233][  T605] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[   29.945976][  T606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   29.946005][  T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:41
[   29.966700][  T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   29.981961][  T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:41
[   30.065361][  T624] binder: Unknown parameter 'fsmagic'
[   30.087800][  T634] capability: warning: `syz.3.99' uses 32-bit capabilities (legacy support in use)
[   30.114602][  T636] overlayfs: failed to resolve './file0': -2
[   30.139613][  T639] netlink: 228 bytes leftover after parsing attributes in process `syz.3.101'.
[   30.151679][  T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47
[   30.154568][  T640] pim6reg1: entered promiscuous mode
[   30.180648][  T640] pim6reg1: entered allmulticast mode
[   30.291778][  T662] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[   30.537004][  T676] kvm: pic: non byte read
[   30.541867][  T676] kvm: pic: level sensitive irq not supported
[   30.541927][  T676] kvm: pic: non byte read
[   30.542582][  T681] rust_binder: Error while translating object.
[   30.548430][  T676] kvm: pic: level sensitive irq not supported
[   30.552750][  T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.558920][  T676] kvm: pic: non byte read
[   30.565243][  T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118
[   30.574551][  T676] kvm: pic: level sensitive irq not supported
[   30.578866][  T573] Bluetooth: hci0: command 0x1003 tx timeout
[   30.587727][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   30.587894][  T676] kvm: pic: non byte read
[   30.618613][  T684] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.620563][  T684] rust_binder: Error while translating object.
[   30.627324][  T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   30.633543][  T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120
[   30.665127][  T688] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.676835][  T687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.685041][  T688] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.700886][  T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122
[   30.835437][  T704] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.123'.
[   31.055103][  T723] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[   31.178107][  T740] binder: Unknown parameter 'fscontext?}'
[   31.404276][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   31.434254][   T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   31.554941][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[   31.565937][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.575133][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.583128][   T10] usb 4-1: Product: 廰恻℗몁荲賶씉ꯣ쉃欤쫇꫕귇濉⟡✳쐺ꄮ㳍뵃鵨㔤⁩Ź䞉Ⅎ䡰閸ꎡܺ쒓ィシ킋渳넌୵匕㍬䝏ꑴ㨎᪊⛏ቌ箵ὐ隄锜擂厫ęӭ앃쵈赊ᘡ槢푴㭈
[   31.604041][   T63] usb 3-1: Using ep0 maxpacket: 8
[   31.609403][   T10] usb 4-1: Manufacturer: ၫ
[   31.614069][   T10] usb 4-1: SerialNumber: ⍿륬ꖨ艻큵芅퍎㛣℔⾏療显絊趱挑ᩔ蔦쭩忿쯯ၰ䄡嗘걡쩐哷ຝࡋ巈죮禎⤭쓘銈淁⸫沠שּׂ뫮亖
[   31.632573][   T63] usb 3-1: unable to get BOS descriptor or descriptor too short
[   31.641214][   T63] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   31.657129][   T63] usb 3-1: config 0 has no interface number 0
[   31.663657][   T63] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   31.672284][  T768] fuse: Bad value for 'fd'
[   31.675619][   T63] usb 3-1: config 0 interface 88 has no altsetting 0
[   31.688337][   T63] usb 3-1: string descriptor 0 read error: -22
[   31.696004][   T63] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   31.712491][   T63] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   31.723545][   T63] usb 3-1: config 0 descriptor??
[   31.732017][   T63] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4
[   31.771706][  T782] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.873689][  T785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153
[   31.933257][   T63] usb 3-1: USB disconnect, device number 3
[   32.042133][   T10] cdc_ncm 4-1:1.0: bind() failure
[   32.051879][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   32.058730][   T10] cdc_ncm 4-1:1.1: bind() failure
[   32.064907][   T10] usb 4-1: USB disconnect, device number 6
[   32.463666][   T36] kauditd_printk_skb: 60 callbacks suppressed
[   32.463684][   T36] audit: type=1400 audit(1756549572.660:253): avc:  denied  { connect } for  pid=787 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.489260][   T36] audit: type=1400 audit(1756549572.680:254): avc:  denied  { read } for  pid=787 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.506606][  T790] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   32.509436][   T36] audit: type=1400 audit(1756549572.680:255): avc:  denied  { shutdown } for  pid=787 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.576594][   T36] audit: type=1400 audit(1756549572.780:256): avc:  denied  { wake_alarm } for  pid=798 comm="syz.1.154" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   32.640028][   T36] audit: type=1400 audit(1756549572.840:257): avc:  denied  { setopt } for  pid=805 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.660116][  T809] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.665708][   T36] audit: type=1400 audit(1756549572.840:258): avc:  denied  { name_bind } for  pid=805 comm="syz.1.158" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   32.696838][   T36] audit: type=1400 audit(1756549572.870:259): avc:  denied  { getopt } for  pid=808 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.722716][  T809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157
[   32.774742][  T815] random: crng reseeded on system resumption
[   32.777589][   T36] audit: type=1400 audit(1756549572.980:260): avc:  denied  { write } for  pid=814 comm="syz.2.160" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.823502][   T36] audit: type=1400 audit(1756549572.980:261): avc:  denied  { open } for  pid=814 comm="syz.2.160" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.849663][  T818] rust_binder: Error while translating object.
[   32.849709][  T818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.852556][   T36] audit: type=1400 audit(1756549573.020:262): avc:  denied  { setattr } for  pid=814 comm="syz.2.160" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.873139][  T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[   32.918383][  T826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.164'.
[   33.123629][  T841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80
[   33.224778][  T862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   33.233982][  T862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:176
[   33.273947][  T870] rust_binder: Write failure EFAULT in pid:180
[   33.278315][  T872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=872 comm=syz.1.178
[   33.321313][  T874] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   33.328563][  T874] rust_binder: Write failure EINVAL in pid:182
[   33.334270][   T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   33.375447][  T883] 9p: Unknown access argument : -22
[   33.495299][   T63] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   33.504670][   T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.514103][   T63] usb 4-1: config 0 descriptor??
[   33.726100][   T63] usb 4-1: Cannot read MAC address
[   33.731350][   T63] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   33.762629][   T63] usb 4-1: USB disconnect, device number 7
[   33.774828][  T893] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   33.783990][  T893] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   33.793231][  T893] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   33.801489][  T893] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   33.836884][  T895] rust_binder: 86: no such ref 3
[   34.222566][  T928] netlink: 'syz.1.199': attribute type 16 has an invalid length.
[   34.230458][  T928] netlink: 'syz.1.199': attribute type 4 has an invalid length.
[   34.238373][  T928] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.199'.
[   34.272796][  T934] overlay: Unknown parameter 'smackfshat'
[   34.362129][  T952] netlink: 'syz.1.206': attribute type 3 has an invalid length.
[   34.371222][  T952] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   34.379584][  T952] overlayfs: missing 'lowerdir'
[   34.381499][  T955] netlink: 'syz.0.207': attribute type 4 has an invalid length.
[   34.392566][  T954] netlink: 'syz.0.207': attribute type 4 has an invalid length.
[   34.510928][  T978] rust_binder: Read failure Err(EAGAIN) in pid:209
[   34.511009][  T978] rust_binder: 209: no such ref 0
[   34.524214][  T978] rust_binder: 209: no such ref 3
[   34.529272][  T977] rust_binder: 209: no such ref 0
[   34.534425][  T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   34.534607][  T977] rust_binder: 209: no such ref 3
[   34.704232][  T330] usb 4-1: Using ep0 maxpacket: 8
[   34.710926][  T330] usb 4-1: unable to get BOS descriptor or descriptor too short
[   34.719515][  T330] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[   34.727670][  T330] usb 4-1: config 0 has no interface number 0
[   34.733793][  T330] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   34.744808][  T330] usb 4-1: config 0 interface 88 has no altsetting 0
[   34.753828][  T330] usb 4-1: string descriptor 0 read error: -22
[   34.760115][  T330] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   34.769214][  T330] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   34.778472][  T330] usb 4-1: config 0 descriptor??
[   34.785853][  T330] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6
[   34.985394][  T460] usb 4-1: USB disconnect, device number 8
[   35.576910][ T1018] rust_binder: Write failure EFAULT in pid:91
[   35.578494][ T1019] =======================================================
[   35.578494][ T1019] WARNING: The mand mount option has been deprecated and
[   35.578494][ T1019]          and is ignored by this kernel. Remove the mand
[   35.578494][ T1019]          option from the mount to silence this warning.
[   35.578494][ T1019] =======================================================
[   35.656841][ T1024] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false
[   35.758410][ T1026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer.
[   35.906256][ T1032] tmpfs: Bad value for 'huge'
[   35.923238][ T1035] batadv_slave_0: entered allmulticast mode
[   35.980318][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99
[   35.999037][ T1049] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[   36.034069][ T1052] overlayfs: failed to clone lowerpath
[   36.041231][ T1054] rust_binder: Error while translating object.
[   36.041265][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   36.048257][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   36.048422][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103
[   36.065920][ T1051] overlayfs: failed to clone lowerpath
[   36.118749][ T1065] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   36.133282][ T1065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'.
[   36.184958][ T1075] tipc: Can't bind to reserved service type 0
[   36.241870][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   36.262169][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[   36.278033][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.287833][   T10] usb 1-1: config 0 descriptor??
[   36.294824][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   36.374157][ T1098] exFAT-fs (rnullb0): invalid boot record signature
[   36.382575][ T1098] exFAT-fs (rnullb0): failed to read boot sector
[   36.393605][ T1098] exFAT-fs (rnullb0): failed to recognize exfat type
[   36.444130][ T1107] binder: Bad value for 'max'
[   36.523504][ T1113] x_tables: unsorted entry at hook 2
[   36.544845][ T1113] rust_binder: Error while translating object.
[   36.544878][ T1113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.551237][ T1113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[   36.576042][ T1115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.585304][ T1115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134
[   36.648056][ T1120] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   37.576355][ T1148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'.
[   37.587748][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.587778][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:153
[   37.613461][ T1156] Falling back ldisc for ptm0.
[   37.646998][ T1162] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   37.702421][ T1163] rust_binder: 1162 RLIMIT_NICE not set
[   37.708071][  T330] rust_binder: 1161: removing orphan mapping 0:4256
[   37.722602][   T36] kauditd_printk_skb: 43 callbacks suppressed
[   37.722619][   T36] audit: type=1400 audit(2000000000.112:306): avc:  denied  { getopt } for  pid=1164 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   37.758847][ T1169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.758882][ T1169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155
[   37.782712][   T36] audit: type=1400 audit(2000000000.168:307): avc:  denied  { ioctl } for  pid=1170 comm="syz.2.277" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.898449][  T985] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   37.912151][   T36] audit: type=1400 audit(2000000000.289:308): avc:  denied  { map } for  pid=1174 comm="syz.2.279" path="socket:[9648]" dev="sockfs" ino=9648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   38.035723][ T1179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165
[   38.056938][ T1181] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   38.058835][  T985] usb 4-1: Using ep0 maxpacket: 16
[   38.081173][  T985] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   38.091492][  T985] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.102440][  T985] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.112196][  T985] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   38.125068][  T985] usb 4-1: config 7 interface 0 has no altsetting 0
[   38.131706][  T985] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   38.140778][  T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.256187][ T1187] netlink: 'syz.1.283': attribute type 64 has an invalid length.
[   38.264413][ T1187] netlink: 5 bytes leftover after parsing attributes in process `syz.1.283'.
[   38.579665][  T985] usbhid 4-1:7.0: can't add hid device: -71
[   38.586265][  T985] usbhid 4-1:7.0: probe with driver usbhid failed with error -71
[   38.595471][  T985] usb 4-1: USB disconnect, device number 9
[   38.827466][ T1198] x_tables: duplicate entry at hook 2
[   38.893512][  T330] usb 1-1: USB disconnect, device number 3
[   38.912278][ T1210] 9pnet: Unknown protocol version =p2000.L
[   39.011712][ T1212] /dev/rnullb0: Can't open blockdev
[   39.016445][ T1214] rust_binder: Write failure EFAULT in pid:182
[   39.087494][   T36] audit: type=1400 audit(2000000001.383:309): avc:  denied  { write } for  pid=1227 comm="syz.0.299" name="file2" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.097491][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.116107][   T36] audit: type=1400 audit(2000000001.383:310): avc:  denied  { open } for  pid=1227 comm="syz.0.299" path="/73/file2" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.121559][ T1228] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   39.145338][ T1228] rust_binder: Read failure Err(EFAULT) in pid:231
[   39.145544][   T36] audit: type=1400 audit(2000000001.383:311): avc:  denied  { ioctl } for  pid=1227 comm="syz.0.299" path="/73/file2" dev="tmpfs" ino=409 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   39.184773][   T36] audit: type=1400 audit(2000000001.383:312): avc:  denied  { create } for  pid=1227 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   39.267199][   T36] audit: type=1400 audit(2000000001.552:313): avc:  denied  { read } for  pid=1241 comm="syz.0.305" name="file0" dev="incremental-fs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.291191][   T36] audit: type=1400 audit(2000000001.552:314): avc:  denied  { open } for  pid=1241 comm="syz.0.305" path="/76/file0/file0" dev="incremental-fs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.292263][ T1243] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=31769 sclass=netlink_xfrm_socket pid=1243 comm=syz.2.304
[   39.324580][   T36] audit: type=1400 audit(2000000001.552:315): avc:  denied  { write } for  pid=1241 comm="syz.0.305" path="/76/file0/file0" dev="incremental-fs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.360937][ T1248] rust_binder: Write failure EINVAL in pid:201
[   39.405531][ T1254] fuse: Bad value for 'fd'
[   39.413901][ T1257] SELinux:  Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped).
[   39.503691][ T1259] loop7: detected capacity change from 16384 to 16383
[   47.805019][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   47.805040][   T36] audit: type=1400 audit(2000000009.537:320): avc:  denied  { lock } for  pid=1263 comm="syz.0.311" path="socket:[9876]" dev="sockfs" ino=9876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   47.805564][ T1265] netlink: 'syz.0.311': attribute type 16 has an invalid length.
[   47.811877][   T36] audit: type=1400 audit(2000000009.537:321): avc:  denied  { create } for  pid=1266 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   47.879101][   T36] audit: type=1400 audit(2000000009.584:322): avc:  denied  { sys_admin } for  pid=1266 comm="syz.3.314" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   47.929887][   T36] audit: type=1400 audit(2000000009.649:323): avc:  denied  { execute } for  pid=1274 comm="syz.0.315" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   47.983719][ T1279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.983761][ T1279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212
[   48.085962][   T36] audit: type=1400 audit(2000000009.799:324): avc:  denied  { bind } for  pid=1282 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.114456][   T36] audit: type=1400 audit(2000000009.799:325): avc:  denied  { name_bind } for  pid=1282 comm="syz.2.317" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   48.135272][   T36] audit: type=1400 audit(2000000009.799:326): avc:  denied  { node_bind } for  pid=1282 comm="syz.2.317" saddr=fe88::103 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   48.183192][   T36] audit: type=1400 audit(2000000009.883:327): avc:  denied  { mount } for  pid=1284 comm="syz.0.318" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   48.205148][   T36] audit: type=1400 audit(2000000009.883:328): avc:  denied  { ioctl } for  pid=1284 comm="syz.0.318" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   48.297021][   T36] audit: type=1400 audit(2000000009.995:329): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   48.416117][ T1299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169
[   48.485166][ T1306] rust_binder: Failed to allocate buffer. len:224, is_oneway:false
[   48.527261][ T1312] rust_binder: Write failure EFAULT in pid:177
[   48.544148][ T1314] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.550600][   T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   48.576518][ T1314] rust_binder: Write failure EFAULT in pid:263
[   48.607646][ T1323] /dev/rnullb0: Can't open blockdev
[   48.712630][   T63] usb 3-1: device descriptor read/64, error -71
[   48.772235][ T1357] __vm_enough_memory: pid: 1357, comm: syz.0.340, bytes: 18014402804453376 not enough memory for the allocation
[   48.866267][ T1366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'.
[   48.875385][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   48.977956][   T63] usb 3-1: device descriptor read/64, error -71
[   49.043314][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.054494][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   49.067853][   T31] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[   49.077193][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.086430][   T31] usb 4-1: config 0 descriptor??
[   49.245331][   T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   49.395058][   T63] usb 3-1: device descriptor read/64, error -71
[   49.524917][   T31] elecom 0003:056E:00FC.0002: unknown main item tag 0x0
[   49.532545][   T31] elecom 0003:056E:00FC.0002: unknown main item tag 0x0
[   49.539760][   T31] elecom 0003:056E:00FC.0002: unknown main item tag 0x0
[   49.547154][   T31] elecom 0003:056E:00FC.0002: unknown main item tag 0x0
[   49.554306][   T31] elecom 0003:056E:00FC.0002: unknown main item tag 0x0
[   49.569547][   T31] elecom 0003:056E:00FC.0002: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0
[   49.662419][   T63] usb 3-1: device descriptor read/64, error -71
[   49.737657][    T9] usb 4-1: USB disconnect, device number 10
[   49.780208][   T63] usb usb3-port1: attempt power cycle
[   49.843617][ T1396] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[   49.852040][ T1396] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   49.859801][ T1396] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.357'.
[   49.958028][ T1403] fuse: Unknown parameter '000000000000000000000050x0000000000000005'
[   49.979032][ T1405] rust_binder: Error while translating object.
[   49.979078][ T1405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   49.985398][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292
[   50.107352][ T1411] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.154411][   T63] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   50.188061][   T63] usb 3-1: device descriptor read/8, error -71
[   50.250901][ T1428] tipc: Started in network mode
[   50.255859][ T1428] tipc: Node identity 423e85b9eae2, cluster identity 4711
[   50.263139][ T1428] tipc: Enabled bearer <eth:xfrm0>, priority 10
[   50.289738][ T1435] futex_wake_op: syz.1.372 tries to shift op by 144; fix this program
[   50.311047][ T1437] binder: Unknown parameter 'fscontext?}'
[   50.326564][   T63] usb 3-1: device descriptor read/8, error -71
[   50.380481][ T1449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:309
[   50.438072][ T1461] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[   50.476048][ T1462] __vm_enough_memory: pid: 1462, comm: syz.0.380, bytes: 18014402804453376 not enough memory for the allocation
[   50.582135][  T985] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   50.603535][   T63] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   50.636706][   T63] usb 3-1: device descriptor read/8, error -71
[   50.743709][  T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   50.763359][  T985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.776660][  T985] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[   50.777885][   T63] usb 3-1: device descriptor read/8, error -71
[   50.786047][  T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.801812][  T985] usb 4-1: config 0 descriptor??
[   50.814175][ T1442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   50.913898][   T63] usb usb3-port1: unable to enumerate USB device
[   51.038506][ T1519] binder: Unknown parameter 'context�'
[   51.044557][  T985] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0
[   51.174368][ T1525] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   51.174394][ T1525] rust_binder: Read failure Err(EFAULT) in pid:321
[   51.174429][ T1526] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   51.189087][ T1526] rust_binder: Read failure Err(EFAULT) in pid:321
[   51.229820][ T1530] 9pnet_fd: Insufficient options for proto=fd
[   51.255916][  T985] playstation 0003:054C:0BA0.0003: Failed to retrieve feature with reportID 18: -71
[   51.265381][  T985] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -71
[   51.274842][  T985] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4
[   51.283662][  T985] playstation 0003:054C:0BA0.0003: Failed to create dualshock4.
[   51.291979][  T985] playstation 0003:054C:0BA0.0003: probe with driver playstation failed with error -71
[   51.303090][  T985] usb 4-1: USB disconnect, device number 11
[   51.459170][   T63] tipc: Node number set to 2833024441
[   51.498184][ T1533] rust_binder: Error while translating object.
[   51.498242][ T1533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.504691][ T1533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328
[   51.559412][ T1539] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   51.594801][ T1539] exFAT-fs (rnullb0): invalid boot record signature
[   51.601632][ T1539] exFAT-fs (rnullb0): failed to read boot sector
[   51.608043][ T1539] exFAT-fs (rnullb0): failed to recognize exfat type
[   51.865175][ T1581] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   51.894150][ T1585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.902289][ T1585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249
[   51.924986][ T1589] netlink: 428 bytes leftover after parsing attributes in process `syz.2.424'.
[   51.959293][ T1592] netlink: 'syz.2.425': attribute type 4 has an invalid length.
[   51.967845][ T1593] netlink: 'syz.2.425': attribute type 4 has an invalid length.
[   51.977992][ T1594] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   52.100770][  T985] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   52.181403][ T1609] binder: Unknown parameter 'ma'
[   52.264287][  T985] usb 4-1: Using ep0 maxpacket: 16
[   52.271452][  T985] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024
[   52.281680][  T985] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16
[   52.291624][  T985] usb 4-1: config 1 interface 0 has no altsetting 0
[   52.300040][  T985] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   52.325326][  T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.333784][  T985] usb 4-1: Product: syz
[   52.338577][  T985] usb 4-1: Manufacturer: ⶖ燋ᾶ鏶꽀㩬궖傤ྖ쮙ꖇ緈볓䒈揫ꈂμ䳗邫혰勍泌쾒뿧䰐̎蚂↜⯛⋳션谾Ｕ漚玆ꍮÇ㣩獻챭꼪쇦쉔Ử兲
[   52.356730][  T985] usb 4-1: SerialNumber: syz
[   52.376580][ T1575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   52.388487][ T1575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   52.402921][ T1631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1631 comm=syz.0.439
[   52.423359][ T1631] 9pnet_fd: Insufficient options for proto=fd
[   52.466656][ T1640] rust_binder: 346: no such ref 0
[   52.534098][ T1651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'.
[   52.582262][ T1662] syz.2.450 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   52.629387][  T985] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[   52.640054][  T985] usb 4-1: USB disconnect, device number 12
[   53.126742][ T1668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.451'.
[   53.184331][ T1670] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588)
[   53.184352][ T1670] rust_binder: Error while translating object.
[   53.196874][ T1670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.203262][ T1670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192
[   53.213908][ T1673] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.514955][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   53.514976][   T36] audit: type=1400 audit(2000000014.876:361): avc:  denied  { ioctl } for  pid=1678 comm="syz.2.454" path="socket:[13363]" dev="sockfs" ino=13363 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   53.552386][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   53.625171][   T36] audit: type=1400 audit(2000000014.979:362): avc:  denied  { read } for  pid=1695 comm="syz.2.459" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   53.649302][   T36] audit: type=1400 audit(2000000014.979:363): avc:  denied  { open } for  pid=1695 comm="syz.2.459" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   53.673539][   T36] audit: type=1400 audit(2000000014.998:364): avc:  denied  { ioctl } for  pid=1695 comm="syz.2.459" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   53.699016][   T36] audit: type=1400 audit(2000000014.998:365): avc:  denied  { write } for  pid=1695 comm="syz.2.459" name="xfrm_stat" dev="proc" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   53.722108][   T10] usb 4-1: Using ep0 maxpacket: 8
[   53.728694][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[   53.739627][   T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[   53.748125][   T10] usb 4-1: config 0 has no interface number 0
[   53.754339][ T1698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.754364][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369
[   53.763905][   T10] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   53.785349][   T10] usb 4-1: config 0 interface 88 has no altsetting 0
[   53.794155][   T10] usb 4-1: string descriptor 0 read error: -22
[   53.800374][   T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   53.809475][   T10] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   53.818298][   T10] usb 4-1: config 0 descriptor??
[   53.825354][   T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input7
[   53.843056][ T1272] udevd[1272]: Unable to EVIOCGABS device "/dev/input/event3"
[   53.851117][ T1272] udevd[1272]: Unable to EVIOCGABS device "/dev/input/event3"
[   53.894577][   T36] audit: type=1400 audit(2000000015.232:366): avc:  denied  { read } for  pid=1704 comm="syz.0.462" path="socket:[12955]" dev="sockfs" ino=12955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.919040][  T985] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   53.927432][   T36] audit: type=1400 audit(2000000015.260:367): avc:  denied  { mount } for  pid=1704 comm="syz.0.462" name="/" dev="configfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   54.045596][   T36] audit: type=1326 audit(2000000015.372:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1709 comm="syz.1.464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f223838ebe9 code=0x0
[   54.066491][ T1677] netlink: 'syz.3.453': attribute type 4 has an invalid length.
[   54.076349][ T1677] netlink: 17 bytes leftover after parsing attributes in process `syz.3.453'.
[   54.086385][ T1677] netlink: 'syz.3.453': attribute type 1 has an invalid length.
[   54.094221][ T1677] netlink: 'syz.3.453': attribute type 2 has an invalid length.
[   54.101542][ T1713] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   54.102950][  T985] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[   54.111412][ T1713] overlayfs: missing 'lowerdir'
[   54.120496][  T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.133212][   T36] audit: type=1326 audit(2000000015.456:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1676 comm="syz.3.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f318ebe9 code=0x0
[   54.157067][  T985] usb 3-1: config 0 descriptor??
[   54.163336][  T985] usb 3-1: selecting invalid altsetting 1
[   54.173036][  T985] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[   54.189712][ T1272] udevd[1272]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.226941][ T1718] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   54.235152][ T1718] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   54.331070][ T1720] IPv6: Can't replace route, no match found
[   54.360942][   T36] audit: type=1400 audit(2000000015.671:370): avc:  denied  { read } for  pid=1721 comm="syz.0.467" name="file2" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   54.477885][  T985] usb 3-1: USB disconnect, device number 8
[   55.624705][ T1763] overlayfs: failed to clone upperpath
[   55.679647][ T1768] fuseblk: Unknown parameter ''
[   55.846430][ T1785] netlink: 'syz.1.492': attribute type 27 has an invalid length.
[   55.854293][ T1785] lo: entered promiscuous mode
[   55.859184][ T1785] lo: entered allmulticast mode
[   55.865351][ T1785] tunl0: entered promiscuous mode
[   55.870658][ T1785] tunl0: entered allmulticast mode
[   55.876830][ T1785] gre0: entered promiscuous mode
[   55.883710][ T1785] gre0: entered allmulticast mode
[   55.889616][ T1785] gretap0: entered promiscuous mode
[   55.894908][ T1785] gretap0: entered allmulticast mode
[   55.900426][ T1785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   56.164425][ T1803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.499'.
[   56.199242][ T1803] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.499'.
[   56.271351][ T1808] fuseblk: Unknown parameter 'r000'
[   56.411000][ T1820] netlink: 'syz.0.507': attribute type 1 has an invalid length.
[   56.424820][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   56.489107][ T1825] 9pnet_fd: Insufficient options for proto=fd
[   56.517802][  T330] usb 4-1: USB disconnect, device number 13
[   56.571082][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   56.602060][ T1837] 9pnet_fd: Insufficient options for proto=fd
[   56.720808][   T10] usb 3-1: device descriptor read/64, error -71
[   56.849142][  T330] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   56.977530][   T10] usb 3-1: device descriptor read/64, error -71
[   57.009583][  T330] usb 4-1: Using ep0 maxpacket: 16
[   57.016037][  T330] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[   57.024501][  T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   57.034680][  T330] usb 4-1: config 0 has no interface number 0
[   57.042532][  T330] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   57.051631][  T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.059783][  T330] usb 4-1: Product: syz
[   57.064023][  T330] usb 4-1: Manufacturer: syz
[   57.068633][  T330] usb 4-1: SerialNumber: syz
[   57.074628][  T330] usb 4-1: config 0 descriptor??
[   57.234303][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   57.373216][   T10] usb 3-1: device descriptor read/64, error -71
[   57.382304][ T1894] netlink: 'syz.0.533': attribute type 39 has an invalid length.
[   57.616977][ T1899] netlink: 'syz.1.535': attribute type 11 has an invalid length.
[   57.629848][   T10] usb 3-1: device descriptor read/64, error -71
[   57.649634][ T1902] netlink: 'syz.1.536': attribute type 4 has an invalid length.
[   57.661504][ T1902] netlink: 'syz.1.536': attribute type 4 has an invalid length.
[   57.747671][   T10] usb usb3-port1: attempt power cycle
[   57.984418][ T1931] devpts: called with bogus options
[   58.111134][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   58.133543][   T10] usb 3-1: device descriptor read/8, error -71
[   58.272611][   T10] usb 3-1: device descriptor read/8, error -71
[   58.528233][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   58.550832][   T10] usb 3-1: device descriptor read/8, error -71
[   58.690028][   T10] usb 3-1: device descriptor read/8, error -71
[   58.806702][   T10] usb usb3-port1: unable to enumerate USB device
[   59.521746][ T1986] overlayfs: failed to clone upperpath
[   59.748407][  T330] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[   59.755064][  T330] usb 4-1: No valid video chain found.
[   59.762034][  T330] usb 4-1: USB disconnect, device number 14
[   59.772609][ T1992] netlink: 'syz.3.567': attribute type 28 has an invalid length.
[   59.793254][ T1996] tmpfs: Unknown parameter '��������'
[   59.818907][ T2001] binder: Binderfs stats mode cannot be changed during a remount
[   59.950556][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   60.110983][   T10] usb 3-1: Using ep0 maxpacket: 8
[   60.123170][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   60.143708][   T10] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   60.151826][   T10] usb 3-1: config 0 has no interface number 0
[   60.158005][   T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   60.169014][   T10] usb 3-1: config 0 interface 88 has no altsetting 0
[   60.187638][   T10] usb 3-1: string descriptor 0 read error: -22
[   60.194044][   T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   60.203243][   T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   60.212590][   T10] usb 3-1: config 0 descriptor??
[   60.222294][   T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input8
[   60.247170][ T1272] udevd[1272]: Unable to EVIOCGABS device "/dev/input/event3"
[   60.255097][ T1272] udevd[1272]: Unable to EVIOCGABS device "/dev/input/event3"
[   60.276799][ T2012] 9pnet: Could not find request transport: fd��fdno=0xffffffffffffffff
[   60.312043][ T2016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.574'.
[   60.434419][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.443969][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.452807][   T10] usb 3-1: USB disconnect, device number 13
[   60.868858][ T2035] netlink: 'syz.3.580': attribute type 2 has an invalid length.
[   61.057683][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   61.057702][   T36] audit: type=1400 audit(2000000021.926:382): avc:  denied  { mount } for  pid=2038 comm="syz.2.582" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   61.092025][   T36] audit: type=1400 audit(2000000021.963:383): avc:  denied  { append } for  pid=2038 comm="syz.2.582" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   61.148343][  T330] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   61.255814][ T2049] fuse: Bad value for 'rootmode'
[   61.308768][  T330] usb 4-1: Using ep0 maxpacket: 32
[   61.317552][  T330] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.327905][  T330] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   61.341036][  T330] usb 4-1: config 0 interface 0 has no altsetting 0
[   61.347693][  T330] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[   61.356788][  T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.366025][  T330] usb 4-1: config 0 descriptor??
[   61.428169][   T36] audit: type=1400 audit(2000000022.281:384): avc:  denied  { map } for  pid=2060 comm="syz.0.589" path="socket:[14092]" dev="sockfs" ino=14092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   61.552349][   T36] audit: type=1400 audit(2000000022.384:385): avc:  denied  { mount } for  pid=2074 comm="syz.1.594" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   61.579009][ T2075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25800 sclass=netlink_route_socket pid=2075 comm=syz.1.594
[   61.807702][  T330] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[   61.815150][  T330] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[   61.822517][  T330] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[   61.829870][  T330] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[   61.837310][  T330] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[   61.845473][  T330] magicmouse 0003:05AC:0324.0004: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[   61.857147][  T330] magicmouse 0003:05AC:0324.0004: magicmouse input not registered
[   61.865826][ T2083] ==================================================================
[   61.865831][  T330] magicmouse 0003:05AC:0324.0004: probe with driver magicmouse failed with error -12
[   61.883390][ T2083] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100
[   61.891907][ T2083] Read of size 5 at addr ffff88810ce65500 by task fido_id/2083
[   61.899445][ T2083] 
[   61.901777][ T2083] CPU: 0 UID: 0 PID: 2083 Comm: fido_id Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4
[   61.901803][ T2083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   61.901817][ T2083] Call Trace:
[   61.901823][ T2083]  <TASK>
[   61.901831][ T2083]  __dump_stack+0x21/0x30
[   61.901856][ T2083]  dump_stack_lvl+0x10c/0x190
[   61.901882][ T2083]  ? __cfi_dump_stack_lvl+0x10/0x10
[   61.901905][ T2083]  print_address_description+0x71/0x220
[   61.901924][ T2083]  print_report+0x4a/0x70
[   61.901941][ T2083]  kasan_report+0x163/0x1a0
[   61.901959][ T2083]  ? read_report_descriptor+0xbf/0x100
[   61.901981][ T2083]  ? read_report_descriptor+0xbf/0x100
[   61.902004][ T2083]  kasan_check_range+0x299/0x2a0
[   61.902022][ T2083]  ? read_report_descriptor+0xbf/0x100
[   61.902044][ T2083]  __asan_memcpy+0x31/0x80
[   61.902071][ T2083]  read_report_descriptor+0xbf/0x100
[   61.902093][ T2083]  ? __cfi_read_report_descriptor+0x10/0x10
[   61.902114][ T2083]  sysfs_kf_bin_read+0x1c6/0x200
[   61.902139][ T2083]  ? __cfi_sysfs_kf_bin_read+0x10/0x10
[   61.902162][ T2083]  kernfs_fop_read_iter+0x2c7/0x520
[   61.902184][ T2083]  vfs_read+0x53d/0xb60
[   61.902199][ T2083]  ? __cfi_vfs_read+0x10/0x10
[   61.902222][ T2083]  ? __kasan_slab_free+0x6a/0x80
[   61.902239][ T2083]  ? putname+0x113/0x150
[   61.902255][ T2083]  ? putname+0x113/0x150
[   61.902270][ T2083]  ? __kasan_check_read+0x15/0x20
[   61.902293][ T2083]  ksys_read+0x141/0x250
[   61.902307][ T2083]  ? __cfi_ksys_read+0x10/0x10
[   61.902322][ T2083]  ? __kasan_check_read+0x15/0x20
[   61.902344][ T2083]  __x64_sys_read+0x7f/0x90
[   61.902358][ T2083]  x64_sys_call+0x2638/0x2ee0
[   61.902382][ T2083]  do_syscall_64+0x58/0xf0
[   61.902403][ T2083]  ? clear_bhb_loop+0x50/0xa0
[   61.902421][ T2083]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   61.902439][ T2083] RIP: 0033:0x7f0a93ea7407
[   61.902457][ T2083] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   61.902470][ T2083] RSP: 002b:00007ffedb026ca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[   61.902490][ T2083] RAX: ffffffffffffffda RBX: 00007f0a94551880 RCX: 00007f0a93ea7407
[   61.902503][ T2083] RDX: 0000000000001000 RSI: 00007ffedb026cf0 RDI: 0000000000000004
[   61.902514][ T2083] RBP: 0000563f5fff02c0 R08: 0000000000000000 R09: 0000000000000000
[   61.902524][ T2083] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563f5ffef4c0
[   61.902535][ T2083] R13: 00007ffedb026cf0 R14: 0000000000000004 R15: 0000563f387c54d8
[   61.902548][ T2083]  </TASK>
[   61.902554][ T2083] 
[   62.154560][ T2083] Allocated by task 330:
[   62.158813][ T2083]  kasan_save_track+0x3e/0x80
[   62.163502][ T2083]  kasan_save_alloc_info+0x40/0x50
[   62.168633][ T2083]  __kasan_kmalloc+0x96/0xb0
[   62.173230][ T2083]  __kmalloc_node_track_caller_noprof+0x1ad/0x440
[   62.179748][ T2083]  kmemdup_noprof+0x31/0x80
[   62.184278][ T2083]  hid_open_report+0x1f2/0x1110
[   62.189168][ T2083]  magicmouse_probe+0x1b6/0x6a0
[   62.194033][ T2083]  hid_device_probe+0x2c4/0x5d0
[   62.198925][ T2083]  really_probe+0x2d6/0x890
[   62.203434][ T2083]  __driver_probe_device+0x198/0x280
[   62.208726][ T2083]  driver_probe_device+0x54/0x3f0
[   62.213779][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.219197][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.224083][ T2083]  __device_attach+0x2bd/0x3a0
[   62.228854][ T2083]  device_initial_probe+0x1e/0x30
[   62.233989][ T2083]  bus_probe_device+0x18b/0x270
[   62.238854][ T2083]  device_add+0x80c/0xc00
[   62.243210][ T2083]  hid_add_device+0x39b/0x560
[   62.247907][ T2083]  usbhid_probe+0xde3/0x12b0
[   62.252512][ T2083]  usb_probe_interface+0x696/0xc00
[   62.257635][ T2083]  really_probe+0x2d6/0x890
[   62.262146][ T2083]  __driver_probe_device+0x198/0x280
[   62.267434][ T2083]  driver_probe_device+0x54/0x3f0
[   62.273007][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.278387][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.283255][ T2083]  __device_attach+0x2bd/0x3a0
[   62.288024][ T2083]  device_initial_probe+0x1e/0x30
[   62.293062][ T2083]  bus_probe_device+0x18b/0x270
[   62.297924][ T2083]  device_add+0x80c/0xc00
[   62.302269][ T2083]  usb_set_configuration+0x1ad4/0x20b0
[   62.307780][ T2083]  usb_generic_driver_probe+0x95/0x160
[   62.313262][ T2083]  usb_probe_device+0x1d4/0x380
[   62.318215][ T2083]  really_probe+0x2d6/0x890
[   62.322849][ T2083]  __driver_probe_device+0x198/0x280
[   62.328143][ T2083]  driver_probe_device+0x54/0x3f0
[   62.333177][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.338555][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.343544][ T2083]  __device_attach+0x2bd/0x3a0
[   62.348331][ T2083]  device_initial_probe+0x1e/0x30
[   62.353361][ T2083]  bus_probe_device+0x18b/0x270
[   62.358243][ T2083]  device_add+0x80c/0xc00
[   62.362577][ T2083]  usb_new_device+0x9ed/0x1590
[   62.367354][ T2083]  hub_event+0x2c81/0x4270
[   62.371788][ T2083]  process_scheduled_works+0x7d5/0x1020
[   62.377377][ T2083]  worker_thread+0xc58/0x1250
[   62.382078][ T2083]  kthread+0x2c7/0x370
[   62.386169][ T2083]  ret_from_fork+0x67/0xa0
[   62.390602][ T2083]  ret_from_fork_asm+0x1a/0x30
[   62.395451][ T2083] 
[   62.397787][ T2083] Freed by task 330:
[   62.401685][ T2083]  kasan_save_track+0x3e/0x80
[   62.406390][ T2083]  kasan_save_free_info+0x4a/0x60
[   62.411439][ T2083]  __kasan_slab_free+0x5f/0x80
[   62.416205][ T2083]  kfree+0x15c/0x460
[   62.420114][ T2083]  hid_close_report+0x628/0x6f0
[   62.424964][ T2083]  hid_device_probe+0x523/0x5d0
[   62.429823][ T2083]  really_probe+0x2d6/0x890
[   62.434333][ T2083]  __driver_probe_device+0x198/0x280
[   62.439658][ T2083]  driver_probe_device+0x54/0x3f0
[   62.444712][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.450116][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.454990][ T2083]  __device_attach+0x2bd/0x3a0
[   62.459784][ T2083]  device_initial_probe+0x1e/0x30
[   62.464817][ T2083]  bus_probe_device+0x18b/0x270
[   62.469771][ T2083]  device_add+0x80c/0xc00
[   62.474116][ T2083]  hid_add_device+0x39b/0x560
[   62.478807][ T2083]  usbhid_probe+0xde3/0x12b0
[   62.483415][ T2083]  usb_probe_interface+0x696/0xc00
[   62.488543][ T2083]  really_probe+0x2d6/0x890
[   62.493070][ T2083]  __driver_probe_device+0x198/0x280
[   62.498366][ T2083]  driver_probe_device+0x54/0x3f0
[   62.503397][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.508782][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.513661][ T2083]  __device_attach+0x2bd/0x3a0
[   62.518439][ T2083]  device_initial_probe+0x1e/0x30
[   62.523470][ T2083]  bus_probe_device+0x18b/0x270
[   62.528340][ T2083]  device_add+0x80c/0xc00
[   62.532693][ T2083]  usb_set_configuration+0x1ad4/0x20b0
[   62.538173][ T2083]  usb_generic_driver_probe+0x95/0x160
[   62.543731][ T2083]  usb_probe_device+0x1d4/0x380
[   62.548593][ T2083]  really_probe+0x2d6/0x890
[   62.553110][ T2083]  __driver_probe_device+0x198/0x280
[   62.558396][ T2083]  driver_probe_device+0x54/0x3f0
[   62.563877][ T2083]  __device_attach_driver+0x2f1/0x4b0
[   62.569277][ T2083]  bus_for_each_drv+0x260/0x2f0
[   62.574145][ T2083]  __device_attach+0x2bd/0x3a0
[   62.578916][ T2083]  device_initial_probe+0x1e/0x30
[   62.583947][ T2083]  bus_probe_device+0x18b/0x270
[   62.588816][ T2083]  device_add+0x80c/0xc00
[   62.593181][ T2083]  usb_new_device+0x9ed/0x1590
[   62.597955][ T2083]  hub_event+0x2c81/0x4270
[   62.602470][ T2083]  process_scheduled_works+0x7d5/0x1020
[   62.608051][ T2083]  worker_thread+0xc58/0x1250
[   62.612751][ T2083]  kthread+0x2c7/0x370
[   62.616937][ T2083]  ret_from_fork+0x67/0xa0
[   62.621385][ T2083]  ret_from_fork_asm+0x1a/0x30
[   62.626190][ T2083] 
[   62.628517][ T2083] The buggy address belongs to the object at ffff88810ce65500
[   62.628517][ T2083]  which belongs to the cache kmalloc-8 of size 8
[   62.642397][ T2083] The buggy address is located 0 bytes inside of
[   62.642397][ T2083]  freed 8-byte region [ffff88810ce65500, ffff88810ce65508)
[   62.655851][ T2083] 
[   62.658217][ T2083] The buggy address belongs to the physical page:
[   62.664645][ T2083] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ce65
[   62.673530][ T2083] flags: 0x4000000000000000(zone=1)
[   62.678738][ T2083] page_type: f5(slab)
[   62.682727][ T2083] raw: 4000000000000000 ffff888100041500 ffffea0004259c00 dead000000000002
[   62.691310][ T2083] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000
[   62.699921][ T2083] page dumped because: kasan: bad access detected
[   62.706334][ T2083] page_owner tracks the page as allocated
[   62.712053][ T2083] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2609169354, free_ts 0
[   62.729606][ T2083]  post_alloc_hook+0x3b9/0x3f0
[   62.734385][ T2083]  prep_new_page+0x1c/0x120
[   62.738897][ T2083]  get_page_from_freelist+0x48ce/0x4960
[   62.744464][ T2083]  __alloc_pages_noprof+0x31f/0x7b0
[   62.749740][ T2083]  alloc_slab_page+0x6b/0x1f0
[   62.754448][ T2083]  allocate_slab+0x69/0x440
[   62.758981][ T2083]  ___slab_alloc+0x59a/0x8b0
[   62.763583][ T2083]  __kmalloc_noprof+0x243/0x450
[   62.768557][ T2083]  acpi_ns_internalize_name+0x2cf/0x470
[   62.774115][ T2083]  acpi_ns_get_node+0x1a4/0x350
[   62.778978][ T2083]  acpi_get_handle+0x182/0x2a0
[   62.783754][ T2083]  acpi_has_method+0x87/0xd0
[   62.788349][ T2083]  pnpacpi_add_device+0x7f/0xa30
[   62.793295][ T2083]  pnpacpi_add_device_handler+0x55/0x6b
[   62.798853][ T2083]  acpi_ns_get_device_callback+0x351/0x4a0
[   62.804680][ T2083]  acpi_ns_walk_namespace+0x251/0x6b0
[   62.810079][ T2083] page_owner free stack trace missing
[   62.815454][ T2083] 
[   62.817788][ T2083] Memory state around the buggy address:
[   62.823423][ T2083]  ffff88810ce65400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   62.831494][ T2083]  ffff88810ce65480: fa fc fc fc 06 fc fc fc fa fc fc fc 04 fc fc fc
[   62.839579][ T2083] >ffff88810ce65500: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[   62.847653][ T2083]                    ^
[   62.851755][ T2083]  ffff88810ce65580: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc
[   62.859827][ T2083]  ffff88810ce65600: 00 fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc
[   62.867980][ T2083] ==================================================================
[   62.878027][ T2083] Disabling lock debugging due to kernel taint
[   62.879142][  T985] usb 4-1: USB disconnect, device number 15
[   62.899772][   T36] audit: type=1400 audit(2000000023.646:386): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   62.923364][   T36] audit: type=1400 audit(2000000023.646:387): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.945227][   T36] audit: type=1400 audit(2000000023.646:388): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.966721][   T36] audit: type=1400 audit(2000000023.646:389): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   62.987439][   T36] audit: type=1400 audit(2000000023.646:390): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   63.007899][   T36] audit: type=1400 audit(2000000023.665:391): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1