last executing test programs:

2m14.604572001s ago: executing program 0 (id=546):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac056502000000000001090224000100001003090400000103000013092100000801220700090581030000810001"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002207000000a94f0b164493f35514c5c24cf67351bf869e90af7d2e018fee574fab830a8573ecf57658e9a7e7c93b3b92215b29f9230d56dd0b79625fb8654e02ce27df59256e7f2f0e215c64eb84d9e5e54d5364b019418f917f036e46a9021e5d6bea52ea9336c6e61f49c77f52c9e725e96c806083ce95187bbc3a71fd36f1e5c76e5c9289014a8287aec29f8d2996eedb32040d6673b47ba85ed35a27481a2716dc14ec0244fa73211d8f76c5cc96f63c6f49f9c4b87a8a587a242956b357eb633f33239e216d14b96ade87b8f379f76c0e58185e0515b44f411d304ed1630a"], 0x0}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180))
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000094040100bd20825d000000000000"], 0x18}}], 0x2, 0xe000)
write$selinux_create(r2, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x2b, @rand_addr=0x64010100, 0x4e24, 0x3, 'none\x00', 0x27, 0x6, 0x72}, {@loopback, 0x4e24, 0x0, 0x3ff, 0x1, 0x4f0d55a7}}, 0x44)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f00000000c0)=0x4bf, 0x4)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x40)
writev(r6, &(0x7f0000000600)=[{&(0x7f00000003c0)="b464cb", 0x3}, {0x0, 0xfe}], 0x2)
fstat(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setfsuid(r7)
setfsuid(r7)
mmap(&(0x7f00003ab000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x99b33000)
r8 = socket(0x10, 0x803, 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000180)={[0x727b7171, 0x4, 0x9, 0xfff, 0xffffffffffffffff, 0x1, 0x5, 0xfcf8, 0x3, 0x1ff, 0x2, 0x5, 0x3, 0xea, 0xfff, 0x4], 0xffff1000, 0x400})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r9, 0x40187013, &(0x7f0000000240))
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000080)=0x10, 0x4)

2m13.422528179s ago: executing program 0 (id=569):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x100, 0xaa8, &(0x7f0000000000)=0x5})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17a, 0x0, 0x100000000}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x100, 0xaa8, &(0x7f0000000000)=0x5}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17a, 0x0, 0x100000000}]}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)

2m13.226138602s ago: executing program 0 (id=570):
r0 = socket$inet6(0xa, 0x2, 0x0)
unshare(0x5000000) (async)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32)
sendto$inet6(r1, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) (rerun: 32)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async)
setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:public_content_t:s0\x00', 0x26, 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async)
faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x10)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async, rerun: 64)
r5 = dup3(r3, r2, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}, @request_death={0x400c630e, 0x5}, @free_buffer], 0x0, 0x0, 0x0}) (async)
read$FUSE(r4, &(0x7f000001a240)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2b, 0xf18, 0xffffffff80804000, 0x6, 0x4, 0x1, 0x8, 0x0, 0x0, 0x80, 0x1000}}, 0x50)

2m13.178923443s ago: executing program 0 (id=571):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (rerun: 64)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) (async, rerun: 64)
mount$bind(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x12f451, 0x0) (async, rerun: 64)
umount2(&(0x7f0000000480)='./file0\x00', 0x2)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000040), 0x10) (async, rerun: 64)
bind$can_raw(r4, &(0x7f0000000380)={0x1d, r5}, 0x10) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="05005300010000001c00e70089e1a15046d7c7124eadc61839373b582d1b3c22bee65e4f0a00e80008021100000100000c00178004000100040001001c00e7007927d9952db0332dfa133b0498f8d5fcbd4c8a056d05ba2d050053000100000008000500010000000a0018000303030303030000"], 0x90}, 0x1, 0x0, 0x0, 0x44001}, 0x88a4) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 64)
memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) (async, rerun: 64)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)

2m13.136766183s ago: executing program 0 (id=572):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, 0x0, 0x44)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffd12, &(0x7f0000000100)={0x5, 0xf, 0x5, 0x0, [@generic={0x0, 0x10, 0x1, "6296ee9184931412c0ffaa752120c210545b2d1021f918eb82bc6709294b2dc2f3954e735eb7065a4f500019cf03f3cbdb5b0890090d54f24ab676f6ff3009590475c179"}, @ext_cap={0x0, 0x10, 0x2, 0xc, 0x5, 0x2, 0x6}]}})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
bind$can_raw(r1, 0x0, 0x44) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
memfd_create(&(0x7f0000000200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) (async)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) (async)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffd12, &(0x7f0000000100)={0x5, 0xf, 0x5, 0x0, [@generic={0x0, 0x10, 0x1, "6296ee9184931412c0ffaa752120c210545b2d1021f918eb82bc6709294b2dc2f3954e735eb7065a4f500019cf03f3cbdb5b0890090d54f24ab676f6ff3009590475c179"}, @ext_cap={0x0, 0x10, 0x2, 0xc, 0x5, 0x2, 0x6}]}}) (async)

2m13.010102745s ago: executing program 0 (id=573):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}})
getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)

2m12.966598426s ago: executing program 32 (id=573):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}})
getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)

2m0.366343066s ago: executing program 4 (id=744):
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1000000)

1m59.526191639s ago: executing program 4 (id=767):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x160)
close(r0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) (async)
syz_fuse_handle_req(r0, &(0x7f0000002800)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801c2e3e2932895f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d19022b4407a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd22c11e1c5f57cda7668853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e69e511bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf70fdf901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445476d31f7cdf06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fdc237a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b4bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c3c0e15c3065d09214ea6290b55bf5520ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d13f2e778d69a40c2b736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b147464", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m59.525588429s ago: executing program 4 (id=768):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]})
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
creat(&(0x7f0000000100)='./file0\x00', 0x45)
close_range(r0, 0xffffffffffffffff, 0x0)

1m58.710534021s ago: executing program 4 (id=776):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000", @ANYRES16=r4, @ANYBLOB="99742dbd7000fbdbdf2515000000400001802c0004001400010002004e200a01010100000000000000001400020002004e20ac14143800000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20c, r4, 0x504, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7cb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x61c3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x253}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x772e1ce0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x118}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe9b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81b2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17d4e6d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe})
ioctl$sock_bt_hci(r5, 0x400448e1, &(0x7f0000000540)="cc5e26b2")
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

1m58.679954722s ago: executing program 4 (id=777):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = dup2(r2, r2)
getsockname$inet6(r3, 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x3, 0x1}, 0x6)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4c080)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x400000000000)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m58.549748684s ago: executing program 4 (id=778):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84000) (async)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x84000)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_eee={0x33, 0x2, 0x1, 0x28000, 0x4, 0x1000, 0x10, 0xfffffffb, [0x0, 0x9]}})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0)
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0)
write(r6, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x40, 0x1c, "0062ba7d820000a75e0000000000fcff00"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) (async)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})
ioctl$LOOP_CHANGE_FD(r8, 0x4c05, 0xffffffffffffffff) (async)
ioctl$LOOP_CHANGE_FD(r8, 0x4c05, 0xffffffffffffffff)
r9 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0xa) (async)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0xa)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
ioctl$KVM_SET_XSAVE(r14, 0x5000aea5, &(0x7f0000000b00)={[0x6, 0x109e, 0x480, 0xfffffff7, 0x0, 0x9, 0x8, 0x10, 0x4, 0x99d5, 0x280000, 0x562, 0x8, 0x7, 0x5, 0x10001, 0x100, 0x7, 0x0, 0x9, 0xe, 0x72ae465f, 0x7, 0xff, 0xfffffffd, 0xffffffff, 0x7, 0x9, 0x7f, 0xffffff4d, 0x31, 0x200, 0xd, 0x101, 0x8, 0x5, 0x401, 0xb, 0x101, 0x3, 0x0, 0x7, 0x8, 0x7, 0x3, 0x4, 0x200, 0x200, 0x2, 0x3, 0x81, 0x799f8230, 0x4, 0xfff, 0x8d4, 0x6, 0x30, 0x4, 0x10001, 0x200, 0x200, 0x3ff, 0x3, 0x8001, 0x0, 0x366d, 0x0, 0x0, 0x6, 0x5, 0x2, 0xfffffb68, 0x8, 0x4, 0x5, 0x8, 0xf88f, 0xf46c, 0xe, 0x400, 0x5, 0x9, 0x9, 0x3, 0xa64, 0x8, 0x4, 0x9f, 0x5, 0x0, 0x7, 0x40, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x1, 0x5, 0x6, 0xec1, 0x10, 0x9, 0x8, 0xf716, 0x9, 0x101, 0x2, 0x2, 0x6f, 0x1, 0x70000000, 0x0, 0xc, 0x3, 0x7ff, 0x401, 0x8, 0xffffff00, 0xd2f, 0x6, 0xfffffffb, 0x10000, 0xffff04e6, 0xda29, 0x2, 0x8, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0x2a8c, 0x9, 0x9, 0x6, 0x7, 0x9d, 0x6, 0xd, 0x200, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x8, 0x1, 0x4, 0x8, 0xce, 0xcb8c, 0x80000001, 0x1, 0xdd1, 0x2, 0x7, 0x2, 0x8000, 0x8, 0x6f9, 0xe1f2, 0x8, 0x9, 0x8, 0x6c, 0x5, 0xfffffffb, 0x7, 0x5, 0x200, 0x0, 0x49a7, 0x6, 0x9, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0xc, 0x5, 0xc, 0x7, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1000, 0xc2f, 0x3ff, 0xffffffff, 0xc2, 0x8, 0x6, 0x6, 0x5, 0x6, 0x10000, 0x8, 0x4, 0x5, 0xfffffffb, 0x9, 0x4, 0xff, 0x4, 0x8000, 0xffff, 0x6, 0x400, 0xf8d, 0x400, 0x1, 0x0, 0x5, 0x47c, 0x10, 0x2, 0x5, 0x3, 0x7, 0x8, 0xec41, 0x6, 0x6c4, 0xd62, 0xa89346f, 0x1, 0x8475, 0x3c, 0x40, 0xc1d, 0xb395, 0xb7e, 0x3, 0x9, 0xcc, 0x6, 0x5, 0xffffff1b, 0x5, 0x1000, 0x0, 0x4, 0x95, 0xb, 0xe71, 0x5, 0x8d0, 0xe678, 0x5, 0x14b8b8c6, 0x0, 0x6, 0x5, 0x2610d6ef, 0x4, 0x8, 0x3, 0x0, 0xfffffff7, 0x5, 0x1, 0x7f, 0x7fff, 0xffffffff, 0x4, 0xffff767b, 0x7, 0x7, 0x8, 0x5, 0x0, 0x2392, 0x7f, 0x0, 0x2, 0x1000, 0x650, 0x5, 0x9, 0xda, 0x6, 0x9, 0xfffffff2, 0x4, 0x5, 0x8, 0x80000001, 0x3, 0x1, 0x5, 0x4, 0x4, 0x1, 0xdb5, 0x5, 0x4, 0x6f6c, 0x800, 0xe, 0x7, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7, 0x7, 0xffffffff, 0x6, 0x3, 0x8, 0x8, 0x8e, 0x8, 0x3, 0x8, 0x5, 0x31a2, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7f, 0xb, 0x7, 0x7, 0x0, 0x8, 0x9, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0x9a, 0x10001, 0xffff, 0x8000, 0x9, 0x5, 0xb18e, 0x9, 0x459, 0x1, 0x3c96, 0x800, 0x7, 0x7, 0x4, 0x7, 0x5, 0x6a65, 0x0, 0xa, 0x1, 0x401, 0x242b, 0x1, 0xfff, 0x5, 0x7, 0x4, 0xfffffff7, 0x300000, 0x200, 0x0, 0x3, 0x6, 0x9, 0x483, 0x7ff, 0x4b71, 0x2, 0xfe000000, 0x2, 0x2, 0x5, 0x0, 0x8c3, 0x51, 0xfff, 0x4, 0x6, 0x3, 0x7ff, 0xaea5, 0xfffffffd, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8001, 0x101, 0xd, 0x6b000, 0x8, 0x255, 0x1, 0x9, 0x1, 0x4, 0x3, 0xe5c, 0xf6, 0x4, 0x80000001, 0x0, 0x5, 0x400, 0xffffffff, 0x1, 0x2, 0x5, 0x3, 0x1, 0x4, 0x7, 0x0, 0xef11, 0x2, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x72, 0x800, 0x0, 0x0, 0x3, 0x7b0, 0x3, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x7, 0x9, 0x8, 0x9, 0x0, 0x2c00000, 0x3ff, 0xde, 0x0, 0x317eea0e, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0xfe, 0x10000, 0x8, 0x365, 0x81b, 0x9, 0x1, 0x9, 0x9, 0x3, 0xfff, 0x6, 0x8, 0x6, 0x3, 0x5, 0x400, 0x6981, 0x8, 0x2, 0x401, 0xfe000000, 0x3, 0x5954, 0x7af, 0x2, 0x3252b61e, 0x1ff, 0x8, 0xffffff1c, 0xb6f7, 0x7, 0x0, 0x6051, 0x4, 0xad, 0x4, 0x28, 0x2, 0x6, 0xe, 0xffff, 0xf, 0x9, 0x6, 0x7a6, 0xe, 0xb, 0x400, 0x6, 0x4, 0xa3, 0x4, 0x1, 0x6, 0x800, 0x2, 0x285, 0x2, 0x70, 0xad39, 0x6, 0x3, 0x3, 0x2, 0xd, 0x10001, 0x96e, 0x8, 0x578, 0x9, 0x8, 0xffff, 0x39d2, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x2, 0x1, 0x0, 0x5, 0xfffffffd, 0x4f972ec5, 0x0, 0x4, 0x2, 0xc, 0xf, 0x80000000, 0x2, 0x5, 0x2, 0x78f, 0x200, 0x2, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x8, 0x80000000, 0x7fffffff, 0x68b, 0x80000000, 0x4, 0xfffff001, 0x93, 0x8, 0x2, 0x3d, 0x3, 0x3, 0x8, 0x3, 0x8001, 0x8, 0x4000000, 0x6, 0x7, 0x4, 0xb73, 0x0, 0xbcfd, 0x1ff, 0xffffffe6, 0x3, 0x4, 0x7, 0x4b, 0x3, 0x9, 0xc000000, 0x2, 0x7, 0x1ff, 0x3, 0x2, 0x803, 0x8, 0x7, 0x0, 0xad, 0x2757, 0x2, 0x10001, 0xf11, 0x9, 0x7, 0x8, 0x8, 0x1, 0x8, 0x283, 0x5, 0xa, 0x3, 0x40, 0x200, 0x5, 0x3, 0x1ad6, 0xe80b, 0xffffffff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x10, 0x1, 0x54, 0xffffffff, 0x8, 0x4, 0x73b9, 0x80, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7f, 0x1, 0x9, 0xffffffc0, 0x9, 0x2, 0x1, 0xfffeffff, 0x1, 0x3, 0x4ff, 0xc9b7, 0x7fff, 0x0, 0x80000000, 0x82be, 0x5e, 0x10001, 0x6, 0x7, 0xc, 0x0, 0x4, 0x4, 0x4, 0x4, 0x7, 0xf, 0x0, 0x6, 0x1, 0x8, 0x3, 0x9, 0x4, 0x7, 0x10, 0x400, 0x4, 0x6, 0xfffffff8, 0x7, 0x1, 0x6, 0x1, 0x563240ed, 0xaf4, 0x401, 0x7, 0xffffffff, 0x6, 0xfffffffa, 0x0, 0x100, 0xd6a7, 0x0, 0x0, 0x3, 0x7, 0x1, 0x19a3, 0xbdc, 0x6, 0x3, 0x4, 0x3, 0xfffffc00, 0x6, 0x30b747e5, 0xf1af, 0x1, 0xfffffff8, 0x1, 0x4, 0xb, 0x2, 0xffffffc0, 0x81, 0x588, 0x8, 0xef6d, 0x9, 0x0, 0x7, 0x7c, 0x2, 0x6, 0xfffffffc, 0x1, 0xffffffc0, 0xbe83, 0xa8, 0xfcba, 0x10001, 0x6, 0x0, 0x3, 0x6, 0x401, 0x0, 0x2, 0xc, 0x1, 0xffff, 0x6, 0x0, 0xffff, 0x419f, 0x3, 0x0, 0x6, 0xc, 0xd6, 0x10a, 0x0, 0x2, 0x5, 0xffff, 0x7c9d, 0x1, 0x9, 0x0, 0x2, 0xfffffffd, 0x6000, 0x4, 0x0, 0x101, 0x762, 0x400, 0x39a0, 0xd1fa, 0x1, 0x10000, 0x8, 0x8, 0x80000000, 0x1000, 0xc1e5, 0xce59, 0xfff, 0x1, 0xbd, 0x1, 0x10, 0x2, 0x4, 0x3, 0x9, 0xffffffc0, 0x10000, 0xab32, 0x9, 0x4, 0xffffffff, 0x8274, 0x1f0, 0x3, 0x2c3, 0x61, 0x5, 0x1ff, 0x3, 0x3, 0x401, 0x5, 0x80000001, 0xfffffff7, 0x1000, 0x1800, 0x651, 0x693b, 0x1, 0x80000001, 0x1, 0x2, 0x7f, 0x5, 0xfff, 0x48f, 0x2, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffb, 0x10, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9, 0xd, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x6, 0x7, 0x2, 0x7ce4, 0x6, 0x4, 0x2, 0x4e, 0x7f02, 0xffff, 0x7, 0x70, 0x20e1, 0x200, 0x6, 0x4, 0xd088, 0x800000, 0x6, 0x7ff, 0x8, 0x2, 0x5, 0x10001, 0x287, 0x8, 0x4, 0x7, 0x6, 0x0, 0x7f, 0x1, 0x5f6e, 0x3, 0x9, 0x8, 0x1, 0x9, 0x7c7, 0x3, 0x4, 0xfffffffc, 0x7, 0x4, 0x2, 0x2, 0x1ac, 0x8, 0x101, 0x7ff, 0x10, 0x8, 0x8000, 0x6, 0x6d3, 0x8, 0x9, 0x0, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9693, 0x5, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3, 0x1, 0x0, 0x7, 0x9140, 0x0, 0xfffffff8, 0x6, 0x3, 0x8, 0x1, 0x9, 0x0, 0x8, 0xfd000, 0x200, 0x40, 0x4, 0x8000, 0x2, 0x926096c, 0x9, 0xd, 0x0, 0xaeb, 0xa20, 0x8, 0x1ff, 0xfffffffe, 0x39b, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0xa, 0x5, 0x2dcc, 0xfe, 0x8000, 0x5, 0x800, 0x8, 0x8000, 0x0, 0x75ff, 0x1000, 0x9, 0x6, 0x1, 0xaf, 0x8, 0x7, 0x3, 0x8, 0x2b5ab7ea, 0x0, 0x1, 0x2, 0x7, 0xfffffffb, 0x2, 0x0, 0x7ff, 0xec, 0x6, 0x3ff, 0x9, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff7, 0x5, 0x701, 0x9, 0xb05, 0x3, 0x3ff, 0x0, 0x9, 0x8, 0x4, 0x20, 0x3, 0x9, 0x26ec, 0x40, 0x6, 0x267, 0x80000001, 0xff, 0x9, 0x1, 0x8, 0x100, 0x1ff, 0x8, 0xd, 0x7, 0x7, 0x7]})
fsopen(&(0x7f0000000000)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000080)='iocharset\x11\xaf\xfe\xdd5\xa5[\xc8>F\x93\xdd$\a\xc7!7\xfa\xaa\"sRox\x7f\xbfC\x99X\xa2B-\x83j!\x9cM\xf8\x19%\xf6\xa7\x91\xd2\xc7\xf4\xea\x9b\xf3\xb0\'Tw^\n\xeb\x1fkq\x87sX\xe5\b\xd0\xb6Py\x87f\x92&\x957\xc6Hig\x19\x1e/\xea\xfe\xa3\xc6\xc2\xc3R\xa6|\xa0+\x19\xb0\x0fX\xc9\xba\x9b\xf3*\xd4\x14\xffJ\xea\xbb\xa9X|', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
ioctl$ASHMEM_SET_NAME(r10, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) (async)
ioctl$ASHMEM_SET_NAME(r10, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468)

1m42.768724772s ago: executing program 33 (id=778):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x84000) (async)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x84000)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_eee={0x33, 0x2, 0x1, 0x28000, 0x4, 0x1000, 0x10, 0xfffffffb, [0x0, 0x9]}})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0)
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0)
write(r6, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x40, 0x1c, "0062ba7d820000a75e0000000000fcff00"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) (async)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})
ioctl$LOOP_CHANGE_FD(r8, 0x4c05, 0xffffffffffffffff) (async)
ioctl$LOOP_CHANGE_FD(r8, 0x4c05, 0xffffffffffffffff)
r9 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0xa) (async)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0xa)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
ioctl$KVM_SET_XSAVE(r14, 0x5000aea5, &(0x7f0000000b00)={[0x6, 0x109e, 0x480, 0xfffffff7, 0x0, 0x9, 0x8, 0x10, 0x4, 0x99d5, 0x280000, 0x562, 0x8, 0x7, 0x5, 0x10001, 0x100, 0x7, 0x0, 0x9, 0xe, 0x72ae465f, 0x7, 0xff, 0xfffffffd, 0xffffffff, 0x7, 0x9, 0x7f, 0xffffff4d, 0x31, 0x200, 0xd, 0x101, 0x8, 0x5, 0x401, 0xb, 0x101, 0x3, 0x0, 0x7, 0x8, 0x7, 0x3, 0x4, 0x200, 0x200, 0x2, 0x3, 0x81, 0x799f8230, 0x4, 0xfff, 0x8d4, 0x6, 0x30, 0x4, 0x10001, 0x200, 0x200, 0x3ff, 0x3, 0x8001, 0x0, 0x366d, 0x0, 0x0, 0x6, 0x5, 0x2, 0xfffffb68, 0x8, 0x4, 0x5, 0x8, 0xf88f, 0xf46c, 0xe, 0x400, 0x5, 0x9, 0x9, 0x3, 0xa64, 0x8, 0x4, 0x9f, 0x5, 0x0, 0x7, 0x40, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x1, 0x5, 0x6, 0xec1, 0x10, 0x9, 0x8, 0xf716, 0x9, 0x101, 0x2, 0x2, 0x6f, 0x1, 0x70000000, 0x0, 0xc, 0x3, 0x7ff, 0x401, 0x8, 0xffffff00, 0xd2f, 0x6, 0xfffffffb, 0x10000, 0xffff04e6, 0xda29, 0x2, 0x8, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0x2a8c, 0x9, 0x9, 0x6, 0x7, 0x9d, 0x6, 0xd, 0x200, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x8, 0x1, 0x4, 0x8, 0xce, 0xcb8c, 0x80000001, 0x1, 0xdd1, 0x2, 0x7, 0x2, 0x8000, 0x8, 0x6f9, 0xe1f2, 0x8, 0x9, 0x8, 0x6c, 0x5, 0xfffffffb, 0x7, 0x5, 0x200, 0x0, 0x49a7, 0x6, 0x9, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0xc, 0x5, 0xc, 0x7, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1000, 0xc2f, 0x3ff, 0xffffffff, 0xc2, 0x8, 0x6, 0x6, 0x5, 0x6, 0x10000, 0x8, 0x4, 0x5, 0xfffffffb, 0x9, 0x4, 0xff, 0x4, 0x8000, 0xffff, 0x6, 0x400, 0xf8d, 0x400, 0x1, 0x0, 0x5, 0x47c, 0x10, 0x2, 0x5, 0x3, 0x7, 0x8, 0xec41, 0x6, 0x6c4, 0xd62, 0xa89346f, 0x1, 0x8475, 0x3c, 0x40, 0xc1d, 0xb395, 0xb7e, 0x3, 0x9, 0xcc, 0x6, 0x5, 0xffffff1b, 0x5, 0x1000, 0x0, 0x4, 0x95, 0xb, 0xe71, 0x5, 0x8d0, 0xe678, 0x5, 0x14b8b8c6, 0x0, 0x6, 0x5, 0x2610d6ef, 0x4, 0x8, 0x3, 0x0, 0xfffffff7, 0x5, 0x1, 0x7f, 0x7fff, 0xffffffff, 0x4, 0xffff767b, 0x7, 0x7, 0x8, 0x5, 0x0, 0x2392, 0x7f, 0x0, 0x2, 0x1000, 0x650, 0x5, 0x9, 0xda, 0x6, 0x9, 0xfffffff2, 0x4, 0x5, 0x8, 0x80000001, 0x3, 0x1, 0x5, 0x4, 0x4, 0x1, 0xdb5, 0x5, 0x4, 0x6f6c, 0x800, 0xe, 0x7, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7, 0x7, 0xffffffff, 0x6, 0x3, 0x8, 0x8, 0x8e, 0x8, 0x3, 0x8, 0x5, 0x31a2, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7f, 0xb, 0x7, 0x7, 0x0, 0x8, 0x9, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0x9a, 0x10001, 0xffff, 0x8000, 0x9, 0x5, 0xb18e, 0x9, 0x459, 0x1, 0x3c96, 0x800, 0x7, 0x7, 0x4, 0x7, 0x5, 0x6a65, 0x0, 0xa, 0x1, 0x401, 0x242b, 0x1, 0xfff, 0x5, 0x7, 0x4, 0xfffffff7, 0x300000, 0x200, 0x0, 0x3, 0x6, 0x9, 0x483, 0x7ff, 0x4b71, 0x2, 0xfe000000, 0x2, 0x2, 0x5, 0x0, 0x8c3, 0x51, 0xfff, 0x4, 0x6, 0x3, 0x7ff, 0xaea5, 0xfffffffd, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8001, 0x101, 0xd, 0x6b000, 0x8, 0x255, 0x1, 0x9, 0x1, 0x4, 0x3, 0xe5c, 0xf6, 0x4, 0x80000001, 0x0, 0x5, 0x400, 0xffffffff, 0x1, 0x2, 0x5, 0x3, 0x1, 0x4, 0x7, 0x0, 0xef11, 0x2, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x72, 0x800, 0x0, 0x0, 0x3, 0x7b0, 0x3, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x7, 0x9, 0x8, 0x9, 0x0, 0x2c00000, 0x3ff, 0xde, 0x0, 0x317eea0e, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0xfe, 0x10000, 0x8, 0x365, 0x81b, 0x9, 0x1, 0x9, 0x9, 0x3, 0xfff, 0x6, 0x8, 0x6, 0x3, 0x5, 0x400, 0x6981, 0x8, 0x2, 0x401, 0xfe000000, 0x3, 0x5954, 0x7af, 0x2, 0x3252b61e, 0x1ff, 0x8, 0xffffff1c, 0xb6f7, 0x7, 0x0, 0x6051, 0x4, 0xad, 0x4, 0x28, 0x2, 0x6, 0xe, 0xffff, 0xf, 0x9, 0x6, 0x7a6, 0xe, 0xb, 0x400, 0x6, 0x4, 0xa3, 0x4, 0x1, 0x6, 0x800, 0x2, 0x285, 0x2, 0x70, 0xad39, 0x6, 0x3, 0x3, 0x2, 0xd, 0x10001, 0x96e, 0x8, 0x578, 0x9, 0x8, 0xffff, 0x39d2, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x2, 0x1, 0x0, 0x5, 0xfffffffd, 0x4f972ec5, 0x0, 0x4, 0x2, 0xc, 0xf, 0x80000000, 0x2, 0x5, 0x2, 0x78f, 0x200, 0x2, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x8, 0x80000000, 0x7fffffff, 0x68b, 0x80000000, 0x4, 0xfffff001, 0x93, 0x8, 0x2, 0x3d, 0x3, 0x3, 0x8, 0x3, 0x8001, 0x8, 0x4000000, 0x6, 0x7, 0x4, 0xb73, 0x0, 0xbcfd, 0x1ff, 0xffffffe6, 0x3, 0x4, 0x7, 0x4b, 0x3, 0x9, 0xc000000, 0x2, 0x7, 0x1ff, 0x3, 0x2, 0x803, 0x8, 0x7, 0x0, 0xad, 0x2757, 0x2, 0x10001, 0xf11, 0x9, 0x7, 0x8, 0x8, 0x1, 0x8, 0x283, 0x5, 0xa, 0x3, 0x40, 0x200, 0x5, 0x3, 0x1ad6, 0xe80b, 0xffffffff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x10, 0x1, 0x54, 0xffffffff, 0x8, 0x4, 0x73b9, 0x80, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7f, 0x1, 0x9, 0xffffffc0, 0x9, 0x2, 0x1, 0xfffeffff, 0x1, 0x3, 0x4ff, 0xc9b7, 0x7fff, 0x0, 0x80000000, 0x82be, 0x5e, 0x10001, 0x6, 0x7, 0xc, 0x0, 0x4, 0x4, 0x4, 0x4, 0x7, 0xf, 0x0, 0x6, 0x1, 0x8, 0x3, 0x9, 0x4, 0x7, 0x10, 0x400, 0x4, 0x6, 0xfffffff8, 0x7, 0x1, 0x6, 0x1, 0x563240ed, 0xaf4, 0x401, 0x7, 0xffffffff, 0x6, 0xfffffffa, 0x0, 0x100, 0xd6a7, 0x0, 0x0, 0x3, 0x7, 0x1, 0x19a3, 0xbdc, 0x6, 0x3, 0x4, 0x3, 0xfffffc00, 0x6, 0x30b747e5, 0xf1af, 0x1, 0xfffffff8, 0x1, 0x4, 0xb, 0x2, 0xffffffc0, 0x81, 0x588, 0x8, 0xef6d, 0x9, 0x0, 0x7, 0x7c, 0x2, 0x6, 0xfffffffc, 0x1, 0xffffffc0, 0xbe83, 0xa8, 0xfcba, 0x10001, 0x6, 0x0, 0x3, 0x6, 0x401, 0x0, 0x2, 0xc, 0x1, 0xffff, 0x6, 0x0, 0xffff, 0x419f, 0x3, 0x0, 0x6, 0xc, 0xd6, 0x10a, 0x0, 0x2, 0x5, 0xffff, 0x7c9d, 0x1, 0x9, 0x0, 0x2, 0xfffffffd, 0x6000, 0x4, 0x0, 0x101, 0x762, 0x400, 0x39a0, 0xd1fa, 0x1, 0x10000, 0x8, 0x8, 0x80000000, 0x1000, 0xc1e5, 0xce59, 0xfff, 0x1, 0xbd, 0x1, 0x10, 0x2, 0x4, 0x3, 0x9, 0xffffffc0, 0x10000, 0xab32, 0x9, 0x4, 0xffffffff, 0x8274, 0x1f0, 0x3, 0x2c3, 0x61, 0x5, 0x1ff, 0x3, 0x3, 0x401, 0x5, 0x80000001, 0xfffffff7, 0x1000, 0x1800, 0x651, 0x693b, 0x1, 0x80000001, 0x1, 0x2, 0x7f, 0x5, 0xfff, 0x48f, 0x2, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffb, 0x10, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9, 0xd, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x6, 0x7, 0x2, 0x7ce4, 0x6, 0x4, 0x2, 0x4e, 0x7f02, 0xffff, 0x7, 0x70, 0x20e1, 0x200, 0x6, 0x4, 0xd088, 0x800000, 0x6, 0x7ff, 0x8, 0x2, 0x5, 0x10001, 0x287, 0x8, 0x4, 0x7, 0x6, 0x0, 0x7f, 0x1, 0x5f6e, 0x3, 0x9, 0x8, 0x1, 0x9, 0x7c7, 0x3, 0x4, 0xfffffffc, 0x7, 0x4, 0x2, 0x2, 0x1ac, 0x8, 0x101, 0x7ff, 0x10, 0x8, 0x8000, 0x6, 0x6d3, 0x8, 0x9, 0x0, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9693, 0x5, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3, 0x1, 0x0, 0x7, 0x9140, 0x0, 0xfffffff8, 0x6, 0x3, 0x8, 0x1, 0x9, 0x0, 0x8, 0xfd000, 0x200, 0x40, 0x4, 0x8000, 0x2, 0x926096c, 0x9, 0xd, 0x0, 0xaeb, 0xa20, 0x8, 0x1ff, 0xfffffffe, 0x39b, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0xa, 0x5, 0x2dcc, 0xfe, 0x8000, 0x5, 0x800, 0x8, 0x8000, 0x0, 0x75ff, 0x1000, 0x9, 0x6, 0x1, 0xaf, 0x8, 0x7, 0x3, 0x8, 0x2b5ab7ea, 0x0, 0x1, 0x2, 0x7, 0xfffffffb, 0x2, 0x0, 0x7ff, 0xec, 0x6, 0x3ff, 0x9, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff7, 0x5, 0x701, 0x9, 0xb05, 0x3, 0x3ff, 0x0, 0x9, 0x8, 0x4, 0x20, 0x3, 0x9, 0x26ec, 0x40, 0x6, 0x267, 0x80000001, 0xff, 0x9, 0x1, 0x8, 0x100, 0x1ff, 0x8, 0xd, 0x7, 0x7, 0x7]})
fsopen(&(0x7f0000000000)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000080)='iocharset\x11\xaf\xfe\xdd5\xa5[\xc8>F\x93\xdd$\a\xc7!7\xfa\xaa\"sRox\x7f\xbfC\x99X\xa2B-\x83j!\x9cM\xf8\x19%\xf6\xa7\x91\xd2\xc7\xf4\xea\x9b\xf3\xb0\'Tw^\n\xeb\x1fkq\x87sX\xe5\b\xd0\xb6Py\x87f\x92&\x957\xc6Hig\x19\x1e/\xea\xfe\xa3\xc6\xc2\xc3R\xa6|\xa0+\x19\xb0\x0fX\xc9\xba\x9b\xf3*\xd4\x14\xffJ\xea\xbb\xa9X|', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
ioctl$ASHMEM_SET_NAME(r10, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) (async)
ioctl$ASHMEM_SET_NAME(r10, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468)

5.106077863s ago: executing program 1 (id=2358):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="636f6e746578743d734f7d8cff094eb379737465225f75dd47d0b90b893a03ffdf"])
syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0)
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000006, 0x50012, r1, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000240)={{}, "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"})

3.98658277s ago: executing program 3 (id=2363):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x1014e001, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x1}, {}, {0x0, 0x0, 0x4b}, {0x0, 0x35}, {0x18, 0x6}, {0x3, 0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x3}, {0x73, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x0, 0x7c, '\x00', 0xff}, {0x0, 0x2}, {0x9, 0x8}, {0x7f, 0x4}, {0x7, 0xff, 0x0, '\x00', 0x39}, {0x0, 0x20, 0x80, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xd5}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x80}, {0x6, 0xff, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x2, 0xfd}]}})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814)
r7 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r7, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
recvmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x5, 0x0, [{0x80000000, 0x4, 0x1, 0x0, @sint={0x3, 0x8001}}, {0x3ff, 0x1, 0x1, 0x0, @irqchip={0x7}}, {0x0, 0x5, 0x1, 0x0, @msi={0xf1, 0x2, 0x0, 0x7e}}, {0x4, 0x1, 0x0, 0x0, @sint={0x8, 0x2}}, {0xcd7, 0x1, 0x1, 0x0, @adapter={0xffffffffffffffe9, 0x2, 0x7, 0x7, 0x1}}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3.857952352s ago: executing program 1 (id=2364):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
getpgid(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x6000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000040))
geteuid()
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000\nm000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="80020000000000000800000000000000000000000000000002000000000000007a0300000000000006000000000000009b000000b0c4000000000000000000000400000000000000fb08000000000000c30e0000200000000d0000000000000008000000000000007f000000e3f5ffff0100000000a00000ff010000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="040000004a00000100000000000800000002000000726f6f746d6f646500"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpgid(0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
r7 = gettid()
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_open_procfs(r7, &(0x7f0000000100)='oom_score_adj\x00')
r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fstat(r11, &(0x7f0000002500))

3.713764394s ago: executing program 3 (id=2365):
socket$netlink(0x10, 0x3, 0x4)
r0 = eventfd(0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x2, 0x7, 0xc6, 0x9}, {0x3, 0x0, 0x2, 0x9}, {0x2, 0x6, 0x5, 0x6}, {0x3, 0xf7, 0x9, 0x5a5}, {0x0, 0x8, 0x5, 0x3}, {0x1000, 0x4, 0xd, 0x5}, {0x7, 0xc0, 0x8, 0xd3d}, {0xffff, 0x3, 0x0, 0xe5}, {0xb, 0x8, 0xb, 0x7}, {0x0, 0xef, 0xf4, 0x10}]})
lseek(r0, 0x6, 0x1)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x92480e, &(0x7f0000000180)={[{@max={'max', 0x3d, 0xa}}, {@stats}, {@stats}, {@stats}, {}, {@max={'max', 0x3d, 0x8}}]})

3.545621537s ago: executing program 3 (id=2368):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000086d0486c2000000090400060103996300"/46], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)

3.509997167s ago: executing program 1 (id=2369):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x40011, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02})
close(r2) (async)
close(r2)
socket$inet_udp(0x2, 0x2, 0x0)
preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0)
munlockall() (async)
munlockall()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xc, 0x4) (async)
setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000000c0)=0xc, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020)

3.225061352s ago: executing program 1 (id=2373):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
iopl(0x3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffe4e, 0x0)
syz_usb_connect(0x3, 0x4d, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0xfd, 0xd8, 0xf8, 0x8, 0x403, 0xe0f7, 0x9c4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x7, 0xa, 0x10, 0xa, [{{0x9, 0x4, 0xf1, 0x6, 0x3, 0x0, 0x90, 0x88, 0xa, [], [{{0x9, 0x5, 0x7, 0x10, 0x0, 0x2, 0x8f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xa2e}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x59, 0x3, 0xb, [@generic={0x7, 0x5, "863797e290"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x3, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x58, 0x2, 0x20, 0x3}, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8000, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x0, 0x21, 0x2, 0x0, 0x3]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x9}, {0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x5}]}]}]}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x4040054)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="148659b0", @ANYRES16=r5, @ANYBLOB="d58325bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008814)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, r5, 0x411, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x91)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

2.01294473s ago: executing program 5 (id=2383):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0)

1.960970531s ago: executing program 5 (id=2385):
io_setup(0x7, &(0x7f0000000080)=<r0=>0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00')
write$cgroup_int(r1, &(0x7f0000002700)=0xffffffffffffff44, 0x12)
clock_gettime(0x7, &(0x7f0000000380))
io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0x30, 0x0, 0xc000000)
pipe2(&(0x7f00000001c0), 0x84000)
io_destroy(r0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
pipe(&(0x7f0000000200))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000300))
ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000340), &(0x7f0000000400)={[0x83]}, 0x8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x72, 0x0, &(0x7f0000000440)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612053f612948ba1fde5a291bcb2fc446dbb892502f14b70bdbd77872a26487bb61a60e2369f2"})

1.810381403s ago: executing program 5 (id=2389):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})

1.734190834s ago: executing program 5 (id=2390):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x93, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a431676"})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1000000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000))
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1.727166894s ago: executing program 5 (id=2392):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1201020, 0x0)
fadvise64(r0, 0x10000001007, 0x9, 0x5)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000)
mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000)
poll(&(0x7f0000000000)=[{r0, 0x20c0}, {r0, 0x2620}, {r0, 0x9}, {r0, 0x30a2}, {r0, 0x4000}, {r0, 0x20}, {r0, 0x5000}], 0x7, 0x3)

1.622230106s ago: executing program 5 (id=2395):
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000100)='oom_score_adj\x00')
exit(0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120110016cf9d310cb0400011f050102030109027c97010600a00709042f06005cc33c08"], 0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_getfd(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

721.968679ms ago: executing program 2 (id=2406):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
dup3(r2, r3, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240400d1}, 0x400c0) (async)
recvmmsg(r1, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001440)=""/230, 0xe6}], 0x5}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x12040, 0x0) (async)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215)

650.09388ms ago: executing program 2 (id=2407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

647.244001ms ago: executing program 2 (id=2408):
r0 = userfaultfd(0x80001)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
read(r1, &(0x7f0000000300)=""/74, 0x4a)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f00000002c0)=0x3)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x2000, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x40000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x13, 0x5, 0xc, 0x1f, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0xa9}, @sadb_ident={0x2, 0xa, 0xff, 0x0, 0x7fff}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bb8, 0xc5, {0x6, 0x2b, 0x2, 0x6, 0x0, 0x0, 0x0, @in=@local, @in6=@private0}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @loopback}}, @sadb_x_nat_t_type={0x1, 0x14, 0xfc}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x7, 0x1b, 0x0, 0x50000000}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_sa={0x2, 0x1, 0x4d5, 0x2, 0x9, 0x43, 0x4, 0x40000000}]}, 0xf8}}, 0x40004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

617.427271ms ago: executing program 2 (id=2409):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0})

580.253372ms ago: executing program 2 (id=2410):
setrlimit(0x8, &(0x7f0000000040)={0x8, 0x9})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04000001fff10000000006000000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x24, r3, 0x926fdb2c68a18847, 0x70bd29, 0x2, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c091}, 0x880)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x63f38000)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000002c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mknod$loop(&(0x7f0000000100)='./cgroup\x00', 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000034d564b"])
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r9 = memfd_secret(0x0)
getdents(r9, &(0x7f0000000380)=""/205, 0xcd)
getrlimit(0x3, &(0x7f00000000c0))

498.286453ms ago: executing program 2 (id=2411):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
read(r0, &(0x7f0000000280)=""/4096, 0x1000) (async)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004)

460.724113ms ago: executing program 3 (id=2413):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50)
r2 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
epoll_create1(0x80000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x9fffff, 0x800, 0x0, 0x1}, 0x20)
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x58, 0x0, &(0x7f00000001c0)=[@increfs, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/62, 0x3e, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0xe8, 0x0, &(0x7f0000000480)="5a2ce48d7a79b87873a1336c3049c8f5f9008724840db52b9f48cc4ff6e27a1f758976f32bd5da16acf4af245e8ce71cf701ab059adb1b92add5269095e3bae454c89aed8f3ef771420875477cade44569b7596476d69b06d155e412f93a24342eced6ec1744699d200c5ae7f4e43cbfab18491ba7e1f96a3ae1047694fda429f60574ed3dc19918019f0db7e5246728fe2bb7ea0e507c43cca11374503f21fa1f3033add706db653a3661e3c8534c20dba760a0fcdb54c32cad5531e7173fa809d358fb6d2b83f169f93253da3c23408af7f69ba3902e1e98e1d4c33f9494ef4091ad2c5001ffa9"})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
write$FUSE_CREATE_OPEN(r5, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x4, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x40002, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x7}}}, 0xa0)
setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0)
getitimer(0x1, &(0x7f0000000740))
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0xfffffffffffffffe)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62)

218.369437ms ago: executing program 3 (id=2414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x109122, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

118.102619ms ago: executing program 1 (id=2415):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f0000001600)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x83\xb3\xef\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
ftruncate(r3, 0x10001)
fcntl$addseals(r3, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000})
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000001000)={r3, 0x0, 0x0, 0x8000})
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x100000000b, 0x1, 0x1}})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x1210048, 0x4)

48.24802ms ago: executing program 3 (id=2416):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}})
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/126)

0s ago: executing program 1 (id=2417):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='},\x84{+\x00')
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:5/', @ANYRES32=r1], 0x31)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
preadv2(r7, &(0x7f0000000600)=[{&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000440)=""/137, 0x89}], 0x5, 0x9, 0x7ff, 0x1)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@subsystem='pids'}]})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
inotify_init()
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

kernel console output (not intermixed with test programs):

object.
[  126.917064][ T4201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  126.923289][ T4201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193
[  127.144093][ T4226] /dev/rnullb0: Can't open blockdev
[  127.325964][ T4242] syzkaller0: entered promiscuous mode
[  127.809344][   T36] kauditd_printk_skb: 27 callbacks suppressed
[  127.809365][   T36] audit: type=1400 audit(2000000002.770:947): avc:  denied  { setopt } for  pid=4243 comm="syz.5.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  127.899531][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  127.906879][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  127.914205][   T46] Bluetooth: hci1: Frame reassembly failed (-84)
[  128.123842][   T36] audit: type=1400 audit(2000000003.080:948): avc:  denied  { write } for  pid=4269 comm="syz.3.1296" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  128.256963][   T36] audit: type=1400 audit(2000000003.220:949): avc:  denied  { append } for  pid=4284 comm="syz.3.1301" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.378502][ T4291] rust_binder: Write failure EFAULT in pid:856
[  128.378705][ T4292] rust_binder: Write failure EFAULT in pid:856
[  128.405347][ T4287] /dev/rnullb0: Can't open blockdev
[  128.464808][   T36] audit: type=1400 audit(2000000003.420:950): avc:  denied  { getopt } for  pid=4296 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  128.536541][ T4297] binder: Bad value for 'max'
[  128.620652][   T36] audit: type=1400 audit(2000000003.580:951): avc:  denied  { add_name } for  pid=4299 comm="syz.2.1306" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.641537][   T36] audit: type=1400 audit(2000000003.580:952): avc:  denied  { create } for  pid=4299 comm="syz.2.1306" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  128.663512][   T36] audit: type=1400 audit(2000000003.580:953): avc:  denied  { associate } for  pid=4299 comm="syz.2.1306" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  128.837885][ T4306] rust_binder: Write failure EFAULT in pid:871
[  128.841533][   T36] audit: type=1400 audit(2000000003.800:954): avc:  denied  { ioctl } for  pid=4305 comm="syz.2.1308" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  129.492323][   T36] audit: type=1400 audit(2000000004.450:955): avc:  denied  { ioctl } for  pid=4314 comm="syz.2.1311" path="uts:[4026532481]" dev="nsfs" ino=4026532481 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  129.765876][  T306] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  129.915834][  T306] usb 3-1: Using ep0 maxpacket: 16
[  129.922156][  T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.932335][ T3336] Bluetooth: hci1: command 0x1003 tx timeout
[  129.932335][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.938632][  T306] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  129.944505][ T1208] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  129.955355][  T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.968776][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.978552][  T306] usb 3-1: Product: syz
[  129.982731][  T306] usb 3-1: Manufacturer: syz
[  129.987383][  T306] usb 3-1: SerialNumber: syz
[  130.023331][   T36] audit: type=1400 audit(2000000004.980:956): avc:  denied  { ioctl } for  pid=4320 comm="syz.5.1313" path="socket:[27278]" dev="sockfs" ino=27278 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  130.141809][ T4330] fuse: Unknown parameter '0xffffffffffffffff'
[  130.200451][   T64] usb 3-1: USB disconnect, device number 57
[  130.295847][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  130.445850][   T31] usb 6-1: Using ep0 maxpacket: 32
[  130.452106][   T31] usb 6-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config
[  130.462467][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.473030][   T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.482142][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.490227][   T31] usb 6-1: Product: 遒衸뻛߾霰嶍뫧텽魁肦̽㪶搜硘伣︗ዅ雟⊌검篵퀛쁇擏葌헇ꑁ爴莡퇻碸伳홒d꼷⪱꿥젉⡒ጌઁ둺甌꬞┷䧛籁돚뽊ᄡ錓ꦉ먥꯼쟴姡益ꚓ캛者䭳㊓Ⴒᩗ諭夅ꋠꙺ碩詼򰯾髟恵鬎韒旌岝ẓᯩ땬㷝䨒䖵䤚헠〛톍힞缵悈煽てᯫ哸펬㖒⢠㻨⿲竅㳏Ⓠ஛ᯚ
[  130.523797][   T31] usb 6-1: Manufacturer: 틉픗䍽둽╔ꨲ儿⍞눯倡匟Ỿ꽏ﱛÔᯭ쫊
[  130.533309][   T31] usb 6-1: SerialNumber: ᲧԄ謗ꫫℜ蓭氧ग़⏺탩뭸昌邇㮯뽖ư䢠㮧턧㼸뛽➡„쪓ᑢꈽ㹘ʈ凌퐨匲촐⻓좆㞟⎰ﯦ⿜ꙶ％⢀툧剬䀗墆禑憼࿶ࠂ끉᦭Ἣ毗褋ﲖ痵럯䌴ማ귖蹻总坸䯊寰뛠讉移偐꧞㙃䜢蜓ꏊΈǨ∻鼊蓴蕁ﴈ廉䗚硲콯㫝춥㪞벎䑝㰹ʐ㗵䓏ὡ
[  130.535861][  T306] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[  130.695894][  T306] usb 4-1: device descriptor read/64, error -71
[  130.737556][ T4332] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.777717][   T31] usb 6-1: 0:2 : does not exist
[  130.791251][   T31] usb 6-1: USB disconnect, device number 9
[  130.935911][  T306] usb 4-1: device descriptor read/64, error -71
[  130.975875][  T584] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  131.034778][ T4335] devtmpfs: Unknown parameter '^	*([%�'
[  131.052245][ T4340] fuse: Unknown parameter 'gro'
[  131.126607][  T584] usb 3-1: Using ep0 maxpacket: 32
[  131.133004][  T584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.142958][  T584] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  131.152146][  T584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.160953][  T584] usb 3-1: config 0 descriptor??
[  131.185883][  T306] usb 4-1: new low-speed USB device number 59 using dummy_hcd
[  131.307021][ T4352] binder: Unknown parameter 'uid'
[  131.315990][  T306] usb 4-1: device descriptor read/64, error -71
[  131.332001][ T4354] overlayfs: conflicting options: verity=require,redirect_dir=nofollow
[  131.396174][ T4359] cgroup: noprefix used incorrectly
[  131.555884][  T306] usb 4-1: device descriptor read/64, error -71
[  131.571336][  T584] magicmouse 0003:05AC:0265.000E: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0
[  131.665959][  T306] usb usb4-port1: attempt power cycle
[  131.711465][ T4377] overlayfs: failed to clone upperpath
[  131.718954][ T4377] overlayfs: missing 'workdir'
[  131.770495][ T4332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  131.770526][ T4332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:882
[  131.780630][  T921] usb 3-1: USB disconnect, device number 58
[  132.005869][  T306] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[  132.026911][  T306] usb 4-1: device descriptor read/8, error -71
[  132.156936][  T306] usb 4-1: device descriptor read/8, error -71
[  132.310883][ T4385] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.311220][ T4385] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  132.390636][ T4390] cgroup: fork rejected by pids controller in /syz2
[  132.405893][  T306] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  132.415461][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.422037][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.428676][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.435101][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.441479][  T306] usb 4-1: device descriptor read/8, error -71
[  132.447912][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.454411][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.463187][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.469920][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.475877][   T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  132.476258][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.490447][ T4389] fuse: Invalid gid '00000000000037777777777'
[  132.561656][ T4528] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1341'.
[  132.576836][  T306] usb 4-1: device descriptor read/8, error -71
[  132.607054][ T4531] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.612993][ T4531] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  132.625834][   T31] usb 6-1: Using ep0 maxpacket: 32
[  132.641394][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  132.651376][   T31] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  132.659824][   T31] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  132.670119][   T31] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  132.679244][   T31] usb 6-1: config 128 has no interface number 0
[  132.686011][   T31] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 127, changing to 10
[  132.695945][  T306] usb usb4-port1: unable to enumerate USB device
[  132.697552][   T31] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 41225, setting to 1024
[  132.717187][   T31] usb 6-1: config 128 interface 127 has no altsetting 0
[  132.726309][   T31] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  132.735417][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.743523][   T31] usb 6-1: Product: syz
[  132.747746][   T31] usb 6-1: Manufacturer: syz
[  132.752372][   T31] usb 6-1: SerialNumber: syz
[  132.959676][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.968682][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.992312][   T31] usb 6-1: USB disconnect, device number 10
[  133.000689][  T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  133.065871][  T584] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  133.216942][  T584] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.227208][  T584] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.236873][  T584] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  133.246022][  T584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.254023][  T584] usb 3-1: SerialNumber: syz
[  133.294206][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  133.294226][   T36] audit: type=1400 audit(2000000008.250:962): avc:  denied  { connect } for  pid=4545 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  133.714364][   T36] audit: type=1400 audit(2000000008.670:963): avc:  denied  { write } for  pid=4563 comm="syz.3.1353" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.721792][ T4558] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 208, size: 255)
[  133.737250][ T4558] rust_binder: Error while translating object.
[  133.749148][ T4558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  133.755423][ T4558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[  133.866117][   T36] audit: type=1400 audit(2000000008.830:964): avc:  denied  { read } for  pid=4566 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  133.976194][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'.
[  133.995822][   T36] audit: type=1400 audit(2000000008.950:965): avc:  denied  { accept } for  pid=4572 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  134.355853][    T9] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  134.505848][    T9] usb 4-1: device descriptor read/64, error -71
[  134.655833][   T31] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  134.745837][    T9] usb 4-1: device descriptor read/64, error -71
[  134.806859][   T31] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  134.815090][   T31] usb 6-1: config 0 has no interface number 0
[  134.821245][   T31] usb 6-1: config 0 interface 41 has no altsetting 0
[  134.829420][   T31] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  134.838578][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.846625][   T31] usb 6-1: Product: syz
[  134.850797][   T31] usb 6-1: Manufacturer: syz
[  134.855405][   T31] usb 6-1: SerialNumber: syz
[  134.860894][   T31] usb 6-1: config 0 descriptor??
[  134.995855][    T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  135.125844][    T9] usb 4-1: device descriptor read/64, error -71
[  135.366322][    T9] usb 4-1: device descriptor read/64, error -71
[  135.476506][    T9] usb usb4-port1: attempt power cycle
[  135.626693][   T31] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  135.644252][   T31] usb 6-1: USB disconnect, device number 11
[  135.815845][    T9] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  135.836916][    T9] usb 4-1: device descriptor read/8, error -71
[  135.880979][  T584] usb 3-1: 0:2 : does not exist
[  135.888243][  T584] usb 3-1: unit 5: unexpected type 0x0d
[  135.896462][  T584] usb 3-1: USB disconnect, device number 59
[  135.919567][  T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  135.966939][    T9] usb 4-1: device descriptor read/8, error -71
[  135.995558][   T36] audit: type=1400 audit(2000000010.950:966): avc:  denied  { execute } for  pid=4593 comm="syz.2.1362" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.033925][   T36] audit: type=1400 audit(2000000010.990:967): avc:  denied  { append } for  pid=4596 comm="syz.2.1363" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  136.069990][ T4597] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.070088][ T4597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1039
[  136.156528][ T4616] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  136.175855][ T4616] rust_binder: Error while translating object.
[  136.188224][ T4616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  136.194538][ T4616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238
[  136.205026][ T4616] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.214437][    T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  136.246927][    T9] usb 4-1: device descriptor read/8, error -71
[  136.258186][   T36] audit: type=1400 audit(2000000011.220:968): avc:  denied  { create } for  pid=4621 comm="syz.5.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  136.351618][ T4622] 9pnet_fd: Insufficient options for proto=fd
[  136.376111][ T4626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246
[  136.376220][ T4626] rust_binder: Read failure Err(EFAULT) in pid:246
[  136.386057][    T9] usb 4-1: device descriptor read/8, error -71
[  136.515972][    T9] usb usb4-port1: unable to enumerate USB device
[  136.646213][   T64] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  136.797292][   T64] usb 6-1: unable to get BOS descriptor or descriptor too short
[  136.805722][   T64] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  136.816118][   T64] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  136.827271][   T64] usb 6-1: string descriptor 0 read error: -22
[  136.833495][   T64] usb 6-1: New USB device found, idVendor=052d, idProduct=a4a1, bcdDevice= 0.40
[  136.842612][   T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  136.920059][ T4632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1042
[  137.058214][  T306] usb 6-1: USB disconnect, device number 12
[  137.175841][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  137.300316][ T4650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:822
[  137.347051][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.384342][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.406375][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.415749][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.425835][    T9] usb 3-1: Product: syz
[  137.430044][    T9] usb 3-1: Manufacturer: syz
[  137.438803][    T9] usb 3-1: SerialNumber: syz
[  137.622101][   T36] audit: type=1400 audit(2000000012.580:969): avc:  denied  { read } for  pid=4674 comm="syz.1.1390" name="/" dev="configfs" ino=2509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  137.645015][   T36] audit: type=1400 audit(2000000012.580:970): avc:  denied  { open } for  pid=4674 comm="syz.1.1390" path="/" dev="configfs" ino=2509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  137.683470][ T4681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256
[  137.792801][ T4681] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  137.835102][ T4689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262
[  137.874669][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'.
[  137.893754][   T36] audit: type=1400 audit(2000000012.860:971): avc:  denied  { load_policy } for  pid=4690 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  137.896999][ T4691] SELinux: ebitmap: truncated map
[  137.920969][ T4691] SELinux: failed to load policy
[  138.038742][ T4705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278
[  138.038778][ T4705] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  138.048168][ T4705] rust_binder: Read failure Err(EFAULT) in pid:278
[  138.085298][ T4709] binder: Binderfs stats mode cannot be changed during a remount
[  138.474797][    T9] cdc_ncm 3-1:1.0: bind() failure
[  138.480744][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  138.487674][  T306] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  138.495297][    T9] cdc_ncm 3-1:1.1: bind() failure
[  138.625876][  T306] usb 6-1: device descriptor read/64, error -71
[  138.762967][   T31] usb 3-1: USB disconnect, device number 60
[  138.865848][  T306] usb 6-1: device descriptor read/64, error -71
[  139.125863][  T306] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  139.255855][  T306] usb 6-1: device descriptor read/64, error -71
[  139.389620][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  139.389642][   T36] audit: type=1400 audit(2000000014.350:976): avc:  denied  { bind } for  pid=4774 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  139.495863][  T306] usb 6-1: device descriptor read/64, error -71
[  139.605959][  T306] usb usb6-port1: attempt power cycle
[  139.946238][  T306] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  139.976978][  T306] usb 6-1: device descriptor read/8, error -71
[  140.116893][  T306] usb 6-1: device descriptor read/8, error -71
[  140.232488][ T4805] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  140.238582][ T4805] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  140.256192][ T4809] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  140.277538][ T4809] devtmpfs: Unknown parameter 'nr_inode��REPvx��X�F]��e'
[  140.277538][   T36] audit: type=1400 audit(2000000015.240:977): avc:  denied  { remount } for  pid=4807 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  140.310946][ T4808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082
[  140.365858][  T306] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  140.396865][  T306] usb 6-1: device descriptor read/8, error -71
[  140.526887][  T306] usb 6-1: device descriptor read/8, error -71
[  140.635931][  T306] usb usb6-port1: unable to enumerate USB device
[  140.770433][   T36] audit: type=1400 audit(2000000015.730:978): avc:  denied  { lock } for  pid=4825 comm="syz.3.1439" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  140.917778][ T4830] /dev/loop0: Can't lookup blockdev
[  141.035847][  T584] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  141.196907][  T584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10
[  141.228726][  T584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25441, setting to 1024
[  141.242692][  T584] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  141.252018][  T584] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  141.261643][  T584] usb 4-1: Manufacturer: syz
[  141.271241][  T584] usb 4-1: config 0 descriptor??
[  141.279051][  T584] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  141.286453][  T584] usb 4-1: No valid video chain found.
[  141.357087][ T4864] syzkaller0: entered promiscuous mode
[  141.362644][ T4864] syzkaller0: entered allmulticast mode
[  141.408324][ T4865] rust_binder: Write failure EFAULT in pid:1102
[  141.480386][ T4827] rust_binder: Write failure EINVAL in pid:845
[  141.487413][ T4827] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  141.493692][ T4827] rust_binder: Read failure Err(EFAULT) in pid:845
[  141.570082][ T4875] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  141.577384][ T4875] rust_binder: Error while translating object.
[  141.583852][ T4875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  141.590115][ T4875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[  141.821362][   T36] audit: type=1400 audit(2000000000.470:979): avc:  denied  { setopt } for  pid=4883 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  141.865806][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  141.919986][   T36] audit: type=1400 audit(2000000000.570:980): avc:  denied  { map } for  pid=4897 comm="syz.1.1463" path="socket:[30306]" dev="sockfs" ino=30306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  141.977272][ T4905] fuse: Bad value for 'rootmode'
[  141.985794][   T36] audit: type=1400 audit(2000000000.630:981): avc:  denied  { sqpoll } for  pid=4904 comm="syz.1.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  142.017950][ T4907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1467'.
[  142.029449][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.045782][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.056127][   T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  142.065241][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.074072][   T10] usb 6-1: config 0 descriptor??
[  142.144085][ T4920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4920 comm=syz.1.1472
[  142.156993][ T4920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=4920 comm=syz.1.1472
[  142.185718][   T36] audit: type=1400 audit(2000000000.830:982): avc:  denied  { create } for  pid=4926 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  142.214761][ T4929] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.215003][ T4929] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  142.223486][ T4929] rust_binder: Write failure EINVAL in pid:1110
[  142.248812][ T4935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.256924][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'.
[  142.275330][ T4935] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  142.282993][ T4880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.288561][ T4935] rust_binder: Write failure EINVAL in pid:1112
[  142.296807][ T4880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.434047][   T36] audit: type=1400 audit(2000000001.080:983): avc:  denied  { accept } for  pid=4950 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  142.456403][   T36] audit: type=1400 audit(2000000001.110:984): avc:  denied  { accept } for  pid=4950 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  142.515774][   T10] isku 0003:1E7D:319C.000F: unknown main item tag 0x0
[  142.522671][   T10] isku 0003:1E7D:319C.000F: unknown main item tag 0x0
[  142.536686][   T10] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0
[  142.584610][ T4956] input: syz1 as /devices/virtual/input/input21
[  142.591696][   T36] audit: type=1400 audit(2000000001.240:985): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=631 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  142.716736][   T10] isku 0003:1E7D:319C.000F: couldn't init struct isku_device
[  142.725243][   T10] isku 0003:1E7D:319C.000F: couldn't install keyboard
[  142.733120][   T10] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -71
[  142.742914][   T10] usb 6-1: USB disconnect, device number 17
[  142.978754][ T4974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4974 comm=syz.1.1494
[  142.991792][ T4974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4974 comm=syz.1.1494
[  143.233992][ T5000] rust_binder: Write failure EINVAL in pid:325
[  143.300135][ T5002] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.306966][ T5002] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  143.335955][ T5005] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.346254][ T5004] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  143.379070][ T5010] cgroup: Unknown subsys name 'measure'
[  143.394116][ T5010] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1508'.
[  143.471689][ T5016] 9pnet_fd: Insufficient options for proto=fd
[  143.636254][ T5029] fuse: Bad value for 'group_id'
[  143.641336][ T5029] fuse: Bad value for 'group_id'
[  143.716645][   T10] usb 4-1: USB disconnect, device number 66
[  143.749103][ T5039] overlay: filesystem on ./bus not supported as upperdir
[  143.781108][ T5047] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.782874][ T5047] rust_binder: Write failure EFAULT in pid:1155
[  143.795820][   T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  143.971168][   T31] usb 6-1: Using ep0 maxpacket: 16
[  143.982119][   T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  143.994338][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.004911][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.015956][   T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.026586][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.034941][   T31] usb 6-1: Product: syz
[  144.050839][   T31] usb 6-1: Manufacturer: syz
[  144.055500][   T31] usb 6-1: SerialNumber: syz
[  144.446787][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.453878][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.461030][ T5097] bridge_slave_0: entered allmulticast mode
[  144.467631][ T5097] bridge_slave_0: entered promiscuous mode
[  144.474370][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.483759][ T5105] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.484112][ T5105] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  144.486172][   T31] usb 6-1: 0:2 : does not exist
[  144.503700][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.510911][ T5097] bridge_slave_1: entered allmulticast mode
[  144.519155][   T31] usb 6-1: USB disconnect, device number 18
[  144.526147][ T5097] bridge_slave_1: entered promiscuous mode
[  144.534029][   T46] bridge_slave_1: left allmulticast mode
[  144.539752][   T46] bridge_slave_1: left promiscuous mode
[  144.545800][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.555653][   T46] bridge_slave_0: left allmulticast mode
[  144.561511][   T46] bridge_slave_0: left promiscuous mode
[  144.568534][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.685664][   T46] veth1_macvtap: left promiscuous mode
[  144.691501][   T46] veth0_vlan: left promiscuous mode
[  144.784903][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.792018][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.799366][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.806452][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.839452][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.847827][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.872514][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.879645][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.889315][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.896414][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.938045][ T5097] veth0_vlan: entered promiscuous mode
[  144.952392][ T5097] veth1_macvtap: entered promiscuous mode
[  144.975315][ T5126] binder: Unknown parameter 'defcontext01777777777777777777777'
[  145.014525][   T36] kauditd_printk_skb: 10 callbacks suppressed
[  145.014543][   T36] audit: type=1400 audit(2000000003.660:996): avc:  denied  { mounton } for  pid=5097 comm="syz-executor" path="/root/syzkaller.zRgRbC/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  145.058768][ T5135] netlink: 'syz.5.1548': attribute type 4 has an invalid length.
[  145.064085][  T319] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  145.073967][   T36] audit: type=1400 audit(2000000003.700:997): avc:  denied  { mounton } for  pid=5097 comm="syz-executor" path="/root/syzkaller.zRgRbC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  145.074012][   T36] audit: type=1400 audit(2000000003.700:998): avc:  denied  { mounton } for  pid=5097 comm="syz-executor" path="/root/syzkaller.zRgRbC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  145.130604][   T36] audit: type=1400 audit(2000000003.700:999): avc:  denied  { mounton } for  pid=5097 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  145.163127][  T319] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  145.168126][ T5141] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  145.190910][ T5144] rust_binder: Write failure EFAULT in pid:870
[  145.201121][ T5142] fido_id[5142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  145.244753][ T5151] fuse: Unknown parameter 'roosmode'
[  145.347046][ T5154] SELinux: failed to load policy
[  145.400733][ T5167] SELinux:  Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped).
[  145.411400][   T36] audit: type=1400 audit(2000000004.060:1000): avc:  denied  { relabelto } for  pid=5166 comm="syz.2.1558" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  145.445667][   T36] audit: type=1400 audit(2000000004.060:1001): avc:  denied  { associate } for  pid=5166 comm="syz.2.1558" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_exec_t:s0"
[  145.474632][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  145.635821][  T319] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  145.675796][   T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  145.786923][  T319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.797888][  T319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.807665][  T319] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.820633][  T319] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.829720][  T319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.835794][   T10] usb 4-1: Using ep0 maxpacket: 32
[  145.843246][  T319] usb 6-1: config 0 descriptor??
[  145.844623][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  145.857725][   T10] usb 4-1: config 0 has no interface number 0
[  145.863844][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  145.872107][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  145.881301][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.889350][   T10] usb 4-1: Product: syz
[  145.893643][   T10] usb 4-1: Manufacturer: syz
[  145.898339][   T10] usb 4-1: SerialNumber: syz
[  145.903754][   T10] usb 4-1: config 0 descriptor??
[  145.909673][   T10] smsc75xx v1.0.0
[  146.062302][  T319] usbhid 6-1:0.0: can't add hid device: -71
[  146.069227][  T319] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  146.080957][  T319] usb 6-1: USB disconnect, device number 19
[  146.087976][   T36] audit: type=1400 audit(2000000004.730:1002): avc:  denied  { write } for  pid=5178 comm="syz.5.1561" path="socket:[32492]" dev="sockfs" ino=32492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  146.114254][   T36] audit: type=1400 audit(2000000004.740:1003): avc:  denied  { read write } for  pid=5178 comm="syz.5.1561" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  146.143117][   T36] audit: type=1400 audit(2000000004.740:1004): avc:  denied  { open } for  pid=5178 comm="syz.5.1561" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  146.172217][   T36] audit: type=1400 audit(2000000004.760:1005): avc:  denied  { map } for  pid=5178 comm="syz.5.1561" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  146.341209][ T5199] kvm: kvm [5198]: vcpu0, guest rIP: 0x94f Unhandled WRMSR(0xc1) = 0xb86600a000000000
[  146.367428][ T5199] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  146.376312][ T5199] rust_binder: Write failure EINVAL in pid:17
[  146.551682][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  146.562610][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  146.625839][  T306] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  146.715810][   T64] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  146.775785][  T306] usb 6-1: Using ep0 maxpacket: 16
[  146.782017][  T306] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  146.790352][  T306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.800642][  T306] usb 6-1: config 0 has no interface number 0
[  146.808376][  T306] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  146.817548][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.825568][  T306] usb 6-1: Product: syz
[  146.829799][  T306] usb 6-1: Manufacturer: syz
[  146.834499][  T306] usb 6-1: SerialNumber: syz
[  146.839886][  T306] usb 6-1: config 0 descriptor??
[  146.846850][  T306] usb 6-1: Found UVC 0.00 device syz (046c:14e8)
[  146.847856][   T64] usb 2-1: device descriptor read/64, error -71
[  146.853260][  T306] usb 6-1: No valid video chain found.
[  147.047716][  T306] usb 6-1: USB disconnect, device number 20
[  147.095800][   T64] usb 2-1: device descriptor read/64, error -71
[  147.335804][   T64] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  147.445817][ T1208] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  147.445851][ T1209] Bluetooth: hci1: command 0x1003 tx timeout
[  147.452261][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  147.458019][ T3336] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.470391][   T64] usb 2-1: device descriptor read/64, error -71
[  147.684968][ T5226] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.685601][ T5226] rust_binder: Error while translating object.
[  147.693615][ T5226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  147.700076][ T5226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:372
[  147.715859][   T64] usb 2-1: device descriptor read/64, error -71
[  147.835875][   T64] usb usb2-port1: attempt power cycle
[  147.995845][  T306] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  148.080507][ T5240] netlink: 'syz.2.1579': attribute type 11 has an invalid length.
[  148.155779][  T306] usb 6-1: Using ep0 maxpacket: 16
[  148.162040][  T306] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  148.171777][  T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.182719][  T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.185934][   T64] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  148.193667][  T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.209815][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.218042][  T306] usb 6-1: Product: syz
[  148.222273][  T306] usb 6-1: Manufacturer: syz
[  148.227090][  T306] usb 6-1: SerialNumber: syz
[  148.227262][   T64] usb 2-1: device descriptor read/8, error -71
[  148.366878][   T64] usb 2-1: device descriptor read/8, error -71
[  148.378474][ T5260] tmpfs: Invalid uid '0x00000000ffffffff'
[  148.384317][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[  148.395870][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[  148.406040][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  148.415614][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  148.426084][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  148.435949][   T10] usb 4-1: USB disconnect, device number 67
[  148.605812][   T64] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  148.626834][   T64] usb 2-1: device descriptor read/8, error -71
[  148.649990][  T306] usb 6-1: 0:2 : does not exist
[  148.756916][   T64] usb 2-1: device descriptor read/8, error -71
[  148.865861][   T64] usb usb2-port1: unable to enumerate USB device
[  148.894272][ T5280] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  149.018412][ T5294] tipc: Cannot configure node identity twice
[  149.125470][ T5305] Unsupported ieee802154 address type: 0
[  149.137167][    T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  149.227581][ T5311] netlink: 'syz.3.1598': attribute type 10 has an invalid length.
[  149.260418][ T5313] rust_binder: Write failure EINVAL in pid:907
[  149.273056][ T5315] rust_binder: Error while translating object.
[  149.279385][ T5315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  149.285602][ T5315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:909
[  149.315693][    T9] usb 3-1: Using ep0 maxpacket: 32
[  149.331501][    T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  149.340531][    T9] usb 3-1: config 0 has no interface number 0
[  149.346700][    T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  149.356758][    T9] usb 3-1: config 0 interface 196 has no altsetting 0
[  149.364849][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  149.373991][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.382054][    T9] usb 3-1: Product: syz
[  149.386265][    T9] usb 3-1: Manufacturer: syz
[  149.395652][    T9] usb 3-1: SerialNumber: syz
[  149.401834][    T9] usb 3-1: config 0 descriptor??
[  149.408001][ T5280] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  149.440452][ T5329] SELinux: failed to load policy
[  149.445857][ T5330] SELinux:  policydb version -845211227 does not match my version range 15-33
[  149.454819][ T5330] SELinux: failed to load policy
[  149.551761][ T5334] kvm: pic: non byte write
[  149.647724][ T5342] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  149.779549][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'.
[  149.817315][    T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  149.828043][    T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -22
[  150.026596][  T584] usb 3-1: USB disconnect, device number 61
[  150.052151][ T5228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.052547][ T5228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  150.065606][ T5228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:374
[  150.090080][  T305] Bluetooth: hci0: Frame reassembly failed (-84)
[  150.173833][  T306] usb 6-1: USB disconnect, device number 21
[  150.583121][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  150.583143][   T36] audit: type=1400 audit(2000000009.230:1021): avc:  denied  { read write } for  pid=5366 comm="syz.2.1618" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  150.644531][   T36] audit: type=1400 audit(2000000009.260:1022): avc:  denied  { open } for  pid=5366 comm="syz.2.1618" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  150.693442][ T5369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  150.727656][ T5369] rust_binder: Error while translating object.
[  150.734479][ T5369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  150.741531][ T5369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377
[  150.921364][   T36] audit: type=1400 audit(2000000009.570:1023): avc:  denied  { setopt } for  pid=5379 comm="syz.2.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  151.195459][  T306] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  151.356477][  T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  151.371506][  T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.382992][  T306] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  151.397951][  T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.415790][  T306] usb 3-1: config 0 descriptor??
[  151.827056][  T306] usbhid 3-1:0.0: can't add hid device: -71
[  151.835113][  T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  151.847822][  T306] usb 3-1: USB disconnect, device number 62
[  152.165379][ T3336] Bluetooth: hci0: command 0x1003 tx timeout
[  152.175311][ T1208] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.220925][   T36] audit: type=1400 audit(2000000010.870:1024): avc:  denied  { associate } for  pid=5402 comm="syz.1.1631" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  152.242776][ T5407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.258801][ T5407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.270790][   T36] audit: type=1326 audit(2000000010.910:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.5.1632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bdc18e929 code=0x0
[  152.313032][ T5410] binder: Unknown parameter 's'
[  152.478418][  T574] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  152.490638][  T574] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  152.538619][ T5416] fido_id[5416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  152.921705][ T5443] tmpfs: Bad value for 'uid'
[  152.928575][ T5443] tmpfs: Bad value for 'uid'
[  152.964899][ T5447] overlay: Unknown parameter 'uid'
[  153.106708][   T36] audit: type=1326 audit(2000000011.760:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.1.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efce718e929 code=0x0
[  153.141986][ T5480] fuse: Unknown parameter ''
[  153.179231][   T36] audit: type=1400 audit(2000000011.830:1027): avc:  denied  { bind } for  pid=5501 comm="syz.5.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  153.203773][   T36] audit: type=1400 audit(2000000011.830:1028): avc:  denied  { name_bind } for  pid=5501 comm="syz.5.1653" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  153.209140][ T5505] /dev/rnullb0: Can't open blockdev
[  153.225491][   T36] audit: type=1400 audit(2000000011.830:1029): avc:  denied  { node_bind } for  pid=5501 comm="syz.5.1653" saddr=2001::2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  153.356719][ T5504] raw_sendmsg: syz.5.1654 forgot to set AF_INET. Fix it!
[  153.473763][   T36] audit: type=1400 audit(2000000012.120:1030): avc:  denied  { watch } for  pid=5511 comm="syz.3.1656" path="/328/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  153.607110][ T5520] tmpfs: Unknown parameter 'noswX���'
[  153.681607][ T5528] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1661'.
[  153.960927][ T5549] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  153.968241][ T5547] SELinux: failed to load policy
[  153.995976][ T5552] rust_binder: Error while translating object.
[  153.996014][ T5552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  154.002324][ T5552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:991
[  154.117765][ T5563] 9pnet_fd: Insufficient options for proto=fd
[  154.322282][ T5582] kvm: kvm [5581]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[  154.371937][ T5585] can0: slcan on ptm3.
[  154.445981][  T574] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  154.538846][ T5584] can0 (unregistered): slcan off ptm3.
[  154.577053][ T5607] binder: Unknown parameter 'context�'
[  154.607856][  T574] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  154.632111][  T574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.660791][  T574] usb 3-1: config 0 descriptor??
[  154.684624][ T5626] fuse: Bad value for 'group_id'
[  154.695055][ T5626] fuse: Bad value for 'group_id'
[  154.704922][ T5626] binder: Bad value for 'max'
[  154.871650][  T574] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  154.902230][ T5645] 9pnet_fd: Insufficient options for proto=fd
[  155.024966][  T319] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  155.061816][ T5666] SELinux:  policydb magic number 0x20455300 does not match expected magic number 0xf97cff8c
[  155.072178][ T5666] SELinux: failed to load policy
[  155.081927][  T574] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  155.093091][  T574] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  155.103572][  T574] asix 3-1:0.0: probe with driver asix failed with error -32
[  155.162522][  T306] usb 3-1: USB disconnect, device number 63
[  155.194977][  T319] usb 2-1: Using ep0 maxpacket: 8
[  155.203852][  T319] usb 2-1: unable to get BOS descriptor or descriptor too short
[  155.222607][  T319] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  155.234955][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  155.246000][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  155.265223][ T5682] fuse: Bad value for 'user_id'
[  155.274509][ T5682] fuse: Bad value for 'user_id'
[  155.279471][  T319] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  155.299833][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  155.309715][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  155.321236][  T319] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  155.330613][  T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.338832][  T319] usb 2-1: Product: syz
[  155.343288][  T319] usb 2-1: Manufacturer: syz
[  155.348078][  T319] usb 2-1: SerialNumber: syz
[  155.354350][  T319] usb 2-1: config 0 descriptor??
[  155.361448][ T5642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  155.379427][ T5693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  155.379476][ T5693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:457
[  155.386191][ T5691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048
[  155.390121][ T5693] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  155.406463][ T5691] rust_binder: Error while translating object.
[  155.407502][ T5693] rust_binder: Read failure Err(EFAULT) in pid:457
[  155.416025][ T5691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  155.429845][ T5691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048
[  155.444263][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  155.572204][  T306] usb 2-1: USB disconnect, device number 8
[  155.794901][  T319] usb 4-1: new low-speed USB device number 68 using dummy_hcd
[  155.945214][  T319] usb 4-1: no configurations
[  155.949842][  T319] usb 4-1: can't read configurations, error -22
[  156.014903][ T5719] batadv_slave_1: entered promiscuous mode
[  156.021251][ T5718] batadv_slave_1: left promiscuous mode
[  156.085995][  T319] usb 4-1: new low-speed USB device number 69 using dummy_hcd
[  156.097705][ T5724] rust_binder: Write failure EINVAL in pid:87
[  156.163200][ T5730] binder: Bad value for 'stats'
[  156.245287][  T319] usb 4-1: no configurations
[  156.249944][  T319] usb 4-1: can't read configurations, error -22
[  156.257046][  T319] usb usb4-port1: attempt power cycle
[  156.514796][  T574] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.594795][  T319] usb 4-1: new low-speed USB device number 70 using dummy_hcd
[  156.615485][  T319] usb 4-1: no configurations
[  156.620112][  T319] usb 4-1: can't read configurations, error -22
[  156.638086][   T36] kauditd_printk_skb: 25 callbacks suppressed
[  156.638105][   T36] audit: type=1400 audit(2000000015.291:1056): avc:  denied  { name_bind } for  pid=5734 comm="syz.5.1724" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  156.685908][  T574] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  156.696854][  T574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.707810][  T574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.717590][  T574] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  156.731942][  T574] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  156.737638][ T5740] tipc: Started in network mode
[  156.741688][  T574] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  156.746369][ T5740] tipc: Node identity 162361a0824, cluster identity 4711
[  156.754515][  T574] usb 2-1: Manufacturer: syz
[  156.761330][  T319] usb 4-1: new low-speed USB device number 71 using dummy_hcd
[  156.773673][ T5740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.773833][  T574] usb 2-1: config 0 descriptor??
[  156.792124][ T5739] tipc: Disabling bearer <eth:syzkaller0>
[  156.798792][  T319] usb 4-1: no configurations
[  156.803425][  T319] usb 4-1: can't read configurations, error -22
[  156.811326][  T319] usb usb4-port1: unable to enumerate USB device
[  156.914766][  T306] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  157.074722][  T306] usb 6-1: Using ep0 maxpacket: 16
[  157.083702][  T306] usb 6-1: config 0 has no interfaces?
[  157.090673][  T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  157.099770][  T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.107794][  T306] usb 6-1: Product: syz
[  157.111986][  T306] usb 6-1: Manufacturer: syz
[  157.116626][  T306] usb 6-1: SerialNumber: syz
[  157.122252][  T306] usb 6-1: config 0 descriptor??
[  157.154757][  T319] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  157.190594][  T574] appleir 0003:05AC:8243.0012: unknown main item tag 0x0
[  157.198102][  T574] appleir 0003:05AC:8243.0012: No inputs registered, leaving
[  157.207057][  T574] appleir 0003:05AC:8243.0012: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  157.304765][  T319] usb 3-1: Using ep0 maxpacket: 16
[  157.311094][  T319] usb 3-1: config 0 has no interfaces?
[  157.318036][  T319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  157.327194][  T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.335231][  T319] usb 3-1: Product: syz
[  157.337892][  T574] usb 6-1: USB disconnect, device number 22
[  157.339577][  T319] usb 3-1: Manufacturer: syz
[  157.351193][  T319] usb 3-1: SerialNumber: syz
[  157.356791][  T319] usb 3-1: config 0 descriptor??
[  157.587909][  T574] usb 3-1: USB disconnect, device number 64
[  157.860581][ T5752] fuse: Bad value for 'rootmode'
[  158.125906][ T5762] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  158.134790][ T5762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'.
[  158.143872][ T5763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'.
[  158.171656][   T36] audit: type=1400 audit(2000000016.821:1057): avc:  denied  { map } for  pid=5764 comm="syz.2.1733" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  158.583973][ T5775] rust_binder: Error while translating object.
[  158.584002][ T5775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  158.590388][ T5775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1056
[  158.601369][ T5775] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  158.610930][ T5775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1056
[  159.140673][ T5798] /dev/rnullb0: Can't open blockdev
[  159.257201][ T5806] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  159.277452][ T5808] overlay: Bad value for 'uuid'
[  159.309597][ T5816] /dev/rnullb0: Can't open blockdev
[  159.328167][ T5818] rust_binder: Write failure EFAULT in pid:1369
[  159.534425][  T584] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  159.694783][  T584] usb 2-1: device firmware changed
[  159.700195][  T574] usb 2-1: USB disconnect, device number 9
[  159.804401][  T319] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  159.834397][  T574] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  159.956978][  T319] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  159.966176][  T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.974168][  T319] usb 4-1: Product: syz
[  159.978418][  T319] usb 4-1: Manufacturer: syz
[  159.983027][  T319] usb 4-1: SerialNumber: syz
[  159.988315][  T319] usb 4-1: config 0 descriptor??
[  159.995528][  T574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.006533][  T574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.016327][  T574] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.029266][  T574] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.038366][  T574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.047197][  T574] usb 2-1: config 0 descriptor??
[  160.262844][  T574] usbhid 2-1:0.0: can't add hid device: -71
[  160.269885][  T574] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  160.284510][  T574] usb 2-1: USB disconnect, device number 10
[  160.302623][ T5834] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  160.311395][ T5834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1379
[  160.348632][ T5840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5840 comm=syz.1.1755
[  160.387698][ T5845] /dev/rnullb0: Can't open blockdev
[  160.635934][  T319] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  160.646480][  T319] asix 4-1:0.0: probe with driver asix failed with error -71
[  160.655053][  T319] usb 4-1: USB disconnect, device number 72
[  160.872672][ T5854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1761'.
[  160.884006][ T5854] rust_binder: Error while translating object.
[  160.884038][ T5854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  160.890276][ T5854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1389
[  161.154227][  T574] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  161.304205][  T319] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[  161.320514][ T5876] overlayfs: missing 'lowerdir'
[  161.325506][  T574] usb 3-1: Using ep0 maxpacket: 16
[  161.332119][  T574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.343378][  T574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.356688][  T574] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  161.365810][  T574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.375865][  T574] usb 3-1: config 0 descriptor??
[  161.383161][ T5875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1069
[  161.419407][ T5879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1072
[  161.477740][  T319] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  161.498225][  T319] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  161.509229][  T319] usb 6-1: config 0 interface 0 has no altsetting 0
[  161.516960][  T319] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  161.526933][  T319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.535701][  T319] usb 6-1: config 0 descriptor??
[  161.540962][ T5864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  161.674170][  T306] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[  161.750172][  T319] logitech 0003:046D:C286.0013: unknown main item tag 0x6
[  161.757457][  T584] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  161.765987][  T319] logitech 0003:046D:C286.0013: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0
[  161.777953][  T319] logitech 0003:046D:C286.0013: no inputs found
[  161.785594][  T574] microsoft 0003:045E:07DA.0014: item 0 4 0 8 parsing failed
[  161.793189][  T574] microsoft 0003:045E:07DA.0014: parse failed
[  161.804390][  T574] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22
[  161.825182][  T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.835333][  T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.845603][  T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.854721][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.862750][  T306] usb 4-1: Product: syz
[  161.867055][  T306] usb 4-1: Manufacturer: syz
[  161.871655][  T306] usb 4-1: SerialNumber: syz
[  161.925345][  T584] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  161.933500][  T584] usb 2-1: config 0 has no interface number 0
[  161.939684][  T584] usb 2-1: config 0 interface 41 has no altsetting 0
[  161.947912][  T584] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  161.957077][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.965132][  T584] usb 2-1: Product: syz
[  161.965711][  T574] usb 6-1: USB disconnect, device number 23
[  161.969357][  T584] usb 2-1: Manufacturer: syz
[  161.982383][  T584] usb 2-1: SerialNumber: syz
[  161.990147][  T584] usb 2-1: config 0 descriptor??
[  162.205260][ T5859] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.207019][  T319] usb 3-1: USB disconnect, device number 65
[  162.266235][  T584] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  162.277643][  T584] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  162.286542][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.296161][  T584] usb 2-1: USB disconnect, device number 11
[  162.307587][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.317049][  T306] usb 4-1: 0:2 : does not exist
[  162.357109][ T5895] overlayfs: missing 'workdir'
[  162.516912][ T5879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  162.516953][ T5879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1072
[  162.537386][  T306] usb 4-1: USB disconnect, device number 73
[  162.579573][ T5902] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  162.588916][   T36] audit: type=1400 audit(2000000021.241:1058): avc:  denied  { append } for  pid=5901 comm="syz.1.1777" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  162.744056][  T574] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  162.792396][ T5908] 9pnet: Could not find request transport: fd�u �.o=0x0000000000000008
[  162.895973][  T574] usb 6-1: Using ep0 maxpacket: 16
[  162.906869][  T574] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  162.916276][  T574] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.927204][  T574] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.937939][  T574] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.947029][  T574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.955063][  T574] usb 6-1: Product: syz
[  162.959229][  T574] usb 6-1: Manufacturer: syz
[  162.963818][  T574] usb 6-1: SerialNumber: syz
[  163.053408][ T5920] rust_binder: Error while translating object.
[  163.053445][ T5920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  163.059788][ T5920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1074
[  163.114754][ T5927] /dev/rnullb0: Can't open blockdev
[  163.156782][ T5932] rust_binder: Write failure EINVAL in pid:1086
[  163.164028][   T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  163.323985][   T10] usb 3-1: Using ep0 maxpacket: 8
[  163.330147][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  163.341412][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  163.350721][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.359834][   T10] usb 3-1: config 0 descriptor??
[  163.390289][  T574] usb 6-1: 0:2 : does not exist
[  163.416135][   T36] audit: type=1400 audit(2000000022.071:1059): avc:  denied  { append } for  pid=5940 comm="syz.1.1791" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  163.613960][  T306] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  163.713925][  T584] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  163.765206][  T306] usb 4-1: unable to get BOS descriptor or descriptor too short
[  163.774461][  T306] usb 4-1: not running at top speed; connect to a high speed hub
[  163.782877][   T10] wacom 0003:056A:0094.0015: unknown main item tag 0x0
[  163.789919][   T10] wacom 0003:056A:0094.0015: unknown main item tag 0x0
[  163.796908][   T10] wacom 0003:056A:0094.0015: unknown main item tag 0x0
[  163.803998][  T306] usb 4-1: config 14 has an invalid interface number: 18 but max is 0
[  163.812207][  T306] usb 4-1: config 14 has no interface number 0
[  163.818594][   T10] wacom 0003:056A:0094.0015: Using device in hidraw-only mode
[  163.826537][  T306] usb 4-1: config 14 interface 18 has no altsetting 0
[  163.833515][   T10] wacom 0003:056A:0094.0015: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0
[  163.846364][  T306] usb 4-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62
[  163.856490][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.864631][  T306] usb 4-1: Product: syz
[  163.868838][  T306] usb 4-1: Manufacturer: syz
[  163.873451][  T306] usb 4-1: SerialNumber: syz
[  163.875115][  T584] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[  163.980476][   T45] usb 3-1: USB disconnect, device number 66
[  164.202674][  T306] rtl8150 4-1:14.18: couldn't find required endpoints
[  164.207874][   T45] usb 6-1: USB disconnect, device number 24
[  164.215592][  T306] rtl8150 4-1:14.18: probe with driver rtl8150 failed with error -5
[  164.235347][  T306] usb 4-1: USB disconnect, device number 74
[  164.416966][ T5962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1421
[  164.445029][ T5966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1425
[  164.454844][ T5966] rust_binder: Write failure EINVAL in pid:1425
[  164.730619][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'.
[  164.753616][   T13] tipc: Subscription rejected, illegal request
[  164.776223][ T5975] /dev/rnullb0: Can't open blockdev
[  164.895020][ T5990] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  164.904092][ T5990] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  165.063758][   T45] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  165.193727][   T45] usb 4-1: device descriptor read/64, error -71
[  165.433757][   T45] usb 4-1: device descriptor read/64, error -71
[  165.563701][  T574] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  165.673674][   T45] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  165.713672][  T574] usb 3-1: Using ep0 maxpacket: 16
[  165.720014][  T574] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  165.728252][  T574] usb 3-1: config 1 has no interface number 0
[  165.734401][  T574] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  165.744361][  T574] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  165.754405][  T574] usb 3-1: config 1 interface 105 has no altsetting 0
[  165.762665][  T574] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  165.771780][  T574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.779891][  T574] usb 3-1: Product: syz
[  165.784115][  T574] usb 3-1: Manufacturer: syz
[  165.788731][  T574] usb 3-1: SerialNumber: syz
[  165.794536][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  165.801868][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  165.809343][   T45] usb 4-1: device descriptor read/64, error -71
[  165.933643][ T6012] fuse: Bad value for 'fd'
[  166.011069][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.019707][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.053651][   T45] usb 4-1: device descriptor read/64, error -71
[  166.174236][   T45] usb usb4-port1: attempt power cycle
[  166.229070][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  166.236467][ T5995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  166.489807][  T584] usb 2-1: string descriptor 0 read error: -71
[  166.496101][  T584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  166.505370][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.517120][  T584] usb 2-1: can't set config #1, error -71
[  166.523681][   T45] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  166.531675][  T584] usb 2-1: USB disconnect, device number 12
[  166.542354][ T6022] 9pnet_fd: Insufficient options for proto=fd
[  166.554669][   T45] usb 4-1: device descriptor read/8, error -71
[  166.619631][ T6027] /dev/rnullb0: Can't open blockdev
[  166.644735][ T5995] syz.2.1809 (5995) used obsolete PPPIOCDETACH ioctl
[  166.685207][   T45] usb 4-1: device descriptor read/8, error -71
[  166.708016][ T6031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:168
[  166.718668][ T6032] binder: Bad value for 'stats'
[  166.809281][ T6043] __vm_enough_memory: pid: 6043, comm: syz.1.1827, bytes: 70373039144960 not enough memory for the allocation
[  166.821809][ T6044] __vm_enough_memory: pid: 6044, comm: syz.1.1827, bytes: 70373039144960 not enough memory for the allocation
[  166.923590][   T45] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  166.950500][   T45] usb 4-1: device descriptor read/8, error -71
[  166.997996][ T6055] tipc: Started in network mode
[  167.002910][ T6055] tipc: Node identity 4, cluster identity 4711
[  167.009689][ T6055] tipc: Node number set to 4
[  167.033741][   T36] audit: type=1326 audit(2000000025.692:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6052 comm="syz.1.1830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efce718e929 code=0x0
[  167.087170][   T45] usb 4-1: device descriptor read/8, error -71
[  167.203606][   T45] usb usb4-port1: unable to enumerate USB device
[  167.869989][ T6069] SELinux:  Context /dev/kvm is not valid (left unmapped).
[  167.873408][   T36] audit: type=1400 audit(2000000026.522:1061): avc:  denied  { relabelfrom } for  pid=6061 comm="syz.1.1834" name="" dev="pipefs" ino=39441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  167.924520][   T36] audit: type=1400 audit(2000000026.532:1062): avc:  denied  { relabelto } for  pid=6061 comm="syz.1.1834" name="" dev="pipefs" ino=39441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/dev/kvm"
[  168.006834][ T6082] syzkaller0: entered promiscuous mode
[  168.147512][ T6097] rust_binder: Error while translating object.
[  168.147536][ T6097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  168.154116][ T6097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:199
[  168.185956][   T36] audit: type=1400 audit(2000000026.842:1063): avc:  denied  { setattr } for  pid=6102 comm="syz.1.1847" name="" dev="pipefs" ino=40345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  168.218744][ T6107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.223453][  T306] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  168.327916][ T6122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60434 sclass=netlink_route_socket pid=6122 comm=syz.5.1854
[  168.351454][ T6122] IPv6: NLM_F_CREATE should be specified when creating new route
[  168.375774][  T574] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  168.377347][ T6125] fuse: Unknown parameter '��S0x0000000000000003'
[  168.388917][  T574] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  168.405224][  T306] usb 4-1: Using ep0 maxpacket: 32
[  168.410675][  T574] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  168.422382][  T306] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  168.430621][  T306] usb 4-1: config 0 has no interface number 0
[  168.438190][  T574] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:10:08:dc:3c:42
[  168.453401][  T306] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  168.462670][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.472430][  T574] usb 3-1: USB disconnect, device number 67
[  168.479911][  T574] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  168.493965][  T306] usb 4-1: Product: syz
[  168.498261][  T306] usb 4-1: Manufacturer: syz
[  168.502889][  T306] usb 4-1: SerialNumber: syz
[  168.526050][  T306] usb 4-1: config 0 descriptor??
[  168.532879][  T306] smsc95xx v2.0.0
[  168.549068][  T574] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  168.549578][ T6134] binder: Unknown parameter 'm��K�0000000000000000000010'
[  168.558541][  T574] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  168.575380][  T574] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  169.640448][ T6185] kvm: pic: non byte write
[  169.751153][  T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  169.762541][  T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  169.772693][  T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  169.783855][  T306] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  169.795552][  T306] usb 4-1: USB disconnect, device number 79
[  169.979870][ T6220] netlink: 'syz.5.1876': attribute type 40 has an invalid length.
[  170.033153][  T584] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  170.100614][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.109793][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.109837][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.123503][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.123551][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.137036][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.137133][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.151087][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.151137][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.164835][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.164886][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.178603][   T36] audit: type=1400 audit(2000000028.822:1064): avc:  denied  { create } for  pid=6227 comm="syz.5.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  170.193150][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.198339][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.199299][  T584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.205287][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.212153][  T584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.222909][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.229349][  T584] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  170.238954][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.246406][  T584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.255441][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.262663][  T584] usb 3-1: config 0 descriptor??
[  170.269631][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.281785][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.295454][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.295504][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.309236][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.309289][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.322866][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.322917][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.336498][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.336552][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.350291][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.350346][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.369572][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.369642][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.389372][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.389417][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.405797][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.405864][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.419743][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.419788][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.433418][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.433484][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.447075][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.447149][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.460772][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.460840][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.474621][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.474686][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.497081][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.497157][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.513241][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.513288][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.527332][  T584] usbhid 3-1:0.0: can't add hid device: -71
[  170.533419][  T584] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  170.545810][  T584] usb 3-1: USB disconnect, device number 68
[  170.558247][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.558301][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.574164][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.574215][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.588141][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.588242][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.597629][ T6246] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  170.601818][ T6246] rust_binder: Error while translating object.
[  170.605501][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.617380][ T6246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.620681][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.626791][ T6246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1122
[  170.635964][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.636015][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.667354][ T6248] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.668207][ T6248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1124
[  170.670058][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.684180][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.698015][ T6249] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.698066][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.704681][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.737147][ T6242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  170.737969][ T6242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1452
[  170.744397][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.757024][ T6225] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  170.773407][ T6225] rust_binder: Write failure EINVAL in pid:217
[  170.777530][  T306] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  170.803561][  T306] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.836189][ T6262] fido_id[6262]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  170.850133][ T6265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1455
[  170.869615][   T36] audit: type=1400 audit(2000000029.522:1065): avc:  denied  { create } for  pid=6266 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  170.986136][   T36] audit: type=1400 audit(2000000029.642:1066): avc:  denied  { append } for  pid=6279 comm="syz.1.1897" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  171.093017][   T31] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  171.193012][  T306] usb 4-1: new low-speed USB device number 80 using dummy_hcd
[  171.264146][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.275343][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.285346][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  171.294513][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.303290][   T31] usb 3-1: config 0 descriptor??
[  171.309277][   T31] hub 3-1:0.0: USB hub found
[  171.344258][  T306] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.355393][  T306] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  171.366299][  T306] usb 4-1: config 0 interface 0 has no altsetting 0
[  171.373090][  T306] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00
[  171.382205][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.391134][  T306] usb 4-1: config 0 descriptor??
[  171.396927][ T6273] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  171.514666][   T31] hub 3-1:0.0: 1 port detected
[  171.721240][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.734012][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.743777][ T6265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1455
[  171.745233][   T31] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  171.769651][   T31] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  171.778823][   T31] usbhid 3-1:0.0: can't add hid device: -71
[  171.789109][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  171.816764][   T31] usb 3-1: USB disconnect, device number 69
[  172.013565][  T306] usbhid 4-1:0.0: can't add hid device: -71
[  172.019598][  T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  172.031842][  T306] usb 4-1: USB disconnect, device number 80
[  172.164507][ T6351] /dev/rnullb0: Can't open blockdev
[  172.170913][ T6353] tmpfs: Unknown parameter 'dont_appraise'
[  172.219578][ T6362] overlayfs: failed to clone upperpath
[  172.460617][ T6390] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  172.497923][ T6394] fuse: Bad value for 'user_id'
[  172.502899][ T6394] fuse: Bad value for 'user_id'
[  172.540161][ T6394] fuse: Bad value for 'user_id'
[  172.545103][ T6394] fuse: Bad value for 'user_id'
[  172.843013][  T306] usb 4-1: new low-speed USB device number 81 using dummy_hcd
[  173.004152][  T306] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  173.012492][  T306] usb 4-1: config 179 has no interface number 0
[  173.018866][  T306] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  173.030086][  T306] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  173.041106][  T306] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 is Bulk; changing to Interrupt
[  173.051357][  T306] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  173.064644][  T306] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  173.073733][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.083020][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.090217][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.148257][ T6417] can: request_module (can-proto-0) failed.
[  173.346410][   T31] usb 4-1: USB disconnect, device number 81
[  173.346522][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  173.360768][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  173.599217][   T36] audit: type=1326 audit(2000000032.239:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.630084][   T36] audit: type=1326 audit(2000000032.239:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.663060][   T36] audit: type=1326 audit(2000000032.239:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.690448][   T36] audit: type=1326 audit(2000000032.239:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.721250][   T36] audit: type=1326 audit(2000000032.239:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.753228][   T36] audit: type=1326 audit(2000000032.249:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.785170][   T36] audit: type=1326 audit(2000000032.249:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.816279][   T36] audit: type=1326 audit(2000000032.249:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.852989][   T36] audit: type=1326 audit(2000000032.249:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  173.882984][   T36] audit: type=1326 audit(2000000032.249:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.5.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x7ffc0000
[  174.027844][ T6474] binder: Bad value for 'max'
[  174.275152][ T6508] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  174.473891][   T10] hid (null): unknown global tag 0xe
[  174.490304][   T10] hid-generic 00C0:C7A7:FFFFFFD9.0017: unknown main item tag 0x0
[  174.508505][   T10] hid-generic 00C0:C7A7:FFFFFFD9.0017: collection stack underflow
[  174.524217][   T10] hid-generic 00C0:C7A7:FFFFFFD9.0017: item 0 4 0 12 parsing failed
[  174.542659][   T10] hid-generic 00C0:C7A7:FFFFFFD9.0017: probe with driver hid-generic failed with error -22
[  174.953032][  T584] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  175.103025][  T584] usb 4-1: Using ep0 maxpacket: 8
[  175.109284][  T584] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.119571][  T584] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.129943][  T584] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.139100][  T584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.147174][  T584] usb 4-1: Product: _짆唣┄胯災ᆀ榝筐ꌶ錊᷸瀺曘꺔짍ᴮ⨕禳珜糥ǥ딍粬༤蚜୒껾⹼᯸讬泫ꧻ撊뗖镲戦ຮ闍愓
[  175.162894][  T584] usb 4-1: Manufacturer: W
[  175.167382][  T584] usb 4-1: SerialNumber: 뢫䍜獡꣍了ꇃㅶ幰쳓⟴㝱⶝짓Ꮭ䦬⢰燷撄몼ㅖ벚ᐮ먒륛磣鈦婨䛅ઃᐳ䍿䂛娵讶鉁ﾧ寶뎃ٟ룢蓕꺧嘫盠귎읐壬ᘜ顃膪莯㢬롳ﵦ똌ꡣꭀ騩덶㺀䇏㭩鱟龙뤷἖铐ﵫ悬䋉炙匂Ⱨ煢秥諊跣呉뱅
[  175.227349][ T6560] fuse: blksize only supported for fuseblk
[  175.411475][  T584] usb 4-1: 0:2 : does not exist
[  175.425937][  T584] usb 4-1: USB disconnect, device number 82
[  175.452097][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  175.496680][ T6574] rust_binder: Write failure EFAULT in pid:1180
[  175.542768][ T6577] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=6577 comm=syz.2.2004
[  175.562652][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'.
[  175.594533][ T6584] binder: Bad value for 'max'
[  175.826211][ T6599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1510
[  175.826655][ T6599] rust_binder: Error while translating object.
[  175.836149][ T6599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  175.842361][ T6599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1510
[  175.960061][ T6608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  175.969581][ T6608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1519
[  176.263010][   T64] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  176.432996][   T64] usb 3-1: Using ep0 maxpacket: 16
[  176.439377][   T64] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  176.449795][   T64] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  176.467596][   T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.477039][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  176.490805][   T64] usb 3-1: SerialNumber: syz
[  176.496653][ T6616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  176.533040][   T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  176.663004][   T10] usb 4-1: device descriptor read/64, error -71
[  176.726123][   T64] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  176.736911][   T64] usb 3-1: USB disconnect, device number 70
[  176.903019][   T10] usb 4-1: device descriptor read/64, error -71
[  177.142998][   T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  177.249218][ T6646] overlay: filesystem on ./bus not supported as upperdir
[  177.277569][   T10] usb 4-1: device descriptor read/64, error -71
[  177.363261][ T6655] x_tables: duplicate underflow at hook 1
[  177.456239][ T6656] tipc: Started in network mode
[  177.461139][ T6656] tipc: Node identity b681e5173d36, cluster identity 4711
[  177.468416][ T6656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.476290][ T6656] tipc: Disabling bearer <eth:syzkaller0>
[  177.491905][ T6660] overlayfs: failed to clone upperpath
[  177.523006][   T10] usb 4-1: device descriptor read/64, error -71
[  177.633431][   T10] usb usb4-port1: attempt power cycle
[  177.983005][   T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  178.004197][   T10] usb 4-1: device descriptor read/8, error -71
[  178.134029][   T10] usb 4-1: device descriptor read/8, error -71
[  178.382991][   T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  178.408388][   T10] usb 4-1: device descriptor read/8, error -71
[  178.544070][   T10] usb 4-1: device descriptor read/8, error -71
[  178.653167][   T10] usb usb4-port1: unable to enumerate USB device
[  178.870432][ T6762] overlay: ./file0 is not a directory
[  179.463248][   T36] kauditd_printk_skb: 76 callbacks suppressed
[  179.463266][   T36] audit: type=1400 audit(2000000038.119:1153): avc:  denied  { read } for  pid=6787 comm="syz.5.2074" path="socket:[44123]" dev="sockfs" ino=44123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  179.553038][ T6797] rust_binder: Write failure EFAULT in pid:1196
[  179.642996][   T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  179.734240][   T36] audit: type=1400 audit(2000000038.389:1154): avc:  denied  { bind } for  pid=6811 comm="syz.2.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  179.804186][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.815978][   T31] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  179.825270][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.833325][   T31] usb 2-1: Product: syz
[  179.841959][   T31] usb 2-1: Manufacturer: syz
[  179.846612][   T31] usb 2-1: SerialNumber: syz
[  179.852354][   T31] usb 2-1: config 0 descriptor??
[  179.862810][   T31] usb 2-1: bad CDC descriptors
[  179.868193][   T31] cdc_acm 2-1:0.0: Control and data interfaces are not separated!
[  179.876224][   T31] cdc_acm 2-1:0.0: This needs exactly 3 endpoints
[  179.876557][ T6830] overlayfs: failed to clone upperpath
[  179.882676][   T31] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22
[  180.025015][ T6854] 9pnet_fd: Insufficient options for proto=fd
[  180.071147][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.080677][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.093246][ T6865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6865 comm=syz.5.2097
[  180.114516][   T31] usb 2-1: USB disconnect, device number 13
[  180.177448][   T36] audit: type=1326 audit(2000000038.834:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x0
[  180.415939][   T36] audit: type=1400 audit(2000000039.064:1156): avc:  denied  { ioctl } for  pid=6878 comm="syz.3.2101" path="socket:[44381]" dev="sockfs" ino=44381 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  180.576482][ T6891] SELinux:  Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped).
[  180.586542][   T36] audit: type=1400 audit(2000000039.234:1157): avc:  denied  { relabelto } for  pid=6883 comm="syz.2.2103" name="file1" dev="tmpfs" ino=2778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0"
[  180.613540][   T36] audit: type=1400 audit(2000000039.234:1158): avc:  denied  { associate } for  pid=6883 comm="syz.2.2103" name="file1" dev="tmpfs" ino=2778 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_var_run_t:s0"
[  180.867512][ T6900] fuseblk: Bad value for 'group_id'
[  180.872768][ T6900] fuseblk: Bad value for 'group_id'
[  180.878655][ T6900] /dev/rnullb0: Can't open blockdev
[  180.903065][  T574] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  180.945047][ T6902] binder: Unknown parameter 'subj_type'
[  181.040424][ T6917] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.054117][  T574] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.065457][  T574] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  181.076358][  T574] usb 2-1: config 0 interface 0 has no altsetting 0
[  181.083110][  T574] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  181.092319][  T574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.101175][  T574] usb 2-1: config 0 descriptor??
[  181.106822][ T6894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.115863][  T574] usbhid 2-1:0.0: can't add hid device: -22
[  181.122059][  T574] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  181.318254][ T6933] tipc: Cannot configure node identity twice
[  181.667929][ T6953] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  182.122998][   T31] usb 4-1: new low-speed USB device number 87 using dummy_hcd
[  182.262993][   T31] usb 4-1: device descriptor read/64, error -71
[  182.503010][   T31] usb 4-1: device descriptor read/64, error -71
[  182.743049][   T31] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[  182.873014][   T31] usb 4-1: device descriptor read/64, error -71
[  182.906620][ T6987] fuse: Bad value for 'rootmode'
[  182.936636][ T6995] fuse: Unknown parameter 'kd'
[  183.036135][ T7003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2145'.
[  183.112989][   T31] usb 4-1: device descriptor read/64, error -71
[  183.233085][   T31] usb usb4-port1: attempt power cycle
[  183.573018][   T31] usb 4-1: new low-speed USB device number 89 using dummy_hcd
[  183.594070][   T31] usb 4-1: device descriptor read/8, error -71
[  183.677210][  T584] usb 2-1: USB disconnect, device number 14
[  183.724064][   T31] usb 4-1: device descriptor read/8, error -71
[  183.822634][ T7032] rust_binder: Error while translating object.
[  183.822666][ T7032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  183.829003][ T7032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362
[  183.963043][   T31] usb 4-1: new low-speed USB device number 90 using dummy_hcd
[  183.994063][   T31] usb 4-1: device descriptor read/8, error -71
[  184.124037][   T31] usb 4-1: device descriptor read/8, error -71
[  184.233917][   T31] usb usb4-port1: unable to enumerate USB device
[  184.553009][  T574] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  184.682999][  T574] usb 2-1: device descriptor read/64, error -71
[  184.923051][  T574] usb 2-1: device descriptor read/64, error -71
[  184.959910][   T36] audit: type=1400 audit(2000000043.604:1159): avc:  denied  { accept } for  pid=7055 comm="syz.2.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  185.163011][  T574] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  185.242993][  T306] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  185.293028][  T574] usb 2-1: device descriptor read/64, error -71
[  185.393015][  T306] usb 4-1: Using ep0 maxpacket: 32
[  185.404361][  T306] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  185.422784][  T306] usb 4-1: config 0 has no interface number 0
[  185.443009][  T306] usb 4-1: config 0 interface 196 has no altsetting 0
[  185.451292][  T306] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  185.460760][  T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.469166][  T306] usb 4-1: Product: syz
[  185.473671][  T306] usb 4-1: Manufacturer: syz
[  185.478278][  T306] usb 4-1: SerialNumber: syz
[  185.483598][  T306] usb 4-1: config 0 descriptor??
[  185.532988][  T574] usb 2-1: device descriptor read/64, error -71
[  185.643168][  T574] usb usb2-port1: attempt power cycle
[  185.691735][   T36] audit: type=1400 audit(2000000044.334:1160): avc:  granted  { setsecparam } for  pid=7070 comm="syz.3.2163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  185.694215][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.720021][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.730699][  T306] ipheth 4-1:0.196: Unable to find endpoints
[  185.743562][  T306] usb 4-1: USB disconnect, device number 91
[  185.983004][  T574] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  186.004068][  T574] usb 2-1: device descriptor read/8, error -71
[  186.134158][  T574] usb 2-1: device descriptor read/8, error -71
[  186.379827][  T574] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  186.404168][  T574] usb 2-1: device descriptor read/8, error -71
[  186.409377][ T7111] Unsupported ieee802154 address type: 0
[  186.509363][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  186.515943][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  186.522666][ T7118] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2179'.
[  186.533981][  T574] usb 2-1: device descriptor read/8, error -71
[  186.625638][   T36] audit: type=1400 audit(2000000045.274:1161): avc:  denied  { bind } for  pid=7121 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  186.646306][  T574] usb usb2-port1: unable to enumerate USB device
[  186.655379][   T13] Bluetooth: hci1: Frame reassembly failed (-84)
[  187.338567][ T7139] input: syz0 as /devices/virtual/input/input24
[  187.362457][ T7142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  187.362494][ T7142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381
[  187.633143][ T7161] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2196'.
[  187.680712][ T7165] fuse: Bad value for 'fd'
[  187.719412][ T7172] 9pnet: Could not find request transport: rdma
[  187.792997][  T584] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  187.923027][  T584] usb 2-1: device descriptor read/64, error -71
[  188.163000][  T584] usb 2-1: device descriptor read/64, error -71
[  188.403229][  T584] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  188.533008][  T584] usb 2-1: device descriptor read/64, error -71
[  188.563004][ T1208] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  188.563036][ T1209] Bluetooth: hci0: command 0x1003 tx timeout
[  188.668320][   T36] audit: type=1326 audit(2000000047.314:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.2.2203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ccd98e929 code=0x0
[  188.722994][ T3336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  188.782990][  T584] usb 2-1: device descriptor read/64, error -71
[  188.893092][  T584] usb usb2-port1: attempt power cycle
[  189.013000][  T574] usb 4-1: new full-speed USB device number 92 using dummy_hcd
[  189.164304][  T574] usb 4-1: unable to get BOS descriptor or descriptor too short
[  189.172380][  T574] usb 4-1: not running at top speed; connect to a high speed hub
[  189.180986][  T574] usb 4-1: config 1 interface 0 has no altsetting 0
[  189.189150][  T574] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.198274][  T574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.206339][  T574] usb 4-1: Product: syz
[  189.210530][  T574] usb 4-1: Manufacturer: syz
[  189.215209][  T574] usb 4-1: SerialNumber: syz
[  189.233002][  T584] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  189.253998][  T584] usb 2-1: device descriptor read/8, error -71
[  189.384080][  T584] usb 2-1: device descriptor read/8, error -71
[  189.424182][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.432766][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.460158][  T574] usb 4-1: USB disconnect, device number 92
[  189.508427][   T36] audit: type=1326 audit(2000000048.154:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.2.2207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd98e929 code=0x0
[  189.623004][  T584] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  189.644054][  T584] usb 2-1: device descriptor read/8, error -71
[  189.774019][  T584] usb 2-1: device descriptor read/8, error -71
[  189.883189][  T584] usb usb2-port1: unable to enumerate USB device
[  189.966217][ T7192] SELinux: security_context_str_to_sid () failed with errno=-22
[  190.027546][ T7197] rust_binder: Error in use_page_slow: ESRCH
[  190.027575][ T7197] rust_binder: use_range failure ESRCH
[  190.033670][ T7197] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  190.039153][ T7197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  190.047120][ T7197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1274
[  190.329933][ T7230] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  190.348132][ T7230] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  190.385965][   T36] audit: type=1400 audit(2000000049.034:1164): avc:  denied  { create } for  pid=7235 comm="syz.2.2225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  190.407190][   T36] audit: type=1400 audit(2000000049.054:1165): avc:  denied  { read } for  pid=7235 comm="syz.2.2225" name="file0" dev="tmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  190.430267][   T36] audit: type=1400 audit(2000000049.054:1166): avc:  denied  { open } for  pid=7235 comm="syz.2.2225" path="/536/file0" dev="tmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  190.453169][   T36] audit: type=1400 audit(2000000049.074:1167): avc:  denied  { ioctl } for  pid=7235 comm="syz.2.2225" path="/536/file0" dev="tmpfs" ino=3035 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  190.513033][  T584] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  190.663008][  T584] usb 4-1: Using ep0 maxpacket: 32
[  190.670212][  T584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.681444][  T584] usb 4-1: config 0 has no interfaces?
[  190.688340][  T584] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a
[  190.697506][  T584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.705532][  T584] usb 4-1: Product: syz
[  190.709771][  T584] usb 4-1: Manufacturer: syz
[  190.714399][  T584] usb 4-1: SerialNumber: syz
[  190.719696][  T584] usb 4-1: config 0 descriptor??
[  190.913011][  T574] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  190.958957][   T36] audit: type=1400 audit(2000000049.604:1168): avc:  denied  { unlink } for  pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  191.053000][  T574] usb 2-1: device descriptor read/64, error -71
[  191.293019][  T574] usb 2-1: device descriptor read/64, error -71
[  191.532996][  T574] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  191.544630][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2238'.
[  191.567216][ T7276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2239'.
[  191.576326][ T7276] tipc: Invalid UDP bearer configuration
[  191.576349][ T7276] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  191.672994][  T574] usb 2-1: device descriptor read/64, error -71
[  191.768991][ T7291] /dev/loop0: Can't lookup blockdev
[  191.871087][   T36] audit: type=1326 audit(2000000050.514:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bdc18e929 code=0x0
[  191.922996][  T574] usb 2-1: device descriptor read/64, error -71
[  191.996418][ T7306] SELinux:  Context system_u:object_r:public_content_t:s0 is not valid (left unmapped).
[  192.006502][   T36] audit: type=1400 audit(2000000050.654:1170): avc:  denied  { relabelto } for  pid=7305 comm="syz.5.2249" name="file0" dev="tmpfs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0"
[  192.033239][  T574] usb usb2-port1: attempt power cycle
[  192.034238][   T36] audit: type=1400 audit(2000000050.654:1171): avc:  denied  { associate } for  pid=7305 comm="syz.5.2249" name="file0" dev="tmpfs" ino=1939 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_t:s0"
[  192.068138][   T36] audit: type=1400 audit(2000000050.674:1172): avc:  denied  { unlink } for  pid=3169 comm="syz-executor" name="file0" dev="tmpfs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0"
[  192.167855][ T7317] fuse: Unknown parameter 'gro�p^id'
[  192.186928][ T7319] fuse: Bad value for 'fd'
[  192.386661][   T36] audit: type=1326 audit(2000000051.034:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.2272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd98e929 code=0x0
[  192.413046][  T574] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  192.433995][  T574] usb 2-1: device descriptor read/8, error -71
[  192.463955][ T7370] overlayfs: failed to clone upperpath
[  192.545731][ T7383] 9pnet_fd: Insufficient options for proto=fd
[  192.564063][  T574] usb 2-1: device descriptor read/8, error -71
[  192.813000][  T574] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  192.833973][  T574] usb 2-1: device descriptor read/8, error -71
[  192.964228][  T574] usb 2-1: device descriptor read/8, error -71
[  193.073121][  T574] usb usb2-port1: unable to enumerate USB device
[  193.140270][  T574] usb 4-1: USB disconnect, device number 93
[  193.301852][ T7456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1305
[  193.413375][ T7466] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  193.623072][ T7496] netlink: 'syz.5.2321': attribute type 4 has an invalid length.
[  193.632920][ T7496] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2321'.
[  193.694491][ T7498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7498 comm=syz.1.2322
[  193.723765][ T7498] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  193.806611][ T7509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411
[  193.815552][ T7509] rust_binder: Error while translating object.
[  193.824781][ T7509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  193.830991][ T7509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411
[  194.105407][  T574] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  194.171057][ T7517] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2330'.
[  194.187650][ T7517] netlink: 'syz.2.2330': attribute type 27 has an invalid length.
[  194.208203][ T7517] sit0: left promiscuous mode
[  194.219782][ T7517] bridge0: port 3(vlan0) entered disabled state
[  194.226196][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.233457][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.253258][ T7521] overlayfs: failed to clone upperpath
[  194.280023][ T7520] /dev/rnullb0: Can't open blockdev
[  194.290252][  T574] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.319616][  T574] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  194.345560][  T574] usb 2-1: config 0 interface 0 has no altsetting 0
[  194.357908][  T574] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  194.367250][  T574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.383986][  T574] usb 2-1: config 0 descriptor??
[  194.395481][ T7511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  194.541364][ T7527] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  194.578772][ T7527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7527 comm=syz.3.2333
[  194.756775][ T7542] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  194.794692][ T7546] overlayfs: failed to clone upperpath
[  194.835475][  T574] logitech 0003:046D:C286.0018: unknown main item tag 0x6
[  194.875389][  T574] logitech 0003:046D:C286.0018: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0
[  194.898069][  T574] logitech 0003:046D:C286.0018: no inputs found
[  195.039278][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.065504][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.218154][  T306] usb 2-1: USB disconnect, device number 27
[  195.351324][ T7573] overlayfs: failed to clone upperpath
[  195.393197][   T36] kauditd_printk_skb: 240 callbacks suppressed
[  195.393225][   T36] audit: type=1400 audit(2000000055.044:1414): avc:  denied  { read open } for  pid=7576 comm="syz.3.2350" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.450171][   T36] audit: type=1400 audit(2000000055.044:1415): avc:  denied  { read } for  pid=7576 comm="syz.3.2350" name="binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.470863][ T7577] @: renamed from vlan0 (while UP)
[  195.482971][ T7583] audit: audit_backlog=65 > audit_backlog_limit=64
[  195.483320][ T7578] audit: audit_backlog=65 > audit_backlog_limit=64
[  195.489598][   T36] audit: type=1400 audit(2000000055.044:1416): avc:  denied  { read open } for  pid=7576 comm="syz.3.2350" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.501106][ T7584] audit: audit_backlog=65 > audit_backlog_limit=64
[  195.520515][ T7583] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  195.531005][ T7578] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  195.535874][ T7583] audit: backlog limit exceeded
[  195.543771][ T7578] audit: backlog limit exceeded
[  195.549885][ T7586] overlay: filesystem on ./bus is read-only
[  195.843017][  T306] usb 4-1: new low-speed USB device number 94 using dummy_hcd
[  195.995446][  T306] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config
[  196.005770][  T574] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  196.013453][  T306] usb 4-1: config 0 interface 0 has no altsetting 0
[  196.020064][  T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  196.029342][  T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.039648][  T306] usb 4-1: config 0 descriptor??
[  196.189628][  T574] usb 2-1: config 0 has no interfaces?
[  196.206713][  T574] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  196.222303][  T574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  196.230510][  T574] usb 2-1: SerialNumber: syz
[  196.242259][  T574] usb 2-1: config 0 descriptor??
[  196.273675][  T306] usb 4-1: string descriptor 0 read error: -71
[  196.283091][  T306] hub 4-1:0.0: bad descriptor, ignoring hub
[  196.298907][  T306] hub 4-1:0.0: probe with driver hub failed with error -5
[  196.323992][  T306] usb 4-1: USB disconnect, device number 94
[  196.467232][  T574] usb 2-1: USB disconnect, device number 28
[  197.732988][   T31] usb 4-1: new low-speed USB device number 95 using dummy_hcd
[  197.913762][   T31] usb 4-1: no configurations
[  197.921011][   T31] usb 4-1: can't read configurations, error -22
[  198.012979][  T584] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  198.052999][   T31] usb 4-1: new low-speed USB device number 96 using dummy_hcd
[  198.172968][  T584] usb 2-1: Using ep0 maxpacket: 8
[  198.185934][  T584] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.202357][  T584] usb 2-1: config 7 has an invalid interface number: 241 but max is 0
[  198.220860][  T584] usb 2-1: config 7 has no interface number 0
[  198.227111][  T584] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0
[  198.237740][   T31] usb 4-1: no configurations
[  198.242417][   T31] usb 4-1: can't read configurations, error -22
[  198.249293][  T584] usb 2-1: config 7 interface 241 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 8
[  198.259807][   T31] usb usb4-port1: attempt power cycle
[  198.266390][  T584] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x86 has an invalid bInterval 144, changing to 11
[  198.277856][  T584] usb 2-1: config 7 interface 241 altsetting 6 endpoint 0x86 has invalid maxpacket 58007, setting to 1024
[  198.289368][  T584] usb 2-1: config 7 interface 241 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  198.302547][  T584] usb 2-1: config 7 interface 241 has no altsetting 0
[  198.312555][  T584] usb 2-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice=9c.4a
[  198.322030][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.330288][  T584] usb 2-1: Product: syz
[  198.334813][  T584] usb 2-1: Manufacturer: syz
[  198.339460][  T584] usb 2-1: SerialNumber: syz
[  198.353338][ T7658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  198.603034][   T31] usb 4-1: new low-speed USB device number 97 using dummy_hcd
[  198.624744][   T31] usb 4-1: no configurations
[  198.629402][   T31] usb 4-1: can't read configurations, error -22
[  198.762997][   T31] usb 4-1: new low-speed USB device number 98 using dummy_hcd
[  198.784683][   T31] usb 4-1: no configurations
[  198.789367][   T31] usb 4-1: can't read configurations, error -22
[  198.806505][   T31] usb usb4-port1: unable to enumerate USB device
[  199.343460][ T7727] overlayfs: failed to clone upperpath
[  200.285782][ T7755] tipc: Enabled bearer <eth:bridge0>, priority 10
[  200.363349][   T13] tipc: Subscription rejected, illegal request
[  200.412518][   T36] kauditd_printk_skb: 472 callbacks suppressed
[  200.412539][   T36] audit: type=1400 audit(2000000001.269:1887): avc:  denied  { execmem } for  pid=7762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  200.476318][   T36] audit: type=1400 audit(2000000001.299:1888): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  200.532972][   T36] audit: type=1400 audit(2000000001.309:1889): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  200.568840][ T7764] sock: sock_set_timeout: `syz.3.2413' (pid 7764) tries to set negative timeout
[  200.603029][   T36] audit: type=1400 audit(2000000001.309:1890): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  200.682105][   T36] audit: type=1400 audit(2000000001.429:1891): avc:  denied  { read write } for  pid=7763 comm="syz.3.2413" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  200.749981][  T584] ftdi_sio 2-1:7.241: FTDI USB Serial Device converter detected
[  200.765316][ T7767] SELinux: security_context_str_to_sid () failed with errno=-22
[  200.782992][   T36] audit: type=1400 audit(2000000001.429:1892): avc:  denied  { read open } for  pid=7763 comm="syz.3.2413" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  200.814398][  T584] ftdi_sio ttyUSB0: unknown device type: 0x9c4a
[  200.848532][  T584] usb 2-1: USB disconnect, device number 29
[  200.883700][   T36] audit: type=1400 audit(2000000001.450:1893): avc:  denied  { map } for  pid=7763 comm="syz.3.2413" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  200.883948][  T584] ftdi_sio 2-1:7.241: device disconnected
[  200.996269][   T36] audit: type=1400 audit(2000000001.450:1894): avc:  denied  { read } for  pid=7763 comm="syz.3.2413" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0"
[  201.045616][ T7773] __vm_enough_memory: pid: 7773, comm: syz.1.2417, bytes: 70373039144960 not enough memory for the allocation
[  201.076265][   T36] audit: type=1400 audit(2000000001.450:1895): avc:  denied  { create } for  pid=7763 comm="syz.3.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  201.108261][  T319] ==================================================================
[  201.116397][  T319] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[  201.123210][  T319] Write of size 8 at addr 0000000000000098 by task kworker/1:3/319
[  201.131135][  T319] 
[  201.133500][  T319] CPU: 1 UID: 0 PID: 319 Comm: kworker/1:3 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[  201.133539][  T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  201.133557][  T319] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  201.133632][  T319] Call Trace:
[  201.133642][  T319]  <TASK>
[  201.133653][  T319]  __dump_stack+0x21/0x30
[  201.133687][  T319]  dump_stack_lvl+0x10c/0x190
[  201.133734][  T319]  ? __cfi_dump_stack_lvl+0x10/0x10
[  201.133764][  T319]  ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810
[  201.133801][  T319]  print_report+0x3d/0x70
[  201.133830][  T319]  kasan_report+0x163/0x1a0
[  201.133867][  T319]  ? down_write+0x83/0x2a0
[  201.133901][  T319]  ? down_write+0x83/0x2a0
[  201.133933][  T319]  kasan_check_range+0x299/0x2a0
[  201.133971][  T319]  __kasan_check_write+0x18/0x20
[  201.134000][  T319]  down_write+0x83/0x2a0
[  201.134031][  T319]  ? __cfi_down_write+0x10/0x10
[  201.134063][  T319]  ? _raw_spin_lock+0x8c/0x120
[  201.134099][  T319]  ? __cfi__raw_spin_lock+0x10/0x10
[  201.134135][  T319]  ? mutex_unlock+0x8b/0x240
[  201.134163][  T319]  ? __cfi_mutex_unlock+0x10/0x10
[  201.134192][  T319]  rust_binderfs_remove_file+0x6c/0x110
[  201.134225][  T319]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  201.134273][  T319]  ? update_curr_dl_se+0x10c/0xb20
[  201.134306][  T319]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  201.134334][  T319]  ? update_curr+0x60d/0xc60
[  201.134367][  T319]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  201.134413][  T319]  ? update_load_avg+0x506/0x19a0
[  201.134438][  T319]  ? detach_entity_load_avg+0x7b0/0x7b0
[  201.134474][  T319]  ? dequeue_entity+0xa9c/0x1750
[  201.134503][  T319]  ? tg_unthrottle_up+0x980/0x980
[  201.134528][  T319]  ? stack_trace_save+0x9d/0xe0
[  201.134559][  T319]  ? kvm_sched_clock_read+0x15/0x30
[  201.134589][  T319]  ? sched_clock_noinstr+0xd/0x30
[  201.134617][  T319]  ? sched_clock+0x44/0x60
[  201.134641][  T319]  ? sched_clock_cpu+0x75/0x400
[  201.134667][  T319]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  201.134694][  T319]  ? __cfi_min_vruntime_cb_rotate+0x10/0x10
[  201.134727][  T319]  ? __cfi_sched_clock_cpu+0x10/0x10
[  201.134756][  T319]  ? __kasan_check_read+0x15/0x20
[  201.134785][  T319]  ? __perf_event_task_sched_in+0x116e/0x1340
[  201.134811][  T319]  ? __kasan_check_write+0x18/0x20
[  201.134846][  T319]  ? __switch_to+0xc7b/0x1310
[  201.134875][  T319]  ? __perf_event_task_sched_out+0x1c1/0xb70
[  201.134901][  T319]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  201.134926][  T319]  ? __cfi___switch_to+0x10/0x10
[  201.134956][  T319]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  201.134981][  T319]  ? _raw_spin_unlock+0x45/0x60
[  201.135003][  T319]  ? __switch_to_asm+0x3d/0x70
[  201.135035][  T319]  ? __schedule+0x1463/0x1f10
[  201.135061][  T319]  ? kick_pool+0xad/0x550
[  201.135083][  T319]  process_scheduled_works+0x7d2/0x1020
[  201.135120][  T319]  worker_thread+0xc58/0x1250
[  201.135154][  T319]  kthread+0x2ca/0x370
[  201.135189][  T319]  ? __cfi_worker_thread+0x10/0x10
[  201.135222][  T319]  ? __cfi_kthread+0x10/0x10
[  201.135256][  T319]  ret_from_fork+0x64/0xa0
[  201.135285][  T319]  ? __cfi_kthread+0x10/0x10
[  201.135320][  T319]  ret_from_fork_asm+0x1a/0x30
[  201.135355][  T319]  </TASK>
[  201.135365][  T319] ==================================================================
[  201.484453][  T319] Disabling lock debugging due to kernel taint
[  201.490642][  T319] BUG: kernel NULL pointer dereference, address: 0000000000000098
[  201.498446][  T319] #PF: supervisor write access in kernel mode
[  201.504515][  T319] #PF: error_code(0x0002) - not-present page
[  201.510516][  T319] PGD 0 P4D 0 
[  201.513900][  T319] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  201.519974][  T319] CPU: 1 UID: 0 PID: 319 Comm: kworker/1:3 Tainted: G    B              6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[  201.534916][  T319] Tainted: [B]=BAD_PAGE
[  201.539093][  T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  201.549149][  T319] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  201.565939][  T319] RIP: 0010:down_write+0x9a/0x2a0
[  201.570986][  T319] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  201.590601][  T319] RSP: 0018:ffffc9000b847500 EFLAGS: 00010256
[  201.596676][  T319] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  201.604651][  T319] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b847520
[  201.612631][  T319] RBP: ffffc9000b847598 R08: ffffc9000b847527 R09: 1ffff92001708ea4
[  201.620610][  T319] R10: dffffc0000000000 R11: fffff52001708ea5 R12: dffffc0000000000
[  201.628588][  T319] R13: 1ffff92001708ea0 R14: ffffc9000b847520 R15: 0000000000000000
[  201.636564][  T319] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  201.645498][  T319] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.652084][  T319] CR2: 0000000000000098 CR3: 000000010d79a000 CR4: 00000000003526b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  201.660063][  T319] Call Trace:
[  201.663347][  T319]  <TASK>
[  201.666302][  T319]  ? __cfi_down_write+0x10/0x10
[  201.671197][  T319]  ? _raw_spin_lock+0x8c/0x120
[  201.676001][  T319]  ? __cfi__raw_spin_lock+0x10/0x10
[  201.681238][  T319]  ? mutex_unlock+0x8b/0x240
[  201.685863][  T319]  ? __cfi_mutex_unlock+0x10/0x10
[  201.690922][  T319]  rust_binderfs_remove_file+0x6c/0x110
[  201.696486][  T319]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  201.709267][  T319]  ? update_curr_dl_se+0x10c/0xb20
[  201.714412][  T319]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  201.720503][  T319]  ? update_curr+0x60d/0xc60
[  201.725111][  T319]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  201.738327][  T319]  ? update_load_avg+0x506/0x19a0
[  201.743365][  T319]  ? detach_entity_load_avg+0x7b0/0x7b0
[  201.748935][  T319]  ? dequeue_entity+0xa9c/0x1750
[  201.753884][  T319]  ? tg_unthrottle_up+0x980/0x980
[  201.758918][  T319]  ? stack_trace_save+0x9d/0xe0
[  201.763787][  T319]  ? kvm_sched_clock_read+0x15/0x30
[  201.769007][  T319]  ? sched_clock_noinstr+0xd/0x30
[  201.774040][  T319]  ? sched_clock+0x44/0x60
[  201.778466][  T319]  ? sched_clock_cpu+0x75/0x400
[  201.783329][  T319]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  201.789405][  T319]  ? __cfi_min_vruntime_cb_rotate+0x10/0x10
[  201.795335][  T319]  ? __cfi_sched_clock_cpu+0x10/0x10
[  201.800633][  T319]  ? __kasan_check_read+0x15/0x20
[  201.805675][  T319]  ? __perf_event_task_sched_in+0x116e/0x1340
[  201.811750][  T319]  ? __kasan_check_write+0x18/0x20
[  201.816877][  T319]  ? __switch_to+0xc7b/0x1310
[  201.821570][  T319]  ? __perf_event_task_sched_out+0x1c1/0xb70
[  201.827558][  T319]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  201.833813][  T319]  ? __cfi___switch_to+0x10/0x10
[  201.838768][  T319]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  201.845104][  T319]  ? _raw_spin_unlock+0x45/0x60
[  201.849963][  T319]  ? __switch_to_asm+0x3d/0x70
[  201.854746][  T319]  ? __schedule+0x1463/0x1f10
[  201.859437][  T319]  ? kick_pool+0xad/0x550
[  201.863774][  T319]  process_scheduled_works+0x7d2/0x1020
[  201.869342][  T319]  worker_thread+0xc58/0x1250
[  201.874059][  T319]  kthread+0x2ca/0x370
[  201.878147][  T319]  ? __cfi_worker_thread+0x10/0x10
[  201.883276][  T319]  ? __cfi_kthread+0x10/0x10
[  201.887891][  T319]  ret_from_fork+0x64/0xa0
[  201.892325][  T319]  ? __cfi_kthread+0x10/0x10
[  201.896931][  T319]  ret_from_fork_asm+0x1a/0x30
[  201.901716][  T319]  </TASK>
[  201.904742][  T319] Modules linked in:
[  201.908644][  T319] CR2: 0000000000000098
[  201.912811][  T319] ---[ end trace 0000000000000000 ]---
[  201.918270][  T319] RIP: 0010:down_write+0x9a/0x2a0
[  201.923314][  T319] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  201.942932][  T319] RSP: 0018:ffffc9000b847500 EFLAGS: 00010256
[  201.949013][  T319] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  201.956990][  T319] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b847520
[  201.964969][  T319] RBP: ffffc9000b847598 R08: ffffc9000b847527 R09: 1ffff92001708ea4
[  201.972948][  T319] R10: dffffc0000000000 R11: fffff52001708ea5 R12: dffffc0000000000
[  201.980929][  T319] R13: 1ffff92001708ea0 R14: ffffc9000b847520 R15: 0000000000000000
[  201.988911][  T319] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  201.997851][  T319] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  202.004449][  T319] CR2: 0000000000000098 CR3: 000000010d79a000 CR4: 00000000003526b0
[  202.012434][  T319] Kernel panic - not syncing: Fatal exception
[  202.019333][  T319] Kernel Offset: disabled
[  202.023662][  T319] Rebooting in 86400 seconds..