last executing test programs:

17.034420558s ago: executing program 0 (id=352):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x1ff, 0x0, 0x10000, 0x0, 0x81, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x1007], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16.911705538s ago: executing program 0 (id=354):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x5, 0x18, {0x18, 0x9, "d5c461940f9935803cc7dfc65b3c8f157e9b0315c795"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000080)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x0, '<'}, @local=@item_4={0x3, 0x2, 0x7, "570ac751"}, @main=@item_4={0x3, 0x0, 0xb, "b9ab8941"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x7f, 0x1, {0x22, 0x835}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x30, 0xf8, "0ed8e6d98fef460e23b8f71dcfab9a068d0d370e6f67907d0119b714a532c06a2affd30418f10a3f49f2474c705059344aba0ac56a1bc8e33871aae98802c8da69836044bfe6ee81a88e15c8f20ad13c1c46a18a9125696209a8a74e55a2cd69393c50790b1a473f74a7f6e65314bcf731d006c877e0f446f28110be63e4b976ff2b408855a5bd216e29d1498ed82e6c87f58124c934155e700b43ba1dff828f90df5410ec0f08b9ab04edf41a93397c1b28cd7254b94770c514d932dbc634d7f4b6659b4eafa566b201d275cee85e700448b7784d46c340b60aee15cbac5c291c40814cf17bd98ddbfd850ea7c9921847049dfb8fac1d40"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x1, 0x1e, "e52f5901cf57d478d3d14df98cdfe390abb5c4274fffca4a2e49d5316089"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x1}})
ioctl$TCXONC(r2, 0x540a, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

13.941651645s ago: executing program 0 (id=376):
prctl$PR_SET_SECUREBITS(0x1c, 0x2d)
setfsuid(0xee00)
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3001", 0x2, r0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x13c4410, &(0x7f00000001c0)=ANY=[])
pipe2$9p(0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)='./cgroup\x00', 0x9, 0x3)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
listen(r2, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0)
r3 = fcntl$getown(r1, 0x9)
r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/vlan/vlan0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x2)
sendto$inet(r4, &(0x7f00000023c0)="f5cea94a9a447a272c8e5e1ccc8768984fe72475b780f4bd595d4f34762c263fe8dff694749358e43c158957f2fb76d6c274dbe28cd983abad843cb0ea7e6ce3afb52cacd4a1830e2842543a874d98547b3e3ef68fa5500542f41b93ad35126e8ab75fbaaae775c0d6a4a28c5d9de13c4ed7c19aad216fb51ad870a4d92a545305eca6f39e5eab3fc2e0ecf6e87141c05ea091c5576e3e812da1361c3834cb878860b8a163a07d720bce5a3748a7ba8cff8778e280e2ac480b10e003656b919c53623378024261a3bc8f6b0d20605e1d0136c9136a1f7af03a2ecdf064700a21289a8f73a642b4fe2c026b19954a", 0xee, 0x80, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2200080, 0x0)
writev(r1, &(0x7f0000003800)=[{&(0x7f0000000300)="b64c2f4bc0e220ae5bddd8d80a82", 0xe}, {&(0x7f0000000340)="cf751506a16b42890bd18be763ecd5d041dd5d72a13b89d2c41f6d4e3bedad14724f2babecb8b6fad33c1aef90ce0e4d0b44c493a7", 0x35}, {&(0x7f00000024c0)="7f0f88cff6c639c40e7cd90177d00a3c9731199b195d97cd54995c710f8a9ce76f09bba672582135faf002e0dab7e2340bd0e34fb6926344e8cea2802d3e81a1e6e6879463184b9ae8d38d1f5e2c80c820616fbc236915f922b17c82df33e38fbe692ffddd3d03171534902bcb7a5ad06e77585bb13ad45689c1fb597573e8c6d360", 0x82}, {&(0x7f0000002580)="797bcff371bf51c5bb40a228969508a6d4ef56c6f7bf5c3b2f3451b0744c64522c63919dbfbac5ec88dd49f94fc74c6aa2b00d9244c68be40aab291d98a4856533542eb6b8c26946b5cb10d52d966ab2f31621b38066f7ec1a5299d431dd010e16273ab4ca3aaa73325378c893c9b7e97f67d54001ae477773204e4aba608fa611c2cba76993f80ad45d366a5e061d44891e1e01240631f37347e1fe", 0x9c}, {&(0x7f0000002640)="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", 0xfb}, {&(0x7f0000002740)="6888b5a6bfee93162ba79c35fc52b38af471e7fdc42220d84b7649e560bba00474715528274f7f8ae831f41e212373ca389fa7edaaeead4b70916b25e4d0ffb56e3b08", 0x43}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="230101a388ee8e55a03bdc21ba0033", 0xf}], 0x8)
read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020)

13.925088297s ago: executing program 0 (id=377):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r2 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x820480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x5}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x790a, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x400400c)
ptrace(0x10, r2)
ptrace(0x8, r2)
waitid(0x1, r2, 0x0, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r6, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r4, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0})
fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2})
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000080)={0x80000, 0x0, [0x8, 0x98f, 0x80000001, 0xe, 0x3ff, 0xff, 0xbaeb, 0x8]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

13.670202387s ago: executing program 0 (id=378):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
read$FUSE(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r2, r3, &(0x7f00000001c0), 0x8)
fcntl$addseals(r3, 0x409, 0x8)
fallocate(r3, 0x3, 0x9100, 0x3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socket$inet(0x2, 0x4, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0xdd9a000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff})
r8 = socket(0x2, 0x3, 0xff)
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
r9 = dup3(r8, r7, 0x80000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/217, 0xd9, 0x0, &(0x7f0000001180)=""/4096, 0x1000}, &(0x7f0000000340)=0x40)
write$input_event(r9, &(0x7f0000000080)={{}, 0x14, 0x8000, 0x664b}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='size=9t4p,grpquota_inode_hardlimit=-,ojj_type=/dev/rnullb0\x00,\x00'])

13.656814038s ago: executing program 0 (id=379):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) (async)
r1 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x406002, 0x29) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001200192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000) (async)
write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

13.615939531s ago: executing program 32 (id=379):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) (async)
r1 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/cgroup.procs\x00', 0x406002, 0x29) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001200192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000) (async)
write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11.724677773s ago: executing program 4 (id=403):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109028d0002010940090904000001020d00000624060001740524000c000d240f01dff000004d940800e806241a04000a0c241b020002000102090008072414bcc632ff05241c"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
madvise(&(0x7f0000133000/0x3000)=nil, 0x3000, 0x3)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',ro', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setresuid(0x0, 0xee01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

10.361901221s ago: executing program 4 (id=410):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000600)={0x0, <r3=>0x0})
capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x9})
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6, 0x2, 0xa244, 0x2, 0x1, 0x3})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x12db, 0xfffffff5, 0x81, 0x2d, 0x0, <r4=>0xffffffffffffffff})
capset(&(0x7f0000000000)={0x20080522, r4}, &(0x7f00000001c0)={0x5, 0x2, 0x4, 0x2, 0x1})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000005c0)={&(0x7f0000000580), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

10.274601299s ago: executing program 4 (id=411):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='fuse\x00', 0x201081, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000582000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000000c0)=@rnullb, 0x0, 0x0)

10.218293693s ago: executing program 4 (id=412):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000480)={0x40043f, 0x208000, 0x7})
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000300))
syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000, 0x21c083) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000, 0x21c083)
ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) (async)
ioctl$EVIOCSABS20(r2, 0x40044591, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r3, 0x0, r6, 0x0, 0x39000, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x8ca, 0x0)
fcntl$dupfd(r4, 0x0, r4) (async)
r8 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000600)=""/205, &(0x7f0000000240)=0xcd)
write$FUSE_LK(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x1, 0x1}}}, 0x28) (async)
write$FUSE_LK(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x1, 0x1}}}, 0x28)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9})
pipe2$9p(&(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
dup(r10) (async)
r11 = dup(r10)
write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}}) (async)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}})

10.099514663s ago: executing program 4 (id=415):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe(0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000007000004000"/24])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100a, 0x2})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="543f356a6e377dbe8b9e1a167356e570bb90fe5deaf8c77df9e65e354d5cae5ff56e109d049623a46809f9b1756804be6d6881455c9db7cb86e894f4bfb784b4dd8b2598a683ae127720a8a5bd95cc", 0x4f}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
write$tun(r6, &(0x7f0000000140)={@void, @void, @ipv6=@udp={0x5, 0x6, '`ZG', 0x1b9, 0x11, 0x0, @loopback, @local, {[@hopopts={0x21, 0x10, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1b, 0x1, [0x9, 0x3, 0x5, 0xb4, 0x4]}}, @generic={0xf9, 0x2e, "be66db2b65de3a14e0605a726b50ffe87c47e6c7bcf7451fc68dc4dbe55c1a935077f7d6c6b487308d695a265570"}]}, @hopopts={0x2c, 0x11, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x0, 0x81, "51cb9b4a81a042b8bb0b151939cee34aff68f4cd2a0f987a1d43e36bb783fb3e0053c929a71337e96c57961e44671c263d441ad7c3ec2ce0cc5a8488be326eaa73053b286b20ff83af1dd645e0f1b45407f09af880285b1d529ea742d8728b5c2a76f52265ab5266e18889d79b76cfc8c1e87513663c099e5c576829d866ff22a3"}, @ra={0x5, 0x2, 0x4}]}, @routing={0x4, 0x6, 0x1, 0x2, 0x0, [@local, @local, @empty]}], {0x4e21, 0x4e22, 0x59, 0x0, @gue={{0x2, 0x1, 0x1, 0x2d, 0x0, @val=0x80}, "f24e20688f6d285f867497c8b3a91aa572ad32e59fc08fdfc10b04742832a0796d4bed0551db5cc1102e2ab1f276e5a35b66624a2f5f2fd813ee5238d8695b57b0a188ef34c8debbad"}}}}}, 0x1e1)
close_range(r0, 0xffffffffffffffff, 0x0)

9.986147471s ago: executing program 4 (id=416):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x4b}}}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="94b15245e5709a7257a47b7d6a34b5c6034b36fa94cf3cf30ca8c7bb826dd2"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0xfffa, 0x5, 0x6, 0x1}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r2, 0x808, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}]}, 0x44}}, 0x40040)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x4, 0x0)
ioctl$TIOCGICOUNT(r6, 0x545d, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x10, 0x7, @l2={'eth', 0x3a, 'wg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000008)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r9, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x40080)
r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000a40), 0x105002, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000a80)=0x5)
r11 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r11, &(0x7f0000000ac0)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r12, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r13, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x99}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/custom0\x00')
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x81)

9.964746213s ago: executing program 33 (id=416):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x4b}}}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="94b15245e5709a7257a47b7d6a34b5c6034b36fa94cf3cf30ca8c7bb826dd2"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0xfffa, 0x5, 0x6, 0x1}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r2, 0x808, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}]}, 0x44}}, 0x40040)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x4, 0x0)
ioctl$TIOCGICOUNT(r6, 0x545d, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x10, 0x7, @l2={'eth', 0x3a, 'wg0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000008)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r9, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x40080)
r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000a40), 0x105002, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000a80)=0x5)
r11 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r11, &(0x7f0000000ac0)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r12, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r13, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x99}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/custom0\x00')
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x81)

5.945486575s ago: executing program 5 (id=474):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
r5 = dup(r4)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x7fffffff, 0x4) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0x0) (async)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
fcntl$setlease(r8, 0x400, 0x0) (async)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8) (async, rerun: 64)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRESHEX=0x0], 0xb0) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async)
mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) (async)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x6e09082f, 0x6, 0x5, 0x2, 0x3, 0x9], 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) (async)
unshare(0x20400)

5.910660567s ago: executing program 5 (id=475):
r0 = syz_usb_connect$uac1(0x1, 0xf8, &(0x7f0000000fc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0xf7, 0xa0, 0x26, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf801, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x1, 0x5, [0x4, 0x9, 0x8, 0x1, 0x7], 0x9}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x7, "c4cfc6"}, @feature_unit={0x0, 0x24, 0x6, 0x1, 0x1, 0x0, [0x3, 0x2, 0x1, 0x4], 0xe5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x2, 0x3, 0x1, "c96f3350"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf8, 0x1, 0xa, 0x1, "68ca8d1b7007e5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x0, 0x5, "d6786b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xc, 0x3, 0xb, 0x11, "0a0b560f519a"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0xb, "ac57c2f646"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9e, 0x1, 0x7, {0x7, 0x25, 0x1, 0x83, 0xd, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0xbb, 0x9, {0x7, 0x25, 0x1, 0x83, 0x1, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x10, 0x2b, 0x10, 0xf}, 0x4b, &(0x7f0000000200)={0x5, 0xf, 0x4b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x43, "a695dab59ab4d3179550713bdbe20ef5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x6, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x4, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe4, "c8b30e13ebd91079dc7069eace41ed37"}]}, 0x6, [{0x74, &(0x7f0000000280)=@string={0x74, 0x3, "1e80befcea727172b4bbbca80fa3c0e1168b402e6a67858108b5dd65b6c7f3260e41bcffb36108bba1c96b0dab2313c016c854191ba1ec4f87042c2d1681a388c230a0530ff15854e4214d871a8d01fe3033467af1abe7aa88d2964fab240cc085dc939ba4f35a74b5953315c8b062ccd1b8"}}, {0xfea4, &(0x7f0000000300)=@string={0x36, 0x3, "90147312844e1cea2bf0da0ad5bbcb3fcd748d831c6fcbfc63c4f382d7be2555c74bbaa5dc3d53437f27d0431f7be733f5ecd452"}}, {0x79, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x44e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x6a, &(0x7f0000000f40)=@string={0x6a, 0x3, "c4df508f0c2050dcf0ac0784f63b10e58db24be6635bbdf03bb778b6cdfc3638f1fc3b9a1c81d888dee355a5b43a72b27def028be00897de6c350ec2f6995421900500a9b40ef56c6bdf730078a819db2243be4b4c5b5025efb1232412133963619957557afe4a421a97f5fd"}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x20, 0x10, 0x86, {0x86, 0x22, "37da91386c744d7abe0fc63536e678abe600d6e562f7050d777e4a653d5ae15e36dfafa41a2fe95128095c93d917caf3c932ea95af277a4579c1d5a1cb969ea46b176f1717b03139d6922af759138bbfab1dc78559c9eb625c28430ca83d5e4b2de98f1eea7063b0995b06981d46dffd0e8a0e20e0e47f8bd1942a998bfb911f8795be73"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000900)={0x44, &(0x7f0000000680)={0x40, 0xe, 0x8a, "912d31188ffebff25e06b5ec56f69d1a27509342a44711eed44eba3323636eae4fd83d809782a337bc40f2ab5a691161104cbcd1ecd5b51ca895de90b8627527803d6b86533ceee25986a06576f1113f3928504029ba06ea5b87f5ce0d3c9a6e7b174a111e737936aa55899d15a22da6536c826323603fdbbcd4cb76362cc7e9020ff2258ee699b34a63"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x81, 0x1, "bb"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "e3"}, &(0x7f0000000840)={0x20, 0x83, 0x3, 'Dx('}, &(0x7f0000000880)={0x20, 0x84, 0x3, "75a0f1"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "34eb55"}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
close(r1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0xd0, 0x6, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0xb, 0x9}}]}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0x1, 0x8e, 0x20, 0x6}, 0xfa, &(0x7f00000010c0)={0x5, 0xf, 0xfa, 0x2, [@generic={0xf2, 0x10, 0xb, "3e66a1123d40745620519f18916dba9b4143665732ec423ef60fc1618167cfed77a4eb202f1c93eff2a5898a473a0926b529c185450ef0cad3276e3ef113e1cc90a72c3c9eecc909b590be2020c9c09e178a0759ae9628e2fda03d775bacd7aed68f2ef70183bcf91a897af4195ba22c26d7de7bbdc0a9330fcb3ada60e90a63df65a70eae099086e76b7ac315f35ef9a5c783f01e660426a1dc5668bc2606022c101b329b12f98688c3b38a47edd7a09ae4d53c2691c91fbe6efff80a4b4ad538089c8913eba92003fd269b72de166ff6c6892536ec3fc8f396f69bb47f8d3cacf753afceceacb047a573e1682377"}, @ptm_cap={0x3}]}, 0xa, [{0x9f, &(0x7f00000011c0)=@string={0x9f, 0x3, "414fc5871fc23a6491fdb2cb11b2387acd09af33100d27ffd3e98d539992bc507ada431a66d41d03ae234a245e3ee954a6ce525f4ff0ca03648f8317850ac210a584de278c349dd31eb61528915825b600df95c2656c5b80a1001a9d614e57baaed10d73d670cd5b3c28594e2efa0362a51ded81dba885dd1b233f3dcefc754e1eded32be80ba44dc2ad01d8c62947d1b7d1dc1f8491e823e86b6d7a3e"}}, {0x81, &(0x7f0000001280)=@string={0x81, 0x3, "b6dab60dd81b5f149224a27c23c60be951d7a574da8ec5f20748350dbf3d63f58927da02e483802ba077a56095242dd31b18038c1237776a35b0b2318722d01ea7db01225c01ee293e3f6640eff7dc12a27ca696af458dc6401dd3b6b78ea1d4cd84b27f9062e031fa673eb452d73aa6f6d89308d570c6276b93aead63b048"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0x32, &(0x7f0000001340)=@string={0x32, 0x3, "5b05ba5388c7dcde8f19d4ee0ff16eb475a5ab53b575621ae8f13f9b022dabd1b97ab285490e20e93983aadf67bbaf9e"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x40a}}, {0x9e, &(0x7f00000013c0)=@string={0x9e, 0x3, "7d6cc0a560e745a09b2cafe35d1054ca92c82a5dfe19093e11835db62f46ae7477d7c35e0c37379b8af84b5e76a5caf079129ab7dc9b56867d8a74fad7d698b9779e997d50134ca808898f4e0020b13d9b81363f36907b377e7f031cf35e87afa7027ef263213e573c9f55f363751d9b57d0dcbf603a18a9b789219e1716bafa94f0c23085a6f31e7deff9e563bdb547b9d75c506ec8b1142998810e"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x19a80602f6eea709}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000b40)={0x40, 0xd, 0x82, {0x82, 0x10, "475405831f593a5e499b5a4abc0c60cedbaa208ef8988ae71ab5dd46fcc16a07585abaf04e14a25784af79e9a959f24d1fecd356c224b5dcffc52e39bcd408914522a1c6e34a39f7268f2dd536ab98abd46edbd29ef43a58ba1241918d66db36a229dbdd922f57c98d7854020c48f09384de9efb35503474c23e80cc5cf035b3"}}, &(0x7f0000000c00)={0x0, 0x3, 0x29, @string={0x29, 0x3, "927802f6f4eb11f79d6a95b4b4a77eae3a65b1097ce0ac85f2711ed717c0bfaff0c7b59b974d3a"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c80)={0x40, 0xf, 0x42, "59e4fe62379fd6732ea73050f9a9360323969eb009712abf1e3189e41cca29c83d825dca1ec17b92e945bf058f95e0f8b96ceb93d8a2556a099c4776d66c2ad9ee2b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xe7}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000d80)={0x20, 0x81, 0x3, "c16315"}, &(0x7f0000000dc0)={0x20, 0x82, 0x3, "3966ed"}, &(0x7f0000000e00)={0x20, 0x83, 0x2, 'rA'}, &(0x7f0000000e40)={0x20, 0x84, 0x3, "d89222"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, '?.i'}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
getpeername$netlink(r1, &(0x7f00000015c0), &(0x7f0000001600)=0xc)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001580)=ANY=[@ANYRES32=r3])
syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x81, 0x0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "2671a763a3fd"}, {0x5, 0x24, 0x0, 0x626}, {0xd, 0x24, 0xf, 0x1, 0x193, 0x4, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0xad, 0x1}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8b, 0x7f, 0x8}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x6, 0x1, 0x92, 0x20, 0x82}, 0x2a, &(0x7f0000000a40)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x6, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x2c, 0x1, 0x3f29, 0xf000, 0xf47d, [0xff00f0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xff, 0xbe, 0x3, 0x9}]}, 0x2, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x402}}]})

3.729775012s ago: executing program 2 (id=525):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000140)="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", 0x1a2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x2, 0x1, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @mcast2, 0xd}}]}, 0x38}}, 0x0)
read(r7, &(0x7f0000000040)=""/92, 0x5c)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r6, 0x0, 0x5)
fchdir(r8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0)
ioctl$LOOP_CLR_FD(r8, 0x4c01)
close_range(r3, 0xffffffffffffffff, 0x0)

3.554255986s ago: executing program 2 (id=526):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1, 0x192, 0xd}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
listen(r2, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4)
getsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f00000001c0)=""/147, &(0x7f0000000300)=0x93)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x13}, @fda={0x66646185, 0x5, 0x0, 0xa}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0})

3.553668386s ago: executing program 2 (id=527):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = dup(r0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@nodevmap}], [{@subj_type={'subj_type', 0x3d, ',)*\xc5'}}, {@uid_gt={'uid>', r3}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@permit_directio}, {@fowner_gt={'fowner>', r5}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '\xf9'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+]\''}}, {@obj_user={'obj_user', 0x3d, '*'}}]}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r6)
fsetxattr$security_selinux(r0, &(0x7f00000003c0), &(0x7f0000000400)='/usr/sbin/cups-browsed\x00', 0x17, 0x0)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x200040, &(0x7f00000004c0)={[{@verity_off}, {@uuid_off}, {@redirect_dir_on}, {@xino_auto}, {@verity_require}]})
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000500))
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000600)={@local, @empty}, &(0x7f0000000640)=0x8)
setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000680), 0x4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044805}, 0x8004)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000840)=""/192, &(0x7f0000000900)=0xc0)
r7 = accept4$bt_l2cap(r1, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x800)
ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000009c0))
read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002a40)={0x10, 0xffffffffffffffda, r8}, 0x10)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002a80), 0x340, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000002ac0)={0xe, {0x7, 0x7, 0x7, 0x93, "84e50cd4b46d491aceeaade5a769554c916d4f70753d12fc0f95397ed0231230e527ea492db3de485995c2999897bc0d653a5f249391f9efa3d29007437be826b53eacf44e98be8d725c331de9c4615ff32826093869ace51bf081d5191341ff80ffda47b9efe544c7d6d5283a6282ff8d060e9fec8786ef791ee9b2920cbfe04acd4fe1d2f003a1882d9d95d6932a49a8a195"}}, 0x9f)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002bc0), r1)
sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x88, r10, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002d40)={<r11=>r6, 0x101, 0x987, 0x2c9c})
renameat(r11, &(0x7f0000002d80)='./file0\x00', r9, &(0x7f0000002dc0)='./file0\x00')
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0)
write$FUSE_OPEN(r12, &(0x7f0000002e40)={0x20, 0xfffffffffffffffe, r8, {0x0, 0x23}}, 0x20)
r13 = dup(r7)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r7, &(0x7f0000002e80)={r9, r13, 0x391})
r14 = syz_usb_connect(0x1, 0x784, &(0x7f0000002ec0)={{0x12, 0x1, 0x310, 0xa5, 0xb3, 0xbf, 0x20, 0x1b3d, 0x16d, 0xc22d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x772, 0x3, 0x3, 0x5, 0x0, 0x4, [{{0x9, 0x4, 0xfe, 0x8a, 0x2, 0xf5, 0xee, 0x74, 0x10, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe, 0x3, 0x1, 0x7, "2efc7b97c3"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x5d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}, @generic={0x6b, 0xe, "726033d15d3ca620fdc337bb9ff83bb5b400b5efa2453263eb0ebcce13fe7252036ac5ab722e1bcc14b2e9bd785981dfdb2d5846e36adfa561fc40b612d145a242e8770c3a4dec97aff7a6d5bfde410381fce39f50c15e4fd9644afe636267f5c8b7286aca284e3e9e"}]}}]}}, {{0x9, 0x4, 0x6, 0xdc, 0xd, 0x9f, 0x33, 0x33, 0x2, [@generic={0xf9, 0x7, "e6caf5ab0574d3adc4b26c1b3dea61608c2590c6fa2e567b616b5696faa64cca0237095913277d4e27d1b54a4e8b0da58c8487b2209c843a8cdbe26c0bf83bf4fc1457f30a51914e3fb27a3fa144c0d4be3c999364839e2db577301b9de157c8f6a542dcb72208909ddf3e185a2d96e5f9bc8b92926fc6471883fd3613149156517851775e7b084bdb8e81376d9f535c37d89ac0f03e617ffb9b037f7d24d9ca127c92ea32d390947f239e66f35b6d7c11452b898937a390792b615f98fb43f63427487b1499abc018091c7fccdbdd06cd3f592ef850835c11f5936770b6af428eecd696e36d15c671285fc21b87a1cf961c1e1775c9cf"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "1f4ab351"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x3c5, 0x81, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x30}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x400, 0x2, 0x7, 0x6, 0x7f, 0x4}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0xe, 0x9, [@generic={0xa5, 0x6, "587c812bd852a4ebafcd2fe210a0f35e205196939706494f103020ec65aa61e13a8ffd6140859899618d153e4f23d86c7c35ad8ec265bf7eaf75649a52aa293f9878b8ba47022c66bcfc874d9d0f1f5d93a7e94569f252afdc824aa1ba1fa1daf38fdfffad3b43736056f2300b22554caa476825a65287c14fc2a49f3b29c4e47a632ce03313feb2e932ca5e8647adf78b224ca3f9352b096b1062bd4425fc02bd3dd3"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x9, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x9, 0x9b, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x873}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x3, 0x0, 0xbb, [@generic={0x28, 0xe, "57b90b015b66976c2bef8a6858f3a64f9f41beb8f84e6b4e95b6931d93a6bb7a9cbb6ba3273a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0xd, 0x12, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x1c, 0x1}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ef, 0x4e, 0x40, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x25f7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x1, 0xd, [@generic={0x69, 0xb, "0bb609e022d6f5ea146ff39244090ce8e79043c746355c20f5f8046328fd3d6c9efa5a075df15cbf8aa2ce19c608d2fa8531052cad322c835cf8af417c2a7aaa11157b90cc0426fa6211318a7c58d43aa904ccb4e472e2e4d91f7ea2442c6e8627317cee8814b3"}, @generic={0x42, 0x6, "d4482663fd4e77e8b20ec26fb8f37f756b4990e47887733a8d7ab72fa8af367e8f0f1ce8e05dfae5db0428069c8aab1526c2c0087c0f5d06b640698883eddd39"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x0, 0xd, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x74, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x10, 0x3, 0x20, [@generic={0xcf, 0x30, "056fb608a66fb7cfe8e2d66bd4bcc319251534fc048f193cfbe1e1de317636aab38767523f22e66bb6360724160f41382bfa288fc99bf54c598bdb3816f97417eb531b2d514ce047d88399ac9289d34e45ab51b09a75f029ce53408aec68f0e37870ca3df0db4e18695edfdfb8fbc3e79b854c9756fa61085a2998c486ccf96e7b25ac3b7cfdfcea1391fa54a47f0ee8b3b191e5267b47d76bc552d98153c8475a42a363911056bf0f2cf0ac72bb0543ee910574f5220ef9db424a83d695e4acff13b52eb8b6c4887354892d25"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x9, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}, @generic={0x2a, 0x30, "4c12eaa18f23f0b316336654af3777115d6c712ee812569b2bbd4f63f1686033ad5cd6fdd4b4f08b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x6, 0x20, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0x7, 0x4, [@generic={0xba, 0x9, "5c270e3b86acf5bc350e7598f5d0bd51f88dc9ee3a8b5d65d5098b4188eb3be9f32f2c4a4ea92cf800f60c73c8c9cb940dfeded4c29a1ae7c53deb4e6a654d9b591f5c71c3f55845454dd82b747efebe9d2e4cfcade103e554888993f076d5edab7a62fb0b2fa7ff8fe4e2210ec59a5f579cfd9cac6f8ebd451a213a2dd7c4791d64407e5b6c90fbc7359ecdf00d02a4a5a6afd33820f399db1cde78bc9f92b9572e8b83261912ec9a00a94a88bab0d3f323350f1014a272"}]}}, {{0x9, 0x5, 0x85, 0x0, 0x0, 0x3, 0x7, 0x2f, [@generic={0x9e, 0x31, "7fa048081b8b1db799e212ea3479c2bf418317fd496dbea9809a17bec2ef304df9c8b422220a3240654d88e61de638244f37933886b1d91cfd808bd89695e9e46e7c3e06b9a7e326683cb3a15316aaacd9709b02bc48fc617a850a887b253eb3c8fed7b0fbfbbb8741ddf6018682f43d3c3a25d69d513583e6274ee4b0fbc7d63f25c57157abb516ac298d59e14ac38809b23fa1cce687173f82c8de"}]}}]}}, {{0x9, 0x4, 0x81, 0x7, 0x5, 0x87, 0x3a, 0xa0, 0xa5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c53f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x1, 0x7, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0xa8}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8, 0x7, 0x1, 0x6, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xe9, 0x9, 0xd4}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}, @generic={0x6c, 0x31, "a302507ca2cbcc7a64ee107b28f4c05b866202c42558a73e058a8f312e5b1d23d92b349b47f16dcb18700b9c0032ff44b034b44cbecf9401f38984767b6953675c8c7f7fc42560bf908061cd34d17addb1f1d34a08ef900664aa93ea6ec4a740a787aed774188d3c2506"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xcc, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x4}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x6e, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x81, 0xb9, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x1, 0x9, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xfe}]}}]}}]}}]}}, &(0x7f00000037c0)={0xa, &(0x7f0000003680)={0xa, 0x6, 0x310, 0xfa, 0x1, 0xe4, 0x20, 0xd5}, 0xa9, &(0x7f00000036c0)={0x5, 0xf, 0xa9, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x3, 0x5, 0xb0, 0x4}, @generic={0x92, 0x10, 0x1, "48a144bec9c3097f4ef67965683b7718e95ccf4036e59f5d7b18eca9ad46b04dd66ba1ee1fce8246c3fb2696c13e58535fc3e972808dce59278a90e3169722df9b700c22b7174c9d8ffaacddaaf72a7678df70949031fd818e67e46d099b01d71953c0884c2015bfd0608cdd00a6e4e7d21fdf0c8eae7551ab6e22248aa36792b164380ea13e6d3f5ca66bf4ede849"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x8}]}, 0x1, [{0x17, &(0x7f0000003780)=@string={0x17, 0x3, "f98d4fbc4f6fef26485fcb7fa5dbe670d66991228d"}}]})
syz_usb_control_io(r14, &(0x7f0000003a40)={0x2c, &(0x7f0000003800)={0x20, 0x5, 0xf4, {0xf4, 0x24, "ee72c85a85a7304daec27abc402bbb34f1e91feea810df42ed464424819c92cfa47b1788fa870b5b1e061d61a4fb742fc96fbf585e5d501569e7125ec11a1c216fba9653883d877fca13cf6287ad030fe7bd9376d194a529ceb32a3a514e8cc576928721f0f47d04f9a8f282194423350ddd8a99d9639f0cf0bdb8763fa93e0854f7407da49db7333d17b7f9ecd7cb92abe4fad5cc6a2ea30617eea49ac64dae985e328ec8a06863073a014b6afecbf9a35810c0542c58fbef1560b0a130c00a4a448544c53080a1eb9a72cc8499345dad3659ce7005ee2b09216af2d85fbf968edad836abbaeeaf6b60bef4ae0d2f9c9230"}}, &(0x7f0000003900)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "4d87192284e48e8bd7446e826c086ee7744c8f26d2e3d971877c0f546b67b31a63aa6ae6ecff59bb521a8a57d6"}}, &(0x7f0000003940)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x1, 0x11, 0x100, [0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x4, 0xf, 0x3, [0xf, 0x30, 0xff]}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x9, 0xf00, 0x0, [0xff0000, 0xc000, 0xc000, 0x0, 0xc000]}]}}, &(0x7f00000039c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x0, 0xf5, 0x2, "ee555048", "19be4b08"}}, &(0x7f0000003a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x6, 0x3, 0x9, 0x101, 0x7}}}, &(0x7f0000003ec0)={0x84, &(0x7f0000003a80)={0x0, 0x10, 0x73, "7ded1df7daba5855070eb359fff33a472fb7c9a46d283a64c1e980f9e4187d976aadedbf48c8fa4cd21a61583f0dccd236709fb05fa08d0ce69481e41266ccbbccb6ab1a29c7c3c78b56c2a779b5315face54e403ac9c6a2a63e02ba45767f17107a76353fd51fda45a6edcfe00b1b33a4d8c2"}, &(0x7f0000003b00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003b80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000003bc0)={0x20, 0x0, 0x8, {0x400, 0x80, [0xf0f]}}, &(0x7f0000003c00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000003c40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000003c80)={0x40, 0xb, 0x2, "4f0f"}, &(0x7f0000003cc0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000003d00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000003d40)={0x40, 0x17, 0x6, @local}, &(0x7f0000003d80)={0x40, 0x19, 0x2, "af93"}, &(0x7f0000003dc0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000003e00)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000003e40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000003e80)={0x40, 0x21, 0x1, 0xab}})

2.87854079s ago: executing program 5 (id=532):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000340)="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", 0x1000)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000180), 0x0)
r2 = dup3(r0, r1, 0x0)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/91)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) (async)
setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000340)="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", 0x1000) (async)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async)
io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000180), 0x0) (async)
dup3(r0, r1, 0x0) (async)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/91) (async)

2.831253474s ago: executing program 5 (id=534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
epoll_create1(0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'gre0\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r6, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2)

2.2524537s ago: executing program 5 (id=539):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x880c02, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x7fffffff}}], [{@smackfsdef={'smackfsdef', 0x3d, '$.\\-%,'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x36, 0x65, 0x31, 0x38, 0x36, 0xec705a5dba588653, 0x61], 0x2d, [0x64, 0x31, 0x36, 0x66], 0x2d, [0x66, 0x66, 0x31, 0x37], 0x2d, [0x32, 0x31, 0x66, 0x5d], 0x2d, [0x35, 0x33, 0x64, 0x39, 0x38, 0x38, 0x38, 0x63]}}}]})

2.25028068s ago: executing program 5 (id=541):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff)
write(r5, &(0x7f0000000100), 0xfffffe5d)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000005dc0), 0x0, 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/13], 0xd)
getpgid(0x0)
sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de284211000000000001090224000110000000080400008103160000092100000001220500090581e4ffffff0000"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001002bbd7000ffdbde25200100000000000000000000000000000a0101010000000000000000000000004e2000074e2400000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d26c00000000000000000000000000ffffac1414150000000000000000e805000000000000faffffffffffffff06000000000000000800000000000000000100000000000001000000000000000008000000000000d931a06800000000810000000000000001800000000000007cf000000000000002000000ba0b00000100000029bd700000000000020003f20100000000000000f1cab43bfdd6d29b"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
unshare(0x62040200)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d)
getsockopt$inet_opts(r10, 0x0, 0x4, 0x0, &(0x7f0000000280))
r11 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800)
ioctl$HIDIOCGRDESCSIZE(r11, 0x80044801, &(0x7f0000000040))
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080))
write(r1, &(0x7f0000001c00)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3ca6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad744941039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d3de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca3064b954915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4f624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc607185701065a8b84a2f2502af8e68d0fe7635ac502f1b9ef82e61102b303d5f6483c0169ac112d9010a022c58e3f80f0cfb16f906a3df335d42df851aeee62f85bb93c87e7b8b171054c2b7d77a8e4f04c0ed12076233729e6f82e46e8065bb8d870c27bdd427ebf21cd8cb83fd53667a48a42c0ffe91d1fc078b616cb9b763c448aa7c7156df9485535ae508cc87b66a340af762db602326d02af73557e3fba164c12cc92ee61ae4dea1a65c32d3acab702227e9484a927777f07bcd7b5e3616012d9ec79802e2830e7732590a83bfe1bd710ff70bfb53b0b6c711c10cfa6902f645bcebaf64e0805731061f5478d801601c1deeb2d14c26aa130d1d31a235f97d93902ba1ea08be27", 0xfffffdbf)

1.890505459s ago: executing program 1 (id=547):
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x43)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x1c)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f0000000ac0)="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", 0xfd)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
close(r5)

1.770199339s ago: executing program 1 (id=548):
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000240)='./file2\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x7ff}, 0x1c)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x20, 0xf, 0xb1, {0xb1, 0x2, "6dc44380ab27351c5bf267c127aa0b0d2c5ae13414805b2f417d435142b2e6bf0b02a0dac487ed9addc60907b8316e6f128bf75b101997a39358e60f37e7ca42927db20b8d1b58867df58eb591721f15c9e7e1de6c0ff50fd613d19b408f690b7596b080cab157339ba722fead7c63babef3d57440b706694d5d2d85511f4f24d754b43119035616247ac6a0913e430b9c1e368868df7a526d6b8aef4d947ef7dd96fe3357a4f128bcd1a3ebfea109"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x4c5f236beaf1151a, 0x6, 0x1f, "059864639fce06197c935bbe094de680854ec5307adfa1cebee9d13e032f5b"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x80, 0x1c, {0x7, 0x1ff, 0x7fff, 0x1000, 0x1ff, 0x4, 0x4, 0x80000001, 0x5, 0x0, 0xfffc, 0x754}}, &(0x7f0000000a40)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000a80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ac0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000b00)={0x20, 0x89, 0x2}})
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f0000002240)={[{@subsystem='freezer'}]})
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ptrace(0x10, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = dup(r6)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

1.401868848s ago: executing program 3 (id=553):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000240)={0x1ff, {0x2, 0x5, 0x0, 0x4, 0x204c, 0xff}})
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x45, 0x5, 0x1, @private0, @mcast2, 0x80, 0x80, 0x1000, 0x1485}}) (async)
socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_NMI(r9, 0xae9a) (async)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x100000000000007, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x5, 0xfffffffffffffffd, 0x0, 0x8f09, 0xfffffffffffffffa, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x5, 0x6, 0x4004, 0x6, 0x8, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x262a10}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})

1.297964706s ago: executing program 1 (id=554):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x810, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_complete(r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@private1}, &(0x7f00000000c0)=0x14) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@private1, <r3=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x0, 0x7, 0x4, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x6, 0xac}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r4=>0x0, 0x2f, 0x5, 0x0, 0x7, 0x4, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x6, 0xac}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x84}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x84}}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x804)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x808, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000640)={0x2, 0x2, 0x11})
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x83b9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1004c001}, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x83b9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1004c001}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r1)
sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b40)) (async)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b40))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000cc0)={0x14, &(0x7f0000000b80)={0x0, 0xb, 0xd7, {0xd7, 0xe, "dd2601f81164fccbcaea6cd3948b74020d4fa69a3c8e91dbf7bd58d885c351dd756bbebe3d0a9fb63fb118de05e1ef6ed890bb2dc55b9b6a4ec3ab5fe5df8d5f575f6e863942164e7a22a411c8a1704783452536a91d2c67d0f8c744745e5bdb7ea12ef290c769b84afb477b282fe84b2df0cca664ef77a22ee4e7d9528574b2d60117dc022b236d81d2b05ef64f6dc58b38d79573ff7e68b80bff02cddbd74b8a7d090b156e64aac8984770b15c9e3f493b24cf6d9919f90ba804f00d8ebef3e9f3ae57e6da8c1bf966ddbf0398d39d68013f9eed"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d00)={0x40, 0xf, 0xa0, "610589e8bdf0dddf8c72e1d79fd8293b8ad60e2195917be9e7cb5fae3d0eecf050445ea606ef3f60b8d2f8b0333bb5de572a13db7179847588e1be59977e24d18a9467f45f33dc9edc37816bbefa26135049cca9781e5aca1113aca728bce428ed2554b512fc4180db33111ee2d1d16dddf008ac638e605ff12d08f62462dfaf467e978a7030040d6dc92e61b6995ef9d031fce538d925a60d3a08efcf5f63c8"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0xdf, 0x189, 0x2, 0x1ff, 0x8, 0x0, 0x5, 0x1, 0xfffa, 0x8, 0x3, 0x9}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000ec0)={0x20, 0x83, 0x2}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0xeaa}, &(0x7f0000000f40)={0x20, 0x89, 0x2}})
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r1, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async)
r14 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r14, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x158, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x20004001)

1.2462856s ago: executing program 3 (id=555):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x80000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x6, 0x0, 0x129, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x180000, 0x0}, {0x1, 0x0, 0x3cb0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x4e00000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x200000, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
close_range(r2, r1, 0x0)

1.221416842s ago: executing program 3 (id=556):
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x88}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffd1, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x3}], 0xffffff5b, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e85456ce7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
pipe(&(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1.198178264s ago: executing program 3 (id=557):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x11, r0, 0x0, 0xffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000700)='mounts\x00')
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020)

1.138341129s ago: executing program 3 (id=558):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/59, 0x3b, 0x0, 0x27}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0})

1.136952679s ago: executing program 3 (id=559):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mount(0x0, 0x0, 0x0, 0x200000, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = dup(r1)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xa8)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x12000, 0x0)
pipe(&(0x7f0000001300)={<r4=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x10000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3, 0x5}})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05"], 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r10, &(0x7f0000000080), 0x8)
stat(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0))

768.955639ms ago: executing program 1 (id=560):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4, 0x0, 0x0, 0x18, 0x40, 0x17, 0x4d})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

754.29793ms ago: executing program 1 (id=561):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')
write$P9_RVERSION(r0, 0x0, 0x0)
fsetxattr$security_capability(r0, &(0x7f00000003c0), &(0x7f00000011c0)=@v2={0x2000000, [{0x7c9, 0xfffffffa}, {0xfffff05f, 0xd1d5}]}, 0x14, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001240)='./binderfs/binder1\x00', 0x1802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x5, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e65e, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x5, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xcc, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x400, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2a, &(0x7f0000000180)=0x77, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$incfs_metadata(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000f80)={0x35, 0x15, 0x2, 0xc, 0x9, 0x5, 0x3, 0x87})
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000001200)={0x0, 0x1, 0x1, 0x9})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0/file1\x00')
syz_usb_connect(0x1, 0x702, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x2, 0x2a, 0xfe, 0x40, 0x4}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x3, 0xf00, 0x7, [0xff00f8, 0xc000]}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x440a}}, {0x9f, &(0x7f0000000fc0)=@string={0x9f, 0x3, "f3a3baba54c3085d99075175d3656aee45bb07ae21c914995b95d470f503b3403bc104303add6be8afcbf2a7c43571e33d74d55d781bb440a80783cda2e3100bdb7e2a40ff2605f2ea18f66c89f5915ca5f3242c6ea90b7f8378de03638428426b59fe555ebe0826e2a1ab650b1eb4225a533e48f960e3eca125df657b486e782acaba424af63743a96a11f535590dbb36a0ce9b47bd2b037cc184bf14"}}, {0x98, &(0x7f0000001080)=@string={0x98, 0x3, "f43ba257817a2fbc0350c0e12a68214ad5b5f2a204ba2f6b6806ab6f37701e27b7c5f56b71e27c959b8dbbf4425b62e1842892279b25094c27d2a178f7ff31889acfe6da7e82e793232e7b72a11aa6b2d63b7495d0da1b485f4c5d551155ae196a50e39b08707f40b2b22e704fe760cddeae2a7bdd4234ddddec15b749674b30aa7778d200acb03431241bf8519e2585add3c9e97d08"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, '\x00\x00\b\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0080)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000200)=""/227)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

522.222768ms ago: executing program 2 (id=562):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x222443, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
pivot_root(0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x2140, 0x4)

521.241019ms ago: executing program 2 (id=563):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240))
syz_clone(0x840880, &(0x7f0000000080)="ed1f552b5cb22f7079a7ec8f5ceccd491e89", 0x12, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="5e678727d07752357d4a516a3a488df364777e740dc3d72a74066102882c42871f99ee6b63de61ebb4b74f03376e6a11912ba961ff2115762f6c24426b1fd391d99817a5f43670ab0de585d96823ee95f16b4125d9c04525ae3e41d0de98ac69b288d0bf68f6c235cc5623a15e76e74992fc53f64059d01954fd998973b17bb023c167f5ad18ea509252f929e21616361d46c6f8e2089cbd187b7b13153afc93d345d18bd6a3a2be7da7c5d2cd3388724f4c06aceb955cd328986ad0bdd2aaa30ef470ca069fa90b1b1c2c3a1ab02d502c9f4a05")
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000002f0b0000000000000300000000000000a70800000000000002000000000000e56f000000000000080600000000000000210900000000000000000000000000008000"/88])

223.640152ms ago: executing program 1 (id=564):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
write(r4, &(0x7f0000000100)="00af", 0x2)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0)
read$FUSE(r1, &(0x7f00000024c0)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
r6 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mmap(&(0x7f000027b000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000200)={[{@verity_require}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder1\x00'}}, {@appraise}, {@euid_gt={'euid>', r5}}, {@measure}, {@fowner_lt={'fowner<', r5}}, {@subj_type={'subj_type', 0x3d, 'smaps_rollup\x00'}}]})
read$FUSE(r7, &(0x7f0000004440)={0x2020}, 0x2020)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_usb_control_io(r8, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003b4000000b403"], 0x0, 0x0, 0x0}, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f00000001c0)={0x3, 0x1})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=565):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0)
write$vga_arbiter(r0, 0x0, 0xff35)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}})

kernel console output (not intermixed with test programs):

entered forwarding state
[   28.005160][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.012272][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.061000][  T288] veth0_vlan: entered promiscuous mode
[   28.075250][  T289] veth0_vlan: entered promiscuous mode
[   28.085088][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.092254][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.104430][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.111511][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.119184][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.126322][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.138556][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.145634][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.156794][  T289] veth1_macvtap: entered promiscuous mode
[   28.165508][  T288] veth1_macvtap: entered promiscuous mode
[   28.211621][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.263724][  T291] veth0_vlan: entered promiscuous mode
[   28.294752][  T290] veth0_vlan: entered promiscuous mode
[   28.318865][  T291] veth1_macvtap: entered promiscuous mode
[   28.325621][  T290] veth1_macvtap: entered promiscuous mode
[   28.414988][  T348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   28.448871][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.465557][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.482571][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.492740][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.505856][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.506493][  T348] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[   28.513534][  T348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   28.522051][  T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:2
[   28.527067][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.549004][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.556509][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.565756][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.573452][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.581556][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.591399][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.599311][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.606730][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.614599][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.617652][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.622300][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.636999][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.644591][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.652382][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.659874][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.667299][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.675686][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.683720][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.691429][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.692819][  T366] mmap: syz.2.10 (366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   28.699247][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.719090][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.738083][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.745681][   T45] bridge_slave_1: left allmulticast mode
[   28.751880][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.759372][   T45] bridge_slave_1: left promiscuous mode
[   28.765031][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.777691][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.785140][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.799157][   T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   28.807893][   T45] bridge_slave_0: left allmulticast mode
[   28.808472][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.814019][   T45] bridge_slave_0: left promiscuous mode
[   28.828212][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.835655][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.842646][   T10] usb 2-1: config 0 descriptor??
[   28.853712][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.856736][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.868303][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.881945][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.889486][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.896917][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.904749][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.912930][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.920496][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.927946][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.936303][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.944249][  T370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   28.944286][  T370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:7
[   28.953938][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.970714][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   28.978248][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.008688][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.017784][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.025233][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.035245][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.042975][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.050489][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.051184][   T45] veth1_macvtap: left promiscuous mode
[   29.063585][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.068297][   T45] veth0_vlan: left promiscuous mode
[   29.076751][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.084287][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.091770][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.099291][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.106742][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.114207][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.124906][   T10] usb 2-1: Cannot read MAC address
[   29.125530][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.138315][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.139299][   T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   29.145789][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.164910][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.172464][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.180101][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.184664][   T10] usb 2-1: USB disconnect, device number 2
[   29.191581][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.200989][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.214036][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.221584][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.229129][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.236676][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.244559][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.252099][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.259631][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.267376][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.274867][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.283637][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.291312][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.299097][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.306560][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.314652][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.322530][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.330292][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.333826][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.337984][   T46] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0
[   29.344999][  T376] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.353718][   T46] hid-generic 0003:0008:000F.0001: hidraw0: USB HID v0.00 Device [syz1] on syz1
[   29.364463][  T376] bridge_slave_0: entered allmulticast mode
[   29.375211][  T376] bridge_slave_0: entered promiscuous mode
[   29.381925][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.389627][  T376] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.396741][  T376] bridge_slave_1: entered allmulticast mode
[   29.404934][  T376] bridge_slave_1: entered promiscuous mode
[   29.407320][  T383] overlay: filesystem on ./bus not supported as upperdir
[   29.440287][  T381] fido_id[381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   29.462256][  T387] rust_binder: Error while translating object.
[   29.462315][  T387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.477398][  T387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8
[   29.488433][  T387] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.586998][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.600580][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.617503][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.624652][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.637732][  T406] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   29.649048][  T406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.664547][  T406] rust_binder: Write failure EFAULT in pid:20
[   29.678275][  T376] veth0_vlan: entered promiscuous mode
[   29.696182][  T413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'.
[   29.696602][  T376] veth1_macvtap: entered promiscuous mode
[   29.849830][  T434] rust_binder: 36: no such ref 3
[   29.855233][  T434] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   30.377630][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   30.437622][  T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   30.457595][   T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.527678][   T10] usb 1-1: Using ep0 maxpacket: 8
[   30.533857][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[   30.543114][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.551940][   T10] usb 1-1: config 0 descriptor??
[   30.599138][  T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.608771][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.609164][  T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   30.620508][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.633026][  T329] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[   30.643123][   T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   30.651955][  T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.665541][   T63] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   30.676105][  T329] usb 3-1: config 0 descriptor??
[   30.685252][   T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.696461][   T63] usb 4-1: config 0 descriptor??
[   30.762011][   T10] usbhid 1-1:0.0: can't add hid device: -71
[   30.768121][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   30.777077][   T10] usb 1-1: USB disconnect, device number 2
[   30.909816][   T63] usbhid 4-1:0.0: can't add hid device: -71
[   30.916065][   T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   30.925813][   T63] usb 4-1: USB disconnect, device number 2
[   30.934682][   T36] kauditd_printk_skb: 105 callbacks suppressed
[   30.934699][   T36] audit: type=1400 audit(1756458425.050:179): avc:  denied  { read write } for  pid=481 comm="syz.3.41" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   30.965635][   T36] audit: type=1400 audit(1756458425.050:180): avc:  denied  { open } for  pid=481 comm="syz.3.41" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   30.996835][   T36] audit: type=1400 audit(1756458425.060:181): avc:  denied  { remount } for  pid=481 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.017695][   T36] audit: type=1400 audit(1756458425.080:182): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.040526][   T36] audit: type=1400 audit(1756458425.120:183): avc:  denied  { ioctl } for  pid=486 comm="syz.3.42" path="socket:[4519]" dev="sockfs" ino=4519 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.049282][  T489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'.
[   31.066680][   T36] audit: type=1400 audit(1756458425.160:184): avc:  denied  { read write } for  pid=488 comm="syz.3.43" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   31.100672][   T36] audit: type=1400 audit(1756458425.160:185): avc:  denied  { open } for  pid=488 comm="syz.3.43" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   31.107104][  T329] hid-rmi 0003:1532:011D.0002: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0
[   31.204099][   T36] audit: type=1400 audit(1756458425.320:186): avc:  denied  { mounton } for  pid=488 comm="syz.3.43" path="/15/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   31.262517][   T36] audit: type=1400 audit(1756458425.380:187): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   31.291460][   T36] audit: type=1400 audit(1756458425.410:188): avc:  denied  { mounton } for  pid=492 comm="syz.3.44" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   31.421060][  T508] SELinux:  Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped).
[   31.607947][   T63] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.767597][   T63] usb 2-1: Using ep0 maxpacket: 32
[   31.773913][   T63] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   31.782129][   T63] usb 2-1: config 0 has no interface number 0
[   31.790128][   T63] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   31.799241][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.807257][   T63] usb 2-1: Product: syz
[   31.811493][   T63] usb 2-1: Manufacturer: syz
[   31.816104][   T63] usb 2-1: SerialNumber: syz
[   31.821452][   T63] usb 2-1: config 0 descriptor??
[   31.827263][   T63] smsc95xx v2.0.0
[   32.292111][  T525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.374371][  T527] rust_binder: Error while translating object.
[   32.374405][  T527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.380757][  T527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22
[   32.633837][  T496] =======================================================
[   32.633837][  T496] WARNING: The mand mount option has been deprecated and
[   32.633837][  T496]          and is ignored by this kernel. Remove the mand
[   32.633837][  T496]          option from the mount to silence this warning.
[   32.633837][  T496] =======================================================
[   32.678132][  T496] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   33.158591][  T478] usb 3-1: USB disconnect, device number 2
[   33.196352][   T63] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   33.222504][   T63] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   33.229294][  T533] netlink: 'syz.1.58': attribute type 16 has an invalid length.
[   33.237621][   T63] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   33.252202][   T63] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   33.261223][  T533] netlink: 'syz.1.58': attribute type 3 has an invalid length.
[   33.262106][   T63] usb 2-1: USB disconnect, device number 3
[   33.280507][  T533] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.58'.
[   33.799914][  T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57
[   34.309278][  T551] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[   34.327920][  T551] rust_binder: Error in use_page_slow: ESRCH
[   34.327944][  T551] rust_binder: use_range failure ESRCH
[   34.333962][  T551] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   34.339591][  T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   34.347610][  T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:18
[   34.434051][  T553] Zero length message leads to an empty skb
[   34.957633][   T63] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   35.107621][   T63] usb 2-1: Using ep0 maxpacket: 16
[   35.114815][   T63] usb 2-1: config 1 interface 0 has no altsetting 0
[   35.123459][   T63] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.40
[   35.132827][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.141059][   T63] usb 2-1: Product: syz
[   35.145317][   T63] usb 2-1: Manufacturer: syz
[   35.151393][   T63] usb 2-1: SerialNumber: syz
[   35.207616][  T478] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   35.368750][  T478] usb 4-1: config 9 has an invalid interface number: 81 but max is 0
[   35.380177][  T478] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[   35.390776][  T478] usb 4-1: config 9 has no interface number 0
[   35.397175][  T478] usb 4-1: config 9 interface 81 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   35.417992][   T63] usbhid 2-1:1.0: can't add hid device: -71
[   35.424003][   T63] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   35.444425][  T574] overlayfs: failed to resolve './file1': -2
[   35.444919][  T478] usb 4-1: config 9 interface 81 has no altsetting 0
[   35.466601][   T63] usb 2-1: USB disconnect, device number 4
[   35.478663][  T478] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4
[   35.493303][  T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.501628][  T478] usb 4-1: Product: syz
[   35.507769][  T478] usb 4-1: Manufacturer: syz
[   35.512425][  T478] usb 4-1: SerialNumber: syz
[   35.594657][  T588] netlink: 'syz.0.77': attribute type 16 has an invalid length.
[   35.602472][  T588] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.77'.
[   35.632908][  T591] binder: Unknown parameter 'defcontext01777777777777777777777'
[   35.641340][  T591] rust_binder: Write failure EFAULT in pid:41
[   35.669133][  T593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.77'.
[   35.684433][  T593] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   35.691846][  T593] rust_binder: Write failure EINVAL in pid:32
[   35.732026][  T478] usbserial_generic 4-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   35.749531][  T478] usbserial_generic 4-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   35.760585][  T478] usbserial_generic 4-1:9.81: device has no bulk endpoints
[   35.774986][  T478] usb 4-1: USB disconnect, device number 3
[   35.797800][  T599] binder: Unknown parameter ''
[   35.797807][  T598] binder: Unknown parameter ''
[   35.952785][  T343] rust_binder: 600: removing orphan mapping 0:24
[   35.983787][  T607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'.
[   36.005587][  T609] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   36.005606][  T609] rust_binder: Read failure Err(EFAULT) in pid:58
[   36.014578][  T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58
[   36.032713][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   36.032742][   T36] audit: type=1400 audit(1756458430.150:217): avc:  denied  { write } for  pid=610 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   36.074608][   T36] audit: type=1400 audit(1756458430.170:218): avc:  denied  { map } for  pid=615 comm="syz.1.86" path="socket:[5903]" dev="sockfs" ino=5903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   36.252029][  T622] rust_binder: Error while translating object.
[   36.252069][  T622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   36.258376][  T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82
[   36.367636][  T343] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   36.517679][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   36.527644][  T343] usb 2-1: Using ep0 maxpacket: 32
[   36.533835][  T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.544758][  T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.554660][  T343] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   36.561415][  T628] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   36.563992][  T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.579300][  T343] usb 2-1: config 0 descriptor??
[   36.587882][  T478] rust_binder: 625: removing orphan mapping 0:24
[   36.594422][  T478] rust_binder: 625: removing orphan mapping 24:96
[   36.668732][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   36.671232][  T631] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   36.680875][   T36] audit: type=1326 audit(1756458430.810:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=630 comm="syz.0.92" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafdf58ebe9 code=0x0
[   36.709866][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   36.727739][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   36.737980][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   36.751370][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   36.760479][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.769225][   T10] usb 4-1: config 0 descriptor??
[   37.186772][   T36] audit: type=1400 audit(1756458431.300:220): avc:  denied  { setopt } for  pid=619 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   37.527304][   T36] audit: type=1400 audit(1756458431.640:221): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=456 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   37.549256][   T36] audit: type=1400 audit(1756458431.640:222): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=456 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   37.572123][   T36] audit: type=1400 audit(1756458431.640:223): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=456 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[   37.677191][  T343] usbhid 2-1:0.0: can't add hid device: -71
[   37.683257][  T343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   37.692260][   T10] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[   37.701024][  T343] usb 2-1: USB disconnect, device number 5
[   37.710567][   T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   37.723960][   T10] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   37.726764][  T650] input: syz0 as /devices/virtual/input/input7
[   37.752116][  T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.778571][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[   37.786593][   T12] Bluetooth: hci1: Frame reassembly failed (-84)
[   37.796414][  T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.811835][   T36] audit: type=1400 audit(1756458431.930:224): avc:  denied  { getopt } for  pid=660 comm="syz.0.100" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.891630][  T343] usb 4-1: USB disconnect, device number 4
[   38.227599][   T46] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   38.334482][  T671] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.378617][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   38.396105][   T46] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[   38.405362][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.416813][   T36] audit: type=1400 audit(1756458432.540:225): avc:  denied  { read write } for  pid=672 comm="syz.3.105" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   38.427776][   T46] usb 3-1: config 0 descriptor??
[   38.441098][   T36] audit: type=1400 audit(1756458432.540:226): avc:  denied  { open } for  pid=672 comm="syz.3.105" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   38.577599][  T478] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   38.728619][  T478] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   38.736992][  T478] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   38.745150][  T478] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   38.754308][  T478] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   38.765326][   T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   38.772861][  T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   38.782702][  T478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   38.797182][  T478] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   38.806291][  T478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.814422][  T478] usb 1-1: Product: syz
[   38.818622][  T478] usb 1-1: Manufacturer: syz
[   38.823239][  T478] usb 1-1: SerialNumber: syz
[   38.828851][  T478] usb 1-1: config 0 descriptor??
[   38.834581][  T478] hub 1-1:0.0: bad descriptor, ignoring hub
[   38.840562][  T478] hub 1-1:0.0: probe with driver hub failed with error -5
[   38.852382][   T46] uclogic 0003:5543:0522.0004: No inputs registered, leaving
[   38.860523][   T46] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0
[   38.937628][   T63] usb 4-1: Using ep0 maxpacket: 32
[   38.944304][   T63] usb 4-1: unable to get BOS descriptor or descriptor too short
[   38.952985][   T63] usb 4-1: config 98 has an invalid interface number: 248 but max is 1
[   38.961321][   T63] usb 4-1: config 98 has an invalid interface number: 174 but max is 1
[   38.969625][   T63] usb 4-1: config 98 has no interface number 0
[   38.975799][   T63] usb 4-1: config 98 has no interface number 1
[   38.982008][   T63] usb 4-1: config 98 interface 174 altsetting 255 endpoint 0x6 has an invalid bInterval 80, changing to 10
[   38.993445][   T63] usb 4-1: config 98 interface 174 altsetting 255 endpoint 0x2 has invalid wMaxPacketSize 0
[   39.003579][   T63] usb 4-1: config 98 interface 248 has no altsetting 0
[   39.010477][   T63] usb 4-1: config 98 interface 174 has no altsetting 0
[   39.018761][   T63] usb 4-1: New USB device found, idVendor=04e2, idProduct=1411, bcdDevice=4a.71
[   39.027896][   T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.035989][   T63] usb 4-1: Product: syz
[   39.036503][  T671] rust_binder: Read failure Err(EAGAIN) in pid:70
[   39.040360][   T63] usb 4-1: Manufacturer: syz
[   39.052235][   T63] usb 4-1: SerialNumber: syz
[   39.056934][  T667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.066062][  T667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.069149][  T671] rust_binder: Error in use_page_slow: ESRCH
[   39.073811][  T671] rust_binder: use_range failure ESRCH
[   39.079480][  T667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.082314][  T671] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[   39.087028][  T667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.094567][  T671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   39.109364][  T671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:70
[   39.109952][  T478] usb 3-1: USB disconnect, device number 3
[   39.257713][  T343] usb 1-1: USB disconnect, device number 3
[   39.300099][   T63] usb 4-1: USB disconnect, device number 5
[   39.369325][  T683] 9pnet_fd: Insufficient options for proto=fd
[   39.376280][  T683] process 'syz.2.107' launched './file0' with NULL argv: empty string added
[   39.607805][  T688] rust_binder: Read failure Err(EFAULT) in pid:82
[   39.671503][  T696] tmpfs: Too few inodes for current use
[   39.787610][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   39.787631][  T656] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   39.787696][  T656] Bluetooth: hci0: command 0x1003 tx timeout
[   39.845812][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.845843][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.860677][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.860703][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.867261][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.874123][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.880708][  T706] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   39.887196][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.895338][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.901884][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.908425][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.914943][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.921486][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.928013][   T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.942023][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.942051][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.948583][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.955222][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.961801][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.968516][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.975006][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.981532][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.988030][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.994554][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.001064][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.007578][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.014022][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.020501][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.026956][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.034089][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.040801][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.047267][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.053992][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.060540][  T705] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.080172][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.094725][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.103320][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.111461][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.120831][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.127602][   T63] usb 1-1: Using ep0 maxpacket: 16
[   40.128806][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.135470][   T63] usb 1-1: config 7 has an invalid descriptor of length 97, skipping remainder of the config
[   40.142395][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.152881][   T63] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 97, changing to 10
[   40.160359][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.160970][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.171922][   T63] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[   40.179909][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.188176][   T63] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   40.199160][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.207669][   T63] usb 1-1: config 7 interface 0 has no altsetting 0
[   40.226646][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.228454][   T63] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   40.235743][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.253642][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.266925][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.286760][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.295055][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.304249][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.312271][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.320969][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.328926][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.337843][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.345836][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.354334][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.362332][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.371879][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.379961][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.390504][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.392404][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.398747][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.403380][  T724] rust_binder: Error while translating object.
[   40.406104][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.413807][  T724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   40.420095][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.427958][  T724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:110
[   40.437280][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.443962][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.453085][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.461335][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.467736][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.475858][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.483349][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.490663][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.497000][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.504962][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.514803][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.519953][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.526392][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.534459][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.541454][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.549261][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.555616][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.563563][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.570235][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.578447][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.584853][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.592741][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.599873][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.607662][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.614055][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.621929][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.628633][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.636736][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.643148][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.651161][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.658409][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.666163][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.672659][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.672811][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.672850][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.673359][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.682223][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.714570][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.730279][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.735811][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.736839][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.747061][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.749614][   T63] hid (null): unknown global tag 0xa5
[   40.756999][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.763893][   T63] hid (null): invalid report_size 29797
[   40.768810][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.776149][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.780814][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.793095][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.797917][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.804596][   T63] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0005/input/input8
[   40.817271][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.827953][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.828934][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.834539][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.843098][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.853287][   T63] kye 0003:0458:5010.0005: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[   40.874510][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.875977][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.876935][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   40.897948][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.904032][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.906051][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   40.922765][  T718] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   40.936661][  T718] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   41.011511][  T343] usb 1-1: USB disconnect, device number 4
[   41.075620][   T36] kauditd_printk_skb: 19 callbacks suppressed
[   41.075644][   T36] audit: type=1400 audit(1756458435.190:246): avc:  denied  { ioctl } for  pid=736 comm="syz.2.124" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   41.118720][  T749] 9pnet_fd: Insufficient options for proto=fd
[   41.205787][   T36] audit: type=1400 audit(1756458435.320:247): avc:  denied  { getopt } for  pid=752 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   41.239931][   T36] audit: type=1400 audit(1756458435.360:248): avc:  denied  { bind } for  pid=761 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.259188][   T36] audit: type=1400 audit(1756458435.360:249): avc:  denied  { listen } for  pid=761 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.287605][  T478] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   41.297973][   T36] audit: type=1400 audit(1756458435.410:250): avc:  denied  { unlink } for  pid=764 comm="syz.3.132" name="#5" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   41.303438][  T762] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438)
[   41.320800][   T36] audit: type=1400 audit(1756458435.410:251): avc:  denied  { mount } for  pid=764 comm="syz.3.132" name="/" dev="overlay" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   41.320919][   T36] audit: type=1400 audit(1756458435.420:252): avc:  denied  { accept } for  pid=761 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   41.374861][  T762] rust_binder: Error while translating object.
[   41.374903][  T762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.381203][  T762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   41.467595][  T478] usb 2-1: Using ep0 maxpacket: 8
[   41.483085][  T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   41.493264][  T478] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[   41.504263][  T478] usb 2-1: config 0 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   41.517526][  T478] usb 2-1: config 0 interface 0 has no altsetting 0
[   41.524169][  T478] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[   41.533485][  T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.542177][  T478] usb 2-1: config 0 descriptor??
[   41.657624][   T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   41.818676][   T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.828938][   T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.838707][   T63] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.847848][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.855873][   T63] usb 3-1: SerialNumber: syz
[   42.010241][   T36] audit: type=1400 audit(1756458436.130:253): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   42.030508][   T36] audit: type=1400 audit(1756458436.130:254): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.065643][   T63] usb 3-1: 0:2 : does not exist
[   42.080258][   T63] usb 3-1: USB disconnect, device number 4
[   42.092738][   T36] audit: type=1400 audit(1756458436.210:255): avc:  denied  { ioctl } for  pid=779 comm="syz.3.136" path="uts:[4026532545]" dev="nsfs" ino=4026532545 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   42.095812][  T780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'.
[   42.129037][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.359831][  T783] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   42.537604][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   42.590192][  T799] input: syz1 as /devices/virtual/input/input9
[   42.607652][  T801] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.687592][   T10] usb 1-1: Using ep0 maxpacket: 16
[   42.701793][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.717461][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.727686][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   42.736959][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.746620][   T10] usb 1-1: config 0 descriptor??
[   43.031608][  T817] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   43.165233][   T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0006/input/input10
[   43.180275][   T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0006/input/input11
[   43.219914][   T10] kye 0003:0458:5012.0006: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[   44.065345][  T478] usb 2-1: string descriptor 0 read error: -71
[   44.087761][  T478] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   44.117332][  T478] usb 2-1: USB disconnect, device number 6
[   44.294679][  T840] rust_binder: Error in use_page_slow: ESRCH
[   44.294711][  T840] rust_binder: use_range failure ESRCH
[   44.307641][    C0] kye 0003:0458:5012.0006: usb_submit_urb(ctrl) failed: -1
[   44.312321][  T840] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[   44.335206][  T840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   44.345424][  T840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:171
[   44.673289][  T849] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.689631][  T849] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.696976][  T849] bridge0: entered allmulticast mode
[   44.751584][  T855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=855 comm=syz.1.162
[   44.857766][  T861] binder: Bad value for 'max'
[   44.976201][  T868] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.990868][  T870] rust_binder: 113: no such ref 0
[   45.058757][  T871] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227)
[   45.058783][  T871] rust_binder: Error while translating object.
[   45.088110][   T46] usb 1-1: USB disconnect, device number 5
[   45.097643][  T871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.100157][  T871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177
[   45.103938][  T874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.497665][   T46] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   45.540135][  T477] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   45.580686][  T890] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   45.597597][  T890] rust_binder: Write failure EINVAL in pid:115
[   45.658142][  T895] rust_binder: Write failure EFAULT in pid:120
[   45.679343][   T46] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[   45.707591][   T46] usb 1-1: config 0 has no interface number 0
[   45.713830][   T46] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[   45.732278][  T477] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.748369][  T477] usb 3-1: config 176 has an invalid interface number: 218 but max is 0
[   45.749131][   T46] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   45.767437][  T477] usb 3-1: config 176 has no interface number 0
[   45.787667][  T477] usb 3-1: config 176 interface 218 has no altsetting 0
[   45.790527][   T46] usb 1-1: config 0 interface 255 has no altsetting 0
[   45.812620][   T46] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   45.822852][  T477] usb 3-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00
[   45.831928][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.833156][   T46] usb 1-1: config 0 descriptor??
[   45.857601][  T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.865695][  T477] usb 3-1: Product: syz
[   45.875797][  T477] usb 3-1: Manufacturer: syz
[   45.884857][  T477] usb 3-1: SerialNumber: syz
[   45.909563][  T899] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   45.922763][  T899] overlay: filesystem on ./bus not supported as upperdir
[   46.066572][   T46] asix 1-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   46.076744][   T46] asix 1-1:0.255 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[   46.087463][   T46] asix 1-1:0.255: probe with driver asix failed with error -32
[   46.109416][  T477] ipheth 3-1:176.218: Unable to find alternate settings interface
[   46.131099][  T477] usb 3-1: USB disconnect, device number 5
[   46.443417][  T916] rust_binder: 914 RLIMIT_NICE not set
[   46.450140][  T477] rust_binder: 913: removing orphan mapping 0:24
[   46.487510][   T36] kauditd_printk_skb: 55 callbacks suppressed
[   46.499359][   T36] audit: type=1400 audit(1756458440.600:311): avc:  denied  { ioctl } for  pid=922 comm="syz.1.183" path="socket:[17720]" dev="sockfs" ino=17720 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.523939][   T36] audit: type=1400 audit(1756458440.610:312): avc:  denied  { getopt } for  pid=922 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.543483][   T36] audit: type=1400 audit(1756458440.610:313): avc:  denied  { lock } for  pid=922 comm="syz.1.183" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   46.747592][   T46] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   46.771928][  T926] usb usb8: usbfs: process 926 (syz.2.184) did not claim interface 63 before use
[   46.781838][   T36] audit: type=1400 audit(1756458440.910:314): avc:  denied  { append } for  pid=925 comm="syz.2.184" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.914232][   T46] usb 2-1: not running at top speed; connect to a high speed hub
[   46.927206][   T46] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0
[   46.937943][   T46] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   46.951072][   T46] usb 2-1: config 1 interface 0 has no altsetting 0
[   46.959156][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   46.968924][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.976947][   T46] usb 2-1: Product: à°Š
[   46.981316][   T46] usb 2-1: Manufacturer: �
[   46.997386][   T63] usb 1-1: USB disconnect, device number 6
[   47.010770][   T46] usb 2-1: SerialNumber: 춨�ీ亴�盭֯�࠾嘛銺㣽簕瓅淣䗜��샜䰪绩ವ梙ꪓ쎒泯�삷慦䖊뻇�뒩藱줡쬓粵��ㅚ�駖涿繛ꀄ��Ⳅ髇䌊陞岰房௥醄攅劦῎䳾ᓓ厡ℓ鹷鰥鯖쵭贙煉㑘ி堬㇩䨽귺�牔८㎘댗멛胵��㒤瓹ᯱﺨ鷗ꫢ㭊ⵚꗊ䔈쒣㎤픱˫�슊꽚��驳軣⑜�
[   47.227861][  T939] netlink: 'syz.0.188': attribute type 4 has an invalid length.
[   47.237910][  T940] netlink: 'syz.0.188': attribute type 4 has an invalid length.
[   47.288828][  T945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[   47.460633][   T46] usb 2-1: USB disconnect, device number 7
[   47.928972][  T962] capability: warning: `syz.2.195' uses 32-bit capabilities (legacy support in use)
[   48.029349][  T980] cgroup2: Unknown parameter 'freezer'
[   48.237624][  T477] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   48.267668][  T343] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   48.317605][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   48.387660][  T477] usb 2-1: Using ep0 maxpacket: 32
[   48.394681][  T477] usb 2-1: unable to get BOS descriptor or descriptor too short
[   48.402754][  T477] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   48.411992][  T477] usb 2-1: unable to read config index 0 descriptor/start: -61
[   48.419805][  T477] usb 2-1: can't read configurations, error -61
[   48.429079][  T343] usb 1-1: unable to get BOS descriptor or descriptor too short
[   48.437325][  T343] usb 1-1: not running at top speed; connect to a high speed hub
[   48.446094][  T343] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[   48.454530][  T343] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   48.464996][  T343] usb 1-1: config 4 has no interface number 0
[   48.474020][  T343] usb 1-1: string descriptor 0 read error: -22
[   48.480521][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   48.490150][  T343] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   48.499295][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.507839][  T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.516333][   T10] usb 3-1: Product: syz
[   48.520912][   T10] usb 3-1: Manufacturer: syz
[   48.525590][   T10] usb 3-1: SerialNumber: syz
[   48.539718][  T343] usb 1-1: Found UVC 0.00 device <unnamed> (04f2:b746)
[   48.553103][  T343] usb 1-1: No valid video chain found.
[   48.558799][  T477] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   48.717587][  T477] usb 2-1: Using ep0 maxpacket: 32
[   48.724254][  T477] usb 2-1: unable to get BOS descriptor or descriptor too short
[   48.732050][  T477] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   48.740951][  T477] usb 2-1: unable to read config index 0 descriptor/start: -61
[   48.748914][  T477] usb 2-1: can't read configurations, error -61
[   48.752277][  T978] rust_binder: Error while translating object.
[   48.755393][  T477] usb usb2-port1: attempt power cycle
[   48.761817][  T978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   48.767045][  T978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220
[   48.779763][   T10] cdc_ncm 3-1:1.0: bind() failure
[   48.795230][   T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   48.802850][   T10] cdc_ncm 3-1:1.1: bind() failure
[   48.812137][   T10] usb 3-1: USB disconnect, device number 6
[   48.822507][   T36] audit: type=1400 audit(1756458442.940:315): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   48.847284][   T36] audit: type=1400 audit(1756458442.960:316): avc:  denied  { ioctl } for  pid=985 comm="syz.3.143" path="socket:[23056]" dev="sockfs" ino=23056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   48.894220][  T986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   48.943603][   T36] audit: type=1400 audit(1756458443.060:317): avc:  denied  { wake_alarm } for  pid=988 comm="syz.3.201" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   48.985452][  T993] exFAT-fs (rnullb0): invalid boot record signature
[   48.992230][  T993] exFAT-fs (rnullb0): failed to read boot sector
[   48.998647][  T993] exFAT-fs (rnullb0): failed to recognize exfat type
[   49.023258][  T995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.204'.
[   49.094689][   T36] audit: type=1400 audit(1756458443.210:318): avc:  denied  { lock } for  pid=996 comm="syz.3.205" path="socket:[23142]" dev="sockfs" ino=23142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   49.110001][  T477] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   49.138020][  T477] usb 2-1: Using ep0 maxpacket: 32
[   49.144563][  T477] usb 2-1: unable to get BOS descriptor or descriptor too short
[   49.152346][  T477] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   49.161236][  T477] usb 2-1: unable to read config index 0 descriptor/start: -61
[   49.168889][  T477] usb 2-1: can't read configurations, error -61
[   49.296634][  T999] exFAT-fs (rnullb0): invalid boot record signature
[   49.297871][  T477] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   49.303594][  T999] exFAT-fs (rnullb0): failed to read boot sector
[   49.317403][  T999] exFAT-fs (rnullb0): failed to recognize exfat type
[   49.328006][  T477] usb 2-1: Using ep0 maxpacket: 32
[   49.334722][  T477] usb 2-1: unable to get BOS descriptor or descriptor too short
[   49.342696][  T477] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   49.351434][  T477] usb 2-1: unable to read config index 0 descriptor/start: -61
[   49.359079][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   49.366614][  T477] usb 2-1: can't read configurations, error -61
[   49.373129][  T477] usb usb2-port1: unable to enumerate USB device
[   49.433526][   T36] audit: type=1400 audit(1756458443.550:319): avc:  denied  { bind } for  pid=1000 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.528586][   T10] usb 4-1: Using ep0 maxpacket: 8
[   49.534876][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   49.543253][   T10] usb 4-1: config 179 has no interface number 0
[   49.557584][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   49.569355][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   49.582584][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   49.594126][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   49.604408][   T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   49.618277][   T36] audit: type=1400 audit(1756458443.740:320): avc:  denied  { relabelfrom } for  pid=1010 comm="syz.2.210" name="" dev="pipefs" ino=24863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   49.618744][   T10] usb 4-1: config 179 interface 65 has no altsetting 0
[   49.648324][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   49.657846][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.673734][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12
[   49.679815][ T1015] rust_binder: Error while translating object.
[   49.684882][ T1015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   49.691390][ T1015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:240
[   50.378689][   T10] usb 4-1: USB disconnect, device number 6
[   50.395062][   T10] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   50.463834][ T1024] fuse: Unknown parameter 'fdW0x000000000000000a'
[   50.487873][ T1026] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   50.738808][ T1056] rust_binder: Failed copying remainder into alloc: EFAULT
[   50.738838][ T1056] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   50.746240][ T1056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   50.754691][ T1056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:155
[   50.797816][ T1061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'.
[   50.910914][ T1064] /dev/md0: Can't lookup blockdev
[   50.962224][ T1072] Unsupported ieee802154 address type: 0
[   51.021207][ T1076] rust_binder: got new transaction with bad transaction stack
[   51.021234][ T1076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152
[   51.030056][ T1080] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.040512][ T1080] rust_binder: Error while translating object.
[   51.042329][   T63] usb 1-1: USB disconnect, device number 7
[   51.047132][ T1079] rust_binder: Error while translating object.
[   51.066505][ T1080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   51.073566][ T1079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   51.076099][ T1080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170
[   51.085188][ T1079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170
[   51.107416][ T1083] kernel profiling enabled (shift: 5)
[   51.198749][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.198789][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   51.350375][ T1129] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   51.356561][ T1130] rust_binder: Write failure EFAULT in pid:159
[   51.387802][ T1129] rust_binder: Read failure Err(EFAULT) in pid:159
[   51.495470][ T1140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.503190][ T1140] rust_binder: Error in use_page_slow: ESRCH
[   51.511803][ T1140] rust_binder: use_range failure ESRCH
[   51.518626][ T1140] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[   51.524796][ T1140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   51.539600][ T1140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:132
[   51.549545][ T1140] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   51.566160][ T1140] rust_binder: Write failure EINVAL in pid:132
[   51.584788][ T1151] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.634435][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   51.634455][   T36] audit: type=1400 audit(1756458445.750:326): avc:  denied  { getopt } for  pid=1153 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.666903][ T1155] rust_binder: Write failure EFAULT in pid:140
[   51.927592][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   51.967524][ T1164] veth1: entered allmulticast mode
[   51.976263][ T1164] veth1: left allmulticast mode
[   51.988434][ T1164] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   52.087727][   T10] usb 1-1: device descriptor read/64, error -71
[   52.102799][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270
[   52.325720][   T36] audit: type=1400 audit(1756458446.440:327): avc:  denied  { append } for  pid=1180 comm="syz.2.259" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   52.348580][   T10] usb 1-1: device descriptor read/64, error -71
[   52.507671][  T479] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   52.597602][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   52.657688][  T479] usb 2-1: Using ep0 maxpacket: 16
[   52.663939][  T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.674885][   T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   52.682433][  T479] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[   52.691576][  T479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.700391][  T479] usb 2-1: config 0 descriptor??
[   52.717632][  T343] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   52.727621][   T10] usb 1-1: device descriptor read/64, error -71
[   52.858713][   T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   52.868824][  T343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.868855][  T343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   52.869661][  T343] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   52.879001][   T46] usb 4-1: config 0 has no interfaces?
[   52.879036][   T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   52.888368][  T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   52.897203][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.902842][  T343] usb 3-1: SerialNumber: syz
[   52.913331][   T46] usb 4-1: config 0 descriptor??
[   52.987796][   T10] usb 1-1: device descriptor read/64, error -71
[   53.097729][   T10] usb usb1-port1: attempt power cycle
[   53.114093][  T479] greenasia 0003:0E8F:0012.0007: unknown main item tag 0xd
[   53.121522][  T479] greenasia 0003:0E8F:0012.0007: item fetching failed at offset 4/5
[   53.129788][  T479] greenasia 0003:0E8F:0012.0007: parse failed
[   53.136007][  T479] greenasia 0003:0E8F:0012.0007: probe with driver greenasia failed with error -22
[   53.147336][ T1188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.155870][ T1188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.164692][   T36] audit: type=1400 audit(1756458447.280:328): avc:  denied  { mounton } for  pid=1187 comm="syz.3.261" path="/62/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   53.168770][  T329] usb 4-1: USB disconnect, device number 7
[   53.317603][   T36] audit: type=1400 audit(1756458447.430:329): avc:  denied  { setopt } for  pid=1175 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   53.318469][  T479] usb 2-1: USB disconnect, device number 12
[   53.457620][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   53.478580][   T10] usb 1-1: device descriptor read/8, error -71
[   53.608726][   T10] usb 1-1: device descriptor read/8, error -71
[   53.807601][  T329] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   53.847631][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.880307][   T10] usb 1-1: device descriptor read/8, error -71
[   53.896076][   T36] audit: type=1400 audit(1756458448.010:330): avc:  denied  { create } for  pid=1197 comm="syz.1.264" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.918516][   T36] audit: type=1400 audit(1756458448.040:331): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file2" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.958569][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.969590][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.979457][  T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   53.992778][  T329] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.00
[   54.001894][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.010968][   T10] usb 1-1: device descriptor read/8, error -71
[   54.017450][  T329] usb 4-1: config 0 descriptor??
[   54.117704][   T10] usb usb1-port1: unable to enumerate USB device
[   54.226040][   T46] usb 4-1: USB disconnect, device number 8
[   54.738351][   T36] audit: type=1400 audit(1756458448.860:332): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   54.766482][ T1212] capability: warning: `syz.3.267' uses deprecated v2 capabilities in a way that may be insecure
[   54.814233][   T36] audit: type=1326 audit(1756458448.930:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.1.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c50b8ebe9 code=0x0
[   54.865229][   T36] audit: type=1400 audit(1756458448.980:334): avc:  denied  { mount } for  pid=1213 comm="syz.1.268" name="/" dev="configfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   54.919457][   T36] audit: type=1400 audit(1756458449.040:335): avc:  denied  { bind } for  pid=1221 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   54.934908][ T1222] IPv4: Oversized IP packet from 127.202.26.0
[   55.067869][ T1237] rust_binder: 195: no such ref 3
[   55.336772][  T343] usb 3-1: 0:2 : does not exist
[   55.341800][  T343] usb 3-1: unit 5: unexpected type 0x0e
[   55.350211][  T343] usb 3-1: USB disconnect, device number 7
[   55.363021][ T1247] netlink: 'syz.2.278': attribute type 4 has an invalid length.
[   55.372925][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   55.391412][ T1247] netlink: 'syz.2.278': attribute type 4 has an invalid length.
[   55.518118][ T1261] rust_binder: Error while translating object.
[   55.518154][ T1261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   55.524825][ T1261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296
[   55.551745][ T1264] binder: Bad value for 'stats'
[   55.790732][ T1283] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0
[   55.790774][ T1283] rust_binder: Error while translating object.
[   55.799716][ T1283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.806032][ T1283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213
[   55.840521][ T1285] input: syz1 as /devices/virtual/input/input13
[   56.047658][   T63] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[   56.167592][  T479] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   56.177693][   T63] usb 2-1: device descriptor read/64, error -71
[   56.267669][  T343] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   56.318696][  T479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.328985][  T479] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   56.338685][  T479] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   56.347789][  T479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   56.355795][  T479] usb 3-1: SerialNumber: syz
[   56.407621][  T343] usb 1-1: device descriptor read/64, error -71
[   56.427920][   T63] usb 2-1: device descriptor read/64, error -71
[   56.570988][  T479] usb 3-1: 0:2 : does not exist
[   56.576715][  T479] usb 3-1: unit 5 not found!
[   56.583339][ T1308] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   56.583362][ T1308] rust_binder: Read failure Err(EFAULT) in pid:317
[   56.584955][  T479] usb 3-1: USB disconnect, device number 8
[   56.605454][ T1309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:317
[   56.647642][  T343] usb 1-1: device descriptor read/64, error -71
[   56.668040][   T63] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[   56.720736][ T1317] netlink: 'syz.2.300': attribute type 46 has an invalid length.
[   56.797605][   T63] usb 2-1: device descriptor read/64, error -71
[   56.813556][ T1325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332
[   56.813723][ T1324] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   56.854242][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   56.854261][   T36] audit: type=1400 audit(1756458450.970:340): avc:  denied  { setopt } for  pid=1332 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.887617][   T36] audit: type=1400 audit(1756458450.970:341): avc:  denied  { map } for  pid=1332 comm="syz.2.304" path="socket:[26915]" dev="sockfs" ino=26915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.910689][   T36] audit: type=1400 audit(1756458450.970:342): avc:  denied  { read accept } for  pid=1332 comm="syz.2.304" path="socket:[26915]" dev="sockfs" ino=26915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.934452][  T343] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   57.067605][   T63] usb 2-1: device descriptor read/64, error -71
[   57.067673][  T343] usb 1-1: device descriptor read/64, error -71
[   57.177722][   T63] usb usb2-port1: attempt power cycle
[   57.317641][  T343] usb 1-1: device descriptor read/64, error -71
[   57.413110][ T1341] netlink: 'syz.3.307': attribute type 4 has an invalid length.
[   57.420892][ T1341] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.307'.
[   57.427778][  T343] usb usb1-port1: attempt power cycle
[   57.431803][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   57.435360][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:209
[   57.446126][ T1341] rust_binder: Error while translating object.
[   57.455389][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   57.461732][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209
[   57.527606][   T63] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[   57.578584][   T63] usb 2-1: device descriptor read/8, error -71
[   57.717057][   T63] usb 2-1: device descriptor read/8, error -71
[   57.767597][  T343] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   57.798609][  T343] usb 1-1: device descriptor read/8, error -71
[   57.807616][   T31] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[   57.928587][  T343] usb 1-1: device descriptor read/8, error -71
[   57.977623][   T63] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[   57.986867][   T31] usb 3-1: Invalid ep0 maxpacket: 32
[   58.008692][   T63] usb 2-1: device descriptor read/8, error -71
[   58.127594][   T31] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[   58.138847][   T63] usb 2-1: device descriptor read/8, error -71
[   58.167587][  T343] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   58.188675][  T343] usb 1-1: device descriptor read/8, error -71
[   58.247740][   T63] usb usb2-port1: unable to enumerate USB device
[   58.287592][   T31] usb 3-1: Invalid ep0 maxpacket: 32
[   58.293167][   T31] usb usb3-port1: attempt power cycle
[   58.318664][  T343] usb 1-1: device descriptor read/8, error -71
[   58.437602][  T343] usb usb1-port1: unable to enumerate USB device
[   58.446614][   T36] audit: type=1400 audit(1756458452.560:343): avc:  denied  { write } for  pid=1348 comm="syz.3.310" name="file0" dev="tmpfs" ino=4100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   58.469303][   T36] audit: type=1400 audit(1756458452.560:344): avc:  denied  { open } for  pid=1348 comm="syz.3.310" path="/70/file0" dev="tmpfs" ino=4100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   58.491993][   T36] audit: type=1400 audit(1756458452.560:345): avc:  denied  { ioctl } for  pid=1348 comm="syz.3.310" path="/70/file0" dev="tmpfs" ino=4100 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   58.574885][ T1349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1349 comm=syz.3.310
[   58.590065][   T46] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[   58.597508][   T46] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[   58.605013][   T46] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0
[   58.620560][   T46] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   58.645895][ T1351] fido_id[1351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   58.659557][   T31] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[   58.688002][   T31] usb 3-1: Invalid ep0 maxpacket: 32
[   58.743877][ T1360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225
[   58.808692][   T36] audit: type=1400 audit(1756458452.930:346): avc:  denied  { create } for  pid=1364 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   58.837346][   T31] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[   58.857928][   T31] usb 3-1: Invalid ep0 maxpacket: 32
[   58.863370][   T31] usb usb3-port1: unable to enumerate USB device
[   58.954713][ T1374] /dev/rnullb0: Can't open blockdev
[   58.960448][ T1374] /dev/rnullb0: Can't open blockdev
[   58.978389][ T1377] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   59.021671][ T1379] SELinux: security_context_str_to_sid (/file0) failed with errno=-22
[   59.440632][  T343] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   59.452874][ T1398] netlink: 'syz.3.326': attribute type 4 has an invalid length.
[   59.537603][   T31] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[   59.587592][  T343] usb 1-1: device descriptor read/64, error -71
[   59.630183][ T1416] rust_binder: Write failure EFAULT in pid:248
[   59.698964][   T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   59.714358][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.723488][   T31] usb 2-1: config 0 descriptor??
[   59.827605][  T343] usb 1-1: device descriptor read/64, error -71
[   60.067663][  T343] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   60.197604][  T343] usb 1-1: device descriptor read/64, error -71
[   60.437602][  T343] usb 1-1: device descriptor read/64, error -71
[   60.447658][  T983] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   60.547731][  T343] usb usb1-port1: attempt power cycle
[   60.598637][  T983] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   60.609135][  T983] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[   60.619062][  T983] usb 4-1: config 220 interface 0 has no altsetting 0
[   60.628492][  T983] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   60.641229][  T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.649582][  T983] usb 4-1: Product: syz
[   60.653836][  T983] usb 4-1: Manufacturer: syz
[   60.658748][  T983] usb 4-1: SerialNumber: syz
[   60.869453][  T983] usb 4-1: Found UVC 0.00 device syz (8086:0b07)
[   60.876984][  T983] usb 4-1: No valid video chain found.
[   60.885823][  T983] usb 4-1: USB disconnect, device number 11
[   60.895933][  T343] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   60.928735][  T343] usb 1-1: device descriptor read/8, error -71
[   60.977603][  T329] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   61.058691][  T343] usb 1-1: device descriptor read/8, error -71
[   61.127607][  T329] usb 3-1: Using ep0 maxpacket: 32
[   61.134172][  T329] usb 3-1: unable to get BOS descriptor or descriptor too short
[   61.142692][  T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.153383][  T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   61.163908][  T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   61.173112][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.181360][  T329] usb 3-1: Product: syz
[   61.185557][  T329] usb 3-1: Manufacturer: syz
[   61.190239][  T329] usb 3-1: SerialNumber: syz
[   61.307615][  T343] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   61.328677][  T343] usb 1-1: device descriptor read/8, error -71
[   61.398878][ T1433] overlayfs: failed to resolve './file0': -2
[   61.408053][  T329] usb 3-1: skipping empty audio interface (v1)
[   61.423962][  T329] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   61.441633][  T329] usb 3-1: USB disconnect, device number 13
[   61.456237][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   61.480187][  T343] usb 1-1: device descriptor read/8, error -71
[   61.587769][  T343] usb usb1-port1: unable to enumerate USB device
[   61.693513][ T1459] input: syz1 as /devices/virtual/input/input15
[   61.702157][   T36] audit: type=1400 audit(1756458455.820:347): avc:  denied  { create } for  pid=1458 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   61.721878][   T36] audit: type=1400 audit(1756458455.820:348): avc:  denied  { getopt } for  pid=1458 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.977584][  T478] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[   62.097314][ T1469] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.117572][  T478] usb 4-1: device descriptor read/64, error -71
[   62.354409][   T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   62.377614][  T478] usb 4-1: device descriptor read/64, error -71
[   62.389160][   T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   62.405467][   T31] asix 2-1:0.0: probe with driver asix failed with error -71
[   62.406053][ T1492] random: crng reseeded on system resumption
[   62.413094][   T36] audit: type=1400 audit(1756458456.520:349): avc:  denied  { write } for  pid=1490 comm="syz.1.357" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   62.413129][   T36] audit: type=1400 audit(1756458456.520:350): avc:  denied  { open } for  pid=1490 comm="syz.1.357" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   62.417442][   T31] usb 2-1: USB disconnect, device number 17
[   62.487611][  T343] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   62.487696][   T36] audit: type=1400 audit(1756458456.610:351): avc:  denied  { getopt } for  pid=1490 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   62.638695][  T343] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   62.651683][  T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   62.657592][  T478] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[   62.662961][  T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   62.681582][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.681624][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.681646][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.694449][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.696910][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.700933][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.713413][  T343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   62.732578][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.732614][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.732641][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.739139][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.751413][  T343] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.762980][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.766828][  T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.774537][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.781620][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.793139][  T343] usb 1-1: config 0 descriptor??
[   62.794608][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.799677][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.814194][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.820789][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.823301][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.827053][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.833363][  T478] usb 4-1: device descriptor read/64, error -71
[   62.839982][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.852141][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.858676][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.861251][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.864993][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.877784][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.884064][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.887634][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.890773][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.902949][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.909474][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.915788][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.916903][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.922567][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.934743][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.937646][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.941317][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.953673][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.957387][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.960241][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.966138][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.972618][ T1496] rust_binder: Write failure EFAULT in pid:250
[   62.978762][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.991400][ T1495] rust_binder: Write failure EFAULT in pid:250
[   62.997735][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.004313][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.010608][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.016977][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.023289][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.026443][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.029613][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.042032][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.048370][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.054755][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.061044][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.067392][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.073954][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.080355][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.086624][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.093985][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.100289][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.106698][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.113026][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.119494][ T1496] rust_binder: Write failure EFAULT in pid:250
[   63.125766][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.132053][  T478] usb 4-1: device descriptor read/64, error -71
[   63.144761][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.144804][ T1495] rust_binder: Write failure EFAULT in pid:250
[   63.170578][   T36] audit: type=1400 audit(1756458457.290:352): avc:  denied  { map } for  pid=1497 comm="syz.1.359" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   63.213534][  T343] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   63.222372][   T36] audit: type=1400 audit(1756458457.340:353): avc:  denied  { ioctl } for  pid=1502 comm="syz.1.360" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   63.242008][  T343] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   63.257787][  T478] usb usb4-port1: attempt power cycle
[   63.457617][  T479] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   63.518664][ T1519] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0
[   63.518685][ T1519] rust_binder: Error while translating object.
[   63.527432][ T1519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.533702][ T1519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385
[   63.587642][  T479] usb 2-1: device descriptor read/64, error -71
[   63.607662][  T478] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[   63.628798][  T478] usb 4-1: device descriptor read/8, error -71
[   63.768688][  T478] usb 4-1: device descriptor read/8, error -71
[   63.837628][  T479] usb 2-1: device descriptor read/64, error -71
[   64.017706][  T478] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[   64.048692][  T478] usb 4-1: device descriptor read/8, error -71
[   64.077638][  T479] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   64.178787][  T478] usb 4-1: device descriptor read/8, error -71
[   64.227612][  T479] usb 2-1: device descriptor read/64, error -71
[   64.287703][  T478] usb usb4-port1: unable to enumerate USB device
[   64.467594][  T479] usb 2-1: device descriptor read/64, error -71
[   64.583309][  T479] usb usb2-port1: attempt power cycle
[   64.592519][   T36] audit: type=1400 audit(1756458458.710:354): avc:  denied  { bind } for  pid=1526 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   64.751342][   T36] audit: type=1400 audit(1756458458.870:355): avc:  denied  { ioctl } for  pid=1532 comm="syz.2.369" path="socket:[28829]" dev="sockfs" ino=28829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   64.795231][ T1539] rust_binder: 285: no such ref 0
[   64.937608][  T479] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   64.962516][  T479] usb 2-1: device descriptor read/8, error -71
[   65.098877][  T479] usb 2-1: device descriptor read/8, error -71
[   65.217622][   T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   65.250686][  T478] usb 1-1: USB disconnect, device number 20
[   65.337613][  T479] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   65.358660][  T479] usb 2-1: device descriptor read/8, error -71
[   65.367718][   T46] usb 4-1: Using ep0 maxpacket: 32
[   65.374800][   T46] usb 4-1: config 0 has an invalid interface number: 72 but max is 0
[   65.383116][   T46] usb 4-1: config 0 has no interface number 0
[   65.389301][   T46] usb 4-1: config 0 interface 72 has no altsetting 0
[   65.397448][   T46] usb 4-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9
[   65.406737][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.414785][   T46] usb 4-1: Product: syz
[   65.419264][   T46] usb 4-1: Manufacturer: syz
[   65.423907][   T46] usb 4-1: SerialNumber: syz
[   65.429300][   T46] usb 4-1: config 0 descriptor??
[   65.492875][  T479] usb 2-1: device descriptor read/8, error -71
[   65.617605][  T479] usb usb2-port1: unable to enumerate USB device
[   65.656931][   T36] audit: type=1400 audit(1756458459.770:356): avc:  denied  { mounton } for  pid=1561 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   65.682052][  T328] bridge_slave_1: left allmulticast mode
[   65.687820][  T328] bridge_slave_1: left promiscuous mode
[   65.693563][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.701478][  T328] bridge_slave_0: left allmulticast mode
[   65.707279][  T328] bridge_slave_0: left promiscuous mode
[   65.713081][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.769102][   T36] audit: type=1400 audit(1756458459.890:357): avc:  denied  { execute_no_trans } for  pid=1568 comm="syz.2.382" path="/130/file1" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   65.810900][ T1574] rust_binder: Write failure EFAULT in pid:420
[   65.826412][ T1577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   65.832870][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423
[   65.863889][  T328] veth1_macvtap: left promiscuous mode
[   65.878731][  T328] veth0_vlan: left promiscuous mode
[   65.930597][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.937880][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.944980][ T1561] bridge_slave_0: entered allmulticast mode
[   65.952235][ T1561] bridge_slave_0: entered promiscuous mode
[   65.958975][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.966065][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.973205][ T1561] bridge_slave_1: entered allmulticast mode
[   65.979716][ T1561] bridge_slave_1: entered promiscuous mode
[   66.041872][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.049006][ T1561] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.056499][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.063734][ T1561] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.087914][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.095374][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.105557][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.112668][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.122223][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.129341][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.160622][ T1561] veth0_vlan: entered promiscuous mode
[   66.173526][ T1561] veth1_macvtap: entered promiscuous mode
[   66.194393][   T36] audit: type=1400 audit(1756458460.310:358): avc:  denied  { mounton } for  pid=1561 comm="syz-executor" path="/root/syzkaller.MAD9Rz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   66.377480][ T1601] netlink: 277 bytes leftover after parsing attributes in process `syz.1.388'.
[   66.394837][ T1601] SELinux:  policydb magic number 0xe does not match expected magic number 0xf97cff8c
[   66.404781][ T1601] SELinux: failed to load policy
[   66.411100][ T1601] __vm_enough_memory: pid: 1601, comm: syz.1.388, bytes: 18014402804453376 not enough memory for the allocation
[   66.425504][ T1601] tmpfs: Unknown parameter '00000000000000000000000'
[   66.666659][ T1622] binder: Bad value for 'defcontext'
[   66.816030][ T1630] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.892691][ T1632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'.
[   67.727593][  T983] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   67.877605][  T983] usb 5-1: Using ep0 maxpacket: 8
[   67.884299][  T983] usb 5-1: unable to get BOS descriptor or descriptor too short
[   67.892870][  T983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.903297][  T983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   67.912266][  T983] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   67.927602][  T983] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   67.936693][  T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.945141][  T983] usb 5-1: Product: syz
[   67.949428][  T983] usb 5-1: Manufacturer: syz
[   67.954095][  T983] usb 5-1: SerialNumber: syz
[   67.968750][ T1644] rust_binder: Read failure Err(EFAULT) in pid:298
[   68.058272][   T46] usb 4-1: MIDIStreaming interface descriptor not found
[   68.093116][   T46] usb 4-1: USB disconnect, device number 16
[   68.246118][  T983] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   68.262014][  T983] cdc_ncm 5-1:1.0: bind() failure
[   68.271441][  T983] usb 5-1: USB disconnect, device number 2
[   68.557600][  T343] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   68.557600][   T46] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[   68.718834][   T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.729121][  T343] usb 2-1: unable to get BOS descriptor or descriptor too short
[   68.729136][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   68.737928][  T343] usb 2-1: config 176 has an invalid interface number: 218 but max is 0
[   68.747829][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   68.756616][  T343] usb 2-1: config 176 has no interface number 0
[   68.766046][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.772750][  T343] usb 2-1: config 176 interface 218 has no altsetting 0
[   68.793858][  T343] usb 2-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00
[   68.797623][   T46] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   68.803380][  T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.820301][  T343] usb 2-1: Product: syz
[   68.823059][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.824488][  T343] usb 2-1: Manufacturer: syz
[   68.838213][  T343] usb 2-1: SerialNumber: syz
[   68.844831][   T46] usb 4-1: config 0 descriptor??
[   68.854802][   T46] usb 4-1: MIDIStreaming interface descriptor not found
[   69.030062][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   69.030081][   T36] audit: type=1400 audit(1756458463.150:361): avc:  denied  { create } for  pid=1680 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   69.063239][  T983] usb 4-1: USB disconnect, device number 17
[   69.072194][   T36] audit: type=1400 audit(1756458463.200:362): avc:  denied  { unmount } for  pid=1561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.072950][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.093010][  T343] ipheth 2-1:176.218: Unable to find alternate settings interface
[   69.113552][  T343] usb 2-1: USB disconnect, device number 22
[   69.171806][  T328] bridge_slave_1: left allmulticast mode
[   69.177721][  T328] bridge_slave_1: left promiscuous mode
[   69.183410][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.191494][  T328] bridge_slave_0: left allmulticast mode
[   69.197193][  T328] bridge_slave_0: left promiscuous mode
[   69.204244][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.340723][  T328] veth1_macvtap: left promiscuous mode
[   69.346275][  T328] veth0_vlan: left promiscuous mode
[   69.411738][ T1694] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.418866][ T1694] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.425935][ T1694] bridge_slave_0: entered allmulticast mode
[   69.432834][ T1694] bridge_slave_0: entered promiscuous mode
[   69.439256][ T1694] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.446406][ T1694] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.453564][ T1694] bridge_slave_1: entered allmulticast mode
[   69.460019][ T1694] bridge_slave_1: entered promiscuous mode
[   69.467381][ T1699] rust_binder: Error while translating object.
[   69.467416][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   69.473747][ T1699] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   69.483211][ T1699] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:445
[   69.538613][ T1694] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.554018][ T1694] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.561365][ T1694] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.568467][ T1694] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.596161][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.606856][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.620562][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.627689][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.628075][  T343] rust_binder: 1697: removing orphan mapping 0:24
[   69.649215][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.656342][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.695401][ T1694] veth0_vlan: entered promiscuous mode
[   69.730424][ T1694] veth1_macvtap: entered promiscuous mode
[   69.803361][   T36] audit: type=1400 audit(1756458463.920:363): avc:  denied  { mount } for  pid=1694 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.989954][ T1724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316
[   70.017849][ T1727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.426'.
[   70.068580][ T1727] rust_binder: Error while translating object.
[   70.068630][ T1727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   70.078622][ T1727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:319
[   70.362028][   T36] audit: type=1400 audit(1756458464.480:364): avc:  denied  { setattr } for  pid=1733 comm="syz.1.429" name="file0" dev="incremental-fs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.409829][ T1734] netlink: 72 bytes leftover after parsing attributes in process `syz.1.429'.
[   70.454750][ T1736] syz.1.430 uses obsolete (PF_INET,SOCK_PACKET)
[   70.487924][  T983] rust_binder: 1711: removing orphan mapping 0:24
[   70.497601][  T983] rust_binder: 0: removing orphan mapping 24:96
[   70.512290][ T1739] fuse: Unknown parameter 'gr*odàkå00000000000000000000'
[   70.609847][   T36] audit: type=1400 audit(1756458464.730:365): avc:  denied  { listen } for  pid=1738 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   70.979723][ T1768] rust_binder: Got transaction with invalid offset.
[   70.979813][ T1768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.986619][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[   71.107748][ T1774] netlink: 124 bytes leftover after parsing attributes in process `syz.5.442'.
[   71.296179][   T36] audit: type=1400 audit(1756458465.410:366): avc:  denied  { associate } for  pid=1791 comm="syz.1.448" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   71.347397][ T1790] tipc: Started in network mode
[   71.375895][ T1790] tipc: Node identity ac14140f, cluster identity 4711
[   71.401085][ T1790] tipc: New replicast peer: 255.255.255.255
[   71.437789][ T1790] tipc: Enabled bearer <udp:syz2>, priority 10
[   71.474087][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'.
[   71.522545][ T1792] tipc: Disabling bearer <udp:syz2>
[   71.590579][ T1795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.750756][  T328] bridge_slave_1: left allmulticast mode
[   71.757792][  T328] bridge_slave_1: left promiscuous mode
[   71.764191][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.781460][  T328] bridge_slave_0: left allmulticast mode
[   71.797470][  T328] bridge_slave_0: left promiscuous mode
[   71.803442][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.953061][  T328] veth1_macvtap: left promiscuous mode
[   71.958716][  T328] veth0_vlan: left promiscuous mode
[   72.041084][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.048178][ T1804] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.055670][ T1804] bridge_slave_0: entered allmulticast mode
[   72.062141][ T1804] bridge_slave_0: entered promiscuous mode
[   72.068737][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.075823][ T1804] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.083001][ T1804] bridge_slave_1: entered allmulticast mode
[   72.089575][ T1804] bridge_slave_1: entered promiscuous mode
[   72.127590][  T343] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   72.151556][   T36] audit: type=1400 audit(1756458466.270:367): avc:  denied  { mounton } for  pid=1808 comm="syz.1.455" path="/118/file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.174531][   T36] audit: type=1400 audit(1756458466.270:368): avc:  denied  { append } for  pid=1808 comm="syz.1.455" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.208279][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.212709][ T1817] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   72.215400][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.230849][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.237980][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.259313][ T1823] overlayfs: failed to clone upperpath
[   72.269387][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.276875][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.287576][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.288990][  T343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.294666][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.305188][  T343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   72.322848][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.329964][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.338837][  T343] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   72.348457][  T343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.356506][  T343] usb 6-1: Product: syz
[   72.367128][  T343] usb 6-1: Manufacturer: syz
[   72.371896][  T343] usb 6-1: SerialNumber: syz
[   72.385123][   T36] audit: type=1326 audit(1756458466.500:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1829 comm="syz.1.460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c50b8ebe9 code=0x0
[   72.393744][ T1804] veth0_vlan: entered promiscuous mode
[   72.428635][ T1804] veth1_macvtap: entered promiscuous mode
[   72.511086][   T36] audit: type=1400 audit(1756458466.630:370): avc:  denied  { bind } for  pid=1837 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.512666][ T1845] rust_binder: Write failure EINVAL in pid:456
[   72.623699][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.655812][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.672953][  T343] usb 6-1: 0:2 : does not exist
[   72.690038][  T343] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   72.709233][  T343] usb 6-1: USB disconnect, device number 2
[   72.730321][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.917677][   T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   73.078898][   T31] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[   73.087069][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.097270][   T31] usb 3-1: config 0 has no interface number 0
[   73.103537][   T31] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[   73.112643][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.121690][   T31] usb 3-1: config 0 descriptor??
[   73.127580][   T31] usb 3-1: bad CDC descriptors
[   73.227965][ T1871] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   73.238225][ T1871] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   73.259468][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.259501][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.266127][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.272938][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.413422][ T1881] fuse: Bad value for 'user_id'
[   73.425023][ T1881] fuse: Bad value for 'user_id'
[   73.537708][  T343] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   73.635634][   T31] usb 3-1: USB disconnect, device number 14
[   73.687596][  T343] usb 6-1: Invalid ep0 maxpacket: 64
[   73.734882][ T1899] /dev/loop0: Can't lookup blockdev
[   73.787751][  T329] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   73.837607][  T343] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   73.948478][  T329] usb 4-1: Using ep0 maxpacket: 16
[   73.958665][  T329] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96
[   73.977614][  T329] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023
[   73.988383][  T329] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   74.007608][  T329] usb 4-1: config 1 interface 0 has no altsetting 0
[   74.017623][  T343] usb 6-1: Invalid ep0 maxpacket: 64
[   74.023536][  T343] usb usb6-port1: attempt power cycle
[   74.030713][  T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.040338][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   74.048633][  T329] usb 4-1: SerialNumber: syz
[   74.058226][ T1883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   74.065539][ T1883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   74.161330][ T1912] rust_binder: 462: no such ref 3
[   74.197922][ T1914] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[   74.224095][ T1914] netlink: 72 bytes leftover after parsing attributes in process `syz.2.487'.
[   74.239039][ T1914] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   74.283746][ T1883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   74.291694][ T1883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   74.397638][  T343] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   74.438243][  T343] usb 6-1: Invalid ep0 maxpacket: 64
[   74.507587][  T479] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   74.517486][  T329] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[   74.527937][  T329] usb 4-1: USB disconnect, device number 18
[   74.577623][  T343] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   74.585932][   T36] audit: type=1326 audit(1756458468.700:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1928 comm="syz.1.493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f4c50b8ebe9 code=0x0
[   74.609317][  T343] usb 6-1: Invalid ep0 maxpacket: 64
[   74.614784][  T343] usb usb6-port1: unable to enumerate USB device
[   74.657589][  T479] usb 3-1: Using ep0 maxpacket: 32
[   74.664226][  T479] usb 3-1: unable to get BOS descriptor or descriptor too short
[   74.672931][  T479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.684375][  T479] usb 3-1: config 1 interface 0 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   74.698435][  T479] usb 3-1: config 1 interface 0 has no altsetting 0
[   74.707264][  T479] usb 3-1: string descriptor 0 read error: -22
[   74.713593][  T479] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   74.722982][  T479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.943604][ T1916] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   74.953349][  T479] usb 3-1: USB disconnect, device number 15
[   75.006089][ T1972] overlayfs: failed to clone upperpath
[   75.042930][ T1977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=1977 comm=syz.3.509
[   75.096407][   T36] audit: type=1400 audit(1756458469.210:372): avc:  denied  { name_bind } for  pid=1988 comm="syz.1.514" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   75.229354][ T2002] fuse: Unknown parameter 'fd'
[   75.487243][ T2019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2019 comm=syz.2.525
[   75.508654][   T36] audit: type=1400 audit(1756458469.630:373): avc:  denied  { read } for  pid=2018 comm="syz.2.525" path="socket:[32789]" dev="sockfs" ino=32789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   75.544307][   T36] audit: type=1400 audit(1756458469.660:374): avc:  denied  { search } for  pid=2018 comm="syz.2.525" name="/" dev="configfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   75.628126][ T2025] SELinux:  Context /usr/sbin/cups-browsed is not valid (left unmapped).
[   75.637114][   T36] audit: type=1400 audit(1756458469.750:375): avc:  denied  { relabelfrom } for  pid=2024 comm="syz.2.527" name="NFC_LLCP" dev="sockfs" ino=31797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   75.663409][   T36] audit: type=1400 audit(1756458469.760:376): avc:  denied  { relabelto } for  pid=2024 comm="syz.2.527" name="NFC_LLCP" dev="sockfs" ino=31797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=nfc_socket permissive=1 trawcon="/usr/sbin/cups-browsed"
[   75.691170][   T36] audit: type=1400 audit(1756458469.810:377): avc:  denied  { accept } for  pid=2024 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   75.711159][   T36] audit: type=1400 audit(1756458469.830:378): avc:  denied  { ioctl } for  pid=2024 comm="syz.2.527" path="socket:[31797]" dev="sockfs" ino=31797 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   75.977615][  T329] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[   76.127823][  T329] usb 3-1: Invalid ep0 maxpacket: 32
[   76.257689][  T343] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   76.265334][  T329] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[   76.274413][ T2038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.531'.
[   76.284193][ T2038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.531'.
[   76.293124][ T2038] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   76.417737][  T329] usb 3-1: Invalid ep0 maxpacket: 32
[   76.423265][  T329] usb usb3-port1: attempt power cycle
[   76.430436][  T343] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   76.441336][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.451136][  T343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   76.464281][  T343] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[   76.473353][  T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.482461][  T343] usb 4-1: config 0 descriptor??
[   76.777601][  T329] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[   76.797953][  T329] usb 3-1: Invalid ep0 maxpacket: 32
[   76.891400][  T343] thrustmaster 0003:044F:B323.000A: unknown main item tag 0x0
[   76.909431][  T343] thrustmaster 0003:044F:B323.000A: unknown main item tag 0x0
[   76.917086][  T343] thrustmaster 0003:044F:B323.000A: unknown main item tag 0x0
[   76.925139][  T343] thrustmaster 0003:044F:B323.000A: unknown main item tag 0x0
[   76.938313][  T329] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[   76.947340][  T343] thrustmaster 0003:044F:B323.000A: unknown main item tag 0x0
[   76.958161][  T343] thrustmaster 0003:044F:B323.000A: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.3-1/input0
[   76.977621][  T329] usb 3-1: Invalid ep0 maxpacket: 32
[   76.985082][  T329] usb usb3-port1: unable to enumerate USB device
[   76.994137][  T343] thrustmaster 0003:044F:B323.000A: no inputs found
[   77.053939][ T2067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'.
[   77.091786][ T2036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.105474][ T2036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.124319][   T36] audit: type=1400 audit(1756458471.240:379): avc:  denied  { mount } for  pid=2035 comm="syz.3.530" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   77.125371][  T343] usb 4-1: USB disconnect, device number 19
[   77.222246][ T2084] 9pnet_fd: Insufficient options for proto=fd
[   77.246679][ T2088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.546'.
[   77.255709][ T2088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.546'.
[   77.264672][ T2088] netlink: 'syz.1.546': attribute type 6 has an invalid length.
[   77.272528][ T2088] netlink: 'syz.1.546': attribute type 5 has an invalid length.
[   77.282828][ T2088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.546'.
[   77.282843][  T479] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   77.316173][ T2093] netlink: 188 bytes leftover after parsing attributes in process `syz.1.547'.
[   77.449012][  T479] usb 6-1: config 16 has an invalid interface descriptor of length 8, skipping
[   77.458042][  T479] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   77.468611][  T479] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[   77.477885][  T479] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   77.486962][  T479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.660996][   T36] audit: type=1400 audit(1756458471.780:380): avc:  denied  { unmount } for  pid=1804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   77.683966][ T2097] overlayfs: missing 'lowerdir'
[   77.984060][ T2122] rust_binder: inc_ref_done called when no active inc_refs
[   77.984088][ T2122] rust_binder: Write failure EINVAL in pid:58
[   78.026003][ T2127] rust_binder: Failed to allocate buffer. len:152, is_oneway:true
[   78.107668][ T2129] kvm: MWAIT instruction emulated as NOP!
[   78.397717][  T343] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   78.454460][ T2137] overlayfs: failed to clone upperpath
[   78.558599][  T343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.568822][  T343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.578465][  T343] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   78.587801][  T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   78.595820][  T343] usb 4-1: SerialNumber: syz
[   78.642567][ T2139] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   78.650942][ T2139] rust_binder: Write failure EINVAL in pid:474
[   78.664662][ T2141] SELinux:  Context 줨 is not valid (left unmapped).
[   78.807877][  T343] usb 4-1: 0:2 : does not exist
[   78.812902][  T343] usb 4-1: unit 5: unexpected type 0x0b
[   78.821261][  T343] usb 4-1: USB disconnect, device number 20
[   78.828710][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   79.198422][  T290] ------------[ cut here ]------------
[   79.203969][  T290] WARNING: CPU: 1 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   79.213352][  T290] Modules linked in:
[   79.217280][  T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[   79.228975][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   79.239098][  T290] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   79.244773][  T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   79.264445][  T290] RSP: 0018:ffffc9000b63fb68 EFLAGS: 00010293
[   79.270567][  T290] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88811f52cc00
[   79.278591][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   79.286591][  T290] RBP: ffffc9000b63fb90 R08: ffff88813e769a1f R09: 1ffff11027ced343
[   79.294613][  T290] R10: dffffc0000000000 R11: ffffed1027ced344 R12: 0000000000000000
[   79.302642][  T290] R13: dffffc0000000000 R14: ffff88813e769980 R15: ffff88813e792880
[   79.310693][  T290] FS:  000055555a54e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   79.319726][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.326353][  T290] CR2: 00007fff21a92df8 CR3: 0000000101b4a000 CR4: 00000000003526b0
[   79.334407][  T290] Call Trace:
[   79.337724][  T290]  <TASK>
[   79.340682][  T290]  ovl_do_remove+0x7b8/0xcf0
[   79.345316][  T290]  ? ovl_set_redirect+0x780/0x780
[   79.350400][  T290]  ? down_write+0xe9/0x2a0
[   79.354844][  T290]  ? __cfi_down_write+0x10/0x10
[   79.359741][  T290]  ovl_rmdir+0x1e/0x30
[   79.363867][  T290]  vfs_rmdir+0x3e0/0x560
[   79.368157][  T290]  incfs_kill_sb+0x109/0x230
[   79.372779][  T290]  deactivate_locked_super+0xd5/0x2a0
[   79.378216][  T290]  deactivate_super+0xb8/0xe0
[   79.382922][  T290]  cleanup_mnt+0x3f1/0x480
[   79.387354][  T290]  __cleanup_mnt+0x1d/0x40
[   79.391804][  T290]  task_work_run+0x1e3/0x250
[   79.396420][  T290]  ? __cfi_task_work_run+0x10/0x10
[   79.401590][  T290]  ? __x64_sys_umount+0x126/0x170
[   79.406643][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   79.412058][  T290]  ? __kasan_check_read+0x15/0x20
[   79.417373][  T290]  resume_user_mode_work+0x36/0x50
[   79.422539][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   79.428079][  T290]  do_syscall_64+0x64/0xf0
[   79.432523][  T290]  ? clear_bhb_loop+0x50/0xa0
[   79.437382][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   79.443328][  T290] RIP: 0033:0x7fbce858ff17
[   79.447815][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   79.467760][  T290] RSP: 002b:00007fff21a935a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   79.476211][  T290] RAX: 0000000000000000 RBX: 00007fbce8611c05 RCX: 00007fbce858ff17
[   79.484256][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff21a93660
[   79.492301][  T290] RBP: 00007fff21a93660 R08: 0000000000000000 R09: 0000000000000000
[   79.500361][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff21a946f0
[   79.508385][  T290] R13: 00007fbce8611c05 R14: 00000000000133bd R15: 00007fff21a94730
[   79.516385][  T290]  </TASK>
[   79.519461][  T290] ---[ end trace 0000000000000000 ]---
[   79.525357][  T290] ------------[ cut here ]------------
[   79.530886][  T290] WARNING: CPU: 0 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   79.540268][  T290] Modules linked in:
[   79.544182][  T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G        W          syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d
[   79.557338][  T290] Tainted: [W]=WARN
[   79.561186][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   79.571288][  T290] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   79.576991][  T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 57 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 46 2f 43 ff <0f> 0b e9 3e ff ff ff e8 3a 2f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   79.596679][  T290] RSP: 0018:ffffc9000b63fb68 EFLAGS: 00010293
[   79.602814][  T290] RAX: ffffffff8242b4fa RBX: 0000000000000000 RCX: ffff88811f52cc00
[   79.610873][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   79.618990][  T290] RBP: ffffc9000b63fb90 R08: ffff88813e769a1f R09: 1ffff11027ced343
[   79.627079][  T290] R10: dffffc0000000000 R11: ffffed1027ced344 R12: 0000000000000000
[   79.635091][  T290] R13: dffffc0000000000 R14: ffff88813e769980 R15: ffff88813e792880
[   79.643136][  T290] FS:  000055555a54e500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   79.652130][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.658814][  T290] CR2: 00007f4c50b72020 CR3: 0000000101b4a000 CR4: 00000000003526b0
[   79.666895][  T290] Call Trace:
[   79.670224][  T290]  <TASK>
[   79.673184][  T290]  ovl_do_remove+0x7b8/0xcf0
[   79.677952][  T290]  ? ovl_set_redirect+0x780/0x780
[   79.683019][  T290]  ? down_write+0xe9/0x2a0
[   79.687456][  T290]  ? __cfi_down_write+0x10/0x10
[   79.692378][  T290]  ovl_rmdir+0x1e/0x30
[   79.696485][  T290]  vfs_rmdir+0x3e0/0x560
[   79.700796][  T290]  incfs_kill_sb+0x1a0/0x230
[   79.705424][  T290]  deactivate_locked_super+0xd5/0x2a0
[   79.710852][  T290]  deactivate_super+0xb8/0xe0
[   79.715565][  T290]  cleanup_mnt+0x3f1/0x480
[   79.720047][  T290]  __cleanup_mnt+0x1d/0x40
[   79.724493][  T290]  task_work_run+0x1e3/0x250
[   79.729139][  T290]  ? __cfi_task_work_run+0x10/0x10
[   79.734378][  T290]  ? __x64_sys_umount+0x126/0x170
[   79.739472][  T290]  ? __cfi___x64_sys_umount+0x10/0x10
[   79.744978][  T290]  ? __kasan_check_read+0x15/0x20
[   79.750113][  T290]  resume_user_mode_work+0x36/0x50
[   79.755283][  T290]  syscall_exit_to_user_mode+0x64/0xb0
[   79.760900][  T290]  do_syscall_64+0x64/0xf0
[   79.765398][  T290]  ? clear_bhb_loop+0x50/0xa0
[   79.770132][  T290]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   79.776063][  T290] RIP: 0033:0x7fbce858ff17
[   79.780537][  T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   79.800221][  T290] RSP: 002b:00007fff21a935a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   79.808693][  T290] RAX: 0000000000000000 RBX: 00007fbce8611c05 RCX: 00007fbce858ff17
[   79.816716][  T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff21a93660
[   79.824754][  T290] RBP: 00007fff21a93660 R08: 0000000000000000 R09: 0000000000000000
[   79.832787][  T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff21a946f0
[   79.840820][  T290] R13: 00007fbce8611c05 R14: 00000000000133bd R15: 00007fff21a94730
[   79.849023][  T290]  </TASK>
[   79.852064][  T290] ---[ end trace 0000000000000000 ]---
[   79.866898][ T2146] 9pnet_fd: Insufficient options for proto=fd
[   79.951141][   T46] usb 6-1: USB disconnect, device number 7