last executing test programs:

5m24.335790125s ago: executing program 3 (id=853):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv2(r1, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/15, 0xf}], 0x3, 0x0, 0x7, 0x0)
r2 = open$dir(&(0x7f0000001200)='./file0\x00', 0x101800, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000001240))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000001280))
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14, 0x800)
sendmmsg$sock(r3, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="f5ba948ea93f8ba3094056fa557af28fc4c7832bb6be5c3940bd4b4f710ef9a24aa1d486dbd7866ec2137666e111ce15323edf76fe920b33ffea847f0fa74f748dc25b8c45a5181233c33c9847ee1841429419ad1ef4418caa7a4c2851cff9c5d7e0651c0a11791ed334020b8e25017547db8c081fa913dff9abeb145298f23954a351c467124ff64dfe353e81aca218746a2c7960793c5ad75610236558ee8563d20a43ce", 0xa5}, {&(0x7f0000003400)="99fe2ad3c38e067eaacd5d5fdce47e05a81b68acb34a127922376bab7f5c1afd71067976a7bd043cee6992214b4c123f69b18fc3962531b2b6a8480d24848396a806ce3d19b310e5ae2922c1238539c77e96cacfdadafb4e462198fa954f0bbfcef704be47e880c98e22092409b2ef1ef56a98ef1dd31d98b3331da8df00b1ba9111d5191cc4e0f14e00142ca9ff653433c7dabaa8476f319802eae49745995e158970d0d45d9a150c81af646dce8c65e64a32fa1f68ff3b02697991bcf03400fbc6a389d3faf62e2b649050492c8e79f3f626", 0xd3}, {&(0x7f0000003500)="1d592f6255e4dc3b5397df991c2e6d0f9cefcfdfda09ddade51a3197dfa682f79c0b70bfc325bbeeeeb331cfd324d3ef956882c11cedd5b46aaf28ae5ae8b3708c17757c97ce2be2834bf288b1e0b4f167fc0f5c432159dd4b791f74eee8d3e2a8", 0x61}, {&(0x7f0000003580)="cb5d3907bc631eea74b02eda702d5b87396d5d3344e8dffd12bfe8032480d3e7f0580c72dd52b3ba812d78595643881e6be7cc0d988e25d0b2c3973503e9e160c05287e25524e9ddd2ef455ca628d7b71dde5dd2e5b973d81d0815967dc52437cea7074bdcfd4941c6e34faad163915fe16ee364253524d1354ecde7038fcfa01058a3f97195a63c44887412f8c3028594304f182a75be46151497cc9d40cf00eb6b28cf9a518d695d08d86a7650980ed95476e8", 0xb4}, {&(0x7f0000003640)="64182cd5bd8429b22b6c20aff5bf18dd6e2f27949a39de9f896de119fc7b982d7df725f4cdb46c49e7dd27fe4ed23ee32ab9e90eb4e6d4f30185b6773ec17df6dd9c0378a72abc9f6021ab33a9d3997754b2709475fa1d24cc2e2cd6756293b92f0dda091d60d40065cb07d46307dde609d0d64def81cf4d3046cc3d8b78856d1c66", 0x82}, {&(0x7f0000003700)="d2797af3caeb44e60a0a949e4759819b72f15274810c9f9a22bfd578a16814760f5cd120c44262e1688dbf421636bb257c2bee46f8f22c41135a931311a0bd4bf81784295a77beef23f42d29907d364eb191b1d9c51a0b921767003e2c625b91ababf7202e743100d2bc86936032d977bdec41e42c946b8e04ce186724064f489c0f5282f370990f4684", 0x8a}, {&(0x7f00000037c0)="ed8a6fd290ab628fdaee3b5ba66310694f8f94d63b47191a2ad24efd765ed107cb1feafce0d0d93826538dc8c53409f1554a2c0d", 0x34}], 0x9, &(0x7f00000038c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x29b}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0x78}}], 0x1, 0x8840)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003980), 0x802, 0x0)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000003dc0)={0x3, 0x1, 0x3, 0x18, 0xfc, &(0x7f00000039c0)})
ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000003e00)={0xffffffff, 0x9})
lstat(&(0x7f0000003e40)='./file1\x00', &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000003fc0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4004001)
r9 = signalfd(r4, &(0x7f0000004000)={[0xfffffffffffffffb]}, 0x8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
socket(0x27, 0x6, 0x7)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004080), r0)
sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000004180)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x78, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8a5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000010}, 0x4)
mount$9p_fd(0x0, &(0x7f00000041c0)='./file1\x00', &(0x7f0000004200), 0x200080, &(0x7f0000004240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x2ff}}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@access_client}, {@cache_mmap}, {@directio}, {@ignoreqv}], [{@appraise}, {@measure}]}})
close_range(r3, r3, 0x2)
ioctl$VHOST_VDPA_GET_AS_NUM(r9, 0x8004af7a, &(0x7f0000004300))
r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004340), 0x802, 0x0)
ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000004380))
splice(r11, &(0x7f00000043c0)=0x7fffffffffffffff, r5, &(0x7f0000004400)=0x8210, 0x55, 0x2)
mount$9p_fd(0x0, &(0x7f0000004440)='./file1\x00', &(0x7f0000004480), 0xc414, &(0x7f00000044c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@directio}, {@access_user}, {@access_any}], [{@subj_user={'subj_user', 0x3d, 'msize'}}, {@fsname={'fsname', 0x3d, 'wfdno'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}})
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000004580)=0x46)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)

5m24.335264395s ago: executing program 3 (id=854):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4004)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0)
ioctl$SIOCGSKNS(r2, 0x894c, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000780)={0x30, &(0x7f00000006c0)=[{0xfffffff1, 0x72, &(0x7f00000007c0)="1606655d6e3a298c6ce8bf8a3e218f09165e47a79598c23cc61b1888869d3398f6c246974c10ba4b158f21bd8d24ebc539bfa2479c2a46e1b9223a54f2a0493f36a7e419d9b623f759b411c7e468dac29dd73f1d364c00d7c584c86873c8300a67fbe7af9b569148a1da0ab78c58794c9db2555f185959feb0ea11e6a2b99942b8aff637e001d07b3284e7353e96be9c1bc0fc462cf2ded975ac24bed1"}, {0x6, 0x49, &(0x7f0000000380)="3b0f886662ca3333b2a06f8cb744879ba09947126f149bf21e3d3a3d16f2dd4c8ba530fa4142c6c17aae58372533cf2fe35e6a66da063dc12da26d0c35f77c17ad0fb468dd5e60e53b", 0x1}, {0x400, 0xec, &(0x7f0000000440)="dd606b36161b7a811de2e65499bc1bc7fa54cf4cc7b6f3160cdde0aa91fd949516bc1140565405c698046848c33601e6f79e12e91e950a185bae505a070e539126656d35746d05b652b2e112d242e95728b6639fb0061d7d78870a9c6ef287fa48aa5b032de6b308c22d31a00da5ecf59d5abe824e164aa08327be3e3605213a4bb52225a3159cc0356c51cbbf44a94c02b21f89da00ddef7fcaa03ceb43bbd6aa97bab67ce4282724ad4aef00f771b03562270714e524b24954a044495961827d24f1af50c1b3ba2f953013158017430c12b06130efd05c090630164f6532c74fd729aa42664fe300c4e261", 0x1, 0x1}, {0x1, 0x66, &(0x7f0000000540)="9ded0ad4dcf1c3426a69d40bfbd8f22a21ccb4bcbc2f5698fa5e4e76d85c1dd08442ef635c3ba10a978b4b4cc7294a8b20c241721f6ae80c9f6be1cde55d3816509c789ae4f977545891f495bffd516b3d83da9d6cc4e9ae80c0e1f61de5cc0ec6f8b87f903f", 0x1}, {0x3, 0xc4, &(0x7f00000005c0)="ad39df4d6578a85114e7ab953e46ed45e98b523099557ca70fbd514baa1fc4ac786c452b3c025d4455ce2f8d91da5c31d29fe5b87f9d47743c8f84ec517a647963ce8380ef3c8770c34ff42ba92232c6a3d6ab663ebbc93e8bff77979efe6b2966e6ffb34c2800d1f17b9507d89a457fb7d442bbc92cd780f8609778b8296fea54a7507647f411ecd988a547504f189a1c1daddeeb1f63c73db0ef9ad09fab4469a907c9060a6e530d4806c514ebf1f7f945497546e9f3a6d39e609645bc9ebc9360d4da", 0x1}, {0x80000a92, 0x18, &(0x7f0000000180)="f1824e3a977735d790a4aae223aab8e4bd94d596377cfe32", 0x1, 0x1}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
pwritev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000880)="1c564a989d82bc74ff19810f5dcd5b701c36992378a63ec2004dfc4325c1c410d1ad1bddf438f4322129685a58588abac59de93e5b1c462b2ffd0aaaa77a651746fdad03b5affb7884ed93bd0b17411651aa7b0f6567e5ab2579cc8f41c3dcf5ee3ea6b5d784810ab48267ec4d8d7fc3e09686ffb80430bbeef6d0652a7e131314c032d0506397e66fbc1befa64ef607359e328343d3d96cf4ba878d5ee4186f519c796bcdcc", 0xa6}, {&(0x7f0000000200)="275b385406665c636b29c19d9c33f66b74d4c067639a905f9e7c05fdd8ba4f0b72facb3a", 0x24}, {&(0x7f0000000940)="b65e2602436dac689d22e5040c37290ef55931498a2d49bedb015a7392f24ff9306b0ab794e9cd616bb02324b449a5262d3e046cd0d930a8b3b9e7178fddbb041b58e6cf84eefd20ed63e8058f4d0ae2e1df868d4f21c97188a323a7a9637d8e4e5cad937592365f5b880f670ea5808a8bb6187e4634b68babe7d24c6671a73c973e5e447c6dd96b62d995e433530c52022b322057b6b7fd4541", 0x9a}, {&(0x7f0000000a00)="2ce240bd2bee9650a8242d4e1d2b6fb65397ed17eede8cc4ccf021b2e83c1ada716807bae85e9266961f36a3031cf0c96dbca0be63a2824b26c4bd4d1f59671615fc09f19fd610e203a4790ace0a7fe20ceb23f03801603d9bcefb7038a4f485049ffea4606b9dad81ec3bc9f0", 0x6d}, {&(0x7f0000000a80)="f5296b81ad81379a3d42fc081fe25e3aaea2694e4ad661b9566d76a2befdcfe55996bdd086cb2210eee77d4c7d96c6dd4d8b5ed62475e46ea054632d9aef26ae4e79d6c4179f12c263c773cd1221bab6f5f14f2c7ed5759020b7e140a9057ca127ecd9dab4a6eb4111526f163a101c0ad78e69c0c8f9", 0x76}, {&(0x7f0000000b00)="b69ed3dcbe2f6a2318c393e2d7fbc738e2d985e4e8f3b28fc328899c4faac69578b84a4284bc3c323cb3eed909e3ce44da4556b77883c7410d5d8b002d3aa80bf81f1fbc93e3954088ae0467eb1342620ea42336c027070a840e4a397308ea30d1ea361aae9a2af30beb489854ae95640d58fb72bb570c62d0cbba7638ba656e56bdf1419dce739817b4bed630bb0045685c", 0x92}], 0x6, 0x7, 0x8)

5m24.266512906s ago: executing program 3 (id=858):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000080))
r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x124, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x1}, @decrefs, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x110a, 0x1}, @fda={0x66646185, 0x6, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/32, 0x20, 0x0, 0x15}, @flat=@binder={0x73622a85, 0xb, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x1440}, @exit_looper, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x2}], 0xa7, 0x0, &(0x7f0000000500)="8068cdac993aefbb02ab742721df7755973d4a2894dda945aa32a9c5be185e2ac268cf033c9d32089f5ff507c417ae5d468644a85f43cd3c047628e6b6d0673c3824c0aa0806bcc30b6c44b6d1dbe77af35d30546ee4e7385b115be83b4c76aa2876adc2eb1a36833a68e5cec3525175328c19151b7e33d7a18de43aef8a62e8378441fa42aef5d431e4299755fc9073b756c07670ada1562f0cb050ff0668b6bc07ec29403fa1"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4)
sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x7, @vifc_lcl_addr=@local, @multicast2}, 0x10)

5m23.406060413s ago: executing program 3 (id=873):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000083, 0x0, 0x9}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100010000006e665294d2750cdcaa643b11f80210e9c858fe59747b6d20151a8a76662ffa98906faeabd3db299ab0bfc20f9dc5b16c24608debea6eafc8067c929571435594f1b3adf555c906017f6c10dac6174d7660820ec45fa7ca7bdf880dc7d66095835cbbb7720783840f85c1e41e1cb65abd6843b558f11dc30ffece708717c1fa65b68d4d025d7b75fe417fe1fc6439098e496f7fab1daedeec1384d7571e99a4a4e34504d919cdcc290423e48dc11717a1ed291d2139f973ab"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x47}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x5, 0x4)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYRESDEC=r4], 0x34}], 0x1}, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000040)=0x1)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20a, 0x521182)
r10 = syz_open_procfs(0x0, 0x0)
r11 = fsopen(&(0x7f00000003c0)='anon_inodefs\x00', 0x0)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
r13 = fsmount(r11, 0x0, 0x0)
r14 = openat$cgroup_subtree(r13, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000400)=ANY=[@ANYBLOB="2be96f630be98af27fef15608cb15e52beee53ddb23b117d32369ebb1e5458431d59845693b89701000a45cdc2e84e7370f97fff3b38cd3c470b45c8e059bf1d1dba9a9071dc47bfb6069da25b1ecf7a87bcf360456f563b7a29e8b714ccfe1039310738126a59596f212fe225fcf5c552c8b60a81807cf8000000004800a91d040464d25937223cc7c95b669388307144ef8e1ac476cb9e99eeaf0000000000b49711b19b010e07fffce7ed4a10addbebf7cfdfb66b2c7440a4da5e3c16aa76cd513d5dcf984975f716824e2026d0a7fff7a9e25ac4b242c3c2e9a90534e2bca2b9b9f3b7d95c2e61523c87bb592a3f280ab7"], 0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522)
close_range(r7, 0xffffffffffffffff, 0x0)

5m23.341841295s ago: executing program 3 (id=874):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0xffffd000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="0f231335200000000f060f01d19cc46ac31578bc2e14ca000800c800c801cfb9800000c00f3235000800000f300f79e9362e0f01fa43ad410f21fb", 0x3b}], 0x1, 0x63, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaabd2, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r1, r6, 0x2)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x2005, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000fe88000000000000000000000000000000002f00"/64, @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB="0000000000000000e300000000080000000000000001000000000000000000000000000100000000000000000000000081dd0000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffffff07000008000000000000000000000000000000000000000c0015005c"], 0xcc}}, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
prctl$PR_SET_SECCOMP(0x3d, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x916e, 0x1)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000240)=[@exit_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r9}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x40}], 0x6e, 0x0, &(0x7f0000000400)="5483136826afea118555163a65dd5b29db86a5fe12188ce76dc3408d78a5dc2710486ec55f6dac9579da4894c10caff4520ec2564294b7586417a0c55602b0814661673d4f57e48deeba3a1eb1bd3429455733243157ae53277b918c7aae6d2c43ad93bc90cb99e156c6b4a5f181"})
ioctl$EVIOCGLED(r8, 0x80404519, 0x0)
ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000180)=0x7)
getpid()

5m23.311064405s ago: executing program 3 (id=875):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @free_buffer], 0x0, 0x0, 0x0})
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xac, 0x0, &(0x7f0000000500)=[@clear_death, @transaction={0x40406300, {0x80000, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x6, 0x2, 0x3e}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/88, 0x58, 0x2, 0x9}, @fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/82, 0x52, 0x2, 0x2e}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x72, 0x0, &(0x7f00000003c0)="0e8c9ae7026e1d78bb357d7243ad19decdd88f73d915bfefaf7cca8828a19912493ee92f114958125d02047be26b9be5e293d79de0a8eb628d2eb1d6eeff678815b45187634891aa49f0bc9a14c1424aba5f4ae745baeec542eb835692a622d28fdb3daf4b83d22adfccd7a8c8b55dfd928d"})

5m23.272879955s ago: executing program 32 (id=875):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @free_buffer], 0x0, 0x0, 0x0})
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xac, 0x0, &(0x7f0000000500)=[@clear_death, @transaction={0x40406300, {0x80000, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x6, 0x2, 0x3e}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/88, 0x58, 0x2, 0x9}, @fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/82, 0x52, 0x2, 0x2e}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x72, 0x0, &(0x7f00000003c0)="0e8c9ae7026e1d78bb357d7243ad19decdd88f73d915bfefaf7cca8828a19912493ee92f114958125d02047be26b9be5e293d79de0a8eb628d2eb1d6eeff678815b45187634891aa49f0bc9a14c1424aba5f4ae745baeec542eb835692a622d28fdb3daf4b83d22adfccd7a8c8b55dfd928d"})

3m0.94088965s ago: executing program 2 (id=2462):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x64, 0x7000, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5a, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000730000400000000081"])
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0xe, 0x2a})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79})

3m0.913551971s ago: executing program 2 (id=2463):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0])
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x11)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000480)={0x2, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xfffffffffffffc00, 0xc595, 0x7, 0x2, 0xfffffffdffffffff, 0x2, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000001c0)={0x8080000, 0x4000})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r7, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB="740b00ad895bc07771b46f5a603387f900003d66642c7266646e6f3d625de30327d7a9c56a2a15e85b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,dont_hash,dont_measure,\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1aabc3, 0x81)

3m0.841816052s ago: executing program 2 (id=2464):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r1, 0x80084524, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002300090002000000ffdbdf0504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

2m59.95540311s ago: executing program 2 (id=2465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x4480, 0x3)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x325099, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f00000002c0)={0xdb, 0x0, 0x2})
write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
fcntl$dupfd(r1, 0x406, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x810, r1, 0x1940f000)

2m59.736409844s ago: executing program 2 (id=2473):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

2m59.623700286s ago: executing program 2 (id=2475):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

2m59.555734938s ago: executing program 33 (id=2475):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

5.269033007s ago: executing program 5 (id=4982):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

4.645329159s ago: executing program 1 (id=4995):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x3d)
r1 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="24000000010006", 0x7)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x200a840, 0x0)
gettid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b32000)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x0, 0x0, 0x9a]}, &(0x7f0000000280)=0x44)

4.567637631s ago: executing program 1 (id=4996):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2d2}, {&(0x7f0000000bc0)="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", 0x1e8}, {&(0x7f0000000500)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d553bbece82c0609a7f367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d69f04b5b846c58570565e5133b2636e47ef668d0f7070fd0c3c3adc9aed345a3a19c24abf202b001fcdf35", 0xcb}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000)

4.509871102s ago: executing program 1 (id=4997):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) (async)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0)
syz_usb_connect(0x1, 0xfffffffffffffd3e, 0x0, 0x0) (async)
syz_usb_connect(0x1, 0xfffffffffffffd3e, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x3000, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

3.921377743s ago: executing program 5 (id=5002):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003000000106b1d010140000102030109027e000301f930040904000000010100000a24010004080201020a2407050100011383fe09040100000102000209040101010102000009050109000403010007250101040a000904020000010200000904020101010200000e24020101010702fe765b0f3e350724010f0b04000905050920"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x4, 0x1, 0x1b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})

3.900951064s ago: executing program 5 (id=5003):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0x1, 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x4}})
ioctl$BLKRRPART(r1, 0x125f, 0x0)

3.833731485s ago: executing program 5 (id=5004):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="2f99f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f00000002c0)={0x0, 0x59, 0x1a, {0x1a, 0xd, "fda70640f7a3263629c461c89ebddf81ff093324530280d7"}}, &(0x7f0000000500)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "54df1ce40bc37f98c25fe3e7617072ec6f04829f938606111f8e56f86bdc28073a34fc5c9672ef0fcc747e261b2d660ecb8da0ef3cec57dc0d16ad8c137075d5b6bcd24a430fcedc898850a52ea694aca00cb1ae3b459173e03fcc9f5122e21bd4c41f7eec5db889d5eb2abb62882adf3f37691852da67575f6290042b3cc0d0308e2ac1e450a8eabd3861702f405d962477e47f192db008ddbdaf7c8b534023aaf95a314a5be0"}}, &(0x7f00000005c0)={0x0, 0xf, 0x1cd, {0x5, 0xf, 0x1cd, 0x6, [@ptm_cap={0x3}, @generic={0xa7, 0x10, 0xb, "d40863701c2bea303a217a1cd61dbd75017a4842ad2b479eeb85a12446ed18408056d160d7d135af94096549baa02728d655b709e7fb8da31c95458a7d96cdb675d651af05bb90f5ef54ba0ba62fa503806fdd6578c5b491c79ab348b1fcf7e9f13477263252a6d23c857deb96f289943d3abfc2b393b74db7503b10a8bcb9b309abdc3e80001a9e30e4eb40ec081743d627e58b471c1861e06fc51501d41830d2fa640b"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x101, 0xf, 0x2, [0xc0, 0xc0, 0x0]}, @generic={0xdf, 0x10, 0xa, "b9b4449701246ef5045757f8ffa423e3ad7bcbed35b90d445d96c04f7656d5ba2ea6b82aefb9b405190ff77a8143719ee64e1bc9ac644adb109bd455a64b14e9ea5879b407bb2648ccc746b3c1eb11bee277fc9782182c6527ab407caff11030ed860328ea67d53830256cec57aca95109f489f36b1b353450526f66fbd081897926fbe0ba42a606dc91e1320dea1b6a0a23e1e2259a2827554ebb05e4334f8c2f153634daf3c2a18367f00923ebc3a89a22693cc998ac0ffb5db0b0b21d35232750c7f545b4deaae79942e05b0ade4a9df07e10fb1c1956b43415de"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xae, 0x6, 0x80, 0xf00f, 0x5, [0xffc000, 0x0, 0xffc000, 0xc000, 0xc0, 0x30]}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x1, 0x1a, "4b7a5da4", "57d6f789"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x1, 0xc4, 0x7, 0x8, 0x6}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xf, 0x36, "21bc245ad3d717fb6cb9b34876fc915f647bdd0c2a75ba166308f6a982066b884067d6a58d65bc05843bc41e9b7d9493eaca5abda812"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0xa0, 0x80, [0x110]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "ed44"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xd608}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1fa8985544a318f6}}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, '\nL'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xe2}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x2}})
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000480)=@v3={0x3000000, [{0x75c97ba1, 0x80000001}, {0x9, 0x3}], r2}, 0x18, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x0, 0xb7, 0x7, 0xf5}, {0x6, 0xd5, 0x4, 0xfffffe24}]})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000df58"])
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
read$FUSE(r5, &(0x7f0000004b00)={0x2020}, 0x2020)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

3.293639466s ago: executing program 0 (id=5009):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) (async)
r4 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') (async)
rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) (async)
splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r7, 0x407, 0x100004) (async)
fcntl$setpipe(r7, 0x407, 0x100004)
time(&(0x7f0000000200))
write$eventfd(r7, &(0x7f0000000240), 0xffffff14)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r9, 0x0, 0x0)
r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=r8], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, 0x0, 0x0)
epoll_create1(0x80000)
epoll_create1(0x0)
setresuid(0xee00, 0xee00, 0x0) (async)
setresuid(0xee00, 0xee00, 0x0)

2.181764807s ago: executing program 1 (id=5018):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r0)
stat(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000100)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="f57a99c4d6b2066275512a729523d4d6477c20b698c6ff8540f74d7085e3e26fd8aafab9a2424f1f94d990a9600d0a7dbdfd4a8a25214e", 0x37}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r1}}}], 0x20, 0x20044011}}], 0x1, 0x4000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a40)={0x40, 0x17, 0x3, "d8e7ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x21, 0x1}})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/63, 0x37}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000002580)=""/4065, 0xff1}, {&(0x7f0000000380)=""/109}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x400021c, 0x40012002, 0x0)
getdents64(r0, &(0x7f0000000080)=""/31, 0x1f)

1.837532554s ago: executing program 4 (id=5022):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs2/custom0\x00', 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000202010200000000000000000a00000304000275"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800)
r5 = syz_clone(0x8a841011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
prlimit64(r5, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x68, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0xe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x1, 0x2, 0x2e}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setsig(0x4203, r6, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8})
ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x8, &(0x7f0000000180)={[0xffffffffffffff81]})
syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYRES32=r2, @ANYRES32=r1], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x68c})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, 0x0)
ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

658.211077ms ago: executing program 5 (id=5023):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@out_dx={0xaa, 0x28, {0x6, 0x0, 0x1ff}}, @code={0xa, 0x57, {"450f01ca2e2666470fec20410f229b0f235266ba420066b8280066ef3e0f017b1a2636460f79ae001800006466440f9691005000008fa878c17e33fa66ba2100b881000000ef"}}, @wr_crn={0x46, 0x20, {0x4, 0xe93}}, @code={0xa, 0x67, {"2e430f07640f01ca66b8d9000f00d8260f01cfc4016e5d9300000000c7442400ab000000c74424028a000000ff2c2466baf80cb8203f0785ef66bafc0cb02aee0f4791047d36fa642664642ef64c7c1a93660f388009"}}, @wr_drn={0x6e, 0x20, {0x3, 0x200}}, @wrmsr={0x1e, 0x20, {0xa48, 0x9}}, @wrmsr={0x1e, 0x20, {0x2b8, 0x8001}}, @rdmsr={0x32, 0x18, {0x29e}}, @wrmsr={0x1e, 0x20, {0x96f, 0x28}}, @wr_drn={0x6e, 0x20, {0x3, 0x800}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @wr_drn={0x6e, 0x20, {0x5, 0x40}}, @cpuid={0x14, 0x18, {0x2, 0x4}}, @wr_drn={0x6e, 0x20, {0x4, 0x8000000000000001}}, @wrmsr={0x1e, 0x20, {0x941, 0x9}}, @in_dx={0x82, 0x20, {0x1840, 0x2}}, @rdmsr={0x32, 0x18, {0x897}}, @wr_drn={0x6e, 0x20, {0x0, 0x6}}, @code={0xa, 0x69, {"0f79c3c44211a710c4226d9094bd00000000470f30c4027d90943000000000c7442400fcffffffc74424021d000000c7442406000000000f011c243e47d9de420f9365d8b9800000c00f3235000100000f3066b85a008ec8"}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @code={0xa, 0x5f, {"460f7950f2f22666400f20d848b8fdffffffff7f00000f23c80f21f8350c00b0000f23f8440f20c03508000000440f22c0f2450f2cc2430f063e400ff409450fc7692c66ba4200ed6664660fc730"}}, @wr_crn={0x46, 0x20, {0x3, 0x401}}, @cpuid={0x14, 0x18, {0x0, 0x3}}, @wr_drn={0x6e, 0x20, {0x0, 0xa}}, @wr_drn={0x6e, 0x20, {0x3, 0x4}}, @wr_crn={0x46, 0x20, {0x8}}, @cpuid={0x14, 0x18, {0xffffffff, 0x8}}, @out_dx={0xaa, 0x28, {0x7e3d, 0x2, 0x9}}], 0x46e})
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000004c0)={[0xeeef0000, 0xeeef0000, 0x4000, 0x2000], 0x3, 0x48, 0x3})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000540)={[0xe, 0x3, 0xfff, 0xf3a, 0x40a7, 0x0, 0x1, 0x5, 0x6, 0x9, 0xfffffffffffffffa, 0xfffffffffffff000, 0x3, 0x7, 0x35a, 0x3ffb87a4], 0xeeee0000, 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r1)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x20000040)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0x6, 0xfe, 0xa3d0, 0x4, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x400, 0x4}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}}, 0x24000910)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x0, 0x0, @private0}, &(0x7f00000009c0)=0x1c)
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000a00)={@empty, @rand_addr=' \x01\x00', @loopback, 0x8, 0x7, 0x7, 0x400, 0x0, 0x1000000, r3})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)={0x3d4, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x7c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="bb43107dddda87791a52f8caaee234fbe78ed984e54630"}, {0x14, 0x0, @random="0d23f3ccdf4885876afbc6821ad9137e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x318, 0x84, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe0100000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xd}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe989}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xee}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="8dca5770d487"}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="07f7c7ca332d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="8b260c6df4e5173e59bde45af039b65a72b02dff3992"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2a27}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xb9e}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xf4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e69edb3f20be"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b857ee5167b5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffff14e2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x401}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb8d5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x600000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x82c}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x71c2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9665}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="05a49651dab56f7672b0091d1d86061160120dc04ccc57818fea749ba8c1bca2"}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x40f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x120}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000fc0)={[0x0, 0x0, 0x56, 0x401, 0x9, 0x8000000000000000, 0x35f, 0x80, 0x4c, 0x4, 0x9, 0x55, 0x9, 0x1c0000000000, 0x3, 0x8a45], 0x80a0000, 0xc004})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000001080), &(0x7f00000010c0)=0x40)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001100)={0x5, 0x71e})
r7 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001140)={{0xe4fc, 0x200}, 0x100, './file0\x00'})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001280)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f00000012c0)={{r6}, {@void, @actul_num={@void, 0x3, 0x4b}}})
mmap(&(0x7f0000c99000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r7, 0x6171c000)
pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80000)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0)
r11 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000001380)={0x0, 0x7, [{r6, 0x0, 0x100000000, 0x1000000}, {r7, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0x1000}, {r6, 0x0, 0xfffffffffffff000, 0x1000}, {r6, 0x0, 0x2000, 0x1000000}, {r6, 0x0, 0x4000}, {r6, 0x0, 0x1000000000000, 0x1000}]})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000001440)={0xfffffffffffffff8, 0xc800000000000, 0x5, 0x0, 0x0, [{{r9}, 0xffffffff80000001}, {{r0}, 0x5}, {{r1}, 0x8}, {{r10}, 0x2}, {{r11}, 0x8001}]})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff)
sendto$packet(r6, &(0x7f0000001540)="4e7c807ef4e0e3f7063691bf428a42b10d1f15f96a53d23c654eba81c2ec8892657116b6f4803ddf9df3b0e92bddcfda17e482b6c0a7e8fd8ef1976b98da9b74a41f7956fcbc00501c8b910a530d812597dee6d3c591669d8ef7e262f6e387cf", 0x60, 0x20000080, &(0x7f00000015c0)={0x11, 0x19, r3, 0x1, 0xfc, 0x6, @broadcast}, 0x14)

633.043298ms ago: executing program 4 (id=5024):
recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x1}, 0x14)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x60, &(0x7f0000000000)={[{@xino_auto}, {@verity_require, 0x3a}], [{@smackfshat={'smackfshat', 0x3d, 'verity=require'}}], 0x2f})
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)
recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x1}, 0x14) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x60, &(0x7f0000000000)={[{@xino_auto}, {@verity_require, 0x3a}], [{@smackfshat={'smackfshat', 0x3d, 'verity=require'}}], 0x2f}) (async)
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020) (async)

581.859819ms ago: executing program 1 (id=5025):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil)
syz_usb_connect$hid(0x680b23fa9c9ced38, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000939b11683b7660fdd0081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b"], 0x0) (async)
syz_usb_connect$hid(0x680b23fa9c9ced38, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000939b11683b7660fdd0081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b"], 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x20000870, &(0x7f0000000240)={0x2, 0xffff, @remote}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x20000870, &(0x7f0000000240)={0x2, 0xffff, @remote}, 0x10)
mlock2(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
readahead(r1, 0xa, 0x8) (async)
readahead(r1, 0xa, 0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x3, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xe, 0x0, 0x4, 0x20, 0x7f}, 0x115, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7, [{0xf1, &(0x7f0000000600)=ANY=[@ANYBLOB="f10366a5769e477b44c16f88dc75f241591bf8015b229763e04789676dfa12d39e0f281b987c077ba28e4d67f40d36f2b9de5755787e39507d6e1e6ea32a518a248dfd0ea48e66b9c4163aa356b75cacd0cedb82af84a7de3f5f91ff3c9c7f6ff57845b0b774663a78b80b2ffaa2c34826626161e77d61ef33dbb988dbc6cd64660d39d3438a4e5ee9adf81eb4d25778a7efd7c6f868676ef487464ea67ce50585b38209055029179662149850ebd852b269a7bcf2f6846bbdd97c77cb15729b9e4368f2830df1838db83e18b62bbaff2a59ab21c7bbc1cb2d587f28a3231d97edd31a31c7556213a451ccf38363e1287ce1a85734"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}, {0x89, &(0x7f0000000380)=@string={0x89, 0x3, "cdf963019542513276d259d77df1b5ec6fa1c9ec3e8a683d1bd0bf8f0fa245060fab99b3107c304980470dffd4101923bab1491b3d521e4f00f6c767d70b8b6fe145d1f825168074ae6d1ebc5e771a846c135c5b3652a382edda42e58c105146952f6d437e2828acaf402172922ad629c9a87eb803a3288f75deaefe1b902f8d82f4dbe19b71ed"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}, {0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "cde3d1a406185179a5f95f4419de867710257a45c876a1deab79"}}, {0x43, &(0x7f00000004c0)=@string={0x43, 0x3, "8bc8eceedb8a3a69be04abb20405073487adbcef6b2c96785db61f838f4befa4a4bd9907da3169927049be196ad80059431b4286b3d7c0a7e0c4670181ae3b3b08"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}]})

580.388898ms ago: executing program 5 (id=5026):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00')
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24)
exit(0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
pivot_root(0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000000825bd7000fedbdf25ff000000ffac14140d006000000400000000000000004e2100074e2203ff8a00202011000000419513c9e4a40d6dfc3f583b7236a8daf8c1ae8114ec4e6da8be958c9b1de7e90cc5a1b963d2b4", @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x20004044)
getdents(r0, 0x0, 0x3b)
futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000280), 0x0, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_io_uring_setup(0x3d4a, &(0x7f0000000140)={0x0, 0x1005e95, 0x1001, 0x8000007, 0x198}, &(0x7f00000004c0), &(0x7f0000000240))
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', <r6=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
ppoll(&(0x7f00000001c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000000, 0x25c042)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2517000000500006804c00040067636d28610000000000000000000000000000000000000024000000844338c2ad0a5053f35b12aba32d627f3322a52eb0786bcc0d023a96d80f9db57e737ffd"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)

479.014651ms ago: executing program 4 (id=5027):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000000040))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0)
r3 = getpgrp(0x0)
process_vm_readv(r3, &(0x7f0000002e40)=[{&(0x7f0000002b80)=""/189, 0xbd}], 0x1, &(0x7f0000003380)=[{&(0x7f0000002e80)=""/39, 0xea7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r2, 0xc8646000)
ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000140)={r3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x110, r0, 0x610fc000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @flat=@weak_handle={0x77682a85, 0x10b}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

465.589301ms ago: executing program 4 (id=5028):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x72602, 0x0)
r4 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c, 0x800)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0xf9d4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9e}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'erspan0\x00', <r7=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x86dd, r7, 0x1, 0x20, 0x6, @broadcast}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000002c0)={@private2, r7}, 0x14)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

397.848652ms ago: executing program 4 (id=5029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x410000, 0x48)
faccessat2(r0, &(0x7f0000000100)='./bus\x00', 0x194, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00')
pwritev(r1, 0x0, 0x0, 0x7, 0x0)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x410000, 0x48) (async)
faccessat2(r0, &(0x7f0000000100)='./bus\x00', 0x194, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') (async)
pwritev(r1, 0x0, 0x0, 0x7, 0x0) (async)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) (async)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) (async)

397.306513ms ago: executing program 4 (id=5030):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r0, r0, 0x0, 0x8000)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x319, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "b946bfe2"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0x22, {0x22, 0xf, "5a753e64376fe335b2c6bbb1401691f53ae69bb5012e104e58188915a47031f4"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x18, 0x7, 0x1, "fbc6f7e3", "8ade433f"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x9, 0x6, 0xfe, 0x5, 0x491}}}, &(0x7f0000000640)={0x84, &(0x7f0000000180)={0x0, 0xa, 0xe6, "2e0ab4233e310c1b640b41a480941b6354f735ed0d25bcec4b7258a35d91f052c20657442a46ee298b9ef72506ec1092fbaa3a91e4a60da91a10129dcd2294cbc1e3213896af5c77acbc65233fa8b78683fdc1f717a6ab7ab8f1c055c5de463012e5ca0752be8c49a02aa6582c79fbbee0d57a3b182136c43d7d57ca20227375d89d9ff310322d69a1c751fcbcccd6725d23080a02d56f61a6b2d3a41db131935fac10f3b8027d28bfe7d4297b83949024201ba682f7f4c35dd997c59a8067bc09183268bc88fb9c51217ebf272d4a2597456c4c59ae18a8173776450d831a2ea8afbcfa75ce"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000400)={0x40, 0xb, 0x2, "f268"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x658c}, &(0x7f0000000480)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, '\a|'}, &(0x7f0000000540)={0x40, 0x1a, 0x2}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xde}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x2}})

108.521758ms ago: executing program 0 (id=5031):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600010000000000000000000003003e"], 0xb0)
close(r1)
execveat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)={[&(0x7f00000000c0)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='./binderfs/binder1\x00', &(0x7f0000000200)='-:[(\xcb)#-\xf7{\x00', &(0x7f0000000240)='./binderfs/binder1\x00', &(0x7f0000000280)='\x00']}, &(0x7f0000000480)={[&(0x7f0000000300)='%})&-#$}\x00', &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f0000000380)='./binderfs/binder1\x00', &(0x7f00000003c0)='./binderfs/binder1\x00', &(0x7f0000000400)='./binderfs/binder1\x00', &(0x7f0000000440)='./binderfs/binder1\x00']}, 0x100)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

85.192858ms ago: executing program 0 (id=5032):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getpeername(r1, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

29.72401ms ago: executing program 0 (id=5033):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = getpid()
syz_pidfd_open(r1, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x2600}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@obj_user={'obj_user', 0x3d, '|F\"\x06\x8d\x93\x96\x89\xa6\xcao'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r7, &(0x7f0000000040)="2ae05a4d", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c)
recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffffffffc5c, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/71, 0x47, 0x2, 0x25}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
getpid() (async)
syz_pidfd_open(r1, 0x0) (async)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) (async)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) (async)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x2600}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@obj_user={'obj_user', 0x3d, '|F\"\x06\x8d\x93\x96\x89\xa6\xcao'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}]}}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async)
openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
sendto$inet6(r7, &(0x7f0000000040)="2ae05a4d", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) (async)
recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffffffffc5c, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/71, 0x47, 0x2, 0x25}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async)

29.3075ms ago: executing program 1 (id=5034):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020}, 0x2082)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa9, 0x0, 0x4000000000000, {0xa, 0x2, 0x20000000, 0x3, 0x6, 0xffffffff, {0x0, 0x10041, 0x54, 0xc, 0x1ff, 0x0, 0x10000, 0x0, 0x0, 0xa000, 0x4, r3, 0x0, 0xffffffca, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0x5, 0x2, 0x80, 0x0, 0x0, 0x4, 0x10001}}, 0x50)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x1)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
uname(0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

28.726839ms ago: executing program 0 (id=5035):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20600, 0x9)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6c)
mount$incfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20a800, 0x8c)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x38f0c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
r2 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0, r4}, 0x14)
sendto$inet6(r3, &(0x7f0000000180)="800064de269bb73c", 0x8, 0x4c880, &(0x7f0000000040)={0xa, 0x4e22, 0x80cd, @remote}, 0x1c)
r5 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a)
ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2)

0s ago: executing program 0 (id=5036):
r0 = getpid()
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x19, 0xd, 0xe, "72f3d478016be280c24c3b038e75467a", "58d6ee3a"}, 0x19, 0x5)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005740)={0x2, 0xa, 0x7, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x810)
r6 = syz_pidfd_open(r0, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

kernel console output (not intermixed with test programs):

[  351.751792][T12310] /dev/rnullb0: Can't open blockdev
[  351.985291][    T9] usb 5-1: USB disconnect, device number 63
[  352.059434][ T4589] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  352.219327][ T4589] usb 2-1: Using ep0 maxpacket: 16
[  352.225533][ T4589] usb 2-1: config 8 has an invalid interface number: 138 but max is 0
[  352.233862][ T4589] usb 2-1: config 8 has no interface number 0
[  352.240025][ T4589] usb 2-1: config 8 interface 138 has no altsetting 0
[  352.248273][ T4589] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e
[  352.257363][ T4589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.265877][ T4589] usb 2-1: Product: syz
[  352.270070][ T4589] usb 2-1: Manufacturer: syz
[  352.275099][ T4589] usb 2-1: SerialNumber: syz
[  352.298262][T12316] 9pnet_virtio: no channels available for device /dev/rnullb0
[  352.306149][T12316] 9pnet_fd: Insufficient options for proto=fd
[  352.500001][ T4589] snd-usb-audio 2-1:8.138: probe with driver snd-usb-audio failed with error -71
[  352.510059][ T4589] usb 2-1: USB disconnect, device number 22
[  352.624365][ T4590] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  352.784308][ T4590] usb 1-1: Using ep0 maxpacket: 32
[  352.791107][ T4590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.802237][ T4590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.812186][ T4590] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  352.821547][ T4590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.830325][ T4590] usb 1-1: config 0 descriptor??
[  353.126412][T12349] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  353.264579][ T4590] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x7
[  353.271802][ T4590] koneplus 0003:1E7D:2D51.001A: unknown main item tag 0x7
[  353.279786][ T4590] koneplus 0003:1E7D:2D51.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[  353.444828][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  353.444861][   T36] audit: type=1400 audit(1758837786.797:8395): avc:  denied  { mounton } for  pid=12357 comm="syz.1.3910" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  353.479322][ T4590] koneplus 0003:1E7D:2D51.001A: couldn't init struct koneplus_device
[  353.487504][ T4590] koneplus 0003:1E7D:2D51.001A: couldn't install mouse
[  353.495900][ T4590] koneplus 0003:1E7D:2D51.001A: probe with driver koneplus failed with error -71
[  353.506726][ T4590] usb 1-1: USB disconnect, device number 93
[  353.563699][T12365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  353.563732][T12365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511
[  353.574065][T12367] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.761537][T12376] binder: Bad value for 'stats'
[  353.779959][T12372] binder: Binderfs stats mode cannot be changed during a remount
[  353.791546][   T36] audit: type=1400 audit(1758837787.135:8396): avc:  denied  { create } for  pid=12377 comm="syz.1.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  353.883818][T12389] rust_binder: Failed copying remainder into alloc: EFAULT
[  353.883839][T12389] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  353.891119][T12389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  353.899721][T12389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:525
[  354.004457][T12392] rust_binder: 53: no such ref 2
[  354.018794][T12392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53
[  354.223393][ T4590] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  354.394537][ T4590] usb 1-1: Using ep0 maxpacket: 16
[  354.400826][ T4590] usb 1-1: unable to get BOS descriptor set
[  354.407634][ T4590] usb 1-1: config 1 has an invalid interface number: 27 but max is 1
[  354.415798][ T4590] usb 1-1: config 1 has an invalid interface number: 132 but max is 1
[  354.423965][ T4590] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  354.432698][ T4590] usb 1-1: config 1 has no interface number 0
[  354.438818][ T4590] usb 1-1: config 1 has no interface number 1
[  354.444915][ T4590] usb 1-1: config 1 interface 27 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 64
[  354.454952][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  354.465961][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  354.476996][ T4590] usb 1-1: config 1 interface 27 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  354.488743][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0xD has invalid wMaxPacketSize 0
[  354.498738][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  354.509867][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0xC has invalid wMaxPacketSize 0
[  354.520118][ T4590] usb 1-1: config 1 interface 27 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  354.531297][ T4590] usb 1-1: config 1 interface 27 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64
[  354.542503][ T4590] usb 1-1: config 1 interface 27 altsetting 128 has a duplicate endpoint with address 0x5, skipping
[  354.553635][ T4590] usb 1-1: config 1 interface 132 altsetting 114 bulk endpoint 0xA has invalid maxpacket 16
[  354.564013][ T4590] usb 1-1: config 1 interface 132 altsetting 114 has a duplicate endpoint with address 0xC, skipping
[  354.575198][ T4590] usb 1-1: config 1 interface 132 altsetting 114 has a duplicate endpoint with address 0x8F, skipping
[  354.586210][ T4590] usb 1-1: config 1 interface 132 altsetting 114 has an invalid descriptor for endpoint zero, skipping
[  354.597297][ T4590] usb 1-1: config 1 interface 132 altsetting 114 has a duplicate endpoint with address 0xD, skipping
[  354.608203][ T4590] usb 1-1: config 1 interface 132 altsetting 114 has a duplicate endpoint with address 0xD, skipping
[  354.619109][ T4590] usb 1-1: config 1 interface 27 has no altsetting 0
[  354.625791][ T4590] usb 1-1: config 1 interface 132 has no altsetting 0
[  354.634836][ T4590] usb 1-1: string descriptor 0 read error: -22
[  354.641139][ T4590] usb 1-1: New USB device found, idVendor=0c26, idProduct=0010, bcdDevice=5b.a1
[  354.650342][ T4590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.660229][T12389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  354.669266][ T4590] ftdi_sio 1-1:1.27: FTDI USB Serial Device converter detected
[  354.677275][ T4590] ftdi_sio ttyUSB0: unknown device type: 0x5ba1
[  354.686337][ T4590] ftdi_sio 1-1:1.132: FTDI USB Serial Device converter detected
[  354.694445][ T4590] ftdi_sio ttyUSB1: unknown device type: 0x5ba1
[  354.734769][ T7991] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  354.734893][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  354.885337][   T62] usb 1-1: USB disconnect, device number 94
[  354.892732][   T62] ftdi_sio 1-1:1.27: device disconnected
[  354.899452][   T62] ftdi_sio 1-1:1.132: device disconnected
[  355.097217][    T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  355.258387][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  355.266440][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  355.274995][    T9] usb 2-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config
[  355.285426][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.307166][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.323680][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.331820][    T9] usb 2-1: Product: syz
[  355.336006][    T9] usb 2-1: Manufacturer: syz
[  355.340712][    T9] usb 2-1: SerialNumber: syz
[  355.399808][T12409] syz.5.3926: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  355.414724][T12409] CPU: 0 UID: 0 PID: 12409 Comm: syz.5.3926 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878
[  355.414763][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  355.414784][T12409] Call Trace:
[  355.414793][T12409]  <TASK>
[  355.414806][T12409]  __dump_stack+0x21/0x30
[  355.414838][T12409]  dump_stack_lvl+0x10c/0x190
[  355.414867][T12409]  ? __cfi_dump_stack_lvl+0x10/0x10
[  355.414892][T12409]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  355.414916][T12409]  dump_stack+0x19/0x20
[  355.414938][T12409]  warn_alloc+0x1bc/0x2a0
[  355.414963][T12409]  ? stack_depot_save_flags+0x38/0x800
[  355.414982][T12409]  ? __cfi_warn_alloc+0x10/0x10
[  355.415006][T12409]  ? kasan_save_track+0x4f/0x80
[  355.415024][T12409]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  355.415041][T12409]  ? xskq_create+0x68/0x2a0
[  355.415064][T12409]  ? xsk_init_queue+0xb6/0x120
[  355.415086][T12409]  ? xsk_setsockopt+0x43f/0x6f0
[  355.415108][T12409]  ? do_sock_setsockopt+0x26d/0x400
[  355.415131][T12409]  ? __x64_sys_setsockopt+0x1b8/0x250
[  355.415154][T12409]  ? x64_sys_call+0x2adc/0x2ee0
[  355.415180][T12409]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  355.415210][T12409]  __vmalloc_node_range_noprof+0x135/0x1420
[  355.415240][T12409]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  355.415266][T12409]  ? avc_has_perm+0x144/0x220
[  355.415290][T12409]  ? kasan_save_alloc_info+0x40/0x50
[  355.415315][T12409]  ? __kasan_kmalloc+0x96/0xb0
[  355.415335][T12409]  vmalloc_user_noprof+0x77/0x90
[  355.415360][T12409]  ? xskq_create+0xdb/0x2a0
[  355.415383][T12409]  xskq_create+0xdb/0x2a0
[  355.415407][T12409]  xsk_init_queue+0xb6/0x120
[  355.415430][T12409]  xsk_setsockopt+0x43f/0x6f0
[  355.415460][T12409]  ? __cfi_xsk_setsockopt+0x10/0x10
[  355.415483][T12409]  ? do_futex+0x309/0x500
[  355.415502][T12409]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  355.415524][T12409]  ? security_socket_setsockopt+0x33/0xd0
[  355.415541][T12409]  ? __cfi_xsk_setsockopt+0x10/0x10
[  355.415563][T12409]  do_sock_setsockopt+0x26d/0x400
[  355.415586][T12409]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  355.415612][T12409]  __x64_sys_setsockopt+0x1b8/0x250
[  355.415636][T12409]  x64_sys_call+0x2adc/0x2ee0
[  355.415662][T12409]  do_syscall_64+0x58/0xf0
[  355.415682][T12409]  ? clear_bhb_loop+0x50/0xa0
[  355.415698][T12409]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  355.415725][T12409] RIP: 0033:0x7f001a98eec9
[  355.415740][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.415756][T12409] RSP: 002b:00007f001b8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  355.415774][T12409] RAX: ffffffffffffffda RBX: 00007f001abe5fa0 RCX: 00007f001a98eec9
[  355.415788][T12409] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  355.415800][T12409] RBP: 00007f001aa11f91 R08: 0000000000000004 R09: 0000000000000000
[  355.415812][T12409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.415823][T12409] R13: 00007f001abe6038 R14: 00007f001abe5fa0 R15: 00007ffe0cfb9588
[  355.415839][T12409]  </TASK>
[  355.415894][T12409] Mem-Info:
[  355.456626][T12412] overlayfs: failed to clone upperpath
[  355.458641][T12409] active_anon:10338 inactive_anon:7 isolated_anon:0
[  355.458641][T12409]  active_file:21873 inactive_file:2700 isolated_file:0
[  355.458641][T12409]  unevictable:16393 dirty:186 writeback:0
[  355.458641][T12409]  slab_reclaimable:6730 slab_unreclaimable:76668
[  355.458641][T12409]  mapped:25837 shmem:3069 pagetables:1018
[  355.458641][T12409]  sec_pagetables:0 bounce:0
[  355.458641][T12409]  kernel_misc_reclaimable:0
[  355.458641][T12409]  free:1491518 free_pcp:2994 free_cma:0
[  355.771566][T12409] Node 0 active_anon:41476kB inactive_anon:28kB active_file:87492kB inactive_file:10800kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:103344kB dirty:744kB writeback:0kB shmem:12308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9020kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no
[  355.804382][T12409] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB
[  355.844909][T12409] lowmem_reserve[]: 0 3921 3921
[  355.849960][T12409] Normal free:3005572kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43476kB inactive_anon:28kB active_file:87492kB inactive_file:10800kB unevictable:65572kB writepending:744kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4268kB local_pcp:3364kB free_cma:0kB
[  355.881942][T12409] lowmem_reserve[]: 0 0 0
[  355.886418][T12409] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  355.902323][T12409] Normal: 2828*4kB (UE) 1277*8kB (UME) 1521*16kB (UE) 1181*32kB (UME) 1257*64kB (UME) 326*128kB (UME) 147*256kB (UME) 67*512kB (UME) 34*1024kB (UME) 22*2048kB (UME) 643*4096kB (UME) = 2991368kB
[  355.921773][T12409] 46446 total pagecache pages
[  355.926552][T12409] 7 pages in swap cache
[  355.930968][T12409] Free swap  = 124280kB
[  355.935301][T12409] Total swap = 124996kB
[  355.939912][T12409] 2097051 pages RAM
[  355.943812][T12409] 0 pages HighMem/MovableOnly
[  355.948595][T12409] 351537 pages reserved
[  355.953083][T12409] 0 pages cma reserved
[  355.960341][T12409] Memory allocations:
[  355.965259][T12409]          0 B        0 init/main.c:1370 func:do_initcalls
[  355.972706][T12409]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  355.980852][T12409]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  355.988955][T12409]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  355.991802][T12401] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  355.997182][T12409]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  356.004297][T12401] rust_binder: Write failure EINVAL in pid:56
[  356.012347][T12409]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  356.027168][T12409]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  356.035176][T12409]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  356.043153][T12409]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  356.051203][T12409]          0 B        0 init/initramfs.c:101 func:find_link
[  356.090104][T12422] 9pnet_fd: Insufficient options for proto=fd
[  356.151470][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3933'.
[  356.160851][    T9] usb 2-1: 0:2 : does not exist
[  356.164230][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3933'.
[  356.168673][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  356.177226][   T36] audit: type=1400 audit(1758837789.368:8397): avc:  denied  { accept } for  pid=12434 comm="syz.5.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  356.187386][    T9] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  356.212442][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  356.222113][    T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  356.238273][    T9] usb 2-1: USB disconnect, device number 23
[  356.261794][ T5355] udevd[5355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  356.706651][ T4590] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  356.845294][ T4589] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  356.877161][ T4590] usb 1-1: Using ep0 maxpacket: 8
[  356.883865][ T4590] usb 1-1: unable to get BOS descriptor or descriptor too short
[  356.892523][ T4590] usb 1-1: config 6 has an invalid interface number: 248 but max is 0
[  356.900794][ T4590] usb 1-1: config 6 has no interface number 0
[  356.906987][ T4590] usb 1-1: config 6 interface 248 has no altsetting 0
[  356.915569][ T4590] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  356.930806][ T4590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.938837][ T4590] usb 1-1: Product: syz
[  356.943867][ T4590] usb 1-1: Manufacturer: syz
[  356.948504][ T4590] usb 1-1: SerialNumber: syz
[  357.015748][ T4589] usb 2-1: Using ep0 maxpacket: 32
[  357.022245][ T4589] usb 2-1: config 0 interface 0 has no altsetting 0
[  357.029131][ T4589] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  357.038624][ T4589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.049356][ T4589] usb 2-1: config 0 descriptor??
[  357.171361][ T4590] ums-karma 1-1:6.248: USB Mass Storage device detected
[  357.229262][ T4590] usb 1-1: USB disconnect, device number 95
[  357.424375][   T36] audit: type=1400 audit(1758837790.541:8398): avc:  denied  { append } for  pid=12486 comm="syz.4.3948" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  357.434387][T12487] virtiofs: Unknown parameter 'always'
[  357.469966][T12490] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3949'.
[  357.489677][ T4589] kye 0003:0458:5015.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  357.501769][ T4589] kye 0003:0458:5015.001B: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0
[  357.512856][ T4589] kye 0003:0458:5015.001B: tablet-enabling feature report not found
[  357.521082][ T4589] kye 0003:0458:5015.001B: tablet enabling failed
[  357.703182][ T4589] usb 2-1: USB disconnect, device number 24
[  357.739952][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'.
[  357.749955][T12504] erspan0: entered promiscuous mode
[  357.928126][T12519] 9pnet_fd: Insufficient options for proto=fd
[  357.934717][   T36] audit: type=1400 audit(1758870559.026:8399): avc:  denied  { map } for  pid=12520 comm="syz.5.3958" path="socket:[72338]" dev="sockfs" ino=72338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  357.934781][T12523] 9pnet_fd: Insufficient options for proto=fd
[  357.987169][   T36] audit: type=1400 audit(1758870559.072:8400): avc:  denied  { write } for  pid=12526 comm="syz.4.3960" path="socket:[73234]" dev="sockfs" ino=73234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  358.017679][ T4590] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  358.024039][T12529] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  358.124867][   T36] audit: type=1400 audit(1758870559.204:8401): avc:  denied  { setattr } for  pid=12545 comm="syz.5.3967" path="socket:[72355]" dev="sockfs" ino=72355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  358.179163][   T36] audit: type=1326 audit(1758870559.251:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12554 comm="syz.5.3970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f001a98eec9 code=0x0
[  358.202445][ T4590] usb 1-1: Using ep0 maxpacket: 16
[  358.208819][ T4590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.218976][ T4590] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  358.229493][ T4590] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  358.238617][ T4590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.246811][ T4590] usb 1-1: Product: syz
[  358.251009][ T4590] usb 1-1: Manufacturer: syz
[  358.256059][ T4590] usb 1-1: SerialNumber: syz
[  358.261791][ T4590] usb 1-1: config 0 descriptor??
[  358.279619][   T36] audit: type=1400 audit(1758870559.345:8403): avc:  denied  { compute_member } for  pid=12559 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  358.318424][   T36] audit: type=1400 audit(1758870559.382:8404): avc:  denied  { search } for  pid=12559 comm="syz.1.3972" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  358.340397][   T62] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  358.519782][   T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.531374][   T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.541456][   T62] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  358.554739][   T62] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  358.565132][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.575746][   T62] usb 5-1: config 0 descriptor??
[  358.925207][T12704] FAT-fs (rnullb0): bogus number of reserved sectors
[  358.933152][T12704] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  359.017196][   T62] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[  359.030095][   T62] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  359.097526][T12708] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3977'.
[  359.109577][T12708] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3977'.
[  359.290725][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  359.290744][   T36] audit: type=1400 audit(1758870560.292:8408): avc:  denied  { ioctl } for  pid=12737 comm="syz.1.3986" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  359.434367][T12749] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  359.503801][ T4590] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  359.517473][ T4590] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  359.529172][ T4590] asix 1-1:0.0: probe with driver asix failed with error -71
[  359.538824][ T4590] usb 1-1: USB disconnect, device number 96
[  359.726001][ T4591] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  359.894978][ T4591] usb 2-1: unable to get BOS descriptor or descriptor too short
[  359.903527][T12781] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  359.914963][ T4591] usb 2-1: not running at top speed; connect to a high speed hub
[  359.923729][ T4591] usb 2-1: config 6 has an invalid interface number: 248 but max is 0
[  359.934740][ T4591] usb 2-1: config 6 has no interface number 0
[  359.946885][ T4591] usb 2-1: config 6 interface 248 has no altsetting 0
[  359.958964][ T4591] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  359.968058][ T4591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.977751][ T4591] usb 2-1: Product: syz
[  359.981993][ T4591] usb 2-1: Manufacturer: syz
[  359.986617][ T4591] usb 2-1: SerialNumber: syz
[  360.211919][ T4591] ums-karma 2-1:6.248: USB Mass Storage device detected
[  360.282605][ T4591] usb 2-1: USB disconnect, device number 25
[  360.565099][    T9] usb 5-1: reset high-speed USB device number 64 using dummy_hcd
[  360.703667][    T9] usb 5-1: device descriptor read/64, error -32
[  360.735649][   T62] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[  360.778817][T12812] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  360.788538][   T36] audit: type=1400 audit(1758870561.690:8409): avc:  denied  { relabelto } for  pid=12811 comm="syz.1.4012" name="file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  360.815200][   T36] audit: type=1400 audit(1758870561.690:8410): avc:  denied  { associate } for  pid=12811 comm="syz.1.4012" name="file0" dev="tmpfs" ino=184 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  360.896729][   T62] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  360.905075][   T62] usb 1-1: config 0 has no interface number 0
[  360.912795][   T62] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  360.921968][   T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.930103][   T62] usb 1-1: Product: syz
[  360.934423][   T62] usb 1-1: Manufacturer: syz
[  360.939058][   T62] usb 1-1: SerialNumber: syz
[  360.944383][   T62] usb 1-1: config 0 descriptor??
[  360.991466][    T9] usb 5-1: device descriptor read/64, error -32
[  361.002550][T12814] Invalid logical block size (7)
[  361.045078][T12814] Invalid logical block size (7)
[  361.120724][T12824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.143048][T12824] syzkaller0: entered promiscuous mode
[  361.148611][T12824] syzkaller0: entered allmulticast mode
[  361.154691][T12824] tipc: Resetting bearer <eth:syzkaller0>
[  361.163593][T12823] tipc: Resetting bearer <eth:syzkaller0>
[  361.177110][T12823] tipc: Disabling bearer <eth:syzkaller0>
[  361.257922][    T9] usb 5-1: reset high-speed USB device number 64 using dummy_hcd
[  361.312177][T12831] sock: sock_timestamping_bind_phc: sock not bind to device
[  361.396468][    T9] usb 5-1: device descriptor read/64, error -32
[  361.432738][   T36] audit: type=1400 audit(1758870562.300:8411): avc:  denied  { unlink } for  pid=12185 comm="syz-executor" name="file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  361.487036][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.496515][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.590556][   T62] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  361.600854][   T62] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[  361.612968][   T62] asix 1-1:0.251: probe with driver asix failed with error -61
[  361.652305][    T9] usb 5-1: device descriptor read/64, error -32
[  361.725803][   T36] audit: type=1400 audit(1758870562.572:8412): avc:  denied  { read } for  pid=12846 comm="syz.1.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  361.731708][T12847] tipc: Started in network mode
[  361.750206][T12847] tipc: Node identity 06a7576e769a, cluster identity 4711
[  361.757467][T12847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.781136][T12847] syzkaller0: entered promiscuous mode
[  361.786691][T12847] syzkaller0: entered allmulticast mode
[  361.792577][T12847] tipc: Resetting bearer <eth:syzkaller0>
[  361.801276][T12846] tipc: Resetting bearer <eth:syzkaller0>
[  361.814630][T12846] tipc: Disabling bearer <eth:syzkaller0>
[  361.825096][   T36] audit: type=1400 audit(1758870562.675:8413): avc:  denied  { getattr } for  pid=12807 comm="syz.0.4010" name="/" dev="incremental-fs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  361.828560][ T4591] usb 1-1: USB disconnect, device number 97
[  361.850321][    T9] raw-gadget.1 gadget.4: failed to queue resume event
[  361.918761][    T9] usb 5-1: reset high-speed USB device number 64 using dummy_hcd
[  361.940222][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  361.947509][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  361.954862][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  361.961970][    T9] usb 5-1: device descriptor read/8, error -32
[  362.059826][T12857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252
[  362.100147][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.116654][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.123971][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.131059][    T9] usb 5-1: device descriptor read/8, error -32
[  362.141874][T12863] netlink: 'syz.4.4031': attribute type 3 has an invalid length.
[  362.150021][T12863] binder: Binderfs stats mode cannot be changed during a remount
[  362.183228][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.191869][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.200987][   T36] audit: type=1400 audit(1758870563.022:8414): avc:  denied  { create } for  pid=12866 comm="syz.4.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  362.259823][    T9] raw-gadget.1 gadget.4: failed to queue suspend event
[  362.266818][    T9] raw-gadget.1 gadget.4: failed to queue reset event
[  362.313113][ T4591] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  362.345105][    T9] raw-gadget.1 gadget.4: failed to queue resume event
[  362.409747][    T9] usb 5-1: reset high-speed USB device number 64 using dummy_hcd
[  362.430558][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.437837][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.447713][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.454880][    T9] usb 5-1: device descriptor read/8, error -32
[  362.471394][   T36] audit: type=1400 audit(1758870563.276:8415): avc:  denied  { bind } for  pid=12868 comm="syz.0.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  362.483662][ T4591] usb 2-1: Using ep0 maxpacket: 8
[  362.497801][ T4591] usb 2-1: unable to get BOS descriptor or descriptor too short
[  362.506334][ T4591] usb 2-1: config 4 has an invalid interface number: 62 but max is 0
[  362.514622][ T4591] usb 2-1: config 4 has no interface number 0
[  362.520831][ T4591] usb 2-1: config 4 interface 62 has no altsetting 0
[  362.534634][ T4591] usb 2-1: New USB device found, idVendor=0499, idProduct=1013, bcdDevice=52.67
[  362.543914][ T4591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.552079][ T4591] usb 2-1: Product: syz
[  362.556393][ T4591] usb 2-1: Manufacturer: syz
[  362.561121][ T4591] usb 2-1: SerialNumber: syz
[  362.590403][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.597717][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.605084][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.612220][    T9] usb 5-1: device descriptor read/8, error -32
[  362.728830][    T9] raw-gadget.1 gadget.4: failed to queue suspend event
[  362.735936][ T1608] usb 5-1: USB disconnect, device number 64
[  362.752063][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  362.786212][T12884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.790061][ T4591] snd-usb-audio 2-1:4.62: probe with driver snd-usb-audio failed with error -2
[  362.794939][T12884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.813038][ T4591] usb 2-1: USB disconnect, device number 26
[  362.814070][ T6957] usb 1-1: new full-speed USB device number 98 using dummy_hcd
[  362.830405][ T5355] udevd[5355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.62/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  362.835575][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  362.910024][ T1608] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  362.917927][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.925405][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.932692][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  362.939799][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  363.007290][ T6957] usb 1-1: not running at top speed; connect to a high speed hub
[  363.015890][ T6957] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  363.028923][ T6957] usb 1-1: config 1 interface 0 has no altsetting 0
[  363.035628][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  363.044038][ T6957] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40
[  363.053298][ T6957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.061341][ T6957] usb 1-1: Product: syz
[  363.065571][ T6957] usb 1-1: Manufacturer: syz
[  363.070221][ T6957] usb 1-1: SerialNumber: syz
[  363.075970][T12880] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  363.101887][ T1608] usb 5-1: device descriptor read/64, error -32
[  363.219550][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.226874][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.234320][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.241586][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  363.315098][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  363.379035][ T1608] usb 5-1: device descriptor read/64, error -32
[  363.420218][   T36] audit: type=1400 audit(1758870564.158:8416): avc:  denied  { accept } for  pid=12894 comm="syz.1.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  363.459241][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.467949][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.496252][ T1608] raw-gadget.1 gadget.4: failed to queue suspend event
[  363.503398][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  363.507542][T12901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12901 comm=syz.1.4046
[  363.524008][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.533163][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.581530][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  363.607926][T12907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4048'.
[  363.645499][ T1608] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  363.649746][T12909] fuse: Unknown parameter '0x0000000000000004'
[  363.653469][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.666691][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.674627][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.682073][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  363.762757][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  363.826663][ T1608] usb 5-1: device descriptor read/64, error -32
[  363.944117][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.951454][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.958740][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  363.966869][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  364.039853][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  364.103806][ T1608] usb 5-1: device descriptor read/64, error -32
[  364.221038][ T1608] raw-gadget.1 gadget.4: failed to queue suspend event
[  364.241094][ T1608] usb usb5-port1: attempt power cycle
[  364.248031][ T1608] raw-gadget.1 gadget.4: failed to queue disconnect event
[  364.256626][   T36] audit: type=1400 audit(1758870564.955:8417): avc:  denied  { lock } for  pid=12940 comm="syz.4.4061" path="socket:[74238]" dev="sockfs" ino=74238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  364.259361][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  364.359591][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  364.366603][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  364.533422][T12960] overlayfs: failed to clone upperpath
[  364.594146][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  364.597556][T12967] can0: slcan on ttyS3.
[  364.609700][T12967] rust_binder: Error while translating object.
[  364.609741][T12967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  364.626102][T12967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270
[  364.668757][ T1608] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  364.670174][T12965] can0 (unregistered): slcan off ttyS3.
[  364.711609][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.719003][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.726433][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.733663][ T1608] usb 5-1: device descriptor read/8, error -32
[  364.775477][T12985] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  364.832422][T12993] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  364.871355][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.892718][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.904749][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  364.911984][ T1608] usb 5-1: device descriptor read/8, error -32
[  365.031099][ T1608] raw-gadget.1 gadget.4: failed to queue suspend event
[  365.052418][ T1608] raw-gadget.1 gadget.4: failed to queue reset event
[  365.070096][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.080763][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.092730][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.103038][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.113750][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.126768][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.148379][ T1608] raw-gadget.1 gadget.4: failed to queue resume event
[  365.223046][ T1608] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  365.255079][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.262721][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.270382][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.277783][ T1608] usb 5-1: device descriptor read/8, error -32
[  365.307313][T13046] overlayfs: failed to clone lowerpath
[  365.370749][T13046] devpts: called with bogus options
[  365.414937][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.431008][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.438694][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  365.445889][ T1608] usb 5-1: device descriptor read/8, error -32
[  365.575374][ T1608] raw-gadget.1 gadget.4: failed to queue suspend event
[  365.582423][ T1608] usb usb5-port1: unable to enumerate USB device
[  365.840127][ T6957] usbhid 1-1:1.0: can't add hid device: -71
[  365.853664][ T6957] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  365.882889][ T6957] usb 1-1: USB disconnect, device number 98
[  365.888378][T13079] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4097'.
[  365.902040][T13079] gretap0: entered promiscuous mode
[  365.915532][T13079] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4097'.
[  365.924826][T13079] 0��{X��: renamed from gretap0
[  365.930722][T13079] 0��{X��: left promiscuous mode
[  365.935841][T13079] 0��{X��: entered allmulticast mode
[  365.940038][T13084] netfs: Couldn't get user pages (rc=-14)
[  365.942250][T13079] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  365.976438][T13090] overlayfs: overlapping lowerdir path
[  366.243832][T13122] veth1: entered allmulticast mode
[  366.285459][T13130] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  366.285554][T13130] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  366.293216][T13131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  366.300028][T13131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306
[  366.310229][T13134] fuse: Unknown parameter 'f��0x0000000000000004'
[  366.311453][T13136] overlayfs: failed to clone lowerpath
[  366.334180][T13134] veth1: left allmulticast mode
[  366.431500][T13160] netlink: 'syz.1.4123': attribute type 4 has an invalid length.
[  366.441371][T13160] netlink: 'syz.1.4123': attribute type 5 has an invalid length.
[  366.450245][T13160] netlink: 'syz.1.4123': attribute type 1 has an invalid length.
[  366.475581][T13167] 9pnet_fd: Insufficient options for proto=fd
[  366.574443][T13171] rust_binder: Failed copying remainder into alloc: EFAULT
[  366.574465][T13171] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  366.581884][T13171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  366.591102][T13171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:326
[  367.078764][T13192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=13192 comm=syz.5.4136
[  367.117391][T13194] 9pnet: Could not find request transport: f�
[  367.153202][T13200] __vm_enough_memory: pid: 13200, comm: syz.0.4139, bytes: 18014402804453376 not enough memory for the allocation
[  367.222885][T13215] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  367.225622][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  367.225643][   T36] audit: type=1400 audit(1758870567.732:8419): avc:  denied  { create } for  pid=13216 comm="syz.5.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  367.441677][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.450900][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.678670][T13240] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  367.678701][T13240] rust_binder: Read failure Err(EFAULT) in pid:615
[  367.710917][T13247] rust_binder: Error while translating object.
[  367.717652][T13247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  367.723912][T13247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342
[  367.849459][T13261] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  367.902928][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'.
[  367.936127][T13277] rust_binder: Failed copying remainder into alloc: EFAULT
[  367.936151][T13277] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  367.943564][T13277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  367.951904][T13277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:360
[  368.105533][T13284] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  368.159969][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.170753][T13296] netlink: 'syz.5.4174': attribute type 1 has an invalid length.
[  368.177197][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.222299][T13303] rust_binder: Error while translating object.
[  368.222347][T13303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  368.228867][T13303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:632
[  368.505345][T13326] fuse: Unknown parameter '��������0x0000000000000007'
[  368.509509][T13325] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4183'.
[  368.531203][T13325] gretap0: entered promiscuous mode
[  368.938484][T13345] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4188'.
[  368.948437][   T36] audit: type=1400 audit(1758870569.355:8420): avc:  denied  { relabelfrom } for  pid=13343 comm="syz.4.4188" name="NETLINK" dev="sockfs" ino=77101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  368.973036][   T36] audit: type=1400 audit(1758870569.355:8421): avc:  denied  { relabelto } for  pid=13343 comm="syz.4.4188" name="NETLINK" dev="sockfs" ino=77101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  368.995849][ T4591] hid-generic 007F:6E8D:0005.001D: item fetching failed at offset 1/5
[  369.006678][ T4591] hid-generic 007F:6E8D:0005.001D: probe with driver hid-generic failed with error -22
[  369.070075][T13353] __vm_enough_memory: pid: 13353, comm: syz.1.4190, bytes: 18014402804453376 not enough memory for the allocation
[  369.083370][T13353] __vm_enough_memory: pid: 13353, comm: syz.1.4190, bytes: 18014402804453376 not enough memory for the allocation
[  369.196318][T13363] rust_binder: Error while translating object.
[  369.196372][T13363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  369.202870][T13363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383
[  369.251100][T13370] rust_binder: Error while translating object.
[  369.260494][T13370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  369.267800][T13370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:390
[  369.345821][   T36] audit: type=1326 audit(1758870569.721:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.0.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaab8eec9 code=0x7fc00000
[  369.388155][T13383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:652
[  369.416862][T13384] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4198'.
[  369.494624][   T36] audit: type=1326 audit(1758870569.862:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.0.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaab8eec9 code=0x7fc00000
[  369.501691][T13397] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  369.524359][T13397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  369.533195][T13397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:399
[  369.556155][   T36] audit: type=1326 audit(1758870569.918:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.0.4205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9eaab8eec9 code=0x0
[  369.646514][   T36] audit: type=1400 audit(1758870570.003:8425): avc:  denied  { map } for  pid=13407 comm="syz.0.4207" path="socket:[78145]" dev="sockfs" ino=78145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  369.763394][T13414] rust_binder: inc_ref_done called when no active inc_refs
[  369.763426][T13414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  369.780858][T13414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406
[  369.874025][T13423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13423 comm=syz.1.4212
[  369.896187][T13423] binder: Unknown parameter 'defcontext01777777777777777777777'
[  369.986703][T13425] 9pnet_fd: Insufficient options for proto=fd
[  370.342290][T13439] overlayfs: failed to clone upperpath
[  370.367071][T13441] 9pnet_fd: Insufficient options for proto=fd
[  370.390118][T13443] netlink: 'syz.5.4219': attribute type 13 has an invalid length.
[  370.774111][T13448] rust_binder: Error while translating object.
[  370.774162][T13448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  370.781124][T13448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:669
[  370.809424][T13450] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  370.950493][T13454] __vm_enough_memory: pid: 13454, comm: syz.0.4224, bytes: 18014402804453376 not enough memory for the allocation
[  371.390816][T13468] overlayfs: failed to clone upperpath
[  371.416548][T13468] overlayfs: failed to clone upperpath
[  371.435902][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4228'.
[  371.465496][T13468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13468 comm=syz.5.4228
[  371.544051][T13470] veth1_macvtap: left promiscuous mode
[  371.549597][T13470] macsec0: entered promiscuous mode
[  371.586761][T13470] veth1_macvtap: entered promiscuous mode
[  371.592696][T13470] macsec0: left promiscuous mode
[  371.722596][T13478] rust_binder: Failed copying remainder into alloc: EFAULT
[  371.722629][T13478] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  371.764179][T13478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  371.793852][T13478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:686
[  371.958688][T13494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4240'.
[  372.109287][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4241'.
[  372.119349][T13499] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  372.119438][T13499] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  372.145311][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.175881][T13508] fuse: Unknown parameter ''
[  372.180924][T13509] 9pnet_fd: Insufficient options for proto=fd
[  372.183304][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.280401][T13517] rust_binder: Write failure EINVAL in pid:705
[  372.628833][   T36] audit: type=1326 audit(1758870586.804:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.4257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f001a98eec9 code=0x0
[  372.705355][ T4591] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  372.708083][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4260'.
[  372.810221][   T36] audit: type=1400 audit(1758870586.973:8427): avc:  denied  { setattr } for  pid=13564 comm="syz.4.4262" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  372.811083][T13570] overlayfs: conflicting options: userxattr,redirect_dir=on
[  372.867453][ T4591] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[  372.878662][ T4591] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.890257][ T4591] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.900414][ T4591] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[  372.913896][ T4591] usb 2-1: config 0 interface 0 has no altsetting 0
[  372.920725][ T4591] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  372.930035][ T4591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.939341][ T4591] usb 2-1: config 0 descriptor??
[  373.410629][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.419269][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.429640][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.439425][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.492174][T13592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4274'.
[  373.590618][ T4591] usb 2-1: string descriptor 0 read error: -71
[  373.597047][ T4591] uclogic 0003:5543:004D.001E: failed retrieving string descriptor #200: -71
[  373.606045][ T4591] uclogic 0003:5543:004D.001E: failed retrieving pen parameters: -71
[  373.614204][ T4591] uclogic 0003:5543:004D.001E: failed probing pen v2 parameters: -71
[  373.622354][ T4591] uclogic 0003:5543:004D.001E: failed probing parameters: -71
[  373.629853][ T4591] uclogic 0003:5543:004D.001E: probe with driver uclogic failed with error -71
[  373.640105][ T4591] usb 2-1: USB disconnect, device number 27
[  374.089158][T13599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.097867][T13599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.272263][T13624] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[  374.865245][T13633] sit0: entered promiscuous mode
[  374.885920][T13633] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4289'.
[  375.590302][ T6701] Bluetooth: hci0: Frame reassembly failed (-84)
[  375.862405][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.880551][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.906952][ T6701] Bluetooth: hci1: Frame reassembly failed (-84)
[  375.923185][T13674] input: syz1 as /devices/virtual/input/input37
[  376.185706][   T36] audit: type=1400 audit(1758870590.144:8428): avc:  denied  { map } for  pid=13675 comm="syz.1.4304" path="socket:[79887]" dev="sockfs" ino=79887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  376.333743][T13680] netlink: 'syz.5.4306': attribute type 27 has an invalid length.
[  376.343321][T13680] 0��{X��: left allmulticast mode
[  376.360047][ T6702] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  376.367770][ T6702] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  376.382716][   T62] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  376.389881][T13684] 9pnet_fd: p9_fd_create_tcp (13684): problem connecting socket to 127.0.0.1
[  376.468030][ T6957] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  376.521281][   T62] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  376.627749][ T6957] usb 2-1: Using ep0 maxpacket: 8
[  376.640037][ T6957] usb 2-1: config 1 has an invalid interface number: 69 but max is 2
[  376.648262][ T6957] usb 2-1: config 1 has an invalid interface number: 146 but max is 2
[  376.659477][ T6957] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  376.668812][ T6957] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  376.677770][ T6957] usb 2-1: config 1 has an invalid interface number: 53 but max is 2
[  376.687409][ T6957] usb 2-1: config 1 has no interface number 0
[  376.693722][ T6957] usb 2-1: config 1 has no interface number 1
[  376.699826][ T6957] usb 2-1: config 1 has no interface number 2
[  376.708233][ T6957] usb 2-1: config 1 interface 69 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  376.719499][ T6957] usb 2-1: config 1 interface 69 altsetting 15 endpoint 0x5 has invalid maxpacket 2015, setting to 64
[  376.730900][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.742811][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.754300][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.765442][ T6957] usb 2-1: config 1 interface 146 altsetting 7 bulk endpoint 0xE has invalid maxpacket 8
[  376.775543][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.786802][ T6957] usb 2-1: config 1 interface 146 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 64
[  376.796997][ T6957] usb 2-1: config 1 interface 146 altsetting 7 bulk endpoint 0xB has invalid maxpacket 64
[  376.807228][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an endpoint descriptor with address 0xA1, changing to 0x81
[  376.819200][ T6957] usb 2-1: config 1 interface 146 altsetting 7 endpoint 0x81 has invalid maxpacket 56564, setting to 1024
[  376.830808][ T6957] usb 2-1: config 1 interface 146 altsetting 7 bulk endpoint 0x81 has invalid maxpacket 1024
[  376.841079][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  376.851891][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  376.862697][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  376.873504][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.884593][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.895552][ T6957] usb 2-1: config 1 interface 146 altsetting 7 has 17 endpoint descriptors, different from the interface descriptor's value: 16
[  376.904143][T13692] fuseblk: Bad value for 'group_id'
[  376.909220][ T6957] usb 2-1: config 1 interface 53 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  376.914934][T13692] fuseblk: Bad value for 'group_id'
[  376.925230][ T6957] usb 2-1: config 1 interface 69 has no altsetting 0
[  376.930666][ T6702] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  376.937353][ T6957] usb 2-1: config 1 interface 146 has no altsetting 0
[  376.951582][ T6957] usb 2-1: config 1 interface 53 has no altsetting 0
[  376.955565][ T6702] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  376.960090][ T6957] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a37, bcdDevice=f9.ac
[  376.966290][ T4589] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  376.979489][ T6957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.990912][ T6957] usb 2-1: Product: 業ꈑ⴬ꢁﲀ뽻瞾뎲듮኉蔔䦐빜⅑꾂쭶墩䖯挲躮驌﮳坄汭㛆민醓ప᭷ຩ㋈䑌㩔ꗖㆇ훗淌洏ḛ㨰婹뻺振━닫⼉ꞔ
[  377.008126][ T6957] usb 2-1: Manufacturer: ѕ
[  377.012738][ T6957] usb 2-1: SerialNumber: ఊ
[  377.119061][T13693] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4310'.
[  377.128840][T13693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.128924][ T4589] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  377.161070][ T4589] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  377.232972][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.241702][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.259760][ T6957] usb 2-1: USB disconnect, device number 28
[  377.757583][ T1144] Bluetooth: hci0: command 0x1003 tx timeout
[  377.757746][ T7991] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  377.797502][T13700] rust_binder: Error while translating object.
[  377.797545][T13700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  377.803939][T13700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:722
[  377.823360][T13702] 9pnet_fd: p9_fd_create_tcp (13702): problem binding to privport
[  377.894102][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'.
[  377.928404][ T4589] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  378.088025][ T4591] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  378.098879][   T54] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  378.098907][ T7991] Bluetooth: hci1: command 0x1003 tx timeout
[  378.226590][ T6957] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  378.247911][ T4591] usb 2-1: Using ep0 maxpacket: 8
[  378.254090][ T4591] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  378.262586][ T4591] usb 2-1: config 250 has an invalid interface number: 0 but max is -1
[  378.270910][ T4591] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  378.281308][ T4591] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  378.291404][ T4591] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  378.300461][ T4591] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  378.308769][ T4591] usb 2-1: Product: syz
[  378.312961][ T4591] usb 2-1: SerialNumber: syz
[  378.319360][ T4591] hub 2-1:250.0: bad descriptor, ignoring hub
[  378.325543][ T4591] hub 2-1:250.0: probe with driver hub failed with error -5
[  378.387457][ T6957] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[  378.395864][ T6957] usb 1-1: config 160 has no interface number 0
[  378.402368][ T6957] usb 1-1: config 160 interface 200 has no altsetting 0
[  378.410824][ T6957] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  378.419968][ T6957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.428638][ T6957] usb 1-1: Product: syz
[  378.432929][ T6957] usb 1-1: Manufacturer: syz
[  378.437551][ T6957] usb 1-1: SerialNumber: syz
[  378.661458][ T6957] usb 1-1: MIDIStreaming interface descriptor not found
[  378.683404][ T6957] usb 1-1: USB disconnect, device number 99
[  378.696791][ T3695] udevd[3695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  378.812952][ T1608] usb 2-1: reset high-speed USB device number 29 using dummy_hcd
[  378.857148][T13755] netlink: 'syz.4.4332': attribute type 16 has an invalid length.
[  378.865013][T13755] netlink: 'syz.4.4332': attribute type 25 has an invalid length.
[  378.873182][T13755] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.4332'.
[  378.883579][T13755] netlink: 'syz.4.4332': attribute type 16 has an invalid length.
[  378.891848][T13755] netlink: 'syz.4.4332': attribute type 25 has an invalid length.
[  378.899768][T13755] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.4332'.
[  378.922808][T13759] 9pnet_fd: Insufficient options for proto=fd
[  378.973427][ T1608] usb 2-1: device firmware changed
[  378.978945][ T1608] usb 2-1: USB disconnect, device number 29
[  379.161849][   T36] audit: type=1400 audit(1758870592.931:8429): avc:  denied  { bind } for  pid=13768 comm="syz.4.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  379.248077][T13773] netlink: 'syz.4.4339': attribute type 4 has an invalid length.
[  379.255913][T13773] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4339'.
[  379.303101][ T1608] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  379.354027][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.363041][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.457137][T13796] incfs: Error accessing: ./file0.
[  379.462334][T13796] incfs: mount failed -20
[  379.467340][ T1608] usb 2-1: Using ep0 maxpacket: 8
[  379.473547][ T1608] usb 2-1: config 0 has no interfaces?
[  379.480373][ T1608] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  379.490095][ T1608] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  379.498774][ T1608] usb 2-1: Product: syz
[  379.503263][ T1608] usb 2-1: SerialNumber: syz
[  379.510304][ T1608] usb 2-1: config 0 descriptor??
[  379.511528][T13806] fuse: Unknown parameter 'f/0x0000000000000003'
[  379.738996][ T4590] usb 2-1: USB disconnect, device number 30
[  380.203403][T13830] netlink: 356 bytes leftover after parsing attributes in process `syz.5.4359'.
[  380.320786][T13851] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4368'.
[  380.362064][T13851] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.539541][ T1608] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  380.574560][T13870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=13870 comm=syz.5.4375
[  380.669760][T13881] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4379'.
[  380.678964][T13881] gretap0: entered promiscuous mode
[  380.684522][T13881] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4379'.
[  380.688739][ T1608] usb 2-1: device descriptor read/64, error -71
[  380.693990][T13881] 0��{X��: renamed from gretap0
[  380.705573][T13881] 0��{X��: left promiscuous mode
[  380.710743][T13881] 0��{X��: entered allmulticast mode
[  380.716533][T13881] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  380.842623][   T36] audit: type=1400 audit(1758870594.507:8430): avc:  denied  { mount } for  pid=13885 comm="syz.0.4381" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  380.845164][T13886] netlink: 'syz.0.4381': attribute type 63 has an invalid length.
[  380.873340][T13886] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4381'.
[  380.955222][ T1608] usb 2-1: device descriptor read/64, error -71
[  381.221663][ T1608] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  381.360226][ T1608] usb 2-1: device descriptor read/64, error -71
[  381.616559][ T1608] usb 2-1: device descriptor read/64, error -71
[  381.647782][   T36] audit: type=1400 audit(1758870595.257:8431): avc:  denied  { mounton } for  pid=13907 comm="syz.5.4388" path="/file0" dev="rootfs" ino=16215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  381.733354][ T1608] usb usb2-port1: attempt power cycle
[  381.912176][   T36] audit: type=1326 audit(1758870595.511:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  381.937019][   T36] audit: type=1326 audit(1758870595.511:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  381.960578][   T36] audit: type=1326 audit(1758870595.511:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  381.984131][   T36] audit: type=1326 audit(1758870595.511:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  382.007724][   T36] audit: type=1326 audit(1758870595.511:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  382.031233][   T36] audit: type=1326 audit(1758870595.511:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  382.054831][   T36] audit: type=1326 audit(1758870595.511:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13899 comm="syz.4.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  382.122600][T13935] loop7: detected capacity change from 0 to 7
[  382.129241][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.138455][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.146504][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.146529][ T1608] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  382.155717][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.171310][T13935]  loop7: unable to read partition table
[  382.177430][T13935] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  382.178984][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.192742][ T1608] usb 2-1: device descriptor read/8, error -71
[  382.200127][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.214294][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.223983][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.233154][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.241868][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.251079][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.259435][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.268704][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.276996][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  382.286156][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  382.365016][ T1608] usb 2-1: device descriptor read/8, error -71
[  382.427265][T13970] No source specified
[  382.614844][T14000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.623331][ T1608] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  382.631089][T14000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.650946][ T1608] usb 2-1: device descriptor read/8, error -71
[  382.789670][ T1608] usb 2-1: device descriptor read/8, error -71
[  382.905828][ T1608] usb usb2-port1: unable to enumerate USB device
[  383.108936][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16490 sclass=netlink_route_socket pid=14006 comm=syz.0.4420
[  383.593530][T14024] overlayfs: missing 'workdir'
[  383.599090][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.607573][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.027016][T14058] overlayfs: failed to clone lowerpath
[  384.034898][T14058] overlayfs: failed to clone upperpath
[  384.061102][T14061] rust_binder: inc_ref_done called when no active inc_refs
[  384.061130][T14061] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967295
[  384.076526][T14061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463
[  384.102360][T14066] rust_binder: Write failure EFAULT in pid:468
[  384.123212][T14068] rust_binder: 470: no such ref 2
[  384.171068][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.180526][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.180566][T14077] syz.5.4448: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  384.203480][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.5.4448 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878
[  384.203521][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  384.203534][T14077] Call Trace:
[  384.203540][T14077]  <TASK>
[  384.203547][T14077]  __dump_stack+0x21/0x30
[  384.203575][T14077]  dump_stack_lvl+0x10c/0x190
[  384.203598][T14077]  ? __cfi_dump_stack_lvl+0x10/0x10
[  384.203622][T14077]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  384.203644][T14077]  dump_stack+0x19/0x20
[  384.203666][T14077]  warn_alloc+0x1bc/0x2a0
[  384.203688][T14077]  ? stack_depot_save_flags+0x38/0x800
[  384.203708][T14077]  ? __cfi_warn_alloc+0x10/0x10
[  384.203730][T14077]  ? kasan_save_track+0x4f/0x80
[  384.203747][T14077]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  384.203764][T14077]  ? xskq_create+0x68/0x2a0
[  384.203786][T14077]  ? xsk_init_queue+0xb6/0x120
[  384.203808][T14077]  ? xsk_setsockopt+0x43f/0x6f0
[  384.203828][T14077]  ? do_sock_setsockopt+0x26d/0x400
[  384.203851][T14077]  ? __x64_sys_setsockopt+0x1b8/0x250
[  384.203873][T14077]  ? x64_sys_call+0x2adc/0x2ee0
[  384.203898][T14077]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  384.203925][T14077]  __vmalloc_node_range_noprof+0x135/0x1420
[  384.203955][T14077]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  384.203980][T14077]  ? avc_has_perm+0x144/0x220
[  384.204003][T14077]  ? kasan_save_alloc_info+0x40/0x50
[  384.204027][T14077]  ? __kasan_kmalloc+0x96/0xb0
[  384.204047][T14077]  vmalloc_user_noprof+0x77/0x90
[  384.204071][T14077]  ? xskq_create+0xdb/0x2a0
[  384.204092][T14077]  xskq_create+0xdb/0x2a0
[  384.204115][T14077]  xsk_init_queue+0xb6/0x120
[  384.204137][T14077]  xsk_setsockopt+0x43f/0x6f0
[  384.204159][T14077]  ? __cfi_xsk_setsockopt+0x10/0x10
[  384.204181][T14077]  ? do_futex+0x309/0x500
[  384.204199][T14077]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  384.204221][T14077]  ? security_socket_setsockopt+0x33/0xd0
[  384.204237][T14077]  ? __cfi_xsk_setsockopt+0x10/0x10
[  384.204259][T14077]  do_sock_setsockopt+0x26d/0x400
[  384.204281][T14077]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  384.204306][T14077]  __x64_sys_setsockopt+0x1b8/0x250
[  384.204338][T14077]  x64_sys_call+0x2adc/0x2ee0
[  384.204363][T14077]  do_syscall_64+0x58/0xf0
[  384.204383][T14077]  ? clear_bhb_loop+0x50/0xa0
[  384.204399][T14077]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  384.204424][T14077] RIP: 0033:0x7f001a98eec9
[  384.204438][T14077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.204453][T14077] RSP: 002b:00007f001b8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  384.204472][T14077] RAX: ffffffffffffffda RBX: 00007f001abe5fa0 RCX: 00007f001a98eec9
[  384.204485][T14077] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  384.204496][T14077] RBP: 00007f001aa11f91 R08: 0000000000000004 R09: 0000000000000000
[  384.204508][T14077] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.204519][T14077] R13: 00007f001abe6038 R14: 00007f001abe5fa0 R15: 00007ffe0cfb9588
[  384.204534][T14077]  </TASK>
[  384.204541][T14077] Mem-Info:
[  384.508709][T14077] active_anon:30521 inactive_anon:7 isolated_anon:0
[  384.508709][T14077]  active_file:21874 inactive_file:2716 isolated_file:0
[  384.508709][T14077]  unevictable:16393 dirty:78 writeback:0
[  384.508709][T14077]  slab_reclaimable:6657 slab_unreclaimable:77292
[  384.508709][T14077]  mapped:26889 shmem:22412 pagetables:1281
[  384.508709][T14077]  sec_pagetables:0 bounce:0
[  384.508709][T14077]  kernel_misc_reclaimable:0
[  384.508709][T14077]  free:1470806 free_pcp:2214 free_cma:0
[  384.554389][T14077] Node 0 active_anon:122084kB inactive_anon:28kB active_file:87496kB inactive_file:10864kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:107556kB dirty:312kB writeback:0kB shmem:89648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:9248kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no
[  384.587262][T14077] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB
[  384.617716][T14077] lowmem_reserve[]: 0 3921 3921
[  384.623064][T14077] Normal free:2922136kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:121984kB inactive_anon:28kB active_file:87496kB inactive_file:10864kB unevictable:65572kB writepending:312kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3688kB local_pcp:2196kB free_cma:0kB
[  384.654948][T14077] lowmem_reserve[]: 0 0 0
[  384.658602][T14095] 9pnet_fd: Insufficient options for proto=fd
[  384.659421][T14077] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  384.681768][T14077] Normal: 1276*4kB (UME) 1969*8kB (UME) 2236*16kB (UME) 671*32kB (UME) 864*64kB (UME) 231*128kB (UME) 74*256kB (UME) 53*512kB (UME) 35*1024kB (UME) 21*2048kB (UME) 643*4096kB (UME) = 2921624kB
[  384.701287][T14077] 63399 total pagecache pages
[  384.706027][T14077] 7 pages in swap cache
[  384.710344][T14077] Free swap  = 124320kB
[  384.714525][T14077] Total swap = 124996kB
[  384.719011][T14077] 2097051 pages RAM
[  384.723004][T14077] 0 pages HighMem/MovableOnly
[  384.727708][T14077] 351537 pages reserved
[  384.731999][T14077] 0 pages cma reserved
[  384.739119][T14077] Memory allocations:
[  384.743346][T14077]          0 B        0 init/main.c:1370 func:do_initcalls
[  384.750915][T14077]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  384.759185][T14077]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  384.767023][T14077]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  384.775027][T14077]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  384.783031][T14077]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  384.791674][T14077]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  384.799625][T14077]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  384.807642][T14077]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  384.815625][T14077]          0 B        0 init/initramfs.c:101 func:find_link
[  385.145850][T14143] rust_binder: Write failure EFAULT in pid:476
[  385.303515][T14163] __vm_enough_memory: pid: 14163, comm: syz.4.4476, bytes: 18014402804453376 not enough memory for the allocation
[  385.322049][T14165] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  385.335120][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.351858][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.457366][T14174] overlayfs: failed to resolve './file1': -2
[  386.233322][T14209] netlink: 'syz.1.4494': attribute type 4 has an invalid length.
[  386.233527][T14202] overlayfs: failed to clone lowerpath
[  386.241241][T14209] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4494'.
[  386.257931][T14202] overlayfs: failed to clone upperpath
[  386.749644][T14219] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4498'.
[  386.758849][T14220] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4498'.
[  387.087590][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  387.097089][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  387.106816][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  387.117053][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  387.126701][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  387.137843][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  387.147736][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  387.157775][T14247] binder: Bad value for 'stats'
[  387.163272][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  387.173854][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  387.183452][T14243] kvm: kvm [14242]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  387.231770][T14255] binder: Bad value for 'stats'
[  387.238053][T14257] overlayfs: missing 'lowerdir'
[  387.265720][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'.
[  387.274835][T14260] bridge_slave_1: left allmulticast mode
[  387.280771][T14260] bridge_slave_1: left promiscuous mode
[  387.286731][T14260] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.294816][T14260] bridge_slave_0: left allmulticast mode
[  387.301171][T14260] bridge_slave_0: left promiscuous mode
[  387.306887][T14260] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.331183][ T6701] Bluetooth: hci0: Frame reassembly failed (-84)
[  387.421932][   T36] kauditd_printk_skb: 65 callbacks suppressed
[  387.421954][   T36] audit: type=1400 audit(1758870600.680:8504): avc:  denied  { lock } for  pid=14268 comm="syz.0.4516" path="socket:[79870]" dev="sockfs" ino=79870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  387.458187][   T36] audit: type=1400 audit(1758870600.718:8505): avc:  denied  { setattr } for  pid=14270 comm="syz.0.4517" name="" dev="pipefs" ino=81923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  387.507549][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'.
[  387.517924][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'.
[  387.555124][   T36] audit: type=1400 audit(1758870600.812:8506): avc:  denied  { execute } for  pid=14280 comm="syz.0.4520" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  387.561800][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4520'.
[  387.635376][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.644716][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.185045][T14305] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4528'.
[  388.223313][   T36] audit: type=1326 audit(1758870601.431:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14311 comm="syz.4.4530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x0
[  388.248113][T14316] 9pnet_fd: Insufficient options for proto=fd
[  388.331137][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  388.331169][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  388.362670][T14322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.371331][T14322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.524858][ T7991] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  389.524868][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  389.835589][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.844758][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.166717][T14379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4555'.
[  390.388249][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  390.617646][T14412] kvm: kvm [14411]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d)
[  390.821882][   T36] audit: type=1400 audit(1758870603.870:8508): avc:  denied  { accept } for  pid=14420 comm="syz.4.4573" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  390.899684][T14433] Invalid ELF header magic: != ELF
[  390.900598][   T36] audit: type=1400 audit(1758870603.945:8509): avc:  denied  { module_load } for  pid=14432 comm="syz.5.4578" path="/bus" dev="ramfs" ino=82101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1
[  391.488044][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4582'.
[  391.553539][T14444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.564184][T14444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.965636][   T62] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  392.041164][T14475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  392.050606][T14476] 9pnet_fd: Insufficient options for proto=fd
[  392.073116][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.081690][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.090259][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.098780][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.106617][   T62] usb 2-1: device descriptor read/64, error -71
[  392.113451][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.122131][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.130266][T14468] __vm_enough_memory: pid: 14468, comm: syz.4.4591, bytes: 18014402804453376 not enough memory for the allocation
[  392.360003][   T62] usb 2-1: device descriptor read/64, error -71
[  392.615804][   T62] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  392.704988][T14502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.720449][T14502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.754364][   T62] usb 2-1: device descriptor read/64, error -71
[  392.765014][   T36] audit: type=1326 audit(1758870605.690:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14499 comm="syz.0.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaab8eec9 code=0x7fc00000
[  392.808549][   T36] audit: type=1326 audit(1758870605.690:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14499 comm="syz.0.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eaab8eec9 code=0x7fc00000
[  392.963937][T14514] overlayfs: failed to resolve './file0': -2
[  393.001875][T14516] random: crng reseeded on system resumption
[  393.031481][   T62] usb 2-1: device descriptor read/64, error -71
[  393.059527][T14516] Restarting kernel threads ... done.
[  393.159587][   T62] usb usb2-port1: attempt power cycle
[  393.333186][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.341810][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.521831][   T62] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  393.544288][   T62] usb 2-1: device descriptor read/8, error -71
[  393.683268][   T62] usb 2-1: device descriptor read/8, error -71
[  393.887773][T14540] overlayfs: failed to clone upperpath
[  393.940005][   T62] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  393.960716][   T62] usb 2-1: device descriptor read/8, error -71
[  393.996471][T14555] netlink: 'syz.5.4619': attribute type 12 has an invalid length.
[  394.099745][   T62] usb 2-1: device descriptor read/8, error -71
[  394.121003][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.130261][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.225403][   T62] usb usb2-port1: unable to enumerate USB device
[  394.418941][T14591] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.426094][T14591] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.434104][T14591] bridge_slave_0: entered allmulticast mode
[  394.441171][T14591] bridge_slave_0: entered promiscuous mode
[  394.443072][ T1608] usb 6-1: USB disconnect, device number 2
[  394.684467][T14591] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.691726][T14591] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.699148][T14591] bridge_slave_1: entered allmulticast mode
[  394.709181][T14591] bridge_slave_1: entered promiscuous mode
[  394.784402][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.805501][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.820490][T14622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.821266][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.832237][T14622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.838337][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.852706][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.860844][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.868915][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.868950][ T6701] tipc: Left network mode
[  394.877102][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.889053][T14612] netlink: 'syz.0.4641': attribute type 1 has an invalid length.
[  394.903554][ T6701] veth1_macvtap: left promiscuous mode
[  394.949808][T14633] fuse: Bad value for 'fd'
[  394.956860][T14633] overlay: ./file0 is not a directory
[  394.991466][T14637] syzkaller1: entered allmulticast mode
[  395.055413][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.062627][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.089537][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.096630][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.117451][T14591] veth0_vlan: entered promiscuous mode
[  395.129820][T14591] veth1_macvtap: entered promiscuous mode
[  395.161018][T14649] rust_binder: inc_ref_done called when no active inc_refs
[  395.161046][T14649] rust_binder: Write failure EINVAL in pid:524
[  395.169056][T14649] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  395.198710][T14654] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  395.205902][T14654] rust_binder: Read failure Err(EFAULT) in pid:2
[  395.244481][   T36] audit: type=1400 audit(1758874960.019:8512): avc:  denied  { create } for  pid=14663 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  395.290745][T14670] rust_binder: Write failure EFAULT in pid:542
[  395.396109][T14679] __vm_enough_memory: pid: 14679, comm: syz.5.4657, bytes: 18014402804453376 not enough memory for the allocation
[  395.557630][ T4590] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  395.685526][ T1608] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  395.729331][ T4590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  395.740463][ T4590] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  395.753722][ T4590] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  395.762833][ T4590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.771802][ T4590] usb 2-1: config 0 descriptor??
[  395.777082][T14673] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  395.785122][ T4590] usbhid 2-1:0.0: can't add hid device: -22
[  395.791086][ T4590] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  395.860227][ T1608] usb 6-1: unable to read config index 0 descriptor/start: -71
[  395.867962][ T1608] usb 6-1: can't read configurations, error -71
[  396.000433][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.009793][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.025965][ T4590] usb 2-1: USB disconnect, device number 39
[  396.214442][T14709] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4667'.
[  396.224989][T14709] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  396.278780][T14724] input: syz0 as /devices/virtual/input/input39
[  396.320367][T14728] /dev/loop0: Can't lookup blockdev
[  396.387488][   T36] audit: type=1400 audit(1758874961.089:8513): avc:  denied  { execute } for  pid=14736 comm="syz.0.4676" path="/memory.events.local" dev="ramfs" ino=82734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  396.411335][ T4590] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  396.467416][T14743] 9pnet_fd: Insufficient options for proto=fd
[  396.575362][ T4590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.590561][ T4590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.600653][ T4590] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  396.610683][ T4590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.619675][ T4590] usb 2-1: config 0 descriptor??
[  396.752439][ T1608] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  396.912413][ T1608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.923436][ T1608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.933264][ T1608] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  396.942509][ T1608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.951678][ T1608] usb 6-1: config 0 descriptor??
[  397.037876][   T36] audit: type=1400 audit(1758874961.699:8514): avc:  denied  { create } for  pid=14778 comm="syz.4.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  397.062391][ T4590] logitech 0003:046D:C29C.001F: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0
[  397.177863][ T1608] logitech 0003:046D:C29C.0020: hidraw1: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  397.203258][ T1608] logitech 0003:046D:C29C.0020: no inputs found
[  397.230436][ T1608] usb 6-1: USB disconnect, device number 4
[  397.239128][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4697'.
[  397.247330][T14790] fido_id[14790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  397.249498][T14794] rust_binder: Write failure EFAULT in pid:16
[  397.310548][   T36] audit: type=1400 audit(1758874961.961:8515): avc:  denied  { audit_read } for  pid=14803 comm="syz.5.4703" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  397.351480][T14804] rust_binder: Error in use_page_slow: ESRCH
[  397.351500][T14804] rust_binder: use_range failure ESRCH
[  397.357821][T14804] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  397.364086][T14804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  397.372841][T14804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:18
[  397.382551][T14804] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  397.392368][T14804] rust_binder: Read failure Err(EFAULT) in pid:18
[  397.490047][T14707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550
[  397.497520][ T4590] logitech 0003:046D:C29C.001F: no inputs found
[  397.525853][ T4590] usb 2-1: USB disconnect, device number 40
[  397.755942][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4722'.
[  398.041178][ T4590] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  398.200975][ T4590] usb 6-1: Using ep0 maxpacket: 8
[  398.207178][ T4590] usb 6-1: config 0 has an invalid interface number: 151 but max is 1
[  398.215425][ T4590] usb 6-1: config 0 has no interface number 1
[  398.221533][ T4590] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  398.232422][ T4590] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  398.244179][ T4590] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  398.255533][ T4590] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  398.265902][ T4590] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  398.279085][ T4590] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  398.290612][ T4590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  398.301544][ T4590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  398.317219][ T4590] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  398.326349][ T4590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.334519][ T4590] usb 6-1: Product: syz
[  398.338764][ T4590] usb 6-1: Manufacturer: syz
[  398.343387][ T4590] usb 6-1: SerialNumber: syz
[  398.348583][ T4590] usb 6-1: config 0 descriptor??
[  398.354055][T14861] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  398.414141][ T4591] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  398.574075][ T4591] usb 2-1: Using ep0 maxpacket: 8
[  398.581034][ T4591] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  398.591287][ T4591] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  398.602511][ T4591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  398.611704][ T4591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.619748][ T4591] usb 2-1: Product: syz
[  398.623920][ T4591] usb 2-1: Manufacturer: syz
[  398.628551][ T4591] usb 2-1: SerialNumber: syz
[  398.637247][ T1608] usb 6-1: USB disconnect, device number 5
[  398.703676][T14890] tmpfs: Unknown parameter 'er'
[  399.062669][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.071271][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.091835][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.100515][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.110547][ T4591] cdc_ncm 2-1:1.0: bind() failure
[  399.116710][ T4591] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  399.123589][ T4591] cdc_ncm 2-1:1.1: bind() failure
[  399.129713][ T4591] usb 2-1: USB disconnect, device number 41
[  399.324891][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4739'.
[  399.334227][T14899] bridge_slave_1: left allmulticast mode
[  399.339893][T14899] bridge_slave_1: left promiscuous mode
[  399.345601][T14899] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.353306][T14899] bridge_slave_0: left allmulticast mode
[  399.359032][T14899] bridge_slave_0: left promiscuous mode
[  399.364809][T14899] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.666752][T14902] rust_binder: Write failure EFAULT in pid:560
[  399.678988][T14905] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  399.959655][ T1608] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  400.119528][ T1608] usb 2-1: Using ep0 maxpacket: 8
[  400.125990][ T1608] usb 2-1: unable to get BOS descriptor or descriptor too short
[  400.134506][ T1608] usb 2-1: config 6 has an invalid interface number: 248 but max is 0
[  400.142737][ T1608] usb 2-1: config 6 has no interface number 0
[  400.148880][ T1608] usb 2-1: config 6 interface 248 has no altsetting 0
[  400.157301][ T1608] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  400.166450][ T1608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.174734][ T1608] usb 2-1: Product: syz
[  400.178957][ T1608] usb 2-1: Manufacturer: syz
[  400.183857][ T1608] usb 2-1: SerialNumber: syz
[  400.405573][ T1608] ums-karma 2-1:6.248: USB Mass Storage device detected
[  400.430878][ T1608] usb 2-1: USB disconnect, device number 42
[  400.618338][ T4591] rust_binder: 14928: removing orphan mapping 0:4224
[  400.680471][T14950] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  400.680536][T14951] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  401.116904][T14970] overlayfs: failed to clone upperpath
[  401.195962][T14968] EXT4-fs: dax option not supported
[  401.254369][T14982] fuse: Bad value for 'fd'
[  401.457691][T14991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  401.466734][T14991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  401.475430][ T4590] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  401.492879][T14991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  401.643770][ T4590] usb 2-1: Using ep0 maxpacket: 8
[  401.650453][ T4590] usb 2-1: unable to get BOS descriptor or descriptor too short
[  401.659246][ T4590] usb 2-1: config 6 has an invalid interface number: 248 but max is 0
[  401.667586][ T4590] usb 2-1: config 6 has no interface number 0
[  401.673672][ T4590] usb 2-1: config 6 interface 248 has no altsetting 0
[  401.681999][ T4590] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  401.691124][ T4590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.699153][ T4590] usb 2-1: Product: ꍈ翄Ġ鰓瞔Ὡꉕԥ滳䟖ㆦ苈魐붷瓝尴镬姫¥茖醞嶊豻꟠錂㋃츤␜喴䂞␄핳ꍯ콊ਠ뙛펉겪皔仾셣ꍠ촵ࡿﻫ헓굶찞ᑘᆻ㢷ԇ塻備媊ꌖ롂棂꺁⹨켠䓳梃㳸濼ﾦ쵒ጎ➇꘡齾꟣ₘ擈䣩㘛ხ쯺즄썍簛｠堟城鬌෶럝顭貚旅듡㇈
[  401.731052][ T4590] usb 2-1: Manufacturer: У
[  401.735728][ T4590] usb 2-1: SerialNumber: 㠇捡ڍᖑ盈᎙Ȟ䬫ે䚁䔽ᴄಲ蔀ܵ掺寿Ṿ㦼㥘怶扝ꮐ
[  401.964421][ T4590] ums-karma 2-1:6.248: USB Mass Storage device detected
[  402.029701][ T4590] usb 2-1: USB disconnect, device number 43
[  402.316334][   T36] audit: type=1326 audit(1758874966.662:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="syz.0.4773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eaab8eec9 code=0x0
[  402.370814][T15013] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  402.425457][T15015] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  402.432499][T15016] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  402.470026][T15023] devpts: called with bogus options
[  402.496113][T15025] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  402.678242][T15031] rust_binder: Write failure EFAULT in pid:574
[  402.816285][ T4590] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  402.965428][ T4591] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  402.973149][ T4590] usb 6-1: device descriptor read/64, error -71
[  403.135964][ T4591] usb 2-1: Using ep0 maxpacket: 8
[  403.143254][ T4591] usb 2-1: unable to get BOS descriptor or descriptor too short
[  403.151817][ T4591] usb 2-1: config 6 has an invalid interface number: 232 but max is 0
[  403.160167][ T4591] usb 2-1: config 6 has no interface number 0
[  403.166375][ T4591] usb 2-1: config 6 interface 232 has no altsetting 0
[  403.177105][ T4591] usb 2-1: string descriptor 0 read error: -22
[  403.183440][ T4591] usb 2-1: New USB device found, idVendor=452e, idProduct=a3be, bcdDevice=d4.8d
[  403.192753][ T4591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.204646][ T4591] usb-storage 2-1:6.232: USB Mass Storage device detected
[  403.231906][ T4590] usb 6-1: device descriptor read/64, error -71
[  403.233232][T15048] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4787'.
[  403.498370][ T4590] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  403.658228][ T4590] usb 6-1: device descriptor read/64, error -71
[  403.930181][ T4590] usb 6-1: device descriptor read/64, error -71
[  404.063389][ T4590] usb usb6-port1: attempt power cycle
[  404.108027][T15090] validate_nla: 25 callbacks suppressed
[  404.108053][T15090] netlink: 'syz.0.4797': attribute type 27 has an invalid length.
[  404.136427][T15090] 0��{: left allmulticast mode
[  404.250843][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'.
[  404.425980][ T4590] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  404.458934][ T4590] usb 6-1: device descriptor read/8, error -71
[  404.597709][ T4590] usb 6-1: device descriptor read/8, error -71
[  404.852011][ T4590] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  404.885017][ T4590] usb 6-1: device descriptor read/8, error -71
[  405.023580][ T4590] usb 6-1: device descriptor read/8, error -71
[  405.139843][ T4590] usb usb6-port1: unable to enumerate USB device
[  405.621647][T15106] IPv4: Oversized IP packet from 127.202.26.0
[  405.923107][ T4589] usb 2-1: USB disconnect, device number 44
[  406.025769][T15128] rust_binder: Write failure EFAULT in pid:96
[  406.174835][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4812'.
[  406.194443][ T6715] Bluetooth: hci0: Frame reassembly failed (-84)
[  406.253490][T15137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.262403][ T4589] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  406.368403][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4814'.
[  406.430626][ T4589] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  406.438869][ T4589] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  406.449184][ T4589] usb 2-1: config 8 has no interface number 0
[  406.455348][ T4589] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  406.470169][ T4589] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  406.486164][ T4589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.495446][ T4589] usb 2-1: Product: syz
[  406.499651][ T4589] usb 2-1: Manufacturer: syz
[  406.505253][ T4589] usb 2-1: SerialNumber: syz
[  406.728247][   T36] audit: type=1400 audit(1758874970.799:8517): avc:  denied  { setattr } for  pid=15125 comm="syz.1.4809" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  406.774298][ T4589] usb 2-1: USB disconnect, device number 45
[  407.129201][T15169] 9pnet_fd: Insufficient options for proto=fd
[  407.325845][T15172] __vm_enough_memory: pid: 15172, comm: syz.1.4827, bytes: 18014402804453376 not enough memory for the allocation
[  407.402500][T15175] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  407.459276][   T36] audit: type=1326 audit(1758874971.484:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15155 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x7fc00000
[  407.563949][T15189] cgroup: fork rejected by pids controller in /syz4
[  407.684607][T15225] cgroup: noprefix used incorrectly
[  407.801204][T15233] incfs: Backing dir is not set, filesystem can't be mounted.
[  407.808851][T15233] incfs: mount failed -2
[  407.995533][T15260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15260 comm=syz.1.4834
[  408.008232][T15260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15260 comm=syz.1.4834
[  408.019213][T15262] netlink: 'syz.4.4835': attribute type 4 has an invalid length.
[  408.123422][T15264] KVM: debugfs: duplicate directory 15264-5
[  408.369440][ T7991] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  408.369442][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  408.497293][ T4593] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  408.611964][T15292] x_tables: duplicate entry at hook 2
[  408.659738][ T4593] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  408.669186][ T4593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.677602][ T4593] usb 2-1: Product: syz
[  408.681955][ T4593] usb 2-1: Manufacturer: syz
[  408.686576][ T4593] usb 2-1: SerialNumber: syz
[  408.784733][T15299] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  408.839814][T15303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4847'.
[  408.849137][T15303] sit0: left promiscuous mode
[  408.946693][T15308] fuse: Bad value for 'fd'
[  408.963387][   T36] audit: type=1326 audit(1758874972.891:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15310 comm="syz.5.4849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1ef8eec9 code=0x0
[  408.977841][T15313] overlayfs: failed to clone lowerpath
[  409.008318][T15318] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  409.033808][T15326] fuse: Bad value for 'fd'
[  409.948304][   T36] audit: type=1400 audit(1758874973.820:8520): avc:  denied  { module_load } for  pid=15333 comm="syz.0.4857" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=86452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  410.149376][ T4593] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  410.309304][ T4593] usb 6-1: Using ep0 maxpacket: 8
[  410.315765][ T4593] usb 6-1: unable to get BOS descriptor or descriptor too short
[  410.324240][ T4593] usb 6-1: config 6 has an invalid interface number: 248 but max is 0
[  410.332446][ T4593] usb 6-1: config 6 has no interface number 0
[  410.338708][ T4593] usb 6-1: config 6 interface 248 has no altsetting 0
[  410.347106][ T4593] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  410.356342][ T4593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.364406][ T4593] usb 6-1: Product: syz
[  410.368766][ T4593] usb 6-1: Manufacturer: syz
[  410.373436][ T4593] usb 6-1: SerialNumber: syz
[  410.595027][ T4593] ums-karma 6-1:6.248: USB Mass Storage device detected
[  410.631682][ T4593] usb 6-1: USB disconnect, device number 10
[  410.849782][T15364] fuse: Bad value for 'fd'
[  410.866836][T15366] netlink: 316 bytes leftover after parsing attributes in process `syz.0.4869'.
[  411.144711][ T6715] Bluetooth: hci0: Frame reassembly failed (-84)
[  411.175379][T15398] kvm: pic: non byte read
[  411.179981][T15398] kvm: pic: non byte read
[  411.184756][T15398] kvm: pic: non byte read
[  411.189152][T15398] kvm: pic: non byte read
[  411.193538][T15398] kvm: pic: non byte read
[  411.197970][T15398] kvm: pic: non byte read
[  411.202371][T15398] kvm: pic: non byte read
[  411.206949][T15398] kvm: pic: non byte read
[  411.211351][T15398] kvm: pic: non byte read
[  411.216129][T15398] kvm: pic: non byte read
[  411.447417][ T1608] usb 2-1: USB disconnect, device number 46
[  411.592152][T15422] SELinux: failed to load policy
[  411.759578][   T36] audit: type=1326 audit(1758874975.518:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.4898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0dad8eec9 code=0x0
[  411.992556][T15446] netlink: 'syz.0.4900': attribute type 63 has an invalid length.
[  412.000468][T15446] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4900'.
[  412.009528][T15446] 0��{: entered allmulticast mode
[  412.014788][T15446] A link change request failed with some changes committed already. Interface 
30��{ may have been left with an inconsistent configuration, please check.
[  412.078679][ T4593] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  412.217154][ T4593] usb 2-1: device descriptor read/64, error -71
[  412.472980][ T4593] usb 2-1: device descriptor read/64, error -71
[  412.728814][ T4593] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  412.867352][ T4593] usb 2-1: device descriptor read/64, error -71
[  413.123170][ T4593] usb 2-1: device descriptor read/64, error -71
[  413.240516][ T4593] usb usb2-port1: attempt power cycle
[  413.315055][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  413.315061][ T7991] Bluetooth: hci0: command 0x1003 tx timeout
[  413.579762][T15478] fuse: Unknown parameter '0x0000000000000004'
[  413.613508][ T4593] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  413.635908][ T4593] usb 2-1: device descriptor read/8, error -71
[  413.740906][T15513] overlayfs: failed to resolve 'permit_directio': -2
[  413.774372][ T4593] usb 2-1: device descriptor read/8, error -71
[  414.029149][ T4593] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  414.051555][ T4593] usb 2-1: device descriptor read/8, error -71
[  414.146373][ T4591] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  414.190130][ T4593] usb 2-1: device descriptor read/8, error -71
[  414.306295][ T4591] usb 6-1: Using ep0 maxpacket: 8
[  414.311501][ T4593] usb usb2-port1: unable to enumerate USB device
[  414.319412][ T4591] usb 6-1: unable to get BOS descriptor or descriptor too short
[  414.327794][ T4591] usb 6-1: config 6 has an invalid interface number: 248 but max is 0
[  414.335991][ T4591] usb 6-1: config 6 has no interface number 0
[  414.342262][ T4591] usb 6-1: config 6 interface 248 has no altsetting 0
[  414.350800][ T4591] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  414.359903][ T4591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.367915][ T4591] usb 6-1: Product: syz
[  414.372148][ T4591] usb 6-1: Manufacturer: syz
[  414.376850][ T4591] usb 6-1: SerialNumber: syz
[  414.600305][ T4591] ums-karma 6-1:6.248: USB Mass Storage device detected
[  414.659897][ T4591] usb 6-1: USB disconnect, device number 11
[  415.021881][T15593] netlink: 'syz.1.4945': attribute type 28 has an invalid length.
[  415.404138][   T62] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  415.482444][T15608] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  415.564000][   T62] usb 6-1: Using ep0 maxpacket: 8
[  415.580529][   T62] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  415.595953][   T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.627484][   T62] usb 6-1: config 0 has no interface number 0
[  415.640001][   T62] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  415.659913][   T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.678670][   T62] usb 6-1: Product: syz
[  415.691888][   T62] usb 6-1: Manufacturer: syz
[  415.702548][   T62] usb 6-1: SerialNumber: syz
[  415.713946][   T62] usb 6-1: config 0 descriptor??
[  415.724805][   T62] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  415.742050][   T62] usb 6-1: No valid video chain found.
[  416.280841][T15627] overlayfs: statfs failed on './file0'
[  416.307977][T15629] fuse: Unknown parameter 'f'
[  416.317808][ T6702] Bluetooth: hci0: Frame reassembly failed (-84)
[  417.457128][T15686] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  417.502742][   T36] audit: type=1400 audit(1758874980.903:8522): avc:  denied  { create } for  pid=15690 comm="syz.0.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  418.356104][   T36] audit: type=1326 audit(1758874981.701:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15596 comm="syz.5.4946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ef8eec9 code=0x7fc00000
[  418.366757][ T4589] usb 6-1: USB disconnect, device number 12
[  418.516481][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  418.519549][ T7991] Bluetooth: hci0: command 0x1003 tx timeout
[  418.579119][T15774] rust_binder: Error while translating object.
[  418.579174][T15774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  418.585981][T15774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:647
[  418.750970][ T4589] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  418.936135][ T4589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  418.947185][ T4589] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  418.960442][ T4589] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  418.969741][ T4589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.978809][ T4589] usb 6-1: config 0 descriptor??
[  418.984189][T15771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  418.992305][ T4589] usbhid 6-1:0.0: can't add hid device: -22
[  418.998373][ T4589] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  419.073923][T15803] __vm_enough_memory: pid: 15803, comm: syz.1.4995, bytes: 18014402804453376 not enough memory for the allocation
[  419.115846][T15806] overlayfs: failed to clone lowerpath
[  419.122427][T15801] overlayfs: failed to resolve './file0/file0': -2
[  419.128306][ T6702] Bluetooth: hci0: Frame reassembly failed (-84)
[  419.205816][ T6957] usb 6-1: USB disconnect, device number 13
[  420.179216][ T6957] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  420.339089][ T6957] usb 6-1: Using ep0 maxpacket: 32
[  420.350814][ T6957] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  420.369600][ T6957] usb 6-1: config 0 has no interface number 0
[  420.381729][ T6957] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  420.403078][ T6957] usb 6-1: config 0 interface 196 has no altsetting 0
[  420.420247][ T6957] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  420.435004][ T6957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.443059][ T6957] usb 6-1: Product: syz
[  420.460781][ T6957] usb 6-1: Manufacturer: syz
[  420.465454][ T6957] usb 6-1: SerialNumber: syz
[  420.478156][ T6957] usb 6-1: config 0 descriptor??
[  420.483517][T15832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  421.131671][ T6957] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  421.150894][ T6957] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  421.330358][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  421.330432][ T7991] Bluetooth: hci0: command 0x1003 tx timeout
[  421.343034][T15810] Bluetooth: hci0: Opcode 0x1003 failed: -4
[  421.354694][T15809] Bluetooth: hci0: Opcode 0x1003 failed: -4
[  421.354731][ T6715] Bluetooth: hci0: Frame reassembly failed (-84)
[  421.703404][ T4589] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  421.769506][T15889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57450 sclass=netlink_route_socket pid=15889 comm=syz.4.5020
[  421.809835][T15895] warn_alloc: 1 callbacks suppressed
[  421.809860][T15895] syz.4.5022: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0
[  421.830127][T15895] CPU: 0 UID: 0 PID: 15895 Comm: syz.4.5022 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878
[  421.830166][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  421.830183][T15895] Call Trace:
[  421.830190][T15895]  <TASK>
[  421.830198][T15895]  __dump_stack+0x21/0x30
[  421.830240][T15895]  dump_stack_lvl+0x10c/0x190
[  421.830275][T15895]  ? __cfi_dump_stack_lvl+0x10/0x10
[  421.830309][T15895]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  421.830333][T15895]  dump_stack+0x19/0x20
[  421.830355][T15895]  warn_alloc+0x1bc/0x2a0
[  421.830391][T15895]  ? stack_depot_save_flags+0x38/0x800
[  421.830418][T15895]  ? __cfi_warn_alloc+0x10/0x10
[  421.830451][T15895]  ? kasan_save_track+0x4f/0x80
[  421.830469][T15895]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  421.830492][T15895]  ? xskq_create+0x68/0x2a0
[  421.830521][T15895]  ? xsk_init_queue+0xb6/0x120
[  421.830554][T15895]  ? xsk_setsockopt+0x43f/0x6f0
[  421.830585][T15895]  ? do_sock_setsockopt+0x26d/0x400
[  421.830613][T15895]  ? __x64_sys_setsockopt+0x1b8/0x250
[  421.830637][T15895]  ? x64_sys_call+0x2adc/0x2ee0
[  421.830668][T15895]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  421.830709][T15895]  __vmalloc_node_range_noprof+0x135/0x1420
[  421.830750][T15895]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  421.830776][T15895]  ? avc_has_perm+0x144/0x220
[  421.830800][T15895]  ? kasan_save_alloc_info+0x40/0x50
[  421.830838][T15895]  ? __kasan_kmalloc+0x96/0xb0
[  421.830865][T15895]  vmalloc_user_noprof+0x77/0x90
[  421.830899][T15895]  ? xskq_create+0xdb/0x2a0
[  421.830930][T15895]  xskq_create+0xdb/0x2a0
[  421.830965][T15895]  xsk_init_queue+0xb6/0x120
[  421.830998][T15895]  xsk_setsockopt+0x43f/0x6f0
[  421.831029][T15895]  ? __cfi_xsk_setsockopt+0x10/0x10
[  421.831058][T15895]  ? do_futex+0x309/0x500
[  421.831082][T15895]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  421.831114][T15895]  ? security_socket_setsockopt+0x33/0xd0
[  421.831137][T15895]  ? __cfi_xsk_setsockopt+0x10/0x10
[  421.831166][T15895]  do_sock_setsockopt+0x26d/0x400
[  421.831202][T15895]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  421.831237][T15895]  __x64_sys_setsockopt+0x1b8/0x250
[  421.831271][T15895]  x64_sys_call+0x2adc/0x2ee0
[  421.831308][T15895]  do_syscall_64+0x58/0xf0
[  421.831336][T15895]  ? clear_bhb_loop+0x50/0xa0
[  421.831363][T15895]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  421.831401][T15895] RIP: 0033:0x7fe0dad8eec9
[  421.831422][T15895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.831446][T15895] RSP: 002b:00007fe0dbb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  421.831474][T15895] RAX: ffffffffffffffda RBX: 00007fe0dafe5fa0 RCX: 00007fe0dad8eec9
[  421.831501][T15895] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  421.831519][T15895] RBP: 00007fe0dae11f91 R08: 0000000000000004 R09: 0000000000000000
[  421.831537][T15895] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  421.831554][T15895] R13: 00007fe0dafe6038 R14: 00007fe0dafe5fa0 R15: 00007fff295e5218
[  421.831577][T15895]  </TASK>
[  421.980691][ T4589] usb 2-1: Using ep0 maxpacket: 16
[  422.003566][T15895] Mem-Info:
[  422.009508][ T4589] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  422.010018][T15895] active_anon:27388 inactive_anon:9 isolated_anon:0
[  422.010018][T15895]  active_file:22368 inactive_file:2751 isolated_file:0
[  422.010018][T15895]  unevictable:15415 dirty:51 writeback:0
[  422.010018][T15895]  slab_reclaimable:5329 slab_unreclaimable:79839
[  422.010018][T15895]  mapped:25895 shmem:19496 pagetables:1274
[  422.010018][T15895]  sec_pagetables:0 bounce:0
[  422.010018][T15895]  kernel_misc_reclaimable:0
[  422.010018][T15895]  free:1472392 free_pcp:2241 free_cma:0
[  422.016602][ T4589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.021126][T15895] Node 0 active_anon:109552kB inactive_anon:36kB active_file:89472kB inactive_file:11004kB unevictable:61660kB isolated(anon):0kB isolated(file):0kB mapped:103580kB dirty:204kB writeback:0kB shmem:77984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9400kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no
[  422.032544][ T4589] usb 2-1: config 0 descriptor??
[  422.037029][T15895] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB
[  422.043683][ T4589] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  422.046167][T15895] lowmem_reserve[]:
[  422.256519][ T4589] usb 2-1: Detected FT232B
[  422.270243][T15895]  0 3921 3921
[  422.289444][T15895] Normal free:2930612kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109604kB inactive_anon:36kB active_file:89472kB inactive_file:11004kB unevictable:61660kB writepending:204kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2556kB local_pcp:1552kB free_cma:0kB
[  422.321809][T15895] lowmem_reserve[]: 0 0 0
[  422.326224][T15895] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  422.341810][T15895] Normal: 237*4kB (UME) 328*8kB (UME) 714*16kB (UME) 1623*32kB (UME) 451*64kB (UME) 283*128kB (UME) 108*256kB (UME) 76*512kB (UME) 46*1024kB (UME) 25*2048kB (UME) 643*4096kB (UME) = 2930612kB
[  422.360910][T15895] 60039 total pagecache pages
[  422.365660][T15895] 9 pages in swap cache
[  422.369862][T15895] Free swap  = 124320kB
[  422.374098][T15895] Total swap = 124996kB
[  422.378351][T15895] 2097051 pages RAM
[  422.382530][T15895] 0 pages HighMem/MovableOnly
[  422.387307][T15895] 351537 pages reserved
[  422.391597][T15895] 0 pages cma reserved
[  422.398800][T15895] Memory allocations:
[  422.402875][T15895]          0 B        0 init/main.c:1370 func:do_initcalls
[  422.410181][T15895]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  422.418323][T15895]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  422.426044][T15895]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  422.434035][T15895]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  422.442216][T15895]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  422.450988][T15895]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  422.458979][T15895]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  422.466996][T15895]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  422.474998][T15895]          0 B        0 init/initramfs.c:101 func:find_link
[  422.493533][ T4589] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  422.500582][ T4589] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  422.508133][ T4589] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  422.518006][ T4589] usb 2-1: USB disconnect, device number 51
[  422.524742][ T4589] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  422.534356][ T4589] ftdi_sio 2-1:0.0: device disconnected
[  423.004424][ T4589] usb 6-1: USB disconnect, device number 14
[  423.048832][ T4589] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  423.235164][T15931] overlayfs: failed to clone upperpath
[  423.600377][T15943] fuse: blksize only supported for fuseblk
[  423.613675][T15945] fuse: blksize only supported for fuseblk
[  423.682632][T15953] rust_binder: 15947: priority -30 not allowed, using 91 instead
[  423.742907][T15953] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI
[  423.763248][T15953] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
[  423.771670][T15953] CPU: 1 UID: 0 PID: 15953 Comm: syz.1.5034 Not tainted syzkaller #0 687dd8cc987f259803714ab19d9ffd663b1e6878
[  423.783333][T15953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  423.793499][T15953] RIP: 0010:fuse_atomic_open+0x1b6/0x440
[  423.799202][T15953] Code: 8b 6d bc 44 89 ee 83 e6 40 31 ff e8 14 4d 4b ff 44 89 e8 83 e0 40 75 07 e8 c7 48 4b ff eb 25 4d 8d 6e 30 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 fc 98 a1 ff 49 83 7d 00 00 74 26 e8
[  423.818945][T15953] RSP: 0018:ffffc900012f7990 EFLAGS: 00010206
[  423.825077][T15953] RAX: 0000000000000009 RBX: dffffc0000000000 RCX: 0000000000000002
[  423.833086][T15953] RDX: ffff888149bccc00 RSI: 0000000000000040 RDI: 0000000000000000
[  423.841092][T15953] RBP: ffffc900012f79f0 R08: ffff888149bccc00 R09: 0000000000000002
[  423.849099][T15953] R10: 00000000fffffffe R11: 0000000000000002 R12: ffff88811b89e000
[  423.857124][T15953] R13: 0000000000000049 R14: 0000000000000019 R15: ffff88811bf87180
[  423.865136][T15953] FS:  00007fd8328386c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  423.874107][T15953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.880729][T15953] CR2: 000020000004a030 CR3: 0000000149366000 CR4: 00000000003526b0
[  423.888775][T15953] Call Trace:
[  423.892084][T15953]  <TASK>
[  423.895041][T15953]  ? security_inode_create+0x74/0x140
[  423.900489][T15953]  ? __cfi_fuse_atomic_open+0x10/0x10
[  423.905999][T15953]  path_openat+0x115b/0x34b0
[  423.910651][T15953]  ? do_filp_open+0x3e0/0x3e0
[  423.915375][T15953]  do_filp_open+0x1c6/0x3e0
[  423.919924][T15953]  ? __cfi_do_filp_open+0x10/0x10
[  423.925006][T15953]  ? alloc_fd+0x4e7/0x5a0
[  423.929377][T15953]  do_sys_openat2+0x12c/0x1c0
[  423.934105][T15953]  ? do_sys_open+0x100/0x100
[  423.938742][T15953]  ? __kasan_check_write+0x18/0x20
[  423.943917][T15953]  __x64_sys_creat+0x92/0xc0
[  423.948556][T15953]  x64_sys_call+0x2710/0x2ee0
[  423.953289][T15953]  do_syscall_64+0x58/0xf0
[  423.957784][T15953]  ? clear_bhb_loop+0x50/0xa0
[  423.962508][T15953]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  423.965565][T15969] overlayfs: failed to clone upperpath
[  423.968471][T15953] RIP: 0033:0x7fd83198eec9
[  423.968498][T15953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.998004][T15953] RSP: 002b:00007fd832838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  424.006680][   T36] audit: type=1400 audit(1758874987.011:8524): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  424.006720][T15953] RAX: ffffffffffffffda RBX: 00007fd831be6090 RCX: 00007fd83198eec9
[  424.036508][T15953] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080
[  424.044517][T15953] RBP: 00007fd831a11f91 R08: 0000000000000000 R09: 0000000000000000
[  424.052527][T15953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  424.060532][T15953] R13: 00007fd831be6128 R14: 00007fd831be6090 R15: 00007ffe725d6b28
[  424.068551][T15953]  </TASK>
[  424.069388][   T36] audit: type=1400 audit(1758874987.011:8525): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.071598][T15953] Modules linked in:
[  424.072449][T15953] ---[ end trace 0000000000000000 ]---
[  424.102983][T15953] RIP: 0010:fuse_atomic_open+0x1b6/0x440
[  424.108671][T15953] Code: 8b 6d bc 44 89 ee 83 e6 40 31 ff e8 14 4d 4b ff 44 89 e8 83 e0 40 75 07 e8 c7 48 4b ff eb 25 4d 8d 6e 30 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 fc 98 a1 ff 49 83 7d 00 00 74 26 e8
[  424.128460][T15953] RSP: 0018:ffffc900012f7990 EFLAGS: 00010206
[  424.134621][T15953] RAX: 0000000000000009 RBX: dffffc0000000000 RCX: 0000000000000002
[  424.142632][T15953] RDX: ffff888149bccc00 RSI: 0000000000000040 RDI: 0000000000000000
[  424.150683][T15953] RBP: ffffc900012f79f0 R08: ffff888149bccc00 R09: 0000000000000002
[  424.158718][T15953] R10: 00000000fffffffe R11: 0000000000000002 R12: ffff88811b89e000
[  424.166779][T15953] R13: 0000000000000049 R14: 0000000000000019 R15: ffff88811bf87180
[  424.168116][   T36] audit: type=1400 audit(1758874987.011:8526): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  424.174776][T15953] FS:  00007fd8328386c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  424.174807][T15953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.211799][T15953] CR2: 000020000004a030 CR3: 0000000149366000 CR4: 00000000003526b0
[  424.219842][T15953] Kernel panic - not syncing: Fatal exception
[  424.226345][T15953] Kernel Offset: disabled
[  424.230698][T15953] Rebooting in 86400 seconds..