last executing test programs:

22.195843388s ago: executing program 2 (id=86):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x0, 0x7})

22.151751729s ago: executing program 2 (id=88):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300})
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x4000, 0x0, 0x43cb, 0x8}, 'syz0\x00', 0x22})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000001940)={'syz0\x00', {0x7, 0x5, 0x7, 0x4}, 0x15, [0xfffffffe, 0x4, 0x7, 0x80, 0x9, 0x7, 0x1, 0x9, 0x8, 0x8, 0x80, 0x2, 0x0, 0x3, 0x9, 0x6, 0xa1, 0x1, 0x3, 0x8, 0x40, 0x3, 0xffff, 0x7, 0x101, 0x805, 0x6, 0x0, 0x1, 0x4, 0x40000006, 0x0, 0x6, 0x5, 0x9, 0x877, 0x5, 0x7, 0xf17, 0x870b, 0x10, 0xae, 0x1, 0x8, 0x4, 0xffffffee, 0x7fe0000, 0x200, 0x9, 0xc, 0x80000000, 0x54, 0x8, 0x2, 0x54c2, 0x7, 0x643e1dbc, 0x3d3, 0xeb2, 0xc, 0x10000, 0x1, 0x9f8b, 0x8], [0x4, 0x6, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x1, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x0, 0x4033, 0x6, 0x0, 0x8, 0x1, 0x0, 0x4, 0x2, 0x7, 0x1, 0x9, 0x2, 0x10, 0x100, 0x5, 0xac, 0xc, 0x1, 0x40, 0x6, 0x3, 0xfffffffe, 0x6, 0xf23, 0xe, 0x69, 0x9, 0x0, 0xfffffffb, 0x5, 0x1ff, 0x8, 0x401, 0x7ff, 0x7d, 0x1, 0x4, 0x2, 0xd218, 0xce, 0x6a8, 0x5d52cbeb, 0x5, 0x4, 0xfffffffd, 0x80, 0xc0, 0x4, 0x5, 0x2, 0x6], [0x10001, 0x4, 0x3, 0x7, 0x3, 0x6, 0x5, 0x2, 0x7ff, 0x7, 0x7, 0x9, 0xffff, 0x3, 0x0, 0x3, 0x5, 0x1, 0x7, 0x1, 0x4, 0x1, 0x0, 0x7, 0xb, 0x6, 0x6, 0x66c2, 0x8, 0x81, 0x1, 0xe4b6, 0x0, 0x0, 0x3, 0x8aa541a, 0x0, 0x16, 0x5, 0x20, 0x10, 0x6, 0x8001, 0x400, 0x7, 0x8, 0x7, 0xf68, 0x8000, 0x4, 0x2, 0x401, 0x8000, 0x7f, 0x7, 0x80, 0x2685, 0x9, 0x6, 0x7fffffff, 0x8000, 0x7a, 0x3ff, 0xc], [0x9, 0x3, 0x7ff, 0xe, 0x7f, 0x10, 0x6, 0xcd9, 0x2, 0x5, 0x10001, 0x3, 0x4, 0x8001, 0x1000, 0x40, 0x0, 0x5, 0x3ff, 0xa13, 0x1ff, 0x0, 0x2, 0xf46e, 0x2, 0xa9, 0x6, 0x0, 0x1, 0x7, 0x2, 0x1, 0x7, 0x6, 0x100, 0xc78, 0x1, 0x888, 0x1, 0xdd9, 0x1ff, 0x0, 0x7f, 0x2, 0x9, 0x9, 0x3, 0x8, 0x7, 0xfffffff1, 0xfffffffa, 0x6, 0xffffff86, 0x7, 0x1, 0xffffffff, 0x6, 0x7f, 0x2, 0x2, 0x1000, 0x1, 0x7fff, 0x81]}, 0x45c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0})

21.981531642s ago: executing program 2 (id=90):
r0 = socket(0x1d, 0x2, 0x400)
ioctl$SIOCSIFMTU(r0, 0x89e1, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

21.942616252s ago: executing program 2 (id=91):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000002c0)='./file1\x00', 0x1610, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = open(0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
statfs(&(0x7f0000000280)='./file1\x00', 0x0)
linkat(0xffffffffffffffff, 0x0, r1, 0x0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000080)={0x800, 0x0, 0x22}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="03ffffffff000000e137", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020)
mkdir(&(0x7f0000000000)='./file0\x00', 0x42)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000004c0))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

21.906756553s ago: executing program 2 (id=92):
ioprio_set$pid(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1])
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21012cbd7000000000001490190c46000300", @ANYRES32, @ANYBLOB="0e0006"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001004a0000000000000000000000000100000000ffffe000000200000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7a"], 0x6c}}, 0x0)
r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCAPPLICATION(r10, 0x4802, 0x7f)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x100})
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

21.809514724s ago: executing program 2 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x78, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000480)="260f3365660f72f7318d71fdbaf80c66b8d87ac38866efbafc0c66b80080000066ef0f01c3640f800c0066b8f80000000f23d80f21f86635000000600f23f8660ffe68009a8a2300010fc73f", 0x4c}], 0x1, 0x10, &(0x7f00000005c0)=[@cr0={0x0, 0x6005000f}, @cstype3={0x5, 0x1}], 0x2)

21.806636544s ago: executing program 32 (id=93):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x78, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000480)="260f3365660f72f7318d71fdbaf80c66b8d87ac38866efbafc0c66b80080000066ef0f01c3640f800c0066b8f80000000f23d80f21f86635000000600f23f8660ffe68009a8a2300010fc73f", 0x4c}], 0x1, 0x10, &(0x7f00000005c0)=[@cr0={0x0, 0x6005000f}, @cstype3={0x5, 0x1}], 0x2)

20.941973337s ago: executing program 1 (id=111):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000680)='veth0_virt_wifi\x00')
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r5 = dup(r2)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}, {@access_uid}]}})
read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000006c0)=0x2000, 0x4)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r6, 0x29, 0xce, 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffff21)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100027bd7000fc9bdf2530000000000000000000000039558b708482e423a3df313a79cc9c585d8532e60789dfaad092bdb9c9650d6f87eb8a0ed4893b01830224e6c90765f3c3bffb0fbde4f60d", @ANYRES32=r7, @ANYBLOB="0600360028000000060036000d00000006003600400000000600360013000000"], 0x86}, 0x1, 0x0, 0x0, 0x4000081}, 0x40040000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x88ac0, 0x0)
io_setup(0x9, &(0x7f0000000000))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
eventfd2(0x3, 0x80000)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f08001000000000000000fedbdf25030005000000000002000020000000000000000000000000080012000000020000000000000000000600320000000000000000000000000000000000000000000000ffffe0000001fe800000000000000000000000000018030006000020000002"], 0x80}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40})
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2})
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001000010000000000000000000000000000000000609b60ad616e8e4881c778762fbb5b0000000000000000e0000002000000000000000000000000000000000820", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000002b000000e0000002000000000000000000000000ff03000000000000000000000000000008000000000000000000000000000000ffffffff0000000006000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000004000000000000000000000001000000fcffffff00000000000000000a00040040000000000000004800010073686132353600"/240], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x0)

20.832142219s ago: executing program 1 (id=115):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2, 0x2, 0x3fffd, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@empty, r5}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)

20.829370909s ago: executing program 1 (id=116):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "e489298f25dc4c5ac23b7571b8762a5bcbaa3639e4cb58c41aa99ad9c39604afcb12c5a31177d1ca06954a21495d209f743420ccfb9a17ca9f093865ccaf04d8", 0x23}, 0x48, 0xfffffffffffffffc)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r3=>0xffffffffffffffff])
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4)
keyctl$chown(0x4, r2, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r5, r6, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r5, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x7a, 0x0, &(0x7f0000000440)="be7407e246d8d831466a3afc435dea8bd7eb1b5cb8b0c1ff9c88d6c7adb65c57e5f927a0c414014b127cdd15a159c7c84dd96efda19591476e24d2c2f43304bab2ba9a3c80b443fbe584087b1cdf876d9dc36ad8380cc10b7dba038c1d9c4fab5fd3710f0bc2ad920b3f68c51a993dec941bc0c4b992c677716b"})

19.978652392s ago: executing program 1 (id=133):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async)
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xfc49186a856e362c, 0x2})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) (async)
pipe2$9p(&(0x7f0000000100), 0x4080)

19.921363493s ago: executing program 1 (id=134):
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="44ccc44cf47f4eea7dd1e0611067acaa96a1a9b95938459404a63d9f8d0892ed5e4c8c273e3a526a0dc9db179e2d6fb7f67e1b5325a3f8ed24b0634a52e41f3b5756f1d0505794a414028d50b8a212df53a5ac74991ea32eca6798bd6040840b3591a6d115a92da983d57378db73b53148e394873ec568c7d954039cdcb2789f", &(0x7f0000000440)="e7c572674b018294314a17d13311131ec2ab34fd0b66fda25ce988a264ad85361b49b66696b573f3a87b82459d1a228cc87c2df735c1eeadc29260dcbf39ad9df2b04f884540a5299845062d18bab8ead0f4a4fb7785066b1323ea33fc53d115"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be04020000fac8388827a685a168d9a446040945214549932fde80e9edd6b59574fac25e3b254a460c89b6ec0cff3900107f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x6c, 0x4000080, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknodat(r3, &(0x7f00000002c0)='./file1\x00', 0x1610, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
statfs(&(0x7f0000000280)='./file1\x00', 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc)
linkat(r4, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./bus\x00', 0x0)
pidfd_getfd(r5, r3, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
lseek(r2, 0xfbb6, 0x1)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
epoll_create1(0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xfffffffffffffffa)

19.869081544s ago: executing program 1 (id=138):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000"], 0x80}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
shutdown(r2, 0x2) (async, rerun: 32)
sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async, rerun: 32)
ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0)
r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0x4, 0x3, 0x401, 0x98f, 0x11, "597d3081c9a33ad210cb8ecf5de48a63bd9b0e"})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r4, &(0x7f00000003c0)={0x1, 0x2000000}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0)

19.821081805s ago: executing program 33 (id=138):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000"], 0x80}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
shutdown(r2, 0x2) (async, rerun: 32)
sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async, rerun: 32)
ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0)
r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0x4, 0x3, 0x401, 0x98f, 0x11, "597d3081c9a33ad210cb8ecf5de48a63bd9b0e"})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r4, &(0x7f00000003c0)={0x1, 0x2000000}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0)

4.500100571s ago: executing program 0 (id=275):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
lsm_set_self_attr(0x65, 0x0, 0x0, 0x20)
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e80)={0x10, 0x34, 0x11, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x4800}, 0x40)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x7, 0x2, 0xad, 0x5, 0x5, 0x53, 0x7, 0x0, 0x4, 0x1, 0x4, 0x7, 0x5, 0x7, 0x8, 0x5e}})
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000380)={0xa, 0x7})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000000c0)=[@clear_death, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0600fc27a32428c817b78bffcd9f6f0000"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r6 = syz_usb_connect$uac1(0x2, 0x105, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003000000176b1d01014000010203010902f30003018d20ff0904000000010100000a240101000402010205240404070924030303030103f10b240602060202000800030824040509f84f5c0f24060105040200020008000100020904010000010200000904010101010200000d2402020800070006a5e5e2b20d24020103020c0382bc2c85020924020102033e7fbb0905010920000307da072501820b07000904020000010200000904020101010200000b2402017d040103f9cc230924020122030795dd0724010d0203000d2402020000b3960c2402010402046f1def23400d2402010a0202017ccfc2ea7609058209400601062d072501810161000000000000"], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xdf, 0x4, 0x4, 0x8, 0x8}, 0xeb, &(0x7f00000006c0)={0x5, 0xf, 0xeb, 0x2, [@generic={0xdc, 0x10, 0x0, "a9fc3219e926a2dae7575535c06a26ea7ce9ce166460614cbabb99e1d32a3439a21766235150a781cf645de4e76a826983f5b87930e933b3d8596e0d3c0504fbecf4628b659d6f5e80db6324124309976b0899b99ce414f7154d095765f4833765be8605681f62151030a8001996991270a6ba5926fddc8923f2c4d36895cf2f80aadf2efb17026591f1e0d6b35eb6d00c395fbbc09bdca16b8e3c7e967f4c6b95b585fcd749ce1d067e89b737b276aa93a7e3adaa56ffd2245d973c610fcf9c24772e7e38abe1cdaf42aae80bd002d22e36deb46d6d3cd3a0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xa7, 0xc9, 0x2}]}, 0x3, [{0xfe, &(0x7f00000007c0)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9, &(0x7f00000001c0)=@string={0x9, 0x3, "86e962ee4bece3"}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000000380)={0x14, &(0x7f00000009c0)={0x40, 0x5, 0xc4, {0xc4, 0x30, "66cfbadb5aa1f2923a04b6e3ed7adfedc5ebf060e83dc478169a3bf863fbe919499c99fb05c3184be37ce22f941b5160eb524dddbce7471977d320ed7bfa196bcb87556db27c1ed94786273b01bd6d60bc806d932aa3628e92f6a54b654450a0e7478a3a9be929c299a6b612514389c7150fa36c13df36f8ef43af327d5d51d9111f58d7b0f08076e67c9512a6cad5133fbd0eb89cdb118b0f634e244595f107916dc34872bafcd290b24fb261525a77ff04df4b8c2eaa729b951cd472755edffdd7"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000480)={0x20, 0x3e, 0xa1, "db4880e42f822635078be059221b6d76dce83513a9842001ffe0dc5795867c4d04d515af098647c59068a1e912395660ff76d757102e8813a9df1694bcf9549023c5b438243b400fe5c4116e50a69d982963130b725b7f488c50941cdb7694e43256fdce76eaa2f81bcf69ad8be0d5b414e6e824f38dafce6cbc7e83a08a8439db2bf53dc10ab5a887c39f0fdf8e8443e28ecff7732a01c3232e30f6506fdb6126"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x81, 0x3, "fe4945"}, &(0x7f0000000940)={0x20, 0x82, 0x2, "fee3"}, &(0x7f0000000f80)=ANY=[@ANYBLOB="208782280000d2d5cecd68f25f4040d30f68b66b8611942e0ba12fcb93c7ab7df38c3bfdebf1431bb4bb892c71b5581b7aa32b41274ba4a5c2a173a4d223854abb4eb5686d369ee36084441abc39524f7d2d04d9ba7b1509e1ddbe4a1d2b460f667d5658eda25c0787c3606a4d0f851d7a7fc29b96b6d1b7ea3752b70e504a74317aebdd763cd392d073d09ea27cc0c0bba7"], &(0x7f0000000b00)={0x20, 0x84, 0x4, "13520457"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "e404fb"}})
ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000980)={0x1, 0x100, 0x8001, 0xffffff80, 0x1, 0x5})
syz_usb_control_io$hid(r4, &(0x7f0000000d40)={0x24, &(0x7f0000000c00)={0x0, 0x5, 0x3d, {0x3d, 0x4, "f9244e9cb2f94c56cec7e79d8e97c6b0c8ca8507fb8a7c7a2a3e8deb9103e27154a96fb926098d69e69f20ec27a229641bf780af4d0c493d7e2469"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000cc0)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x8, "363ce745"}, @main=@item_4={0x3, 0x0, 0xb, "a8229054"}, @global=@item_4={0x3, 0x1, 0x8, "18afffef"}, @main=@item_012={0x2, 0x0, 0x9, "ce89"}, @global=@item_012={0x0, 0x1, 0x8}, @main=@item_012={0x1, 0x0, 0x9, "ca"}, @global=@item_4={0x3, 0x1, 0x2, "c064029b"}, @local=@item_012={0x2, 0x2, 0x0, "fe45"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x45f, 0x81, 0x1, {0x22, 0xdeb}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000d80)={0x20, 0xf, 0x9f, "7959ebea7528bbb7a5d8af03e928876754a09d89ea733ee4b43a4be1638d3077a69da2bee5f178e00812f7555336e63f4d24fd1e2736686ae9939894c1434f1fb44c58b3e344545d6d83bc981043d436d9ab1548709b63b9ee2ffb5b0e2383c75897adda2edc7c9805ea95e32efe8254e155bb2562db5bfd00eafe72d39238c666ef22302096c66f7c3eb8641bec25f596183842ef7299218f7532d0ba60bf"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000ec0)={0x20, 0x1, 0x23, "0970302c58840f154b7165170372973ed35e41e2276175f63b7169bfbdfda6de728690"}, &(0x7f0000000f00)={0x20, 0x3, 0x1}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000100)={0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0})

2.751563447s ago: executing program 5 (id=293):
syz_open_dev$evdev(0x0, 0x4, 0x101282)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) (async)
write$binfmt_script(r0, &(0x7f0000001300), 0x8f) (async)
recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) (async)
writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) (async)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r1, 0x2, 0x100010, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x4, 0x0) (async)
mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a00806e08000000000000001400018010001e8009003d80f1df62b2b1000000"], 0x30}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10)
recvmmsg(r5, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/82, 0x52}], 0x5, &(0x7f0000001e00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000780)=""/35, 0x23}], 0x1, &(0x7f0000002e40)=""/4096, 0x1000}, 0x39}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000019c0), 0x0, &(0x7f00000007c0)=""/87, 0x57}, 0x2}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)=""/99, 0x63}], 0x1}, 0x2}, {{&(0x7f00000009c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a40)=""/255, 0xff}, {&(0x7f0000000b40)=""/147, 0x93}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000cc0)=""/121, 0x79}, {&(0x7f0000000d40)=""/85, 0x55}, {&(0x7f0000000dc0)=""/178, 0xb2}, {&(0x7f0000000e80)=""/246, 0xf6}], 0x7, &(0x7f0000001000)=""/34, 0x22}, 0x9}, {{&(0x7f00000010c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001040)=[{&(0x7f0000001140)=""/141, 0x8d}], 0x1, &(0x7f0000001200)=""/202, 0xca}, 0xb9e2}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001940)=""/70, 0x46}, 0x10000}, {{&(0x7f00000050c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000001a40)=""/204, 0xcc}, {&(0x7f0000001b40)=""/151, 0x97}, {&(0x7f0000001c00)=""/171, 0xab}, {&(0x7f0000001cc0)=""/197, 0xc5}], 0x4}, 0x3ff}], 0x8, 0x2000, &(0x7f0000005080))
readv(r4, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
pwritev2(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="dca8a57f0d81f00871230c807d36766958abeba7fc52826822a917b58772c9251a03a17ebe88ce485472e31a3100f046ff6b175480582cf8ef55ba8a09d1b5bf2ba8b145e0267dedb02caf46a9", 0x4d}], 0x1, 0x7fff, 0xffffffff, 0x10) (async)
lseek(r3, 0x10001, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'vlan0\x00', {0x1}, 0x5})

2.693570159s ago: executing program 5 (id=294):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0xb000, 0x3, &(0x7f0000ff5000/0xb000)=nil)

2.59956218s ago: executing program 0 (id=295):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async, rerun: 64)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404355313000000000000109022400010000a02009040006040300030022210000000122080009058103100000fe09"], 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async, rerun: 32)
syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c021000050001072501"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) (async)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ptrace(0x4206, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async)
r3 = socket(0xa, 0x1, 0x0) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqsrc(r4, 0x0, 0x28, 0x0, 0x0) (async)
ioctl(r3, 0x8936, &(0x7f0000000000)) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400e200", @ANYRES16=r5, @ANYBLOB="a1ab000000000000000032000000080017015200000008000300", @ANYRES32=r7, @ANYBLOB="0800c300070020000800c30014ca9400"], 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x0)
waitid(0x2, r2, 0x0, 0x4, 0x0)
setpgid(r2, r2)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ext3\x00', 0xa18404, 0x0) (async)
chdir(0x0)

2.422220183s ago: executing program 5 (id=299):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r3 = epoll_create1(0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0xfffe, 0x80, @local}, {0xa, 0x0, 0x10000000, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}}, 0x5c)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, 0x0)
io_setup(0x201, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
close_range(r2, r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x40010, r6, 0x99b33000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil})

2.391882134s ago: executing program 3 (id=301):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}})
write$cgroup_int(r5, &(0x7f0000000040)=0x700, 0xfdef)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x99b33000)

2.269465725s ago: executing program 5 (id=302):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002208000000aa"], 0x0}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffdf9]}, 0x0, 0x0, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"})

2.182008766s ago: executing program 3 (id=303):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.076151518s ago: executing program 3 (id=304):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
setuid(0xee00)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x7fffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8)
setuid(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}})

1.877149201s ago: executing program 0 (id=307):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async)
r2 = socket$inet6(0xa, 0x802, 0x0) (async, rerun: 64)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3) (async, rerun: 64)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) (rerun: 64)
setregid(0x0, 0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, r1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @remote, 0x401}, 0x1c) (async)
socket$packet(0x11, 0x3, 0x300) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000140)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4e25, 0x0, 0xa, 0x30, 0xa0, 0x11, 0x0, 0xee01}, 0x6e6bbc, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x1101}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2843ca8725c9de81}, 0x4000) (async)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="f5364ee86d97e9493216698fc70279d8e9bb6a3f624e303120cfe5d649e16dd8933e1b07a78cfc618194488f28d835e78a57df10047d889bd36573697726618bc4c316f90d1b011aff33211b491d9cfd8952b3f526278c2e0132ba0d945ec458cbb290db661b0395a6819e051940c0d27922ff7d7e19d0fdbfc8ef3a814b3b89400a3afc86e989df20dcb201bb248df3e1ac2a8ee701af7bc1f4f09f6217a4f0e07f5e6d7c8000"]) (async)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r8)
r9 = socket(0x1e, 0x4, 0x0)
recvmmsg$unix(r9, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) (async)
write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r10 = dup(r7)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)

1.802639232s ago: executing program 0 (id=308):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07", 0x53b, 0x6d91fb6102d8910c, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @mcast2, 0xb4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="96bfa06c4f2f5b74316bc8d6b2dd2f8e705a0edb3a2f14ad814c931d3fd6e4805c35064ce4df6346ca4dc9248b654023d28f341b93b9f5eb8b0e4d9264dcbcdb9e49567dac25a556c5078c44937869a8888bfb308d3d82622c3f47ad05539e6b6aa1acdc5ef44aab5e330ecaaddf78828393f61b53d8a7e1c89ea4551641b1e91d5e8c46a51c61a6577fef6efbb41cd86793ade4b47f59a7c92493d68f0fc72ae1c8339b3ad8f262c709f8181daf0f720908b30ec0b4493868f1537107198cd1c6b88a3c26a794b2228a9437c8", 0xcd}, {&(0x7f0000000140)="0be3f3d5444c3d581bee48a1ae8b7e431e1d7846cdf453e61d67764aed06c939cfc8b4ab4c5e56dedc5bd6d51a854a8780f708909038aa1fed4bfddc0a811f467d54f594193d6c83f1c0c80d0712491be84dccbe905f1fd782a555ae96b11c75a4d78886a54ee04901e4db28", 0x6c}, {&(0x7f0000000280)="4a2acd024795a361769baa1489a69881bf945312c80e8a3269894768e4d1308c76c7071f8d6c3d998382965907e63e6b6259ac90fde0b899183074bd76b606f5cad9e472320403e9557a3a0d88eb95081f88bb44fdadafd999ea9c4bd7df0084127df752db41700fe839b25fba1df2e9b26cf7af3c4c9fcf4e94004f41ad289a2ebef5b315ff07652fb53b91f0f77af03b5d8bf558addb240ff10c90dbb944cadeda5b00536af09c3565e81dee9524729d1a1185d25ff4f455dfbcdd1c073df14f83a1476c75b187383241a16bfef47e22b7a657187e863c4235af09301c773dc7", 0xe1}, {&(0x7f00000001c0)="ec0374884c26354b9927f615ace3b0fd97fac408eae65dfaf6aed603edcd7ddd094b47f1ba5379829ffbde0ad8dc391a8d9101c9ddfcba0fbb9f2c66177f35c062f769fe64d4521d1bc100bffdd0d5e259bd81ea1bd015b398ddcabfc89760f974dc43fe6366fa9949", 0x69}, {&(0x7f0000000380)="590eff06ebfaee7463c7cc7264a771a668de39f02353069ea177e1de4f48a80c9e7928", 0x23}], 0x5}}], 0x1, 0x4000801)
recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e)

1.744667173s ago: executing program 0 (id=310):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000340)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r1, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)

1.502925647s ago: executing program 3 (id=314):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[])

1.488040427s ago: executing program 3 (id=316):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000200)=""/231, 0x29000, 0x3000, 0x2}, 0x20)
splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd)

1.34543648s ago: executing program 3 (id=318):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000140)=0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
fgetxattr(r2, 0x0, 0x0, 0x0)
fcntl$setflags(r2, 0x2, 0x0)
unshare(0x400)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe)
getpeername$tipc(r1, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400aa6"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)})

1.200081722s ago: executing program 0 (id=321):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
syz_io_uring_setup(0x21c8d, 0x0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="120111010000002043558107000000000001090293ab9d0b722cee650400040203923267b3fe725d00012207000905810300020551054e75a86feed2c5bfb8fe568c6f80ae66ee786d8b123baf59430ddbcb89773701107ad49c2b49b0720d4cdb7b6ef48096ebb2f6da6df1b2f06b7ff019133d673b4e493f216685e46a3ff2893bba19c4f054f7f03c4345f3c4"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc8)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xfef8bb4a19f9ea09, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x52, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x2a}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x8, 0x4b3, 0x8a}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x21, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x608, 0x1, 0x8, 0x25}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x11, 0x7, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xf8, 0x1, 0x9, 0x10, 0x58}, 0x23a, &(0x7f0000000440)={0x5, 0xf, 0x23a, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x0, 0xf000, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0xfb, 0x6, 0x7fff, 0xf, 0x4, [0x3f00, 0xff00c0, 0x30, 0xc00f, 0xffff00, 0xc000]}, @generic={0xfe, 0x10, 0xb, "dfc93565411172c0ccfe64422418c45d75c5c7000a4135094dd69dacc7809648d3b6bc2b160c8062b30baadf416ffcf6ed7e8ef5f63e586c52c80c999784bc0370ac7a3f652349e3132c2134fd847f067a34af288b9f90dc83923b7a679c9c8ffdbd338fdfbaedae34c6e74448d1c7c585f2bb3c562b66318eed6185b1bc2f7c9a8955c2952f5ec8083fd83be416fb912596d6afea8a1a6e0fdd514617db81186161793cc1a1e5818b523e996efcd007fb63597dc77e7f985806c3202450a46fa4a4d35d7e2ca5cd96332d6017a043f48a4356cb4b0cc4f81efd89061cde9a7d2fa1367ec184f21f18e619323a2a3749211094170c8c8f7d672c82"}, @generic={0xfc, 0x10, 0xb, "2f30289edf4ded3914b740f7dd6883f3339174ff8c1e3ec3304c7cce8220ee9b18dbdc4db14dc116904c8cc89eca9422c2806ad116c8e99f7e1bee959f85ce1841ce6891f2015cdaa907c832fadae1188d255938fe4c03b6f632432b2d29dbb3e5957f12e891fe9feda31252e90a2d5626cea7b68d1174e57f3f671bc08b468b577cad8cc9fe4c7933fded31c9fdf7a184d9f7bca01fd561e8e5bc825c969d4c55649af28e1ea6795779bf2c8aad6dfdafc1c838af27abbd2bb2046c61310fafc7c04e05a9d2dcb4e68b6b71cd18799ca884ffd011bb1284152f2a4b419e667a0e201c2e092f4634e127c69d63e5bc2e64ffa92976d302a923"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x81, 0x8a, 0xf, 0x7}]}, 0x7, [{0xba, &(0x7f0000000a00)=@string={0xba, 0x3, "88e15b8f2f6c183a5538df43c8b37ff07ee110676053d484e503f8f315289483e8aeb27c3325ae87520e23ca79ff8bcaa9e460d8060be8338c6dc10eb9b83e945260863d4e1c8b8de3b856562f3963c7a8d59f8029eb8ada97562851b8d4a6030a34e8f7e90d54526300893ceb71eabe34261a757a64e892f02f20717faf08443488105df4ce0bb76e4acfd88a53ed528605cd1c11e081aa5f9b2998fde1f583fa8b67a28800c4b8c48a9f6634e48f862f85c42e76209b2d"}}, {0x102, &(0x7f0000000ac0)=@string={0x102, 0x3, "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"}}, {0xaa, &(0x7f0000000840)=@string={0xaa, 0x3, "ac4ac935121cb3691974362397a6b88d67f080f953023bb6c013cd0fc84638d970449759f768b8992afaa983be1f842e061bb477d29b1bd24ea390ee60f1a70c058eba721a57d055185de1c9b6f82d1e9484724508ad656cb554e8f29970d1badda0cb38bff9f7b45f5b89d115f23c4bd0d32e56ffec295f522f40660ca71d96873954c762381a3f40cfc28acff58e166a33cbfe71278ecf4c12722dbc2a43848aa832cd716561b4"}}, {0x90, &(0x7f0000000740)=@string={0x90, 0x3, "c42ad916eed527fd28a4b6b366322343e8564f28107764dabd0d4724287c2081b45efeb9b936a829e53d20a24d351e5f5d3609d0fd6eef3117e8dc4549aa99c55fc8f255f421e9e8706cc3d96279a52a0f1f5e43dac7b1598e5ad6d62f666f1f847d39e7d9cfd7bd7fbc8c21edefbb0218104016650261b80173017de49496e889933120a3b7411ab329e0b8adb5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0x101, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}]})
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}})
r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x309, 0x24, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="312d32df"], 0x31)
open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4)

541.550661ms ago: executing program 5 (id=323):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)
read(r1, &(0x7f0000000080)=""/93, 0xffffff6c)

170.195058ms ago: executing program 5 (id=328):
openat(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0002, 0x0)
write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0299d2e0df81e5e17dbfe4ed26f621949a79cb38f5e6c50d66c7686da3772bf6bb370015a8674fb9fd05bccfcf3e7152435e6af524a1c718c80d0c026e2437da74cc4aefc2f26c663dbc4279cce7651adf6911fb74de06e98237876adbe31af84613d5cea1ed81c5e4ef4e8b17f3f13da357f652a5c6279795e1f92a3f5ccdf4be4268274ff97a7280fc6e4315a728fbe11e2b06a7980ac6cc9e5732"], 0xa)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x5)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"86f9179575c5154183e301abe7972480", 0x0, 0x0, {0xfffffffffffffffc, 0x2}, {0x6, 0x9}, 0x5, [0x10, 0x1, 0x8, 0xffffffffffffffff, 0xc673, 0x6, 0x80000000, 0x8, 0x37, 0x4, 0x81, 0x5, 0x0, 0x5, 0x8, 0x800]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000480)=[@cpuid={0x2, 0x18, {0x5, 0x6}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x2, 0xff}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x2, 0x18, {0xd78, 0x7fff}}, @code={0x1, 0x54, {"c4a1fd5be266baf80cb8e64e1d80ef66bafc0c66ed440f20c0350a000000440f22c046d3aff89700000f0148283e3ee434400f01c4470f01c40f0170ed66450f388008"}}, @code={0x1, 0x6b, {"44d8bf153300000f20d835080000000f22d866b8e0000f00d08fa9d0933a0fc71db3ecb3e5b9800000c00f3235004000000f30440f20c03506000000440f22c0b9800a00000f3266baf80cb8ca74c68cef66bafc0cec470f01c2"}}, @code={0x1, 0x68, {"66baf80cb848fc8381ef66bafc0ced66b87c008ed066baf80cb83c163180ef66bafc0cecdcbc0f370000000f0648b850870000000000000f23c00f21f83502000a000f23f8440f232ff3ab450fc728b8010000000f01c1"}}, @code={0x1, 0x53, {"f3450f015afec744240017000000c744240207000000ff1c24c4e3a968c2ebfd0f01c3c421f5e2d046e100f20f013d65eb00002e440f005900c4c25bf7be1f020000"}}, @cpuid={0x2, 0x18, {0x4, 0x7}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x6}], 0x23a})
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000840)=@arm64)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
setfsgid(0xee01)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r5, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7)

142.805988ms ago: executing program 4 (id=329):
mkdir(0x0, 0x9)
chdir(0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x4})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}})
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
lstat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)) (async)
lstat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300))
sendfile(r5, r1, 0x0, 0x80000000) (async)
sendfile(r5, r1, 0x0, 0x80000000)

128.000828ms ago: executing program 4 (id=330):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@verity_off}, {@xino_off}, {@xino_on}, {@redirect_dir_nofollow}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4b49, 0x2000000c)
lseek(r0, 0x10001, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'team_slave_1\x00', @random="ab1067a3e79c"})

53.56145ms ago: executing program 4 (id=331):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x4007)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats='])
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/50)

52.28819ms ago: executing program 4 (id=332):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x32d002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffe)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b8ec0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0)

51.72519ms ago: executing program 4 (id=333):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x7a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
chdir(&(0x7f0000000000)='./cgroup\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
setuid(0xee00)
prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x602, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
setpriority(0x1, 0x0, 0xffffffffffffffcd)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
lseek(r3, 0x10001, 0x0)
renameat2(r3, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./cgroup/../file0\x00', 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=334):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, 0x0, 0x0) (async)
r5 = dup(r2) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 32)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
read$FUSE(r7, &(0x7f0000001900)={0x2020}, 0x2020)
fsetxattr$trusted_overlay_upper(r3, 0x0, &(0x7f0000000180)={0x0, 0xfb, 0xcf, 0x2, 0x4, "a008ad4fa09aa0d4aa928bfd5a62f565", "4bae58a966cf3bef22ff9d20d59e3b811cf09d969b64703adef4a3bd848774d06e05e7637a62d06a7a1aafd742343f76bf8c8cc29b47e57ffee05b6b3f74744252428462abdf6ff99debb47377971fb5b92a67694026095a414e6ef8d797d349b2885a80fe98d0adf10a11288728a2bd70ae4120c8189f00f31ac3bcf8e6a596e5915b76fb84465a2eff187d1883e4f55317ce30e581b22bbc72b0d020b07248330b3f4b5b295e07abcc536c63df7251ac9d2e575e7b7dbb2421"}, 0xcf, 0x2) (async)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}})
read$FUSE(r8, &(0x7f0000001f40)={0x2020}, 0x2020) (async)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x1ff, 0x8, 0x8, 0xb61}, {0x1, 0x6c, 0xe1, 0x5}, {0x81, 0x3f, 0x12, 0x10001}, {0x800, 0x6, 0x2, 0x37}]}, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64)
sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x1}, 0x400c0) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async, rerun: 64)
recvmmsg(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/185, 0xb9, 0x1, 0x5}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
[   26.245911][   T36] audit: type=1400 audit(1751253455.340:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.247327][  T282] cgroup: Unknown subsys name 'net'
[   26.268602][   T36] audit: type=1400 audit(1751253455.340:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.296011][   T36] audit: type=1400 audit(1751253455.370:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.296199][  T282] cgroup: Unknown subsys name 'devices'
[   26.460746][  T282] cgroup: Unknown subsys name 'hugetlb'
[   26.466372][  T282] cgroup: Unknown subsys name 'rlimit'
[   26.561663][   T36] audit: type=1400 audit(1751253455.660:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.584940][   T36] audit: type=1400 audit(1751253455.660:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.593738][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.609895][   T36] audit: type=1400 audit(1751253455.660:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.641371][   T36] audit: type=1400 audit(1751253455.720:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.647131][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.666856][   T36] audit: type=1400 audit(1751253455.720:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.701199][   T36] audit: type=1400 audit(1751253455.740:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.726841][   T36] audit: type=1400 audit(1751253455.740:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.980358][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.987422][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.994601][  T292] bridge_slave_0: entered allmulticast mode
[   28.000950][  T292] bridge_slave_0: entered promiscuous mode
[   28.014252][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.021333][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.028489][  T292] bridge_slave_1: entered allmulticast mode
[   28.034746][  T292] bridge_slave_1: entered promiscuous mode
[   28.046206][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.053275][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.060372][  T289] bridge_slave_0: entered allmulticast mode
[   28.066609][  T289] bridge_slave_0: entered promiscuous mode
[   28.073030][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.080114][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.087176][  T289] bridge_slave_1: entered allmulticast mode
[   28.093514][  T289] bridge_slave_1: entered promiscuous mode
[   28.123903][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.130989][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.138222][  T290] bridge_slave_0: entered allmulticast mode
[   28.144567][  T290] bridge_slave_0: entered promiscuous mode
[   28.157828][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.164901][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.172002][  T290] bridge_slave_1: entered allmulticast mode
[   28.178298][  T290] bridge_slave_1: entered promiscuous mode
[   28.234033][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.241141][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.248315][  T291] bridge_slave_0: entered allmulticast mode
[   28.254569][  T291] bridge_slave_0: entered promiscuous mode
[   28.277864][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.284981][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.292164][  T291] bridge_slave_1: entered allmulticast mode
[   28.298472][  T291] bridge_slave_1: entered promiscuous mode
[   28.411631][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.418714][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.425989][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.433047][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.444408][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.451481][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.458784][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.465837][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.486223][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.493314][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.500626][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.507667][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.521327][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.528414][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.535688][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.542758][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.566783][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.574628][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.582170][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.589793][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.597219][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.604495][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.612053][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.619404][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.639723][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.646778][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.654480][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.661550][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.688137][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.695191][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.705552][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.712629][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.740561][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.747613][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.755462][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.762516][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.770794][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.777862][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.789214][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.796268][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.829461][  T289] veth0_vlan: entered promiscuous mode
[   28.857378][  T291] veth0_vlan: entered promiscuous mode
[   28.865202][  T289] veth1_macvtap: entered promiscuous mode
[   28.880461][  T292] veth0_vlan: entered promiscuous mode
[   28.889051][  T290] veth0_vlan: entered promiscuous mode
[   28.896273][  T291] veth1_macvtap: entered promiscuous mode
[   28.928144][  T292] veth1_macvtap: entered promiscuous mode
[   28.941698][  T290] veth1_macvtap: entered promiscuous mode
[   28.961749][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   29.057188][  T320] =======================================================
[   29.057188][  T320] WARNING: The mand mount option has been deprecated and
[   29.057188][  T320]          and is ignored by this kernel. Remove the mand
[   29.057188][  T320]          option from the mount to silence this warning.
[   29.057188][  T320] =======================================================
[   29.100491][  T320] binder: Unknown parameter '01777777777777777777777'
[   29.147069][  T334] netlink: 'syz.2.10': attribute type 4 has an invalid length.
[   29.155947][  T334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4
[   29.189102][  T342] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.199132][  T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.222744][  T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6
[   29.245724][  T341] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.276254][  T342] rust_binder: Write failure EINVAL in pid:6
[   29.276386][  T347] rust_binder: Write failure EINVAL in pid:6
[   29.368260][    T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   29.420562][  T354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'.
[   29.517333][  T359] netlink: 220 bytes leftover after parsing attributes in process `syz.0.19'.
[   29.529366][    T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   29.541008][    T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   29.548138][   T64] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[   29.560088][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   29.577230][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   29.588202][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.607535][    T9] usb 2-1: config 0 descriptor??
[   29.613409][  T326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   29.709052][   T64] usb 4-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config
[   29.721598][   T64] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   29.742302][   T64] usb 4-1: config 0 interface 0 has no altsetting 0
[   29.768035][   T64] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   29.784164][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.794621][   T64] usb 4-1: config 0 descriptor??
[   29.907990][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   30.006966][  T365] ptm ptm8: ldisc open failed (-12), clearing slot 8
[   30.024440][    T9] logitech 0003:046D:C286.0001: unknown main item tag 0x6
[   30.039044][    T9] logitech 0003:046D:C286.0001: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0
[   30.052618][   T64] usb 4-1: USB disconnect, device number 2
[   30.058572][   T45] usb 1-1: Using ep0 maxpacket: 32
[   30.063483][  T370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   30.063725][  T370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:10
[   30.073737][    T9] logitech 0003:046D:C286.0001: no inputs found
[   30.099532][   T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   30.127954][   T45] usb 1-1: config 0 has no interface number 0
[   30.146583][   T45] usb 1-1: config 0 interface 184 has no altsetting 0
[   30.158238][   T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   30.184440][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.198176][   T45] usb 1-1: Product: syz
[   30.202392][   T45] usb 1-1: Manufacturer: syz
[   30.217300][   T45] usb 1-1: SerialNumber: syz
[   30.228389][   T45] usb 1-1: config 0 descriptor??
[   30.234377][   T45] smsc75xx v1.0.0
[   30.238740][  T307] usb 2-1: USB disconnect, device number 2
[   30.284569][  T382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.366071][  T377] tipc: Started in network mode
[   30.374080][  T377] tipc: Node identity 7f000001, cluster identity 4711
[   30.388421][  T377] tipc: Enabled bearer <udp:syz1>, priority 10
[   30.778155][  T401] can: request_module (can-proto-6) failed.
[   30.786477][  T401] can: request_module (can-proto-6) failed.
[   30.794624][  T401] can: request_module (can-proto-6) failed.
[   30.802077][  T401] can: request_module (can-proto-6) failed.
[   30.811247][  T401] can: request_module (can-proto-6) failed.
[   30.817665][  T401] can: request_module (can-proto-6) failed.
[   30.823828][  T401] can: request_module (can-proto-6) failed.
[   30.830642][  T401] can: request_module (can-proto-6) failed.
[   30.845054][  T401] can: request_module (can-proto-6) failed.
[   30.858507][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   30.887959][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   30.934166][  T418] binder: Bad value for 'max'
[   31.113539][  T424] kvm: pic: non byte write
[   31.167973][  T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.337965][  T307] usb 3-1: Using ep0 maxpacket: 32
[   31.344316][  T307] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   31.352849][  T307] usb 3-1: config 0 has no interface number 0
[   31.359165][  T307] usb 3-1: config 0 interface 184 has no altsetting 0
[   31.367516][  T307] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   31.376969][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.385239][  T307] usb 3-1: Product: syz
[   31.389683][  T307] usb 3-1: Manufacturer: syz
[   31.394368][  T307] usb 3-1: SerialNumber: syz
[   31.400558][  T307] usb 3-1: config 0 descriptor??
[   31.418854][  T307] smsc75xx v1.0.0
[   31.468002][   T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   31.507972][   T64] tipc: Node number set to 2130706433
[   31.617958][   T31] usb 4-1: Using ep0 maxpacket: 8
[   31.624398][   T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   31.636097][   T31] usb 4-1: config 179 has no interface number 0
[   31.645437][   T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   31.657005][   T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   31.668613][   T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   31.680145][   T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   31.692014][   T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   31.710227][   T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   31.719564][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.728966][  T427] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   31.789166][   T36] kauditd_printk_skb: 104 callbacks suppressed
[   31.789200][   T36] audit: type=1400 audit(1751253460.890:178): avc:  denied  { read write } for  pid=428 comm="syz.1.39" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   31.823458][  T429] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure
[   31.834138][   T36] audit: type=1400 audit(1751253460.890:179): avc:  denied  { open } for  pid=428 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   31.867985][  T307] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   31.883637][  T307] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   31.894502][   T36] audit: type=1400 audit(1751253460.920:180): avc:  denied  { ioctl } for  pid=428 comm="syz.1.39" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   31.920149][  T307] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   31.930786][  T307] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   31.945920][  T422] usb 4-1: USB disconnect, device number 3
[   31.946016][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   31.953495][  T307] usb 3-1: USB disconnect, device number 2
[   31.960290][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[   31.973178][   T36] audit: type=1400 audit(1751253460.920:181): avc:  denied  { ioctl } for  pid=428 comm="syz.1.39" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   31.991221][  T435] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   32.003730][   T36] audit: type=1400 audit(1751253460.920:182): avc:  denied  { execute } for  pid=415 comm="syz.2.34" path="/12/bus" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.039003][   T36] audit: type=1400 audit(1751253460.960:183): avc:  denied  { create } for  pid=428 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.080125][   T36] audit: type=1400 audit(1751253460.960:184): avc:  denied  { ioctl } for  pid=428 comm="syz.1.39" path="socket:[4707]" dev="sockfs" ino=4707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.124298][   T36] audit: type=1400 audit(1751253461.210:185): avc:  denied  { read write } for  pid=442 comm="syz.3.42" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   32.147803][   T36] audit: type=1400 audit(1751253461.210:186): avc:  denied  { open } for  pid=442 comm="syz.3.42" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   32.172305][   T36] audit: type=1400 audit(1751253461.270:187): avc:  denied  { create } for  pid=444 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   32.554678][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[   32.570506][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[   32.588192][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   32.600916][   T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[   32.616160][   T45] usb 1-1: USB disconnect, device number 2
[   33.059804][  T474] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   33.128234][  T478] binder: Unknown parameter 'con�LD��'
[   33.208148][  T480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.209354][  T481] netlink: 'syz.1.54': attribute type 153 has an invalid length.
[   33.255014][  T480] netlink: 'syz.1.54': attribute type 153 has an invalid length.
[   33.298557][  T480] rust_binder: Error in use_page_slow: ESRCH
[   33.298588][  T480] rust_binder: use_range failure ESRCH
[   33.314378][  T480] rust_binder: Failed to allocate buffer. len:112, is_oneway:true
[   33.322898][  T480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   33.331290][  T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:41
[   33.551457][  T502] binder: Unknown parameter 'dont_measure'
[   33.566827][  T502] binder: Unknown parameter 'dont_measure'
[   33.621386][  T507] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.707963][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   33.774498][  T511] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   33.784852][  T511] kvm: pic: non byte read
[   33.789613][  T511] kvm: pic: non byte read
[   33.878564][   T10] usb 1-1: too many configurations: 76, using maximum allowed: 8
[   33.887522][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   33.895190][   T10] usb 1-1: can't read configurations, error -61
[   34.007974][  T307] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   34.028005][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.159739][  T307] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   34.170833][  T307] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   34.181564][  T307] usb 4-1: config 0 interface 0 has no altsetting 0
[   34.188284][  T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   34.197419][   T10] usb 1-1: too many configurations: 76, using maximum allowed: 8
[   34.205218][  T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.214192][  T307] usb 4-1: config 0 descriptor??
[   34.219409][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   34.227006][   T10] usb 1-1: can't read configurations, error -61
[   34.227086][  T519] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   34.233515][   T10] usb usb1-port1: attempt power cycle
[   34.587962][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   34.608639][   T10] usb 1-1: too many configurations: 76, using maximum allowed: 8
[   34.618516][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   34.626120][   T10] usb 1-1: can't read configurations, error -61
[   34.648987][  T307] logitech 0003:046D:C286.0002: unknown main item tag 0x6
[   34.656907][  T530] fuse: Bad value for 'fd'
[   34.660103][  T307] logitech 0003:046D:C286.0002: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0
[   34.687938][  T307] logitech 0003:046D:C286.0002: no inputs found
[   34.762096][  T542] tipc: Started in network mode
[   34.767043][  T542] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   34.768079][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   34.777054][  T542] tipc: Enabled bearer <udp:syz0>, priority 10
[   34.808717][   T10] usb 1-1: too many configurations: 76, using maximum allowed: 8
[   34.817669][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[   34.826197][   T10] usb 1-1: can't read configurations, error -61
[   34.834835][   T10] usb usb1-port1: unable to enumerate USB device
[   34.852153][   T64] usb 4-1: USB disconnect, device number 4
[   34.870890][  T539] binder: Bad value for 'max'
[   35.036177][  T572] binder: Bad value for 'max'
[   35.053832][  T576] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   35.185996][  T586] rust_binder: Error while translating object.
[   35.194358][  T586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   35.200642][  T586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101
[   35.317992][   T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   35.389969][  T596] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   35.399560][  T596] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[   35.412970][  T599] rust_binder: validate_parent_fixup: new_min_offset=81, sg_entry.length=0
[   35.412990][  T599] rust_binder: Error while translating object.
[   35.421868][  T599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.428265][  T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108
[   35.489064][   T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   35.492931][  T603] input: syz0 as /devices/virtual/input/input5
[   35.501804][   T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   35.510847][  T603] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   35.519622][   T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   35.524280][  T603] rust_binder: Write failure EINVAL in pid:110
[   35.532970][   T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   35.564490][   T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   35.579249][   T64] usb 2-1: Product: syz
[   35.583458][   T64] usb 2-1: Manufacturer: syz
[   35.595878][   T64] usb 2-1: SerialNumber: syz
[   35.668257][  T610] fuse: Bad value for 'user_id'
[   35.673158][  T610] fuse: Bad value for 'user_id'
[   35.697972][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   35.818103][   T64] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   35.849101][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.860212][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.870491][   T45] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[   35.880129][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.888781][   T64] tipc: Node number set to 1
[   35.895261][   T45] usb 4-1: config 0 descriptor??
[   35.910173][  T613] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.917285][  T613] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.924512][  T613] bridge_slave_0: entered allmulticast mode
[   35.931085][  T613] bridge_slave_0: entered promiscuous mode
[   35.937754][  T613] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.944856][  T613] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.952023][  T613] bridge_slave_1: entered allmulticast mode
[   35.958414][  T613] bridge_slave_1: entered promiscuous mode
[   36.020110][  T307] usb 2-1: USB disconnect, device number 3
[   36.026978][  T307] usblp0: removed
[   36.053081][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.060205][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.079260][  T207] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.086353][  T207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.116172][  T613] veth0_vlan: entered promiscuous mode
[   36.129272][  T613] veth1_macvtap: entered promiscuous mode
[   36.181895][  T626] rust_binder: Failed to vm_insert_page(35184372105216): vma_addr:35184372101120 i:1 err:EFAULT
[   36.181929][  T626] rust_binder: Error in use_page_slow: EFAULT
[   36.193072][  T626] rust_binder: use_range failure EFAULT
[   36.199529][  T626] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   36.205172][  T626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   36.213621][  T626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2
[   36.290608][  T638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1114 sclass=netlink_route_socket pid=638 comm=syz.1.100
[   36.341425][  T646] incfs: Error accessing: ./file0.
[   36.345626][  T645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   36.346705][  T645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13
[   36.348933][  T646] incfs: mount failed -20
[   36.618984][   T45] usbhid 4-1:0.0: can't add hid device: -71
[   36.626473][   T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   36.637716][   T45] usb 4-1: USB disconnect, device number 5
[   36.649880][  T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110
[   36.721349][  T671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.111'.
[   36.921020][  T692] rust_binder: Error while translating object.
[   36.921050][  T692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.927353][  T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   36.947962][   T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   36.967433][   T36] kauditd_printk_skb: 60 callbacks suppressed
[   36.967453][   T36] audit: type=1400 audit(1751253466.060:248): avc:  denied  { mount } for  pid=697 comm="syz.0.121" name="/" dev="ramfs" ino=6745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   37.025068][   T36] audit: type=1400 audit(1751253466.120:249): avc:  denied  { sqpoll } for  pid=704 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   37.046764][  T207] bridge_slave_1: left allmulticast mode
[   37.052713][  T207] bridge_slave_1: left promiscuous mode
[   37.062406][  T207] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.070545][  T207] bridge_slave_0: left allmulticast mode
[   37.076397][  T207] bridge_slave_0: left promiscuous mode
[   37.084295][  T207] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.109245][   T64] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[   37.127415][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.137004][   T64] usb 5-1: config 0 descriptor??
[   37.185089][   T36] audit: type=1400 audit(1751253466.280:250): avc:  denied  { ioctl } for  pid=715 comm="syz.0.127" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   37.249963][  T207] veth1_macvtap: left promiscuous mode
[   37.257298][  T207] veth0_vlan: left promiscuous mode
[   37.272790][  T718] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   37.297526][   T36] audit: type=1400 audit(1751253466.390:251): avc:  denied  { setattr } for  pid=717 comm="syz.3.128" name="IEEE-802.15.4-MAC" dev="sockfs" ino=7246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   37.330226][  T718] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   37.454801][   T36] audit: type=1400 audit(1751253466.550:252): avc:  denied  { append } for  pid=730 comm="syz.0.130" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   37.490057][   T36] audit: type=1326 audit(1751253466.590:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=730 comm="syz.0.130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47a898e929 code=0x0
[   37.540488][   T36] audit: type=1400 audit(1751253466.640:254): avc:  denied  { watch watch_reads } for  pid=730 comm="syz.0.130" path="/23" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   37.546042][  T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.576794][  T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.588538][   T64] usbhid 5-1:0.0: can't add hid device: -71
[   37.594538][   T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   37.604122][   T64] usb 5-1: USB disconnect, device number 2
[   37.720030][  T207] bridge_slave_1: left allmulticast mode
[   37.725837][  T207] bridge_slave_1: left promiscuous mode
[   37.731776][  T207] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.739694][  T207] bridge_slave_0: left allmulticast mode
[   37.745431][  T207] bridge_slave_0: left promiscuous mode
[   37.751470][  T207] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.870490][  T207] tipc: Disabling bearer <udp:syz0>
[   37.875877][  T207] tipc: Left network mode
[   37.884359][  T207] veth1_macvtap: left promiscuous mode
[   37.889965][  T207] veth0_vlan: left promiscuous mode
[   37.965370][  T755] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.972521][  T755] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.979715][  T755] bridge_slave_0: entered allmulticast mode
[   37.986007][  T755] bridge_slave_0: entered promiscuous mode
[   37.992699][  T755] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.999876][  T755] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.006979][  T755] bridge_slave_1: entered allmulticast mode
[   38.013391][  T755] bridge_slave_1: entered promiscuous mode
[   38.057955][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   38.067191][  T755] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.074279][  T755] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.081776][  T755] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.088849][  T755] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.097297][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.104834][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.129287][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.136400][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.145557][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.152656][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.179060][  T755] veth0_vlan: entered promiscuous mode
[   38.191867][  T755] veth1_macvtap: entered promiscuous mode
[   38.218484][   T10] usb 4-1: Using ep0 maxpacket: 8
[   38.229198][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.243245][   T10] usb 4-1: config 0 has no interfaces?
[   38.249391][  T760] ./cgroup: Can't lookup blockdev
[   38.253661][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   38.264206][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.272282][   T10] usb 4-1: Product: syz
[   38.276578][   T10] usb 4-1: Manufacturer: syz
[   38.281246][   T10] usb 4-1: SerialNumber: syz
[   38.288670][   T10] usb 4-1: config 0 descriptor??
[   38.495570][   T36] audit: type=1400 audit(2000000000.860:255): avc:  denied  { setopt } for  pid=752 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.583177][   T36] audit: type=1400 audit(2000000000.950:256): avc:  denied  { connect } for  pid=785 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.613088][   T36] audit: type=1400 audit(2000000000.970:257): avc:  denied  { setattr } for  pid=785 comm="syz.0.146" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.917144][  T796] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   38.968689][  T798] Zero length message leads to an empty skb
[   39.027647][  T804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   39.131389][   T64] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   39.152085][   T64] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   39.199505][  T811] process 'syz.4.154' launched '/dev/fd/6' with NULL argv: empty string added
[   39.274898][  T811] kvm: pic: non byte write
[   39.339796][  T823] SELinux:  policydb magic number 0x8 does not match expected magic number 0xf97cff8c
[   39.349540][  T823] SELinux: failed to load policy
[   39.413673][  T828] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   39.445705][  T831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.554999][  T843] 9pnet: Could not find request transport: f�
[   39.572472][  T836] kvm: pic: non byte write
[   39.706582][  T850] rust_binder: Write failure EINVAL in pid:37
[   40.039041][  T852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   40.476337][  T863] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   40.699480][  T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.712669][  T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.759847][  T307] usb 4-1: USB disconnect, device number 6
[   40.791445][  T879] KVM: debugfs: duplicate directory 879-4
[   40.798056][   T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   40.847533][  T879] mmap: syz.5.175 (879): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   40.904741][  T587] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   40.912929][  T587] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   40.931487][  T887] fido_id[887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   40.947913][   T45] usb 1-1: Using ep0 maxpacket: 32
[   40.955827][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.966984][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.976791][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   40.990289][   T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   40.999418][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.009048][   T45] usb 1-1: config 0 descriptor??
[   41.018842][  T891] binder: Bad value for 'max'
[   41.037533][  T893] cgroup2: Unknown parameter 'nsdeleg!te'
[   41.087811][  T307] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[   41.237782][   T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   41.239389][  T307] usb 4-1: not running at top speed; connect to a high speed hub
[   41.253815][  T307] usb 4-1: config 7 has an invalid interface number: 38 but max is 0
[   41.262001][  T307] usb 4-1: config 7 has no interface number 0
[   41.268141][  T307] usb 4-1: config 7 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   41.279993][  T307] usb 4-1: config 7 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   41.291001][  T307] usb 4-1: config 7 interface 38 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[   41.302037][  T307] usb 4-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   41.312728][  T307] usb 4-1: config 7 interface 38 altsetting 0 endpoint 0x4 has invalid maxpacket 511, setting to 64
[   41.323603][  T307] usb 4-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   41.334239][  T307] usb 4-1: config 7 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[   41.345192][  T307] usb 4-1: config 7 interface 38 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   41.356015][  T307] usb 4-1: config 7 interface 38 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[   41.367317][  T307] usb 4-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[   41.379555][  T307] usb 4-1: New USB device found, idVendor=03f0, idProduct=371d, bcdDevice=69.28
[   41.388720][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.396733][  T307] usb 4-1: Product: syz
[   41.401049][  T307] usb 4-1: Manufacturer: syz
[   41.405672][  T307] usb 4-1: SerialNumber: syz
[   41.411492][  T877] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   41.582355][  T897] rust_binder: Error in use_page_slow: ESRCH
[   41.582399][  T897] rust_binder: use_range failure ESRCH
[   41.588680][  T897] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   41.594188][  T897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   41.602345][  T897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:48
[   41.621073][   T45] usbhid 1-1:0.0: can't add hid device: -71
[   41.638117][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   41.648730][  T307] usb 4-1: USB disconnect, device number 7
[   41.652539][   T45] usb 1-1: USB disconnect, device number 7
[   41.689099][  T906] rust_binder: Write failure EFAULT in pid:53
[   41.690234][  T906] SELinux: security_context_str_to_sid (h�k) failed with errno=-22
[   41.847789][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   41.997963][   T10] usb 5-1: Using ep0 maxpacket: 8
[   42.004053][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.013854][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[   42.022950][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.031691][   T10] usb 5-1: config 0 descriptor??
[   42.187716][   T64] usb 6-1: device descriptor read/64, error -71
[   42.378656][  T307] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   42.427710][   T64] usb 6-1: device descriptor read/64, error -71
[   42.439910][   T10] lenovo 0003:17EF:6062.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0
[   42.528746][  T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.538922][  T307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   42.547839][  T307] usb 1-1: config 1 has no interface number 0
[   42.553981][  T307] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.565680][  T307] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   42.576197][  T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   42.585286][  T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.593357][  T307] usb 1-1: Product: syz
[   42.597534][  T307] usb 1-1: Manufacturer: syz
[   42.602164][  T307] usb 1-1: SerialNumber: syz
[   42.667723][   T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   42.797691][   T64] usb 6-1: device descriptor read/64, error -71
[   43.009952][  T307] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[   43.015984][  T307] cdc_ncm 1-1:1.1: bind() failure
[   43.037666][   T64] usb 6-1: device descriptor read/64, error -71
[   43.147724][   T64] usb usb6-port1: attempt power cycle
[   43.166110][    T9] usb 1-1: USB disconnect, device number 8
[   43.224603][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   43.224621][   T36] audit: type=1400 audit(2000000005.590:272): avc:  denied  { mount } for  pid=927 comm="syz.3.192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   43.260687][   T36] audit: type=1400 audit(2000000005.630:273): avc:  denied  { append } for  pid=929 comm="syz.3.193" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.283765][   T36] audit: type=1400 audit(2000000005.630:274): avc:  denied  { write } for  pid=929 comm="syz.3.193" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.497640][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   43.507645][   T64] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   43.528716][   T64] usb 6-1: device descriptor read/8, error -71
[   43.547628][  T307] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   43.647619][    T9] usb 1-1: Using ep0 maxpacket: 16
[   43.653932][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.665020][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.668760][   T64] usb 6-1: device descriptor read/8, error -71
[   43.674887][    T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   43.694403][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   43.701166][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   43.710269][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.718367][  T307] usb 4-1: Using ep0 maxpacket: 16
[   43.724474][    T9] usb 1-1: config 0 descriptor??
[   43.729525][  T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.739715][  T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   43.750592][  T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   43.760098][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.768145][  T307] usb 4-1: Product: syz
[   43.772334][  T307] usb 4-1: Manufacturer: syz
[   43.776939][  T307] usb 4-1: SerialNumber: syz
[   43.917790][   T64] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   43.938721][   T64] usb 6-1: device descriptor read/8, error -71
[   43.983243][   T36] audit: type=1400 audit(2000000006.350:275): avc:  denied  { read } for  pid=929 comm="syz.3.193" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.006368][   T36] audit: type=1400 audit(2000000006.350:276): avc:  denied  { open } for  pid=929 comm="syz.3.193" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.068713][   T64] usb 6-1: device descriptor read/8, error -71
[   44.091525][  T307] usb 4-1: Audio class v2/v3 interfaces need an interface association
[   44.101891][  T307] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   44.112139][  T307] usb 4-1: USB disconnect, device number 8
[   44.120021][  T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.150146][   T36] audit: type=1400 audit(2000000006.520:277): avc:  denied  { bind } for  pid=924 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   44.151170][    T9] hid (null): global environment stack underflow
[   44.170103][   T36] audit: type=1400 audit(2000000006.540:278): avc:  denied  { bind } for  pid=924 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   44.175833][    T9] hid (null): unknown global tag 0xe
[   44.196011][   T64] usb usb6-port1: unable to enumerate USB device
[   44.206959][   T36] audit: type=1400 audit(2000000006.540:279): avc:  denied  { name_bind } for  pid=924 comm="syz.0.191" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   44.227610][   T36] audit: type=1400 audit(2000000006.540:280): avc:  denied  { node_bind } for  pid=924 comm="syz.0.191" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   44.376523][   T64] usb 1-1: USB disconnect, device number 9
[   44.681368][  T307] usb 5-1: USB disconnect, device number 3
[   44.708314][  T942] binder: Bad value for 'max'
[   44.715103][  T942] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[   44.717600][   T36] audit: type=1400 audit(2000000007.080:281): avc:  denied  { mount } for  pid=941 comm="syz.4.197" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   44.726676][  T942] usb usb8: usbfs: process 942 (syz.4.197) did not claim interface 0 before use
[   44.791475][  T946] rust_binder: Write failure EINVAL in pid:61
[   44.835887][  T951] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[   44.850140][  T951] SELinux: failed to load policy
[   44.904894][  T962] rust_binder: Error while translating object.
[   44.904934][  T962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   44.911540][  T962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70
[   45.020813][  T207] tipc: Subscription rejected, illegal request
[   45.337533][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   45.367530][  T307] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   45.467526][   T10] usb 1-1: device descriptor read/64, error -71
[   45.518736][  T307] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   45.529793][  T307] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   45.540460][  T307] usb 5-1: config 0 interface 0 has no altsetting 0
[   45.547085][  T307] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[   45.556189][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.564888][  T307] usb 5-1: config 0 descriptor??
[   45.570168][  T983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   45.699244][  T988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.215'.
[   45.707518][   T10] usb 1-1: device descriptor read/64, error -71
[   45.715165][  T988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[   45.729134][  T990] raw_sendmsg: syz.5.216 forgot to set AF_INET. Fix it!
[   45.746116][  T991] 9pnet_fd: Insufficient options for proto=fd
[   45.847623][  T587] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   45.947544][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   45.979853][  T307] usbhid 5-1:0.0: can't add hid device: -71
[   45.986116][  T307] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   45.994846][  T307] usb 5-1: USB disconnect, device number 4
[   46.009175][  T587] usb 4-1: unable to get BOS descriptor or descriptor too short
[   46.017654][  T587] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   46.027836][  T587] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   46.038181][  T587] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   46.047241][  T587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.055308][  T587] usb 4-1: Product: syz
[   46.059520][  T587] usb 4-1: Manufacturer: syz
[   46.064127][  T587] usb 4-1: SerialNumber: syz
[   46.077676][   T10] usb 1-1: device descriptor read/64, error -71
[   46.278108][  T587] usb 4-1: 0:2 : does not exist
[   46.284835][  T587] usb 4-1: USB disconnect, device number 9
[   46.294336][  T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.318157][   T10] usb 1-1: device descriptor read/64, error -71
[   46.431748][   T10] usb usb1-port1: attempt power cycle
[   46.777459][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   46.838169][   T10] usb 1-1: device descriptor read/8, error -71
[   46.872443][ T1009] binder: Bad value for 'max'
[   46.968445][   T10] usb 1-1: device descriptor read/8, error -71
[   47.217428][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   47.227423][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   47.248470][   T10] usb 1-1: device descriptor read/8, error -71
[   47.317408][  T307] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   47.378528][   T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   47.388297][   T10] usb 1-1: device descriptor read/8, error -71
[   47.396538][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   47.407942][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   47.418245][ T1034] serio: Serial port ttynull
[   47.422928][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   47.436370][   T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   47.445643][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.473875][   T31] usb 4-1: config 0 descriptor??
[   47.488527][  T307] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[   47.496767][  T307] usb 5-1: config 0 has no interface number 0
[   47.505458][   T10] usb usb1-port1: unable to enumerate USB device
[   47.513779][  T307] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   47.523121][  T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.531351][  T307] usb 5-1: Product: syz
[   47.535541][  T307] usb 5-1: Manufacturer: syz
[   47.540377][  T307] usb 5-1: SerialNumber: syz
[   47.548770][  T307] usb 5-1: config 0 descriptor??
[   47.745035][ T1041] can0: slcan on ptm0.
[   47.880110][ T1040] can0 (unregistered): slcan off ptm0.
[   47.884874][ T1024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.227'.
[   47.898122][   T31] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max
[   47.909799][   T31] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   47.926870][ T1058] overlay: filesystem on ./bus not supported as upperdir
[   47.937598][   T31] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   48.120687][ T1080] binder: Bad value for 'stats'
[   48.274300][   T36] kauditd_printk_skb: 37 callbacks suppressed
[   48.274318][   T36] audit: type=1400 audit(2000000010.640:319): avc:  denied  { view } for  pid=1087 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   48.275467][ T1088] binder: Unknown parameter 'proc/keys'
[   48.333438][   T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   48.357942][   T36] audit: type=1400 audit(2000000010.730:320): avc:  denied  { create } for  pid=1029 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   48.412237][ T1091] __vm_enough_memory: pid: 1091, comm: syz.4.230, bytes: 70373039144960 not enough memory for the allocation
[   48.487404][   T10] usb 6-1: device descriptor read/64, error -71
[   48.527476][    T9] usb 4-1: USB disconnect, device number 10
[   48.727326][   T10] usb 6-1: device descriptor read/64, error -71
[   48.847359][  T528] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   48.967440][   T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   48.999888][  T528] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   49.009028][  T528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.017051][  T528] usb 1-1: Product: syz
[   49.021273][  T528] usb 1-1: Manufacturer: syz
[   49.025918][  T528] usb 1-1: SerialNumber: syz
[   49.081043][   T36] audit: type=1400 audit(2000000011.450:321): avc:  denied  { ioctl } for  pid=1102 comm="syz.3.246" path="socket:[10770]" dev="sockfs" ino=10770 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.106174][   T10] usb 6-1: device descriptor read/64, error -71
[   49.108600][   T36] audit: type=1400 audit(2000000011.450:322): avc:  denied  { mount } for  pid=1102 comm="syz.3.246" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   49.182356][   T36] audit: type=1400 audit(2000000011.550:323): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   49.227616][   T36] audit: type=1400 audit(2000000011.600:324): avc:  denied  { create } for  pid=1109 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   49.347313][   T10] usb 6-1: device descriptor read/64, error -71
[   49.432302][   T36] audit: type=1400 audit(2000000011.800:325): avc:  denied  { getopt } for  pid=1113 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.457466][   T10] usb usb6-port1: attempt power cycle
[   49.480259][ T1120] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   49.615757][   T36] audit: type=1400 audit(2000000011.980:326): avc:  denied  { block_suspend } for  pid=1123 comm="syz.3.253" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   49.797383][   T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[   49.818208][   T10] usb 6-1: device descriptor read/8, error -71
[   49.948299][   T10] usb 6-1: device descriptor read/8, error -71
[   50.082310][  T307] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   50.092830][  T307] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   50.103629][  T307] asix 5-1:0.251: probe with driver asix failed with error -71
[   50.112346][  T307] usb 5-1: USB disconnect, device number 5
[   50.129886][ T1127] rust_binder: Error while translating object.
[   50.129918][ T1127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   50.136285][ T1127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:97
[   50.179359][ T1131] binder: Unknown parameter 'defcontext01777777777777777777777'
[   50.196063][   T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   50.218285][   T10] usb 6-1: device descriptor read/8, error -71
[   50.257584][ T1135] kvm: pic: non byte write
[   50.348329][   T10] usb 6-1: device descriptor read/8, error -71
[   50.420030][   T36] audit: type=1400 audit(2000000012.780:327): avc:  denied  { write } for  pid=1138 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   50.458138][   T10] usb usb6-port1: unable to enumerate USB device
[   50.777235][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   50.928430][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.939467][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.949258][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   50.962221][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   50.971393][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.982044][   T10] usb 4-1: config 0 descriptor??
[   51.389918][   T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xe
[   51.397533][   T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[   51.405120][   T10] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   51.414057][   T10] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   51.426518][  T307] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   51.447224][  T587] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   51.577195][  T587] usb 5-1: device descriptor read/64, error -71
[   51.579106][  T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.593665][  T307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   51.604135][  T307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   51.613285][  T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.615392][   T31] usb 1-1: USB disconnect, device number 14
[   51.621399][  T307] usb 6-1: Product: ဇ
[   51.632087][  T307] usb 6-1: Manufacturer: Ъ
[   51.637491][  T307] usb 6-1: SerialNumber: 竗⏎艉೟仄Ѱ츢궲牸獁禒躰琢砽鲡鏅앏醫㼦訖ꅢዅ웻㴰忉팳쐘Ğ鏁苪㜂䘜⫞ဩꏹ㊴ﴉ鐥颈萃橏⏼漰ﲀٮ㝏援挄虩݈謖퓾얥β㰛᪾骇⠊䯀䓷␃㎃픚諁跌ᾕꠧ⦘黧ᑋ䚭煊荀滪侜嵋ツ鑷⑱姸ଷ꛷覐㲌켜媞̜௸❮툕瑠스䝽⁲ᯌ訣쿪겹纛厂镢빖䠅膀㌗鹻
[   51.683228][  T528] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   51.691427][  T528] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.704107][   T64] usb 4-1: USB disconnect, device number 11
[   51.725522][ T1155] fido_id[1155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   51.817178][  T587] usb 5-1: device descriptor read/64, error -71
[   51.873525][ T1148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.882122][ T1148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.890726][   T36] audit: type=1400 audit(2000000014.260:328): avc:  denied  { create } for  pid=1146 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   52.007158][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   52.057157][  T587] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[   52.157528][   T31] usb 1-1: Using ep0 maxpacket: 8
[   52.163842][   T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   52.174048][   T31] usb 1-1: config 0 has no interfaces?
[   52.179633][   T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   52.188758][  T587] usb 5-1: device descriptor read/64, error -71
[   52.195064][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.203893][   T31] usb 1-1: config 0 descriptor??
[   52.422443][   T31] usb 1-1: USB disconnect, device number 15
[   52.428490][  T587] usb 5-1: device descriptor read/64, error -71
[   52.537225][  T587] usb usb5-port1: attempt power cycle
[   52.714918][ T1165] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472)
[   52.726453][ T1165] SELinux: failed to load policy
[   52.826602][ T1177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'.
[   52.878094][  T587] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[   52.893406][ T1183] input: syz1 as /devices/virtual/input/input11
[   52.901419][ T1183] netlink: 5 bytes leftover after parsing attributes in process `syz.3.271'.
[   52.913567][  T587] usb 5-1: device descriptor read/8, error -71
[   53.048320][  T587] usb 5-1: device descriptor read/8, error -71
[   53.109714][ T1192] rust_binder: Write failure EINVAL in pid:171
[   53.297096][  T587] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[   53.328096][  T587] usb 5-1: device descriptor read/8, error -71
[   53.347085][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   53.458166][  T587] usb 5-1: device descriptor read/8, error -71
[   53.498137][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.509124][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.519010][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   53.531953][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   53.541317][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.550120][   T10] usb 1-1: config 0 descriptor??
[   53.567189][  T587] usb usb5-port1: unable to enumerate USB device
[   53.667047][  T528] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   53.817029][  T528] usb 4-1: Using ep0 maxpacket: 16
[   53.823281][  T528] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.833539][  T528] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[   53.847497][  T528] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.856577][  T528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   53.864665][  T528] usb 4-1: SerialNumber: syz
[   53.871425][  T528] cdc_acm 4-1:1.0: skipping garbage
[   54.039274][ T1197] rust_binder: Error while translating object.
[   54.039306][ T1197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   54.045512][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:112
[   54.055936][ T1197] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.065371][ T1199] rust_binder: Error while translating object.
[   54.072055][ T1199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   54.082849][  T528] usb 4-1: USB disconnect, device number 12
[   54.100564][ T1199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:112
[   54.100721][  T307] usb 6-1: 0:2 : does not exist
[   54.125381][  T307] usb 6-1: USB disconnect, device number 10
[   54.146594][  T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.163086][ T1192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.173319][ T1192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.183745][   T10] plantronics 0003:047F:FFFF.000A: report_id 4026511128 is invalid
[   54.191835][   T10] plantronics 0003:047F:FFFF.000A: item 0 4 1 8 parsing failed
[   54.199784][   T10] plantronics 0003:047F:FFFF.000A: parse failed
[   54.206231][   T10] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22
[   54.235311][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116
[   54.270306][ T1212] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.281'.
[   54.361279][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   54.361298][   T36] audit: type=1400 audit(2000000016.720:331): avc:  denied  { ioctl } for  pid=1213 comm="syz.5.282" path="socket:[12419]" dev="sockfs" ino=12419 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   54.430025][  T307] usb 1-1: USB disconnect, device number 16
[   54.604372][   T36] audit: type=1400 audit(2000000016.960:332): avc:  denied  { bind } for  pid=1216 comm="syz.5.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.632755][   T36] audit: type=1400 audit(2000000016.990:333): avc:  denied  { setopt } for  pid=1220 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   54.713959][   T36] audit: type=1400 audit(2000000017.070:334): avc:  denied  { write } for  pid=1224 comm="syz.5.287" path="socket:[12497]" dev="sockfs" ino=12497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   54.760397][   T36] audit: type=1400 audit(2000000017.120:335): avc:  denied  { append } for  pid=1228 comm="syz.5.289" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   54.809674][   T36] audit: type=1400 audit(2000000017.170:336): avc:  denied  { remount } for  pid=1234 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.839225][ T1237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132
[   55.246992][  T307] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   55.289029][   T36] audit: type=1400 audit(2000000017.650:337): avc:  denied  { read } for  pid=1265 comm="syz.3.301" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   55.316107][   T36] audit: type=1400 audit(2000000017.650:338): avc:  denied  { open } for  pid=1265 comm="syz.3.301" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   55.341950][   T36] audit: type=1400 audit(2000000017.680:339): avc:  denied  { ioctl } for  pid=1265 comm="syz.3.301" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   55.418451][  T307] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[   55.431947][  T307] usb 1-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   55.445305][  T307] usb 1-1: config 0 interface 0 has no altsetting 0
[   55.452183][  T307] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[   55.461463][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.472762][  T307] usb 1-1: config 0 descriptor??
[   55.479583][  T307] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   55.546974][   T31] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[   55.691553][   T36] audit: type=1400 audit(2000000018.051:340): avc:  denied  { setopt } for  pid=1278 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.707144][  T587] usb 1-1: USB disconnect, device number 17
[   55.731469][   T31] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   55.750889][   T31] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   55.765372][ T1286] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.765946][ T1286] rust_binder: Write failure EFAULT in pid:132
[   55.774423][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[   55.797005][   T31] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   55.814474][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.826463][ T1294] tmpfs: Bad value for 'huge'
[   55.832099][   T31] usb 6-1: config 0 descriptor??
[   55.842398][ T1270] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   56.035527][ T1306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.035567][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145
[   56.258426][   T31] holtek_mouse 0003:04D9:A067.000B: bogus close delimiter
[   56.285534][   T31] holtek_mouse 0003:04D9:A067.000B: item 0 2 2 10 parsing failed
[   56.293857][   T31] holtek_mouse 0003:04D9:A067.000B: hid parse failed: -22
[   56.301283][   T31] holtek_mouse 0003:04D9:A067.000B: probe with driver holtek_mouse failed with error -22
[   56.476949][  T587] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   56.478564][  T307] usb 6-1: USB disconnect, device number 11
[   56.646918][  T587] usb 4-1: Using ep0 maxpacket: 16
[   56.653168][  T587] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   56.661434][   T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   56.669119][  T587] usb 4-1: config 0 has no interface number 0
[   56.675221][  T587] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.686559][  T587] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.696383][  T587] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   56.705461][  T587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.714229][  T587] usb 4-1: config 0 descriptor??
[   56.806873][   T64] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   56.826856][   T31] usb 1-1: Using ep0 maxpacket: 32
[   56.833186][   T31] usb 1-1: config index 0 descriptor too short (expected 43923, got 36)
[   56.841623][   T31] usb 1-1: config 11 has too many interfaces: 157, using maximum allowed: 32
[   56.850462][   T31] usb 1-1: config 11 has an invalid descriptor of length 101, skipping remainder of the config
[   56.860849][   T31] usb 1-1: config 11 has 0 interfaces, different from the descriptor's value: 157
[   56.870119][   T31] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[   56.879289][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.966854][   T64] usb 5-1: Using ep0 maxpacket: 32
[   56.973112][   T64] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   56.981282][   T64] usb 5-1: config 0 has no interface number 0
[   56.988794][   T64] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   56.998013][   T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.006060][   T64] usb 5-1: Product: syz
[   57.010315][   T64] usb 5-1: Manufacturer: syz
[   57.014968][   T64] usb 5-1: SerialNumber: syz
[   57.020918][   T64] usb 5-1: config 0 descriptor??
[   57.027182][   T64] smsc95xx v2.0.0
[   57.131325][ T1326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.140738][ T1326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.154099][   T31] usb 1-1: string descriptor 0 read error: -71
[   57.161846][   T31] usb 1-1: USB disconnect, device number 18
[   57.228440][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   57.246944][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   57.265603][   T64] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   57.286292][   T64] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   57.305385][   T64] usb 5-1: USB disconnect, device number 10
[   57.320966][  T587] uclogic 0003:28BD:0071.000C: pen parameters not found
[   57.327221][ T1338] rust_binder: Failed copying remainder into alloc: EFAULT
[   57.327956][ T1338] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   57.328273][  T587] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring
[   57.344062][ T1338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   57.357234][ T1338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:165
[   57.477851][ T1353] overlayfs: missing 'workdir'
[   57.507812][ T1356] binder: Bad value for 'stats'
[   57.612374][ T1362] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18:
[   57.612374][ T1362] null pointer dereference occurred
[   57.624928][ T1362] ------------[ cut here ]------------
[   57.630472][ T1362] kernel BUG at rust/helpers/bug.c:7!
[   57.636283][ T1362] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[   57.643263][ T1362] CPU: 1 UID: 0 PID: 1362 Comm: syz.4.334 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad
[   57.656675][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   57.666746][ T1362] RIP: 0010:rust_helper_BUG+0x8/0x10
[   57.672057][ T1362] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 30 a8 fe bd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7a 6c b7 31 90 90 90 90 90 90 90 90 90
[   57.691684][ T1362] RSP: 0018:ffffc9000d45f1b0 EFLAGS: 00010246
[   57.697773][ T1362] RAX: 000000000000005a RBX: 1ffff92001a8be38 RCX: 1d7ecb110bc50d00
[   57.705751][ T1362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   57.713729][ T1362] RBP: ffffc9000d45f1b0 R08: ffffc9000d45eea7 R09: 1ffff92001a8bdd4
[   57.721711][ T1362] R10: dffffc0000000000 R11: fffff52001a8bdd5 R12: 0000000000000000
[   57.729703][ T1362] R13: dffffc0000000000 R14: ffffc9000d45f1e0 R15: ffffc9000d45f210
[   57.737678][ T1362] FS:  00007fc07c2176c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   57.746611][ T1362] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.753193][ T1362] CR2: 00007fc07c1f4568 CR3: 000000011529c000 CR4: 00000000003526b0
[   57.761178][ T1362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.769152][ T1362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.777127][ T1362] Call Trace:
[   57.780407][ T1362]  <TASK>
[   57.783344][ T1362]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[   57.790814][ T1362]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[   57.796866][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   57.798803][ T1362]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[   57.819906][ T1362]  ? p9pdu_vwritef+0x2720/0x2720
[   57.824861][ T1362]  ? radix_tree_node_alloc+0x1af/0x400
[   57.830324][ T1362]  ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0
[   57.838575][ T1362]  ? __asan_memcpy+0x5a/0x80
[   57.843171][ T1362]  _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0
[   57.851248][ T1362]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10
[   57.860030][ T1362]  ? p9pdu_writef+0xdb/0x130
[   57.864650][ T1362]  ? p9pdu_vwritef+0x2720/0x2720
[   57.869606][ T1362]  _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c
[   57.878745][ T1362]  _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40
[   57.887613][ T1362]  ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570
[   57.895455][ T1362]  _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570
[   57.903105][ T1362]  ? p9_client_prepare_req+0x732/0xa10
[   57.908590][ T1362]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10
[   57.916855][ T1362]  ? __kasan_check_write+0x18/0x20
[   57.921997][ T1362]  ? _raw_spin_lock+0x8c/0x120
[   57.926780][ T1362]  ? __cfi__raw_spin_lock+0x10/0x10
[   57.931991][ T1362]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10
[   57.940247][ T1362]  p9_fd_request+0x38d/0x500
[   57.944843][ T1362]  p9_client_rpc+0x2f9/0xb40
[   57.949439][ T1362]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   57.955252][ T1362]  ? p9_fid_create+0x3d0/0x3d0
[   57.956847][   T10] usb 6-1: Using ep0 maxpacket: 32
[   57.960032][ T1362]  ? vhost_chr_poll+0x7f/0xd0
[   57.960066][ T1362]  ? vhost_vsock_chr_poll+0x45/0x50
[   57.966346][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   57.969854][ T1362]  ? p9_conn_create+0x4c9/0x570
[   57.969884][ T1362]  ? p9_fd_create+0x2f3/0x4c0
[   57.969907][ T1362]  p9_client_create+0x96a/0x1190
[   57.977298][   T10] usb 6-1: config 0 has no interfaces?
[   57.985176][ T1362]  ? __cfi_p9_client_create+0x10/0x10
[   57.990450][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   57.994708][ T1362]  ? kasan_save_alloc_info+0x40/0x50
[   57.999993][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.005116][ T1362]  ? __kasan_kmalloc+0x96/0xb0
[   58.015615][   T10] usb 6-1: config 0 descriptor??
[   58.019530][ T1362]  ? kstrdup+0x7b/0x140
[   58.019564][ T1362]  ? __kasan_check_write+0x18/0x20
[   58.019592][ T1362]  v9fs_session_init+0x1e1/0x1820
[   58.056867][ T1362]  ? __cfi_v9fs_session_init+0x10/0x10
[   58.062352][ T1362]  ? kasan_save_alloc_info+0x40/0x50
[   58.067640][ T1362]  ? __kasan_kmalloc+0x96/0xb0
[   58.072412][ T1362]  ? v9fs_mount+0xbd/0xa00
[   58.076832][ T1362]  v9fs_mount+0xd7/0xa00
[   58.081088][ T1362]  ? __cfi_v9fs_mount+0x10/0x10
[   58.085946][ T1362]  ? selinux_capable+0x38/0x50
[   58.090719][ T1362]  legacy_get_tree+0x106/0x1b0
[   58.095491][ T1362]  ? __cfi_v9fs_mount+0x10/0x10
[   58.100346][ T1362]  vfs_get_tree+0x9e/0x290
[   58.104765][ T1362]  do_new_mount+0x251/0xb40
[   58.109270][ T1362]  ? security_capable+0xcf/0xf0
[   58.114125][ T1362]  path_mount+0x688/0x1050
[   58.118545][ T1362]  ? putname+0x113/0x150
[   58.122800][ T1362]  __se_sys_mount+0x2bd/0x480
[   58.127485][ T1362]  ? __x64_sys_mount+0xf0/0xf0
[   58.132253][ T1362]  ? __kasan_check_write+0x18/0x20
[   58.137368][ T1362]  ? fpregs_restore_userregs+0x11d/0x260
[   58.143002][ T1362]  __x64_sys_mount+0xc3/0xf0
[   58.147597][ T1362]  x64_sys_call+0x2021/0x2ee0
[   58.152280][ T1362]  do_syscall_64+0x58/0xf0
[   58.156699][ T1362]  ? clear_bhb_loop+0x50/0xa0
[   58.161390][ T1362]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   58.167285][ T1362] RIP: 0033:0x7fc07b38e929
[   58.171715][ T1362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.191322][ T1362] RSP: 002b:00007fc07c217038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   58.199743][ T1362] RAX: ffffffffffffffda RBX: 00007fc07b5b5fa0 RCX: 00007fc07b38e929
[   58.207721][ T1362] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[   58.215879][ T1362] RBP: 00007fc07b410b39 R08: 0000200000000700 R09: 0000000000000000
[   58.223914][ T1362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.231917][ T1362] R13: 0000000000000000 R14: 00007fc07b5b5fa0 R15: 00007ffc4c5d9c18
[   58.239954][ T1362]  </TASK>
[   58.242980][ T1362] Modules linked in:
[   58.247195][ T1362] ---[ end trace 0000000000000000 ]---
[   58.254260][ T1362] RIP: 0010:rust_helper_BUG+0x8/0x10
[   58.259733][ T1362] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 30 a8 fe bd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7a 6c b7 31 90 90 90 90 90 90 90 90 90
[   58.279552][ T1362] RSP: 0018:ffffc9000d45f1b0 EFLAGS: 00010246
[   58.285664][ T1362] RAX: 000000000000005a RBX: 1ffff92001a8be38 RCX: 1d7ecb110bc50d00
[   58.293687][ T1362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   58.301720][ T1362] RBP: ffffc9000d45f1b0 R08: ffffc9000d45eea7 R09: 1ffff92001a8bdd4
[   58.309760][ T1362] R10: dffffc0000000000 R11: fffff52001a8bdd5 R12: 0000000000000000
[   58.317772][ T1362] R13: dffffc0000000000 R14: ffffc9000d45f1e0 R15: ffffc9000d45f210
[   58.325761][ T1362] FS:  00007fc07c2176c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   58.334732][ T1362] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.341357][ T1362] CR2: 00007fc07c1f4568 CR3: 000000011529c000 CR4: 00000000003526b0
[   58.349368][ T1362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   58.357414][ T1362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   58.358988][   T10] usb 4-1: USB disconnect, device number 13
[   58.365425][ T1362] Kernel panic - not syncing: Fatal exception
[   58.365790][ T1362] Kernel Offset: disabled