last executing test programs:

4m14.572950412s ago: executing program 32 (id=89):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c)
syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x80000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3m7.511888319s ago: executing program 33 (id=903):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRES16, @ANYRESHEX, @ANYRES32=r1], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368657461673da77db7807ff2e33c23fc48e6662b3dd1862de225fb4486669cb731e0c27ed806933549c69dde088301f12b40a450bbf63a85ba0312c4aed65a082b1690f81e07e257120d3bfd8cfb62867d1a0b7019a99e8efbdeabc449dda523f70daec89cbf6264c703642945e52c616669643d3078303030303030303030303030303030342c00f23dc6457f4e96b191da5c1d03164c149d7f592c8fec1d7e4e0eb0188207e1e414de0db31e15ec48e07d10ddbc39b85d3bad748cf1099f1370"])
r5 = open(&(0x7f0000000080)='./file1\x00', 0x509940, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)

2m4.268477596s ago: executing program 34 (id=1643):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x1000})
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005194d7af28771ff22152b356f6c2e70249931e1e9feb25df26c93c1b4eeb10f0b49e396e200729d2229237c7e523517da7c98009972ca0b76929c0617ba9495147f5896dff2d29d91526685298b35dc6b2a3535f63e68dc900000000000000", @ANYRES16=r5, @ANYBLOB="00022cbd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x404c880}, 0x4004800)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req3={0x3, 0x100000001, 0x10002, 0x800001, 0xfffffffe, 0x37}, 0x1c)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r8, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@can, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r9 = signalfd(r2, &(0x7f0000000180)={[0xe]}, 0x8)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x38)
sendfile(r1, r9, &(0x7f0000000240)=0x8, 0x4)
socket$inet6(0xa, 0x2, 0x0)
truncate(&(0x7f00000004c0)='./file0\x00', 0x5)

1m34.981484575s ago: executing program 0 (id=1954):
eventfd2(0x58, 0x80000)
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40)
open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4)
timerfd_gettime(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}}, 0x14}}, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x1c4ec000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ptrace$peek(0x1, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
fcntl$lock(r1, 0x25, &(0x7f0000002780)={0x1, 0x0, 0x7, 0xf})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$key(0xf, 0x3, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
eventfd2(0x58, 0x80000) (async)
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async)
open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) (async)
open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) (async)
timerfd_gettime(0xffffffffffffffff, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}}, 0x14}}, 0x800) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x1c4ec000) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async)
ptrace$peek(0x1, 0x0, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
fcntl$lock(r1, 0x25, &(0x7f0000002780)={0x1, 0x0, 0x7, 0xf}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
socket$key(0xf, 0x3, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)

1m34.823833768s ago: executing program 0 (id=1956):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x1ff, 0x20000)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000380)=""/237) (async)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000300)=[@enter_looper, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0xffffffff}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x14a, 0x0, &(0x7f0000000ac0)="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"}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x2}, @release], 0x0, 0x0, 0x0})

1m34.697862738s ago: executing program 0 (id=1960):
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200010001001a00002b0000", 0x10)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x1054800, 0x0)

1m34.619713884s ago: executing program 0 (id=1963):
syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00')
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x2, 0x1)
memfd_secret(0x80000)
write$cgroup_pressure(r1, &(0x7f0000000600)={'full', 0x20, 0xffffffffffffff01, 0x20, 0x8000}, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000a40)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x4000cdd)
umount2(&(0x7f0000000040)='./file0\x00', 0xb) (async)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000080)) (async)
setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000080))
timer_create(0x4, 0x0, &(0x7f0000000480))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) (async)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0)
setreuid(0x0, 0x0)
syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/pid_for_children\x00')
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0xfc}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

1m34.372062754s ago: executing program 0 (id=1966):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x90441, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
r5 = socket$inet6(0x10, 0x2, 0x4)
close(r3)
sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

1m34.198670458s ago: executing program 0 (id=1968):
sync()
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xee47, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080000000000700000b0539"])
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x1, 0x4004040)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x10, 0x0, 0x0, 0x5d})
preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000140)=""/119, 0x77}, {0x0}, {0x0}], 0x3, 0x5, 0x7, 0xb)

1m21.419626222s ago: executing program 6 (id=2062):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002c0001000000000000000800020000008f6af491d2c9b1"], 0x2c}], 0x1}, 0xcc000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5e1342, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x3, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)

1m21.257151075s ago: executing program 6 (id=2065):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02143c, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11)
close_range(r0, 0xffffffffffffffff, 0x0)

1m21.119421287s ago: executing program 6 (id=2069):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000180)=[@dead_binder_done, @exit_looper, @enter_looper, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0xffffffffffffffc6, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"})

1m21.020129475s ago: executing program 6 (id=2071):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x200000, 0x0)

1m21.019355485s ago: executing program 6 (id=2072):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
syz_clone(0x110254111, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000035000/0x4000)=nil, 0x4000}, 0x1})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syslog(0x1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000740))
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
r5 = userfaultfd(0x80001)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
write$selinux_access(r2, 0x0, 0x0)
read(r2, 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1m21.004674346s ago: executing program 6 (id=2073):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x6}, 0x1c)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="66b9870a00000f326526360fc79d2ed3baf80c66b814d6368d66efbafc0cb80000efb80b008ee00f0daeef00bad104ed0f23a2660fe5b1d75fa70f015de1", 0x3e}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.048178614s ago: executing program 35 (id=1968):
sync()
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xee47, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080000000000700000b0539"])
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x1, 0x4004040)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x10, 0x0, 0x0, 0x5d})
preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000140)=""/119, 0x77}, {0x0}, {0x0}], 0x3, 0x5, 0x7, 0xb)

1m16.548120366s ago: executing program 7 (id=2098):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000202)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
clock_nanosleep(0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xbf0a1000)

1m16.547471417s ago: executing program 7 (id=2099):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x4001080)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8040, 0x8)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x368, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8f6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "954bfc0efc7dd91bb9733d561688b24bfd29aaf65aab3e18377bcb3c"}}, @TIPC_NLA_NODE_ID={0xba, 0x3, "3ef1e27a03c837051d79ce926c1f473e760b70e9ef910de27bce509372cd50a5612d3b4031824336c2184a9716187667ee7d70a02c3199bc46aaeaad36d0ee15ae4af82d3ae2852bd42dadfe023b4b08fdede2debd2aee4f3ad1125bed546e50dd8b4ae7d13d153b841ff04c49ae007b00ef6762a98e421cda9bdd12ad510e400c0692bec53640a4acc76991190649402a726de32b30a67d9a09e48c8c1ca52a01a55b89f5c304aeaa8361f543a903cc2ef2b473fd49"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0571f8c3afd229c8029f309da2856245f3af3536993a0586640aef4b8519293687"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd1e}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x29c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TESTDATA={0xac, 0x45, "1816e82c0ad676d6576e5063b621d65fd55ab7cc27fee722795ed973f6675b087d2bd19a345408fd0432b95c2a6021938291eef7f68b055f4f34986776e603b4c54db09f93723c35435d9fb6820033f93b624bbd87944554a27d91a43e0fb59eeb58afdd6df4d891c27fd33e1f9a0a2e95765272e2e1671bd785998dccb3012229e5f33a4efea320629e5d5f9baee8836fe204120fd2175b07c4e9b5e3ca5a07bfde34de4c5c200f"}, @NL80211_ATTR_TESTDATA={0x8a, 0x45, "455fa2c2a1c83e7e1875c0445a4d7530618c3071b1b296f90ab0f28dbe2e83a1ffd320417ac6a3c859d3266d428f4e891005b26471cfea066310b32e71a3b6bc0f9ebd17b764dd2871c41493ffad91927efcbcc1f6e5f99aca900dbd8548653907aa8c5b85a5327bcf398529971965565273025abcfcc0d7331ebcb4645fd80056a78e975407"}, @NL80211_ATTR_TESTDATA={0x58, 0x45, "5be8c088f8346465d87f919b412f053f412d7127122cfecfff326b3d19fd8be0878b2763f9665634df311b2f3ec99b493499e0ac1e2f6aa524ee729d432a883415e863a4201e4371b36a3aeb1a1301f3fe56e58a"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "ab462b0a0ab93fa754a307cfcb6432933aeaa5027f8cbbb9f37745c9c80b3d463b0fce0b704819cd9aa5df7c8092614c6d410b06f8349aa6601ae9a7533926f30f0d71fbd7803b5768bc18b49d51cb2108d1211fb9a00504ed6966107c67c27eb527cb52fc5063a60c8914eb6e4941faf833f769d5b207b40f2e5b8d04e115d3150eb045a1eb32e63c33c88a5f1bbea8513e39ab620e2ee1fff89bd3b9a19d45c6c7a5d50344c4f76ed162e4693070cdce6210384b2fe22138cb91462c00c15c912181cabca9b9227ef4cf2b42e6fb0909e214716cdc443eadfec2cfc00e00072f0352b72875bd2a00"}]}, 0x29c}}, 0x20000880)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000a00)={0x10dc, 0x38, 0x800, 0x70bd2d, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x7b, 0x18, 0x0, 0x1, [@generic="dfd706503f8897a263daf31f2c29e4a255e9cf477125eeb1450edbd636a29dd442072d52e9b7ad0f12807910a9b8ad2fff7de571", @nested={0x4, 0x91}, @generic, @generic="06e9cbd9e26270ab116018a49e7c6b0ffe4e372a70874b2ad8580474e87ab47d7020fc21954ef53f2724cb4bdd73b4b7c74e0723e6bbf75cb18f88", @nested={0x4, 0x13a}]}, @generic="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", @generic="addcce6fa900fe6fff0b4c7270db3ef42ae2a0cf4f8b95c847385172e6ff2fe3b0d60fde8544e89746624b27f0c13accb0de28830a869fcb833c8e79b9bb57d41a89"]}, 0x10dc}}, 0xc801)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x150, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2f4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa8a, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ec7d8cf, @rand_addr=' \x01\x00', 0x7fffffff}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40801}, 0x4008000)
r6 = openat2(r1, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)={0x111401, 0x40}, 0x18)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001ec0)=[@text32={0x20, &(0x7f0000001e40)="b9800000c00f3235000400000f3062020f01df0f011f0f017584440f20c03509000000440f22c066b826010f00d8c4c1156a7ae4b8821300000f23d00f21f835100000010f23f8b9800000c00f3235004000000f30", 0x55}], 0x1, 0x20, &(0x7f0000001f00)=[@cstype0={0x4, 0x6}, @vmwrite={0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd5e}], 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xb4, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x41, 0xac, "e69bb9c9d612daed0b389f51523d80d8b2c01f94f7e1c598de6bc19b196d37783210a02a7e73c6812b41b7a6eef77c25dd66d678627eb57bcf55ac6dbf"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4a, 0xac, "bdb9b48bed8a96963cfa48467a6f67a325e185e7a336546573ba54d70fbf27fd8196dec2cbc5a17fe7cb1cd690c4bfbff3613c1a4ff7b00ba7397e1785bab08101c0a09056cb"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4044}, 0x80)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r8, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x78, 0x464, 0x400, 0x70bd27, 0x25dfdbfb, "d56a9945b5e86325d8d5cedc2480ab2e238b1b9027a8846f9aa1679be477968ec3ba5d2a47cb3f83265b5e4962630a8f52abcdf441a08e5df3c39384cab4f865150e230ef3b7da437fe4ecb5a0bc37dbc3dedc786fe6c63f3907882272752963c0be056b55a36b6f", ["", "", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x20000080)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r7)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x3c22cd09df4995de}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xfc, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdf8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1586}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002540)=<r10=>0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000002580)={0x0, <r11=>0x0})
r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004d80)='./file0\x00', 0x24241, 0x88)
r13 = getpgid(0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000005380)=0xe8)
sendmsg$netlink(r8, &(0x7f0000005400)={&(0x7f0000002500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f0000005200)=[{&(0x7f00000025c0)={0x160, 0x12, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x52, 0x0, 0x0, @uid=r10}, @nested={0x147, 0x99, 0x0, 0x1, [@generic="1b3c601fc7a77b7ac387c34a21026e28daedfd55596bdd3e849bc9e3abec16c107ff350d95b6621795cadcf5419aaa5017d559f73c87bec7780661b4b5c1c96a16b97ffeac382d12e7a1bc00471f40775e26ec640e5c738566", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x81}, @nested={0x4, 0x13d}, @generic="a73555184d44c4b14446c726ffeb2198f59f5401dac8becb53df3d8ae980fd57c268af478e151ed81f1206fbf62a75d702d90b83214478a5e79f504ec0d6041bc6", @generic="28ada96b443908a42ba99ae72a0d29b1cf28908ad2a07b48300eb62fca4ddeaff283701c8ef8321fbc9951b2786b307a930d64e5688cf0c3dca845c1b0a71360e620a32a0dfb44b42e48dfb50a99e0e5822e12633903329a7c2bc954072da079c6ddad10526a1ede817dd90f47b8b28e7d2be5d063c9003c77b6fd2efd0fec8a27ced2f4d5151c3247d1ff52fb", @typed={0x8, 0x23, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xb6}]}]}, 0x160}, {&(0x7f0000002740)={0x24, 0x16, 0x8, 0x70bd27, 0x25dfdbfe, "", [@nested={0xc, 0x13c, 0x0, 0x1, [@typed={0x4, 0x58}, @nested={0x4, 0xd2}]}, @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x6}]}, 0x24}, {&(0x7f0000002780)={0x1364, 0x30, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x78, 0x3f28, 0x0, 0x1, [@generic="e2521d5ccf923fc6fd079b655f75b0e913f8b079164117918eccaf7d64e7f2941fa82496d5c3563f88ee3600760636b6870df29da6fecceeabc20e4f0da5608742116c36de63e62951dd1cf9b6bf9c85c35cda355be861414f1605a658b2d58a184992d931b17c7eee39eb14d28ba517bd142ffe"]}, @nested={0x8, 0xdd, 0x0, 0x1, [@nested={0x4, 0xfb}]}, @nested={0x36, 0xc6, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@multicast1}, @generic="c6d701a8b2ebcd0963b8fa1f59e1db59b0ed27c6c21b", @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x97, 0x0, 0x0, 0x1, [@generic="d021ec6e2aec30825159aa410d19722ff48c250bfa0c5d19534d87d14896787a5ed46a807b3165fe2ee703c50e89643ce61333a1dd33d3ad05611b94c41309e1f5231b9ddb23b028429fb77d7ea6f472c5359bf155a58cf3218c679e2983e622c4afba2cae37f7b0455adc3ca25c718ac91432d449df242497d0653e021a59eaa9800711097e3b9e6bda2ffc88d56b150f8e4a"]}, @typed={0xf7, 0x63, 0x0, 0x0, @binary="b17cff125034df5d1e134246a3f983e444005c4d588ec1305205b8dfbec184af340903b7fa0bfab2d08fb538b1efa6282ddf154d4d42c3f9455bad31b2b5799b86997a5d3b3b137c3dcc3ef01f0132197ca1524c51a7d8d36c789495e5acb7a2442135f368592b379240b7fc13a734e64d84b2c064b99438e82a181ccda061a169d9ed0507e4947bbbdba5a6b253592ff4f99986bf2c23c70b11a31b45e6aa577650541a5a51c6b331a69fe3063c4d1cacc57f6a7f82d20931e247a15b46472850163771cbab46e8f8cbc3a8864933c11dd66305a887472129395be66d1c318ea4db1feb219e6ccb9e78ca42fda23181284b96"}, @generic="70c8ff35b7b2e1b9d25a3b8e72e38f29b829362305747999b048edbd12422e6ac473ca88b566bac3a7e7859f35aabae611a23da21a9cb90b1d6a44061111a10a83654050fb82805adf5c943b862ed8cbd001c5eec7e578c189a3f78b0addfbda", @nested={0x1095, 0x2f, 0x0, 0x1, [@nested={0x4, 0xa6}, @typed={0x1004, 0xe, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x19}, @nested={0x4, 0xa6}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x10}, @generic="e7f4dd236e6ad7c36cdcec37f10c99028e014764dbc98360a81a7107489d4ec33047e51c217468d30574bb43de4ee028c83c1ffe627797b75a5f4a0ed782e6f6bf479179d70593f885967b9ed455e3848468a6312cc3d47ae482b81aea67f7caa2d1de58951bcce734", @nested={0x4, 0x101}, @nested={0x4, 0x10e}, @nested={0x4, 0x74}]}, @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x1364}, {&(0x7f0000003b00)={0x9c, 0x27, 0x8, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0xa, 0x0, 0x0, @fd=r7}, @generic="ebd039e9128258fd9feed86ace67ceb66a6b9de0bc2f74caab3df77f9aeaa0f44d35e4b1b9f9e96a4f14d75e8f7559ff6477e848f079c2a69cfc6f68ede6f24cdf1a304750e6fdfb6686f93aa996688693b18f35480a8dfaa0c47bb56075ae6d70f52ce8e14727d56984797eef4fde8198835a5caaea6741ba6327febdbbb4db8dd338"]}, 0x9c}, {&(0x7f0000003bc0)={0x11c0, 0x17, 0x100, 0x70bd25, 0x25dfdbff, "", [@generic="9f69498ecf6437506d6b873fc5609938f1b54cff46d0b18fa9825ae8f7437560951d4d0306a3941995fd5db7d9b4ef8e473596fc0ed69f06f90f02feb6da169be2bbae709052c3fdd13a34f17033e9f12d0b5e979da4996ce76a32fcee61510996f77f61c874565f3fdc7ddd4509f3305ae62c073b8d93e0332d691c70271458a7f8900ddf4998ece942ea6660d1c12878083ac5b3c1b310cfbff691c9a39e93fec9541cdbd559668d18d95e8eea7951549d9286c6b786835f01fbabed3a0b5d6a59", @generic="8e3e0ef29e0b2bcf8b3e6b5b5fa5b9ca139dbb95e3a246831aed6a0a87dd894e544f3597869568957e21b87a0b293d41397a33481c3121f1d311954740ba853b41cea4dcdb744710bc20b07ee348976ef72d736f6ccdfed67dbaf882008ccee63d8ff920225a607bf0c80cdc33f1a3e78a28fdc0c62a208b53997247611ffef4d97971e551a41dca9d0f88a23008c016e96814f97169e1587f362b449ec05468a312", @typed={0x8, 0xa2, 0x0, 0x0, @u32=0xffff8000}, @typed={0x1004, 0xa0, 0x0, 0x0, @binary="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"}, @typed={0x9, 0x7c, 0x0, 0x0, @str='syz0\x00'}, @generic="fb58a7886eef", @nested={0x1c, 0x149, 0x0, 0x1, [@nested={0x4, 0x2c}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@loopback}]}, @generic="2f40ed7f8e69acf7634740539c07328045"]}, 0x11c0}, {&(0x7f0000004dc0)={0x2bc, 0x33, 0x20, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@loopback}, @nested={0x86, 0xaf, 0x0, 0x1, [@typed={0xa, 0x17, 0x0, 0x0, @str='wlan1\x00'}, @nested={0x4, 0x143}, @nested={0x4, 0xd7}, @generic, @generic="bc542f5c9cbc9408ee0f194bbaf4222458d2b3e6bbe89ec4c9b70c80dbb3e3ab60d7a01eb3a0fdddb6521b595d2cb6a6fe6b55bff758d60914809841591ef0c1c9c4952d00209ecc6cb068190e89682fb0d0be7105b614a5a3b40ab5a0d5a620557cd633b67f5cca9cdee1884ab6"]}, @nested={0xe1, 0x4, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @fd=r12}, @generic="2682015ffaca2a7f98c851b1a17a45597bf8cdb8b62c1fd8d5b197ff45d33f0382c1513a4b18bc6ccf77453d357cefb69b3bff9a009a2a16dd898a5d28325525fa50950f22adfd7652bf817aa3da3eddbe9b3f46b00a4fa8b4653bc9e950ea161f977bd5a9b528da8e22dfd93380e2dcefd9dbc79ed34973d0e3ff4964010360b1ebf72393a0f1ece0c845c1191eb18b4faf8882da8f7afce3c1bb583eb8dce20d1973dc9a7545a2b7300668278e964007b1e523bc6a51650399c3043189ca61725f68e719bbc2c13ffc529e035ea1bc3f", @nested={0x4, 0x38}]}, @generic="8b81e008ea031515cc4469518f1442898ca39c8611166e30808c958d1a1838a0a2b7cdb40f335e606b436a2259548a9d4b59ac0bc7d125d83f50c0a0d7a2faf74d47fae0b66b35c4b9dbec8aa0f3920b90fc043e38077f30f31d2c82a925fcc7cb7bed1a8f04d60d40d0cab1c43988a5406e25186a14b3834348f1d8923aaa1c0d6af018c378d43e41ceb39ee6578ec2befe71643db87f", @generic="c65e389336ae503b6c390c008a15703eb081fb60d17bc773d6d33f2ef96d6db4d22b45ef6083149a72daf4b47fdb273e2a1492e7387ecaad7bcba98e915dab532bc1f9427dfcf050a9ec7477d140b77d6e650929e915135c469e6bd61c1f6cb3f89d6eb460b398d9476f6d6cec03727e0f96b1b6337bb8294e4cb9521d249e34741a214d864840a049403b1bcc0e0526adeb09f14cef", @typed={0x8, 0xb5, 0x0, 0x0, @u32=0xe}]}, 0x2bc}, {&(0x7f0000005080)={0x178, 0x21, 0x100, 0x70bd25, 0x25dfdbfc, "", [@nested={0x6a, 0xdc, 0x0, 0x1, [@nested={0x4, 0xbc}, @generic="c0ec419596600ba69f69ef42e9ac7bd5f4ea6b1decb5a3e9c5201d389c4d86d5401486dee9da4f13f8498921a988f6e17ecb434dee2f72aeeb3c066322dd13a0ce66e3d7205b2210d79584d1b680b8efe857ac6922adfcc25b4b7c2a9c69", @nested={0x4, 0xf5}]}, @nested={0xeb, 0xb7, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@local}, @generic="37f0e78f58b6e4642dcc174f", @generic="3b1ab4d7e9694fadbfcbbcc87293c44d", @generic="c3925b094d2b075b02b06255382d635cb491a11e66d20a5836b56b63ac5807173c2d5430b8fab5968ab2a9756dc83ce0e74c1e40896d98f8508627caf28100aef398590b4e7bdacab1a40ed939d5d56cfdd7ae4d86413bd4e2d40a7b0321724bcce062c3d46fc8e346962033ab6453aa31c168c2ebcb9595c10e17e402ebe4a6d7896d610761c2cbb57a70f56a4c18378190a0da7b130e0175694ab6faed9b06cb0a3a301ee46a7f2a1d5fc59b9036ef0098853ac401e0c0eae7143fba66b3740ff4fe"]}, @generic="d28c6bc5ce6b0494e9741f5d4a"]}, 0x178}], 0x7, &(0x7f00000053c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14}}}], 0x20, 0x4008000}, 0x8000)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005480), r1)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000005580)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005540)={&(0x7f00000054c0)={0x6c, r15, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b0}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001)

1m16.320098865s ago: executing program 7 (id=2102):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00')
ioctl$BTRFS_IOC_RM_DEV(r5, 0x8008b705, 0x0)
sendto$unix(r4, &(0x7f0000000280)="c20923e83b098bb2efcb247b0f8aa0dd0781ceee85029a666ae2ed77ec01e4dbbbb96814656f36ff05628d454fc4c7b4fe65eb3003721bb8e7ebdb29c018465bc5d0f5b50eb586f19a8af9b66b9e15a94b9b58f8ec1b0c0c6c71cf8eb208a756b9476f5bc9a01532a212e45a05aa2f773ab3d0e1c8a4d924348b6a21490a858bb22edd20decd3addc8177dc6ec8b9242d458347b5e9e1421c8770a42eed13c83a66a03346b3ea9e5730bf624ded714603f784521d9866dc90e2c579fd61ffd9913ba808ada1aa57a8b7ff06f086be1", 0xcf, 0x20008000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.583951225s ago: executing program 1 (id=2113):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'nr0\x00', @broadcast}) (async)
r2 = dup2(r1, r0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2b, 'net_cls'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}]}, 0x19) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x3d, &(0x7f0000000140)=0x80000000, 0x4) (async)
fsetxattr(r1, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='!)+\\@#}-.%\x00', 0xb, 0x7) (async)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0x76c) (async)
ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000240)) (async)
syncfs(r1) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xd)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x62edb234}) (async)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x20, 0xf, 0xe8, {0xe8, 0xb, "5d9836ea0acd5e8dc5907436edb38a442076297a14dd7c514288b5aec8359371c686639632e892afac5bd6619e7bcb46629d91589f91a39fb149bd45358710da6ced8030d57793a2dda135882003b0e1537822e15c19c9385665142119d4c692583ea41e486a32ef272de50250b54b048bff6bbee18686cbbffce2f3507ea6f0f32b55bdd203d8dd153ec617de82d373aab0c5c6563a526b7ffd47b5e149615d3e799fe5e402ae6663aab27b8344bfd720eeb6f48938f114f030ef90124d7f644bbacc51246f0fb54f9d230ec7e53fa0eb8616271652389179b4ba6b64abb83029b599ef3b20"}}, &(0x7f0000000400)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f0000000540)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x80, 0x6}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0xf0, 0xb8, "d03d9ab8", "959253ac"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0xda, 0xe, 0x40, 0x3, 0xa}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0xa, 0xac, "45803ce19cfb7682ee53087c8e8d1dcb6bd94ca513c604581273cf6dc28bc11d943b6faaf57f480168257ca1a0542b6c2d662eac835cb764cb0c8f42bf892bde4b52f42a85f0437724155b6598f6c45395b63699f4eb9408e8f5dadffa3d03f9958fa8e1dc2b854107bc26095b8a791fe208a7f801813722caf3d7d6b2911fe3097f1ec2360fa110811cbb764d4942641d878aaca8f2f0863131c73f3d489c64d8acb15f4e9a82b89c0dc3d1"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x6}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x120, 0x1}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0xb, 0x2, "150d"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="248cbfd8ae4d"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="a8a33a980e0c"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "7c91"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x64}})
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000b80)) (async)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000bc0)={'binder1\x00'})
fcntl$getownex(r1, 0x10, &(0x7f0000000d00)={0x0, <r4=>0x0})
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000d40)=r4) (async)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000d80)) (async)
r5 = eventfd(0x5)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) (async)
r6 = accept4$inet(r2, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10, 0x1800)
ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000e40)='bond0\x00')
r7 = fsopen(&(0x7f0000000e80)='nsfs\x00', 0x1)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) (async)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000ec0)={0x1, r5}) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x10}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xdc19}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x24004002) (async)
close_range(r3, r5, 0x2)

1m14.060070228s ago: executing program 1 (id=2119):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x78c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x40000080)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2000)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10})
ioctl$UI_DEV_CREATE(r4, 0x5501)
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.02886423s ago: executing program 1 (id=2120):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142)
mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x8)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]})
syz_open_procfs(0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), 0x100)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x0, [0x7, 0x5, 0xeaaa]}, &(0x7f0000000600)=0x44)
r3 = socket(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
readlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=""/63, 0x3f)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x54, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e444416"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000400)})

1m13.265511362s ago: executing program 7 (id=2121):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003200000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0)
write$cgroup_pid(r2, &(0x7f00000004c0)=0xffffffffffffffff, 0x12)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0)
syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1c, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x8, 0x3, 0x1000008, 0x4c77, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x8, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x806, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0x8000, 0x129432e2, 0x9, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x76, 0x8, 0x10, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x1, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0x3, 0xfff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x0, 0x303c, 0x4, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cfd, 0x6, 0x3, 0x800003, 0x665, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x801, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ea, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x40, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x200000c8, 0x1, 0xfffff000, 0x20005, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x3, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
wait4(r6, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r6, 0x2, &(0x7f00000001c0)={&(0x7f0000001080)="4368ef332f136978648d70d9e7e3ef337167043c4474222cafae7c0529782eff07d6ac645bc814ca99f051da6ab54ee28ab1cd6922bb798b1dfd4c2e01a5207fc8443f463e70f350882708b681d6f8bb93ee5593786bd4159611e42e3ac8cbb91b429cae536c60faf3c3e5f7f3d1c21035b176245734e19a0933e0b42bfed1d057c2a88e50e9df628921eb2156015ef64a838356f2b7b3f2395539348910e1b71ddbca9aeeab71c86a21a3196452bd97295abf2b5da08a532abda384acbf558f0a973e6257b60c426605e437c097e26ba30ce672f08ea90fb4f41b69493756fa095cb1885a4406e78241a32f484844eb9c744983bedff6204aeef6c4022ca7a0c7d0a58089cccbfb158fe7b6071cf1a0cdac34d08d61790ebec0edb56179d00ea12f59efa1a9419c55da5b54459a42e0bde48cfceb758b14db8d4e33c8a8d3ffef4795c669e30c16f01ddce9edf02dd0f65f5a47715592db04125ed0f41d94d76b8abc4039ef2cf5411fae265c1909247aa55ca02c41b583998df40a4101cfde15ce28d18b47599243794e8927abb949bd719b570764825a170f0648857313063c7559e4a0858d8e1b3b25dfb4dc09b6928ead2ba297bcd710868eb12cf75552a6f35dd48852ca1e2d03de10f60fa1d5ce3ecf5da0b10d92968694c02efb02d71174e953ae1603d92ccf837963f28bf10e6ea080471cdd10a89e7d240b3ee541", 0x200})
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601)
ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522)

1m13.128020713s ago: executing program 1 (id=2122):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3314) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x89a5f000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) (async)
pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8) (async)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000300000006000400020000000e0001006e657464657673696d0000000f0402006e657464657673696d3000000800030001f8ffff06000400030000000e0001006e657464657673696d00000300605b357b8d925e1008f7d4cb710002026e657464657673696d300000080003"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)

1m13.124740593s ago: executing program 7 (id=2123):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x14, 0x0, &(0x7f0000001380))
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.090980866s ago: executing program 1 (id=2124):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$usbfs(&(0x7f0000000280), 0x1000, 0x80000)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x100, 0x4)
read$watch_queue(r2, &(0x7f0000000380)=""/221, 0xdd)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100))
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

1m13.013361532s ago: executing program 7 (id=2125):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs2/binder1\x00', 0xc03, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
pread64(r3, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]})
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0})

1m12.952142797s ago: executing program 36 (id=2125):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs2/binder1\x00', 0xc03, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
pread64(r3, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]})
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0})

1m12.908018811s ago: executing program 1 (id=2127):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000680))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd2(0xffffffff, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x400002, r4})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x0, r4})
r5 = eventfd(0xfffffc6f) (async)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRESOCT=r6], 0x0) (async)
write$eventfd(r1, &(0x7f0000000080)=0x200, 0x8) (async)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x3, r5}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
inotify_init()

1m12.824643978s ago: executing program 37 (id=2127):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000680))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd2(0xffffffff, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000002c0)={0x400002, r4})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x0, r4})
r5 = eventfd(0xfffffc6f) (async)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r5, @ANYRESOCT=r6], 0x0) (async)
write$eventfd(r1, &(0x7f0000000080)=0x200, 0x8) (async)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x3, r5}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
inotify_init()

1m5.1278083s ago: executing program 38 (id=2073):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x6}, 0x1c)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="66b9870a00000f326526360fc79d2ed3baf80c66b814d6368d66efbafc0cb80000efb80b008ee00f0daeef00bad104ed0f23a2660fe5b1d75fa70f015de1", 0x3e}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

50.217928677s ago: executing program 8 (id=2281):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

50.06007545s ago: executing program 8 (id=2287):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_clone(0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0)

50.05176673s ago: executing program 8 (id=2288):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="dc11830d4ef94450dde70f9328eb4f05727bca3c07e7fdd656f390d7c78cd36fc637c2839e49cda9663db5c092b13873e725a2dbfc78fc5ada921b2af43d1d52e076771b1b04837ac1f3cf84d114fe2e5a27109026e05402e21f1edb53b168dc8800af62389ec9f4bc42c8ce7db6007457330a2954584853347472d493b85cb5ca0972c4389308d8d637e511132066f30b7de5cb080b720458b0", @ANYRESDEC=r2, @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRES8=r0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10600}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xd59}}, 0x30)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000e45100010003000000000000000a0000000300", @ANYRES32=<r6=>r5], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000010)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x4, 0x10000, 0x6, 0x4000, 0x3, 0x6}, 0x1c)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f000012a000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES64, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESHEX=r6, @ANYRESHEX], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x42000)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x25, &(0x7f00000000c0)=0x6, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

49.878847884s ago: executing program 8 (id=2291):
r0 = socket$packet(0x11, 0x2, 0x300)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
ptrace(0x10, 0x0)
ptrace$cont(0x7, 0x0, 0x0, 0x7)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x10})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0)
read(r3, &(0x7f00000002c0)=""/147, 0x93)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10)
write$cgroup_pid(r4, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)="91", 0x1)
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)
getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

49.821091559s ago: executing program 8 (id=2292):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x848c0, 0x0)
r3 = dup(r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000100)=0x2, 0x4)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc8)
inotify_init1(0x800)
sync_file_range(r1, 0xfffffffffffff7ff, 0x40000001000d, 0x3)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x11)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = inotify_init()
ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000140)={0x80})

49.67974573s ago: executing program 8 (id=2296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_clone(0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0)

49.627397035s ago: executing program 39 (id=2296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_clone(0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0)

38.359689396s ago: executing program 9 (id=2420):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

38.31281993s ago: executing program 9 (id=2421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="66baa00066ed3666440738821d0000000026430f8688ae0000b9a5030000540f3232bad104b0fb6e3e0f01c53e0f21910f32440f20c0350e000000440f22c067660f32", 0x43}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000040), 0x4)
fadvise64(r3, 0xa, 0x400, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

38.100001677s ago: executing program 9 (id=2422):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) (async)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f000042b000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x2}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r4 = epoll_create1(0x0)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001})
shutdown(r5, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000080)={0x0, 0x8, [0x3, 0x6, 0x1, 0x8, 0x5, 0x5]}) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r7 = syz_open_pts(r3, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xaf, 0x16, '\x00\x00\x00\x00\v\x00'})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x4)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

38.084056918s ago: executing program 9 (id=2423):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioprio_set$pid(0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1/file0\x00', 0x20402, 0x1c)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)
r2 = gettid()
ptrace(0x10, r2)
capset(&(0x7f0000000800)={0x20080522, r2}, &(0x7f0000000840)={0x7, 0x1, 0x0, 0xb8f, 0x7d})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x5, @any, 0x4, 0x2}, 0xe)
close_range(r3, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000005200)=""/4104, 0x1008}, {&(0x7f0000000a40)=""/201, 0xc9}, {&(0x7f0000000b40)=""/204, 0xcc}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000980)=""/169, 0xa9}], 0xa)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000880), &(0x7f0000000040), 0x2, 0x1)
linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000240)='./bus\x00', 0x1000)
read$FUSE(r1, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
prctl$PR_SET_PTRACER(0x59616d61, r5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r6 = open(&(0x7f0000000900)='./file1/file0\x00', 0x32481, 0xd0)
getdents(r6, 0x0, 0x0)
bind$802154_dgram(r6, &(0x7f0000000940)={0x24, @none={0x0, 0x1}}, 0x14)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x5)

38.075650779s ago: executing program 9 (id=2424):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2}}, 0x10)
r2 = dup(r0)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8ee4a000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
write$cgroup_devices(r4, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa)
read$FUSE(r3, &(0x7f0000002680)={0x2020}, 0x2020)

38.024029913s ago: executing program 9 (id=2425):
r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
open(&(0x7f0000000080)='./file0\x00', 0x64842, 0x86)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8c682, 0x0)

38.023874333s ago: executing program 40 (id=2425):
r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
open(&(0x7f0000000080)='./file0\x00', 0x64842, 0x86)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8c682, 0x0)

4.469400068s ago: executing program 2 (id=2578):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000001000)=ANY=[], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000280)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8, 0x3}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0]) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0])
bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc)
write(0xffffffffffffffff, &(0x7f00000010c0)="26000000220047194c8ae5930a830ed383da01050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b8e8e6580e1c1f10227af1e690780eb10dc18d45bee2ca20c543b9644f7c81fe8f0b62e55c7cdcd1d7dc56ea3598416d373384baaf075d9d7479efca4f47f1f8893b5e26c968715511c120d9825deca61f8bb65b33c7aadb5f94837e3f713f35af41ee4458c99583a2912274efa57b9a077e7dae4c3c273b31f2518f1a1c86810f471e6b3b76e9859435946fcffa3afe48d43f91b", 0xfe0f) (async)
write(0xffffffffffffffff, &(0x7f00000010c0)="26000000220047194c8ae5930a830ed383da01050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b8e8e6580e1c1f10227af1e690780eb10dc18d45bee2ca20c543b9644f7c81fe8f0b62e55c7cdcd1d7dc56ea3598416d373384baaf075d9d7479efca4f47f1f8893b5e26c968715511c120d9825deca61f8bb65b33c7aadb5f94837e3f713f35af41ee4458c99583a2912274efa57b9a077e7dae4c3c273b31f2518f1a1c86810f471e6b3b76e9859435946fcffa3afe48d43f91b", 0xfe0f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x18, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001280)=ANY=[@ANYBLOB="2c000000efe9b9f1a8967fea821ce79675a6ef3813d4147924b3d8e13df74dd12de250d795c5361219107ca59ff0c24c5a10354d2ef8455e5f2bf6420f33a3a75d768f0e9b3989c075", @ANYRESOCT, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d793000000000000000010000bc652fd2e1deac8ae64cfea5d46ca32c72c1a9ff062f089808f8647b953276e35531"], 0x2c}, 0x1, 0x0, 0x0, 0x220080c4}, 0x880)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockname(r4, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc)=0x1, 0x4)
write(0xffffffffffffffff, &(0x7f0000000980)="a9", 0x1) (async)
write(0xffffffffffffffff, &(0x7f0000000980)="a9", 0x1)
syz_open_dev$evdev(0x0, 0x40, 0x0) (async)
syz_open_dev$evdev(0x0, 0x40, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e21, @broadcast}, {0x2, 0x4e24, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x7fff, 0x1000000000004000})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async)
unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000001080)=ANY=[@ANYRES16=r2])

4.161810433s ago: executing program 3 (id=2583):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f00000003c0)=""/64, 0x0, 0x8080000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x805, 0x3}, 0x6)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x1, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000009000/0x4000)=nil, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x55, 0x23, 0x3, 0x30})
write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r9 = dup(r8)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x10862, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x7cab6ced6415608, 0x3})

4.083913559s ago: executing program 3 (id=2584):
openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x29, 0x9, 0x3, 0x711, 0x0, @private0, @empty, 0x1, 0x40, 0x2, 0x4}})
openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x29, 0x9, 0x3, 0x711, 0x0, @private0, @empty, 0x1, 0x40, 0x2, 0x4}}) (async)

3.980006738s ago: executing program 3 (id=2585):
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x2}, 0x18)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000c00)

3.979329718s ago: executing program 3 (id=2586):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffffd, 0x10000, 0xfffffffd})
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='esdfs\x00', 0x58, 0x0)

3.978901398s ago: executing program 3 (id=2587):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000580)={0x0, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x2, "ecb9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000900)={0x1c, &(0x7f00000007c0)={0x20, 0xf00b1d99b669df82, 0x96, "7088bfc7bc8bc2c19660a8a2721ec56f1c76bc4eb23cec57cff6d1975b6532ccdc37601dd801d81fb4515d37e50beed4cddb1ed0ff45c6d4df6573af6ff067198189211f047bb677c6c7cd72d12eef326ab2a2d5b000c7d1c7fda8d7f80fabba0a645879d5d7871c17dbd9487dd025ad9805c4758d12324968003ff2f323830ccb4636642e3bdc0219e8f0a38abcdb74b7dd7c3c6c2b"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xe}, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000580)={0x50, 0x0, r3, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x10001, 0x0, {0x5, 0x0, 0x200000000007, 0x100000b, 0x3, 0x100000000, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r4, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x2}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
vmsplice(r0, &(0x7f00000019c0)=[{&(0x7f0000000180)="e229cc20be3e20fc32e19010e358d5b3be1f533e3fa54ee757535d2398616a2ba85ff8c2b19181c51f52dbb481f77907eb58c20230338ca71e10909112f4d145f5c528c2078ea5afb2d076439897c214821dccd673e9f89e13c852cf5d65e2f401b35e367d3c383390c3127eb97d", 0x6e}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="764a671f5c9db670bbfa802aa96fceb957228cec02605e1115db01fa4d306fabf4cda992ab5ee1ced2d5cd4dad84b2bd2fbf44b82116815cd3087c66f917ee03b2a09740213c81775b5cb4deeb75f0eb0267d89c3cdb1dec5d7b92f6123c5876a90371cc8f4f8ec5a54574a2ff12a71f24180c7c0ebf0951e5a9590de6f95de42f358fb84a16095cf7226496e9b30f29d0cdd55ffb03637c55dae98b488da57e80dd4b763eb5fcc77831c490257b8e8e2e122796585271043da3aabebb0c0c262f3796253262371cc7648aca13356db73c4c89da7ffea9eeb0053ef2d20070656f0cbacdc79b465786c1278647ff6b", 0xef}, {&(0x7f0000001700)="cc05e30b95edb8f6eecd7bc71e9f0e8503a08e5add2fbbfc55f4b28f02bcd360f901778cd090d23b51fde482c6bf3d8a5d8135998098e1aa370d1e61df3c6ff346407b119379d6bd72ef8fd3afc2a4aa9cdf122ff60a86f2c2ffb49b0da81913665eaeb30ef81d9e01afc7247d1c053ab1cff290488a5ccf9a9ddf3f0f71a802c44b1f99db47872a844a8f948ec0e8783c6dd07fa5c180bc3872e79750e65a7c7444712232b764e88d81e29a5a60c15eea7ac8f906902a92f3251b590e8b633bdc31e471b568826008da363bc2efdcd77b9a8183463d13d955d743242ced539f5032f2f4f9f78bfe1e654cc23b57", 0xee}, {&(0x7f0000001800)="1e87e068da76fce1a9045d0d2ea9caff3dbfa12f7623165440a9d0e7010c33ae2bfec1d6ce6e3671d88755b5b8ebcfd897cabe51e2209e106c03388ba1744da5b6dea3d306389589a71fe5e9b02c9cd061da72590c8b22ddae1da70dd2cd547b86c97fb231ea1ab82c7978873bce332b95570c96f09262b9ce5aa68b83f38132c2fc6423c9f39ec8ab1e95ddd53f9227b43051a25d665dcae7cd4eeb043f529570aa0167ae1d547831cf4251be7f2d305e8352db78c9fd22328ad59a0287f2bd9680f39a8e1418c779f7d3855dc79afa2755e6e5640cbd88066173cfb78fd4086b", 0xe1}, {&(0x7f0000000000)="5badf70207ecdd5be707e854895a8bd52ce66de73cd1a0095c22e2589a48fb50f11aef9508195ceb0b2501f7dc22eb5dbdb560882a37", 0x36}, {&(0x7f0000001900)="0bf4403ef2bb69a8a8e7a67abc385e151333ca067d6fc5137118f42de4947be5ef81f40bfa02da1947ab6823a171efc7edfe2824b48792830b76875ca8904a58bce66a98fc20c9e0cdb3a924ae883dbec1995a5f925e6d6a28d9e834f4971896c0d1d4b9f0353b52ece8576b5e5c635fe3ec82aa4fcdf5f604449bac2de5541b5f9c145c4db0e983089d6ae849", 0x8d}], 0x7, 0x1)

1.863029669s ago: executing program 4 (id=2599):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}}}, 0x10)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r3, r0, 0x0, 0xef97)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141801, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000100)={0xa, &(0x7f0000000180)=[{0x1, 0x6, 0x9, 0x2}, {0xfff9, 0x0, 0x1, 0x80000000}, {0xfc94, 0x8, 0x4, 0x6}, {0x1, 0x0, 0x2, 0x9}, {0x9, 0xd, 0xe6, 0x4}, {0x1d0, 0x4, 0x4, 0x66}, {0x8, 0x4b, 0x7, 0x304}, {0x9, 0x8, 0xbe, 0x5}, {0x3, 0x6, 0x6, 0xf}, {0x100, 0x9, 0x6, 0x9}]})

1.854250759s ago: executing program 4 (id=2600):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) (async)
ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x8, 0x8, 0x1}}) (async)
sendfile(r1, r0, 0x0, 0x7ffff000)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))

1.458540702s ago: executing program 2 (id=2602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123781, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r5 = gettid()
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = timerfd_create(0x1, 0x0)
timerfd_settime(r7, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r7, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x40003, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x6, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x400, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x20000002, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501)
readv(r6, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001180)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0xf9, "3c69a2372bb275"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)={{<r9=>0x0, 0x8, 0x5, 0x100000000, 0x1, 0xffffffffffffffff, 0x3, 0x179c8000, 0x4, 0x1, 0x77a, 0x1000000000000000, 0x5, 0x6610}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002180)={r8, r9, "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", "b0efce27c1eab333c28d77fba29542ec44f92910208faef39d94e1e24442b1074f0f43f723235bea823845ead08167f05b7748239e3713eebea45d98a232f4c4e263699be9293508fd7e5fc3b40040c6a99ddea766e5a6186e20155c9566ba61fd744af995f3fbde4284329bec872c7d88b8cd1b9ac7a5983ed4e8c5a7adf4d78066c580e57deba7d3c451028456f00010445479d4f978755661fa588f5a44f95b062b90b37af4cc1896607c30aed0bd23120b4ae66c3ac726d8455127ba0126465613aba8eadf4180c13b97aac91d910b07745034e8517ca790bf4b0bf49261218455ed1a0416ed80c66e7bc9aa0c59bededc90d851b4730f06686d942229b5d1da6fc6463735fdc52358e1f4c3d708e20eaf33375234cef96096206e835964a22bcceef1bf2a238fda885ac2f3e436f133e51c19c27fff3e58b53ac239971d1478b1b21e6dcb6723c0c534cd3166453c4b3aeb18912030a7be08cdededcc1ffc23693b3edb629a85a3ca2e2a4b05b17a0f855149c623de1ce03a3d188aabfdc3cddf5e476a4af0459afe9affa7eb1808b08625a1b14371bd154673dad4d412299218323abc03d8d355db9df2f85e4c7033937aa0e926dd7a53ded0ea0782d2c468b23ec0fd44cd27027b01c82ef7dac2e50be9cd2bf3da54cc6af84150ab9763d62a3be6bf4bc2024ca764844fa4b73f8a9fb44e40b81db2b6c4e69b696746653e30611a1f2bedae89eb01634eec93234139afdb8b0038ccfd19e40c666f2a9f4a9ea86290995a6516ba624d14076696506266416ac801a85f0d607aa85f5321c02d0b7b3e3066f130b1b72b3b4030a22af3e042493f7239ce51385fac5017350a73fcd6cbc4e3be1fbaaa632fda101926338acaecce002e66860f71db5355c0be06a975a5b1a51761cb0abe7f7a07740cf17d965b580894a233a0cdf46ccd7b714c704ed6b940f01dd9fb731a9b7eaf083a7e18e0d472f8e9b27003ac5a5cc0bb2c286e9cc76861acefca5717850b8b91844d05659582a210c723aebd0678408866f066b9d3c69ea6ceee4e3251bbdcb74fff355f34a123fda436bec949ffbe6a1b532f420dd0b41233f5956c278b59708917ce55e651c5f4db12bc647433e937ede199bbcd80fa0794c3ad2af77b31149ad391b30c41eb2461c656df7629eaeb3d7d6a575849c816dbd70b86021d31fd51055d30b1406c599e45da54f1110a11f039187847049591b045fb36b53225e43eaa4e0a9abd44543f282dbd947c3ce514254af4105edbb7c1480255124488a5db1f6cf4a4effecc9c8d44569d8f7f25be0feb62c27bc95ad600d23439a819b65d65016f0761fff8ebc6e9403a97a11943785a7a7b5916c318dcbc095ed56b460d75ef917be4499cea0755031448d86af0ccb84f56da1da0aac7cb9ad50e28c7ae07a2a92a90dce51aa8c323457b4ef4ea8abb383708f7fe9b972e1d15ba3351e5bc3d5520872492e31efd173eebf40cae491412220d5341f5a441b33e3718f421ba0d8c95214c64ffd61458c15a515c508193dc760f8d9288e615fb97b5b38aa08cbe23750bff8dfd764073cd675b615f6c24881d60ca585b0193c7e7145343c0cbc418b11301af75bcac6b61557cc48ca03ae86500d4ffb78d3c34232acc9f4b569012f6b8bde8183bf161a93305b6b1575e9c5a9520af84c7c985863fb9720601592ad4fb4a1b9236ad224b6fb28cb23331c653c580b9a24ef6c35153bed5a40d64297baac09cd289b80f5e1e9371ef821aa137924514a7a986d00a8854c9e787271058ea7c504177bb3768517f7437fcde5cea1baeb5e18dc35ea2f5838973026b8fab30f2aa6f9e448879d6755f7a535804be8234135d3a358223c97d7959b4afaa95c41e1a64a461482b7fbf7fe58773e05334c81a534d0966149d12a15b85e0c87e990d32c947b05efb5520cfddcfcfcbf4291d338292e367ff27d7e4792dc10bd9e354a56b176508fad04c402559869298ab1b967323e6a3e6936a17981d54472a502435c50d6cb35e0d160a1db6aee85cbece99c023c2f37fda3057bb0f880fddc7efbef45e1bba979151a9ac1e79a12f6a8dfa618e6c62547153f136003ecb84971ac0e1cf0b8a408d39d3faee027587566182e5d5dfca54e7c46f915b77bf90355fe1a2eb00235f8aae13d8d3eae98c2145535113acf5df8207ddda396ce5bdea13997bcacefdf6430ec701cd7de6e8c1f30a872ca8a25ee41d83d56ae5d4e8071f1e1ab33e4acafb346e4511040584b365c8e22f3f375654476e8687319e712f1ae2c316714ee16292fd2c16be18d07698a8caf864c5192ea7058b1a25f05318bc01517faa2153f433862e8d40e4192d244a4aaccaa43f13c56dfa33e61cb3e5101a6c877ca8fe38efba982bfaca56b8e3ad1cdb0804681298b796dbda24f35c4bcb100097905adb3c90c3e097a56fa7204abf882603cfead5127571362ab5311a02b70df9ceb7d135df9271e9a4cc5897d14d1e042eb50c2c85298b01f92d453f79bdd63688fe5a9d76c7f0f8d255b0e4e3a96c71876319fdb51432fdbee5d73cd78afe36f764920fb9110b00bfab3da3b5e7718d1f50b419b3d566f6f890a95ec5933f3c07c1f1560c05f00b1d662e1cc6c8a18349d21fc51cf66c225cf00104a6409d66a888d6c97e6a65e31cb91fe5fb708675134365eb050097a56948c22008470e80dd9c8e8d2259e41fe372882b1a3c8702cdebd16d8d3bde37d6a9374788efabf5f624ff93aaf56e1439517c00636875ed904511da4a4079f3786463eaadf5cc3a045a89e1768666a7ce4e118fce5df36896b732c0b5be85ec7189c44d8b61259020d31b2bfa6cfc03cfd6d0c78d269db0e06121e8cdfde7b813f5f08e5cdfb9d1633ccc17493bd8735db8fbdeff9d80cab6632eb159854fffd599446fd942c4270818b5c3a9d38dd32d2972d29d66f6608b68b78446b94fd68457c5fd8585f2fccdac898714a2d7db7e4ff22b439a720a90ee8661e8687daf9b52c510bfb1c8c5e3d481329eefe056af7e355555baec93462b8fb3a3b8d74ba006ccb961c53e846b57522cedd27d7d8e2b3ccda734efb0dfc2b911638c3eb808eb91a746cd7ad1ccc81f40b29f3fe4bc890e0029b82fe34b4a6b6d1a31260c85696b5fc47ad9c4cff3d80e0661fe92c4eefd0cb5a559925332028f6d91ac56fae60a12e04e0714bc8aebb9ef43fe6a059eae0e97382bc9d0349989262e5219b7b5e7ea3415a245af1850dc81f9f7b10ecbd99eaa38e8be3a75d483ae2516fc67b904c7eeff34112492a0bf743a1df56f7db98e2f6268c7f6f3edc7391b0ab8895e437589aa5fc4185c9e9716b7a2f4a2ddee964ba48a21b2dad80fb19fa3d009c38e6be91ad1fb08ea8cfc29d8614f054c37a9b92b235029fcd13647d0ed9e3c87ba0ddf53f0e4f7d93a48c4aeb897f6deaa82a0d2535dd52071050154c9760e37890161e770f671d119c61753975b1e3607576fe751c4a4ec8d3b361fc29cd4be8eb541c71ed76b2114ead87f1443c5a54e67d04befed0734dfdd0f9d0668da870f0553c326372ee2c024e851b08fc98312254e6750d5008df879f4cd7ad5133de637fe432d22edd0c7437e94428b6b34b54a53aa02328bc0f29b1cfbec701672b686937772ec18c3564a0a14cce44a7949d224e168cbc95752567df9268f7e33ca45f054f3899b121ee833361eda8f5926d09c275b3f253a456c95fd6fb6e9936b4b760475ed5d7ff1224b8913018904a18d0969e4885e379be68278d836e949bc11ec7d522b68debf7b0ad5a41ac8af595873d6b47b4caf5d800214853ceebbdc2f0793cf200a5ea785a7d93047c50063cd9cd4f200e5f732022e940233aee446c70938ad3498251f2b2b1675721a0a13e36f2e5a6502fad5b7a2b0cab549915eaf2d0ecf5b455a60ccb08d1b95931654b639427305f9e8f323b12709b97b5a2a58f3c9381d9d1fceaa1834b2375f223d10ef2d26786d583de174a5a0c7f4d79379c42d6ed22663cff8fc1b8db15f137f6b2bed09c61e1a53c3dbb76ac7ca558b29202cf62456b41142997c632c2d2d42627d1c1ec3be349b4416854fd58f76445ae53e6d0b587616c6658caf7e82c23216835ec3b06231039f4761867abb8dcb908d3e7b091afef710209f6d47b4a3d8eb735545491f56a5f896158e2d790b24e203d39bccd8ea467337a5082819dd5227d391b482fae36e58244baa390a546c4ce76ecffaeb72f45bdb90e40780e68e00f22d88d631695c66fc18b5b1f9d517f3376012523e3d439a665a47c094f413ff82806ca47bb75f6220790429cd1d18b59da939e5d613ae0b76498328ef82b29940448ddc092b5b04c9dbd187f5edd77fd80d05929a8142166189e8656d423e63c4b31b76060541df96038368386e19d22f522438a8de3e3b158c47334adc7bda917001f6b24e2d060f14517769146440a6aa3e0b9486781ad95911ba0945c19705e871f8cb4b1133c252fdc6f13948c68df64adb74b97c0db31445d0f4045ff071f50944606d54740a462eec7b7ee8c84067dfe15b3e3fd92fb5ef1d879fdcc1095e13c1061d56db70a65bf2bc8528c82c497f1201ec05b9e2384d333dace176b6ccf72d32875876d4b3c7cd513df77b7e4559f1b4f0e5673ca0337d60522d8bc9ebdb5e019bbd45afeb97367c71231b9251a07603223c073b50c1c92a30ebb5898faa1fdd0915dda0797c320d364abcd1ed7925022957861b3f4deb9108d046ad3273088c7039e5c62b3f32f7cbf26b72940f60d067d1f16cb198177f8d245215a2571d209b02f0631f45c28e74356ea3ca8e9f1580f9463ac24bb099a724536ecd23ab64d268edbf792106929dbf85c574ba975c9b440d4e4f035cda70a474b397bc69f5c77d57c51edb0f26802e801d67195ff872afedf16e735c19bee165e45e2b9d16f783565f7e8a7f94ccfac2ff76696b371de4bc682025deb4ef9bac27effae144048b4d1a68b208c0093c6fb431d5112c2997781542fb7b7029286bd0c38f78475ae97b7ccaceac898535305f65b8b449480ef5ebb814b114cf98f7ad47d49b59717b6153e58acc1e967cd223588a9591d264f06d8481fd189c363de95ac3aa8f5f90539fd0f046c0a9fc08a6bf85b145d00b9f3f0eecd3260aca74ecde388a1730c9f26b70db65359742c2fc4e882d31cea77939e7473545410d75b331a797cb7184c2210c49409e7027fd61735fbe2da7e8c976a8de8e48d0018339e0eac19c9d7ada11d2b83ccbf342d3c6d8cf6448340392e40c5125eca15ac0f11f5dccad2678bf0243e5dd707dfe88102369bf238e115caf703994c45563ffaa706f35b64950a70e66e61617fdb529a271cb6e9bc0123f615f39a70d1ffaae64bd75367f809e"})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)

1.269136907s ago: executing program 2 (id=2603):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r1)
mount(&(0x7f0000000240)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

1.244597999s ago: executing program 2 (id=2604):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async)
write(r0, &(0x7f00000000c0)="822a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0)

1.171875455s ago: executing program 2 (id=2605):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@loopback, <r1=>0x0}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', r1, 0x20, 0x10, 0xe614, 0x9, {{0x16, 0x4, 0x2, 0x3, 0x58, 0x66, 0x0, 0xfc, 0x4, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0x52, 0x0, 0xf, [0x10]}, @cipso={0x86, 0x39, 0x0, [{0x1, 0x10, "2512a438bc3de643f5e41877f307"}, {0x5, 0x9, "7afc67b432111f"}, {0x2, 0x3, "a5"}, {0x5, 0xc, "bba800fec4c521eb7dd7"}, {0x1, 0xb, "c83a94de5a7cc706a6"}]}, @end, @end]}}}}})
r2 = socket(0x80000000000000a, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0xa, 0x3, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20004000)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x104804, &(0x7f0000000000)=ANY=[])
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r6, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000004c0))

1.012408558s ago: executing program 4 (id=2606):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r1}, @register_looper, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0})

944.940153ms ago: executing program 4 (id=2607):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
close(r0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x30000010})
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00')
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

884.038248ms ago: executing program 4 (id=2608):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$inet6(0xa, 0xa, 0x5)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0100001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000007f0000000000000000000000000000000104000000000000000000000000000008000000000000000000000000000000ffffffff00000000030000000000000000000000000000000000000800000000fdffffffffffffff0000000000000000fdffffffffffffff01000080000000000000000001000000fcffffff02000000000000000a000401400000000000000089000100726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008020000d5", @ANYRESHEX=r2], 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

853.869851ms ago: executing program 4 (id=2609):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000001680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x6b}, &(0x7f0000001400)={0x40, 0xb, 0x2, 'gv'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0x4}, 0x0, 0x0, 0x0})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x22, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_disconnect(r6)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r9 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
ioctl$KVM_CAP_STEAL_TIME(r5, 0x4068aea3, &(0x7f0000000600))
read$FUSE(r7, &(0x7f0000001cc0)={0x2020}, 0x2020)

592.051082ms ago: executing program 5 (id=2610):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141741, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0x88, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x6c, 0x0, 0x0, 0x0, @str='\x8e\x94x\x94\x0fPw_\x1f\x8c\xa0\x8eX\xfe`\xd3\x92\fC\xe9\x17\xe0\x92\xe1\x9d\xdf\x81\xd9\x8c\f\xd4e\x90\x15\x12sy\xd6K\xebu\x9c\x14\x87\xc4T\x9e0\xab\x02R\x12\xa5\xc5\x88\xee\xeb\xcaK\x19\x80\xee|9Z0\"\'2/&\xd7a\xee\xa8\xedF@Y\x96\x9851Oi\xe1a\\\x1cX\xa6\xb0\xd3\b\xeb\xce\x8b\xd3t;\x17jA\x8e'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x88}], 0x1}, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20400) (async)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async, rerun: 32)
syz_io_uring_setup(0x1e72, &(0x7f00000000c0)={0x0, 0x5e03, 0x4, 0x3, 0x186}, 0x0, 0x0) (rerun: 32)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bdc000/0x400000)=nil) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
dup(r7) (async, rerun: 32)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0xfffd, 0x0, 0x2}, {0x8, 0x4, 0x3, 0x1}, {0x7e, 0x1, 0x5, 0x3ff}, {0x0, 0x0, 0xe0, 0x7fff}]}, 0x10) (async, rerun: 32)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, "fe85fcc62aa1b2227b16d111bdd91829686f8bc89c0716b4a7c3b392d1f94932", 0x6, 0x90, 0x81, 0x1}, 0x3c) (async)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200021002ebd7000000000000ae40000050000000000000014000100"], 0x30}}, 0x0) (async, rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x8000, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

439.860224ms ago: executing program 5 (id=2611):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x1c3)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000400)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, &(0x7f0000000080)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x12}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/194, 0xc2, 0x1, 0x4}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

433.442895ms ago: executing program 5 (id=2612):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x10}, {0x4000000, 0x7, 0xfffffffffffffff6, 0x0, 0x6}, {0xfffffffffffffffc, 0x2e27}, 0xffffffff, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private1, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffd, 0x0, 0x0, 0xfd, 0xfffffffd, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

400.935937ms ago: executing program 5 (id=2613):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200005, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1800, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x1000})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = signalfd(r1, &(0x7f0000000180)={[0xe]}, 0x8)
sendfile(r0, r4, &(0x7f0000000240)=0x8, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x79f880, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

343.893852ms ago: executing program 5 (id=2614):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
socket$inet(0x2, 0x1, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, 0x0, 0x0)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}}, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r7, r5, 0x0, 0xef97)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setresuid(0xee01, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100b, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x80000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})

322.021084ms ago: executing program 5 (id=2615):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020580411500000000000010902240001000000000904000005030000000921000000080000000905810300"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_unlock', 0x22202, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1000009ee8, 0x12)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000009e000040"])
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x11)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x2, 0x8001, 0x5c3})
close_range(r0, 0xffffffffffffffff, 0x0)

302.516086ms ago: executing program 2 (id=2616):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x1, 0x1, 0x4, 0x2, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0xffff, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[])
r4 = socket(0x11, 0xa, 0xffffffd)
r5 = fcntl$dupfd(r4, 0x406, r4)
sendmsg$nl_generic(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4000040)
poll(&(0x7f0000000000)=[{r0, 0xc080}], 0x1, 0xe4e4)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=2617):
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x101, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d5052413"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000013c0), 0xffffffffffffffff)
prctl$PR_CAPBSET_READ(0x17, 0xcf)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0xded4a1e4217ab166)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44881}, 0x8000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

K: only valid in 'mangle' or 'security' table, not 'filter'
[  181.770204][ T6496] overlayfs: failed to resolve './file1/file0': -2
[  181.777463][ T6496] sit0: entered promiscuous mode
[  181.786434][ T6496] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  181.794762][ T6496] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1833'.
[  181.891421][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'.
[  182.018653][   T10] rust_binder: 6502: removing orphan mapping 0:4120
[  182.059659][ T6506] /dev/rnullb0: Can't open blockdev
[  182.242238][ T6518] tipc: Started in network mode
[  182.247111][ T6518] tipc: Node identity 4, cluster identity 4711
[  182.253521][ T6518] tipc: Node number set to 4
[  182.468730][ T6529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6529 comm=syz.0.1845
[  182.770832][   T45] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  182.900856][   T45] usb 1-1: device descriptor read/64, error -71
[  183.114389][ T6550] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1852' resets device
[  183.136631][ T6552] rust_binder: Write failure EFAULT in pid:333
[  183.140840][   T45] usb 1-1: device descriptor read/64, error -71
[  183.155123][  T608] Bluetooth: hci0: Frame reassembly failed (-84)
[  183.400914][   T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  183.530949][   T45] usb 1-1: device descriptor read/64, error -71
[  183.770965][   T45] usb 1-1: device descriptor read/64, error -71
[  183.881059][   T45] usb usb1-port1: attempt power cycle
[  184.230997][   T45] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  184.252093][   T45] usb 1-1: device descriptor read/8, error -71
[  184.392104][   T45] usb 1-1: device descriptor read/8, error -71
[  184.641081][   T45] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  184.642597][ T6576] fuse: Bad value for 'fd'
[  184.662770][   T45] usb 1-1: device descriptor read/8, error -71
[  184.671180][   T36] audit: type=1400 audit(1755048787.678:32455): avc:  denied  { bind } for  pid=6577 comm="syz.6.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  184.822235][   T45] usb 1-1: device descriptor read/8, error -71
[  184.888350][ T6596] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1867'.
[  184.931926][   T45] usb usb1-port1: unable to enumerate USB device
[  184.947701][ T6601] vcan0: entered allmulticast mode
[  184.953020][ T6601] vcan0: left allmulticast mode
[  184.959007][ T6602] rust_binder: 6599 RLIMIT_NICE not set
[  184.967737][ T6601] vcan0: entered allmulticast mode
[  184.978801][ T6603] vcan0: left allmulticast mode
[  185.073498][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1874'.
[  185.103433][   T36] audit: type=1400 audit(1755048788.118:32456): avc:  denied  { getopt } for  pid=6624 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  185.231089][  T506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  185.242355][ T6635] tipc: Cannot configure node identity twice
[  185.306916][   T36] audit: type=1400 audit(1755048788.318:32457): avc:  denied  { unmount } for  pid=3503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  185.501140][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  185.513611][ T6645] kvm: kvm [6644]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405
[  185.524560][ T6645] kvm: kvm [6644]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05
[  185.533734][ T6645] kvm: kvm [6644]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505
[  185.546766][ T6645] kvm_intel: kvm [6644]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705
[  185.652263][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  185.663635][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024
[  185.674893][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  185.687903][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  185.696968][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.705492][   T10] usb 2-1: config 0 descriptor??
[  185.724649][ T6655] rust_binder: Write failure EINVAL in pid:1260
[  185.813926][ T6661] rust_binder: Error while translating object.
[  185.820517][ T6661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  185.826764][ T6661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602
[  185.987173][ T6668] kvm: kvm [6667]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405
[  186.007890][ T6668] kvm: kvm [6667]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05
[  186.016826][ T6668] kvm: kvm [6667]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505
[  186.027876][ T6668] kvm_intel: kvm [6667]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705
[  186.037819][ T6670] rust_binder: Error while translating object.
[  186.037940][ T6670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  186.044437][ T6670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:136
[  186.294003][ T6677] 9pnet_fd: Insufficient options for proto=fd
[  186.314102][ T6637] 9pnet_fd: Insufficient options for proto=fd
[  186.322105][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  186.328075][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  186.336854][   T10] usb 2-1: USB disconnect, device number 33
[  186.573850][ T6679] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  186.602126][ T6683] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true
[  186.610789][ T6683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:605
[  186.822606][ T4720] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  186.892058][ T6700] /dev/rnullb0: Can't open blockdev
[  187.002416][ T4720] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  187.021298][ T4720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.041100][ T4720] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.053367][ T4720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.069704][ T4720] usb 1-1: Product: Щ
[  187.078402][ T4720] usb 1-1: Manufacturer: 、
[  187.088302][ T4720] usb 1-1: SerialNumber: 쥶ﰷ䤾ᔓ쎉崰ꌺ敐쯨Ⓤ⚫嶡ᅆ㡋蕎ퟅ캚콦甪巠戫ꣂ⑻⥿ꌜ䬮璓䯝悰鱹⇶䕻潫ϐ隷♠஝쐇튷ૡῨᥲ껢뙤著꾭电碶뚩꽍睌䊀踖苧䑛ୌ諴軃肊㇧뷗ᤝ﶐努뼦㾩듘ꨰ먡섛ꕙ긘郒렶撟㰔搤辶ⷋ勻嵭ῗ庬옃葾쭤修徍హ﷞㶅᪇욀ƴ돚䖋丗䲱⧗穆ై⠽
[  187.093474][   T10] rust_binder: 6701: removing orphan mapping 0:24
[  187.166418][ T6706] netlink: 1348 bytes leftover after parsing attributes in process `syz.1.1902'.
[  187.361773][ T6681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1266
[  187.491371][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  187.597728][  T330] rust_binder: 6687: removing orphan mapping 0:4120
[  187.662438][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.681404][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.698894][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  187.711395][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  187.719597][   T10] usb 2-1: SerialNumber: syz
[  187.961423][   T31] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  188.130558][   T31] usb 7-1: config 0 has no interfaces?
[  188.137815][   T31] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  188.147381][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.155731][   T31] usb 7-1: Product: syz
[  188.160976][   T31] usb 7-1: Manufacturer: syz
[  188.166006][   T31] usb 7-1: SerialNumber: syz
[  188.173033][   T31] usb 7-1: config 0 descriptor??
[  188.382846][ T6723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  188.382904][ T6723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:166
[  188.393370][   T31] usb 7-1: USB disconnect, device number 6
[  188.914790][ T6742] rust_binder: Error while translating object.
[  188.914829][ T6742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  188.921392][ T6742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:354
[  188.954422][ T6749] overlayfs: conflicting options: userxattr,verity=require
[  189.391606][   T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  189.541637][   T31] usb 7-1: Using ep0 maxpacket: 8
[  189.548069][   T31] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  189.557074][   T31] usb 7-1: config 179 has no interface number 0
[  189.563683][   T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  189.576796][   T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  189.591698][ T4720] usb 1-1: 0:2 : does not exist
[  189.597770][   T10] usb 2-1: 0:2 : does not exist
[  189.598362][   T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  189.615933][ T4720] usb 1-1: USB disconnect, device number 63
[  189.625747][   T31] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  189.629192][   T10] usb 2-1: USB disconnect, device number 34
[  189.637980][   T31] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  189.657129][   T31] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  189.681622][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.695855][ T6759] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  189.962609][   T36] audit: type=1400 audit(1755048792.977:32458): avc:  denied  { setopt } for  pid=6774 comm="syz.1.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  189.983600][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'.
[  189.993539][ T6775] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  190.001003][ T6775] rust_binder: Write failure EINVAL in pid:372
[  190.125870][  T479] usb 7-1: USB disconnect, device number 7
[  190.125916][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  190.146512][    C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending?
[  190.314831][ T6789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1276
[  191.190614][ T6805] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  191.221536][ T6807] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  191.226342][ T6807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385
[  191.441398][ T6817] SELinux:  Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped).
[  191.465109][   T36] audit: type=1400 audit(1755048794.477:32459): avc:  denied  { relabelto } for  pid=6816 comm="syz.1.1942" name="" dev="pipefs" ino=39831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:ld_so_cache_t:s0"
[  191.611419][ T6821] kvm: apic: phys broadcast and lowest prio
[  191.694637][ T6825] input: syz1 as /devices/virtual/input/input29
[  191.700947][ T6825] input: failed to attach handler leds to device input29, error: -6
[  191.771435][ T6832] 9pnet_fd: Insufficient options for proto=fd
[  192.011724][ T6846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  192.011764][ T6846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1302
[  192.236596][ T6853] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.249127][ T6856] netlink: 'syz.0.1956': attribute type 16 has an invalid length.
[  192.263645][ T6856] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1956'.
[  192.277341][ T6853] rust_binder: 1307: no such ref 3
[  192.282601][ T6853] rust_binder: 1307: no such ref 4294967295
[  192.288642][ T6856] rust_binder: 1307: no such ref 2
[  192.297183][ T6853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307
[  192.339843][ T6866] veth1: entered allmulticast mode
[  192.354925][ T6865] veth1: left allmulticast mode
[  192.378988][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1962'.
[  192.406168][   T36] audit: type=1400 audit(1755048795.417:32460): avc:  denied  { setattr } for  pid=6869 comm="syz.6.1962" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  192.433027][   T36] audit: type=1400 audit(1755048795.447:32461): avc:  denied  { mounton } for  pid=6872 comm="syz.0.1963" path="/436/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  192.584144][ T6881] 9pnet_fd: Insufficient options for proto=fd
[  193.132083][   T31] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  193.161339][   T36] audit: type=1400 audit(1755048796.167:32462): avc:  denied  { create } for  pid=6900 comm="syz.1.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  193.292063][   T31] usb 1-1: Using ep0 maxpacket: 8
[  193.298795][   T31] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  193.308329][   T31] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  193.318809][   T31] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  193.328069][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.341435][ T6905] 9pnet_fd: Insufficient options for proto=fd
[  193.366588][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  193.371245][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'.
[  193.373461][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  194.983879][   T36] audit: type=1326 audit(1755048798.006:32463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.007541][   T36] audit: type=1326 audit(1755048798.006:32464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.031063][   T36] audit: type=1326 audit(1755048798.006:32465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.054953][   T36] audit: type=1326 audit(1755048798.006:32466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.078691][   T36] audit: type=1326 audit(1755048798.006:32467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.102555][   T36] audit: type=1326 audit(1755048798.006:32468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.126392][   T36] audit: type=1326 audit(1755048798.006:32469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.150155][   T36] audit: type=1326 audit(1755048798.006:32470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.173951][   T36] audit: type=1326 audit(1755048798.006:32471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.197612][   T36] audit: type=1326 audit(1755048798.006:32472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dfd8ebe9 code=0x7fc00000
[  195.392325][  T506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  195.546795][ T6934] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  195.562129][ T6935] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  195.570268][ T6934] rust_binder: Write failure EINVAL in pid:646
[  195.570322][ T6935] rust_binder: Write failure EINVAL in pid:646
[  195.599997][  T328] tipc: Subscription rejected, illegal request
[  196.132427][  T479] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  196.293633][  T479] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  196.304705][  T479] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.315983][  T479] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.332891][  T479] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  196.351902][  T479] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  196.361632][  T479] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  196.363899][ T6961] rust_binder: 655: no such ref 2
[  196.372458][  T479] usb 7-1: Manufacturer: syz
[  196.380541][  T479] usb 7-1: config 0 descriptor??
[  196.587405][ T6968] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  196.590373][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.595180][ T6968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:440
[  196.604777][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.826788][  T479] appleir 0003:05AC:8243.0018: unknown main item tag 0x0
[  196.834089][  T479] appleir 0003:05AC:8243.0018: No inputs registered, leaving
[  196.843078][  T479] appleir 0003:05AC:8243.0018: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  197.084462][   T45] usb 7-1: USB disconnect, device number 8
[  197.210549][ T6978] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  197.210681][ T6978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  197.210710][ T6977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  197.217278][ T6978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:658
[  197.227282][ T6977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:658
[  197.850775][ T6994] kvm: kvm [6993]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  197.913022][ T6994] kvm: kvm [6993]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  197.953637][ T6994] kvm_intel: kvm [6993]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  197.979062][ T6994] kvm: kvm [6993]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  197.992648][ T7006] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  197.996117][ T6994] kvm: kvm [6993]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  198.017300][ T7006] rust_binder: Failed copying remainder into alloc: EFAULT
[  198.017325][ T7006] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  198.036754][ T7006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  198.054224][ T7006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:458
[  198.130836][ T7008] /dev/nullb0: Can't lookup blockdev
[  198.353284][   T31] usb 1-1: string descriptor 0 read error: -32
[  198.402546][ T7022] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  198.713679][ T7035] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  198.719733][ T7035] rust_binder: Error while translating object.
[  198.726488][ T7035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  198.732891][ T7035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476
[  199.002629][ T7043] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  199.275915][  T330] rust_binder: 7018: removing orphan mapping 0:112
[  199.285187][ T7050] fuse: Bad value for 'fd'
[  200.120448][   T36] kauditd_printk_skb: 2202 callbacks suppressed
[  200.120468][   T36] audit: type=1400 audit(1755048803.136:34675): avc:  denied  { mounton } for  pid=7067 comm="syz.6.2026" path="/proc/253/task" dev="proc" ino=41838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  200.207936][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x41b
[  200.216887][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1f1f
[  200.235254][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8
[  200.244832][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100
[  200.254015][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104
[  200.263117][ T7075] kvm: kvm [7074]: vcpu10, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x100
[  200.908118][ T7092] rtc_cmos 00:00: Alarms can be up to one day in the future
[  200.945586][ T7103] /dev/rnullb0: Can't open blockdev
[  200.961107][ T7105] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  201.008922][ T7109] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.060611][ T7110] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  201.067161][ T7110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  201.075419][ T7110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:514
[  201.153084][   T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  201.216230][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  201.223785][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  201.231259][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  201.238981][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  201.246508][   T45] rtc rtc0: __rtc_set_alarm: err=-22
[  201.324375][   T31] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  201.335766][   T31] usb 7-1: config 0 interface 0 has no altsetting 0
[  201.342379][   T31] usb 7-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  201.351557][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.360158][   T31] usb 7-1: config 0 descriptor??
[  201.767334][   T31] wacom 0003:056A:003F.0019: unknown main item tag 0x0
[  201.774983][   T31] wacom 0003:056A:003F.0019: hidraw0: USB HID v0.06 Device [HID 056a:003f] on usb-dummy_hcd.6-1/input0
[  201.945223][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'.
[  201.970275][   T31] usb 7-1: USB disconnect, device number 9
[  202.006504][ T7121] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  202.014050][ T7121] rust_binder: Write failure EFAULT in pid:524
[  202.263198][  T330] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  202.434257][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  202.445208][  T330] usb 2-1: New USB device found, idVendor=0eef, idProduct=726b, bcdDevice= 0.00
[  202.454330][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.467272][  T330] usb 2-1: config 0 descriptor??
[  202.472578][ T7125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  202.644331][ T7144] rust_binder: Got transaction with invalid offset.
[  202.644364][ T7144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  202.651061][ T7144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:688
[  202.691623][  T330] usbhid 2-1:0.0: can't add hid device: -71
[  202.706921][  T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  202.721693][ T7153] overlay: filesystem on ./file1 not supported as upperdir
[  202.730954][  T330] usb 2-1: USB disconnect, device number 35
[  202.789755][   T36] audit: type=1400 audit(1755048805.805:34676): avc:  denied  { read } for  pid=7160 comm="syz.4.2053" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  202.814464][  T479] usb 7-1: new low-speed USB device number 10 using dummy_hcd
[  202.814634][   T36] audit: type=1400 audit(1755048805.805:34677): avc:  denied  { open } for  pid=7160 comm="syz.4.2053" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  202.920838][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  202.963281][  T479] usb 7-1: Invalid ep0 maxpacket: 32
[  203.093252][  T479] usb 7-1: new low-speed USB device number 11 using dummy_hcd
[  203.243288][  T479] usb 7-1: Invalid ep0 maxpacket: 32
[  203.248832][  T479] usb usb7-port1: attempt power cycle
[  203.424009][   T46] Bluetooth: hci1: Frame reassembly failed (-84)
[  203.593342][  T479] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  203.613717][  T479] usb 7-1: Invalid ep0 maxpacket: 32
[  203.743431][  T479] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  203.763744][  T479] usb 7-1: Invalid ep0 maxpacket: 32
[  203.769232][  T479] usb usb7-port1: unable to enumerate USB device
[  204.993542][ T5435] Bluetooth: hci0: command 0x1003 tx timeout
[  204.993544][  T506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  205.473565][   T53] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  205.473597][  T506] Bluetooth: hci1: command 0x1003 tx timeout
[  205.644660][   T36] audit: type=1400 audit(1755048808.665:34678): avc:  denied  { write } for  pid=7191 comm="syz.6.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  205.734271][ T7198] overlayfs: missing 'lowerdir'
[  205.740001][ T7198] usb 1-1: USB disconnect, device number 64
[  205.758233][ T7198] usb usb1: check_ctrlrecip: process 7198 (syz.4.2064) requesting ep 01 but needs 81
[  205.787875][ T7198] rust_binder: Error while translating object.
[  205.787926][ T7198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  205.794657][ T7198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706
[  205.810853][ T7200] can1: slcan on ptm4.
[  205.868732][ T7208] __vm_enough_memory: pid: 7208, comm: syz.4.2067, bytes: 18014402804453376 not enough memory for the allocation
[  205.885130][ T7200] can1 (unregistered): slcan off ptm4.
[  205.929208][ T7215] random: crng reseeded on system resumption
[  205.933684][   T36] audit: type=1400 audit(1755048808.945:34679): avc:  denied  { write } for  pid=7212 comm="syz.4.2068" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  205.961517][  T479] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  206.089950][  T358] rust_binder: 7219: removing orphan mapping 24:1120
[  206.134475][ T7239] rust_binder: Write failure EFAULT in pid:720
[  206.135679][  T479] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  206.163632][  T479] usb 2-1: config 220 has an invalid descriptor of length 209, skipping remainder of the config
[  206.193888][  T479] usb 2-1: config 220 has no interface number 2
[  206.200540][  T479] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  206.221756][  T479] usb 2-1: config 220 interface 0 has no altsetting 0
[  206.228813][  T479] usb 2-1: config 220 interface 76 has no altsetting 0
[  206.236015][  T479] usb 2-1: config 220 interface 1 has no altsetting 0
[  206.244628][  T479] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  206.253879][  T479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.261914][  T479] usb 2-1: Product: syz
[  206.269062][  T479] usb 2-1: Manufacturer: syz
[  206.274070][  T479] usb 2-1: SerialNumber: syz
[  206.345447][ T7255] sit0: entered promiscuous mode
[  206.361500][ T7255] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2076'.
[  207.713832][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  207.817648][  T479] usb 2-1: selecting invalid altsetting 0
[  207.826502][  T479] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  207.837791][  T479] usb 2-1: No valid video chain found.
[  207.846639][  T479] usb 2-1: USB disconnect, device number 36
[  208.149458][ T7265] netlink: 'syz.1.2080': attribute type 11 has an invalid length.
[  208.202478][ T7268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  208.229158][ T1515] tipc: Resetting bearer <eth:syzkaller0>
[  208.251437][ T1515] tipc: Disabling bearer <eth:syzkaller0>
[  208.266291][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.273619][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.280765][ T7266] bridge_slave_0: entered allmulticast mode
[  208.287352][ T7266] bridge_slave_0: entered promiscuous mode
[  208.294039][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.301359][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.308884][ T7266] bridge_slave_1: entered allmulticast mode
[  208.315592][ T7266] bridge_slave_1: entered promiscuous mode
[  208.394053][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.401264][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.408628][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.415891][ T7266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.433952][   T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  208.453001][  T328] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.460920][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.473134][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.480343][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.488728][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.495848][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.530115][ T7266] veth0_vlan: entered promiscuous mode
[  208.545231][ T7266] veth1_macvtap: entered promiscuous mode
[  208.585566][   T10] usb 2-1: config 0 has no interfaces?
[  208.592824][   T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  208.602251][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.610692][   T10] usb 2-1: Product: syz
[  208.618839][   T10] usb 2-1: Manufacturer: syz
[  208.628960][   T10] usb 2-1: SerialNumber: syz
[  208.635684][   T10] usb 2-1: config 0 descriptor??
[  208.849189][ T7268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  208.849226][ T7268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:574
[  208.859451][   T10] usb 2-1: USB disconnect, device number 37
[  209.196531][ T7283] binder: Unknown parameter '2�w'
[  209.426602][ T7298] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.443821][   T36] audit: type=1400 audit(1755048812.455:34680): avc:  denied  { lock } for  pid=7294 comm="syz.7.2086" path="socket:[43976]" dev="sockfs" ino=43976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  209.465665][ T7300] rust_binder: Got transaction with invalid offset.
[  209.467854][ T7300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  209.494112][ T7300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[  209.544154][ T7305] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  210.158012][ T7311] binder: Bad value for 'max'
[  210.287151][ T7320] binder: Unknown parameter ''
[  210.328864][ T7326] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  210.455933][ T7334] __vm_enough_memory: pid: 7334, comm: syz.7.2098, bytes: 18014402804453376 not enough memory for the allocation
[  210.499062][   T36] audit: type=1400 audit(1755048813.515:34681): avc:  denied  { audit_write } for  pid=7335 comm="syz.7.2099" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  210.521766][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.544159][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.562494][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.575588][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.590931][ T7338] 9pnet_fd: Insufficient options for proto=fd
[  210.598089][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.624188][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=51 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.645595][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=7336 comm=syz.7.2099
[  210.708489][   T36] audit: type=1400 audit(1755048813.725:34682): avc:  denied  { nlmsg_read } for  pid=7347 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  210.924204][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  211.034606][ T7355] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  211.034752][ T7355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597
[  211.074392][   T10] usb 8-1: Using ep0 maxpacket: 16
[  211.089867][   T10] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[  211.098411][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.108779][   T10] usb 8-1: config 0 has no interface number 0
[  211.115088][   T10] usb 8-1: config 0 interface 41 has no altsetting 0
[  211.123551][   T10] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  211.133024][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.141366][   T10] usb 8-1: Product: syz
[  211.145780][   T10] usb 8-1: Manufacturer: syz
[  211.150548][   T10] usb 8-1: SerialNumber: syz
[  211.157167][   T10] usb 8-1: config 0 descriptor??
[  211.163399][   T10] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22
[  212.053270][ T7362] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  212.053467][ T7362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  212.060302][ T7362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604
[  212.946768][ T7392] input: syz1 as /devices/virtual/input/input34
[  213.019261][ T7394] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  213.691583][  T456] usb 8-1: USB disconnect, device number 2
[  213.782569][ T7398] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2121'.
[  213.856805][ T4720] rust_binder: 7393: removing orphan mapping 0:24
[  213.884598][   T36] audit: type=1400 audit(1755048816.894:34683): avc:  denied  { unlink } for  pid=7266 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  214.246335][   T46] bridge_slave_1: left allmulticast mode
[  214.252043][   T46] bridge_slave_1: left promiscuous mode
[  214.264684][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.282571][   T46] bridge_slave_0: left allmulticast mode
[  214.292260][   T46] bridge_slave_0: left promiscuous mode
[  214.298260][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.488524][   T46] tipc: Left network mode
[  214.508424][   T46] veth1_macvtap: left promiscuous mode
[  214.514186][   T46] veth0_vlan: left promiscuous mode
[  214.570064][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.577265][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.584369][ T7409] bridge_slave_0: entered allmulticast mode
[  214.590924][ T7409] bridge_slave_0: entered promiscuous mode
[  214.612037][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.619481][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.626718][ T7409] bridge_slave_1: entered allmulticast mode
[  214.633580][ T7409] bridge_slave_1: entered promiscuous mode
[  214.639736][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.647096][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.654313][ T7407] bridge_slave_0: entered allmulticast mode
[  214.660815][ T7407] bridge_slave_0: entered promiscuous mode
[  214.667603][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.674692][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.681848][ T7407] bridge_slave_1: entered allmulticast mode
[  214.688306][ T7407] bridge_slave_1: entered promiscuous mode
[  214.867016][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.874100][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.899891][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.907013][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.933522][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.940630][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.955903][  T608] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.963000][  T608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.991504][ T7409] veth0_vlan: entered promiscuous mode
[  215.014661][ T7407] veth0_vlan: entered promiscuous mode
[  215.028967][ T7409] veth1_macvtap: entered promiscuous mode
[  215.042789][ T7407] veth1_macvtap: entered promiscuous mode
[  215.444763][  T358] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  215.594785][  T358] usb 10-1: Using ep0 maxpacket: 32
[  215.602695][  T358] usb 10-1: config 1 interface 0 has no altsetting 0
[  215.613128][   T46] bridge_slave_1: left allmulticast mode
[  215.618995][   T46] bridge_slave_1: left promiscuous mode
[  215.635275][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.643417][  T358] usb 10-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  215.653568][   T46] bridge_slave_0: left allmulticast mode
[  215.663204][  T358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.671510][   T46] bridge_slave_0: left promiscuous mode
[  215.680391][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.688060][  T358] usb 10-1: Product: syz
[  215.692424][  T358] usb 10-1: Manufacturer: ꡓ꫊ᬋ딶䫫娀梼烣乭篽쬩㫸嗻俫爼숞펜휘늉ḧ쿁༬薙
[  215.703906][  T358] usb 10-1: SerialNumber: syz
[  215.766362][ T7437] fuse: Bad value for 'fd'
[  215.966178][   T46] veth1_macvtap: left promiscuous mode
[  215.983611][   T46] veth0_vlan: left promiscuous mode
[  215.984346][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.997552][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.521355][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.540497][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.566798][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.595211][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.629254][  T358] usbhid 10-1:1.0: can't add hid device: -71
[  216.636713][  T358] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  216.659481][  T358] usb 10-1: USB disconnect, device number 2
[  219.101175][ T7484] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  219.545236][  T358] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[  219.696689][  T358] usb 10-1: unable to get BOS descriptor or descriptor too short
[  219.705974][  T358] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  219.716969][  T358] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  219.727450][  T358] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  219.737660][  T358] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  219.756612][  T358] usb 10-1: string descriptor 0 read error: -22
[  219.763018][  T358] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.772684][  T358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.782175][ T7496] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  219.793994][  T358] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[  219.801110][  T358] cdc_ncm 10-1:1.0: bind() failure
[  219.807523][  T358] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  219.814560][  T358] cdc_ncm 10-1:1.1: bind() failure
[  220.051584][ T7498] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  220.051613][ T7498] rust_binder: Read failure Err(EFAULT) in pid:30
[  220.060527][   T64] usb 10-1: USB disconnect, device number 3
[  220.573023][   T64] rust_binder: 7495: removing orphan mapping 0:24
[  220.595826][ T7510] input: syz1 as /devices/virtual/input/input37
[  220.642517][ T7512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  220.642557][ T7512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780
[  220.660538][ T7510] rust_binder: Error while translating object.
[  220.672952][ T7510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  220.680744][ T7510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[  220.840958][ T7530] netlink: 'syz.9.2162': attribute type 2 has an invalid length.
[  220.911829][ T7530] rust_binder: Read failure Err(EFAULT) in pid:46
[  221.080103][ T7543] rust_binder: Error while translating object.
[  221.086758][ T7543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  221.093043][ T7543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55
[  222.193725][  T608] bridge_slave_1: left allmulticast mode
[  222.208659][  T608] bridge_slave_1: left promiscuous mode
[  222.214366][  T608] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.222164][  T608] bridge_slave_0: left allmulticast mode
[  222.228030][  T608] bridge_slave_0: left promiscuous mode
[  222.233737][  T608] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.344407][  T608] veth1_macvtap: left promiscuous mode
[  222.350128][  T608] veth0_vlan: left promiscuous mode
[  222.382807][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.390074][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.397399][ T7547] bridge_slave_0: entered allmulticast mode
[  222.403832][ T7547] bridge_slave_0: entered promiscuous mode
[  222.412388][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.425407][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.433179][ T7547] bridge_slave_1: entered allmulticast mode
[  222.443299][ T7547] bridge_slave_1: entered promiscuous mode
[  222.481800][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.488881][ T7547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.496221][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.503433][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.524280][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.531957][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.541285][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.548483][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.558126][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.565242][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.587467][ T7547] veth0_vlan: entered promiscuous mode
[  222.598708][ T7547] veth1_macvtap: entered promiscuous mode
[  222.801228][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  223.554060][ T7614] 9pnet_fd: Insufficient options for proto=fd
[  223.577007][   T46] Bluetooth: hci1: Frame reassembly failed (-84)
[  224.615728][  T479] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  224.765682][  T479] usb 10-1: Using ep0 maxpacket: 32
[  224.772804][  T479] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  224.784307][  T479] usb 10-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  224.797917][  T479] usb 10-1: config 1 interface 0 has no altsetting 0
[  224.802475][ T7628] binder: Bad value for 'stats'
[  224.806313][  T479] usb 10-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40
[  224.812799][   T36] audit: type=1400 audit(2000000001.530:34684): avc:  denied  { checkpoint_restore } for  pid=7627 comm="syz.4.2187" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  224.818996][  T479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.849199][ T5435] Bluetooth: hci0: command 0x1003 tx timeout
[  224.849627][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  224.855289][  T479] usb 10-1: Product: ꯁ켸뎐澀帵筱䨤ꦂᅾ⟷撤⻺斻셞沺햁莿櫞灅쒧Ἆ弘എ齀硪｣栫髨꤉맏ᛝӻ粐腵ᘮ悥๪ﲆ赀塹ꟲ
[  224.876644][  T479] usb 10-1: Manufacturer: Н
[  224.881319][  T479] usb 10-1: SerialNumber: syz
[  225.087899][ T7626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[  225.466369][ T7639] netlink: 'syz.2.2190': attribute type 15 has an invalid length.
[  225.547370][   T36] audit: type=1400 audit(2000000002.270:34685): avc:  denied  { read } for  pid=7643 comm="syz.2.2192" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  225.568885][   T36] audit: type=1400 audit(2000000002.270:34686): avc:  denied  { open } for  pid=7643 comm="syz.2.2192" path="/7/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  225.635704][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[  225.636008][  T506] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  225.785699][  T456] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  225.936872][  T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  225.947808][  T456] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  225.956908][  T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.965473][  T456] usb 3-1: config 0 descriptor??
[  225.970736][ T7644] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  226.398526][  T456] usbhid 3-1:0.0: can't add hid device: -71
[  226.404606][  T456] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  226.413504][  T456] usb 3-1: USB disconnect, device number 7
[  226.673545][ T7648] binder: Unknown parameter 'defcontext01777777777777777777777'
[  226.760925][ T7652] rust_binder: 45: no such ref 0
[  226.766793][ T7652] /dev/rnullb0: Can't open blockdev
[  226.772532][ T7652] binder: Unknown parameter 'fsname'
[  226.778320][ T7652] rust_binder: 45: no such ref 3
[  226.783310][ T7652] rust_binder: 45: no such ref 4294967295
[  226.789128][ T7652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[  226.789515][ T7652] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967294
[  227.155771][   T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  227.306768][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  227.318376][   T45] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  227.327564][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.336503][   T45] usb 3-1: config 0 descriptor??
[  227.341794][ T7656] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  227.350762][  T479] usbhid 10-1:1.0: can't add hid device: -71
[  227.359303][  T479] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  227.369604][  T479] usb 10-1: USB disconnect, device number 4
[  227.533777][ T7663] /dev/rnullb0: Can't open blockdev
[  227.557260][   T36] audit: type=1400 audit(2000000004.280:34687): avc:  denied  { mounton } for  pid=7664 comm="syz.9.2202" path="/dev/binderfs/binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  227.627831][ T7667] rust_binder: 108: no such ref 1
[  227.633102][ T7667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108
[  227.753926][   T45] hid-generic 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  227.957390][  T330] usb 3-1: USB disconnect, device number 8
[  228.365713][  T330] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  228.515802][  T330] usb 10-1: Using ep0 maxpacket: 32
[  228.522301][  T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.533342][  T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.543625][  T330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  228.556525][  T330] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  228.565674][  T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.574284][  T330] usb 10-1: config 0 descriptor??
[  228.679630][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  228.787791][  T330] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.001B/input/input38
[  228.800907][  T330] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.001B/input/input39
[  228.816418][  T330] kye 0003:0458:5011.001B: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0
[  228.915736][  T358] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  228.981940][   T45] usb 10-1: USB disconnect, device number 5
[  229.066804][  T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.078189][  T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.088111][  T358] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  229.097194][  T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.105785][  T358] usb 3-1: config 0 descriptor??
[  229.311961][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.320835][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.730724][  T358] usb 3-1: language id specifier not provided by device, defaulting to English
[  229.735759][  T330] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  229.848568][  T328] Bluetooth: hci1: Frame reassembly failed (-84)
[  229.898449][  T330] usb 10-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  229.908880][  T330] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  229.921969][  T330] usb 10-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  229.931248][  T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.940478][  T330] usb 10-1: config 0 descriptor??
[  230.144694][  T358] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input40
[  230.158265][  T358] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input41
[  230.173412][  T358] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input42
[  230.192696][  T358] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001C/input/input43
[  230.205990][  T358] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  230.346738][  T479] usb 3-1: USB disconnect, device number 9
[  230.437711][  T330] usb 10-1: string descriptor 0 read error: -71
[  230.444367][  T330] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  230.452758][  T330] usb 10-1: USB disconnect, device number 6
[  230.755747][ T5435] Bluetooth: hci0: command 0x1003 tx timeout
[  230.755747][  T506] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  230.997617][ T7712] binder: Bad value for 'stats'
[  231.235740][  T479] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  231.280539][ T7714] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2218'.
[  231.290462][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2218'.
[  231.385692][  T479] usb 10-1: Using ep0 maxpacket: 8
[  231.392876][  T479] usb 10-1: config 0 has an invalid interface number: 204 but max is 1
[  231.401610][  T479] usb 10-1: config 0 has an invalid interface number: 37 but max is 1
[  231.410161][  T479] usb 10-1: config 0 has an invalid interface number: 248 but max is 1
[  231.418693][  T479] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  231.427632][  T479] usb 10-1: config 0 has 4 interfaces, different from the descriptor's value: 2
[  231.437920][  T479] usb 10-1: config 0 has no interface number 1
[  231.444216][  T479] usb 10-1: config 0 has no interface number 2
[  231.450757][  T479] usb 10-1: config 0 has no interface number 3
[  231.457115][  T479] usb 10-1: config 0 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  231.468366][  T479] usb 10-1: config 0 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  231.489131][ T7717] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  231.489315][ T7717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31
[  231.503045][  T479] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 96, setting to 64
[  231.522913][  T479] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0
[  231.532861][  T479] usb 10-1: config 0 interface 0 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  231.545933][  T479] usb 10-1: config 0 interface 204 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  231.556844][  T479] usb 10-1: config 0 interface 204 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  231.570255][  T479] usb 10-1: too many endpoints for config 0 interface 37 altsetting 253: 44, using maximum allowed: 30
[  231.581333][  T479] usb 10-1: config 0 interface 37 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 44
[  231.594783][  T479] usb 10-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  231.605582][  T479] usb 10-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  231.616413][  T479] usb 10-1: config 0 interface 248 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  231.627541][  T479] usb 10-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  231.638376][  T479] usb 10-1: config 0 interface 0 has no altsetting 0
[  231.645143][  T479] usb 10-1: config 0 interface 204 has no altsetting 0
[  231.652040][  T479] usb 10-1: config 0 interface 37 has no altsetting 0
[  231.658943][  T479] usb 10-1: config 0 interface 248 has no altsetting 0
[  231.667164][  T479] usb 10-1: Dual-Role OTG device on HNP port
[  231.673332][  T479] usb 10-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice=82.09
[  231.682504][  T479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.690805][  T479] usb 10-1: Product: 貱㮕떄裎뤳롰襉鑒⭹兊蠆煟慲瘜㥬菽쭋黔먕괮൤ᶖ鯝漕㧽ﱫ炨꺩뵲パꁀꦾ露፟篒ᯩ癰ː㒀ኜ䡷⨣췒늇၆Ცἴ巶頁팁皁ꍼ퟾搆꜂ꆢ왆턒懠Ė⨐⎘늕̐뼂嘮㻒䬳柊魥堼쾚笁릵킗⢡糚야뭴⌷탰渃뤹뿧ࣙ䵦ꇃ坝瓯诞簡䶃侦祌ᕄ岫茧㔩填
[  231.723993][  T479] usb 10-1: Manufacturer: ␁
[  231.728790][  T479] usb 10-1: SerialNumber: 忑옺ㅠࢳὦᵕ帄謌굥⏿ꯍ煱㾔ﰥ㷄ꮉቧ㪢桢ᣄ締ἅ﫝㧻Ⴄ碩찖篡樜큢꧎㎐坯젦랗⡢઴꼟킁ቔ蝺쀜ৱ頒뤹蔴摊标윪芶Ἴᚂ疇⑏㳉፠쭋㗱슭i䔻㖦䱉慝췑;졈꤃࠭璺㢢존ᏺㆼ措ꥰ谊㏕ꝼ鋸䇽ᴖ戼㧣埂风獵ᇊ䍎뮯槆퟊ࢋꙞ낹쒯恊唴䚏摍䙦舣シ혠鞻
[  231.764191][  T479] usb 10-1: config 0 descriptor??
[  231.875679][   T53] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  231.875697][  T506] Bluetooth: hci1: command 0x1003 tx timeout
[  231.979347][  T479] usb 10-1: USB disconnect, device number 7
[  232.000529][ T7723] rust_binder: 7722 RLIMIT_NICE not set
[  232.004403][  T358] rust_binder: 7721: removing orphan mapping 0:4248
[  232.072777][ T7725] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2221'.
[  232.144118][   T36] audit: type=1400 audit(2000000008.860:34688): avc:  denied  { read } for  pid=7727 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  232.187632][ T7730] cgroup: Need name or subsystem set
[  232.244626][   T36] audit: type=1400 audit(2000000008.960:34689): avc:  denied  { create } for  pid=7729 comm="syz.8.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  232.286183][ T7734] fuse: Unknown parameter '�'
[  232.555683][  T456] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  232.705702][  T456] usb 3-1: Using ep0 maxpacket: 32
[  232.712671][  T456] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  232.721513][  T456] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  232.730447][  T456] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  232.739836][  T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  232.750060][  T456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  232.760325][  T456] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  232.773951][  T456] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  232.783273][  T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.809160][  T456] usb 3-1: config 0 descriptor??
[  233.029519][  T456] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  233.058620][  T456] usb 3-1: USB disconnect, device number 10
[  233.074923][  T456] usblp0: removed
[  233.525657][  T456] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  233.685649][  T456] usb 3-1: Using ep0 maxpacket: 32
[  233.691979][  T456] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  233.700738][  T456] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  233.709690][  T456] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  233.719027][  T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  233.728977][  T456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  233.738911][  T456] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  233.752192][  T456] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  233.761502][  T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.775953][  T456] usb 3-1: config 0 descriptor??
[  233.983917][  T456] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  234.185439][  T456] usb 3-1: USB disconnect, device number 11
[  234.195129][  T456] usblp0: removed
[  234.708129][ T7777] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2238'.
[  234.717896][ T7778] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2238'.
[  234.766432][ T7782] rust_binder: Read failure Err(EAGAIN) in pid:48
[  234.767918][ T7783] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.782193][ T7786] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[  234.879219][   T36] audit: type=1400 audit(2000000011.600:34690): avc:  denied  { read } for  pid=7790 comm="syz.4.2243" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  234.923119][   T36] audit: type=1400 audit(2000000011.600:34691): avc:  denied  { open } for  pid=7790 comm="syz.4.2243" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  235.007545][ T7805] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  235.014785][ T7805] rust_binder: Write failure EINVAL in pid:839
[  235.035907][   T36] audit: type=1400 audit(2000000011.760:34692): avc:  denied  { write } for  pid=7806 comm="syz.4.2249" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  235.335548][   T36] audit: type=1400 audit(2000000012.050:34693): avc:  denied  { mounton } for  pid=7815 comm="syz.4.2251" path="/289/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  235.859115][   T36] audit: type=1400 audit(2000000012.580:34694): avc:  denied  { map } for  pid=7837 comm="syz.9.2259" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  235.889155][   T36] audit: type=1400 audit(2000000012.610:34695): avc:  denied  { append } for  pid=7837 comm="syz.9.2259" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  235.912480][   T36] audit: type=1400 audit(2000000012.610:34696): avc:  denied  { ioctl } for  pid=7837 comm="syz.9.2259" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  235.947883][ T7841] netlink: 'syz.2.2260': attribute type 64 has an invalid length.
[  235.978231][   T36] audit: type=1400 audit(2000000012.700:34697): avc:  denied  { execute } for  pid=7840 comm="syz.2.2260" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  236.016125][ T7845] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  236.375679][  T358] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  236.379339][ T7864] rust_binder: Error while translating object.
[  236.383482][ T7864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  236.393119][ T7864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:857
[  236.474104][ T7877] __vm_enough_memory: pid: 7877, comm: syz.4.2271, bytes: 18014402804453376 not enough memory for the allocation
[  236.496890][ T7878] overlayfs: failed to resolve '/00005': -2
[  236.535733][  T358] usb 3-1: Using ep0 maxpacket: 32
[  236.542422][  T358] usb 3-1: unable to get BOS descriptor or descriptor too short
[  236.551054][  T358] usb 3-1: config 14 has an invalid interface number: 32 but max is 0
[  236.559459][  T358] usb 3-1: config 14 has no interface number 0
[  236.567083][  T358] usb 3-1: config 14 interface 32 has no altsetting 0
[  236.575836][  T358] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  236.584964][  T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.595020][  T358] usb 3-1: Product: syz
[  236.600186][  T358] usb 3-1: Manufacturer: syz
[  236.609290][  T358] usb 3-1: SerialNumber: syz
[  236.647576][ T7887] rust_binder: got new transaction with bad transaction stack
[  236.647604][ T7887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:864
[  236.851723][  T358] ums-usbat 3-1:14.32: USB Mass Storage device detected
[  236.876006][  T358] ums-usbat 3-1:14.32: Quirks match for vid 0781 pid 0005: 1
[  236.883518][  T358] ums-usbat 3-1:14.32: This device (0781,0005,0005 S 39 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel 6.12.38-syzkaller-g2b955c7a0f73)
[  236.883518][  T358]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  236.904047][ T7915] binder: Unknown parameter '/dev/bus/usb/00#/00#'
[  236.939941][  T358] usb 3-1: USB disconnect, device number 12
[  236.943276][ T7920] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  236.986248][ T7926] fuse: Unknown parameter '����N�DP���(�Or{�<���V��nj�o�7ƒ�Iͩf'
[  237.013710][ T7928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  237.013752][ T7928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:895
[  237.080567][ T7930] binder: Bad value for 'stats'
[  237.101764][ T7926] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2288'.
[  237.426128][ T7945] /dev/rnullb0: Can't open blockdev
[  237.466327][  T608] bridge_slave_1: left allmulticast mode
[  237.472119][  T608] bridge_slave_1: left promiscuous mode
[  237.478055][  T608] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.479418][ T7947] rust_binder: Error while translating object.
[  237.492833][ T7947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  237.499481][  T608] bridge_slave_0: left allmulticast mode
[  237.509405][ T7947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:76
[  237.524681][  T608] bridge_slave_0: left promiscuous mode
[  237.552086][  T608] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.683567][  T608] veth1_macvtap: left promiscuous mode
[  237.689796][  T608] veth0_vlan: left promiscuous mode
[  237.760960][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.768063][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.775132][ T7948] bridge_slave_0: entered allmulticast mode
[  237.781588][ T7948] bridge_slave_0: entered promiscuous mode
[  237.791964][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.799119][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.806253][ T7948] bridge_slave_1: entered allmulticast mode
[  237.812729][ T7948] bridge_slave_1: entered promiscuous mode
[  237.885453][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.892568][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.900090][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.907157][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.910879][ T7967] /dev/rnullb0: Can't open blockdev
[  237.925674][  T330] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  237.934871][  T328] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.948466][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.955575][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.957550][ T7970] rust_binder: Error while translating object.
[  237.962876][ T7970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  237.973358][ T7970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:190
[  237.996472][ T7948] veth0_vlan: entered promiscuous mode
[  238.028304][ T7948] veth1_macvtap: entered promiscuous mode
[  238.077412][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  238.077432][   T36] audit: type=1400 audit(2000004366.796:34701): avc:  denied  { append } for  pid=7971 comm="syz.9.2306" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  238.116852][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  238.127856][  T330] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  238.137414][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.148714][  T330] usb 3-1: config 0 descriptor??
[  238.160248][ T7956] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  238.405744][  T456] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  238.431331][ T7982] futex_wake_op: syz.9.2308 tries to shift op by -1; fix this program
[  238.440151][   T36] audit: type=1400 audit(2000004367.166:34702): avc:  denied  { shutdown } for  pid=7981 comm="syz.9.2308" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  238.555762][  T456] usb 4-1: Using ep0 maxpacket: 32
[  238.561933][  T456] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  238.571996][  T456] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  238.582174][  T330] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  238.594227][  T456] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  238.604899][  T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  238.614842][  T456] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  238.624551][  T456] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  238.637760][  T456] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  238.647479][  T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.657294][  T456] usb 4-1: config 0 descriptor??
[  238.817207][  T358] usb 3-1: USB disconnect, device number 13
[  238.863940][  T456] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  238.877166][  T456] usb 4-1: USB disconnect, device number 32
[  238.883846][  T456] usblp0: removed
[  238.935786][  T330] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  239.086927][  T330] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  239.098631][  T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  239.109702][  T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  239.119672][  T330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  239.132709][  T330] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  239.141898][  T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.150595][  T330] usb 10-1: config 0 descriptor??
[  239.305737][  T456] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  239.465765][  T456] usb 4-1: Using ep0 maxpacket: 32
[  239.472404][  T456] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  239.482746][  T456] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  239.491448][  T456] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  239.502367][  T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  239.512084][  T456] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  239.521833][  T456] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  239.535040][  T456] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  239.544582][  T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.554287][  T456] usb 4-1: config 0 descriptor??
[  239.561046][  T330] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max
[  239.574072][  T330] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  239.584483][  T330] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  239.601330][ T8020] rust_binder: 8018 RLIMIT_NICE not set
[  239.816405][  T456] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  239.865752][  T330] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  239.972926][  T456] usb 4-1: USB disconnect, device number 33
[  239.979586][  T456] usblp0: removed
[  240.016996][  T330] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  240.030137][  T330] usb 3-1: config 1 interface 0 has no altsetting 0
[  240.037713][  T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.046856][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  240.055033][  T330] usb 3-1: SerialNumber: syz
[  240.099908][ T8025] netlink: 'syz.4.2319': attribute type 4 has an invalid length.
[  240.528026][ T8040] can1: slcan on ptm0.
[  240.597444][ T8040] can1 (unregistered): slcan off ptm0.
[  240.620245][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.627660][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.635010][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.642237][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.649467][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.656732][ T8045] Dead loop on virtual device ip6_vti0, fix it urgently!
[  240.662716][  T330] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  240.684445][ T8051] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  240.704544][   T36] audit: type=1400 audit(2000004369.416:34703): avc:  denied  { bind } for  pid=8054 comm="syz.3.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  240.876847][ T8022] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3213269175 (102824613600 ns) > initial count (93960712448 ns). Using initial count to start timer.
[  240.902390][ T8022] rust_binder: Error while translating object.
[  240.902441][ T8022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  240.908878][ T8022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107
[  240.935761][  T330] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  240.985717][  T358] usb 10-1: reset high-speed USB device number 8 using dummy_hcd
[  240.996647][  T456] usb 3-1: USB disconnect, device number 14
[  241.061873][ T8059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907
[  241.073932][ T8060] rust_binder: Error in use_page_slow: ESRCH
[  241.073949][ T8061] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  241.073971][ T8061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  241.080511][ T8060] rust_binder: use_range failure ESRCH
[  241.088171][ T8061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:907
[  241.098026][ T8060] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  241.112151][ T8060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  241.116044][  T330] usb 4-1: too many configurations: 11, using maximum allowed: 8
[  241.120251][  T358] usb 10-1: device descriptor read/64, error -32
[  241.129693][ T8060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:907
[  241.144732][  T330] usb 4-1: unable to read config index 0 descriptor/start: -61
[  241.161833][  T330] usb 4-1: can't read configurations, error -61
[  241.169546][ T8063] rust_binder: validate_parent_fixup: new_min_offset=17179869202, sg_entry.length=0
[  241.169572][ T8063] rust_binder: Error while translating object.
[  241.179046][ T8063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  241.185235][ T8063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:911
[  241.201888][ T8066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  241.211886][ T8066] rust_binder: Error while translating object.
[  241.218494][ T8066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  241.225122][ T8066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:914
[  241.283266][ T8068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  241.294574][ T8068] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  241.302843][ T8068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:916
[  241.309566][  T330] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  241.323858][ T8070] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  241.385691][  T358] usb 10-1: device descriptor read/64, error -32
[  241.406447][ T8076] can1: slcan on ptm0.
[  241.439242][ T8076] can1 (unregistered): slcan off ptm0.
[  241.511805][  T330] usb 4-1: too many configurations: 11, using maximum allowed: 8
[  241.532976][  T330] usb 4-1: unable to read config index 0 descriptor/start: -61
[  241.550142][  T330] usb 4-1: can't read configurations, error -61
[  241.564701][  T330] usb usb4-port1: attempt power cycle
[  241.675250][   T36] audit: type=1400 audit(2000004370.392:34704): avc:  denied  { append } for  pid=8103 comm="syz.2.2339" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  241.735728][  T329] rust_binder: 0: removing orphan mapping 0:24
[  241.751259][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2342'.
[  241.846640][ T8136] tipc: Started in network mode
[  241.851569][ T8136] tipc: Node identity 4, cluster identity 4711
[  241.858017][ T8136] tipc: Node number set to 4
[  241.867867][ T8138] @: renamed from vlan0 (while UP)
[  241.905945][  T330] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  241.927078][  T330] usb 4-1: too many configurations: 11, using maximum allowed: 8
[  241.936155][  T330] usb 4-1: unable to read config index 0 descriptor/start: -61
[  241.944002][  T330] usb 4-1: can't read configurations, error -61
[  242.085696][  T330] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  242.106396][  T330] usb 4-1: too many configurations: 11, using maximum allowed: 8
[  242.115221][  T330] usb 4-1: unable to read config index 0 descriptor/start: -61
[  242.123156][  T330] usb 4-1: can't read configurations, error -61
[  242.129665][  T330] usb usb4-port1: unable to enumerate USB device
[  242.276225][   T31] usb 10-1: USB disconnect, device number 8
[  242.798753][ T8145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  242.798786][ T8145] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender.
[  242.808255][ T8145] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:223
[  242.820876][ T8148] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  242.832156][   T31] rust_binder: 8144: removing orphan mapping 0:24
[  242.935720][  T330] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  243.075971][  T456] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  243.085745][  T330] usb 3-1: Using ep0 maxpacket: 8
[  243.091974][  T330] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  243.100352][  T330] usb 3-1: config 179 has no interface number 0
[  243.106717][  T330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  243.117807][  T330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  243.129141][  T330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  243.140306][  T330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  243.151827][  T330] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  243.165366][  T330] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  243.174879][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.183806][ T8147] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  243.235986][  T456] usb 10-1: Using ep0 maxpacket: 8
[  243.242411][  T456] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.252459][  T456] usb 10-1: config 0 interface 0 has no altsetting 0
[  243.259424][  T456] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  243.268633][  T456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.277305][  T456] usb 10-1: config 0 descriptor??
[  243.486047][  T456] isku 0003:1E7D:319C.001F: hidraw0: USB HID v5.59 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0
[  243.598224][  T358] usb 3-1: USB disconnect, device number 15
[  243.598231][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  243.598268][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  243.684670][   T36] audit: type=1400 audit(2000004372.402:34706): avc:  denied  { setattr } for  pid=8151 comm="syz.9.2351" name="file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  243.707564][   T36] audit: type=1400 audit(2000004372.402:34705): avc:  denied  { mounton } for  pid=8151 comm="syz.9.2351" path="/71/file0" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  243.735739][ T2217] Bluetooth: hci0: Frame reassembly failed (-84)
[  244.149568][ T8183] random: crng reseeded on system resumption
[  244.179867][ T8183] rust_binder: Error while translating object.
[  244.179944][ T8183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  244.186548][ T8183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57
[  245.023326][ T8218] rust_binder: Read failure Err(EFAULT) in pid:947
[  245.047941][ T8221] 9pnet_fd: Insufficient options for proto=fd
[  245.062717][ T8221] 9pnet_fd: Insufficient options for proto=fd
[  245.298547][ T8233] binder: Bad value for 'max'
[  245.345732][  T330] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  245.508278][  T330] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  245.517921][  T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.525968][  T330] usb 4-1: Product: syz
[  245.530135][  T330] usb 4-1: Manufacturer: syz
[  245.534749][  T330] usb 4-1: SerialNumber: syz
[  245.539919][  T330] usb 4-1: config 0 descriptor??
[  245.789533][ T8243] rust_binder: 8242 RLIMIT_NICE not set
[  245.789840][ T8242] rust_binder: 153: no such ref 3
[  245.795672][  T506] Bluetooth: hci0: command 0x1003 tx timeout
[  245.800620][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  245.807067][ T8242] rust_binder: inc_ref_done called when no active inc_refs
[  245.814756][   T10] usb 10-1: USB disconnect, device number 9
[  245.832705][ T8245] 9pnet_fd: Insufficient options for proto=fd
[  245.966048][  T330] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  245.994181][  T330] asix 4-1:0.0: probe with driver asix failed with error -71
[  246.011990][  T330] usb 4-1: USB disconnect, device number 38
[  246.082138][  T456] rust_binder: 8262: removing orphan mapping 0:4120
[  246.108148][   T36] audit: type=1400 audit(2000004374.832:34707): avc:  denied  { map } for  pid=8259 comm="syz.4.2382" path="socket:[51181]" dev="sockfs" ino=51181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  246.155905][   T36] audit: type=1400 audit(2000004374.832:34708): avc:  denied  { accept } for  pid=8259 comm="syz.4.2382" path="socket:[51181]" dev="sockfs" ino=51181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  246.179242][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.208108][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.235219][ T8274] rust_binder: Error in use_page_slow: ESRCH
[  246.235245][ T8274] rust_binder: use_range failure ESRCH
[  246.260085][ T8274] rust_binder: Failed to allocate buffer. len:176, is_oneway:false
[  246.274105][ T8274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  246.292446][ T8274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:251
[  246.349428][   T36] audit: type=1400 audit(2000004375.072:34709): avc:  denied  { append } for  pid=8277 comm="syz.9.2386" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  246.510417][ T8282] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  246.519493][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2386'.
[  246.535937][ T8283] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  246.547610][ T8282] rust_binder: Write failure EINVAL in pid:66
[  246.547665][ T8283] rust_binder: Write failure EINVAL in pid:66
[  246.587164][ T8286] netlink: 'syz.2.2388': attribute type 11 has an invalid length.
[  246.683627][  T353] rust_binder: 8289: removing orphan mapping 0:1048
[  246.691871][ T8294] netlink: 37 bytes leftover after parsing attributes in process `syz.2.2391'.
[  246.915290][ T8318] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  246.917705][ T8318] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  246.985739][   T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  247.000979][   T36] audit: type=1400 audit(2000004375.712:34710): avc:  denied  { watch } for  pid=8325 comm="syz.4.2401" path="pipe:[52421]" dev="pipefs" ino=52421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  247.032689][ T8314] /dev/rnullb0: Can't open blockdev
[  247.040729][ T8333] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  247.042886][ T8332] rust_binder: Error while translating object.
[  247.052040][ T8333] rust_binder: Error while translating object.
[  247.058437][ T8332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  247.064654][ T8332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984
[  247.083829][ T8333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  247.093591][ T8333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984
[  247.166737][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  247.215061][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.230966][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  247.245697][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.257040][   T10] usb 3-1: config 0 descriptor??
[  247.473407][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  247.481675][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  247.503303][   T10] usb 3-1: USB disconnect, device number 16
[  247.567151][   T36] audit: type=1400 audit(2000004376.292:34711): avc:  denied  { map } for  pid=8357 comm="syz.9.2410" path="socket:[52075]" dev="sockfs" ino=52075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  247.917155][ T8365] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  247.917545][ T8365] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  247.924086][ T8365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  247.932189][ T8365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:993
[  248.255705][   T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  248.369450][ T8376] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  248.425674][   T31] usb 10-1: Using ep0 maxpacket: 8
[  248.434030][   T31] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  248.444197][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.453352][   T31] usb 10-1: config 0 descriptor??
[  248.484089][ T8384] can: request_module (can-proto-0) failed.
[  248.491352][   T36] audit: type=1326 audit(2000004377.212:34712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8383 comm="syz.3.2419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff36398ebe9 code=0x0
[  248.645731][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  248.663646][   T31] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  248.674122][   T31] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  248.685172][   T31] asix 10-1:0.0: probe with driver asix failed with error -71
[  248.695972][   T31] usb 10-1: USB disconnect, device number 10
[  248.752611][ T8393] kvm: pic: non byte read
[  248.795672][   T10] usb 3-1: Using ep0 maxpacket: 16
[  248.802034][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.812291][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  248.826171][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.835226][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  248.843304][   T10] usb 3-1: SerialNumber: syz
[  248.851102][   T10] usb 3-1: bad CDC descriptors
[  249.054147][   T36] audit: type=1400 audit(2000004377.772:34713): avc:  denied  { create } for  pid=8373 comm="syz.2.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  249.055456][   T31] usb 3-1: USB disconnect, device number 17
[  249.146209][  T608] bridge_slave_1: left allmulticast mode
[  249.152000][  T608] bridge_slave_1: left promiscuous mode
[  249.157962][  T608] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.165577][  T608] bridge_slave_0: left allmulticast mode
[  249.171463][  T608] bridge_slave_0: left promiscuous mode
[  249.177141][  T608] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.303659][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.310899][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.318447][ T8404] bridge_slave_0: entered allmulticast mode
[  249.324966][ T8404] bridge_slave_0: entered promiscuous mode
[  249.332159][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.339690][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.347094][ T8404] bridge_slave_1: entered allmulticast mode
[  249.361134][ T8404] bridge_slave_1: entered promiscuous mode
[  249.367463][  T608] tipc: Left network mode
[  249.372855][  T608] veth1_macvtap: left promiscuous mode
[  249.378553][  T608] veth0_vlan: left promiscuous mode
[  249.444703][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.451833][ T8404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.459265][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.466350][ T8404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.474253][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.481956][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.501631][ T2217] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.508813][ T2217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.518161][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.525261][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.547786][ T8404] veth0_vlan: entered promiscuous mode
[  249.558020][ T8404] veth1_macvtap: entered promiscuous mode
[  249.595737][  T330] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[  249.745679][  T330] usb 4-1: Invalid ep0 maxpacket: 64
[  249.866671][ T8429] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  249.876361][ T8429] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  249.885979][ T8429] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  249.886316][  T330] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  249.902196][ T8429] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  249.910446][ T8429] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  249.919178][ T8429] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  249.926140][ T8434] rust_binder: Write failure EFAULT in pid:179
[  249.927448][ T8429] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  249.941925][ T8429] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  249.950166][ T8429] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  249.958231][ T8429] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  250.066125][  T330] usb 4-1: Invalid ep0 maxpacket: 64
[  250.072082][  T330] usb usb4-port1: attempt power cycle
[  250.167212][  T358] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  250.325684][  T358] usb 6-1: Using ep0 maxpacket: 16
[  250.332681][  T358] usb 6-1: config 0 has an invalid interface number: 236 but max is 0
[  250.341193][  T358] usb 6-1: config 0 has no interface number 0
[  250.347378][  T358] usb 6-1: config 0 interface 236 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.358172][  T358] usb 6-1: config 0 interface 236 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  250.371571][  T358] usb 6-1: config 0 interface 236 has no altsetting 0
[  250.378442][  T358] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.387537][  T358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.396266][  T358] usb 6-1: config 0 descriptor??
[  250.402288][  T358] usbhid 6-1:0.236: couldn't find an input interrupt endpoint
[  250.415774][  T330] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  250.446127][  T330] usb 4-1: Invalid ep0 maxpacket: 64
[  250.575758][  T330] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  250.596301][  T330] usb 4-1: Invalid ep0 maxpacket: 64
[  250.601820][  T330] usb usb4-port1: unable to enumerate USB device
[  250.613655][   T36] audit: type=1400 audit(2000004379.332:34714): avc:  denied  { execute } for  pid=8432 comm="syz.5.2432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  250.948269][ T8455] 9pnet_fd: Insufficient options for proto=fd
[  250.955903][ T8455] rust_binder: Write failure EFAULT in pid:199
[  251.118334][  T330] usb 6-1: USB disconnect, device number 13
[  251.161308][ T8461] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2440'.
[  251.505704][  T330] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  251.666810][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  251.677810][  T330] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  251.686893][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.695561][  T330] usb 6-1: config 0 descriptor??
[  251.701080][ T8463] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  252.110772][  T330] hid-generic 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  252.310911][  T358] usb 6-1: USB disconnect, device number 14
[  252.426810][ T8474] __vm_enough_memory: pid: 8474, comm: syz.3.2443, bytes: 18014402804453376 not enough memory for the allocation
[  252.555692][ T8483] rust_binder: Error in use_page_slow: ESRCH
[  252.555721][ T8483] rust_binder: use_range failure ESRCH
[  252.561784][ T8483] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  252.567526][ T8483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  252.575911][ T8483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:20
[  253.016457][ T8509] netlink: 'syz.5.2455': attribute type 4 has an invalid length.
[  253.285684][  T329] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  253.447021][  T329] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  253.455807][  T329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.465927][  T329] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.476986][  T329] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  253.486187][  T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.494167][  T329] usb 6-1: Product: 氚夽ྻ胛숃蹥펓鳩渿ꦍꬮ摹㰣쪟쿺䉐ⷊ嘘㇅ʯڨౄ⁥᱐)뒅燲僮︨켋ᒧᵝ뜰탇籫מཁ枫ሑ൰嶴呃䐼뷩녛븳忳ꏈ㘜錃㿜㢼⨵။٣ࣴ뺙䏖ㄚΫ鰉寬䊁䎯㒂삜㰟⏊䘊㦂㿡걗럢䖭擪ቁ貰㙕쳗▟갲粴謀䁼㐌⟬뢐浛仌怢麛낮Ѥ൝詒ꆜ枻넲㚗㈔텪干ꕺ堻跖㥞檲︉
[  253.528565][  T329] usb 6-1: Manufacturer: ࡡ
[  253.533151][  T329] usb 6-1: SerialNumber: 䖜䂱ɕ曶⪜元鮼湂氬뵾涠澓ꦴꍚ䰿
[  253.545675][  T330] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  253.696865][  T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.706988][  T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.716894][  T330] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.726129][  T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.734145][  T330] usb 4-1: SerialNumber: syz
[  253.905339][ T8526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  253.940774][ T8524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  253.947323][ T8524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130
[  253.956759][ T8528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:999
[  253.967050][  T330] usb 4-1: 0:2 : does not exist
[  253.983033][  T330] usb 4-1: USB disconnect, device number 43
[  253.992966][ T6355] udevd[6355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  254.283606][  T329] usb 6-1: 0:2 : does not exist
[  254.291156][  T329] usb 6-1: USB disconnect, device number 15
[  254.322089][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  254.488214][ T8540] rust_binder: 132: no such ref 0
[  254.635707][  T329] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  254.787094][  T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  254.798226][  T329] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  254.807450][  T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.816071][  T329] usb 6-1: config 0 descriptor??
[  254.821379][ T8534] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  255.234549][  T329] hid-generic 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  255.436161][   T10] usb 6-1: USB disconnect, device number 16
[  256.355740][  T506] Bluetooth: hci0: command 0x1003 tx timeout
[  256.355763][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  273.681928][ T8561] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  273.699190][ T8562] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  273.846580][ T8581] rust_binder: Read failure Err(EAGAIN) in pid:146
[  273.863619][ T8581] rust_binder: got new transaction with bad transaction stack
[  273.872828][ T8581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146
[  273.933548][ T8590] can1: slcan on ptm3.
[  273.967600][ T8587] 9pnet_fd: Insufficient options for proto=fd
[  273.997432][ T8589] can1 (unregistered): slcan off ptm3.
[  274.006351][ T8596] binder: Unknown parameter 'context�'
[  274.278312][ T8628] input: syz0 as /devices/virtual/input/input44
[  274.298693][ T8628] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  274.315735][ T8628] rust_binder: Write failure EINVAL in pid:1031
[  274.367517][ T8637] rust_binder: Error while translating object.
[  274.391889][ T8637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  274.400488][ T8637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224
[  274.409788][ T8644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.484337][ T8644] syzkaller0: entered promiscuous mode
[  274.496432][ T8644] syzkaller0: entered allmulticast mode
[  274.503883][ T8644] tipc: Resetting bearer <eth:syzkaller0>
[  274.518871][ T8655] tipc: Resetting bearer <eth:syzkaller0>
[  274.534016][ T8655] tipc: Disabling bearer <eth:syzkaller0>
[  274.930468][ T8676] netlink: 'syz.5.2497': attribute type 27 has an invalid length.
[  275.127844][ T8682] SELinux: security_context_str_to_sid (dev/kvm) failed with errno=-22
[  275.205646][  T353] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  275.252927][ T8685] rust_binder: Write failure EINVAL in pid:175
[  275.365644][  T353] usb 6-1: Using ep0 maxpacket: 16
[  275.378313][  T353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  275.387717][  T353] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  275.407596][  T353] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  275.419408][  T353] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  275.430577][  T353] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  275.440868][  T353] usb 6-1: config 1 interface 0 has no altsetting 0
[  275.448091][  T353] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  275.457652][  T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.500149][  T353] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  275.531546][ T8690] kvm_pr_unimpl_wrmsr: 16 callbacks suppressed
[  275.531593][ T8690] kvm: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1
[  275.546678][ T8690] kvm: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1
[  275.559095][ T8690] kvm: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112
[  275.573694][ T8690] kvm: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1
[  275.583204][ T8690] kvm: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1
[  275.595694][ T8690] kvm_intel: kvm [8689]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1
[  275.716015][  T353] scsi host1: usb-storage 6-1:1.0
[  276.009733][ T8710] /dev/nbd2: Can't lookup blockdev
[  276.028096][ T8712] rust_binder: Error while translating object.
[  276.028124][ T8712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  276.034319][ T8712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246
[  276.155684][  T330] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  276.337628][ T8731] fuse: Bad value for 'user_id'
[  276.342543][ T8731] fuse: Bad value for 'user_id'
[  276.517706][  T330] usb 4-1: unable to get BOS descriptor or descriptor too short
[  276.526682][  T330] usb 4-1: unable to read config index 0 descriptor/start: -71
[  276.534253][  T330] usb 4-1: can't read configurations, error -71
[  276.755798][  T353] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  276.756097][   T46] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  276.906015][  T353] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  276.914885][  T353] usb 3-1: unable to read config index 0 descriptor/start: -61
[  276.922560][  T353] usb 3-1: can't read configurations, error -61
[  276.976622][  T456] usb 6-1: USB disconnect, device number 17
[  276.978161][ T8695] sddr09: could not read card info
[  276.987908][ T2217] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  276.994994][ T2217] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  277.001557][ T2217] sd 1:0:0:0: [sdb] Write Protect is off
[  277.007348][ T2217] sd 1:0:0:0: [sdb] Asking for cache data failed
[  277.013707][ T2217] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  277.028159][ T2217] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  277.054969][ T8638] udevd[8638]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  277.064463][  T353] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  277.083921][ T8638] udevd[8638]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  277.109829][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'.
[  277.203793][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8748 comm=syz.3.2518
[  277.238696][  T353] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  277.248478][  T353] usb 3-1: unable to read config index 0 descriptor/start: -61
[  277.256428][  T353] usb 3-1: can't read configurations, error -61
[  277.263249][  T353] usb usb3-port1: attempt power cycle
[  277.605693][  T353] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  277.617921][   T36] audit: type=1400 audit(2000004407.340:34715): avc:  denied  { execute_no_trans } for  pid=8759 comm="syz.5.2521" path="/23/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  277.619058][ T8760] 9pnet_fd: Insufficient options for proto=fd
[  277.656366][  T353] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  277.665193][  T353] usb 3-1: unable to read config index 0 descriptor/start: -61
[  277.672849][  T353] usb 3-1: can't read configurations, error -61
[  277.723151][ T8764] cgroup: Unknown subsys name 'euid'
[  277.805747][  T353] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  277.826606][  T353] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  277.835583][  T353] usb 3-1: unable to read config index 0 descriptor/start: -61
[  277.843251][  T353] usb 3-1: can't read configurations, error -61
[  277.851170][  T353] usb usb3-port1: unable to enumerate USB device
[  277.902011][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2525'.
[  277.921803][ T8779] fuse: Unknown parameter '�'
[  277.978949][ T8781] KVM: debugfs: duplicate directory 8781-9
[  278.555324][ T8789] netlink: 'syz.5.2530': attribute type 13 has an invalid length.
[  278.623879][ T8797] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[  278.623920][ T8797] rust_binder: Error in use_page_slow: EFAULT
[  278.635074][ T8797] rust_binder: use_range failure EFAULT
[  278.642871][ T8797] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  278.648817][ T8797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  278.657408][ T8797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79
[  278.756773][ T8800] 9pnet_fd: Insufficient options for proto=fd
[  278.914385][ T8802] SELinux: security_context_str_to_sid () failed with errno=-22
[  278.996699][ T8807] __vm_enough_memory: pid: 8807, comm: syz.5.2537, bytes: 18014402804453376 not enough memory for the allocation
[  279.016704][ T8807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8807 comm=syz.5.2537
[  279.067682][ T8825] rust_binder: 88: no such ref 3
[  279.073977][ T8829] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  279.076142][ T8828] rust_binder: Error while translating object.
[  279.081083][ T8825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88
[  279.081853][ T8829] overlayfs: failed to set xattr on upper
[  279.087827][ T8828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  279.096695][ T8829] overlayfs: ...falling back to redirect_dir=nofollow.
[  279.107513][ T8828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230
[  279.111906][ T8829] overlayfs: ...falling back to uuid=null.
[  279.111948][ T8829] overlayfs: conflicting lowerdir path
[  279.184851][ T8837] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  279.346364][  T456] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  279.436072][ T8859] binder: Unknown parameter 'ma	'
[  279.457352][ T8861] devpts: called with bogus options
[  279.463158][ T8861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8861 comm=syz.2.2553
[  279.491609][ T8863] rust_binder: Error while translating object.
[  279.491660][ T8863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  279.497992][ T8863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274
[  279.516715][  T456] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.537057][  T456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.547680][  T456] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.556947][  T456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.565128][  T456] usb 6-1: Product: syz
[  279.569535][  T456] usb 6-1: Manufacturer: syz
[  279.574278][  T456] usb 6-1: SerialNumber: syz
[  279.595016][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.603209][ T8870] binder: Bad value for 'stats'
[  279.604160][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.609269][ T8870] binder: Bad value for 'stats'
[  279.618416][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.623552][ T8870] binder: Bad value for 'stats'
[  279.632269][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.637153][ T8870] binder: Bad value for 'stats'
[  279.647206][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.650905][ T8870] binder: Bad value for 'stats'
[  279.660165][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.664885][ T8870] binder: Bad value for 'stats'
[  279.674000][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.678794][ T8870] binder: Bad value for 'stats'
[  279.687860][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2557'.
[  279.692727][ T8870] binder: Bad value for 'stats'
[  279.706750][ T8870] binder: Bad value for 'stats'
[  279.711898][ T8870] binder: Bad value for 'stats'
[  279.716908][ T8870] binder: Bad value for 'stats'
[  279.721860][ T8870] binder: Bad value for 'stats'
[  279.727109][ T8870] binder: Bad value for 'stats'
[  279.732085][ T8870] binder: Bad value for 'stats'
[  279.737174][ T8870] binder: Bad value for 'stats'
[  279.742690][ T8870] binder: Bad value for 'stats'
[  279.747767][ T8870] binder: Bad value for 'stats'
[  279.752892][ T8870] binder: Bad value for 'stats'
[  279.758214][ T8870] binder: Bad value for 'stats'
[  279.763186][ T8870] binder: Bad value for 'stats'
[  279.768255][ T8870] binder: Bad value for 'stats'
[  279.773213][ T8870] binder: Bad value for 'stats'
[  279.775692][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  279.778324][ T8870] binder: Bad value for 'stats'
[  279.790579][  T456] usb 6-1: 0:2 : does not exist
[  279.792307][ T8870] binder: Bad value for 'stats'
[  279.799958][  T456] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  279.801046][ T8870] binder: Bad value for 'stats'
[  279.812820][ T8870] binder: Bad value for 'stats'
[  279.814171][  T456] usb 6-1: USB disconnect, device number 18
[  279.817881][ T8870] binder: Bad value for 'stats'
[  279.828690][ T8870] binder: Bad value for 'stats'
[  279.833791][ T8870] binder: Bad value for 'stats'
[  279.838874][ T8870] binder: Bad value for 'stats'
[  279.840123][ T8852] udevd[8852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  279.843852][ T8870] binder: Bad value for 'stats'
[  279.864731][ T8870] binder: Bad value for 'stats'
[  279.869808][ T8870] binder: Bad value for 'stats'
[  279.935804][   T10] usb 4-1: Using ep0 maxpacket: 16
[  279.945199][   T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  279.954459][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.962726][   T10] usb 4-1: Product: syz
[  279.967613][   T10] usb 4-1: Manufacturer: syz
[  279.972377][   T10] usb 4-1: SerialNumber: syz
[  279.979668][   T10] usb 4-1: config 0 descriptor??
[  279.986352][ T8879] can1: slcan on ptm3.
[  279.989541][   T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  280.002140][   T10] usb 4-1: Detected FT232H
[  280.037644][ T8879] can1 (unregistered): slcan off ptm3.
[  280.118993][ T8903] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  280.305681][  T456] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  280.324248][ T8921] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  280.333336][ T8921] rust_binder: Write failure EINVAL in pid:90
[  280.475661][  T456] usb 3-1: Using ep0 maxpacket: 32
[  280.488395][  T456] usb 3-1: config index 0 descriptor too short (expected 54, got 36)
[  280.496607][  T456] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[  280.504909][  T456] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.515100][  T456] usb 3-1: config 0 has no interface number 0
[  280.521326][  T456] usb 3-1: config 0 interface 229 has no altsetting 0
[  280.529699][  T456] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 8.05
[  280.538865][  T456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.546976][  T456] usb 3-1: Product: syz
[  280.551159][  T456] usb 3-1: Manufacturer: syz
[  280.555799][  T456] usb 3-1: SerialNumber: syz
[  280.561079][  T456] usb 3-1: config 0 descriptor??
[  280.635714][  T353] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  280.765665][  T353] usb 6-1: device descriptor read/64, error -71
[  280.789397][ T8892] rust_binder: Error while translating object.
[  280.789448][ T8892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  280.795784][ T8892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:291
[  280.827948][  T358] usb 3-1: USB disconnect, device number 22
[  281.005706][  T353] usb 6-1: device descriptor read/64, error -71
[  281.142621][ T8935] binder: Bad value for 'stats'
[  281.265668][  T353] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  281.405665][  T353] usb 6-1: device descriptor read/64, error -71
[  281.407815][ T8941] netlink: 'syz.2.2569': attribute type 2 has an invalid length.
[  281.645668][  T353] usb 6-1: device descriptor read/64, error -71
[  281.755771][  T353] usb usb6-port1: attempt power cycle
[  282.105655][  T353] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  282.109483][ T8951] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  282.146665][  T353] usb 6-1: device descriptor read/8, error -71
[  282.306682][  T353] usb 6-1: device descriptor read/8, error -71
[  282.409735][ T8962] rust_binder: Error while translating object.
[  282.409799][ T8962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  282.416551][ T8962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:307
[  282.426726][ T8963] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  282.487213][ T8969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  282.493881][ T8969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:314
[  282.540327][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  282.545740][  T353] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  282.549964][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  282.572139][   T10] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  282.576684][  T353] usb 6-1: device descriptor read/8, error -71
[  282.588380][   T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  282.599143][   T10] usb 4-1: USB disconnect, device number 47
[  282.608899][ T8978] __nla_validate_parse: 25 callbacks suppressed
[  282.608921][ T8978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2580'.
[  282.624592][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  282.634699][   T10] ftdi_sio 4-1:0.0: device disconnected
[  282.706667][  T353] usb 6-1: device descriptor read/8, error -71
[  282.765644][  T456] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  282.816807][  T353] usb usb6-port1: unable to enumerate USB device
[  282.905681][  T456] usb 3-1: device descriptor read/64, error -71
[  283.145714][  T456] usb 3-1: device descriptor read/64, error -71
[  283.325717][  T353] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  283.384862][   T36] audit: type=1326 audit(2000004413.100:34716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.385660][  T456] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  283.408558][   T36] audit: type=1326 audit(2000004413.100:34717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.436998][ T9013] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  283.439878][   T36] audit: type=1326 audit(2000004413.100:34718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253f38d550 code=0x7ffc0000
[  283.440688][ T9012] rust_binder: Error while translating object.
[  283.446507][   T36] audit: type=1326 audit(2000004413.100:34719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253f38d550 code=0x7ffc0000
[  283.470961][ T9012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  283.477376][   T36] audit: type=1326 audit(2000004413.100:34720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.501529][ T9012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:105
[  283.510715][   T36] audit: type=1326 audit(2000004413.100:34721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.555806][  T456] usb 3-1: device descriptor read/64, error -71
[  283.567206][  T353] usb 4-1: Using ep0 maxpacket: 32
[  283.573756][   T36] audit: type=1326 audit(2000004413.140:34722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.579768][  T353] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  283.602397][   T36] audit: type=1326 audit(2000004413.140:34723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.610258][  T353] usb 4-1: config 0 has no interface number 0
[  283.634244][   T36] audit: type=1326 audit(2000004413.140:34724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.643567][  T353] usb 4-1: config 0 interface 230 has no altsetting 0
[  283.671062][   T36] audit: type=1326 audit(2000004413.140:34725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.5.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253f38ebe9 code=0x7ffc0000
[  283.674604][  T353] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  283.704353][  T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.712571][  T353] usb 4-1: Product: syz
[  283.716850][  T353] usb 4-1: Manufacturer: syz
[  283.721444][  T353] usb 4-1: SerialNumber: syz
[  283.730202][  T353] usb 4-1: config 0 descriptor??
[  283.736985][  T353] ums-usbat 4-1:0.230: USB Mass Storage device detected
[  283.745110][  T353] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  283.808979][ T9015] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2592'.
[  283.825693][  T456] usb 3-1: device descriptor read/64, error -71
[  283.935836][  T456] usb usb3-port1: attempt power cycle
[  284.276122][  T456] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  284.296808][  T456] usb 3-1: device descriptor read/8, error -71
[  284.422226][ T9022] rust_binder: 112: no such ref 0
[  284.428457][  T456] usb 3-1: device descriptor read/8, error -71
[  284.612120][ T9043] tipc: MTU too low for tipc bearer
[  284.665769][  T456] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  284.686780][  T456] usb 3-1: device descriptor read/8, error -71
[  284.816759][  T456] usb 3-1: device descriptor read/8, error -71
[  284.925737][  T456] usb usb3-port1: unable to enumerate USB device
[  285.600548][ T9058] input: syz1 as /devices/virtual/input/input45
[  285.607952][ T9059] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  285.615131][ T9059] rust_binder: 271: no such ref 2
[  285.803410][ T9068] /dev/rnullb0: Can't open blockdev
[  286.077687][ T9074] rust_binder: 9073 RLIMIT_NICE not set
[  286.078083][ T9073] rust_binder: inc_ref_done called when no active inc_refs
[  286.455784][ T9086] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2610'.
[  286.564524][ T9117] rust_binder: Error while translating object.
[  286.564556][ T9117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  286.571018][ T9117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145
[  286.610334][ T9120] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  286.627868][ T9120] rust_binder: Write failure EINVAL in pid:148
[  286.955651][   T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  286.983268][  T456] rust_binder: 8998: removing orphan mapping 0:1048
[  287.016800][  T353] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5
[  287.028194][  T353] usb 4-1: USB disconnect, device number 48
[  287.115703][   T31] usb 6-1: Using ep0 maxpacket: 32
[  287.121999][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.133093][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.142859][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  287.155824][   T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  287.164900][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.173464][   T31] usb 6-1: config 0 descriptor??
[  287.179430][   T31] usbhid 6-1:0.0: can't add hid device: -22
[  287.185636][   T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  287.335686][  T353] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  287.385350][ T9126] can1: slcan on ptm3.
[  287.426977][ T9126] can1 (unregistered): slcan off ptm3.
[  287.476149][   T37] INFO: task syz.5.1643:5874 blocked for more than 122 seconds.
[  287.483992][   T37]       Not tainted 6.12.38-syzkaller-g2b955c7a0f73 #0
[  287.491174][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.496783][  T353] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config
[  287.503112][   T10] usb 6-1: USB disconnect, device number 23
[  287.516576][   T37] task:syz.5.1643      state:D stack:0     pid:5874  tgid:5873  ppid:4014   flags:0x00004004
[  287.522234][  T353] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  287.527126][   T37] Call Trace:
[  287.541313][  T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.544870][   T37]  <TASK>
[  287.552669][   T37]  __schedule+0x1322/0x1df0
[  287.557455][   T37]  ? __sched_text_start+0x10/0x10
[  287.557476][  T353] usb 4-1: Product: syz
[  287.557500][  T353] usb 4-1: Manufacturer: syz
[  287.562598][   T37]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  287.572349][  T353] usb 4-1: SerialNumber: syz
[  287.577428][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  287.586349][  T353] usb 4-1: config 0 descriptor??
[  287.589758][   T37]  schedule+0xc6/0x240
[  287.597080][   T37]  super_lock+0x150/0x300
[  287.601879][   T37]  ? user_get_super+0x350/0x350
[  287.607072][   T37]  ? __cfi_var_wake_function+0x10/0x10
[  287.612836][   T37]  ? __kasan_check_write+0x18/0x20
[  287.618573][   T37]  iterate_supers+0x8a/0x560
[  287.623413][   T37]  ? __cfi_quota_sync_one+0x10/0x10
[  287.628960][   T37]  ? security_quotactl+0x3b/0xf0
[  287.634133][   T37]  __se_sys_quotactl+0x308/0x7d0
[  287.639414][   T37]  ? __x64_sys_quotactl+0xc0/0xc0
[  287.644654][   T37]  ? __kasan_check_write+0x18/0x20
[  287.650160][   T37]  ? fpregs_restore_userregs+0x11d/0x260
[  287.656297][   T37]  __x64_sys_quotactl+0x9f/0xc0
[  287.661209][   T37]  x64_sys_call+0x2818/0x2ee0
[  287.665998][   T37]  do_syscall_64+0x58/0xf0
[  287.670539][   T37]  ? clear_bhb_loop+0x50/0xa0
[  287.675562][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  287.681638][   T37] RIP: 0033:0x7ff6d598ebe9
[  287.686222][   T37] RSP: 002b:00007ff6d6766038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  287.694868][   T37] RAX: ffffffffffffffda RBX: 00007ff6d5bb5fa0 RCX: 00007ff6d598ebe9
[  287.702949][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101
[  287.710969][   T37] RBP: 00007ff6d5a11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.719025][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.727069][   T37] R13: 00007ff6d5bb6038 R14: 00007ff6d5bb5fa0 R15: 00007fff41cc5d08
[  287.735043][   T37]  </TASK>
[  287.738191][   T37] NMI backtrace for cpu 1
[  287.738203][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g2b955c7a0f73 #0 b45819abec46ddf88869a165aa8765f6075b6315
[  287.738232][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  287.738242][   T37] Call Trace:
[  287.738248][   T37]  <TASK>
[  287.738254][   T37]  __dump_stack+0x21/0x30
[  287.738279][   T37]  dump_stack_lvl+0x10c/0x190
[  287.738299][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  287.738321][   T37]  dump_stack+0x19/0x20
[  287.738341][   T37]  nmi_cpu_backtrace+0x2bf/0x2d0
[  287.738360][   T37]  ? rcu_read_unlock_special+0xab/0x480
[  287.738380][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  287.738398][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  287.738416][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  287.738436][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  287.738456][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  287.738474][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  287.738493][   T37]  watchdog+0xd8f/0xed0
[  287.738515][   T37]  ? __cfi_watchdog+0x10/0x10
[  287.738534][   T37]  ? __kasan_check_read+0x15/0x20
[  287.738556][   T37]  ? __kthread_parkme+0x138/0x180
[  287.738574][   T37]  ? schedule+0xc6/0x240
[  287.738615][   T37]  kthread+0x2ca/0x370
[  287.738635][   T37]  ? __cfi_watchdog+0x10/0x10
[  287.738661][   T37]  ? __cfi_kthread+0x10/0x10
[  287.738681][   T37]  ret_from_fork+0x67/0xa0
[  287.738709][   T37]  ? __cfi_kthread+0x10/0x10
[  287.738729][   T37]  ret_from_fork_asm+0x1a/0x30
[  287.738760][   T37]  </TASK>
[  287.738786][   T37] Sending NMI from CPU 1 to CPUs 0:
[  287.895892][    C0] NMI backtrace for cpu 0
[  287.895908][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.38-syzkaller-g2b955c7a0f73 #0 b45819abec46ddf88869a165aa8765f6075b6315
[  287.895933][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  287.895941][    C0] RIP: 0010:pv_native_safe_halt+0x17/0x20
[  287.895967][    C0] Code: cc cc cc b8 17 88 32 a2 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a1 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90
[  287.895978][    C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6
[  287.895992][    C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858bb09e
[  287.896002][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000003e946c
[  287.896011][    C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6
[  287.896021][    C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8
[  287.896031][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cad6a8
[  287.896039][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  287.896050][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.896060][    C0] CR2: 0000000000000000 CR3: 000000011d648000 CR4: 00000000003526b0
[  287.896073][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  287.896080][    C0] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  287.896088][    C0] Call Trace:
[  287.896094][    C0]  <TASK>
[  287.896100][    C0]  default_idle+0x17/0x30
[  287.896114][    C0]  arch_cpu_idle+0xd/0x20
[  287.896126][    C0]  default_idle_call+0x3f/0x80
[  287.896138][    C0]  do_idle+0x1a0/0x470
[  287.896151][    C0]  ? idle_inject_timer_fn+0x80/0x80
[  287.896166][    C0]  cpu_startup_entry+0x48/0x70
[  287.896182][    C0]  rest_init+0x10b/0x130
[  287.896199][    C0]  ? __cfi_x86_late_time_init+0x10/0x10
[  287.896220][    C0]  start_kernel+0x46a/0x4bb
[  287.896235][    C0]  x86_64_start_reservations+0x2e/0x30
[  287.896254][    C0]  x86_64_start_kernel+0x6a/0x7b
[  287.896271][    C0]  common_startup_64+0x13b/0x157
[  287.896292][    C0]  </TASK>
[  287.897646][  T353] usb 4-1: bad CDC descriptors
[  288.107702][  T353] usb 4-1: unsupported MDLM descriptors
[  288.115229][  T353] usb 4-1: USB disconnect, device number 49